Skip to content

Latest commit

 

History

History
30 lines (16 loc) · 1.4 KB

dependency-updates.md

File metadata and controls

30 lines (16 loc) · 1.4 KB

Notable Dependency Issues

This document outlines the current issues, vulnerabilities, or items of note, regarding the dependencies for the Specials app. Please review this document before proceeding with any updates to the NPM dependencies.

Remember that the app contains two separate Node projects. The first is an Express project in the root directory. The second is a React project in the client directory. This document addresses each individually.

Express Project Dependencies

Specific Dependency Notes

  • node-fetch:

    • Current Version: 2.x
    • Important Note: The node-fetch dependency is currently at version 2.x and must remain at this version to avoid breaking imports. This is acceptable as the developers are continuing to maintain this version. There is an ongoing investigation into replacing node-fetch with Node's native fetch feature.

Vulnerabilities

  • connect-mongodb-session/archetype/lodash.set:

    • Details: These vulnerabilities are all associated with the archetype package, which is a dependency of the connect-mongodb-session top-level dependency. An open issue has been reported in the connect-mongodb-session repository to resolve this: connect-mongodb-session Issue #113.

React Project Dependencies (client Folder)

Specific Dependency Notes

None.

Vulnerabilities

None.