Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Transversal dependency to Inflight 1.0.6 #407

Open
dacloutier-logmein opened this issue Aug 23, 2024 · 1 comment
Open

Transversal dependency to Inflight 1.0.6 #407

dacloutier-logmein opened this issue Aug 23, 2024 · 1 comment

Comments

@dacloutier-logmein
Copy link

dacloutier-logmein commented Aug 23, 2024

source:
https://www.npmjs.com/package/inflight

This package has been deprecated

Author message:

This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.

here is a transitive dependency to inflight, via glob 7.2.3

npm-groovy-lint 14.6.0
├─┬ glob 7.2.3
│ ├─┬ inflight 1.0.6

It is flagged by sonatype for potential security issues:

https://github.com/user-attachments/assets/4a23f507-1c1f-489c-934b-392858c27c11

Dunno if this can be avoided.

@nvuillam
Copy link
Owner

@dacloutier-logmein I'm currently preparing a new version of npm-groovy-lint with many upgraded dependencies, it's hard to find the time but it's in my backlog, you can count for sure that it will be taken care of with an upgrade of glob library :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants