Deprecated transitive dependencies: koa-router, node-domexception, glob
Author: maximeboriesCreated Feb 8, 2026Updated Jun 6, 2026
Labelsbugrefactormedium-priorityarea:installation
Description
Installing or updating [email protected] globally produces several npm warn deprecated messages:
npm warn deprecated [email protected]: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
npm warn deprecated [email protected]: Please use @koa/router instead, starting from v9!
npm warn deprecated [email protected]: Use your platform's native DOMException instead
npm warn deprecated [email protected]: Old versions of glob are not supported, and contain widely publicized security vulnerabilitiesAffected dependency chains
| Deprecated Package | Chain |
|---|---|
[email protected] |
task-master-ai → fastmcp → mcp-proxy → pipenet → koa-router |
[email protected] |
task-master-ai → fastmcp → mcp-proxy → pipenet → koa → cookies → keygrip |
[email protected] |
task-master-ai → @ai-sdk/google-vertex → google-auth-library → gaxios → node-fetch → fetch-blob → node-domexception |
[email protected] |
task-master-ai → @ai-sdk/google-vertex → google-auth-library → gaxios → rimraf → glob |
Environment
- OS: Fedora Linux 43 (x86_64)
- Node: v22.x
- npm: 11.9.0
- task-master-ai: 0.43.0
Suggested fix
- Replace
koa-routerwith@koa/router(upstream: pipenet) - Update
google-auth-library/gaxiosto versions that no longer depend onnode-fetchand oldglob - Or bump the transitive dependencies that have already addressed these deprecations
Source: eyaltoledano/claude-task-master