Open JohnAlexCO opened 1 year ago
If it helps at all, this is the output of the audit:
up to date, audited 469 packages in 2s
71 packages are looking for funding
run `npm fund` for details
# npm audit report
node-fetch <=2.6.6
Severity: high
The `size` option isn't honored after following a redirect in node-fetch - https://github.com/advisories/GHSA-w7rc-rwvf-8q5r
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor - https://github.com/advisories/GHSA-r683-j2x4-v87g
No fix available
node_modules/svg-term-cli/node_modules/node-fetch
svg-term-cli *
Depends on vulnerable versions of node-fetch
Depends on vulnerable versions of svgo
node_modules/svg-term-cli
nth-check <2.0.1
Severity: high
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
No fix available
node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
svg-term-cli *
Depends on vulnerable versions of node-fetch
Depends on vulnerable versions of svgo
node_modules/svg-term-cli
plist <=3.0.4
Severity: critical
Prototype pollution in Plist before 3.0.5 can cause denial of service - https://github.com/advisories/GHSA-4cpg-3vgw-4877
Depends on vulnerable versions of xmldom
fix available via `npm audit fix`
node_modules/plist
term-schemes *
Depends on vulnerable versions of plist
node_modules/term-schemes
trim-newlines <3.0.1
Severity: high
Uncontrolled Resource Consumption in trim-newlines - https://github.com/advisories/GHSA-7p7h-4mm5-852v
fix available via `npm audit fix`
node_modules/trim-newlines
meow 3.4.0 - 5.0.0
Depends on vulnerable versions of trim-newlines
node_modules/meow
xmldom *
Severity: critical
Misinterpretation of malicious XML input - https://github.com/advisories/GHSA-5fg8-2547-mr8q
Misinterpretation of malicious XML input - https://github.com/advisories/GHSA-h6q6-9hqw-rwfv
xmldom allows multiple root nodes in a DOM - https://github.com/advisories/GHSA-crh6-fp67-6883
fix available via `npm audit fix`
node_modules/xmldom
plist <=3.0.4
Depends on vulnerable versions of xmldom
node_modules/plist
term-schemes *
Depends on vulnerable versions of plist
node_modules/term-schemes
10 vulnerabilities (7 high, 3 critical)
To address issues that do not require attention, run:
npm audit fix
Some issues need review, and may require choosing
a different dependency.
Running the command from the
readme.md
results in a failure to install due to permissions.The log file around line 930 repeats this same message. I tried removing the
-g
flag from the install command, and npm gave me warnings about the package containing known vulnerabilitiesProceeded to try the parrot example from the readme; I downloaded the
parrot.json
and ran the commands after it finished installing, and well.