yarn-audit-fix

yarn-audit-fix copied to clipboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more. ## Open These updates have all been created already. Click a checkbox below to...

renovate[bot]

feat: provide support for yarn v4

2

antongolub

`--force` option doesn't upgrade and gives log message, "warning Lockfile has incorrect entry"

2

When I run `yarn run yarn-audit-fix --force --audit-level high`, and `pug` needs to be upgraded from major semver `2` to `3`, I get this message from `yarn-audit-fix`: ```shell Verifying package...

nottoseethesun

https://github.com/antongolub/npm-registry-firewall/blob/master/src/main/js/firewall/plugins/audit.js

antongolub

-bash: yarn-audit-fix: command not found

6

-bash: yarn-audit-fix: command not found

mayeaux

No dramatic and pathetic statements. I just want the project to live in any eventuality. @spion, @dhoulb, I've sent you invites.

antongolub

``` npx yarn-audif-fix --override-registry=https://internal-npm-registry.example.com ```

antongolub

https://www.npmjs.com/package/improved-yarn-audit

antongolub


antongolub

bug: produced package-lock may be incompatible with npm v7

1

``` npm WARN old lockfile npm WARN old lockfile The package-lock.json file was created with an old version of npm, npm WARN old lockfile so supplemental metadata must be fetched...

antongolub