Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove sublevel #15

Merged
merged 2 commits into from
Aug 5, 2020
Merged

Remove sublevel #15

merged 2 commits into from
Aug 5, 2020

Conversation

christianbundy
Copy link
Contributor

Problem: This dependency is unmaintained and not really necessary. It
allows us to embed multiple Level database instances in one, but we
don't actually need that for any reason. This module is the source of an
npm audit warning, and also may be the source of a new bug that's been
happening in Oasis.

Solution: Don't do that, and let level have its own database. The only
problem is that any pending invites will be ignored because this
commit doesn't include a migration script. This is fine for users to
upgrade to, but pubs that still have lots of pending invites (?) may
want to wait until their invites are redeemed (or write a migration
script).

Fixes: #13


Depends on #14, although I could backport this change to the current master if necessary.

Problem: Our npm dependencies are outdated and I'd like to have Level 6.

Solution: Upgrade all of the packages and run `npm update`.
Problem: This dependency is unmaintained and not really necessary. It
allows us to embed multiple Level database instances in one, but we
don't actually need that for any reason. This module is the source of an
`npm audit` warning, and also may be the source of a new bug that's been
happening in Oasis.

Solution: Don't do that, and let level have its own database. The only
problem is that **any pending invites will be ignored** because this
commit doesn't include a migration script. This is fine for users to
upgrade to, but pubs that still have lots of pending invites (?) may
want to wait until their invites are redeemed (or write a migration
script).

Fixes: #13
@staltz
Copy link
Member

staltz commented Apr 20, 2020

I would merge this, but curious to hear from someone who maintains/runs a pub. I don't.

By the way, I made this package for the client-only part of ssb-invite: https://github.com/staltz/ssb-invite-client (useful for apps that don't generate these invite codes)

@christianbundy
Copy link
Contributor Author

I would merge this, but curious to hear from someone who maintains/runs a pub. I don't.

I maintain two pubs, fwiw. Is there someone you'd like to ping?

@arj03
Copy link
Member

arj03 commented May 26, 2020

@christianbundy nice1. I'll try testing this tonight and report back.

@arj03
Copy link
Member

arj03 commented May 26, 2020

I have now test this 👍. Lets get this merged and release @christianbundy

@mixmix mixmix merged commit eb57b7b into master Aug 5, 2020
@mixmix mixmix deleted the remove-sublevel branch August 5, 2020 22:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

bl package is vulnerable
4 participants