Js-ipfs: Downgrade `@hapi/ammo` to v3

Created on 18 Feb 2020  路  6Comments  路  Source: ipfs/js-ipfs

This project uses @happi/ammo version 4.0.0, which is not supported and was published by mistake.

This project should downgrade to v3.0.0, which is still actively maintained, or upgrade to v5.0.0 if you don't mind dropping support for Node.js

All 6 comments

looks like it was just greenkeeper https://github.com/ipfs/js-ipfs/pull/2538

motivation:

v4.0.1 is listed on npm as deprecated, and is listed as vulnerable on this advisory: https://www.npmjs.com/advisories/1474

I still get the wrong @happi/ammo version when installing the latest ipfs npm version (0.41.1).
See my package-lock below:

"ipfs": {
      "version": "0.41.1",
      "resolved": "https://registry.npmjs.org/ipfs/-/ipfs-0.41.1.tgz",
      "integrity": "sha512-5UI0WFh7eD2J+niMNrVYOFmUH2bL0iN4VXlVWMnsHyD7qZ6IPqgr7cFa1Z+udpZkQu6uLEcxnHjXyB2XmiibIg==",
      "requires": {
        "@hapi/ammo": "^4.0.0",

The downgrade has not been published yet - we'll hopefully get something out in the next day or two.

Please try [email protected], it should have the ammo downgrade in it.

I confirm [email protected] contains the @hapi/ammo downgrade 馃憤

Was this page helpful?
0 / 5 - 0 ratings