#1696Old dependencies on build machines

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Issue Details

4 months ago

szh

ACK_OBTAINEDdependencies

View on GitHub

sergiomarotco

opened 4 months ago

Author

In PR validation builds task logs named “install dependencies” we can see:

npm warn deprecated trim@0.0.1: Use String.prototype.trim() instead
npm warn deprecated rimraf@2.6.3: Rimraf versions prior to v4 are no longer supported
npm warn deprecated try-resolve@1.0.1: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
npm warn deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm warn deprecated glob@7.1.7: Glob versions prior to v9 are no longer supported
npm warn deprecated textlint-filter-rule-whitelist@2.0.0: Use textlint-filter-rule-allowlist instead of it: https://github.com/textlint/textlint-filter-rule-allowlist/pull/9
added 331 packages, and audited 332 packages in 11s
106 packages are looking for funding
  run `npm fund` for details
11 vulnerabilities (6 moderate, 5 high)

CheatSheetSeries

OWASP