Question About EOL Transitive Dependencies (cluster-key-slot & denque)

[triwibow]

Hello maintainers 👋

We noticed that the latest version of ioredis still depends on the following transitive dependencies:

• cluster-key-slot@1.1.2
• denque@2.1.0

Both packages are currently marked as End of Life / no longer maintained, and they are being flagged in dependency security and SCA scans.

Could you please share whether there are plans to:

• update these dependencies,
• replace them with maintained alternatives,
• or release a newer version addressing this concern?

Thank you for your work on ioredis 🙏

[PavelPashov]

@triwibow Thanks for raising this. We’ll discuss it and follow up here once we’ve aligned on next steps.