Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

npm warning and alerts #1941

Closed
baderdean opened this issue Dec 13, 2024 · 3 comments · Fixed by #1963
Closed

npm warning and alerts #1941

baderdean opened this issue Dec 13, 2024 · 3 comments · Fixed by #1963
Assignees
Labels

Comments

@baderdean
Copy link
Member

npm warn EBADENGINE Unsupported engine {
npm warn EBADENGINE   package: '[email protected]',
npm warn EBADENGINE   required: { node: '~0.6.10' },
npm warn EBADENGINE   current: { node: 'v23.1.0', npm: '10.9.0' }
npm warn EBADENGINE }
npm warn deprecated [email protected]: Rimraf versions prior to v4 are no longer supported
npm warn deprecated [email protected]: This project is unmaintained
npm warn deprecated [email protected]: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm warn deprecated [email protected]: Glob versions prior to v9 are no longer supported
npm warn deprecated [email protected]: Please upgrade to v9.0.0+ as we have fixed a public vulnerability with formidable dependency. Note that v9.0.0+ requires Node.js v14.18.0+. See https://github.com/ladjs/superagent/pull/1800 for insight. This project is supported and maintained by the team at Forward Email @ https://forwardemail.net
npm warn deprecated @types/[email protected]: This is a stub types definition. axios provides its own type definitions, so you do not need this installed.
npm warn deprecated @humanwhocodes/[email protected]: Use @eslint/config-array instead
npm warn deprecated @humanwhocodes/[email protected]: Use @eslint/object-schema instead
npm warn deprecated [email protected]: Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.
npm warn deprecated [email protected]: This version is no longer supported. Please see https://eslint.org/version-support for other options.

added 1013 packages, and audited 1014 packages in 47s

155 packages are looking for funding
  run `npm fund` for details

7 vulnerabilities (1 low, 2 moderate, 4 high)

@baderdean
Copy link
Member Author

npm warn deprecated [email protected]: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm warn deprecated [email protected]: Rimraf versions prior to v4 are no longer supported
npm warn deprecated [email protected]: Glob versions prior to v9 are no longer supported
npm warn deprecated [email protected]: This package is no longer supported.
npm warn deprecated [email protected]: This package is no longer supported.
npm warn deprecated [email protected]: This package is no longer supported.

@baderdean
Copy link
Member Author

(node:290138) [DEP0040] DeprecationWarning: The punycodemodule is deprecated. Please use a userland alternative instead.

@maleksal maleksal self-assigned this Jan 3, 2025
@maleksal
Copy link
Collaborator

maleksal commented Jan 6, 2025

Security Issues Fixed

utf7 Vulnerability

  • @ankaboot.io/imap-autoconfig/imap uses [email protected], which depends on the vulnerable [email protected].
  • Since utf7 is unmaintained and has no updates, it was patched to use a higher version of semver directly in package.json.

Hot Fixes Or Wait Next Release

Deprecated [email protected]

  • stripe-cli depends on [email protected], a deprecated version with known issues.
  • Since stripe-cli package is not maintained, uuid version was patched in package.json .

Deprecated Packages That Will Not Be Upgraded

[email protected] Dependency Constraints

DeprecationWarning: The punycode module is deprecated.

Node.js deprecated punycode in version 21 but hasn’t removed it from the built-in code yet. More info: nodejs/node#54938

@maleksal maleksal linked a pull request Jan 6, 2025 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants