Help keeping up with threejs

[bwlewis]

The threejs library changes frequently in non-backwards compatible ways. Fortunately there is a well-documented version migration synopsis: https://github.com/mrdoob/three.js/wiki/Migration-Guide

The pacakge currently uses r111, current release is r132. I can use JavaScript-expert help to update the package if anyone is interested and has time!

Thanks,

Bryan

[hedsnz]

Hi @bwlewis,

If you're able to get it up to date, I'm interested in helping to keep it that way. (I just think the jump from r111 to r144 will be too large for me to handle without being familiar with the codebase.)

There are several security issues with the version of three.js in this package (e.g., https://nvd.nist.gov/vuln/detail/CVE-2020-28496) so I'd be keen to help keep it up to date if that initial work can be done.

Cheers

[bwlewis]

Thanks for reminding me to keep on top of this. Previous threejs updates have mostly been straightforward. I will investigate an update and keep you informed on this thread.

…

--bryan

On Sun, Sep 11, 2022 at 5:01 PM Hedley ***@***.***> wrote: Hi @bwlewis <https://github.com/bwlewis>, If you're able to get it up to date, I'm interested in helping to keep it that way. (I just think the jump from r111 to r144 will be too large for me to handle without being familiar with the codebase.) There are several security issues with the version of three.js in this package (e.g., https://nvd.nist.gov/vuln/detail/CVE-2020-28496) so I'd be keen to help keep it up to date if that initial work can be done. Cheers — Reply to this email directly, view it on GitHub <#95 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AABCZHRHH7LLVTKNQ4TCCT3V5ZCDDANCNFSM5DCOJEPQ> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[hedsnz]

Hi @bwlewis, just checking in on this -- any progress?