question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Replace optimist with minimist

See original GitHub issue

For known reasons we want to get rid of old versions of minimist from our projects. And I looked into dependency then found http-server is relying on optimist, which is a deprecated package, and optimist relies on very old version of minimist. https://github.com/substack/node-optimist/blob/master/package.json#L8

I’m a yarn user and I received lots of warnings since I used http-server in my projects, a lot… A viable solution might be reinstalling http-server and for some reason newer version of minimist can be installed and the warn will be gone.

Is there anytime to do on http-server side?

Issue Analytics

  • State:closed
  • Created 4 years ago
  • Reactions:12
  • Comments:6 (2 by maintainers)

github_iconTop GitHub Comments

4reactions
thornjadcommented, Mar 18, 2020

I completely sympathize with the headache of old packages in dependency trees! I’ll take a look into fixing that on our side if I can!

0reactions
yetztcommented, Apr 6, 2020

@substack just has to press the merge-button here https://github.com/substack/node-optimist/issues/152

Read more comments on GitHub >

github_iconTop Results From Across the Web

minimist - npm
Start using minimist in your project by running `npm i minimist`. ... This module is the guts of optimist's argument parser without all...
Read more >
Developers - Replace optimist with minimist - - Bountysource
1. Replacing use of optimist with direct use of minimist in lib/start. · 2. Using the latest version of minimist which does not...
Read more >
npm ls minimist@0.2.1 invalid extraneous - Stack Overflow
npm install works fine , but npm ls minimist shows: ... extraneous ├─┬ karma@1.5.0 │ └─┬ optimist@0.6.1 │ └── minimist@1.2.6 ...
Read more >
minimist - npm.io
minimist. parse argument options. This module is the guts of optimist's argument parser without all the fanciful decoration.
Read more >
Fixing security vulnerabilities in npm dependencies in less ...
This will tell you the packages which are vulnerable. npm audit log showing minimist as a prototype pollution vulnerability. This tells me that...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found