search

algolia / gatsby-plugin-algolia

A plugin to push to Algolia based on graphQl queries
https://yarn.pm/gatsby-plugin-algolia
Apache License 2.0
177 stars 45 forks source link

Ugrade dependencies #119

Closed epbarger closed 3 years ago

epbarger commented 3 years ago

It would be nice to see the dependencies upgraded for this project. Looks like the yarn.lock file hasn't been touched in 3 years? GitHub's dependabot tool shows 28 security issues that could be resolved by updating the packages

Haroenv commented 3 years ago

The only dependencies are Gatsby, algoliasearch and lodash.chunk, so it's natural they don't need to be updated often.

I just received https://github.com/algolia/gatsby-plugin-algolia/pull/120 to fix the yargs "vulnerability" (code isn't used here), but will likely move to making Gatsby a peer dependency and avoiding this issue in the future