Skip to content

Dependency deprecated #2871

Closed
Closed
@FranklinYu

Description

@FranklinYu

There is some deprecation warning when I install:

npm WARN deprecated graceful-fs@1.2.3: graceful-fs v3.0.0 and before will fail on node releases >= v7.0. Please update to graceful-fs@^4.0.0 as soon as possible. Use 'npm ls graceful-fs' to find it in the tree.
npm WARN deprecated minimatch@2.0.10: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
npm WARN deprecated lodash-node@2.4.1: This package is discontinued. Use lodash@^4.0.0.
npm WARN deprecated minimatch@0.3.0: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
npm WARN deprecated tough-cookie@2.2.2: ReDoS vulnerability parsing Set-Cookie https://nodesecurity.io/advisories/130

It turns out that this package depends on 1520 package-with-versions (there may be different version of same package), making it difficult to track all the dependencies. Dependency chain for the above deprecation:

  1. angular2-template-loader@0.5.0 -> codecov@1.0.1 -> execSync@1.0.2 -> temp@0.5.1 -> rimraf@2.1.4 -> graceful-fs@1.2.3
  2. ember-cli@2.5.0 -> broccoli-babel-transpiler@5.6.1 -> babel-core@5.8.38 -> minimatch@2.0.10

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions