express-oauth-server > oauth2-server > lodash

[dmouse]

Lodash needs to be updated

[kernelzilla]

Looks good, this will help resolve npm audit failures.

[tobyhinloopen]

Guess I just fork this branch so I can use it in my package.json. Thank you @dmouse

Others can do the same:

1. Open @dmouse 's patch on his github: https://github.com/dmouse/express-oauth-server/tree/patch-1
2. Fork it to prevent further (possibly malicious or broken) commits to be pulled in automatically
3. Add your fork to your package.json: (example; replace my username with yours) "express-oauth-server": "tobyhinloopen/express-oauth-server#patch-1",
4. Comment here to let @mjsalinger know you're waiting to get something like this merged

[Milad]

Are we going to merge this any time soon?

[waspeer]

+1

[KGALLET]

+1 also

[dmouse]

I sent an email to one of maintainers 🤞

[nirman28]

+1

[jagers]

@dmouse The Travis CI build is failing

[latzo87]

+1

[viclec]

Do we have any news?

[ellisium]

Is it maintained? 2 years to update lodash version 0_o

[Milad]

This is a small package. You can still write your own Express wrapper around node-oauth2-server which seems to be somehow maintained. https://github.com/oauthjs/node-oauth2-server/releases