You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
moment (maintenance mode; 2 files + the react-big-calendar localizer) → migrate to a maintained date lib when CalendarWidget is next reworked (the feat: good mobile view - Phase 2 - main application #118 mobile agenda view is the natural moment), not as standalone churn.
react-color 2.19.3 (unmaintained since ~2021; 2 files) → swap to @uiw/react-colorwhen the color picker is next touched.
ical-generator 10→11 (major; Node 22/24 only — fine on the new node:24-slim image; used only by the ICS export endpoint) → optional, take it with a test pass or leave it.
Suggested standing policy
Act only when: (a) npm audit flags anything, (b) a package on the external-input list above falls a major behind, or (c) a dep actually used in the app goes officially EOL/deprecated. Everything else may drift freely. That replaces this issue's blanket ask — recommend keeping wontfix on the general bump (or closing once Tier 1 lands).
Watch-list (act on trigger, not on schedule)
moment(maintenance mode; 2 files + the react-big-calendar localizer) → migrate to a maintained date lib when CalendarWidget is next reworked (the feat: good mobile view - Phase 2 - main application #118 mobile agenda view is the natural moment), not as standalone churn.react-color2.19.3 (unmaintained since ~2021; 2 files) → swap to@uiw/react-colorwhen the color picker is next touched.ical-generator10→11 (major; Node 22/24 only — fine on the new node:24-slim image; used only by the ICS export endpoint) → optional, take it with a test pass or leave it.Suggested standing policy
Act only when: (a)
npm auditflags anything, (b) a package on the external-input list above falls a major behind, or (c) a dep actually used in the app goes officially EOL/deprecated. Everything else may drift freely. That replaces this issue's blanket ask — recommend keepingwontfixon the general bump (or closing once Tier 1 lands).