Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Critical security vulnerability & unsupported in Node v16 #112

Open
ETMitch21 opened this issue Dec 23, 2021 · 3 comments
Open

Critical security vulnerability & unsupported in Node v16 #112

ETMitch21 opened this issue Dec 23, 2021 · 3 comments

Comments

@ETMitch21
Copy link

Just installed using the follow command from this repository and received concerning feedback

Install command

npm install @woocommerce/woocommerce-rest-api

Result

npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: undefined,
npm WARN EBADENGINE   required: { node: '14' },
npm WARN EBADENGINE   current: { node: 'v16.13.1', npm: '8.1.2' }
npm WARN EBADENGINE }
npm WARN deprecated [email protected]: Critical security vulnerability fixed in v0.21.1. For more information, see https://github.com/axios/axios/pull/3410

added 15 packages, and audited 251 packages in 2s

11 packages are looking for funding
  run `npm fund` for details

2 high severity vulnerabilities

Some issues need review, and may require choosing
a different dependency.

Run `npm audit` for details.

Not sure this library should be used in production as it stands today.

@ghost
Copy link

ghost commented Dec 31, 2021

I have the same, have you found a solution or an alternative?

@seanonthenet
Copy link

seanonthenet commented Feb 3, 2022

Axios seems to have been updated in this package but the version number has not been bumped and it has not been published to npm. @claudiosanches 🥺

Screenshot 2022-02-03 at 17 24 52

@seanonthenet
Copy link

Currently working around by installing from github with:
yarn add @woocommerce/woocommerce-rest-api@https://github.com/woocommerce/woocommerce-rest-api-js-lib

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants