Skip to content
This repository has been archived by the owner on Oct 3, 2020. It is now read-only.

Fix npm audit warning #38

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Fix npm audit warning #38

wants to merge 1 commit into from

Conversation

Coteh
Copy link
Contributor

@Coteh Coteh commented Sep 23, 2019

Fixed an issue with eslint-utils dependency I noticed upon running npm install the first time.

$ npm install
...
added 1034 packages from 993 contributors and audited 6574 packages in 11.637s
found 1 critical severity vulnerability
  run `npm audit fix` to fix them, or `npm audit` for details
$ npm audit

                       === npm audit security report ===

# Run  npm update eslint-utils --depth 2  to resolve 1 vulnerability
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Critical      │ Arbitrary Code Execution                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ eslint-utils                                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ eslint [dev]                                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ eslint > eslint-utils                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/1118                            │
└───────────────┴──────────────────────────────────────────────────────────────┘


found 1 critical severity vulnerability in 6574 scanned packages
  run `npm audit fix` to fix 1 of them.
$ npm update eslint-utils --depth 2
+ eslint-utils@1.4.2
updated 1 package and audited 6577 packages in 3.791s
found 0 vulnerabilities

@MarshallAsch
Copy link
Member

Are all the dependancies updated?

@Coteh
Copy link
Contributor Author

Coteh commented Oct 10, 2019

I believe at the time I wrote this PR, this was the only dep that needed to be updated. Now there's a few more that need to be updated IIRC, and I'll update my PR with those updates.

@MarshallAsch
Copy link
Member

Also @Coteh please make sure that your branch is up to date.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants