npm update issue - Githubissues

framework7io / framework7

Full featured HTML framework for building iOS & Android apps

http://framework7.io

MIT License

18.08k stars 3.23k forks source link

npm update issue #4287

Closed askotx closed 2 weeks ago

askotx commented 3 weeks ago

Framework7 version: 8.3.3
Platform and Target: Cordova Android & Electron, web

Describe the bug

While I was updating to newest npm modules, an issuse was throwed:

# npm audit report

path-to-regexp  4.0.0 - 7.2.0
Severity: high
path-to-regexp outputs backtracking regular expressions - https://github.com/advisories/GHSA-9wv6-86v2-598j
fix available via `npm audit fix --force`
Will install framework7@5.1.1, which is a breaking change
node_modules/path-to-regexp
  framework7  >=5.1.2
  node_modules/framework7

To Reproduce

I use ncu (npm-check-updates) to check last updates:

Expected behavior

Will work with zero issues

Actual Behavior

npm audit fix --force (will fallback to a previuos framework7 version [v5.1.2]) A safety issue?

Screenshots

askotx commented 2 weeks ago

Somehow, it's already solved