DeprecationWarning: url.parse()

[selison-blue-eye]

(node:2371) [DEP0169] DeprecationWarning: url.parse() behavior is not standardized and prone to errors that have security implications. Use the WHATWG URL API instead. CVEs are not issued for url.parse() vulnerabilities.

[zimeg]

Hey @selison-blue-eye! 👋 Thanks for sharing this warning that CVEs might not surface 🔏

Earlier comments note that this appears alongside the webhook techniques which make use of the axios package that requires a version of follow-redirects using this feature:

 parsed = validateUrl(url.parse(input));

Let's keep this issue open with plans to remove these dependencies to prefer the fetch API for making HTTP requests or the @slack/webhook package 🎁

[zimeg]

The fix landed and was released in @v3.0.2 - @selison-blue-eye thank you for sharing this note once again! 🍿