mocha-parallel-tests icon indicating copy to clipboard operation
mocha-parallel-tests copied to clipboard

cannot resolve dependency during npm install

Open rick-james-norwex opened this issue 3 years ago • 1 comments

npm ERR! code ERESOLVE npm ERR! ERESOLVE unable to resolve dependency tree npm ERR! npm ERR! While resolving: [email protected] npm ERR! Found: [email protected] npm ERR! node_modules/mocha npm ERR! mocha@"^9.2.2" from the root project npm ERR! npm ERR! Could not resolve dependency: npm ERR! peer mocha@"3.0.0 - 7.x.x" from [email protected] npm ERR! node_modules/mocha-parallel-tests npm ERR! mocha-parallel-tests@"*" from the root project

rick-james-norwex avatar Mar 18 '22 14:03 rick-james-norwex

there is a library which forks this one to try and support mocha ^9 however it comes with several vulnerabilities https://www.npmjs.com/package/mocha9-parallel-tests https://github.com/ntedgi/mocha-parallel-tests

npm audit report

ansi-regex >2.1.1 <5.0.1 Severity: moderate Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw No fix available node_modules/mocha9-parallel-tests/node_modules/ansi-regex strip-ansi 4.0.0 - 5.2.0 Depends on vulnerable versions of ansi-regex node_modules/mocha9-parallel-tests/node_modules/strip-ansi cliui 4.0.0 - 5.0.0 Depends on vulnerable versions of strip-ansi Depends on vulnerable versions of wrap-ansi node_modules/mocha9-parallel-tests/node_modules/cliui yargs 10.1.0 - 15.0.0 Depends on vulnerable versions of cliui Depends on vulnerable versions of string-width node_modules/mocha9-parallel-tests/node_modules/yargs mocha9-parallel-tests * Depends on vulnerable versions of yargs node_modules/mocha9-parallel-tests string-width 2.1.0 - 4.1.0 Depends on vulnerable versions of strip-ansi node_modules/mocha9-parallel-tests/node_modules/string-width wrap-ansi 3.0.0 - 6.1.0 Depends on vulnerable versions of string-width Depends on vulnerable versions of strip-ansi node_modules/mocha9-parallel-tests/node_modules/wrap-ansi

7 moderate severity vulnerabilities

Some issues need review, and may require choosing a different dependency.

rick-james-norwex avatar Mar 18 '22 14:03 rick-james-norwex