mlx icon indicating copy to clipboard operation
mlx copied to clipboard

Keep npm dependencies up to date

Open ckadner opened this issue 4 years ago • 1 comments
trafficstars

Many of our npm dependencies get pinned to a certain version (see package-lock.json) which become outdated quickly. Those outdated version often have security vulnerabilities that get fixed in more recent versions. However the MLX UI keeps using the pinned outdated versions.

We should try using tools like npm-upgrade and build that into a Makefile target and integrate a check for outdated (minor) versions in our CI/CD checks.

This is the first blog post I hit after googling this topic, but there are plenty more: https://hudochenkov.com/posts/up-to-date-dependencies/

@drewbutlerbb4 -- could you take this on?

ckadner avatar Jun 14 '21 18:06 ckadner

I'll checkout this task

BluThaitanium avatar Sep 29 '21 16:09 BluThaitanium