dustjs-security-upgrades.md

Problem statement

Dust.js libraries need security patches for NPM dependencies. Currently not maintained/published by anyone.

Modules

• https://github.com/linkedin/dustjs (https://www.npmjs.com/package/dustjs-linkedin)
• https://github.com/linkedin/dustjs-helpers (https://www.npmjs.com/package/dustjs-helpers)
• https://github.com/linkedin/dustjs-filters-secure (doesn't appear to be used or published)

Needed

• merge access on two active repos above, or LinkedIn engineer for the same
• publish rights on three npm modules associated to above, or LinkedIn engineer for the same

Need to announce final EOL notice for Dust.js support

Can be announced internally at PayPal only, but would signal end of PayPal's updates to the open source modules as well.