Programming/node.js2018. 9. 19. 12:25

회사에서 설치할때는 별 소리 없더니

집에와서 설치하려고 하니 먼가 경고가 뿜뿜한다 -_-

결론만 말하자면, 저거 경고일뿐 일단 설치는 된거니 무시해도 된다 정도?


$ npm install

added 150 packages from 251 contributors and audited 305 packages in 12.634s

found 2 vulnerabilities (1 low, 1 moderate)

  run `npm audit fix` to fix them, or `npm audit` for details


$ npm audit fix

+ mysql@2.16.0

added 4 packages from 8 contributors, removed 1 package and updated 5 packages i

fixed 1 of 2 vulnerabilities in 305 scanned packages

  1 vulnerability required manual review and could not be updated


$ npm audit

=== npm audit security report ===



                                 Manual Review

             Some vulnerabilities require your attention to resolve


          Visit https://go.npm.me/audit-guide for additional guidance



  Low             Regular Expression Denial of Service


  Package         debug


  Patched in      >= 2.6.9 < 3.0.0 || >= 3.1.0


  Dependency of   node-rest-client


  Path            node-rest-client > debug


  More info       https://nodesecurity.io/advisories/534


found 1 low severity vulnerability in 310 scanned packages

  1 vulnerability requires manual review. See the full report for details.



$ npm install --no-audit

up to date in 0.912s 


[링크 : https://blog.outsider.ne.kr/1375]

Posted by 구차니