Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix vulnerabilities in dependencies #228

Open
micahstubbs opened this issue Oct 31, 2018 · 1 comment
Open

fix vulnerabilities in dependencies #228

micahstubbs opened this issue Oct 31, 2018 · 1 comment

Comments

@micahstubbs
Copy link
Collaborator

micahstubbs commented Oct 31, 2018

found 825 vulnerabilities (764 low, 45 moderate, 14 high, 2 critical)
run npm audit fix to fix them, or npm audit for details

screen shot 2018-10-31 at 6 30 37 am

steps to reproduce

node -v
# v8.12.0
npm -v
# v6.4.1

npm install
text
➜  blockbuilder git:(master) npm install
> [email protected] install /home/ubuntu/blockbuilder/node_modules/node-sass
> node scripts/install.js
Downloading binary from https://github.com/sass/node-sass/releases/download/v4.9.3/linux-x64-57_binding.node
Download complete..] - :
Binary saved to /home/ubuntu/blockbuilder/node_modules/node-sass/vendor/linux-x64-57/binding.node
Caching binary to /home/ubuntu/.npm/node-sass/4.9.3/linux-x64-57_binding.node
> [email protected] postinstall /home/ubuntu/blockbuilder/node_modules/node-sass
> node scripts/build.js
Binary found at /home/ubuntu/blockbuilder/node_modules/node-sass/vendor/linux-x64-57/binding.node
Testing binary
Binary is fine
npm WARN optional SKIPPING OPTIONAL DEPENDENCY: [email protected] (node_modules/webpack/node_modules/watchpack/node_modules/chokidar/node_modules/
fsevents):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for [email protected]: wanted {"os":"darwin","arch":"any"} (current: {"os":"lin
ux","arch":"x64"})
npm WARN optional SKIPPING OPTIONAL DEPENDENCY: [email protected] (node_modules/fsevents):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for [email protected]: wanted {"os":"darwin","arch":"any"} (current: {"os":"linu
x","arch":"x64"})
added 2280 packages from 626 contributors and audited 15075 packages in 60.844s
found 825 vulnerabilities (764 low, 45 moderate, 14 high, 2 critical)
  run `npm audit fix` to fix them, or `npm audit` for details
@LoganDark
Copy link

LoganDark commented Jul 25, 2022

facebook/create-react-app#11174

TL;DR npm audit is fundamentally broken and should not be used. I know I'm 4 years late, but just so you know

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants