Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: upgrade to work with node.js 11 #11

Merged
merged 3 commits into from
Apr 8, 2019
Merged

chore: upgrade to work with node.js 11 #11

merged 3 commits into from
Apr 8, 2019

Conversation

jamesbooker
Copy link
Contributor

@jamesbooker jamesbooker commented Mar 20, 2019

Resolves #10

Upgrades paper-wallet to use Node11
Upgrades necessary dependencies
Replaces parallelshell with concurrently, due to parallelshell repeatedly being broken with Node upgrades (8->10, 10->11)

Upgraded to work with node11
Replaced parallelshell with concurrently
Upgraded natives to 1.1.6
@ghost
Copy link

ghost commented Mar 20, 2019

Thanks for submitting this pull request! A maintainer will review this in the next few days and explicitly select labels so you know what's going on.

If no reviewer appears after a week, a reminder will be sent out.

@ghost
Copy link

ghost commented Mar 20, 2019

Your pull request doesn't follow our contribution guidelines. Please review and correct it.

@ghost ghost added the Complexity: Undetermined Needs specialized, in-depth review. label Mar 20, 2019
@faustbrian faustbrian changed the title Chore: Upgrade to work with Node11 chore: upgrade to work with node.js 11 Mar 20, 2019
@jamesbooker
Copy link
Contributor Author

jamesbooker commented Mar 20, 2019

If anyone has issues with me replacing parallelshell with concurrently, please feel free to swap it back, I couldn't get it to work and history shows it has issues

Also not sure how to fix the complexity:undetermined label, not sure what doesn't meet the guidelines (other than it wasn't a bug/ or feature/ branch)

@sleepdefic1t
Copy link
Contributor

sleepdefic1t commented Mar 21, 2019

This PR resolves build failures for me in macOS.

I do--however--receive the following errors:

!!!!!!!!!!!
typings-global is obsolete! Remove it!
Use `yarn add --dev @types/node` instead!
!!!!!!!!!!!
added 1165 packages from 521 contributors and audited 15569 packages in 64.258s
found 13 vulnerabilities (7 low, 6 moderate)
  run `npm audit fix` to fix them, or `npm audit` for details

npm audit produces the following:

                                                                                
                       === npm audit security report ===                        
                                                                                
┌──────────────────────────────────────────────────────────────────────────────┐
│                                Manual Review                                 │
│            Some vulnerabilities require your attention to resolve            │
│                                                                              │
│         Visit https://go.npm.me/audit-guide for additional guidance          │
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate      │ Prototype Pollution                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ hoek                                                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in> 4.2.0 < 5.0.0 || >= 5.0.3                                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ gulp-browser                                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ gulp-browser > beautylog > loggly > request > hawk > boom >  │
│               │ hoek                                                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/566                             │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate      │ Prototype Pollution                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ hoek                                                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in> 4.2.0 < 5.0.0 || >= 5.0.3                                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ gulp-browser                                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ gulp-browser > beautylog > loggly > request > hawk >         │
│               │ cryptiles > boom > hoek                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/566                             │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate      │ Prototype Pollution                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ hoek                                                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in> 4.2.0 < 5.0.0 || >= 5.0.3                                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ gulp-browser                                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ gulp-browser > beautylog > loggly > request > hawk > hoek    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/566                             │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate      │ Prototype Pollution                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ hoek                                                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in> 4.2.0 < 5.0.0 || >= 5.0.3                                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ gulp-browser                                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ gulp-browser > beautylog > loggly > request > hawk > sntp >  │
│               │ hoek                                                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/566                             │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate      │ Prototype Pollution                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ lodash                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in>=4.17.11                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ gulp-browser                                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ gulp-browser > beautylog > cli-table2 > lodash               │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/782                             │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Low           │ Prototype Pollution                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ lodash                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in>=4.17.5                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ gulp-browser                                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ gulp-browser > beautylog > cli-table2 > lodash               │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/577                             │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate      │ Memory Exposure                                              │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ tunnel-agent                                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in>=0.6.0                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ gulp-browser                                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ gulp-browser > beautylog > loggly > request > tunnel-agent   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/598                             │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Low           │ Incorrect Handling of Non-Boolean Comparisons During         │
│               │ Minification                                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ uglify-js                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in>= 2.4.24                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ gulp-jade                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ gulp-jade > jade > transformers > uglify-js                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/39                              │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Low           │ Regular Expression Denial of Service                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ uglify-js                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in>=2.6.0                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ gulp-jade                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ gulp-jade > jade > transformers > uglify-js                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/48                              │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Low           │ Regular Expression Denial of Service                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ braces                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in>=2.3.1                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ babel-cli                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ babel-cli > chokidar > anymatch > micromatch > braces        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/786                             │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Low           │ Regular Expression Denial of Service                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ braces                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in>=2.3.1                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ gulp-watch                                                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ gulp-watch > anymatch > micromatch > braces                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/786                             │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Low           │ Regular Expression Denial of Service                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ timespan                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ No patch available                                           │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ gulp-browser                                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ gulp-browser > beautylog > loggly > timespan                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/533                             │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Low           │ Regular Expression Denial of Service                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ clean-css                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in>=4.1.11                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ gulp-jade                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ gulp-jade > jade > clean-css                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/785                             │
└───────────────┴──────────────────────────────────────────────────────────────┘
found 13 vulnerabilities (7 low, 6 moderate) in 15569 scanned packages
  13 vulnerabilities require manual review. See the full report for details.

npm audit fix and npm audit fix --force do not resolve these vulnerability warnings.

I don't have experience with the above to suggest what the issue or potential solution is or whether it is related to my system or not; but this does not prevent me from subsequently building and using Paper-Wallet on macOS.

@jamesbooker
Copy link
Contributor Author

I think there’s a larger job to do with a lot of refactoring to get the paper wallet up to scratch, it’s using Bower for package management instead of yarn and a lot of the packages are out of date.

I did try to replace Bower with yarn but that added a LOT of other problems to the repo, so I think it needs a major refactor to get that far, my intention was to get the paper wallet building again for this PR

@sleepdefic1t
Copy link
Contributor

That makes sense, and I agree.
It sounds like a refactor may be called for.

Docs also use Yarn, so that probably would be the logical alternative 👍

At the least, I’d say this PR still brings attention to its need for an update and provides a work around for node v.11.

Thank you, @jamesbooker !

@jamesbooker
Copy link
Contributor Author

Thanks @sleepdefic1t for testing build on macOS

@faustbrian faustbrian added the Bounty: Tier 3 Awarded for medium features, refactorings, improvements. This is valued at 50 USD. label Apr 8, 2019
@faustbrian faustbrian merged commit 94638b0 into ArkEcosystem:master Apr 8, 2019
@ghost
Copy link

ghost commented Apr 8, 2019

Your pull request has been merged and marked as tier 3. It will earn you $25 USD.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Bounty: Tier 3 Awarded for medium features, refactorings, improvements. This is valued at 50 USD. Complexity: Undetermined Needs specialized, in-depth review.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants