Deprecated modules installed when creating new project with npm create @quick-start/electron@latest (as per documentation).

[DANser-freelancer]

Describe the bug

Not exactly a bug. I ran npm install -D vite, npm i electron-vite -D, npm create @quick-start/electron@latest, vanilla with electron updater, changed directory, ran npm i. It installed lots of stuff but I got several warns and a vulnerability:

• _npm warn deprecated [email protected]: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
• npm warn deprecated @humanwhocodes/[email protected]: Use @eslint/config-array instead
• npm warn deprecated [email protected]: Rimraf versions prior to v4 are no longer supported
• npm warn deprecated [email protected]: Glob versions prior to v9 are no longer supported
• npm warn deprecated @humanwhocodes/[email protected]: Use @eslint/object-schema instead_

high severity vulnerability:

electron-updater <=6.3.0-alpha.5
Severity: high
electron-updater Code Signing Bypass on Windows - GHSA-9jxc-qjr9-vjxq
fix available via npm audit fix
node_modules/electron-updater

I assume it's because you're using deprecated modules, couldn't be me, the directory didn't even exist before it got created as a new project so I couldn't influence modules install list.
Can you.. idk upgrade electron-vite? Seems like a boatload of issues built into the project start before I even code anyhting myself.

Electron-Vite Version

2.3.0

Electron Version

30.4.0

Vite Version

5.4.2

Validations

• Follow the Code of Conduct.
• Read the Contributing Guidelines.
• Read the docs.
• Check that there isn't already an issue that reports the same bug to avoid creating a duplicate.

[thisislvca]

Most of those deprecated dependencies don't get bundled with the app, and are only used by electron-builder.

Here's the related issue in their repo.