Attempting to Resolve Vulnerabilities

[ayishagisel]

Started out with 40+ vulnerabilities. Resolved to 16... Attempted to use"found 16 vulnerabilities (9 low, 7 high) in 10641 scanned packages run npm audit fix to fix 2 of them. 14 vulnerabilities require manual review. See the full report for details."

Snyk assessment and fix did not find patches/updates.

[ayishagisel]

[ayishagisel]

New npm audit called for npm to be updated to npm 6.2.0.

[ayishagisel]

The above resulted in the following:

"21:26 $ sudo npm install npm@6.2.0 Password:

• npm@6.2.0 added 264 packages from 147 contributors, removed 551 packages, updated 14 packages and audited 10640 packages in 19.994s found 34 vulnerabilities (7 low, 20 moderate, 7 high) run npm audit fix to fix them, or npm audit for details"

[ayishagisel]

"Snyk Wizard' command "Tested 826 dependencies for known vulnerabilities, found 7 vulnerabilities, 29 vulnerable paths." and offered various patches.

[ayishagisel]

The patch against "node_modules/cli-table2/node_modules/lodash" (npm:lodash:20180130) failed

[ayishagisel]

fixed 4 of 33 vulnerabilities

[ayishagisel]

21:03 $ sudo npm install -g npm Password: /usr/local/bin/npm -> /usr/local/lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npx -> /usr/local/lib/node_modules/npm/bin/npx-cli.js

• npm@6.2.0 added 15 packages from 12 contributors, removed 34 packages and updated 29 packages in 8.608s