Security vulnerabilities or End of Life report for Debug library

[kapilbang]

Debug library

| | -- react-dev-utils@12.0.1 | | -- detect-port-alt@1.1.6
| | `-- debug@2.6.9

debug 2.6.9 is End of Life

@kapilbang debug@2.6.9 is outdated (released 2017) and has known vulnerabilities in later versions (CVE-2017-16137, CVE-2025-27141). However, react-dev-utils@12.0.1 is itself deprecated, as create-react-app is no longer actively maintained (the repository is archived). The recommendation is to migrate away from create-react-app to modern alternatives like Vite, Next.js, or Remix. If migration is not possible, the debug dependency can be overridden using npm overrides in package.json:

"overrides": {
  "debug": "4.4.0"
}

This forces the latest version of debug to be used across all dependencies. Note that this may not resolve all EOL issues, but it addresses the known vulnerabilities.