dynst

typedoc is outdated

1

https://github.com/bitpay/bitcore/blob/23fdff6685ee4f408412b9809f86b0ae31857c73/package.json#L81 [0.15.8](https://www.npmjs.com/package/typedoc/v/0.15.8) is from 2020, it still depends on `underscore`, `shelljs`, `highlight.js`, and `marked` which causes `npm audit` to complain about 1 critical vulnerability in underscore. 2 high vulns in...

eslint-config-airbnb-base is outdated

1

https://github.com/bitpay/bitcore/blob/23fdff6685ee4f408412b9809f86b0ae31857c73/package.json#L74-L75 The latest version is 15.0.0, uses eslint-plugin-import ^2.30, and is compatible with eslint 7 or 8 (current version uses eslint 4). https://github.com/bitpay/bitcore/blob/23fdff6685ee4f408412b9809f86b0ae31857c73/package-lock.json#L5529-L5532

remove unused lodash imports

3

These files weren't actually using `_`.

remove some lodash calls

1

#3949 Excluding isString, isUndefined, isObject, and things like that (which don't have to be removed, if lodash can be replaced with `var _ = require('is-what')`), there are fewer than 50...

drop lodash

2

https://github.com/bitpay/bitcore/blob/c464b8806a8801a43bea5102ce281fc70045945c/packages/bitcore-lib/package.json#L44 It's an enormous dependency that hasn't had a release since 2021. How much of it is even needed? `_.includes` is just a standard array method now. [`is-what`](https://www.npmjs.com/package/is-what) can be...

tar-fs 3.0

2

https://bundlephobia.com/package/[email protected] The new `tar-fs 3.0` updated to `tar-stream 3.0`, which shed its dependency on `readable-stream` in https://github.com/mafintosh/tar-stream/pull/143 Or maybe just switching to [`tar`](https://www.npmjs.com/package/tar) is better.

There are some somewhat old dependencies in use (`tar-fs` 2.x for one) and it's unclear if any have security advisories, which dependabot would automatically alert about.

https://github.com/ipfs/aegir/blob/4096577b2c6f6043966c0c4b152d93e613e4742b/package.json#L302 This was added in #777 for #437 but there hasn't even been any activity on its repo since 2021. https://github.com/acostalima/react-native-test-runner Maybe it could be replaced with a modern alternative,...

eslint 9

1

[eslint 8.x is EOL.](https://eslint.org/blog/2024/09/eslint-v8-eol-version-support/) Prerequisites for updating to 9: - [x] #1490 - - [x] #1440 - - [x] #1463, which can't be done before: - - - [x] #1445...