question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

npm high severity vulnerability

See original GitHub issue

Hello, I have a project with the http-static package. When I do npm install it tells me there is a vulnerability in my dependencies. Running audit show this project.

Looking at the npm site it seems this is only the possibility of a DDOS attack?

I’m only using this for a class and not production but I feel like the vulnerability message means I’ll have to find another package even though http-static is working just fine.

Are there any plans to stop this error from showing up?

Screenshot from 2019-04-30 11-19-40

Issue Analytics

  • State:closed
  • Created 4 years ago
  • Comments:8 (4 by maintainers)

github_iconTop GitHub Comments

6reactions
kirkinscommented, Apr 30, 2019

I don’t care either, switching to https://github.com/lwsjs/local-web-server takes 5 minutes.

0reactions
kirkinscommented, Apr 30, 2019

@thornjad I’ll keep an eye out for that, been using http-server for many years now without problem.

Read more comments on GitHub >

github_iconTop Results From Across the Web

Don't be alarmed by vulnerabilities after running NPM Install
NPM high vulnerability. There's one thing to take notice of in both of these screenshots. Look at the Dependency Of field. Notice it...
Read more >
Found 4 vulnerabilities on npm install - Stack Overflow
I got 164 vulnerabilities found - Packages audited: 20493 (312 dev, 1044 optional). Severity: 110 low | 35 moderate | 19 high. –...
Read more >
Auditing package dependencies for security vulnerabilities
Running npm audit will produce a report of security vulnerabilities with the affected package name, vulnerability severity and description, path, ...
Read more >
How to Fix Security Vulnerabilities with NPM - IFS Blog
How to Fix Security Vulnerabilities with NPM · Try running npm update command. · If you have a vulnerability that requires manual review,...
Read more >
Fixing security vulnerabilities in npm dependencies in less ...
2.1) To fix any dependency, you need to first know which npm package depends on that. npm audit. This will tell you the...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found