expressjs / expressjs/generator

To automate maintenance of dependency versions in `express-cli.js`

Open
#298 3 comments 0 reactions 0 assignees View on GitHub
ideas
Dominant language
JavaScript
Stars
1.9k
Forks
548
PR merge metrics
No merged PRs in 30d

Description

Right now the generation of the `package.json` to scaffold with its corresponding dependencies has hard-coded values of the names of the packages to use and its corresponding version.

This implies a manual maintenance of the version of the packages whenever there is a new release. This can be specially critical to not scaffold to users packages with vulnerabilities (which are already fixed in greater versions).

---

I would like to discuss a solution for this and also, I would be open to participate with my first contribution on this repository if possible :)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.