Repository navigation
react_native/codegen dependency glob is deprecated. #51474
Description
Description
glob ^7 is deprecated and itself requires a deprecated package of inflight that has a security bulletin out on it.
It should be updated to version 9, at the least, if not all the was to current version 11. See:
https://www.npmjs.com/package/glob?activeTab=versions
Facebook security replied that they didn't consider this a security issue, so posting it publicly.
Steps to reproduce
React Native Version
0.79.2
Affected Platforms
Build - Linux, Build - MacOS
Output of npx @react-native-community/cli info
na
Stacktrace or Logs
na
MANDATORY Reproducer
Screenshots and Videos
No response
Activity
react-native-bot commentedon May 20, 2025
Warning
Missing reproducer: We could not detect a reproducible example in your issue report. Reproducers are mandatory and we can accept only one of those as a valid reproducer:
You can read more about about it on our website: How to report a bug.
cortinico commentedon May 21, 2025
See #48875
cc @huntie @byCedric to eventually move that PR further
Lionhunt3r commentedon Jul 16, 2025
Are there any news on this issue?
@cortinico @huntie @byCedric
Lionhunt3r commentedon Sep 25, 2025
How is it here? @cortinico @huntie @byCedric
cortinico commentedon Sep 25, 2025
Please do not ping us multiple times @Lionhunt3r.
The latest updates on this are here:
glob@7toglob@10to resolve deprecation warnings #48875react-native-bot commentedon Mar 25, 2026
This issue is stale because it has been open 180 days with no activity. Remove stale label or comment or this will be closed in 7 days.
react-native-bot commentedon Sep 22, 2026
This issue is stale because it has been open for 180 days with no activity. It will be closed in 7 days unless you comment on it or remove the "Stale" label.
react-native-bot commentedon Sep 29, 2026
This issue was closed because it has been stalled for 7 days with no activity.