Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Review system/template/base/package.json dependencies #253

Open
21 of 32 tasks
chris-bateman opened this issue Feb 13, 2024 · 3 comments · Fixed by #341 · May be fixed by #324
Open
21 of 32 tasks

Review system/template/base/package.json dependencies #253

chris-bateman opened this issue Feb 13, 2024 · 3 comments · Fixed by #341 · May be fixed by #324
Assignees
Labels
dependencies Pull requests that update a dependency file help wanted

Comments

@chris-bateman
Copy link
Member

chris-bateman commented Feb 13, 2024

Review package.json dependencies here -
https://github.com/2pisoftware/cmfive-core/blob/develop/system/templates/base/package.json

Mark if they are required.
Remove them if they are not required.
Update them if required.
If in a deprecated status review and replace with suitable functionality.

Supported = Update released in last 12 months

Required - dependencies

  • "@codemirror/lang-html": "^6.4.5", Patch update and supported
  • "@popperjs/core": "^2.11.8", Up to date and supported
  • "bootstrap": "^5.2.3", Up to date and supported
  • "bootstrap-icons": "^1.10.5", Minor update and supported
  • "browser-process": "0.0.1", Abandoned 9 years since last update NPM Registry
  • "codemirror": "^6.0.1", Updated 2 years ago. Example codebase? Review readme here
  • "jquery": "^3.7.1", - Up to date and supported
  • "quill": "^1.3.6", Updated 4 years ago. v2 appears to be in beta Github releases
  • "tom-select": "^2.2.2", Minor update and supported
  • "typescript": "^4.9.5", Major update and supported
  • "vue": "^2.7.14", Major update and supported WIP migration

Required - devDependencies

  • "@types/bootstrap": "^5.2.6", Patch update and supported
  • "@types/jquery": "^3.5.18", Patch update and supported
  • "autoprefixer": "^10.4.15", Patch update and supported
  • "babel-core": "^6.26.3", DEPRECATED NPM Registry
  • "babel-loader": "^8.3.0", Major update and supported
  • "babel-preset-es2015": "^6.24.1", DEPRECATED NPM Registry
  • "css-loader": "^5.2.6", Major update and supported
  • "laravel-mix": "^6.0.49", Last update 2 years ago NPM Registry
  • "laravel-mix-glob": "^2.0.1", Patch update and supported
  • "postcss-loader": "^4.3.0", Major update and supported
  • "resolve-url-loader": "^3.1.5", Last update 2 years ago NPM Registry
  • "sass": "^1.66.1", Minor update and supported
  • "sass-loader": "^10.4.1", Major update and supported
  • "style-loader": "^2.0.0", Major update and supported
  • "ts-loader": "^9.4.2", Minor update and supported
  • "vue-class-component": "^7.2.6", DEPRECATED Review Github
  • "vue-loader": "^15.10.2", Major update and supported
  • "vue-property-decorator": "^9.1.2", DEPRECRATED Review Github
  • "vue-template-compiler": "^2.7.14", Patch update and supported
  • "webpack": "^5.88.2", Minor update and supported
  • "webpack-cli": "^4.10.0" Major update and supported

Resolving the above may close security issues raised here - https://github.com/2pisoftware/cmfive-core/security/dependabot

@chris-bateman chris-bateman added help wanted dependencies Pull requests that update a dependency file labels Feb 13, 2024
@chris-bateman
Copy link
Member Author

@2pisoftware/developers Please review the above. I have noted that the Vue v2 to v3 update is a WIP and that may resolve some of the above.

@chris-bateman chris-bateman linked a pull request Aug 17, 2024 that will close this issue
@chris-bateman chris-bateman linked a pull request Aug 27, 2024 that will close this issue
@chris-bateman
Copy link
Member Author

Quill no longer in Beta :)

https://slab.com/blog/announcing-quill-2-0/

@chris-bateman
Copy link
Member Author

Laravel-Mix - laravel-mix/laravel-mix#3383

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file help wanted
Projects
None yet
6 participants