Still using glob-watcher@5.0.5, which still uses chokidar@2.1.8
richardtallent-erm opened this issue · comments
glob-watcher 6 has been updated for some time to use chokidar 3.x, but gulp is still using glob-watcher 5.
This results in a message with every npm install:
npm WARN deprecated chokidar@2.1.8: Chokidar 2 does not receive security updates since 2019. Upgrade to chokidar 3 with 15x fewer dependencies
It appears gulp is completely dead, but if someone is still watching this repo, it would be nice to have this dependency bumped so we no longer receive this message.
It's unfortunate that you are completely clueless. Glob-watcher is our project and we're very aware of everything you've stated. Major releases contain breaking changes and we're working towards integrating everything into gulp 5.
Next time maybe do some more research before complaining about things you know nothing about.
Your tone is unnecessary.
I'm looking at the gulp repository for gulp and see virtually no activity. The last commit was 2 years ago, and most of the "recent" history is 5+ years old. All public branches are even older. The last mention of "gulp 5" on Twitter is about a year and a half ago.
So if gulp 5 is under active development, it's news to me.
And yes, I'm aware that glob-watcher is your project -- which is why I'm surprised that you haven't patched gulp 4 to keep it up to date with that dependency.
Gulp is 25 lines of glue code and 65 underlying modules that we've written and maintain, so you will have to do more than a cursory look at commits in this repository to see all of the active development.
We follow strict semver, so breaking changes have to be released as a major.
Gulp is stable software, and we are a couple active maintainers doing it in our spare time. So don't come into the project the way you did.