Hexo: Deprecated dependencies (swig & minimatch)

Created on 3 Dec 2016  ·  3Comments  ·  Source: hexojs/hexo

Environment Info

Node version(node -v)

v6.9.1

When doing a hexo init mywebsite it warns about two outdated dependencies:

npm WARN deprecated [email protected]: This package is no longer maintained
npm WARN deprecated [email protected]: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue

This should probably be looked into since both of these dependencies are HEAVILY outdated.

Most helpful comment

minimatch is already updated to v3.0.0 in master so the minimatch npm warn will be gone in next publish I suppose.

Also I think you guys need to move on from swig since it's no longer maintained. What do you think?

All 3 comments

I could update those sem versions in package.json, but sadly I don't have permission to publish to npm.

minimatch is already updated to v3.0.0 in master so the minimatch npm warn will be gone in next publish I suppose.

Also I think you guys need to move on from swig since it's no longer maintained. What do you think?

@tianp Agree.

Was this page helpful?
0 / 5 - 0 ratings

Related issues

testareas picture testareas  ·  3Comments

leoli-dev picture leoli-dev  ·  3Comments

jo4x962k7JL picture jo4x962k7JL  ·  3Comments

mashirozx picture mashirozx  ·  3Comments

hjmJhon picture hjmJhon  ·  3Comments