fabien0102 / gatsby-starter

Gatsby 2.0 starter with typescript and many cools dev tools
386 stars 99 forks source link

Allot of vulnerabilities in this repo #84

Closed bentrynning closed 4 years ago

bentrynning commented 5 years ago

After installing this repo, npm reports allot of vulnerabilities in node_modules. Any suggestions if this should be checked?

added 3734 packages from 1489 contributors and audited 39108 packages in 91.283s
found 770 vulnerabilities (671 low, 71 moderate, 27 high, 1 critical)

Other than that, thanks for a perfect gatsby starter :)

fabien0102 commented 5 years ago

Can be good to update the dependencies 😅 I don't know the exact vulnerabilities list, but it's often on the tooling part so not really on what you ship in production (so it's not really risky to use, since the code is not executed by somebody else than the developer itself 😉 )

(And sorry for the answer delay, I'm a bit out of track on this project… gatsby progress very quickly and I don't really have the time to follow anymore, at least I hope that this project give you some ideas of how to organize your project 😃)

bensontrent commented 5 years ago

89 fixes security vulnerabilities.