Skip to content
This repository has been archived by the owner on Oct 16, 2019. It is now read-only.

Fix npm audit issues #205

Open
hm6293 opened this issue Mar 4, 2019 · 0 comments
Open

Fix npm audit issues #205

hm6293 opened this issue Mar 4, 2019 · 0 comments
Assignees

Comments

@hm6293
Copy link
Contributor

hm6293 commented Mar 4, 2019

Fix npm audit issues

Expected Behaviour

None of the project's dependency should be vulnerable and npm audit should not complain about anything.

Current Behaviour

Running the command npm audit is complaining about the vulnerable dependencies.

Background

We are using npm audit to keep a check on the dependencies for their vulnerabilities. Recently, npm has updated their list of known vulnerabilities and some of the dependencies in our project are vulnerable.
https://www.npmjs.com/advisories

Impact

The pipeline is blocked, since vulnerability checking is part of pipeline and no vulnerable dependency should go to the production system.

Possible Solution

Update the vulnerable dependencies versions, so that they no longer will be vulnerable.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants