openoakland / woeip

A platform for impacted communities to understand their local air quality and advocate for environmental justice.
https://woaq.org
MIT License
29 stars 16 forks source link

Update needed libraries referenced in woeip/web/package.json #383

Open mnorelli opened 2 years ago

mnorelli commented 2 years ago

Description

Issue https://github.com/openoakland/woeip/issues/362#issuecomment-941882933 provides instructions for locally hosting the front-end for developers unable to run docker-compose up -d --build. Accessing woeip/web/package.json with npm install, yields a list of deprecated libraries.

request-promise-native@1.0.9: request-promise-native has been deprecated because it extends the now deprecated request package, see https://github.com/request/request/issues/3142 @hapi/topo@3.1.6: This version has been deprecated and is no longer supported or maintained @hapi/bourne@1.3.2: This version has been deprecated and is no longer supported or maintained urix@0.1.0: Please see https://github.com/lydell/urix#deprecated har-validator@5.1.5: this library is no longer supported resolve-url@0.2.1: https://github.com/lydell/resolve-url#deprecated chokidar@2.1.8: Chokidar 2 will break on node v14+. Upgrade to chokidar 3 with 15x less dependencies. fsevents@1.2.13: fsevents 1 will break on node v14+ and could be using insecure binaries. Upgrade to fsevents 2. babel-eslint@10.1.0: babel-eslint is now @babel/eslint-parser. This package will no longer receive updates. @hapi/address@2.1.4: Moved to 'npm install @sideway/address' rollup-plugin-babel@4.4.0: This package has been deprecated and is no longer maintained. Please use @rollup/plugin-babel. request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142 @hapi/hoek@8.5.1: This version has been deprecated and is no longer supported or maintained @hapi/joi@15.1.1: Switch to 'npm install joi' core-js@2.6.12: core-js@<3 is no longer maintained and not recommended for usage due to the number of issues. Please, upgrade your dependencies to the actual version of core-js@3.

Requested solution

[ ] Update libraries to new version or update dependencies, as per https://docs.npmjs.com/updating-packages-downloaded-from-the-registry [ ] Validate code

Related issues

https://github.com/openoakland/woeip/issues/362#issue-991388588 https://github.com/openoakland/woeip/issues/276#issue-794780681

TangoYankee commented 2 years ago

We can make sure that our direct dependencies are on the latest stable versions. Unfortunately, there are no guarantees that these direct dependencies are also on the latest versions of their dependencies. ...dependencies all the way... down. So, we may always get some deprecation warnings.