feathersjs / feathers

The API and real-time application framework
https://feathersjs.com
MIT License
14.97k stars 742 forks source link

Vulnerabilities and memory leaks module in V5 #3506

Open t1gu1 opened 3 days ago

t1gu1 commented 3 days ago

Steps to reproduce

I simply use the create command. (Installing the 5.0.27 version)

Options choose in the creation:

Expected behavior

Not seeing the there is 2 high severity vulnerabilities and seeing that there is some deprecated package that can cause memory leaks.

I just create new project with the create command and it gives a bad feeling seeing that.

Actual behavior

Warning:

npm warn deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful. npm warn deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported npm warn deprecated glob@8.1.0: Glob versions prior to v9 are no longer supported

image

System configuration / Operating System