npm install edgemicro => crypto@0.0.3: This package is no longer supported - security issue?

[francois-xavier]

Hello,

I am starting to play with edgemicro-alpha, I have filled this GH.com issue: https://github.com/apigee-internal/microgateway/issues/142

Is EMG exposed to any security issue given this outdated/deprecated dependency?

[Former Community Member]

I have already updated this. It is in the new PR for MG: https://github.com/apigee-internal/microgateway/pull/140

[francois-xavier]

Was this outdated external crypto a transitive dependency from another package?