googleapis / googleapis/google-cloud-node

outdated http-proxy-agent version

Open
#7,838 2 comments 14 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
3.2k
Forks
712
Avg merge
2d 3h
Merged PRs (30d)
99

Description

http-proxy-agent is on version 8 now; can that be updated to avoid multiple versions of package for consuming codebases, security issues, etc.?

security example: https://github.com/advisories/GHSA-vpq2-c234-7xj6 (via http-proxy-agent@5.0.0 which pulls in @tootallnate/once@2.0.0)

It looks like this is partially resolved but not completely:
1. "teeny-request@10" now uses version 7 (which is closer to 8 than 5 is): https://github.com/googleapis/google-cloud-node/blob/9fc552ccbec4ea0ba0a99dbf507c35a42451c186/core/packages/teeny-request/package.json#L45
2. "google-cloud/gapic-generator" still uses "teeny-request@9" but if it were updated to use "teeny-request@10" then it too and the generated packages would all be udpated

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.