alt3 / Docusaurus.Powershell

Docusaurus websites for PowerShell modules
https://docusaurus-powershell.vercel.app/
MIT License
30 stars 12 forks source link

15 high severity vulnerabilities on Docusaurus website installation #197

Open Marc013 opened 2 months ago

Marc013 commented 2 months ago

When installing Docusaurus website npx create-docusaurus@latest docusaurus classic (as instructed in your documentation) message "15 high severity vulnerabilities" is displayed.

Please provide an update removing at least the 15 high severity vulnerabilities.

Full output:

> npx create-docusaurus@latest docusaurus classic
Need to install the following packages:
create-docusaurus@3.5.2
Ok to proceed? (y) y

npm warn deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm warn deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
√ Which language do you want to use? » JavaScript
[INFO] Creating new Docusaurus project...
[INFO] Installing dependencies with npm...
npm warn deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm warn deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
npm warn deprecated rimraf@3.0.2: Rimraf versions prior to v4 are no longer supported

added 1204 packages, and audited 1205 packages in 50s

296 packages are looking for funding
  run `npm fund` for details

15 high severity vulnerabilities

To address issues that do not require attention, run:
  npm audit fix

Some issues need review, and may require choosing
a different dependency.

Run `npm audit` for details.
[SUCCESS] Created docusaurus.
[INFO] Inside that directory, you can run several commands:

  `npm start`
    Starts the development server.

  `npm run build`
    Bundles your website into static files for production.

  `npm run serve`
    Serves the built website locally.

  `npm run deploy`
    Publishes the website to GitHub pages.

We recommend that you begin by typing:

  `cd docusaurus`
  `npm start`

Happy building awesome websites!
bravo-kernel commented 2 months ago

Thank you for your interest in this module. The warnings you see origin from the docusaurus repo.

https://docusaurus.io/docs/installation#scaffold-project-website

There should be no harm. In general, these warnings only relate to local development. You may follow up on their Discord or wait until they release new versions.