loopbackio / loopbackio/loopback-connector-mssql
Please consider releasing a updated version with updated dependencies
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 52
- Forks
- 80
- PR merge metrics
- No merged PRs in 30d
Description
## Suggestion
Please consider releasing a updated version with updated dependencies. This package does not appear to have received any release since **5 years** (the current V3.8.0 was released in march 2020), which in my opinion equals **two consecutive eternities** in term of computer science lifetime.
The mssql driver vesion used in current 3.x vesion is not rceiving updates since 2.5 years and is affected by severe vulnerabilities.
I understand the low usage for this package (700 weekly downloads) play a significant role on how much time the development team wants to dedicate to this package, but a unmaintained, 5 years old piece of code is a big no-go in term of reliability about the project. At least, if you do not intend to maintain the code anymore, deprecate the package.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Review the current V3.8.0 package and its mssql driver dependency, then inspect the project's release process and maintenance status. Done would require either a released version with updated dependencies or an explicit decision to deprecate the package.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript, node.js, sql
- Domain
- database, release, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100