Skip to main content

Migration Paths Directory

Explore proven migration paths for languages, frameworks, databases, and cloud platforms. Find complexity ratings, timelines, and recommended approaches.

LowFramework

.NET 8 to .NET 9 Migration

Dotnet 8Dotnet 9

Upgrade from .NET 8 LTS to .NET 9 with improved performance and new features

1-3 weeks
3 challenges
dotnetcsharpbackend+1
HighFramework

.NET Framework to .NET 8 Migration

Dotnet FrameworkDotnet 8

Modernize from .NET Framework to cross-platform .NET 8 (ASP.NET Core, modern configuration, updated dependencies)

1-6 months
3 challenges
dotnetcsharpbackend+2
HighFramework

.NET Framework to .NET 9 Migration

Dotnet FrameworkDotnet 9

Modernize from .NET Framework to cross-platform .NET 9 with updated dependencies and hosting

1-6 months
4 challenges
dotnetcsharpaspnet+2
MediumDatabase

Ad-hoc SQL to Flyway Migration

Manual SQLFlyway

Adopt Flyway for repeatable database schema migrations and environment parity

1-4 weeks
5 challenges
flywaydatabasemigrations+1
MediumDatabase

Ad-hoc SQL to Liquibase Migration

Manual SQLLiquibase

Adopt Liquibase changelogs for auditable, repeatable schema migrations

1-4 weeks
5 challenges
liquibasedatabasemigrations+1
MediumLanguage

Android Java to Kotlin Migration

Android JavaKotlin

Incrementally convert an Android codebase from Java to Kotlin

2-8 weeks
5 challenges
androidjavakotlin+1
HighFramework

Android Views to Jetpack Compose Migration

Android ViewsJetpack Compose

Migrate Android UI from XML Views to Jetpack Compose with incremental screen adoption

6-16 weeks
5 challenges
androidcomposeui+1
MediumFramework

Angular 17 to Angular 19 Migration

AngularAngular

Upgrade Angular 17 to 19 with new control flow and improved signals

2-4 weeks
3 challenges
angulartypescriptfrontend+1
HighFramework

AngularJS to Angular Migration

Angular JsAngular

Major migration from AngularJS (1.x) to modern Angular with TypeScript

2-6 months
3 challenges
angulartypescriptfrontend+1
HighFramework

ASP.NET MVC 5 to ASP.NET Core Migration

Aspnet MVC 5Aspnet Core

Migrate ASP.NET MVC 5 apps to ASP.NET Core (routing, middleware, DI, hosting) on modern .NET

4-16 weeks
5 challenges
aspnetmvcdotnet+2
HighFramework

ASP.NET Web API 2 to ASP.NET Core Migration

Aspnet Web API 2Aspnet Core

Migrate ASP.NET Web API 2 services to ASP.NET Core Minimal APIs or Controllers

4-16 weeks
5 challenges
aspnetweb-apidotnet+2
ExtremeFramework

ASP.NET Web Forms to ASP.NET Core Migration

Aspnet WebformsAspnet Core

Replace Web Forms with modern ASP.NET Core UI (Razor Pages/Blazor) and APIs

3-9 months
5 challenges
aspnetwebformsdotnet+2
MediumCloud

AWS EC2 to ECS Fargate Migration

AWS Ec2AWS Ecs Fargate

Move containerized services from EC2-managed hosts to ECS Fargate for serverless containers

2-8 weeks
5 challenges
awsec2ecs+2
HighCloud

AWS ECS to EKS Migration

AWS EcsKubernetes

Migrate container workloads from ECS to Kubernetes (EKS) with deployment and networking redesign

1-3 months
5 challenges
awsecseks+2
HighCloud

AWS to Azure Migration

AWSAzure

Multi-cloud migration from AWS to Azure

2-8 months
3 challenges
awsazuremulti-cloud+1
HighCloud

AWS to GCP Migration

AWSGCP

Migrate cloud workloads from AWS to Google Cloud with service mapping and IaC rework

2-6 months
5 challenges
awsgcpcloud+1
HighCloud

Azure Functions v3 to v4 (Isolated) Migration

Azure Functions V3Azure Functions V4 Isolated

Upgrade Azure Functions v3 apps to v4 isolated worker (net6+), updating bindings, startup, and middleware

2-8 weeks
5 challenges
azure-functionsdotnetserverless+2
MediumPlatform

CircleCI to GitHub Actions Migration

CircleciGitHub Actions

Migrate CircleCI configs to GitHub Actions workflows with caching and secrets mapping

1-4 weeks
5 challenges
circlecigithub-actionsci-cd+1
MediumPlatform

CloudFormation to Terraform Migration

CloudformationTerraform

Convert AWS CloudFormation templates to Terraform HCL

2-6 weeks
3 challenges
cloudformationterraformiac+1
ExtremeLanguage

COBOL to Java Migration

CobolJava 21

Mainframe COBOL modernization to Java microservices

6-24 months
3 challenges
coboljavamainframe+2
MediumLanguage

CommonJS to ES Modules Migration

CommonjsEsm

Migrate Node.js projects from CommonJS modules to ES Modules with build/test updates

1-4 weeks
5 challenges
nodejsjavascriptesm+1
MediumPlatform

Cordova to Capacitor Migration

CordovaCapacitor

Migrate Cordova apps to Capacitor with updated plugins and native project management

2-8 weeks
5 challenges
cordovacapacitormobile+3
MediumFramework

Create React App to Next.js Migration

Create React AppNext Js

Migrate a CRA app to Next.js with SSR/SSG options, routing changes, and data fetching updates

2-8 weeks
5 challenges
reactnextjsssr+2
MediumPlatform

Create React App to Vite Migration

Create React AppVite

Migrate a CRA React app to Vite with updated env vars, build config, and tooling

1-3 weeks
5 challenges
reactcreate-react-appvite+2
HighFramework

Django REST Framework to FastAPI Migration

Django REST FrameworkFastapi

Migrate DRF APIs to FastAPI with explicit schemas and new auth/middleware patterns

1-3 months
5 challenges
pythondjangodrf+2
MediumCloud

Docker Compose to ECS Fargate Migration

Docker ComposeAWS Ecs Fargate

Migrate local Docker Compose definitions to ECS Fargate tasks and services

2-6 weeks
5 challenges
docker-composeecsfargate+2
HighPlatform

Docker Compose to Kubernetes Migration

DockerKubernetes

Containerized application migration from Docker Compose to Kubernetes

2-8 weeks
4 challenges
dockerkubernetescontainers+1
HighCloud

Docker Swarm to Kubernetes Migration

Docker SwarmKubernetes

Migrate Swarm services to Kubernetes deployments, services, ingress, and config/secrets

4-12 weeks
5 challenges
dockerswarmkubernetes+2
HighPlatform

Drupal 7 to Drupal 10 Migration

Drupal 7Drupal 10

Upgrade Drupal 7 to Drupal 10 with content migration

2-6 months
4 challenges
drupalcmsphp+1
HighDatabase

DynamoDB to PostgreSQL Migration

DynamoDBPostgreSQL

Migrate DynamoDB single-table designs to relational PostgreSQL with new schema and access patterns

1-4 months
5 challenges
dynamodbpostgresqldatabase+2
MediumDatabase

Elasticsearch to OpenSearch Migration

ElasticsearchOpensearch

Migrate from Elasticsearch to AWS OpenSearch

2-6 weeks
3 challenges
elasticsearchopensearchsearch+1
HighFramework

Entity Framework 6 to EF Core Migration

Ef6Ef Core

Migrate Entity Framework 6 data access to EF Core with updated mappings and migrations

4-12 weeks
5 challenges
entity-frameworkef-coredotnet+2
MediumFramework

Express.js to Fastify Migration

ExpressFastify

Migrate Express middleware and routes to Fastify with schema validation and performance tuning

2-8 weeks
5 challenges
nodejsexpressfastify+2
MediumFramework

Express.js to NestJS Migration

ExpressNest Js

Migrate Express.js REST API to structured NestJS with TypeScript

2-8 weeks
3 challenges
nodejstypescriptexpress+2
MediumFramework

Flask to FastAPI Migration

FlaskFastapi

Migrate Python APIs from Flask to FastAPI with async support and OpenAPI-first contracts

2-8 weeks
5 challenges
pythonflaskfastapi+2
MediumFramework

Gatsby to Next.js Migration

GatsbyNext Js

Migrate a Gatsby site to Next.js with updated data fetching, routing, and image handling

2-8 weeks
5 challenges
gatsbynextjsreact+2
MediumPlatform

GitLab CI to GitHub Actions Migration

GitLab CiGitHub Actions

Migrate `.gitlab-ci.yml` pipelines to GitHub Actions workflows with runner and secret strategy

1-6 weeks
5 challenges
gitlab-cigithub-actionsci-cd+1
MediumPlatform

GraphQL to tRPC Migration

GraphQLTrpc

Migrate from GraphQL to type-safe tRPC endpoints

2-6 weeks
3 challenges
graphqltrpctypescript+1
MediumCloud

Heroku to AWS Migration

HerokuAWS

Migrate from Heroku PaaS to AWS infrastructure

2-6 weeks
3 challenges
herokuawspaas+1
MediumCloud

Heroku to GCP Cloud Run Migration

HerokuGCP Cloud Run

Migrate Heroku apps to Cloud Run with containerization, config, and managed services mapping

2-8 weeks
5 challenges
herokugcpcloud-run+1
MediumDatabase

Hibernate ddl-auto to Flyway Migration

Hibernate Ddl AutoFlyway

Replace Hibernate schema auto-generation with explicit Flyway migrations

2-6 weeks
5 challenges
hibernateflywaydatabase+1
MediumPlatform

Ionic (Cordova) to Capacitor Migration

Ionic CordovaIonic Capacitor

Migrate Ionic apps from Cordova to Capacitor with updated native builds and plugins

2-8 weeks
5 challenges
ioniccordovacapacitor+2
MediumLanguage

Java 8 to Java 17 Migration

Java 8Java 17

Upgrade Java runtime from 8 to 17, updating dependencies and build tooling

2-8 weeks
5 challenges
javajvmupgrade+1
LowLanguage

JavaScript to TypeScript Migration

JavaScriptTypeScript

Add TypeScript to existing JavaScript project for type safety

1-4 weeks
3 challenges
javascripttypescripttypes+1
MediumPlatform

Jenkins to GitHub Actions Migration

JenkinsGitHub Actions

Migrate CI/CD pipelines from Jenkins to GitHub Actions workflows with secrets and runner strategy

2-6 weeks
5 challenges
jenkinsgithub-actionsci-cd+1
HighFramework

jQuery to React Migration

JqueryReact 18

Replace jQuery-driven UI with React components, routing, and state management

1-4 months
5 challenges
jqueryreactfrontend+1
LowLanguage

jQuery to Vanilla JavaScript Migration

JqueryJavaScript

Replace jQuery with modern vanilla JavaScript using native APIs

1-2 weeks
3 challenges
jqueryjavascriptdom+1
LowFramework

Laravel 10 to Laravel 11 Migration

LaravelLaravel

Upgrade Laravel from 10 to 11 with new directory structure

1-2 weeks
3 challenges
laravelphpbackend+1
MediumDatabase

Liquibase to Flyway Migration

LiquibaseFlyway

Move from Liquibase changelogs to Flyway versioned SQL (or Java) migrations

2-6 weeks
5 challenges
liquibaseflywaydatabase+1
HighDatabase

MongoDB to DynamoDB Migration

MongoDBDynamoDB

Migrate MongoDB collections to DynamoDB with partition key design and access-pattern mapping

1-4 months
5 challenges
mongodbdynamodbnosql+2
HighDatabase

MongoDB to PostgreSQL Migration

MongoDBPostgreSQL

Convert NoSQL MongoDB to relational PostgreSQL with JSONB

1-4 months
3 challenges
mongodbpostgresqlnosql+1
HighDatabase

MySQL to Aurora PostgreSQL Migration

MySQLAurora PostgreSQL

Migrate MySQL to Aurora PostgreSQL including schema translation and cutover

1-3 months
5 challenges
mysqlaurorapostgresql+2
LowDatabase

MySQL to AWS Aurora MySQL Migration

MySQLAurora MySQL

Migrate self-managed MySQL to AWS Aurora MySQL

1-2 weeks
3 challenges
mysqlauroraaws+1
HighDatabase

MySQL to PostgreSQL Migration

MySQLPostgreSQL

Migrate MySQL schema and data to PostgreSQL, translating queries and tuning indexes

4-12 weeks
5 challenges
mysqlpostgresqldatabase+1
MediumFramework

Next.js 13 to Next.js 15 Migration

Next JsNext Js

Upgrade Next.js from 13 to 15 with App Router and React 19 support

2-6 weeks
3 challenges
nextjsreactfrontend+1
HighFramework

Next.js Pages Router to App Router Migration

Next Js Pages RouterNext Js App Router

Migrate from Next.js pages router to app router (layouts, server components, new data fetching)

4-12 weeks
5 challenges
nextjsreactapp-router+2
MediumPlatform

Node.js 14 to Node.js 18 Migration

Node 14Node 18

Upgrade Node.js runtime from 14 to 18, updating dependencies and ESM/CJS compatibility

1-4 weeks
5 challenges
nodejsruntimeupgrade+1
MediumPlatform

Node.js 16 to Node.js 20 Migration

Node 16Node 20

Upgrade Node.js runtime from 16 to 20 with dependency upgrades and runtime behavior validation

1-4 weeks
5 challenges
nodejsruntimeupgrade+1
LowRuntime

Node.js 18 to Node.js 22 Migration

Node 18Node 22

Upgrade Node.js runtime from 18 LTS to 22 LTS with new features

1-2 weeks
3 challenges
nodejsruntimejavascript+1
HighFramework

Nuxt 2 to Nuxt 3 Migration

NuxtNuxt

Migration from Nuxt 2 to Nuxt 3 with Vue 3 and Nitro server

1-3 months
3 challenges
nuxtvuessr+1
MediumLanguage

Objective-C to Swift Migration

Objective CSwift

Incrementally convert an iOS codebase from Objective-C to Swift

4-12 weeks
5 challenges
iosobjective-cswift+1
HighDatabase

On-Prem SQL Server to Azure SQL Migration

On Premise SQL ServerAzure SQL

Migrate on-prem SQL Server to Azure SQL with network, identity, and cutover planning

1-3 months
5 challenges
sql-serveron-premiseazure+2
HighCloud

On-Premise to AWS Migration

On PremiseAWS

Lift-and-shift or refactor on-premise infrastructure to AWS

3-12 months
4 challenges
awscloud-migrationinfrastructure+1
HighCloud

On-Premise to Azure Migration

On PremiseAzure

Migrate workloads from on-premise infrastructure to Microsoft Azure with landing zone and governance

2-6 months
5 challenges
on-premiseazurecloud+1
HighCloud

On-Premise to GCP Migration

On PremiseGCP

Migrate workloads from on-premise to Google Cloud with shared VPC, IAM, and phased cutovers

2-6 months
5 challenges
on-premisegcpcloud+1
HighDatabase

Oracle Database to SQL Server Migration

Oracle DBSQL Server

Migrate Oracle schemas and PL/SQL workloads to SQL Server with T-SQL translation and operational redesign

2-6 months
5 challenges
oraclesql-serverdatabase+1
HighDatabase

Oracle to PostgreSQL Migration

Oracle DBPostgreSQL

Migrate Oracle Database to PostgreSQL with PL/SQL conversion

2-6 months
4 challenges
oraclepostgresqldatabase+1
HighLanguage

PHP 5 to PHP 8 Migration

PhpPhp

Upgrade legacy PHP 5 codebases to PHP 8 with framework/library modernization

4-16 weeks
5 challenges
phpupgradelegacy+1
MediumLanguage

PHP 7 to PHP 8 Migration

PhpPhp

Upgrade PHP 7 codebases to PHP 8 with dependency updates and compatibility testing

2-8 weeks
5 challenges
phpupgradebackend
HighDatabase

PostgreSQL 12 to PostgreSQL 16 Migration

PostgreSQLPostgreSQL

Major-version upgrade PostgreSQL 12 → 16 with extension checks, replication/cutover, and performance validation

1-6 weeks
5 challenges
postgresqlupgradedatabase+1
MediumDatabase

PostgreSQL to Aurora PostgreSQL Migration

PostgreSQLAurora PostgreSQL

Move PostgreSQL to managed Aurora PostgreSQL with minimal downtime using replication

2-8 weeks
5 challenges
postgresqlauroraaws+2
MediumLanguage

Python 2 to Python 3 Migration

Python 2Python 3

Migrate Python 2 codebase to Python 3 with modern syntax

2-8 weeks
4 challenges
pythonlegacymodernization
MediumLanguage

Python 3.8 to Python 3.12 Migration

Python 3Python 3

Upgrade Python runtime and dependencies from 3.8 to 3.12 with test-driven validation

1-4 weeks
5 challenges
pythonruntimeupgrade+1
MediumFramework

Rails 6 to Rails 7 Migration

Rails 6Rails 7

Upgrade a Rails 6 app to Rails 7, addressing breaking changes and updating JS/CSS tooling

2-6 weeks
5 challenges
railsrubyupgrade+1
LowFramework

React 18 to React 19 Migration

React 18React 19

Upgrade to React 19 with Server Components, Actions, and use() hook

1-2 weeks
3 challenges
reactserver-componentsfrontend+1
MediumFramework

React Class Components to Hooks Migration

React 16React 19

Convert React class components to functional components with hooks and Server Components

1-4 weeks
4 challenges
reacthooksfunctional-components+1
MediumFramework

React Native CLI to Expo Migration

React Native CLIExpo

Move a React Native app to Expo (managed workflow) with config plugins and build pipeline changes

2-6 weeks
5 challenges
react-nativeexpomobile+2
HighFramework

React Native to Flutter Migration

React NativeFlutter

Migrate a React Native app to Flutter with staged feature parity and shared API contracts

2-6 months
5 challenges
react-nativefluttermobile+1
MediumFramework

React Router v5 to v6 Migration

React Router 5React Router 6

Upgrade routing from React Router v5 to v6 (Routes, element prop, navigate APIs, relative routing)

1-4 weeks
5 challenges
reactreact-routerfrontend+2
LowDatabase

Redis to Valkey Migration

RedisValkey

Migrate from Redis to open-source Valkey fork

1-2 weeks
3 challenges
redisvalkeycache+1
MediumFramework

Redux to Redux Toolkit Migration

ReduxRedux Toolkit

Migrate Redux code to Redux Toolkit slices, async thunks, and modern store configuration

1-4 weeks
5 challenges
reactreduxredux-toolkit+1
MediumPlatform

REST API to GraphQL Migration

RESTGraphQL

Convert REST APIs to GraphQL schema with resolvers

1-3 months
3 challenges
restgraphqlapi+1
MediumFramework

Spring Boot 2 to Spring Boot 3 Migration

Spring Boot 2Spring Boot 3

Upgrade Spring Boot 2.x to 3.x with Java 17+ and Jakarta EE

2-6 weeks
3 challenges
springjavajakarta+1
HighFramework

Spring MVC to Spring WebFlux Migration

Spring MVCSpring Webflux

Migrate Spring MVC apps to reactive Spring WebFlux where it provides clear value

6-16 weeks
5 challenges
springjavawebflux+2
HighDatabase

SQL Server to Aurora PostgreSQL Migration

SQL ServerAurora PostgreSQL

Migrate SQL Server to Aurora PostgreSQL with T-SQL rewrites and managed Postgres operations

1-4 months
5 challenges
sql-serveraurorapostgresql+2
MediumDatabase

SQL Server to Azure SQL Migration

SQL ServerAzure SQL

Move SQL Server workloads to Azure SQL with compatibility checks and operational runbooks

2-8 weeks
5 challenges
sql-serverazureazure-sql+2
HighDatabase

SQL Server to PostgreSQL Migration

SQL ServerPostgreSQL

Migrate from SQL Server to PostgreSQL including stored procedures

1-3 months
4 challenges
sql-serverpostgresqldatabase+1
MediumDatabase

SQLite to PostgreSQL Migration

SqlitePostgreSQL

Migrate an app from embedded SQLite to PostgreSQL for concurrency, HA, and operational tooling

1-4 weeks
5 challenges
sqlitepostgresqldatabase+1
MediumFramework

Svelte 4 to Svelte 5 Migration

Svelte 4Svelte 5

Migrate to Svelte 5 with runes and improved reactivity

2-6 weeks
3 challenges
sveltefrontendrunes+1
LowPlatform

Terraform to OpenTofu Migration

TerraformOpentofu

Migrate from HashiCorp Terraform to open-source OpenTofu

1-3 days
3 challenges
terraformopentofuiac+1
MediumPlatform

Terraform to Pulumi Migration

TerraformPulumi

Migrate IaC from Terraform HCL to Pulumi using general-purpose languages and state import

2-8 weeks
5 challenges
terraformpulumiiac+1
LowLanguage

TypeScript 4 to TypeScript 5 Migration

TypeScriptTypeScript

Upgrade TypeScript from 4.x to 5.x and resolve type-checking and build-tool compatibility issues

1-2 weeks
5 challenges
typescriptupgradefrontend+1
HighFramework

UIKit to SwiftUI Migration

UikitSwiftui

Incrementally migrate iOS UI from UIKit to SwiftUI using hosting controllers and shared navigation patterns

6-20 weeks
5 challenges
iosuikitswiftui+2
HighCloud

VMs to Kubernetes Migration

Virtual MachinesKubernetes

Containerize and migrate VM-hosted apps to Kubernetes with health checks, scaling, and deployment automation

1-4 months
5 challenges
kubernetescontainersmigration+1
MediumFramework

Vue 2 to Vue 3 Migration

Vue 2Vue 3

Migrate from Vue 2 Options API to Vue 3 Composition API with improved TypeScript support and performance enhancements

2-8 weeks
6 challenges
vuefrontendcomposition-api+2
MediumFramework

Vuex to Pinia Migration

VuexPinia

Migrate Vuex stores to Pinia with updated module patterns and TypeScript-friendly APIs

1-4 weeks
5 challenges
vuevuexpinia+1
HighFramework

WCF to gRPC Migration

WcfgRPC

Replace WCF services with gRPC contracts, implementations, and client stubs

4-12 weeks
5 challenges
wcfgrpcdotnet+2
MediumPlatform

Webpack to Vite Migration

WebpackVite

Migrate build tooling from Webpack to Vite for faster development

1-4 weeks
3 challenges
webpackvitebundler+1
MediumPlatform

WordPress to Headless CMS Migration

WordpressNext Js

Convert WordPress to headless CMS with Next.js frontend

1-3 months
3 challenges
wordpressheadlessnextjs+1
HighPlatform

Xamarin.Forms to .NET MAUI Migration

Xamarin FormsDotnet Maui

Migrate Xamarin.Forms apps to .NET MAUI with updated project structure, dependencies, and platform targets

2-6 months
5 challenges
xamarinmauimobile+3
08:53Z[DRIFT]Next.jsNext.js is 2 major versions behind (current: 14.2.35, latest: 16.1.6).
08:54Z[OWASP]A03:2021 – InjectionUnescaped user input rendered into HTML template (src/routes/admin.ts:42)
08:52Z[SCANNER]semgrepscan signature set is up to date
08:48Z[DRIFT]of dependencies are 2+ major versions behind in acme.39% of dependencies are 2+ major versions behind in acme.
08:50Z[OWASP]A02:2021 – Cryptographic FailuresJWT secret is hardcoded — use environment variables (src/auth/jwt.ts:18)
08:45Z[SCANNER]gitleaksscan signature set is up to date
08:43Z[DRIFT]@types/node@types/node is 3 major versions behind (spec: 22.15.29, latest: 25.2.3).
08:46Z[OWASP]A03:2021 – InjectionRegular expression built from user input — potential ReDoS (src/utils/search.ts:67)
08:38Z[SCANNER]trufflehogstatus: unavailable
08:38Z[DRIFT]electronelectron is 3 major versions behind (spec: ^37.6.0, latest: 40.4.1).
08:42Z[OWASP]A03:2021 – InjectiondangerouslySetInnerHTML used with potentially untrusted content (src/components/RichText.tsx:31)
08:33Z[DRIFT]@types/node@types/node is 5 major versions behind (spec: ^20.17.52, latest: 25.2.3).
08:38Z[OWASP]A05:2021 – Security MisconfigurationCookie set without httpOnly or secure flags (src/middleware/session.ts:12)
08:28Z[DRIFT]@types/supertest@types/supertest is 4 major versions behind (spec: ^2.0.16, latest: 6.0.3).
08:34Z[OWASP]A03:2021 – Injectioneval() called with dynamic expression (src/utils/template-engine.ts:88)
08:23Z[DRIFT]VitestVitest is 4 major versions behind (current: 0.34.6, latest: 4.0.18).
08:30Z[OWASP]A01:2021 – Broken Access ControlRedirect URL comes from user-controlled parameter (src/pages/auth/callback.tsx:15)
08:18Z[DRIFT]@types/node@types/node is 5 major versions behind (spec: ^20.8.0, latest: 25.2.3).
08:26Z[OWASP]A03:2021 – InjectionUnsanitised input passed to MongoDB query (src/services/users.ts:34)
08:13Z[DRIFT]vitestvitest is 4 major versions behind (spec: ^0.34.6, latest: 4.0.18).
08:22Z[OWASP]A03:2021 – InjectionChild process spawned with user-controlled arguments (src/utils/pdf-generator.ts:52)
08:08Z[DRIFT]of dependencies are 2+ major versions behind in @acme/api.31% of dependencies are 2+ major versions behind in @acme/api.
08:18Z[OWASP]A05:2021 – Security MisconfigurationExternal link opened without rel="noreferrer" (src/components/ExternalLink.tsx:8)
08:03Z[DRIFT]@types/node@types/node is 5 major versions behind (spec: ^20.11.0, latest: 25.2.3).
08:14Z[OWASP]A02:2021 – Cryptographic FailuresMath.random() used for token generation — use crypto.randomBytes (src/utils/token.ts:6)
07:58Z[DRIFT]of dependencies are 2+ major versions behind in @acme/workflow-engine.52% of dependencies are 2+ major versions behind in @acme/workflow-engine.
08:10Z[OWASP]A05:2021 – Security MisconfigurationExpress app without Helmet security headers middleware (src/server.ts:1)
07:53Z[DRIFT]@types/node@types/node is 5 major versions behind (spec: ^20.19.9, latest: 25.2.3).
07:48Z[DRIFT]@types/node@types/node is 3 major versions behind (spec: ^22.15.29, latest: 25.2.3).
08:53Z[DRIFT]Next.jsNext.js is 2 major versions behind (current: 14.2.35, latest: 16.1.6).
08:54Z[OWASP]A03:2021 – InjectionUnescaped user input rendered into HTML template (src/routes/admin.ts:42)
08:52Z[SCANNER]semgrepscan signature set is up to date
08:48Z[DRIFT]of dependencies are 2+ major versions behind in acme.39% of dependencies are 2+ major versions behind in acme.
08:50Z[OWASP]A02:2021 – Cryptographic FailuresJWT secret is hardcoded — use environment variables (src/auth/jwt.ts:18)
08:45Z[SCANNER]gitleaksscan signature set is up to date
08:43Z[DRIFT]@types/node@types/node is 3 major versions behind (spec: 22.15.29, latest: 25.2.3).
08:46Z[OWASP]A03:2021 – InjectionRegular expression built from user input — potential ReDoS (src/utils/search.ts:67)
08:38Z[SCANNER]trufflehogstatus: unavailable
08:38Z[DRIFT]electronelectron is 3 major versions behind (spec: ^37.6.0, latest: 40.4.1).
08:42Z[OWASP]A03:2021 – InjectiondangerouslySetInnerHTML used with potentially untrusted content (src/components/RichText.tsx:31)
08:33Z[DRIFT]@types/node@types/node is 5 major versions behind (spec: ^20.17.52, latest: 25.2.3).
08:38Z[OWASP]A05:2021 – Security MisconfigurationCookie set without httpOnly or secure flags (src/middleware/session.ts:12)
08:28Z[DRIFT]@types/supertest@types/supertest is 4 major versions behind (spec: ^2.0.16, latest: 6.0.3).
08:34Z[OWASP]A03:2021 – Injectioneval() called with dynamic expression (src/utils/template-engine.ts:88)
08:23Z[DRIFT]VitestVitest is 4 major versions behind (current: 0.34.6, latest: 4.0.18).
08:30Z[OWASP]A01:2021 – Broken Access ControlRedirect URL comes from user-controlled parameter (src/pages/auth/callback.tsx:15)
08:18Z[DRIFT]@types/node@types/node is 5 major versions behind (spec: ^20.8.0, latest: 25.2.3).
08:26Z[OWASP]A03:2021 – InjectionUnsanitised input passed to MongoDB query (src/services/users.ts:34)
08:13Z[DRIFT]vitestvitest is 4 major versions behind (spec: ^0.34.6, latest: 4.0.18).
08:22Z[OWASP]A03:2021 – InjectionChild process spawned with user-controlled arguments (src/utils/pdf-generator.ts:52)
08:08Z[DRIFT]of dependencies are 2+ major versions behind in @acme/api.31% of dependencies are 2+ major versions behind in @acme/api.
08:18Z[OWASP]A05:2021 – Security MisconfigurationExternal link opened without rel="noreferrer" (src/components/ExternalLink.tsx:8)
08:03Z[DRIFT]@types/node@types/node is 5 major versions behind (spec: ^20.11.0, latest: 25.2.3).
08:14Z[OWASP]A02:2021 – Cryptographic FailuresMath.random() used for token generation — use crypto.randomBytes (src/utils/token.ts:6)
07:58Z[DRIFT]of dependencies are 2+ major versions behind in @acme/workflow-engine.52% of dependencies are 2+ major versions behind in @acme/workflow-engine.
08:10Z[OWASP]A05:2021 – Security MisconfigurationExpress app without Helmet security headers middleware (src/server.ts:1)
07:53Z[DRIFT]@types/node@types/node is 5 major versions behind (spec: ^20.19.9, latest: 25.2.3).
07:48Z[DRIFT]@types/node@types/node is 3 major versions behind (spec: ^22.15.29, latest: 25.2.3).