Repository navigation
Dependency deprecated #2871
Description
There is some deprecation warning when I install:
npm WARN deprecated graceful-fs@1.2.3: graceful-fs v3.0.0 and before will fail on node releases >= v7.0. Please update to graceful-fs@^4.0.0 as soon as possible. Use 'npm ls graceful-fs' to find it in the tree.
npm WARN deprecated minimatch@2.0.10: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
npm WARN deprecated lodash-node@2.4.1: This package is discontinued. Use lodash@^4.0.0.
npm WARN deprecated minimatch@0.3.0: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
npm WARN deprecated tough-cookie@2.2.2: ReDoS vulnerability parsing Set-Cookie https://nodesecurity.io/advisories/130
It turns out that this package depends on 1520 package-with-versions (there may be different version of same package), making it difficult to track all the dependencies. Dependency chain for the above deprecation:
angular2-template-loader@0.5.0->codecov@1.0.1->execSync@1.0.2->temp@0.5.1->rimraf@2.1.4->graceful-fs@1.2.3ember-cli@2.5.0->broccoli-babel-transpiler@5.6.1->babel-core@5.8.38->minimatch@2.0.10
Activity
FranklinYu commentedon Oct 24, 2016
I'll continue to investigate about these deprecation and update to the description.
filipesilva commentedon Nov 2, 2016
A lot of these are beyond our power to change right now so we're not looking at removing these deprecations.
angular-automatic-lock-bot commentedon Sep 6, 2019
This issue has been automatically locked due to inactivity.
Please file a new issue if you are encountering a similar or related problem.
Read more about our automatic conversation locking policy.
This action has been performed automatically by a bot.