toni-moreno / snmpcollector

A full featured Generic SNMP data collector with Web Administration Interface for InfluxDB
MIT License
286 stars 53 forks source link

[Security/Build] Node/NPM Dependencies are Out-of-Date & Build Fails w/o Python2 #531

Open danieldjewell opened 1 year ago

danieldjewell commented 1 year ago

As of today, running a simple npm audit against the current packages.json file reveals 149 vulnerabilities (5 low, 70 moderate, 44 high, 30 critical) ...

Additionally, I receive a build error from node-gyp that it cannot locate python2 (which isn't available, installed, nor supported any longer) ... The dependency tree is something like this (in reverse): node-gyp@3.8.0 > node-sass@4.14.1 > @angular/cli@1.4.4... The old version of Angular is probably causing this issue.

For reference, the current version of @angular/cli is 15.2.1 (released 2023-03-01). (Actually, that goes for all of angular... the current version used here is 4.3.6.)

A quick run of npm outdated reveals a significant delta...