structor icon indicating copy to clipboard operation
structor copied to clipboard

vulnerabilities issue at "marked": "0.3.6"

Open ruucm-working opened this issue 6 years ago • 1 comments

Git says 'We found potential security vulnerabilities in your dependencies.'

at your package "marked": "0.3.6"

ruucm-working avatar Jun 02 '18 16:06 ruucm-working

npm found 43 vulnerabilities in my structor folder for v2.3.2.

found 43 vulnerabilities (13 low, 19 moderate, 11 high) in 33437 scanned packages run npm audit fix to fix 1 of them. 8 vulnerabilities require semver-major dependency updates. 34 vulnerabilities require manual review. See the full report for details.

I did install some peer dependencies, but that point I already had 37 vulnerabilities:

npm WARN [email protected] requires a peer of history@^1.12.1 || ^2.0.0 but none is installed. You must install peer dependencies yourself. npm WARN [email protected] requires a peer of eslint-plugin-import@^1.16.0 but none is installed. You must install peer dependencies yourself. npm WARN [email protected] requires a peer of eslint-plugin-import@^1.16.0 but none is installed. You must install peer dependencies yourself. npm WARN [email protected] No repository field.

found 37 vulnerabilities (24 low, 10 moderate, 3 high) run npm audit fix to fix them, or npm audit for details

I did run npm audit fix and still had the same results as above.

websmyths avatar Jun 12 '18 16:06 websmyths