colouring-cities / colouring-core

The Core Platform for the Colouring Cities Research Programme (CCRP)
https://colouringcities.org
GNU General Public License v3.0
48 stars 43 forks source link

Add integration tests for faster/automatic updating of dependencies #746

Open edwardchalstrey1 opened 2 years ago

edwardchalstrey1 commented 2 years ago

If we want to upgrade things like Node/Postgres in future, it would be handy to have tests that we can run to check the app works as expected.

polly64 commented 9 months ago

@matkoniecz should we keep in core?

matkoniecz commented 9 months ago

yes

matkoniecz commented 7 months ago

If we want to upgrade things like Node/Postgres in future, it would be handy to have tests that we can run to check the app works as expected.

this would be also useful for smaller dependencies

install currently complains about several outdated dependencies with serious security issues

These security issues are often overstated - see https://overreacted.io/npm-audit-broken-by-design/ - and many CVE are really overblown and overstated as it is much easier to write misleading description than to find actual critical bug.

But nevertheless npm WARN deprecated chokidar@2.1.8: Chokidar 2 does not receive security updates since 2019. Upgrade to chokidar 3 with 15x fewer dependencies is something that should not appear on install