Koenie06 / Discord.js-Music

19 stars 13 forks source link

the package requires dependencies but is broken and not fixable. #13

Closed gius-quat closed 2 years ago

gius-quat commented 2 years ago

PS C:\Users\Giuseppe Quattrocchi\Desktop\discord> npm install discord.js-music npm WARN deprecated axios@0.16.2: Critical security vulnerability fixed in v0.21.1. For more information, see https://github.com/axios/axios/pull/3410 added 16 packages, and audited 345 packages in 37s

38 packages are looking for funding run npm fund for details

15 vulnerabilities (2 low, 7 moderate, 5 high, 1 critical)

To address all issues possible (including breaking changes), run: npm audit fix --force

Some issues need review, and may require choosing a different dependency.

Run npm audit for details. PS C:\Users\Giuseppe Quattrocchi\Desktop\discord> npm audit fix --force npm WARN using --force Recommended protections disabled. npm WARN audit Updating discord.js-music to 1.0.3,which is a SemVer major change. npm WARN audit No fix available for yt-search@ npm WARN audit No fix available for @koenie06/discord.js-music@ npm WARN deprecated har-validator@5.1.5: this library is no longer supported npm WARN deprecated youtube-dl@1.13.1: node-youtube-dl is deprecated. use npm.im/youtube-dl-exec instead. npm WARN deprecated uuid@3.4.0: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details. npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142

added 45 packages, removed 14 packages, changed 1 package, and audited 376 packages in 17s

39 packages are looking for funding run npm fund for details

npm audit report

ansi-regex >2.1.1 <5.0.1 Severity: moderate Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw No fix available node_modules/@koenie06/discord.js-music/node_modules/ansi-regex node_modules/gauge/node_modules/ansi-regex node_modules/yt-search/node_modules/ansi-regex strip-ansi 4.0.0 - 5.2.0 Depends on vulnerable versions of ansi-regex node_modules/@koenie06/discord.js-music/node_modules/strip-ansi node_modules/gauge/node_modules/strip-ansi node_modules/yt-search/node_modules/strip-ansi string-width 2.1.0 - 4.1.0 Depends on vulnerable versions of strip-ansi node_modules/@koenie06/discord.js-music/node_modules/string-width node_modules/gauge/node_modules/string-width node_modules/yt-search/node_modules/string-width node-fzf >=0.0.5 Depends on vulnerable versions of string-width node_modules/@koenie06/discord.js-music/node_modules/node-fzf node_modules/yt-search/node_modules/node-fzf yt-search Depends on vulnerable versions of cheerio Depends on vulnerable versions of node-fzf node_modules/@koenie06/discord.js-music/node_modules/yt-search node_modules/yt-search @koenie06/discord.js-music Depends on vulnerable versions of yt-search node_modules/@koenie06/discord.js-music

lodash <=4.17.20 Severity: critical Command Injection in lodash - https://github.com/advisories/GHSA-35jh-r3h4-6jhm Prototype Pollution in lodash - https://github.com/advisories/GHSA-p6mc-m468-83gw Prototype Pollution in lodash - https://github.com/advisories/GHSA-jf85-cpcp-j695 Prototype pollution in lodash - https://github.com/advisories/GHSA-x5rq-j2xg-h7qm Prototype Pollution in lodash - https://github.com/advisories/GHSA-fvqr-27wr-82fm No fix available node_modules/lodash cheerio 0.14.0 - 1.0.0-rc.3 Depends on vulnerable versions of css-select Depends on vulnerable versions of lodash node_modules/yt-search/node_modules/cheerio yt-search Depends on vulnerable versions of cheerio Depends on vulnerable versions of node-fzf node_modules/@koenie06/discord.js-music/node_modules/yt-search node_modules/yt-search @koenie06/discord.js-music Depends on vulnerable versions of yt-search node_modules/@koenie06/discord.js-music

nth-check <2.0.1 Severity: moderate Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr No fix available node_modules/yt-search/node_modules/nth-check css-select <=3.1.0 Depends on vulnerable versions of nth-check node_modules/yt-search/node_modules/css-select cheerio 0.14.0 - 1.0.0-rc.3 Depends on vulnerable versions of css-select Depends on vulnerable versions of lodash node_modules/yt-search/node_modules/cheerio yt-search Depends on vulnerable versions of cheerio Depends on vulnerable versions of node-fzf node_modules/@koenie06/discord.js-music/node_modules/yt-search node_modules/yt-search @koenie06/discord.js-music Depends on vulnerable versions of yt-search node_modules/@koenie06/discord.js-music

10 vulnerabilities (7 moderate, 2 high, 1 critical)

Some issues need review, and may require choosing a different dependency. PS C:\Users\Giuseppe Quattrocchi\Desktop\discord>

Pentrucine commented 2 years ago

Not an issue related to this module but what I would do is npm init, redownload all your modules and copy and paste your code.

gius-quat commented 2 years ago

ok, i'm testing, and now goes!