Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

66 Vulnerabilities found in npm dependencies

See original GitHub issue

Specs

Leon version: 1.0.0-beta.0
OS (or browser) version: Chrome 71 | MacOS
Node.js version:10.15.0
Complete “npm run check” output: N/A

Actual Behavior

After running npm install, I got the following output:

added 1554 packages from 828 contributors and audited 31148 packages in 141.769s
found 66 vulnerabilities (65 low, 1 high)

If you’d like, I can paste the output of the command npm audit. Do you have any plans to update the dependencies using something like greenkeeper?

Issue Analytics

State:
Created 5 years ago
Reactions:1
Comments:9 (8 by maintainers)

Top GitHub Comments

2reactions

abhisheksoni27commented, Feb 17, 2019

@louistiti Thanks! I’m really excited about what you have made and would love to contribute. Keep hustling!

0reactions

louistiticommented, Jun 7, 2019

Good news, I’ve:

Made the upgrade to Babel 7+.
Created a fork of the jest-extended package to get away from the vulnerability.

I’ll close this issue now as we came back to 0 npm dependencies vulnerabilities. Feel free to create a new issue if you spot a new one.

Top Results From Across the Web

Auditing package dependencies for security vulnerabilities

A security audit is an assessment of package dependencies for security vulnerabilities. Security audits help you protect your package's users by enabling you...

Don't be alarmed by vulnerabilities after running NPM Install

The NPM audit command is checking all dependencies, including those someone else has setup. Let's take a look at two of these. You...

Found 4 vulnerabilities on npm install - Stack Overflow

Run the npm audit fix subcommand to automatically install compatible updates to vulnerable dependencies. · Run the recommended commands ...

Fixing security vulnerabilities in npm dependencies in less ...

2.1) To fix any dependency, you need to first know which npm package depends on that. npm audit. This will tell you the...

Node.js, how to solve vulnerability issues? - YouTube

How can you solve these issues coming from 3th party packages in npm ? How do you analyse these? How do you overcome...