Currently, npm audit fix cannot fix NPM vulnerabilities and it seems to be related to the webpack-dev-server version stated in package.json.
npm audit fix produces:
(app) app@devni:~/ceknito$ npm audit fix
npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR!
npm ERR! While resolving: throat@1.0.0
npm ERR! Found: webpack@4.43.0
npm ERR! node_modules/webpack
npm ERR! dev webpack@"^4.41.5" from the root project
npm ERR!
npm ERR! Could not resolve dependency:
npm ERR! peer webpack@"^2.2.0 || ^3.0.0" from webpack-dev-server@2.11.5
npm ERR! node_modules/webpack-dev-server
npm ERR! dev webpack-dev-server@"^2.4.5" from the root project
npm ERR!
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR!
npm ERR! See /home/app/.npm/eresolve-report.txt for a full report.
npm ERR! A complete log of this run can be found in:
npm ERR! /home/app/.npm/_logs/2021-06-09T06_43_48_181Z-debug.log
Currently,
npm audit fix
cannot fix NPM vulnerabilities and it seems to be related to the webpack-dev-server version stated inpackage.json
.npm audit fix
produces: