Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NPM warnings #1500

Closed
ryanblock opened this issue Jan 24, 2025 · 0 comments · Fixed by architect/functions#565 · May be fixed by architect/sandbox#736
Closed

NPM warnings #1500

ryanblock opened this issue Jan 24, 2025 · 0 comments · Fixed by architect/functions#565 · May be fixed by architect/sandbox#736

Comments

@ryanblock
Copy link
Member

Looks like it's time to take care of some dependency related chores! Installations currently output the following:

npm warn deprecated [email protected]: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm warn deprecated [email protected]: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
npm warn deprecated [email protected]: This package is deprecated. Use the optional chaining (?.) operator instead.
npm warn deprecated [email protected]: Rimraf versions prior to v4 are no longer supported
npm warn deprecated @humanwhocodes/[email protected]: Use @eslint/config-array instead
npm warn deprecated [email protected]: Rimraf versions prior to v4 are no longer supported
npm warn deprecated [email protected]: Superseded by abstract-level (https://github.com/Level/community#faq)
npm warn deprecated @humanwhocodes/[email protected]: Use @eslint/object-schema instead
npm warn deprecated [email protected]: Glob versions prior to v9 are no longer supported
npm warn deprecated [email protected]: Glob versions prior to v9 are no longer supported
npm warn deprecated [email protected]: Superseded by abstract-level (https://github.com/Level/community#faq)
npm warn deprecated [email protected]: Superseded by memory-level (https://github.com/Level/community#faq)
npm warn deprecated [email protected]: Superseded by abstract-level (https://github.com/Level/community#faq)
npm warn deprecated [email protected]: Superseded by abstract-level (https://github.com/Level/community#faq)
npm warn deprecated [email protected]: Superseded by abstract-level (https://github.com/Level/community#faq)
npm warn deprecated [email protected]: Superseded by level-transcoder (https://github.com/Level/community#faq)
npm warn deprecated [email protected]: Superseded by abstract-level (https://github.com/Level/community#faq)
npm warn deprecated [email protected]: Superseded by abstract-level (https://github.com/Level/community#faq)
npm warn deprecated [email protected]: Superseded by abstract-level (https://github.com/Level/community#faq)
npm warn deprecated [email protected]: Superseded by classic-level (https://github.com/Level/community#faq)
npm warn deprecated [email protected]: This version is no longer supported. Please see https://eslint.org/version-support for other options.

added 476 packages, and audited 477 packages in 27s

132 packages are looking for funding
  run `npm fund` for details

5 vulnerabilities (2 low, 2 moderate, 1 high)

To address issues that do not require attention, run:
  npm audit fix

To address all issues (including breaking changes), run:
  npm audit fix --force

Run `npm audit` for details.
$ npm audit
# npm audit report

path-to-regexp  <=0.1.11
Severity: high
path-to-regexp outputs backtracking regular expressions - https://github.com/advisories/GHSA-9wv6-86v2-598j
Unpatched `path-to-regexp` ReDoS in 0.1.x - https://github.com/advisories/GHSA-rhx6-c78j-4q9w
fix available via `npm audit fix`
node_modules/path-to-regexp
  router  1.0.0-beta.1 - 2.0.0-beta.2
  Depends on vulnerable versions of path-to-regexp
  node_modules/router

send  <0.19.0
send vulnerable to template injection that can lead to XSS - https://github.com/advisories/GHSA-m6fv-jmcg-4jfg
fix available via `npm audit fix --force`
Will install @architect/[email protected], which is a breaking change
node_modules/send
  @architect/sandbox  *
  Depends on vulnerable versions of router
  Depends on vulnerable versions of send
  node_modules/@architect/sandbox
    @architect/architect  >=5.9.5
    Depends on vulnerable versions of @architect/sandbox
    node_modules/@architect/architect

5 vulnerabilities (2 low, 2 moderate, 1 high)

To address issues that do not require attention, run:
  npm audit fix

To address all issues (including breaking changes), run:
  npm audit fix --force
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging a pull request may close this issue.

1 participant