Add section about upgrading npm packages for security vulnerabilities

open-contracting / software-development-handbook

A guide for developers of OCP's tools

Other

4 stars 1 forks source link

Closed jpmckinney closed 2 years ago

jpmckinney commented 2 years ago

Upgrade to latest npm e.g. npm install -g npm@latest
npm audit fix (check for fix available lines followed by Will install, check changelogs between versions, then do a manual edit to package.json)
npm audit fix --force (probably don't want to run this unless tests are comprehensive)
Manually edit version numbers in package.json