Epic

There are currently only a handful of production dependencies in npm that are outdated. This is our plan for getting them updated if possible.

• env-paths

  • required by node-gyp and will be updated in the next semver major of node-gyp (needs an engines update and is waiting on node 20 EOL I believe.

• iconv-lite

  • required through encoding by minipass-fetch.
  • move from encoding to iconv-lite minipass-fetch#181

• err-code and retry

  • required by promise-retry, which is used by:
    • pacote Update to newer promise-retry library pacote#449
    • make-fetch-happen Update to newer promise-retry library make-fetch-happen#340
    • libnpmexec Update to newer promise-retry library cli#9008
    • @npmcli/git Update to newer promise-retry library git#234
    • @sigstore/sign new promise-retry library sigstore/sigstore-js#1578
  • This package appears abandoned and the maintainer has no recent activity in github.
  • A fork was made and we are moving to it.

• minipass and yallist

  • required by minipass-flush and minipass-pipeline.
  • Update minipass isaacs/minipass-flush#15
  • Update minipass isaacs/minipass-pipeline#17