search

kentcdodds / advanced-react-patterns-v2

Created with CodeSandbox
https://codesandbox.io/s/github/kentcdodds/advanced-react-patterns-v2
1.51k stars 567 forks source link

"npm i" shows 40 vulnerabilities #27

Closed plug-n-play closed 6 years ago

plug-n-play commented 6 years ago

Thanks Kent & other contributors for all your efforts. Just wanted to point out security vulnerabilities npm reports as it completes (please note there isn't any issue with the installation):

image

Here is the summary of npm audit - https://file-eqqipuzafp.now.sh/

Environment Details: OS: macOS Sierra - 10.12.6 Node: v8.9.1 NPM: v6.0.1

kentcdodds commented 6 years ago

Thanks for the issue. All of the vulnerabilities are dependencies of react-scripts so we can't do anything about that directly. Please file this issue on create-react-app. Thanks!

Make sure to note our version in this project is 2.0.0-next.b2fd8db8. Thanks again!