Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update the NPM dependencies #272

Open
ahukkanen opened this issue Apr 6, 2022 · 1 comment
Open

Update the NPM dependencies #272

ahukkanen opened this issue Apr 6, 2022 · 1 comment
Assignees
Labels
dependencies Pull requests that update a dependency file

Comments

@ahukkanen
Copy link
Contributor

ahukkanen commented Apr 6, 2022

When you run a clean npm install at the server app or the JS packages contained in this repo, we get the following deprecation messages:

npm WARN deprecated urix@0.1.0: Please see https://github.com/lydell/urix#deprecated
npm WARN deprecated har-validator@5.1.5: this library is no longer supported
npm WARN deprecated resolve-url@0.2.1: https://github.com/lydell/resolve-url#deprecated
npm WARN deprecated chokidar@2.1.8: Chokidar 2 will break on node v14+. Upgrade to chokidar 3 with 15x less dependencies.
npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142

To replicate this, do the following:

  • Go to the server app cd bulletin_board/server
  • Remove the node_modules folder if it already exists rm -rf node_modules
  • Install the NPM packages npm i

Also, we get NPM audit issues that should be fixed:

25 vulnerabilities (7 moderate, 16 high, 2 critical)

These should be fixed as well.

So, let's update the NPM dependencies in all packages that contain NPM dependencies:

  • bulletin_board/server
  • bulletin_board/js-client
  • voting_schemes/dummy/js-adapter
  • voting_schemes/electionguard/js-adapter
  • verifier
  • voting_schemes/electionguard/verifier

Related to:
#220, #221, #222, #223, #224, #236, #237, #244, #245, #254, #255, #257, #267, #268, #269, #270

@ahukkanen ahukkanen added the dependencies Pull requests that update a dependency file label Apr 6, 2022
@microstudi
Copy link
Contributor

still relevant

@microstudi microstudi self-assigned this Oct 5, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
No open projects
Status: Issues BB
Development

No branches or pull requests

2 participants