Review system/template/base/package.json dependencies

chris-bateman commented 7 months ago

Review package.json dependencies here - https://github.com/2pisoftware/cmfive-core/blob/develop/system/templates/base/package.json

Mark if they are required. Remove them if they are not required. Update them if required. If in a deprecated status review and replace with suitable functionality.

Supported = Update released in last 12 months

Required - dependencies

[x] "@codemirror/lang-html": "^6.4.5", Patch update and supported
[x] "@popperjs/core": "^2.11.8", Up to date and supported
[x] "bootstrap": "^5.2.3", Up to date and supported
[x] "bootstrap-icons": "^1.10.5", Minor update and supported
[ ] "browser-process": "0.0.1", Abandoned 9 years since last update NPM Registry
[x] "codemirror": "^6.0.1", Updated 2 years ago. Example codebase? Review readme here
[ ] "jquery": "^3.7.1", - Up to date and supported
[x] "quill": "^1.3.6", Updated 4 years ago. v2 appears to be in beta Github releases
[x] "tom-select": "^2.2.2", Minor update and supported
[x] "typescript": "^4.9.5", Major update and supported
[x] "vue": "^2.7.14", Major update and supported WIP migration

Required - devDependencies

[x] "@types/bootstrap": "^5.2.6", Patch update and supported
[ ] "@types/jquery": "^3.5.18", Patch update and supported
[ ] "autoprefixer": "^10.4.15", Patch update and supported
[ ] "babel-core": "^6.26.3", DEPRECATED NPM Registry
[ ] "babel-loader": "^8.3.0", Major update and supported
[ ] "babel-preset-es2015": "^6.24.1", DEPRECATED NPM Registry
[x] "css-loader": "^5.2.6", Major update and supported
[x] "laravel-mix": "^6.0.49", Last update 2 years ago NPM Registry
[x] "laravel-mix-glob": "^2.0.1", Patch update and supported
[x] "postcss-loader": "^4.3.0", Major update and supported
[x] "resolve-url-loader": "^3.1.5", Last update 2 years ago NPM Registry
[x] "sass": "^1.66.1", Minor update and supported
[x] "sass-loader": "^10.4.1", Major update and supported
[x] "style-loader": "^2.0.0", Major update and supported
[x] "ts-loader": "^9.4.2", Minor update and supported
[ ] "vue-class-component": "^7.2.6", DEPRECATED Review Github
[ ] "vue-loader": "^15.10.2", Major update and supported
[ ] "vue-property-decorator": "^9.1.2", DEPRECRATED Review Github
[ ] "vue-template-compiler": "^2.7.14", Patch update and supported
[x] "webpack": "^5.88.2", Minor update and supported
[x] "webpack-cli": "^4.10.0" Major update and supported

Resolving the above may close security issues raised here - https://github.com/2pisoftware/cmfive-core/security/dependabot

chris-bateman commented 7 months ago

@2pisoftware/developers Please review the above. I have noted that the Vue v2 to v3 update is a WIP and that may resolve some of the above.

chris-bateman commented 2 weeks ago

Quill no longer in Beta :)

https://slab.com/blog/announcing-quill-2-0/

chris-bateman commented 2 weeks ago

Laravel-Mix - https://github.com/laravel-mix/laravel-mix/issues/3383

2pisoftware / cmfive-core

Review system/template/base/package.json dependencies #253