pofider / phantom-html-to-pdf

Highly scalable html to pdf conversion using phantom workers
MIT License
159 stars 33 forks source link

Fixing security warning during npm install #97

Closed peterdeme closed 6 years ago

peterdeme commented 6 years ago

Fixes this issue:

PS C:\Users\Peter\Documents\PhantomConverter\phantom-html-to-pdf> npm i --prefer-offline
npm WARN notice [SECURITY] minimatch has 1 high vulnerability. Go here for more details: https://nodesecurity.io/advisories?search=minimatch&version=0.3.0 - Run `npm i npm@latest -g` to upgrade your npm version, and then `npm audit` to get more info.
npm WARN notice [SECURITY] growl has 1 critical vulnerability. Go here for more details: https://nodesecurity.io/advisories?search=growl&version=1.9.2 - Run `npm i npm@latest -g` to upgrade your npm version, and then `npm
audit` to get more info.
npm WARN notice [SECURITY] mime has 1 moderate vulnerability. Go here for more details: https://nodesecurity.io/advisories?search=mime&version=1.2.11 - Run `npm i npm@latest -g` to upgrade your npm version, and then `npm audit` to get more info.
npm WARN notice [SECURITY] hoek has 1 moderate vulnerability. Go here for more details: https://nodesecurity.io/advisories?search=hoek&version=0.9.1 - Run `npm i npm@latest -g` to upgrade your npm version, and then `npm audit` to get more info.
npm WARN notice [SECURITY] lodash has 1 low vulnerability. Go here for more details: https://nodesecurity.io/advisories?search=lodash&version=4.13.1 - Run `npm i npm@latest -g` to upgrade your npm version, and then `npm audit` to get more info.
npm WARN notice [SECURITY] npmconf has 1 moderate vulnerability. Go here for more details: https://nodesecurity.io/advisories?search=npmconf&version=2.1.1 - Run `npm i npm@latest -g` to upgrade your npm version, and then `npm audit` to get more info.
npm WARN notice [SECURITY] request has 1 moderate vulnerability. Go here for more details: https://nodesecurity.io/advisories?search=request&version=2.42.0 - Run `npm i npm@latest -g` to upgrade your npm version, and then
`npm audit` to get more info.
npm WARN notice [SECURITY] hawk has 1 moderate vulnerability. Go here for more details: https://nodesecurity.io/advisories?search=hawk&version=1.1.1 - Run `npm i npm@latest -g` to upgrade your npm version, and then `npm audit` to get more info.
npm WARN notice [SECURITY] request has 1 moderate vulnerability. Go here for more details: https://nodesecurity.io/advisories?search=request&version=2.67.0 - Run `npm i npm@latest -g` to upgrade your npm version, and then
`npm audit` to get more info.
npm WARN notice [SECURITY] concat-stream has 1 moderate vulnerability. Go here for more details: https://nodesecurity.io/advisories?search=concat-stream&version=1.5.0 - Run `npm i npm@latest -g` to upgrade your npm version, and then `npm audit` to get more info.
npm WARN notice [SECURITY] tough-cookie has 1 high, and 1 moderate vulnerabilities. Go here for more details: https://nodesecurity.io/advisories?search=tough-cookie&version=2.2.2 - Run `npm i npm@latest -g` to upgrade your npm version, and then `npm audit` to get more info.
npm WARN notice [SECURITY] debug has 1 low vulnerability. Go here for more details: https://nodesecurity.io/advisories?search=debug&version=0.7.4 - Run `npm i npm@latest -g` to upgrade your npm version, and then `npm audit` to get more info.
npm WARN notice [SECURITY] npmconf has 1 moderate vulnerability. Go here for more details: https://nodesecurity.io/advisories?search=npmconf&version=2.0.9 - Run `npm i npm@latest -g` to upgrade your npm version, and then `npm audit` to get more info.
[...]
peterdeme commented 6 years ago

@pofider is this repository completely forgotten and not maintained?

pofider commented 6 years ago

I am still here. :) This change is released in 0.5.6

However I had to add self explaining note to the readme...

The phantomjs development is on hold and as is this project. I am still trying to accept PRs but that is all for now. I recommend to evaluate other methods for html to pdf conversion. We have switched from phantomjs to headless chrome in jsreport and it works great.