search

jonorthwash / ud-annotatrix

GNU General Public License v3.0
59 stars 49 forks source link

sqlite3 version is out of date #431

Open LinzhouLi opened 3 years ago

LinzhouLi commented 3 years ago

There is something wrong with sqlite3 when I install ud-annotatrix. `D:\CODE\Apertium\ud-annotatrix>npm install

sqlite3@4.0.8 install D:\CODE\Apertium\ud-annotatrix\node_modules\sqlite3 node-pre-gyp install --fallback-to-build node-pre-gyp WARN Using request for node-pre-gyp https download node-pre-gyp WARN Tried to download(403): https://mapbox-node-binary.s3.amazonaws.com/sqlite3/v4.0.8/node-v83-win32-x64.tar.gz The link above is not accessible. And I found the latest sqlite3 version is 5.0.2 from [https://github.com/mapbox/node-sqlite3](url). So I changed the parameter in the "package.json" file. "sqlite3": "^5.0.2", It works. And I can usenpm run dev-serverto run the server. [sqlite3] Success: "D:\CODE\Apertium\ud-annotatrix\node_modules\sqlite3\lib\binding\napi-v3-win32-x64\node_sqlite3.node" is installed via remote`

But there is a lot of vulnerabilities after installation. I run npm audit fix to fix them. Finally there are 6 vulnerabilities cant be fixed. one of them is highly vulnerable. I don't know how to fix it. `found 6 vulnerabilities (5 low, 1 high) in 1408 scanned packages

High Arbitrary File Overwrite Package tar Patched in >=2.2.2 <3.0.0 || >=4.4.2 Dependency of gulp [dev] Path gulp > glob-watcher > chokidar > fsevents > node-pre-gyp > tar More info https://npmjs.com/advisories/803`

Shivani0701 commented 3 years ago

https://npmjs.com/advisories/803%60 This link is showing error.

LinzhouLi commented 3 years ago

https://npmjs.com/advisories/803%60 This link is showing error.

https://www.npmjs.com/advisories/803