here-be / snapdragon

time to modernize it?

@jonschlinkert @doowb @danez is this package still maintained? It seems to have a lot of vulnerable and deprecated dependencies. It doesn't seem to be active anymore but does have a lot of projects using it.

These vulnerabilities aren’t vulnerabilities.

…

Sent from my iPhone

On Nov 29, 2021, at 6:40 AM, Jason Williams ***@***.***> wrote: @jonschlinkert @doowb is this package still maintained? It seems to have a lot of vulnerable and deprecated dependencies. It doesn't seem to be active anymore but does have a lot of projects using it. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.

if you bump

snapdragon/package.json

Lines 22 to 24 in fb340c5

    
           "engines": { 
        
             "node": ">=0.10.0" 
        
           },

to something like the current LTS, then i will help out with som PR

Drop support for older versions