Resolve deprecated npm packages and security vulnerabilities in the build process #7

Closed
opened 2026-01-25 11:49:23 +00:00 by nakada0907 · 0 comments
Owner

Background

During the latest CodeBuild run, several npm warnings appeared regarding deprecated packages and unsupported versions.
Additionally, npm audit reported multiple security vulnerabilities (1 low, 4 moderate, 3 high).

These issues may lead to unstable builds, potential security risks, and future incompatibilities.
To maintain a clean, reproducible, and secure build environment, the dependencies should be updated or replaced.

Observed Warnings (from CodeBuild logs)

  • Deprecated: rimraf@3.0.2 (versions prior to v4 are no longer supported)
  • Deprecated: inflight@1.0.6 (unsupported and leaks memory)
  • Deprecated: glob@7.2.3 (versions prior to v9 are no longer supported)
  • Deprecated: @humanwhocodes/config-array@0.13.0 → use @eslint/config-array
  • Deprecated: @humanwhocodes/object-schema@2.0.3 → use @eslint/object-schema
  • Deprecated: eslint@8.57.1 (no longer supported)

Security report:

  • 8 vulnerabilities (1 low, 4 moderate, 3 high)
## Background During the latest CodeBuild run, several npm warnings appeared regarding deprecated packages and unsupported versions. Additionally, `npm audit` reported multiple security vulnerabilities (1 low, 4 moderate, 3 high). These issues may lead to unstable builds, potential security risks, and future incompatibilities. To maintain a clean, reproducible, and secure build environment, the dependencies should be updated or replaced. ## Observed Warnings (from CodeBuild logs) - Deprecated: `rimraf@3.0.2` (versions prior to v4 are no longer supported) - Deprecated: `inflight@1.0.6` (unsupported and leaks memory) - Deprecated: `glob@7.2.3` (versions prior to v9 are no longer supported) - Deprecated: `@humanwhocodes/config-array@0.13.0` → use `@eslint/config-array` - Deprecated: `@humanwhocodes/object-schema@2.0.3` → use `@eslint/object-schema` - Deprecated: `eslint@8.57.1` (no longer supported) Security report: - 8 vulnerabilities (1 low, 4 moderate, 3 high)
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: nakada0907/n-daisuke897-blog#7
No description provided.