hugo-landing-page icon indicating copy to clipboard operation
hugo-landing-page copied to clipboard

48 vulnerabilities in various packages

Open andronat opened this issue 3 years ago • 1 comments

Just downloaded and run npm install in the theme. Instantly I got the following deprecation and vulnerability messages:

npm WARN deprecated [email protected]: See https://github.com/lydell/source-map-url#deprecated
npm WARN deprecated [email protected]: See https://github.com/lydell/source-map-resolve#deprecated
npm WARN deprecated [email protected]: https://github.com/lydell/resolve-url#deprecated
npm WARN deprecated [email protected]: flatten is deprecated in favor of utility frameworks such as lodash.
npm WARN deprecated [email protected]: Please see https://github.com/lydell/urix#deprecated
npm WARN deprecated [email protected]: Browserslist 2 could fail on reading Browserslist >3.0 config used in other tools.
npm WARN deprecated [email protected]: fsevents 1 will break on node v14+ and could be using insecure binaries. Upgrade to fsevents 2.
npm WARN deprecated [email protected]: Chokidar 2 does not receive security updates since 2019. Upgrade to chokidar 3 with 15x fewer dependencies
npm WARN deprecated [email protected]: This SVGO version is no longer supported. Upgrade to v2.x.x.

added 589 packages, and audited 590 packages in 45s

17 packages are looking for funding
  run `npm fund` for details

48 vulnerabilities (37 moderate, 11 high)

Are there any plans for an update soon?

andronat avatar Apr 02 '22 13:04 andronat

Hi, thanks for reminding me.

I plan to remove Gulp and to update Tailwind, so a lot of these vulns should go away soon.

ttntm avatar Apr 05 '22 14:04 ttntm