PS C:\Users\Giuseppe Quattrocchi\Desktop\discord> npm install discord.js-music
npm WARN deprecated axios@0.16.2: Critical security vulnerability fixed in v0.21.1. For more information, see https://github.com/axios/axios/pull/3410
added 16 packages, and audited 345 packages in 37s
38 packages are looking for funding
run npm fund for details
To address all issues possible (including breaking changes), run:
npm audit fix --force
Some issues need review, and may require choosing
a different dependency.
Run npm audit for details.
PS C:\Users\Giuseppe Quattrocchi\Desktop\discord> npm audit fix --force
npm WARN using --force Recommended protections disabled.
npm WARN audit Updating discord.js-music to 1.0.3,which is a SemVer major change.
npm WARN audit No fix available for yt-search@
npm WARN audit No fix available for @koenie06/discord.js-music@
npm WARN deprecated har-validator@5.1.5: this library is no longer supported
npm WARN deprecated youtube-dl@1.13.1: node-youtube-dl is deprecated. use npm.im/youtube-dl-exec instead.
npm WARN deprecated uuid@3.4.0: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details.
npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142
added 45 packages, removed 14 packages, changed 1 package, and audited 376 packages in 17s
39 packages are looking for funding
run npm fund for details
npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
No fix available
node_modules/@koenie06/discord.js-music/node_modules/ansi-regex
node_modules/gauge/node_modules/ansi-regex
node_modules/yt-search/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/@koenie06/discord.js-music/node_modules/strip-ansi
node_modules/gauge/node_modules/strip-ansi
node_modules/yt-search/node_modules/strip-ansi
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/@koenie06/discord.js-music/node_modules/string-width
node_modules/gauge/node_modules/string-width
node_modules/yt-search/node_modules/string-width
node-fzf >=0.0.5
Depends on vulnerable versions of string-width
node_modules/@koenie06/discord.js-music/node_modules/node-fzf
node_modules/yt-search/node_modules/node-fzf
yt-search
Depends on vulnerable versions of cheerio
Depends on vulnerable versions of node-fzf
node_modules/@koenie06/discord.js-music/node_modules/yt-search
node_modules/yt-search
@koenie06/discord.js-music
Depends on vulnerable versions of yt-search
node_modules/@koenie06/discord.js-music
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
No fix available
node_modules/yt-search/node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/yt-search/node_modules/css-select
cheerio 0.14.0 - 1.0.0-rc.3
Depends on vulnerable versions of css-select
Depends on vulnerable versions of lodash
node_modules/yt-search/node_modules/cheerio
yt-search
Depends on vulnerable versions of cheerio
Depends on vulnerable versions of node-fzf
node_modules/@koenie06/discord.js-music/node_modules/yt-search
node_modules/yt-search
@koenie06/discord.js-music
Depends on vulnerable versions of yt-search
node_modules/@koenie06/discord.js-music
PS C:\Users\Giuseppe Quattrocchi\Desktop\discord> npm install discord.js-music npm WARN deprecated axios@0.16.2: Critical security vulnerability fixed in v0.21.1. For more information, see https://github.com/axios/axios/pull/3410 added 16 packages, and audited 345 packages in 37s
38 packages are looking for funding run
npm fund
for details15 vulnerabilities (2 low, 7 moderate, 5 high, 1 critical)
To address all issues possible (including breaking changes), run: npm audit fix --force
Some issues need review, and may require choosing a different dependency.
Run
npm audit
for details. PS C:\Users\Giuseppe Quattrocchi\Desktop\discord> npm audit fix --force npm WARN using --force Recommended protections disabled. npm WARN audit Updating discord.js-music to 1.0.3,which is a SemVer major change. npm WARN audit No fix available for yt-search@ npm WARN audit No fix available for @koenie06/discord.js-music@ npm WARN deprecated har-validator@5.1.5: this library is no longer supported npm WARN deprecated youtube-dl@1.13.1: node-youtube-dl is deprecated. usenpm.im/youtube-dl-exec
instead. npm WARN deprecated uuid@3.4.0: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details. npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142added 45 packages, removed 14 packages, changed 1 package, and audited 376 packages in 17s
39 packages are looking for funding run
npm fund
for detailsnpm audit report
ansi-regex >2.1.1 <5.0.1 Severity: moderate Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw No fix available node_modules/@koenie06/discord.js-music/node_modules/ansi-regex node_modules/gauge/node_modules/ansi-regex node_modules/yt-search/node_modules/ansi-regex strip-ansi 4.0.0 - 5.2.0 Depends on vulnerable versions of ansi-regex node_modules/@koenie06/discord.js-music/node_modules/strip-ansi node_modules/gauge/node_modules/strip-ansi node_modules/yt-search/node_modules/strip-ansi string-width 2.1.0 - 4.1.0 Depends on vulnerable versions of strip-ansi node_modules/@koenie06/discord.js-music/node_modules/string-width node_modules/gauge/node_modules/string-width node_modules/yt-search/node_modules/string-width node-fzf >=0.0.5 Depends on vulnerable versions of string-width node_modules/@koenie06/discord.js-music/node_modules/node-fzf node_modules/yt-search/node_modules/node-fzf yt-search Depends on vulnerable versions of cheerio Depends on vulnerable versions of node-fzf node_modules/@koenie06/discord.js-music/node_modules/yt-search node_modules/yt-search @koenie06/discord.js-music Depends on vulnerable versions of yt-search node_modules/@koenie06/discord.js-music
lodash <=4.17.20 Severity: critical Command Injection in lodash - https://github.com/advisories/GHSA-35jh-r3h4-6jhm Prototype Pollution in lodash - https://github.com/advisories/GHSA-p6mc-m468-83gw Prototype Pollution in lodash - https://github.com/advisories/GHSA-jf85-cpcp-j695 Prototype pollution in lodash - https://github.com/advisories/GHSA-x5rq-j2xg-h7qm Prototype Pollution in lodash - https://github.com/advisories/GHSA-fvqr-27wr-82fm No fix available node_modules/lodash cheerio 0.14.0 - 1.0.0-rc.3 Depends on vulnerable versions of css-select Depends on vulnerable versions of lodash node_modules/yt-search/node_modules/cheerio yt-search Depends on vulnerable versions of cheerio Depends on vulnerable versions of node-fzf node_modules/@koenie06/discord.js-music/node_modules/yt-search node_modules/yt-search @koenie06/discord.js-music Depends on vulnerable versions of yt-search node_modules/@koenie06/discord.js-music
nth-check <2.0.1 Severity: moderate Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr No fix available node_modules/yt-search/node_modules/nth-check css-select <=3.1.0 Depends on vulnerable versions of nth-check node_modules/yt-search/node_modules/css-select cheerio 0.14.0 - 1.0.0-rc.3 Depends on vulnerable versions of css-select Depends on vulnerable versions of lodash node_modules/yt-search/node_modules/cheerio yt-search Depends on vulnerable versions of cheerio Depends on vulnerable versions of node-fzf node_modules/@koenie06/discord.js-music/node_modules/yt-search node_modules/yt-search @koenie06/discord.js-music Depends on vulnerable versions of yt-search node_modules/@koenie06/discord.js-music
10 vulnerabilities (7 moderate, 2 high, 1 critical)
Some issues need review, and may require choosing a different dependency. PS C:\Users\Giuseppe Quattrocchi\Desktop\discord>