-
Notifications
You must be signed in to change notification settings - Fork 0
Security: Update Node.js engine requirement #17
Copy link
Copy link
Open
Description
Summary
The project currently specifies "engines": { "node": "8.x.x" } in package.json, which is severely outdated.
Node.js 8.x reached End of Life on December 31, 2019 and no longer receives security patches.
Current State
- Many dependencies have dropped Node.js 8 support
- Modern security patches are unavailable
- TypeScript and Mocha latest versions require Node.js 18+
Recommended Actions
- Update
package.jsonto specify Node.js 18 or 20 LTS:"engines": { "node": ">=18.0.0" }
- Update Dockerfile to use a modern Node.js base image
- Test the application with the updated Node.js version
- Update any CI/CD configurations
Impact
This change is a prerequisite for most other dependency upgrades. Many security patches are only available in packages that require Node.js 16+.
🤖 Generated by automated security sweep
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels