-
What is the expected and current behavior?
Inkline dependencies should install without vulnerabilities.
-
Steps to reproduce
Clone repository, run npm install
-
Please tell us about your environment:
got package has vulnerabilities:
got <11.8.5
Severity: moderate
Got allows a redirect to a UNIX socket - https://github.com/advisories/GHSA-pfrx-2q88-qq97
fix available via `npm audit fix --force`
Will install np@8.0.4, which is a breaking change
node_modules/got
node_modules/package-json/node_modules/got
npm-name <=6.0.1
Depends on vulnerable versions of got
node_modules/npm-name
np 2.2.0 - 7.7.0
Depends on vulnerable versions of npm-name
Depends on vulnerable versions of update-notifier
node_modules/np
package-json <=6.5.0
Depends on vulnerable versions of got
node_modules/package-json
latest-version 0.2.0 - 5.1.0
Depends on vulnerable versions of package-json
node_modules/latest-version
update-notifier 0.2.0 - 5.1.0
Depends on vulnerable versions of latest-version
node_modules/update-notifier
6 moderate severity vulnerabilities
What is the expected and current behavior?
Inkline dependencies should install without vulnerabilities.
Steps to reproduce
Clone repository, run
npm installPlease tell us about your environment:
got package has vulnerabilities: