NPM package includes an old dependency of node-forge

[maorizenberg]

I've extracted firebase-admin-10.0.1.tgz and found that inside package.json there's a dependency of "node-forge": "^0.10.0"

It should be the newer version as in current Github rep
firebase-admin-10.0.1.zip
o

[google-oss-bot]

I found a few problems with this issue:

• I couldn't figure out how to label this issue, so I've labeled it for a human to triage. Hang tight.
• This issue does not seem to follow the issue template. Make sure you provide all the required information.

[kaldenswart]

+1

[kaldenswart]

It seems like node-forge was bumped to 1.0.0 but only on 1/10/2022 and firebase-admin 10.0.1 was released December 2021. Think we going to have to sit and wait for the next release.

[tocak]

any manual solution we can do while we wait for the release?

[lahirumaramba]

Thank you for your patience!
We just released a patch with node-forge version bump. The update #1533 is included in v10.0.2.