search

foliojs / fontkit

An advanced font engine for Node and the browser
1.45k stars 213 forks source link

babel-runtime ^6.26.0 is outdated #273

Closed zdm closed 2 years ago

zdm commented 2 years ago

Hi, babel-runtime@"^6.26.0" is outfated and contains vulnerable deps. Seems, that this module is not maintained anymore, last update was 2 years ago. Could you please use pure pabel core module?

zdm commented 2 years ago

Or use more modern version ^7.

zdm commented 2 years ago

Please, update this dependency, it breaks build with webpack. This is a problem.

zdm commented 2 years ago

And needt to move babel deps to the devDependencies, because they are not used in production.

zdm commented 2 years ago

Are you alive?

liborm85 commented 2 years ago

You can use fork https://github.com/foliojs-fork/fontkit with updated dependencies and other improvements.

zdm commented 2 years ago

Impossible, becauase fontkit is used by pdfkit, that is used by third-party dependency of my project.

On 29.04.2022 11:29, Libor M. wrote:

You can use fork https://github.com/foliojs-fork/fontkit https://github.com/foliojs-fork/fontkit with updated dependencies and other improvements.

— Reply to this email directly, view it on GitHub https://github.com/foliojs/fontkit/issues/273#issuecomment-1113022809, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAH2MSGIXTMK36ZMNVMHXDDVHOMXTANCNFSM5UDBWHZA. You are receiving this because you authored the thread.Message ID: @.***>

liborm85 commented 2 years ago

For pdfkit exists fork https://github.com/foliojs-fork/pdfkit too. But usage with other third-party dependency is problematic.

zdm commented 2 years ago

Thank you, but I am not sure, that they will want to move to the fork. It is unclear why this fork is exists, no description of differences. Better is to keep this project up to date.

liborm85 commented 2 years ago

This project is dead.