Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove dependency on unmaintained Hogan.js library #149

Open
anden-akkio opened this issue Jul 4, 2024 · 0 comments
Open

Remove dependency on unmaintained Hogan.js library #149

anden-akkio opened this issue Jul 4, 2024 · 0 comments

Comments

@anden-akkio
Copy link

anden-akkio commented Jul 4, 2024

This library has a dependency on Hogan.js: https://github.com/twitter/hogan.js

➜  docs git:(<branch>) npm ls hogan.js
<redacted> /Users/andenacitelli/<redacted>/apps/docs
└─┬ [email protected]
  └── [email protected]

However, this dependency is unmaintained. Moving to a maintained variant would be nice in order to ensure dependencies stay current and protective against new security vulnerabilities.

Of additional note is that hogan.js depends on [email protected], which pops up a decprecation warning during dependency installs:

npm warn deprecated [email protected]: Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)

However, depending on an unmaintained library is the core issue here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant