lodestar
lodestar copied to clipboard
Update outdated NPM dependencies for `lodestar-cli`
This issue is to track dependencies which are outdated and fixes are available for implementation. The following lodestar-cli
dependencies are outdated:
- [ ]
ini
: Latest isv3.0.0
https://www.npmjs.com/package/ini - [ ]
minimist
: Latest isv1.2.6
https://www.npmjs.com/package/minimist - [ ]
node-forge
: Latest isv1.3.1
https://www.npmjs.com/package/node-forge - [ ]
tar
: Latest isv6.1.1
https://www.npmjs.com/package/tar
-
ini
,minimist
,tar
: Fixable by recreating yarn.lock -
node-forge
: Dependency of libp2p-crypto, blocked until https://github.com/ChainSafe/lodestar/pull/4427
Other old packages there because:
- Our own dependency on "electron": "^19.0.9", @nazarhussain why not v20?
- typedoc: to be removed with https://github.com/ChainSafe/lodestar/pull/4436
The node-forge
will be updated once @chainsafe/discv5
, peer-id
and libp2p
is updated to latest versions.
The ini
package is deep dependency of lerna
, so no need to update.
All other critical dependencies are fixed in the PR https://github.com/ChainSafe/lodestar/pull/4597
Still WIP.
@nazarhussain Is there still a need to keep this specific issue open based on the comments and PRs above?
We can close this issue.