# Elasticdump users: does anyone else worry about WARNings on dependencies? **URL:** \ **Category:** Elasticsearch\ **Created:** [September 30, 2020, 10:34am UTC](https://discuss.elastic.co/t/elasticdump-users-does-anyone-else-worry-about-warnings-on-dependencies/250480 "2020-09-30T10:34:55Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![viu](https://avatars.discourse-cdn.com/v4/letter/v/d78d45/32.png) [@viu](https://discuss.elastic.co/u/viu)\ **Post date:** [September 30, 2020, 10:34am UTC](https://discuss.elastic.co/t/elasticdump-users-does-anyone-else-worry-about-warnings-on-dependencies/250480/1 "2020-09-30T10:34:55Z")
Hi there, I am a newbie in this community, but lurked as a visitor for some time. I work with a very security aware IT/server administration, and it has made me semi-paranoid. The Elastick stack in use is an older version (5.x). but I have a hope to upgrade soon. This older version lacks some nice features like importing and exporting data the way I like it. Luckily there is Elasticdump, but unluckily it has 3 warnings that I am concerned about. Is it safe to install and use? Those warning are: WARN deprecated request@2.88.2: request has been deprecated, see [https://github.com/request/request/issues/3142](https://github.com/request/request/issues/3142) WARN deprecated har-validator@5.1.5: this library is no longer supported WARN deprecated s3signed@0.1.0: This module is no longer maintained. It is provided as is. I'd love to hear your opinion and reasoning. ---
**Author:** ![Wolfram\_Haussig](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wolfram_haussig/32/70528_2.png) [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\ **Post date:** [September 30, 2020, 10:55am UTC](https://discuss.elastic.co/t/elasticdump-users-does-anyone-else-worry-about-warnings-on-dependencies/250480/2 "2020-09-30T10:55:20Z")
Hello Joanna, Welcome to this forum! Although we should not assume that a library is save because other use it too it is an indicator how widely used a library is: I can say that the har-validator should not worry you. Even the current versions of Angular(a library for creating web frontends) currently depends on har-validator: ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/5/e583cfb34578061f9cc54d01d9b9168dcdd4d848.png) It is the same with the request package: ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/8/08773628cab4dc3a38248f442b8432b39d354ecc.png) The only thing I would worry about would be the s3signed package as AWS continues to evolve and it might be possible that the s3signed package will not work anymore in the future. As I do not know if you need S3 access with ElasticDump - maybe you can ignore this warning too? Best regards Wolfram ---
**Author:** ![viu](https://avatars.discourse-cdn.com/v4/letter/v/d78d45/32.png) [@viu](https://discuss.elastic.co/u/viu)\ **Post date:** [October 1, 2020, 8:27pm UTC](https://discuss.elastic.co/t/elasticdump-users-does-anyone-else-worry-about-warnings-on-dependencies/250480/3 "2020-10-01T20:27:57Z")
Thank you for your reply! This question kind of covers all the other worrisome dependencies that I found when I started combing them through. Albeit they are just warnings it makes one doubt the quality and security. I am no stranger to using open source software. Basically I need some to vouch for this 🙂 ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [October 29, 2020, 8:28pm UTC](https://discuss.elastic.co/t/elasticdump-users-does-anyone-else-worry-about-warnings-on-dependencies/250480/4 "2020-10-29T20:28:01Z")
Closed on October 29, 2020, 8:28pm UTC This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.