search

nightscout / cgm-remote-monitor

nightscout web monitor
GNU Affero General Public License v3.0
2.35k stars 71.33k forks source link

[Security] Node16 is EOL #8207

Open billyjbryant opened 5 months ago

billyjbryant commented 5 months ago

Describe the bug NodeJS 16 is EOL as of September 2023 and is no longer receiving security updates. Efforts should be made to modernize the application to upgrade to NodeJS 20, as NodeJS 18 will be EOL in April 2025 where as NodeJS 20 has support through April 2026

To Reproduce N/A

Expected behavior N/A

Screenshots N/A

Your setup information N/A

Additional context

psonnera commented 5 months ago

IMHO EOL doesn't mean it won't work anymore. There is constant ongoing work to maintain Nightscout and you're welcome to join the developers. Some obsolete components are being dropped to allow moving forward with node.js.

billyjbryant commented 5 months ago

EOL doesn't mean it doesn't work, you are correct. What it does mean is that it is no longer considered secure as there will be no more security updates for EOL versions.

Security when you are dealing with medical devices, even if just for monitoring, is paramount.