Security vulnerability: extend 3.0.1 module in web3-bzz

[dwalintukan]

Description

Using 1.0.0-beta.54 Github complains of a security vulnerability in the extend 3.0.1 module which is being used by [email protected] -> [email protected] -> [email protected] -> [email protected] -> [email protected] -> extend 3.0.1.

Expected behavior

No security vulnerability warning in Github.

Actual behavior

Versions

• web3.js: 1.0.0-beta.54

[nivida]

Thanks for opening this issue! I've contacted yesterday the creator of the swarm-js dependency we use. He told me that the swarm-js package is no longer maintained and do not get any new version. The swarm team itself was once opening issues here to remove the bzz module and I think this will be the current solution. (I will later re-implement the bzz module)