Feature request: Eliminate deprecated dependencies
Maintainers usually reply within 1 day
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 52/100
- Issue type
- Refactor
- Clarity
- Mostly clear
- Activity status
- Active
- Tech stack
- bootstrap, javascript
- Domain
- build-system, tooling
Research direction
Start by tracing the listed packages through CyberChef's dependency tree, separating direct dependencies from those pulled in by grunt, grunt-contrib-watch, grunt-contrib-clean, nightwatch, and bootstrap-colorpicker. Choose one deprecation for a focused pull request, update or remove the responsible dependency, and verify that the corresponding deprecation warning is gone without breaking the project.
Written by the indexing model from the issue text.
Description
This issue is for tracking dependencies raising a deprecation warning.
These packages cause possible maintenance and/or security risks, and should be eliminated from Cyberchef.
Note that in most cases these are sub-dependencies not directly imported by Cyberchef.
PRs to remove these deprecated dependencies would be most welcome. One deprecation fix per PR please (unless a single higher level dependency change results in removal of multiple deprecated packages)
| Package | Deprecated Version | Pulled in by | Deprecation message |
|---|---|---|---|
| osenv | 0.1.5 | grunt | This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful. |
| raw-body | 1.1.7 | grunt-contrib-watch | No longer maintained. Please upgrade to a stable version. |
| rimraf | 2.7.1 | grunt-contrib-clean | Rimraf versions prior to v4 are no longer supported |
| whatwg-encoding | 3.1.1 | nightwatch | Use @exodus/bytes instead for a more spec-conformant and faster implementation |
| glob | 7.1.7, 7.2.3, 8.1.0 | grunt, grunt-contrib-watch, grunt-contrib-clean, nightwatch | Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting [email protected] |
| loglevel-message-prefix | 3.0.0 | (direct) | Use @natlibfi/loglevel-message-prefix instead |
| es6-polyfills | 2.0.0 | loglevel-message-prefix | Use @natlibfi/es6-polyfills instead |
| jsrsasign | 11.1.5 | (direct) | This package is no longer maintained. |
| bootstrap-colorpicker | 3.4.0 | (direct) | Package no longer supported. Contact Support at https://www.npmjs.com/support for more info. |
| popper.js | 1.16.1 | (direct), bootstrap, bootstrap-colorpicker | You can find the new Popper v2 at @popperjs/core, this package is dedicated to the legacy v1 |
| bootstrap | 4.6.2: | (direct), bootstrap-colorpicker | This version of Bootstrap is no longer supported. Please upgrade to the latest version. |
- Dominant language
- JavaScript
- Stars
- 36.4k
- Forks
- 4.2k
- Avg merge
- 1d 22h
- Merged PRs (30d)
- 14
Getting set up
Starts the project's dev container in your browser, under your own GitHub account.
- Ships a Dockerfile or Docker Compose file
- Has a pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from gchq/CyberChef
-
Name of CyberChef_*.zip on GitHub contains commit ID instead of version number since v11.1.0Possibly taken @sylvesterkaczmarek claimed this 62 days ago. Open
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
gchq/CyberChef#2640 · 6 comments · 4 reactions ·
Maintainers usually reply within 1 day
-
bug(AMF Encode): Uncaught TypeError setting getter-only property "value"Possibly taken @skyswordw claimed this 159 days ago. Openbug help wanted
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
Maintainers usually reply within 1 day
-
Collate information on contributing to the project into a single source of truth.Possibly taken A pull request linked to this issue is open or already merged. Openinfra/meta
Difficulty 2/5 Half a day Newbie friendliness 74/100
gchq/CyberChef#2337 · 2 reactions ·
Maintainers usually reply within 1 day
-
Bug report: Text Encoding Brute Force: `inputType` is `"string"` instead of `"byteArray"`Possibly taken @williballenthin claimed this 233 days ago. Openbug
Difficulty 1/5 Under an hour Newbie friendliness 78/100
Maintainers usually reply within 1 day
-
Bug report: Defang URL changes "http" inside hostnames and pathsPossibly taken @rpsirois claimed this 27 days ago. Openbug
Difficulty 2/5 Under an hour Newbie friendliness 15/100
Maintainers usually reply within 1 day
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
Maintainers usually reply within 1 day
-
feature request
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
openlayers/openlayers#17736 · 1 comment ·
Maintainers usually reply within 1 day
-
Difficulty 1/5 Under an hour Newbie friendliness 82/100
521xueweihan/HelloGitHub#4326 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
Mintplex-Labs/anything-llm#7133 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 67/100
Maintainers usually reply within 1 day