Skip to content

Replace deprecated libraries #2

@gilbertfl

Description

@gilbertfl

Many of the js libraries used by flightplan are deprecated, and a few are set to a version with vulnerabilities.

npm WARN deprecated har-validator@5.1.5: this library is no longer supported
npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142
# npm audit report

csv-parse  <4.4.6
Severity: high
Regular Expression Denial of Service - https://npmjs.com/advisories/1171
No fix available
node_modules/csv-parse
  flightplan-tool  >=0.2.0
  Depends on vulnerable versions of csv-parse
  node_modules/flightplan-tool

lodash  <=4.17.20
Severity: high
Prototype Pollution - https://npmjs.com/advisories/1523
Command Injection - https://npmjs.com/advisories/1673
fix available via `npm audit fix`
node_modules/external-ip/node_modules/lodash

y18n  <3.2.2||=4.0.0||>=5.0.0 <5.0.5
Severity: high
Prototype Pollution - https://npmjs.com/advisories/1654
fix available via `npm audit fix`
node_modules/external-ip/node_modules/y18n

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions