Deprecated Warnings
senften opened this issue · 2 comments
Working from a new create-react app, I add copy-files-from-to and received the following warnings
$ npm install copy-files-from-to --save-dev
npm WARN config global--global,--localare deprecated. Use--location=globalinstead.
npm WARN deprecated har-validator@5.1.5: this library is no longer supported
npm WARN deprecated uuid@3.4.0: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details.
npm WARN deprecated request@2.88.2: request has been deprecated, see request/request#3142added 52 packages, and audited 1480 packages in 3s
I was wondering if there was plans to resolve these. The har-validator is the one that really caught my eye
@senften
Thank you for bringing it to notice.
Practically, for almost any general use-case, these warnings shouldn't matter because as per our guestimates, people are using it only for dev/build purposes and not using it with insecure input.
But, anyways, to keep it simple for the developers to adopt this library, appropriate changes/updates should be made to reduce/remove such warnings.
For fixing the issue:
- PRs are welcome
- Otherwise, when we are able to spend a bit more time on it, we shall update all possible dependencies (hopefully in coming months)
Keeping this issue in Open state for future revisit.