Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependencies and fix vulnerabilities #209

Open
starnutoditopo opened this issue Aug 19, 2024 · 1 comment
Open

Update dependencies and fix vulnerabilities #209

starnutoditopo opened this issue Aug 19, 2024 · 1 comment
Labels
dependencies Pull requests that update a dependency file needs-triage For issues raised to be triaged and prioritized

Comments

@starnutoditopo
Copy link

Udeler | Udemy Course Downloader

v1.13.1

Account Type?

Personal

Steps to reproduce

Compiling with

npm install

The following messages are reported:

node ➜ /workspaces/udemy-downloader-gui (master) $ npm install
npm warn deprecated sourcemap-codec@1.4.8: Please use @jridgewell/sourcemap-codec instead
npm warn deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm warn deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported

> udeler@1.13.1 postinstall
> electron-builder install-app-deps

  • electron-builder  version=24.13.3
  • loaded configuration  file=package.json ("build" field)

added 445 packages, and audited 446 packages in 1m

51 packages are looking for funding
  run `npm fund` for details

5 vulnerabilities (2 moderate, 1 high, 2 critical)

To address issues that do not require attention, run:
  npm audit fix

To address all issues (including breaking changes), run:
  npm audit fix --force

Run `npm audit` for details.
node ➜ /workspaces/udemy-downloader-gui (master) $ 

✔️ Expected Behavior

no deprecated dependencies should be used; vulnerabilities should be avoided

🔍 Additional context

Linux virtual machine on docker hosted on Windows

@starnutoditopo starnutoditopo added needs-triage For issues raised to be triaged and prioritized possible-bug needs to be evaluated labels Aug 19, 2024
@heliomarpm
Copy link
Owner

I am aware that to resolve all this you must first update the electron library.
And I do not have time to update and resolve all the impediments.

Feel free to do so and submit a PR.
Thanks

@heliomarpm heliomarpm added dependencies Pull requests that update a dependency file and removed possible-bug needs to be evaluated labels Aug 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file needs-triage For issues raised to be triaged and prioritized
Projects
None yet
Development

No branches or pull requests

2 participants