Skip to content

Security: Update Node.js engine requirement #17

@sammons-mechanic

Description

@sammons-mechanic

Summary

The project currently specifies "engines": { "node": "8.x.x" } in package.json, which is severely outdated.

Node.js 8.x reached End of Life on December 31, 2019 and no longer receives security patches.

Current State

  • Many dependencies have dropped Node.js 8 support
  • Modern security patches are unavailable
  • TypeScript and Mocha latest versions require Node.js 18+

Recommended Actions

  1. Update package.json to specify Node.js 18 or 20 LTS:
    "engines": {
      "node": ">=18.0.0"
    }
  2. Update Dockerfile to use a modern Node.js base image
  3. Test the application with the updated Node.js version
  4. Update any CI/CD configurations

Impact

This change is a prerequisite for most other dependency upgrades. Many security patches are only available in packages that require Node.js 16+.


🤖 Generated by automated security sweep

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions