[CHORE]: Update dependencies in topojson/, stackgl_modules/
Open
Nobody has claimed this yet.
chore
P2
plotly-internal
size: 3
task
- Dominant language
- JavaScript
- Stars
- 18.3k
- Forks
- 2k
- Avg merge
- 2d 12h
- Merged PRs (30d)
- 28
Description
Description
Update dependencies in the topojson/ and stackgl_modules/ folders to address security vulnerabilities.
Why should this change be made?
Security!
Scope
- This will require some finesse for topojson as
mapshaperneeds to be updated - I tried updating and rerunning the build script and the maps changed. Fiji got broken up a bit, so that will need to be looked at.
Notes
- It's worth noting that the stackgl_modules folder might be hoisted back into the main package.json (see #7862), so the update work could be postponed until after that
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the dependency manifests under topojson/ and stackgl_modules/, then check issue #7862 before deciding whether stackgl_modules/ is still updated separately. Run the build script after the dependency changes and inspect the generated maps, especially Fiji. Done means the security updates are applied without breaking the map output.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- build-system, security
- Issue type
- Refactor
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100