react_native/codegen dependency glob is deprecated.

Open Beginner friendly
#51,474 6 comments 5 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
68/100
Issue type
Bug
Clarity
Clearly specified
Activity status
Quiet
Tech stack
react-native

Research direction

Start with packages/react-native-codegen/package.json at the linked dependency entry and compare the requested glob versions with the package's supported requirements. Verify the dependency update through the React Native codegen checks or builds for the affected Linux and macOS platforms; done means glob is no longer on the deprecated version and those builds remain functional.

Written by the indexing model from the issue text.

Description

Resolution: PR Submitted
Description

glob ^7 is deprecated and itself requires a deprecated package of inflight that has a security bulletin out on it.

It should be updated to version 9, at the least, if not all the was to current version 11. See:

https://www.npmjs.com/package/glob?activeTab=versions

Facebook security replied that they didn't consider this a security issue, so posting it publicly.

Steps to reproduce

See: https://github.com/facebook/react-native/blob/4ae86e651cafc025565023170310a534595a5e61/packages/react-native-codegen/package.json#L32

React Native Version

0.79.2

Affected Platforms

Build - Linux, Build - MacOS

Output of npx @react-native-community/cli info
na
Stacktrace or Logs
na
MANDATORY Reproducer

https://github.com/facebook/react-native/blob/4ae86e651cafc025565023170310a534595a5e61/packages/react-native-codegen/package.json#L32

Screenshots and Videos

No response

Dominant language
C++
Stars
127k
Forks
25.3k
PR merge metrics
No merged PRs in 30d

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from react/react-native

All issues in react/react-native

Similar issues

More C++ issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.