Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update debug and js-beautify dependencies; remove unnecessary use of lodash #7

Open
wants to merge 3 commits into
base: master
Choose a base branch
from

Conversation

zackw
Copy link

@zackw zackw commented Dec 2, 2022

This updates the dependencies on debug and js-beautify to current versions (^4.3.0 and ^1.14.0 respectively).

It also removes the dependency on lodash, which was only being used for things that can be done just as easily with built-in JavaScript functions (Array.forEach, Object.assign). That change was originally written by @khadro (Sitback@632585e), I only cleaned it up a little.

This fixes 2 npm audit complaints (debug <2.6.9 [low], lodash <4.17.20 [critical]) and so would close #6. It describes itself as version 0.2.2.

khadro and others added 3 commits December 2, 2022 11:51
Use the built-in Array.forEach instead of _.each, and Object.assign
instead of _.assign.  These were the only things lodash was used for.
Lockfiles shouldn’t exist at all, but most of the harm they do can be
mitigated by keeping them as ephemeral as possible.  In particular,
they should not be committed to version control ever.  Discourage this
by adding package-lock.json to .gitignore.  /En passant/ add leading
slashes to several things that should only ever exist at top level.
Despite the major version bump to ‘debug’ (0 -> 4) no code changes
are required.
@zackw
Copy link
Author

zackw commented Dec 2, 2022

updated version of patch avoids using const and arrow functions

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

High Dependency Vulnerability: lodash
2 participants