ud-annotatrix icon indicating copy to clipboard operation
ud-annotatrix copied to clipboard

sqlite3 version is out of date

Open LinzhouLi opened this issue 3 years ago • 2 comments

There is something wrong with sqlite3 when I install ud-annotatrix. `D:\CODE\Apertium\ud-annotatrix>npm install

[email protected] install D:\CODE\Apertium\ud-annotatrix\node_modules\sqlite3 node-pre-gyp install --fallback-to-build node-pre-gyp WARN Using request for node-pre-gyp https download node-pre-gyp WARN Tried to download(403): https://mapbox-node-binary.s3.amazonaws.com/sqlite3/v4.0.8/node-v83-win32-x64.tar.gzThe link above is not accessible. And I found the latest sqlite3 version is 5.0.2 from [https://github.com/mapbox/node-sqlite3](url). So I changed the parameter in the "package.json" file."sqlite3": "^5.0.2",It works. And I can usenpm run dev-serverto run the server. [sqlite3] Success: "D:\CODE\Apertium\ud-annotatrix\node_modules\sqlite3\lib\binding\napi-v3-win32-x64\node_sqlite3.node" is installed via remote`

But there is a lot of vulnerabilities after installation. I run npm audit fix to fix them. Finally there are 6 vulnerabilities cant be fixed. one of them is highly vulnerable. I don't know how to fix it. `found 6 vulnerabilities (5 low, 1 high) in 1408 scanned packages

High Arbitrary File Overwrite Package tar Patched in >=2.2.2 <3.0.0 || >=4.4.2 Dependency of gulp [dev] Path gulp > glob-watcher > chokidar > fsevents > node-pre-gyp > tar More info https://npmjs.com/advisories/803`

LinzhouLi avatar Mar 17 '21 04:03 LinzhouLi

https://npmjs.com/advisories/803%60 This link is showing error.

Shivani0701 avatar Mar 17 '21 10:03 Shivani0701

https://npmjs.com/advisories/803%60 This link is showing error.

https://www.npmjs.com/advisories/803

LinzhouLi avatar Mar 17 '21 13:03 LinzhouLi