npm deprecated warnings – do I need to update some

Question

After doing npm install to fetch a project's dependencies, I regularly get a lot messages like this:

npm WARN deprecated lodash@1.0.2: lodash@<2.0.0 is no longer maintained. Upgrade to lodash@^3.0.0

Obviously I don't understand node good enough to conclude what I should do – the project doesn't even include lodash directly.

Do I need to update something on my side? Or is it the package maintainers task?

Answer 1

In general that is the package maintainer's task. You could open an issue on their github repo (if it is on github) and even better would be to make a pull request with the internal dependencies updated.