Simply running npm install generates many deprecations, renames etc. etc.
msa@sieglinde:client$ npm install
npm WARN deprecated gulp-util@3.0.8: gulp-util is deprecated - replace it, following the guidelines at https://medium.com/gulpjs/gulp-util-ca3b1f9f9ac5
npm WARN deprecated sw-precache@4.3.0: Please migrate to Workbox: https://developers.google.com/web/tools/workbox/guides/migrations/migrate-from-sw
npm WARN deprecated sw-toolbox@3.6.0: Please migrate to Workbox: https://developers.google.com/web/tools/workbox/guides/migrations/migrate-from-sw
npm WARN deprecated natives@1.1.6: This module relies on Node.js's internals and will break at some point. Do not use it, and update to graceful-fs@4.x.
npm WARN deprecated minimatch@2.0.10: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
npm WARN deprecated minimatch@0.2.14: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
npm WARN deprecated graceful-fs@1.2.3: please upgrade to graceful-fs 4 for compatibility with current and future versions of Node.js
npm WARN deprecated opn@6.0.0: The package has been renamed to `open`
> @sencha/ext-core@7.0.0 install /Tangix_Work/VirtualTesterApp/PWA-Open-Tooling/client/node_modules/@sencha/ext-core
> node activate.js
ℹ 「ext」: activate: @sencha/ext-core v7.0.0.156 installed
package tier: pro
activator name: @sencha/ext-activator package: @sencha/ext-activator@7.0.0-2019.10.12
+ @sencha/ext-activator@7.0.0-2019.10.12
added 5 packages from 3 contributors and audited 6 packages in 3.567s
found 0 vulnerabilities
> @sencha/ext-modern-theme-base@7.0.0 install /Tangix_Work/VirtualTesterApp/PWA-Open-Tooling/client/node_modules/@sencha/ext-modern-theme-base
> node activate.js
ℹ 「ext」: activate: @sencha/ext-modern-theme-base v7.0.0.156 installed
package tier: pro
activator name: @sencha/ext-activator package: @sencha/ext-activator@7.0.0-2019.10.12
+ @sencha/ext-activator@7.0.0-2019.10.12
added 5 packages from 3 contributors and audited 6 packages in 1.504s
found 0 vulnerabilities
> fsevents@1.2.9 install /Tangix_Work/VirtualTesterApp/PWA-Open-Tooling/client/node_modules/fsevents
> node install
node-pre-gyp WARN Using needle for node-pre-gyp https download
[fsevents] Success: "/Tangix_Work/VirtualTesterApp/PWA-Open-Tooling/client/node_modules/fsevents/lib/binding/Release/node-v72-darwin-x64/fse.node" is installed via remote
> @sencha/cmd@7.0.0 install /Tangix_Work/VirtualTesterApp/PWA-Open-Tooling/client/node_modules/@sencha/cmd
> node platform-install.js
[INF] Installing Sencha Cmd...
> [platform-installer][stderr]: npm
> [platform-installer][stderr]: notice created a lockfile as package-lock.json. You should commit this file.
npm WARN @sencha/cmd@7.0.0 No repository field.
> [platform-installer]: Exited with code 0
> @sencha/ext@7.0.0 install /Tangix_Work/VirtualTesterApp/PWA-Open-Tooling/client/node_modules/@sencha/ext
> node activate.js
ℹ 「ext」: activate: @sencha/ext v7.0.0.156 installed
package tier: pro
activator name: @sencha/ext-activator package: @sencha/ext-activator@7.0.0-2019.10.12
+ @sencha/ext-activator@7.0.0-2019.10.12
added 5 packages from 3 contributors and audited 6 packages in 3.026s
found 0 vulnerabilities
> @sencha/ext-modern@7.0.0 install /Tangix_Work/VirtualTesterApp/PWA-Open-Tooling/client/node_modules/@sencha/ext-modern
> node activate.js
ℹ 「ext」: activate: @sencha/ext-modern v7.0.0.156 installed
package tier: pro
activator name: @sencha/ext-activator package: @sencha/ext-activator@7.0.0-2019.10.12
+ @sencha/ext-activator@7.0.0-2019.10.12
added 5 packages from 3 contributors and audited 6 packages in 1.498s
found 0 vulnerabilities
> core-js@2.6.9 postinstall /Tangix_Work/VirtualTesterApp/PWA-Open-Tooling/client/node_modules/core-js
> node scripts/postinstall || echo "ignore"
Thank you for using core-js ( https://github.com/zloirock/core-js ) for polyfilling JavaScript standard library!
The project needs your help! Please consider supporting of core-js on Open Collective or Patreon:
> https://opencollective.com/core-js
> https://www.patreon.com/zloirock
Also, the author of core-js ( https://github.com/zloirock ) is looking for a good job -)
npm WARN react-hot-loader@4.12.15 requires a peer of react-dom@^15.0.0 || ^16.0.0 but none is installed. You must install peer dependencies yourself.
added 997 packages from 487 contributors and audited 10536 packages in 36.429s
found 8 vulnerabilities (1 low, 1 moderate, 6 high)
run `npm audit fix` to fix them, or `npm audit` for details
Are they benign?
This makes me worried about Sencha's open-tooling strategy and when the house-of-cards will fall down.
Simply running
npm installgenerates many deprecations, renames etc. etc.Are they benign?
This makes me worried about Sencha's open-tooling strategy and when the house-of-cards will fall down.