googleapis / googleapis/google-cloud-node
outdated http-proxy-agent version
- Dominant language
- TypeScript
- Stars
- 3.2k
- Forks
- 712
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 99
Description
http-proxy-agent is on version 8 now; can that be updated to avoid multiple versions of package for consuming codebases, security issues, etc.?
security example: https://github.com/advisories/GHSA-vpq2-c234-7xj6 (via http-proxy-agent@5.0.0 which pulls in @tootallnate/once@2.0.0)
It looks like this is partially resolved but not completely:
1. "teeny-request@10" now uses version 7 (which is closer to 8 than 5 is): https://github.com/googleapis/google-cloud-node/blob/9fc552ccbec4ea0ba0a99dbf507c35a42451c186/core/packages/teeny-request/package.json#L45
2. "google-cloud/gapic-generator" still uses "teeny-request@9" but if it were updated to use "teeny-request@10" then it too and the generated packages would all be udpated
Contributor guide
Assessment
This issue has not been assessed yet.