每次运行npm安装时都会警告“发现一个中度严重漏洞”
每次运行npm安装时都会警告“发现一个中度严重漏洞”
提问于 2022-06-28 19:32:31
我正在尝试为MERN应用程序安装axios，但是每次我使用“”时，它都会给我以下内容：
npm WARN optional SKIPPING OPTIONAL DEPENDENCY: fsevents@2.3.2 (node_modules\fsevents):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for fsevents@2.3.2: wanted {"os":"darwin","arch":"any"} (current: {"os":"win32","arch":"x64"})
audited 241 packages in 1.113s
30 packages are looking for funding
run `npm fund` for details
found 1 moderate severity vulnerability
run `npm audit fix` to fix them, or `npm audit` for details运行"npm审计修复“显示：
npm WARN optional SKIPPING OPTIONAL DEPENDENCY: fsevents@2.3.2 (node_modules\fsevents):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for fsevents@2.3.2: wanted {"os":"darwin","arch":"any"} (current: {"os":"win32","arch":"x64"})
up to date in 0.874s
30 packages are looking for funding
run `npm fund` for details
fixed 0 of 1 vulnerability in 241 scanned packages
1 vulnerability required manual review and could not be updated关于“国家预防机制审计”：
=== npm audit security report ===
Manual Review
Some vulnerabilities require your attention to resolve
Visit https://go.npm.me/audit-guide for additional guidance
Moderate Got allows a redirect to a UNIX socket
Package got
Patched in >=11.8.5
Dependency of nodemon [dev]
Path nodemon > update-notifier > latest-version > package-json >
got
More info https://github.com/advisories/GHSA-pfrx-2q88-qq97
found 1 moderate severity vulnerability in 241 scanned packages
1 vulnerability requires manual review. See the full report for details.我尝试用一个稳定的版本手动替换它的当前版本，从而更新Packy-lock.json中的"got“，但是当我再次运行npm安装时，文件会恢复到原来的状态。我对此相当陌生，所以这是正常的还是我更新的方式不对？我尝试了同样的更新通知程序，但它做了同样的事情。已经好几天了，我尝试过无数其他的事情，但是警告不会消失。我非常感谢你的帮助。提前谢谢。
回答 3
页面原文内容由Stack Overflow提供。腾讯云小微IT领域专用引擎提供翻译支持
原文链接：
https://stackoverflow.com/questions/72792190
复制相关文章
相似问题
腾讯云开发者
