Repository navigation
react_native/codegen dependency glob is deprecated. #51474
Description
Activity
Warning
Missing reproducer: We could not detect a reproducible example in your issue report. Reproducers are mandatory and we can accept only one of those as a valid reproducer:
- For majority of bugs: send us a Pull Request with the RNTesterPlayground.js edited to reproduce your bug.
- If your bug is UI related: a Snack
- If your bug is build/upgrade related: a project using our Reproducer Template
You can read more about about it on our website: How to report a bug.Are there any news on this issue?
Reacted by abbasalshalchi and JustynHow is it here? @cortinico @huntie @byCedric
Please do not ping us multiple times @Lionhunt3r.
The latest updates on this are here:This issue is stale because it has been open 180 days with no activity. Remove stale label or comment or this will be closed in 7 days.
This issue is stale because it has been open for 180 days with no activity. It will be closed in 7 days unless you comment on it or remove the "Stale" label.
This issue was closed because it has been stalled for 7 days with no activity.
Description
glob ^7 is deprecated and itself requires a deprecated package of inflight that has a security bulletin out on it.
It should be updated to version 9, at the least, if not all the was to current version 11. See:
https://www.npmjs.com/package/glob?activeTab=versions
Facebook security replied that they didn't consider this a security issue, so posting it publicly.
Steps to reproduce
See: https://github.com/facebook/react-native/blob/4ae86e651cafc025565023170310a534595a5e61/packages/react-native-codegen/package.json#L32
React Native Version
0.79.2
Affected Platforms
Build - Linux, Build - MacOS
Output of
npx @react-native-community/cli infoStacktrace or Logs
MANDATORY Reproducer
https://github.com/facebook/react-native/blob/4ae86e651cafc025565023170310a534595a5e61/packages/react-native-codegen/package.json#L32
Screenshots and Videos
No response