Skip to content

tfjs-models npm packages have incorrectly defined dependencies #8593

@pranavosu

Description

@pranavosu

Please make sure that this is a build/installation issue. As per our GitHub Policy, we only address code/doc bugs, performance issues, feature requests and build/installation issues on GitHub. tag:build_template

System information

Describe the problem
Some of the packages in the tfjs-models repo have transitive dependencies on rimraf > glob > inflight. inflight has a security issue explained here This prevents consumers installing @tensorflow-models/face-detection or a few other models.

Provide the exact sequence of commands / steps that you executed before running into the problem

  • npm i @tensorflow-models/face-detection@latest
  • npm explain inflight
  • affected version of inflight in the dependency tree

Any other info / logs
I've created a PR to fix this issue for package consumers - tensorflow/tfjs-models#1543

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions