Skip to content

All these deprecated node packages #9

Description

@tangix

Simply running npm install generates many deprecations, renames etc. etc.

msa@sieglinde:client$ npm install
npm WARN deprecated gulp-util@3.0.8: gulp-util is deprecated - replace it, following the guidelines at https://medium.com/gulpjs/gulp-util-ca3b1f9f9ac5
npm WARN deprecated sw-precache@4.3.0: Please migrate to Workbox: https://developers.google.com/web/tools/workbox/guides/migrations/migrate-from-sw
npm WARN deprecated sw-toolbox@3.6.0: Please migrate to Workbox: https://developers.google.com/web/tools/workbox/guides/migrations/migrate-from-sw
npm WARN deprecated natives@1.1.6: This module relies on Node.js's internals and will break at some point. Do not use it, and update to graceful-fs@4.x.
npm WARN deprecated minimatch@2.0.10: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
npm WARN deprecated minimatch@0.2.14: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
npm WARN deprecated graceful-fs@1.2.3: please upgrade to graceful-fs 4 for compatibility with current and future versions of Node.js
npm WARN deprecated opn@6.0.0: The package has been renamed to `open`

> @sencha/ext-core@7.0.0 install /Tangix_Work/VirtualTesterApp/PWA-Open-Tooling/client/node_modules/@sencha/ext-core
> node activate.js

ℹ 「ext」: activate: @sencha/ext-core v7.0.0.156 installed
package tier: pro
activator name: @sencha/ext-activator package: @sencha/ext-activator@7.0.0-2019.10.12
+ @sencha/ext-activator@7.0.0-2019.10.12
added 5 packages from 3 contributors and audited 6 packages in 3.567s
found 0 vulnerabilities


> @sencha/ext-modern-theme-base@7.0.0 install /Tangix_Work/VirtualTesterApp/PWA-Open-Tooling/client/node_modules/@sencha/ext-modern-theme-base
> node activate.js

ℹ 「ext」: activate: @sencha/ext-modern-theme-base v7.0.0.156 installed
package tier: pro
activator name: @sencha/ext-activator package: @sencha/ext-activator@7.0.0-2019.10.12
+ @sencha/ext-activator@7.0.0-2019.10.12
added 5 packages from 3 contributors and audited 6 packages in 1.504s
found 0 vulnerabilities


> fsevents@1.2.9 install /Tangix_Work/VirtualTesterApp/PWA-Open-Tooling/client/node_modules/fsevents
> node install

node-pre-gyp WARN Using needle for node-pre-gyp https download
[fsevents] Success: "/Tangix_Work/VirtualTesterApp/PWA-Open-Tooling/client/node_modules/fsevents/lib/binding/Release/node-v72-darwin-x64/fse.node" is installed via remote

> @sencha/cmd@7.0.0 install /Tangix_Work/VirtualTesterApp/PWA-Open-Tooling/client/node_modules/@sencha/cmd
> node platform-install.js

[INF] Installing Sencha Cmd...
> [platform-installer][stderr]: npm
> [platform-installer][stderr]:  notice created a lockfile as package-lock.json. You should commit this file.
npm WARN @sencha/cmd@7.0.0 No repository field.


> [platform-installer]: Exited with code 0

> @sencha/ext@7.0.0 install /Tangix_Work/VirtualTesterApp/PWA-Open-Tooling/client/node_modules/@sencha/ext
> node activate.js

ℹ 「ext」: activate: @sencha/ext v7.0.0.156 installed
package tier: pro
activator name: @sencha/ext-activator package: @sencha/ext-activator@7.0.0-2019.10.12
+ @sencha/ext-activator@7.0.0-2019.10.12
added 5 packages from 3 contributors and audited 6 packages in 3.026s
found 0 vulnerabilities


> @sencha/ext-modern@7.0.0 install /Tangix_Work/VirtualTesterApp/PWA-Open-Tooling/client/node_modules/@sencha/ext-modern
> node activate.js

ℹ 「ext」: activate: @sencha/ext-modern v7.0.0.156 installed
package tier: pro
activator name: @sencha/ext-activator package: @sencha/ext-activator@7.0.0-2019.10.12
+ @sencha/ext-activator@7.0.0-2019.10.12
added 5 packages from 3 contributors and audited 6 packages in 1.498s
found 0 vulnerabilities


> core-js@2.6.9 postinstall /Tangix_Work/VirtualTesterApp/PWA-Open-Tooling/client/node_modules/core-js
> node scripts/postinstall || echo "ignore"

Thank you for using core-js ( https://github.com/zloirock/core-js ) for polyfilling JavaScript standard library!

The project needs your help! Please consider supporting of core-js on Open Collective or Patreon:
> https://opencollective.com/core-js
> https://www.patreon.com/zloirock

Also, the author of core-js ( https://github.com/zloirock ) is looking for a good job -)

npm WARN react-hot-loader@4.12.15 requires a peer of react-dom@^15.0.0 || ^16.0.0 but none is installed. You must install peer dependencies yourself.

added 997 packages from 487 contributors and audited 10536 packages in 36.429s
found 8 vulnerabilities (1 low, 1 moderate, 6 high)
  run `npm audit fix` to fix them, or `npm audit` for details

Are they benign?
This makes me worried about Sencha's open-tooling strategy and when the house-of-cards will fall down.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions