search

nightscout / cgm-remote-monitor

nightscout web monitor
GNU Affero General Public License v3.0
2.43k stars 71.82k forks source link

[Security] Node16 is EOL #8207

Open billyjbryant opened 10 months ago

billyjbryant commented 10 months ago

Describe the bug NodeJS 16 is EOL as of September 2023 and is no longer receiving security updates. Efforts should be made to modernize the application to upgrade to NodeJS 20, as NodeJS 18 will be EOL in April 2025 where as NodeJS 20 has support through April 2026

To Reproduce N/A

Expected behavior N/A

Screenshots N/A

Your setup information N/A

Additional context

psonnera commented 10 months ago

IMHO EOL doesn't mean it won't work anymore. There is constant ongoing work to maintain Nightscout and you're welcome to join the developers. Some obsolete components are being dropped to allow moving forward with node.js.

billyjbryant commented 10 months ago

EOL doesn't mean it doesn't work, you are correct. What it does mean is that it is no longer considered secure as there will be no more security updates for EOL versions.

Security when you are dealing with medical devices, even if just for monitoring, is paramount.

ninelore commented 4 months ago

Did someone pick up on migrating yet? If not i will have a look

psonnera commented 4 months ago

If you want to join the dev effort, I don't believe anybody would complain.