apolloconfig/apollo

Upgrade vendor libraries to avoid potential security issues

Open

#4,016 opened on Oct 7, 2021

View on GitHub
 (11 comments) (0 reactions) (0 assignees)Java (10,177 forks)batch import
help wanted

Repository metrics

Stars
 (29,769 stars)
PR merge metrics
 (Avg merge 3d 18h) (8 merged PRs in 30d)

Description

Is your feature request related to a problem? Please describe. The vendor libraries used in apollo are out-dated(Bootstrap v3.3.5, jQuery 2.2.4, AngularJS v1.5.1, etc), which means potential security issues, e.g. https://snyk.io/test/npm/bootstrap/3.3.5

Describe the solution you'd like Upgrade the vendor libraries to recent versions

Contributor guide

Research direction
Upgrade the vendor libraries (Bootstrap, jQuery, AngularJS) to recent versions. Check for breaking changes and update any deprecated API usage in the frontend code. Run existing tests and manually verify the UI.
Tech stack
javajavascript
Domain
backendfrontend
Issue type
Security
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
GitJavaScriptMaven or Gradle
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
65