Uploaded image for project: 'Atlassian Ecosystem'
  1. Atlassian Ecosystem
  2. ECO-712

Installing Forge CLI results in many npm warnings

XMLWordPrintable

    • Minor
    • Pre-deployment testing
    • M

      Issue Summary

      When installing Forge CLI with npm install -g @forge/cli many npm warnings are returned.

      Steps to Reproduce

      1. Run npm install -g @forge/cli

      Expected Results

      Forge installs with no warnings.

      Actual Results

      The below exception is thrown in the console:

      $ npm install -g @forge/cli
npm warn deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm warn deprecated gar@1.0.4: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
npm warn deprecated lodash.pick@4.4.0: This package is deprecated. Use destructuring assignment syntax instead.
npm warn deprecated npmlog@4.1.2: This package is no longer supported.
npm warn deprecated lodash.isequal@4.5.0: This package is deprecated. Use require('node:util').isDeepStrictEqual instead.
npm warn deprecated rimraf@3.0.2: Rimraf versions prior to v4 are no longer supported
npm warn deprecated are-we-there-yet@1.1.7: This package is no longer supported.
npm warn deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
npm warn deprecated glob@8.1.0: Glob versions prior to v9 are no longer supported
npm warn deprecated gauge@2.7.4: This package is no longer supported.
npm warn deprecated memfs@3.6.0: this will be v4changed 892 packages in 22s151 packages are looking for funding
  run `npm fund` for details

      Workaround

      Currently there is no known workaround for this behavior. A workaround will be added here when available

          Form Name

            [ECO-712] Installing Forge CLI results in many npm warnings

            Scott Dudley [Cenote] added a comment -

            Per Dan's comment above, although the deprecations are now gone, I am still seeing vulnerabilities on install:

            $ npm i @forge/cli@12.2.0

up to date, audited 771 packages in 2s

194 packages are looking for funding
  run `npm fund` for details

3 vulnerabilities (2 low, 1 critical)

            Scott Dudley [Cenote] added a comment - Per Dan's comment above, although the deprecations are now gone, I am still seeing vulnerabilities on install: $ npm i @forge/cli@12.2.0 up to date, audited 771 packages in 2s 194 packages are looking for funding run `npm fund` for details 3 vulnerabilities (2 low, 1 critical)
            Jacob Tan made changes -
            Resolution New: Fixed [ 1 ]
            Status Original: Waiting for Release [ 12075 ] New: Closed [ 6 ]

            Jacob Tan added a comment -

            This has now been fixed, see the CHANGELOG here: https://developer.atlassian.com/platform/forge/changelog/#CHANGE-2701

            Jacob Tan added a comment - This has now been fixed, see the CHANGELOG here: https://developer.atlassian.com/platform/forge/changelog/#CHANGE-2701
            Jacob Tan made changes -
            Status Original: In Progress [ 3 ] New: Waiting for Release [ 12075 ]
            jhaloot made changes -
            Workflow Original: JAC Bug Workflow v3 [ 4512198 ] New: JAC Bug Workflow v4 [ 4567202 ]
            Angelina Ignatova made changes -
            Status Original: Short Term Backlog [ 12074 ] New: In Progress [ 3 ]

            Dan Mercer added a comment -

            The ticket description left out the part about vulnerable dependencies, which is the other half of the problem here.

            27 vulnerabilities (3 low, 3 moderate, 19 high, 2 critical)

            Dan Mercer added a comment - The ticket description left out the part about vulnerable dependencies, which is the other half of the problem here. 27 vulnerabilities (3 low, 3 moderate, 19 high, 2 critical)
            Angelina Ignatova made changes -
            Assignee New: Angelina Ignatova [ cf6d969a1067 ]
            Einar Pehrson (Inactive) made changes -
            Remote Link Original: This issue links to "DEPLOY-359 (Jira)" [ 995547 ] New: This issue links to "DEPLOY-359 (Ecosystem Platform)" [ 995547 ]
            Liz Gibbs made changes -
            Development Effort New: M [ 13032 ]
            Preventable by New: Pre-deployment testing [ 19131 ]
            Status Original: Needs Triage [ 10030 ] New: Short Term Backlog [ 12074 ]

              cf6d969a1067 Angelina Ignatova
              jrichards@atlassian.com James Richards
              Affected customers:
              22 This affects my team
              Watchers:
              33 Start watching this issue

                Created:
                Updated:
                Resolved: