python (65.1k questions)

javascript (44.2k questions)

reactjs (22.7k questions)

java (20.8k questions)

c# (17.4k questions)

html (16.3k questions)

r (13.7k questions)

android (12.9k questions)

Questions - package-lock.json

Overriding nested dependencies in Node.js projects to improve "npm audit" vulnerability report

I got some vulnerabilities resolved in my Node.js project by forcing some nested dependency updates but I need help understanding what's actually happening behind the scene of this improvement. Here i...
test-img

AliReza

node.js

npm

package.json

package-lock.json

npm-audit

Votes: 0

Answers: 1

Latest Answer

As the saying goes, "It's not the things that you don't know that get you into trouble. It's the things that you know for sure but that just ain't so.". In your case: I know "npm insta...
test-img

Christian Fritz

npm audit fix not updating package.json

I want to fix one vulnerability and after lot of hit and trial, I want to use the fix given by npm audit fix. The npm audit says: # Run npm update mkdirp --depth 8 to resolve 10 vulnerabilities ...
test-img

user124

node.js

npm

package.json

package-lock.json

npm-audit

Votes: 0

Answers: 1

Latest Answer

Only changes are done in package-lock.json which we are not suppose to checkin This is wrong, you should check this in. It's the whole point of the file to make sure anyone else using the repo is r...
test-img

Daniel Douglas

npm lock-file changes without installing any package

Currently, I have a small issue with package-lock file between difference OS system(Mac OS / Linux) My colleague and me use makefile to run project and the contained commend is only npm install and np...
test-img

Jincheol Park

node.js

npm

npm-install

package-lock.json

Votes: 0

Answers: 0

Update package-lock.json to point package to new repo

I have installed a package through npm which I have edited and uploaded to my own github-repository. Now I want package.json/package-lock.json to refer to the archive I uploaded to my own github-repo ...
test-img

Nojahhh

node.js

npm

package.json

repo

package-lock.json

Votes: 0

Answers: 1

Latest Answer

You can install any public node project directly by putting in the link to github. npm i https://github.com/user_name/node_project_name
test-img

Big G

Posts

Questions

Blogs

Jobs