Skip to content
This repository was archived by the owner on Oct 24, 2025. It is now read-only.
This repository was archived by the owner on Oct 24, 2025. It is now read-only.

Update rimraf dependency #846

Description

@brittag

Is there an existing issue for this?

  • I have searched existing issues, it hasn't been reported yet

Use case description

My team is required to run Snyk vulnerability scanning on our dependencies, and Snyk highlights the following series of dependencies:

serverless-python-requirements@6.1.0 › rimraf@3.0.2 › glob@7.2.3 › inflight@1.0.6

Inflight (https://www.npmjs.com/package/inflight) brings up a vulnerability finding in Snyk (https://security.snyk.io/vuln/SNYK-JS-INFLIGHT-6095116) and is also deprecated:

This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.

Proposed solution (optional)

There are newer versions of rimraf (https://github.com/isaacs/rimraf) available that require newer versions of glob, which don't have the transitive dependency on inflight.

Note that to remove inflight entirely, this related issue would also need to be addressed: #495

I understand that this may be a lower priority task, just noting it for consideration. Thank you!

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions