docusign-esign-node-client
docusign-esign-node-client copied to clipboard
docusign
Please upgrade libraries
Hi, while installing I'm getting this warnings:
warning docusign-esign > [email protected]: Please upgrade to v7.0.2+ of superagent. We have fixed numerous issues with streams, form-data, attach(), filesystem errors not bubbling up (ENOENT on attach()), and all tests are now passing. See the releases tab for more information at <https://github.com/visionmedia/superagent/releases>.
warning docusign-esign > superagent > [email protected]: Please upgrade to latest, formidable@v2 or formidable@v3! Check these notes: https://bit.ly/2ZEqIau
[3/5] Fetching packages...
Those are not errors but warnings that won't affect your working and installation. Could you please indicate precisely how did you fell on this message in order I could report your finding to the Engineering team?
@sylvainleb376
When installing first time by this install command
npm add docusign-esign
We get the warning about deprecated libraries. This may break anytime when infrastructure is upgraded.
npm WARN deprecated [email protected]: Please upgrade to latest, formidable@v2 or formidable@v3!
npm WARN deprecated [email protected]: Please upgrade to v7.0.2+ of superagent.
Thanks
@sylvainleb376
Is it possible to update superagent package? Superagent 3.8.2 has 'high' vulnerability https://github.com/advisories/GHSA-hrpp-h998-j3pp
I second the demand.
Docusign is supposed to be a reliable and secure tool, it cannot be if its SDKs are based on dependencies that have important and high vulnerabilities.
