Package: node-webpack-merge Version: 2.2.0-6 Severity: important node-webpack-merge is at version 2.2.0 which was released in _2017_ The updatrem has moved to 5.8.0 which is several major versions ahead. It is in a bitrot currently. It has only one rev-dep -- node-jsonld.
node-jsonld's package.json states that it needs 4.2.1 of webpack-merge[1]. It is also now breaking some packages (node-mermaid for instance) with webpack5 since it expects webpack-merge to be updated accordingly. There is, FWIW also another "please update it" BR about the same[2] [1]: https://sources.debian.org/data/main/n/node-jsonld/4.0.1-1/package.json [2]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1000247 -- System Information: Debian Release: bookworm/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 5.14.0-2-amd64 (SMP w/8 CPU threads) Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages node-webpack-merge depends on: ii node-lodash 4.17.21+dfsg+~cs8.31.198.20210220-8 ii nodejs 16.13.2+really14.19.1~dfsg-6+b1 node-webpack-merge recommends no packages. node-webpack-merge suggests no packages.
