klml
commented
2 weeks ago - https://github.com/it-at-m/dave-selfservice-portal/security/dependabot
- https://github.com/it-at-m/dave-backend/security/dependabot
- https://github.com/it-at-m/dave-frontend/security/dependabot
- https://github.com/it-at-m/dave-admin-portal/security/dependabot
- https://github.com/it-at-m/dave-eai/security/dependabot
DAVe is based on outdated libraries. This is not only a functional issue but also a security concern. If DAVe is looking for broader acceptance and should be used by different cities security is a big topic.
Maybe also check the dependabot PRs.