Json dependencies NPM update- How fix vulnerabilities manually

Question

I have lost 1 day in order to try to fix manually fews high vulnerabilities. It was a waste of time.

I've read many post, blog and suggestion but I was unable to fix the problem.

Basically /css-what require an update to version 5.0.1 and the npm audit is telling that

│ Dependency of │ gulp-imagemin [dev]  
                                    
│ Path          │ gulp-imagemin > imagemin-svgo > svgo > css-select > 
                | css-what

I've run (on gulp-imagemin) the command npm update, then navigate to the next folder (imagemin-svgo) and again npm update etc etc. When I arrive to the css-what root, I run again npm update but it doesn't do anything;

Then I modified my package.json according

"resolutions": {
"trim-newlines": "^4.0.1",
"css-what": "^5.0.1",
"scripts": {
  "preinstall": "npx npm-force-resolutions"
}

}

I went back to the main root to run npm i but it doesn't amended all branches; Besides when I run npm ls css-what or npm ls trim-newlines I can see that the new version has been installed on the node_modules but older version still unchanged on the tree

root/tree

I was following https://hackernoon.com/how-fix-security-vulnerabilities-in-npm-dependencies-in-3-minutes-rq9g3y7u post but it doesn't worked for some reason, most probably my inexperience.

Thanks for your help

segandiaye · Accepted Answer · 2021-06-09 00:16:17Z

0

To fix vulnerability you can try :

npm audit -fix

To update you can also use npm-check-updates

answered Jun 9, 2021 at 0:16

segandiaye

1236 bronze badges

Sign up to request clarification or add additional context in comments.

5 Comments

VincenzoDelre Over a year ago

Hi, npm audit fix did not fixed anything, i forgot to add it to my post. Thanks

segandiaye Over a year ago

try install npm-check-updates and type ncu -u gulp-imagemin and finish with npm i.

segandiaye Over a year ago

Or if you want to update all packages you type ncu -u

segandiaye Over a year ago

After this command you type npm i. try this to see.

VincenzoDelre Over a year ago

Hi Sega, thanks for yours suggestion. I've ran all commands on all the tree. Referencing to the image, I've tried on gulp-sass folder, on meow's folder and on the same trim-newlines. It looks that all dependencies are up to date but when I go to the main folder and run npm ls trim-newlines, the version still the old one...

Anupam Tirkey · Accepted Answer · 2021-07-15 16:52:11Z

0

npm update css-what worked for me

answered Jul 15, 2021 at 16:52

Anupam Tirkey

412 bronze badges

Collectives™ on Stack Overflow

Json dependencies NPM update- How fix vulnerabilities manually

2 Answers 2

5 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

5 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related