Skip to content

Dependency deprecated #2871

@FranklinYu

Description

@FranklinYu

There is some deprecation warning when I install:

npm WARN deprecated graceful-fs@1.2.3: graceful-fs v3.0.0 and before will fail on node releases >= v7.0. Please update to graceful-fs@^4.0.0 as soon as possible. Use 'npm ls graceful-fs' to find it in the tree.
npm WARN deprecated minimatch@2.0.10: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
npm WARN deprecated lodash-node@2.4.1: This package is discontinued. Use lodash@^4.0.0.
npm WARN deprecated minimatch@0.3.0: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
npm WARN deprecated tough-cookie@2.2.2: ReDoS vulnerability parsing Set-Cookie https://nodesecurity.io/advisories/130

It turns out that this package depends on 1520 package-with-versions (there may be different version of same package), making it difficult to track all the dependencies. Dependency chain for the above deprecation:

  1. angular2-template-loader@0.5.0 -> codecov@1.0.1 -> execSync@1.0.2 -> temp@0.5.1 -> rimraf@2.1.4 -> graceful-fs@1.2.3
  2. ember-cli@2.5.0 -> broccoli-babel-transpiler@5.6.1 -> babel-core@5.8.38 -> minimatch@2.0.10

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions