zhuzhuyule / HexoEditor

this markdown Editor for hexo blog
GNU General Public License v3.0
1.22k stars 151 forks source link

swig 1.4.2 is dependency uglifyjs 2.3.24 < 2.6.0 #61

Open fireguy opened 5 years ago

fireguy commented 5 years ago

npm install error, swig 1.4.2 is dependency uglifyjs 2.3.24 < 2.6.0

├─┬ swig@1.4.2
│ ├─┬ optimist@0.6.1
│ │ ├── minimist@0.0.8 deduped
│ │ └── wordwrap@0.0.3
│ └─┬ uglify-js@2.4.24
┌──────────────────────────────────────────────────────────────────────────────┐
                                Manual Review                                 
            Some vulnerabilities require your attention to resolve            
                                                                              
         Visit https://go.npm.me/audit-guide for additional guidance          
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
 Low            Regular Expression Denial of Service                         
├───────────────┼──────────────────────────────────────────────────────────────┤
 Package        uglify-js                                                    
├───────────────┼──────────────────────────────────────────────────────────────┤
 Patched in     >=2.6.0                                                      
├───────────────┼──────────────────────────────────────────────────────────────┤
 Dependency of  swig                                                         
├───────────────┼──────────────────────────────────────────────────────────────┤
 Path           swig > uglify-js                                             
├───────────────┼──────────────────────────────────────────────────────────────┤
 More info      https://nodesecurity.io/advisories/48                        
└───────────────┴──────────────────────────────────────────────────────────────┘
found 1 low severity vulnerability in 4859 scanned packages
  1 vulnerability requires manual review. See the full report for details.