mlx
mlx copied to clipboard
Keep npm dependencies up to date
trafficstars
Many of our npm dependencies get pinned to a certain version (see package-lock.json) which become outdated quickly. Those outdated version often have security vulnerabilities that get fixed in more recent versions. However the MLX UI keeps using the pinned outdated versions.
We should try using tools like npm-upgrade and build that into a Makefile target and integrate a check for outdated (minor) versions in our CI/CD checks.
This is the first blog post I hit after googling this topic, but there are plenty more: https://hudochenkov.com/posts/up-to-date-dependencies/
@drewbutlerbb4 -- could you take this on?
I'll checkout this task