# Node-red-contrib-viseo-google-spreadsheet : scary warnings

**URL:** <https://discourse.nodered.org/t/node-red-contrib-viseo-google-spreadsheet-scary-warnings/14727>\
**Category:** General\
**Created:** [23 August 2019 22:11 UTC](https://discourse.nodered.org/t/node-red-contrib-viseo-google-spreadsheet-scary-warnings/14727 "2019-08-23T22:11:52Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![CaptClaude](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/captclaude/32/2125_2.png) [@CaptClaude](https://discourse.nodered.org/u/CaptClaude)\
**Post date:** [23 August 2019 22:11 UTC](https://discourse.nodered.org/t/node-red-contrib-viseo-google-spreadsheet-scary-warnings/14727/1 "2019-08-23T22:11:52Z")

</div>

Running

> npm install node-red-contrib-viseo-google-spreadsheet

Yields a bunch of scary warnings about deprecated dependencies and security warnings. Running **npm audit** afterwards gives me a long list of details that are above my current knowledge level. For instance,

```auto
│ High │ Denial-of-Service Extended Event Loop Blocking 
│ Package │ qs 
│ Patched in │ >= 1.x
│ Dependency of │ node-red-contrib-viseo-google-spreadsheet 
│ Path │ node-red-contrib-viseo-google-spreadsheet >  
│ │ node-red-viseo-helper > request > qs 
│ More info │ https://npmjs.com/advisories/28

```

I checked the advisory and then the repository and then ran **npm install qs** in the hopes that it would fix it. Restarted NR and re-ran **npm audit** and got the same result. Clearly there is something I should be doing but don't know _how_ to do.

As a general question, when faced with security/deprecated warnings when installing a node, what is the process for ironing that out?

The Google spreadsheet node is installed and works well enough to tell me that I need to RTFM:

> Missing VISEO Bot Maker key - Read the documentation.

Which I did and saw no mention of a Bot Maker key, nor do I see a place to enter it...

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [25 August 2019 17:36 UTC](https://discourse.nodered.org/t/node-red-contrib-viseo-google-spreadsheet-scary-warnings/14727/2 "2019-08-25T17:36:56Z")

</div>

> [@CaptClaude](#):
>
> VISEO

From their main repo: "VISEO Bot Maker is a framework built on top of Node-RED". I think that their nodes are designed to be used as part of a larger system.

I also note that they have a lot of open and unanswered issues.

However, whatever the case, you will need to raise an issue on GitHub asking them to update their dependencies.

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [25 August 2019 17:38 UTC](https://discourse.nodered.org/t/node-red-contrib-viseo-google-spreadsheet-scary-warnings/14727/3 "2019-08-25T17:38:56Z")

</div>

> [@CaptClaude](#):
>
> Which I did and saw no mention of a Bot Maker key

More info appears to be here:

> <https://github.com/NGRP/node-red-contrib-viseo/issues/127>
>
> Hi guys,
> The error "Missing VISEO Bot Maker key - Read the documentation." appe…ars when trying to use spreadsheets node.
> Note, the error does not prevent the call to google apis.
> 
> index.js file of node-red-viseo-help seem to be responsible for throwing the error. It looks like its an updated version from the version in master. it is Alpha 0.2.

There doesn't appear to be a resolution yet however even though that was raised in April.

---

<div class="post-metadata">

**Author:** ![CaptClaude](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/captclaude/32/2125_2.png) [@CaptClaude](https://discourse.nodered.org/u/CaptClaude)\
**Post date:** [27 August 2019 04:58 UTC](https://discourse.nodered.org/t/node-red-contrib-viseo-google-spreadsheet-scary-warnings/14727/4 "2019-08-27T04:58:55Z")

</div>

I actually started to raise an issue over on the VISEO repository to ask about this but I saw that there were lots of open questions so I thought I'd start here first. I'll finish my question and see what kind of response I get. I don't expect it will be quick or helpful.  
Thanks!