LibreChat icon indicating copy to clipboard operation
LibreChat copied to clipboard

Deprecated Packages in API code

Open ocontant opened this issue 1 year ago • 3 comments

npm WARN deprecated [email protected]: This module has moved and is now available at @hapi/topo. Please update your dependencies as this version is no longer maintained an may contain bugs and security issues.
npm WARN deprecated [email protected]: This module has moved and is now available at @hapi/joi. Please update your dependencies as this version is no longer maintained an may contain bugs and security issues.
npm WARN deprecated [email protected]: This module has moved and is now available at @hapi/hoek. Please update your dependencies as this version is no longer maintained an may contain bugs and security issues.
npm WARN deprecated [email protected]: This package is no longer supported. It's now a built-in Node module. If you've depended on crypto, you should switch to the one that's built-in.

ocontant avatar May 08 '23 01:05 ocontant

Hi @ocontant,

These warnings indicate that the versions of the packages "topo", "joi", "hoek", and "crypto" installed in your project are deprecated, meaning they are no longer being maintained and may contain bugs and security issues.

To fix these warnings, you can update the affected packages to their latest versions or to the versions suggested in the warning messages. You can do this by running the following command in your terminal:

npm install --save-dev @hapi/topo@latest @hapi/joi@latest @hapi/hoek@latest

This will install the latest versions of these packages from the "@hapi" organization, which is the new home of these packages.

Regarding "crypto" package, it's no longer needed since it's a built-in Node module, so you can safely remove it from your package dependencies.

npm uninstall crypto

After running these commands, you should see no more deprecation warnings related to these packages.

-- David (Developer & Sponsor)

DavidVeevt avatar May 08 '23 16:05 DavidVeevt

npm WARN deprecated [email protected]: This module has moved and is now available at @hapi/topo. Please update your dependencies as this version is no longer maintained an may contain bugs and security issues.
npm WARN deprecated [email protected]: This module has moved and is now available at @hapi/joi. Please update your dependencies as this version is no longer maintained an may contain bugs and security issues.
npm WARN deprecated [email protected]: This module has moved and is now available at @hapi/hoek. Please update your dependencies as this version is no longer maintained an may contain bugs and security issues.
npm WARN deprecated [email protected]: This package is no longer supported. It's now a built-in Node module. If you've depended on crypto, you should switch to the one that's built-in.

I will look into removing the dependencies and maybe even integrating dependabot or something. Will close when this is resolved

danny-avila avatar May 08 '23 21:05 danny-avila

dependabot would be a good thing. The errors were the result of the package.json provided in the project and since they had a fixed version it didn't update them.

Thanks David for the pointer!

I wonder if we could integrate to a CI/CD framework like Vercel or AWS Amplify to validate PR before they are merged.

ocontant avatar May 09 '23 04:05 ocontant

Fully addressed by #319

Thanks for configuring dependabot @ocontant !

danny-avila avatar May 18 '23 19:05 danny-avila