Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

🔧 Chore: Outdated packages and discordjs version #23

Open
eirikhanasand opened this issue Nov 27, 2024 · 0 comments · May be fixed by #24
Open

🔧 Chore: Outdated packages and discordjs version #23

eirikhanasand opened this issue Nov 27, 2024 · 0 comments · May be fixed by #24

Comments

@eirikhanasand
Copy link

Summary

The bot has 3 critical severity vulnerabilities, 20 high severity, and 12 warnings. The projects has imported pm2, but is not using it, as well as discordjs still being on v13. Its been 2 years since the project was last updated. I suggest some maintenance is due since it has not been touched for more than 2 years.

Why this is a problem

Technical dept builds up over time, and outdated packages become increasingly difficult to fix the more major releases you skip. The potential vulnerabilities of the application also builds up over time, creating potential problems.

Expcted outcome

The expected outcome is that the bot has no vulnerabilities, and that all packages are up to date.

Proposed solution

The most logical solution (imo) would be divided in three parts:

  1. Remove all unused packages.
  2. Update all packages to their latest version.
  3. Update discordjs version from 13 -> 14.
@eirikhanasand eirikhanasand linked a pull request Dec 15, 2024 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging a pull request may close this issue.

1 participant