You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Oct 16, 2019. It is now read-only.
None of the project's dependency should be vulnerable and npm audit should not complain about anything.
Current Behaviour
Running the command npm audit is complaining about the vulnerable dependencies.
Background
We are using npm audit to keep a check on the dependencies for their vulnerabilities. Recently, npm has updated their list of known vulnerabilities and some of the dependencies in our project are vulnerable. https://www.npmjs.com/advisories
Impact
The pipeline is blocked, since vulnerability checking is part of pipeline and no vulnerable dependency should go to the production system.
Possible Solution
Update the vulnerable dependencies versions, so that they no longer will be vulnerable.
The text was updated successfully, but these errors were encountered:
Fix npm audit issues
Expected Behaviour
None of the project's dependency should be vulnerable and
npm audit
should not complain about anything.Current Behaviour
Running the command
npm audit
is complaining about the vulnerable dependencies.Background
We are using
npm audit
to keep a check on the dependencies for their vulnerabilities. Recently, npm has updated their list of known vulnerabilities and some of the dependencies in our project are vulnerable.https://www.npmjs.com/advisories
Impact
The pipeline is blocked, since vulnerability checking is part of pipeline and no vulnerable dependency should go to the production system.
Possible Solution
Update the vulnerable dependencies versions, so that they no longer will be vulnerable.
The text was updated successfully, but these errors were encountered: