Out of date dependencies

[emilushi]

Please update dependencies decompress and download to latest version because they require gulp-util which is depreciated.

Thanks!

[dewrox]

https://medium.com/gulpjs/gulp-util-ca3b1f9f9ac5

[emilushi]

@dewrox I have seen it, but bin-build has old version of decompress and download on its dependencies and they were using gulp-util.

[pratomchaip]

The current version of download being used ^6.2.2 also has a sub-dependency of tunnel-agent, which contains a Memory Exposure vulnerability.
download > caw > tunnel-agent

https://nodesecurity.io/advisories/598

[gonzalob]

download < 11.8.5 also drags GHSA-pfrx-2q88-qq97

[ansf]

@kevva any updates on this?

is this project still maintained?