chore: update dependencies based on npm audit

StarpTech / apollo-datasource-http

Optimized JSON HTTP Data Source for Apollo Server

MIT License

73 stars 32 forks source link

chore: update dependencies based on npm audit #55

Open wcatron opened 2 years ago

wcatron commented 2 years ago

move undici to peer dependency to allow greater flexibility for consumers to upgrade
upgrade undici to at least version 5 to resolve security vulnerability
update tests for AVA 4

gabrielbahniuk commented 2 years ago

@StarpTech We've just moved from rest to http data source, but we are unable to deploy due to security vulnerabilities and would really appreciate if this PR can be merged. Do you think that's possible? Thank you, and thanks to @wcatron for the PR 🥇

rbschumacher commented 1 year ago

Hey guys, any updates on this matter? I'll problably need to migrate to another library due to this security issue 😞

StarpTech commented 1 year ago

Hi, I'm longer using this module in production. It's more or less unmaintained. I'm open to contributors. Please contact me on Twitter.