amazon-archives / aws-amplify-serverless-plugin

Plugin for the Serverless Framework to output AWS Amplify configuration files.
Apache License 2.0
124 stars 30 forks source link

Has vulnerable/deprecated packages (aws-appsync-codegen replaced by amplify-codegen) #57

Open cnorthwood opened 4 years ago

cnorthwood commented 4 years ago

This package depends on aws-appsync-codegen which is listed as deprecated and replaced by aws-amplify. For some reason that repo has a dated version jest-cli as a runtime (rather than dev) dependency which brings in a bunch of vulnerable dependencies (related to #28). With that package now deprecated, it seems unlikely this will get fixed, so I wonder if this package needs updating to use the new replacement library?