Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

npm warnings #6408

Open
Giszmo opened this issue Apr 14, 2024 · 1 comment
Open

npm warnings #6408

Giszmo opened this issue Apr 14, 2024 · 1 comment
Labels

Comments

@Giszmo
Copy link

Giszmo commented Apr 14, 2024

When compiling the wallet I see many and some scary warnings:

+ npm install --production --no-optional --omit=optional --no-audit --no-fund --ignore-scripts
npm WARN config production Use `--omit=dev` instead.
npm WARN config optional Use `--omit=optional` to exclude optional dependencies, or
npm WARN config `--include=optional` to include them.
npm WARN config 
npm WARN config     Default value does install optional deps unless otherwise omitted.
npm WARN skipping integrity check for git dependency ssh://git@github.com/BlueWallet/react-native-prompt-android.git 
npm WARN skipping integrity check for git dependency ssh://git@github.com/BlueWallet/react-native-privacy-snapshot.git 
npm WARN skipping integrity check for git dependency ssh://git@github.com/BlueWallet/react-native-passcode-auth.git 
npm WARN skipping integrity check for git dependency ssh://git@github.com/BlueWallet/react-native-obscure.git 
npm WARN skipping integrity check for git dependency ssh://git@github.com/BlueWallet/react-native-idle-timer.git 
npm WARN skipping integrity check for git dependency ssh://git@github.com/BlueWallet/react-native-handoff.git 
npm WARN skipping integrity check for git dependency ssh://git@github.com/BlueWallet/react-native-document-picker.git 
npm WARN skipping integrity check for git dependency ssh://git@github.com/BlueWallet/localized-strings.git 
npm WARN skipping integrity check for git dependency ssh://git@github.com/BlueWallet/bip47.git 
npm WARN deprecated uglify-es@3.3.9: support for ECMAScript is superseded by `uglify-js` as of v3.13.0
npm WARN deprecated uuid@3.4.0: Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.
npm WARN deprecated @babel/plugin-proposal-optional-catch-binding@7.18.6: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-optional-catch-binding instead.
npm WARN deprecated @babel/plugin-proposal-numeric-separator@7.18.6: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-numeric-separator instead.
npm WARN deprecated @babel/plugin-proposal-nullish-coalescing-operator@7.18.6: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-nullish-coalescing-operator instead.
npm WARN deprecated @babel/plugin-proposal-optional-chaining@7.21.0: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-optional-chaining instead.
npm WARN deprecated @babel/plugin-proposal-async-generator-functions@7.20.7: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-async-generator-functions instead.
npm WARN deprecated @babel/plugin-proposal-object-rest-spread@7.20.7: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-object-rest-spread instead.
npm WARN deprecated frisbee@3.1.0: Please upgrade to frisbee@3.1.2+ as we have fixed a core bug with body merging (e.g. FormData and Unsupported BodyInit errors are now resolved).  Please note that as of v3.1.2 the body in requests is not merged with defaults set in Frisbee options; it either uses the request specific body OR the Frisbee default body option provided.

Especially uuid@3.4.0 feels like it might be critical for the wallet's security.

@Overtorment
Copy link
Member

uuid is used by testing framework

$ npm ls uui
bluewallet@6.6.3 /home/ghost/Documents/BlueWallet
└─┬ detox@20.18.4
  └─┬ tempfile@2.0.0
    └── uuid@3.4.0

but yeah warnings need to be worked on

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

3 participants
@Giszmo @Overtorment and others