Deprecated dependencies with vulnerabilities

[sandeepsengupta]

Before submitting a new issue

• I tested using the latest version of the library, as the bug might be already fixed.
• I tested using a supported version of react native.
• I checked for possible duplicate issues, with possible answers.

Bug summary

This library has the following deprecated dependencies detected by npm:

npm warn deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.

npm warn deprecated glob@7.2.3: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me

npm warn deprecated uuid@7.0.3: uuid@10 and below is no longer supported. For ESM codebases, update to uuid@latest. For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028).

└─┬ react-native-legal@1.6.3
  ├─┬ @callstack/licenses@0.3.2
  │ └── glob@7.2.3 deduped
  ├─┬ glob@7.2.3
  │ └── inflight@1.0.6
  └─┬ xcode@3.0.1
    └── uuid@7.0.3

Thanks for looking into this!

Library version

1.6.3

Environment info

System:
  OS: macOS 26.5
  CPU: (16) x64 Intel(R) Core(TM) i9-9880H CPU @ 2.30GHz
  Memory: 916.53 MB / 16.00 GB
  Shell:
    version: "5.9"
    path: /bin/zsh
Binaries:
  Node:
    version: 26.0.0
    path: /usr/local/bin/node
  Yarn:
    version: 1.22.22
    path: /usr/local/bin/yarn
  npm:
    version: 11.16.0
    path: /usr/local/bin/npm
  Watchman:
    version: 2026.05.25.00
    path: /usr/local/bin/watchman
Managers:
  CocoaPods:
    version: 1.16.2
    path: /usr/local/bin/pod
SDKs:
  iOS SDK:
    Platforms:
      - DriverKit 25.5
      - iOS 26.5
      - macOS 26.5
      - tvOS 26.5
      - visionOS 26.5
      - watchOS 26.5
  Android SDK:
    API Levels:
      - "31"
      - "35"
      - "36"
    Build Tools:
      - 35.0.0
      - 36.0.0
      - 36.1.0
    System Images:
      - android-24 | Google APIs Intel x86 Atom
      - android-26 | Google APIs Intel x86 Atom
      - android-27 | Google Play Intel x86 Atom
      - android-28 | Google APIs Intel x86 Atom
      - android-28 | Google Play Intel x86 Atom
      - android-29 | Google APIs Intel x86 Atom
      - android-30 | Google APIs Intel x86 Atom
      - android-33 | Google Play Intel x86_64 Atom
      - android-34 | Google APIs Intel x86_64 Atom
      - android-35 | Google APIs Intel x86_64 Atom
      - android-36.1 | Google Play Intel x86_64 Atom
      - android-36 | Google APIs Intel x86_64 Atom
    Android NDK: Not Found
IDEs:
  Android Studio: 2026.1 AI-261.23567.138.2611.15503007
  Xcode:
    version: 26.5/17F42
    path: /usr/bin/xcodebuild
Languages:
  Java:
    version: 17.0.19
    path: /usr/bin/javac
  Ruby:
    version: 4.0.5
    path: /usr/local/opt/ruby/bin/ruby
npmPackages:
  "@react-native-community/cli":
    installed: 20.1.0
    wanted: 20.1.0
  react:
    installed: 19.2.3
    wanted: 19.2.3
  react-native:
    installed: 0.85.3
    wanted: 0.85.3
  react-native-macos: Not Found
npmGlobalPackages:
  "*react-native*": Not Found
Android:
  hermesEnabled: true
  newArchEnabled: true
iOS:
  hermesEnabled: Not found
  newArchEnabled: false

Steps to reproduce

1. Create a new React Native project: npx @react-native-community/cli@latest init LegalSecurityTest
2. Enter the project directory: cd LegalSecurityTest
3. Open package.json and remove the following devDependencies (this prevents unrelated deprecation warnings from appearing):

@babel/core
@babel/preset-env
@babel/runtime

@react-native/babel-preset
@react-native/eslint-config
@react-native/jest-preset

@types/jest

@types/react-test-renderer
eslint
jest
prettier
react-test-renderer

4. Delete the entire node_modules folder (this helps ensure that the deprecation warnings appear)
5. Install react-native-legal: npm install react-native-legal
6. Notice the deprecation warnings. For more details, run npm ls inflight glob uuid

Reproducible sample code

(No code needed - just follow the steps above)