google / santa-tracker-web

The source code to Santa Tracker's website, by Google
https://santatracker.google.com
Other
610 stars 155 forks source link

37 Vulnerabilities when installing prerequisites #117

Open SleepyBoi2852 opened 1 year ago

SleepyBoi2852 commented 1 year ago

So I was trying to install the prerequisites, and npm said that there is 37 Vulnerabilities (13 moderate, 21 high, 3 critical)

even after npm audit fix --force, it has 3 vulnerabilities (2 moderate, 1 high)

Here are some npm log files 2022-12-24T11_40_59_679Z-debug-0.log 2022-12-24T11_40_59_118Z-debug-0.log 2022-12-24T11_40_41_735Z-debug-0.log

Jezzamonn commented 1 year ago

Thanks for the heads up! We do have some dependencies to update. Given Santa Tracker doesn't bring in user-generated content, I think most of those should be ok. I did a quick check through and the bulk of the dependencies look to be related to our build system. We'll get those updated for next year :)