mmisw / orr-portal

ORR Frontend component
Apache License 2.0
8 stars 5 forks source link

Address lodash.template deprecation warnings #138

Closed carueda closed 4 years ago

carueda commented 5 years ago

Right now, under https://github.com/mmisw/orr-portal/network/alerts :

image

Dependabot suggests:

image

But

... cannot create a pull request as one or more other dependencies require a version that is incompatible with this update.

orr-portal's package.json itself has "lodash": "^4.17.13"

so the complain is about some transitive dependencies, in fact, package-lock.json has for example:

        "gulp-util": {
          "version": "3.0.8",
...
          "requires": {
...

            "lodash._reescape": "^3.0.0",
            "lodash._reevaluate": "^3.0.0",
            "lodash._reinterpolate": "^3.0.0",
            "lodash.template": "^3.0.0",
 ...

In particular, gulp is only used for development (not deployed), so in that sense this is not as critical.