Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Deprecation and (high) vulnerabilities #98

Open
xLinkOut opened this issue Jan 6, 2021 · 2 comments
Open

Deprecation and (high) vulnerabilities #98

xLinkOut opened this issue Jan 6, 2021 · 2 comments

Comments

@xLinkOut
Copy link

xLinkOut commented Jan 6, 2021

luca Crypto-Touchbar-App (master) > npm install
npm WARN deprecated minimatch@0.2.14: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
npm WARN deprecated mkdirp@0.0.7: Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)
npm WARN deprecated chokidar@0.12.6: Chokidar 2 will break on node v14+. Upgrade to chokidar 3 with 15x less dependencies.
npm WARN deprecated fsevents@0.3.8: "Please update to latest v2.3 or v2.2"
npm WARN deprecated graceful-fs@2.0.3: please upgrade to graceful-fs 4 for compatibility with current and future versions of Node.js

added 115 packages, and audited 116 packages in 17s

1 package is looking for funding
  run `npm fund` for details

17 vulnerabilities (2 low, 7 moderate, 8 high)

To address issues that do not require attention, run:
  npm audit fix
To address all issues possible (including breaking changes), run:
  npm audit fix --force
Some issues need review, and may require choosing
a different dependency.
Run `npm audit` for details.
@chrislennon
Copy link
Owner

Hey @xLinkOut, thanks for letting me know about this. As you may see I haven't updated this project in quite a while. Honestly, I didn't expect many people to be working with the code side of it, and more the web page.

Since this project is way overdue for some minor maintenance, I will look into this some point soon.

@xLinkOut
Copy link
Author

xLinkOut commented Jan 7, 2021

Hi! I understand. Yesterday I was messing around with BetterTouchTool and I found your Crypto-Touchbar (I'm not into crypto but I was attracted by the colors on the touchbar). For curiosity, I came here to read how the Python script that get crypto works. I'm a Python developer and want to help: expect a pull request for the crypto_price.py script. Maybe I can do something for the frontend too.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants