migrate to mkdirp v1 about node-portfinder HOT 9 CLOSED

how about dropping it and use nodes built in mkdir (recursive option) instead?

from node-portfinder.

how about dropping it and use nodes built in mkdir (recursive option) instead?

we have to support node 0.10.x - that said - neither of the above (built in mkdir or promises) can be merged in...

I'm not fully understanding the reasoning here but skimming through some older comments it seems to be related to embedded machines running older node versions? Correct me if I'm wrong though.

My two cents about this is that some systems are using older nodejs versions and will not / cannot update but they would probably not update portfinder either? I suggest to release a new breaking 2.0.0 release dropping support for older nodejs versions and if needed critical bugfixes could be backported to v1 while v2 could be kept a bit more modern.

mkdirp can be replaced since Node 10 and Node 10 is so old by now it is end-of-life already (since a year ago). Node 0.10.x is almost 6 years after EOL.

from node-portfinder.

how about dropping it and use nodes built in mkdir (recursive option) instead?

we have to support node 0.10.x - that said - neither of the above (built in mkdir or promises) can be merged in...

is there a security issue here or just 'lets keep node modern' which is totally legit, just not with this lib unfortunately

open to discussion if there is a reason outside of staying modern...

from node-portfinder.

lets keep node modern

it's rather 'lets not depend on deprecated things'

from node-portfinder.

... and use less dependencies and making it smaller

from node-portfinder.

I actually feel the same way and have opened an issue (that I need to clean up b/c it was a brain dump) #122

perhaps it should just say:

'lets not depend on deprecated things'

at least that's what I am trying to say, in a very round about way :)

from node-portfinder.

You should consider updating mkdirp at least to a version that fixes GHSA-xvch-5gv4-984h. See:

isaacs/node-mkdirp#27
https://github.com/substack/minimist/issues/164

from node-portfinder.

mkdirp has a new 0.5.6 version with updated minimist dependency. It should fix the issue for now.

from node-portfinder.

@see #131

also minimist has been updated tonight, it will go out in the next release this week.

from node-portfinder.