gatsby-plugin-s3 icon indicating copy to clipboard operation
gatsby-plugin-s3 copied to clipboard

Published 20 hours ago • verified publisher icon gatsby-uc

Cool kids update their OSS dependencies

Open untra opened this issue 2 years ago • 5 comments

There are a number of rotting dependencies in this package, with PRs already opened by automation bots to address.

this package is becoming problematic because it relies on a number of dead and rotting npm packages. You dont have to release updates every time, but at least once a year would be a significant improvement.

Please update these dependencies and cut a new release of the npm package: I have half a mind to fork this project and make a custom release with updated deps. Happy to assist with this @jariz however possible.

untra avatar Jun 14 '22 19:06 untra

Congratulations @untra , you're now a maintainer.

jariz avatar Jun 14 '22 19:06 jariz

@untra @JoshuaWalsh give me your npm usernames and I will give you write access to the npm package also.

jariz avatar Jun 14 '22 20:06 jariz

@jariz my npm username is also untra https://www.npmjs.com/~untra very happy to assist with cutting an updated release and mild maintenance. Thanks for the access.

untra avatar Jun 14 '22 21:06 untra

joshuawalsh

https://www.npmjs.com/settings/joshuawalsh/packages

YoshiWalsh avatar Jun 14 '22 21:06 YoshiWalsh

@jariz I think #327 is a prerequisite for being able to review dependency PRs quickly:

  1. I updated dependencies as part of that PR, so it brings us to a good starting place.

  2. It fixed some issues with Snyk/dependabot

  3. It fixes issues with CI, so we will be able to easily check that PRs still pass tests.

If you have a chance, it'd be great if you can review the PR. Thanks

YoshiWalsh avatar Jun 14 '22 21:06 YoshiWalsh