Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Replace adbkit dependency #2025

Closed
apriljunge opened this issue Sep 20, 2020 · 2 comments · Fixed by #2039
Closed

Replace adbkit dependency #2025

apriljunge opened this issue Sep 20, 2020 · 2 comments · Fixed by #2039

Comments

@apriljunge
Copy link

Is this a feature request or a bug?

Feature request

What is the current behavior?

Currently adbkit is a dependency of web-ext. This project is not maintained any more. Adbkits dependencies will never get updated.

Currently node-forge, one of adbkits dependencies, has a vulnerability.

To solve this and future problems, adbkit should be replaced.

@rpl
Copy link
Member

rpl commented Sep 21, 2020

It looks that @devicefarmer/adbkit may be replacing the now unmaintained adbkit package, they released a patch release 2.11.2 24 days ago.

The node-forge dependency has not been updated yet, there is a pending pull request at DeviceFarmer/adbkit#28

@dotboris
Copy link

A fix for node-forge has been released (v0.10.0) and @devicefarmer/adbkit has released v2.11.3 with the update: https://github.com/DeviceFarmer/adbkit/blob/v2.11.3/package.json#L40

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants