Node security advisory against dependency https-proxy-agent

mailgun / mailgun-js-boland

A simple Node.js helper module for Mailgun API.

http://bojand.github.io/mailgun-js

MIT License

894 stars 122 forks source link

Node security advisory against dependency https-proxy-agent #250

Open memelet opened 5 years ago

memelet commented 5 years ago

https://www.npmjs.com/advisories/1184

version:0.22.0

KalleVuorjoki commented 5 years ago

Would need someone (e.g. Mailgun Team) to adopt/fork this project, since according to README.md "This library is no longer maintained.".

qodesmith commented 5 years ago

This saddens my heart.

BrendanBall commented 5 years ago

I'm evaluating mailgun and this is just sad. Their main documentation references this client with the var Mailgun = require('mailgun-js'); which points to this package, however mailgun seems to have no intereset in supporting any SDKs.

ajmas commented 5 years ago

Looks like there is a fork under their organisation: https://github.com/mailgun/mailgun-js , but looks unmaintained. Just opened a ticket to find out what the right NPM package is.

If mailgun proves unresponsive, I am worried I might need to change to a different provider.