Deps: replace "forever" to get rid of "timespan" security warning?
See original GitHub issueopenwhyd.org is an open-source music platform used daily by thousands of users to create playlists of songs from the web (Youtube, Soundcloud, etcā¦), and discover musical gems from similar users.
Tech stack: Node.js, MongoDB, Docker, Mocka, Webdriver.io, jQuery, Electron + iOS app
Goal
We have been using forever
to run Openwhyd on our production server, and restart it automatically when it ever crashes.
The problem is that this npm module is not maintained anymore, and it depends on other npm modules on which security vulnerabilities were detected. (cf https://github.com/foreverjs/forever/pull/956)
=> Your PR should replace the forever
dependency (from package.json
) by one of its forks (or another similar npm module) that donāt rely on unsafe dependencies.
Howto
In order to solve this issue, you are invited to fork this GitHub repository, makes changes to it, and then create a Pull Request so we can merge your changes back to this repository.
First, you may want to read about:
- How to install, setup and run Openwhyd on your computer:
INSTALL.md
- How to propose a valuable contribution to this repo:
CONTRIBUTING.md
I will be happy to assist you at any stage, if you want to try to solve this issue! If you have any question, just leave a comment below. Beginners are also welcome! š¤
Issue Analytics
- State:
- Created 5 years ago
- Comments:23 (23 by maintainers)
Top GitHub Comments
Maybe you could put in some non js code and you should get some syntax error or insert
process.exit(1)
somewhere in the code.Iāll look to work on this soon! Got a busy week ahead of me š