Lodash dependency is out of date

joepie91 / node-bhttp

A sane HTTP client library for Node.js with Streams2 support.

62 stars 12 forks source link

Lodash dependency is out of date #21

Open ChALkeR opened 8 years ago

ChALkeR commented 8 years ago

This produces an npm WARN deprecated lodash@2.4.2: lodash@<3.0.0 is no longer maintained. Upgrade to lodash@^4.0.0 warning on npm install.

joepie91 commented 8 years ago

I'll be completely removing the Lodash dependency in the next release, in fact. I have a few more things to look at before getting around to it, though.

rtvenge commented 6 years ago

This is also leading to a Prototype Pollution security issue.

TomMettam commented 5 years ago

Any update on this?

ariellyciandt commented 5 years ago

Any update on this?