Version 7.0.0 results in security vulnerability and deprecation warnings about natural HOT 8 CLOSED

Thanks, I will take a look.

from natural.

It is 'lint' causing it, due to old request dependencies.
Lint should probably be a devDepencency

from natural.

Thanks @ildella. The warnings are caused by lint:

$ npm install -D lint
npm WARN deprecated [email protected]: Package is unsupport. Please use the lodash package instead.
npm WARN deprecated [email protected]: this library is no longer supported
npm WARN deprecated [email protected]: Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.
npm WARN deprecated [email protected]: request has been deprecated, see https://github.com/request/request/issues/3142

I moved lint to devDependencies. Warnings remain however.

from natural.

With 7.0.1 we have an install without warnings:

$ npm install natural

added 57 packages, and audited 58 packages in 6s

5 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities

from natural.

Thanks for releasing 7.0.1 @Hugo-ter-Doest.

I tried upgrading to it and the security vulnerability and deprecation warnings are gone.

However, the next issue I'm facing is that 7.0.1 includes @types/jasmine as a normal dependency which declares a bunch of global types (e.g. expect) that break my project compilation.

Shouldn't @types/jasmine also be a dev dependency?

Let me know if you want me to create a separate issue for this.

from natural.

Yes, this is a dev dependency. Will do so.

from natural.

Fixed in #738

from natural.

Great, working well for me again now @Hugo-ter-Doest. 👍

from natural.