grawk/dustjs-security-upgrades.md

Created September 16, 2020 16:39

Star (0) You must be signed in to star a gist
Fork (0) You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/grawk/42c8b8e3ccafbfeda0fa80189cf7c237.js"></script>
Save grawk/42c8b8e3ccafbfeda0fa80189cf7c237 to your computer and use it in GitHub Desktop.

Download ZIP

Raw

dustjs-security-upgrades.md

Problem statement

Dust.js libraries need security patches for NPM dependencies. Currently not maintained/published by anyone.

Modules

https://github.com/linkedin/dustjs (https://www.npmjs.com/package/dustjs-linkedin)
https://github.com/linkedin/dustjs-helpers (https://www.npmjs.com/package/dustjs-helpers)
https://github.com/linkedin/dustjs-filters-secure (doesn't appear to be used or published)

Needed

merge access on two active repos above, or LinkedIn engineer for the same
publish rights on three npm modules associated to above, or LinkedIn engineer for the same

Need to announce final EOL notice for Dust.js support

Can be announced internally at PayPal only, but would signal end of PayPal's updates to the open source modules as well.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment