search

yagop / node-telegram-bot-api

Telegram Bot API for NodeJS
MIT License
8.34k stars 1.52k forks source link

Deprecated dependencies: @cypress/request-promise #1167

Open Cm-8 opened 8 months ago

Cm-8 commented 8 months ago

This node.js module has 9 dependencies. (visible here: https://www.npmjs.com/package/node-telegram-bot-api?activeTab=dependencies).

One of these, the @cypress/request-promise is reported as Deprecated (https://github.com/cypress-io/request-promise).

Although it is an excellent package and has a strong diffusion, from a security perspective it is no longer as good.

Are there any adjustments planned or some workaround?

Thank you

danielperez9430 commented 7 months ago

The package request-promise from Cypress was not marked as deprecated, the readme is part of the fork of the original package but still have support from the Cypress team and not marked as deprecated at the npm level. Also they use this package internal in their product.

DemonMartin commented 5 months ago

There seem to be some more deprecated modules now if installing the latest version of node-telegram-bot-api from NPM.

Might consider maybe changing or updating the modules:

npm WARN deprecated har-validator@5.1.5: this library is no longer supported
npm WARN deprecated uuid@3.4.0: Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.     
npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142

(to reproduce simply run npm install node-telegram-bot-api)

ILLVMN8 commented 3 months ago

Are there any adjustments planned or some workaround?

Bump

BoryaGames commented 3 months ago

Bump