# JS Dependencies

Firstly looking through the alerts a couple now say:

* "No security update is needed as kind-of is no longer vulnerable"
* "No security update is needed as ansi-regex is no longer vulnerable"

These a updates that may be useful, the main one being `css-loader` as it's so old.

* `superagent` need bumping. App is using `^2.2.0` and latest is `8.0.0`
* `flux` could be bumped from `^3.1.1` to `4.0.3`
* `css-loader` needs a major bump from `1.0.0` to `6.7.1` that needs some webpack config changes too.

Some of the other issues are with dependencies of dependencies. Always a pain. One thing that make fixing some of these easier is by upgrading npm in the docker image. I think it's using 6.14.17 whilst 8.18.0 is the latest. Version 8 gives the user many more options for fixing dependency issues.