Skip to content

Conversation

@tuj
Copy link
Contributor

@tuj tuj commented Dec 18, 2025

Link to issue

#249

Link to ticket

https://leantime.itkdev.dk/#/tickets/showTicket/6237

Description

Npm audit reports 6 issues with the javascript dependencies. These involve two abandoned dependencies:

  • ReactQuill: A RichText Editor.
  • Lodash.set: A utility function.

These dependencies should be replaced.

Related issues

#319

Checklist

  • My code is covered by test cases.
  • My code passes our test (all our tests).
  • My code passes our static analysis suite.
  • My code passes our continuous integration process.

Notes

  • When running npm install it reports: "npm warn deprecated lodash.get@4.4.2: This package is deprecated. Use the optional chaining (?.) operator instead". I will see if we can remove all lodash dependencies.
  • Reference for replacing lodash functions: https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore
  • Evaluate if structuredClone browser support i good enough.

@tuj tuj added this to the 3.0.0 milestone Dec 18, 2025
@tuj tuj self-assigned this Dec 18, 2025
@tuj tuj changed the title Feature/6237 npm security Release 3.0.0 - audit fixes Dec 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants