HipsterBrown / xs-dev

The quickest way for getting started with JS on devices
https://xs-dev.js.org
MIT License
41 stars 13 forks source link

warnings when installing xs-dev #70

Closed phoddie closed 1 year ago

phoddie commented 1 year ago

When installing / updating xs-dev there are some warnings that appear to be related to npm / Node. These aren't causing failures, but looking at this from the perspective of someone approaching this for the first time the warnings could be misinterpreted as problems that need to be correctly before proceeding, particularly the critical vulnerabilities.

npm update -g xs-dev
...
7 vulnerabilities (4 low, 1 moderate, 2 critical)
...

⠋ (node:20700) ExperimentalWarning: The Fetch API is an experimental feature. This feature could change at any time
(Use `node --trace-warnings ...` to show where the warning was created)
HipsterBrown commented 1 year ago

Most of the security warnings should be handled with the recently release (0.19.2); however npm still believes the package is vulnerable because of the pending gluegun update, even though the vulnerable package has been updated for this project.