hubot-zulip icon indicating copy to clipboard operation
hubot-zulip copied to clipboard

update dependencies ?

Open maxandersen opened this issue 5 years ago • 5 comments

any plans on updating this to avoid the wall of warnings and vulnerabilities this generates when used ?

❯ npm install --save hubot-zulip
npm WARN deprecated [email protected]: request has been deprecated, see https://github.com/request/request/issues/3142
npm WARN deprecated [email protected]: This module moved to @hapi/hawk. Please make sure to switch over as this distribution is no longer supported and may contain bugs and critical security issues.
npm WARN deprecated [email protected]: Use uuid module instead
npm WARN deprecated [email protected]: This module moved to @hapi/sntp. Please make sure to switch over as this distribution is no longer supported and may contain bugs and critical security issues.
npm WARN deprecated [email protected]: This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial).
npm WARN deprecated [email protected]: This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial).
npm WARN deprecated [email protected]: This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial).
+ [email protected]
added 25 packages from 20 contributors and audited 213 packages in 6.788s
found 13 vulnerabilities (9 moderate, 4 high)
  run `npm audit fix` to fix them, or `npm audit` for details

maxandersen avatar Apr 05 '20 19:04 maxandersen

We haven't found anybody who wants to actively maintain this project. I think most Zulip users have found other solutions for bots.

showell avatar Apr 05 '20 20:04 showell

I'll see if I can find someone to update this; it shouldn't be a ton of work.

timabbott avatar Apr 06 '20 00:04 timabbott

@showell any suggestion on what those other solutions are ? :) (i was using hubot one so I don't have to implement the same bot mechanics/chat adapters for every chat system in use on the planet :)

maxandersen avatar Apr 07 '20 07:04 maxandersen

We are also moving to Zulip in the very near future with our hubot installation. I'll try and manage a PR at some point in the near future.

lasseborly avatar May 18 '20 17:05 lasseborly

I moved on this! Would you guys be able to take a look @timabbott ?

https://github.com/zulip/zulip-node/pull/1

spoiler It wasn't much work :see_no_evil:

lasseborly avatar May 25 '20 19:05 lasseborly