Hi,
this is a suggestion to replace the deprecated fs-promise package with Node.js’s native fs/promises module.
The fs-promise package has been unmaintained since 2017 and could pose security risks. Node.js has offered a fully supported, Promise-based fs API since version 10. Removing the dependency would reduce the overall attack surface and simplify the codebase by relying on built-in functionality.
Some key concerns with continuing to use fs-promise include:
Lack of security patches or updates for years
Use of outdated dependencies (e.g., bluebird)
Switching to fs/promises would improve long-term maintainability, security, and performance.
Hi,
this is a suggestion to replace the deprecated fs-promise package with Node.js’s native fs/promises module.
The fs-promise package has been unmaintained since 2017 and could pose security risks. Node.js has offered a fully supported, Promise-based fs API since version 10. Removing the dependency would reduce the overall attack surface and simplify the codebase by relying on built-in functionality.
Some key concerns with continuing to use fs-promise include:
Lack of security patches or updates for years
Use of outdated dependencies (e.g., bluebird)
Switching to fs/promises would improve long-term maintainability, security, and performance.