Skip to content

outdated http-proxy-agent version #7838

@mfulton26

Description

@mfulton26

http-proxy-agent is on version 8 now; can that be updated to avoid multiple versions of package for consuming codebases, security issues, etc.?

security example: GHSA-vpq2-c234-7xj6 (via http-proxy-agent@5.0.0 which pulls in @tootallnate/once@2.0.0)

It looks like this is partially resolved but not completely:

  1. "teeny-request@10" now uses version 7 (which is closer to 8 than 5 is):
    "http-proxy-agent": "^7.0.0",
  2. "google-cloud/gapic-generator" still uses "teeny-request@9" but if it were updated to use "teeny-request@10" then it too and the generated packages would all be udpated

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions