fabric8-analytics-vscode-extension icon indicating copy to clipboard operation
fabric8-analytics-vscode-extension copied to clipboard

Published 20 hours ago • verified publisher icon fabric8-analytics

[BUG] Confusing vulnerability status

Open fbricon opened this issue 4 years ago • 0 comments

Describe the bug I checked out the latest code from https://github.com/fabric8-analytics/fabric8-analytics-vscode-extension (master). First, running npm i gives me:

found 25 vulnerabilities (11 moderate, 12 high, 2 critical)
  run `npm audit fix` to fix them, or `npm audit` for details

That includes 2 vulnerable non-dev dependencies: Screenshot 2021-06-28 at 16 23 38

But then in vscode, package.json is analyzed and the status check tells me everything is fine. Until I actually open the report where I can see some vulnerabilities:

Screenshot 2021-06-28 at 16 19 15

I didn't see a popup warning me about them either.

Expected behavior If there are vulnerabilities, they should be reported to the user

VSCode(please complete the following information):

  • OS: macOS 11.2.1
  • VSCode version 1.57.1
  • Dependency Analytics Version 0.3.3

fbricon avatar Jun 28 '21 14:06 fbricon