-
Notifications
You must be signed in to change notification settings - Fork 339
Open
Description
Describe the bug
I see a lot of npm warnings for deprecations, etc. when using npx create-bottender-app bot, which makes me a bit concerned about potential security issues, etc that might result from these older versions.
npm WARN deprecated @types/[email protected]: This is a stub types definition. figures provides its own type definitions, so you do not need this installed.
? What platform of bot do you want to create? slack
? Where do you want to store session? redis
❯
❯ Creating a new Bottender bot at /Users/spkane/dev/spkane/bot.
❯
❯ Installing packages... This might take a couple of minutes.
❯
warning bottender > @hapi/[email protected]: Switch to 'npm install joi'
warning bottender > @types/mongodb > @types/[email protected]: This is a stub types definition. bson provides its own type definitions, so you do not need this installed.
warning bottender > @hapi/joi > @hapi/[email protected]: Moved to 'npm install @sideway/address'
warning bottender > @hapi/joi > @hapi/[email protected]: This version has been deprecated and is no longer supported or maintained
warning bottender > @hapi/joi > @hapi/[email protected]: This version has been deprecated and is no longer supported or maintained
warning bottender > @hapi/joi > @hapi/[email protected]: This version has been deprecated and is no longer supported or maintained
warning bottender > @hapi/joi > @hapi/topo > @hapi/[email protected]: This version has been deprecated and is no longer supported or maintained
warning bottender > ngrok > [email protected]: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details.
warning bottender > ngrok > [email protected]: request has been deprecated, see https://github.com/request/request/issues/3142
warning bottender > ngrok > request > [email protected]: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details.
warning bottender > ngrok > [email protected]: request-promise-native has been deprecated because it extends the now deprecated request package, see https://github.com/request/request/issues/3142To Reproduce
Steps to reproduce the behavior:
$ node --version
v17.8.0
$ npx --version
8.5.5
$ npx create-bottender-app --version
1.5.2- One Example
- Run
npx create-bottender-app app - Answer
What platform of bot do you want to create?withslack - Answer
Where do you want to store session?withmemory
- Run
Expected behavior
In general, I would like to see no warnings about deprecated or unsupported libraries. This does not mean hiding them, of course, but keeping things current and secure.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels