Skip to content

[Breaking Change] mout.js removal

Compare
Choose a tag to compare
@johnbastian-trayio johnbastian-trayio released this 30 Jun 13:39

Due to vulnerabilities with mout.js, the dependency has been removed (and internal code refactored to use code copied over from mout as short-term solution).

However, since falafel exposed mout on the global level, the removal of this dependency is a breaking change for any connectors that was using mout. For connectors upgrading to this version of falafel or later, there are two ways forward:

  1. include mout as a dependency in the connector's package.json, assuming mout have patched the vulnerability (fastest fix, but persists dependency on mout)
  2. replace all instances of mout with native, custom, or lodash implementations (recommended, but beware lodash methods don't always the same implementations as mout; best to check beforehand the underlying code between the two libraries, instead of assuming parity)