python (65.1k questions)

javascript (44.2k questions)

reactjs (22.7k questions)

java (20.8k questions)

c# (17.4k questions)

html (16.3k questions)

r (13.7k questions)

android (12.9k questions)

Questions - package.json

Overriding nested dependencies in Node.js projects to improve "npm audit" vulnerability report

I got some vulnerabilities resolved in my Node.js project by forcing some nested dependency updates but I need help understanding what's actually happening behind the scene of this improvement. Here i...
test-img

AliReza

node.js

npm

package.json

package-lock.json

npm-audit

Votes: 0

Answers: 1

Latest Answer

As the saying goes, "It's not the things that you don't know that get you into trouble. It's the things that you know for sure but that just ain't so.". In your case: I know "npm insta...
test-img

Christian Fritz

npm audit fix not updating package.json

I want to fix one vulnerability and after lot of hit and trial, I want to use the fix given by npm audit fix. The npm audit says: # Run npm update mkdirp --depth 8 to resolve 10 vulnerabilities ...
test-img

user124

node.js

npm

package.json

package-lock.json

npm-audit

Votes: 0

Answers: 1

Latest Answer

Only changes are done in package-lock.json which we are not suppose to checkin This is wrong, you should check this in. It's the whole point of the file to make sure anyone else using the repo is r...
test-img

Daniel Douglas

Uptating angular version 12 to 13 in a library

How can I upgrade my library from using angular 12 to 13 I'm trying to do ng update @angular/core @angular/cli @angular/material but it is only updating the project's package.json not the library's p...
test-img

Adam

angular

typescript

angular-material

package.json

Votes: 0

Answers: 1

Latest Answer

Make sure to start the upgrade process in the right directory if you have many modules. Follow the online step-by-step guide https://update.angular.io/?l=2&v=12.0-13.0 If needed delete existing no...
test-img

Joosep Parts

Warning: true is not a PostCSS plugin

I have an issue while building a project, this error keeps popping up: Warning: true is not a PostCSS plugin. This error was not visible before an upgrade was done from node v.10.x.x to v.16.14.x. Her...
test-img

Torjescu Sergiu

javascript

package.json

postcss

Votes: 0

Answers: 1

Latest Answer

The problem was related to postcss-inline-svg, there are dependencies not working with node version 16.14 related to node-sass and grunt-sass. So at the moment, removing that plugin is the only soluti...
test-img

Torjescu Sergiu

Posts

Questions

Blogs

Jobs