project uses deprecated karma package

data-platform-hq / mlflow-oidc-auth

MLFlow Tracking Server OIDC Auth plugin

https://pypi.org/project/mlflow-oidc-auth/

Apache License 2.0

25 stars 9 forks source link

project uses deprecated karma package #40

Open celeriev opened 1 month ago

celeriev commented 1 month ago

Hello,

Thanks a lot for sharing this plugin. I see the web-ui is relying on the karma-runner package which is deprecated and presents some dependabot issues. Is there a plan to move away from karma dependency?

Thanks

kharkevich commented 1 month ago

Hello @celeriev,

We plan to migrate from karma-runner to another test runner, but this is not a high priority for us at the moment. The UI part is bundled into a .whl package as an SPA application, and we believe that karma-runner has no security impact on the released package.

However, contributions are always welcome! If you'd like to help us address this issue, please feel free to open a PR.

celeriev commented 1 month ago

understood, thanks @kharkevich