2

Goodnight all.

When I try to install a package I get the error you can see below and nothing installs.

up to date, audited 488 packages in 4s

13 packages are looking for funding
  run `npm fund` for details

8 vulnerabilities (5 moderate, 3 high)

To address all issues, run:
  npm audit fix

Run `npm audit` for details.

So I did npm audit fix but here is what it gets me.

PS C:\Users\Elève\OneDrive - Conseil régional Grand Est - Numérique Educatif\Bureau\wolfyz-bot> npm audit fix
npm WARN audit fix [email protected] node_modules/npm/node_modules/json-schema
npm WARN audit fix [email protected] is a bundled dependency of
npm WARN audit fix [email protected] [email protected] at node_modules/npm
npm WARN audit fix [email protected] It cannot be fixed automatically.

(I do not put all the Warn because it would be too long. Just below the warm, here is what I have)

    Depends on vulnerable versions of strip-ansi
    node_modules/npm/node_modules/string-width

glob-parent  <5.1.2
Severity: high
Regular expression denial of service - https://github.com/advisories/GHSA-ww39-953v-wcq6
fix available via `npm audit fix`
node_modules/glob-parent
  chokidar  1.0.0-rc1 - 2.1.8
  Depends on vulnerable versions of glob-parent
  node_modules/chokidar
    live-server  >=1.2.0
    Depends on vulnerable versions of chokidar
    node_modules/live-server

json-schema  <0.4.0
Severity: moderate
json-schema is vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-896r-f27r-55mw
fix available via `npm audit fix`
node_modules/npm/node_modules/json-schema
  jsprim  0.3.0 - 1.4.1 || 2.0.0 - 2.0.1
  Depends on vulnerable versions of json-schema
  node_modules/npm/node_modules/jsprim

8 vulnerabilities (5 moderate, 3 high)

To address all issues, run:
  npm audit fix 

In summary, when I do npm audit fix, it advises me to do npm audit fix which I did... Can you help me please?

0

1 Answer 1

1

As the output states, it cannot automatically fix it:

npm WARN audit fix [email protected] It cannot be fixed automatically.

You can either ignore it, or manually update json-schema and look for compatibility issues.

Sign up to request clarification or add additional context in comments.

2 Comments

What would be the command to ignore all Warn please?
You can just ignore the warning when running npm install. And I think you misunderstood the warning from npm, it did install your package correctly, the warning that it produced is just a warning that you can ignore. And I just saw that detail, it actually did not install any packages because the ones that you requested were already installed and up-to-date: up to date, audited 488 packages in 4s. If it still doesn't work, you should post the command you're running and the contents of package.json.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.