FredKSchott / snowpack

ESM-powered frontend build tool. Instant, lightweight, unbundled development. ✌️
https://www.snowpack.dev
MIT License
19.48k stars 922 forks source link

🐛 BUG: snowpack seems to use several deprecated dependencies, up to 4 major versions behind current. #3778

Open najamelan opened 3 years ago

najamelan commented 3 years ago

Quick checklist

What package manager are you using?

npm

What operating system are you using?

Linux

Describe the bug

$> npm i snowpack npm WARN deprecated har-validator@5.1.5: this library is no longer supported npm WARN deprecated uuid@3.4.0: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details. npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142

Steps to reproduce

1.npm i snowpack

Link to minimal reproducible example (optional)

No response

joshgoebel commented 2 years ago

Many of these (request/uuid/etc) are transitive deps pulled in by node-gyp which is very slow in releasing bumps even though people have been begging them to.