search

carrot / roots-browserify

Roots v3 extension that uses browserify as a javascript pipeline
Other
21 stars 8 forks source link

Update insecure dependencies #33

Closed J-Sek closed 2 months ago

J-Sek commented 7 years ago

I use npms.io a lot and noticed some warnings:

image

These related to "insecure" include simple updates in package.json here and in roots-utils as displayed on nodesecurity.io

Definitely low priority and maybe it make more sense to handle all projects in Roots ecosystem...

jescalan commented 7 years ago

Yeah, so I'm not sure if you realized this so far, but roots is not actively maintained (there's a note about this in the readme). It has been succeeded by spike, which is built by the same team, but is superior to roots in just about every way. Spike is also very actively maintained and developed. You might want to consider changing over!

If not, and you are still interested in roots, the responsibility to keep thing up to date is going to fall into the hands of contributors like yourself. Otherwise, we would warmly welcome you to the spike community! 👬

J-Sek commented 7 years ago

I must have missed that. Thanks :)

I've just started new project, so there should be no problem with migration.