Page MenuHomePhabricator

Fix npm audit warnings
Closed, ResolvedPublic

Description

One audit warning is already fixed by https://gerrit.wikimedia.org/r/c/wikibase/termbox/+/498320

There are 66 remaining audit warnings, for
https://www.npmjs.com/advisories/577 1x
https://www.npmjs.com/advisories/782 1x
https://www.npmjs.com/advisories/786 64x

The persistent 64 warnings ("Low") can be attributed to two of our
direct dependencies awaiting an update - following these two tickets
should give us good indication when this is resolved
https://github.com/vuejs/vue-cli/issues/3497
https://github.com/wikimedia/stylelint-config-wikimedia/issues/88

The remaining two warnings (1 "Low" & 1 "Moderate") are both caused through
service-runner and eventually kad depending on the v3 major of lodash.
Something we could get involved with should this not be addressed by the
responsible team soon: https://github.com/wikimedia/kad/

Event Timeline

Change 498320 had a related patch set uploaded (by Tarrow; owner: Pablo Grass (WMDE)):
[wikibase/termbox@master] npm: fix audit warning

https://gerrit.wikimedia.org/r/498320

Change 498320 merged by jenkins-bot:
[wikibase/termbox@master] npm: fix audit warning

https://gerrit.wikimedia.org/r/498320

Change 503263 had a related patch set uploaded (by Pablo Grass (WMDE); owner: Pablo Grass (WMDE)):
[wikibase/termbox@master] npm: update

https://gerrit.wikimedia.org/r/503263

Change 503263 merged by jenkins-bot:
[wikibase/termbox@master] npm: update

https://gerrit.wikimedia.org/r/503263

Change 506359 had a related patch set uploaded (by Pablo Grass (WMDE); owner: Pablo Grass (WMDE)):
[wikibase/termbox@master] npm: update

https://gerrit.wikimedia.org/r/506359

Change 506359 merged by jenkins-bot:
[wikibase/termbox@master] npm: update

https://gerrit.wikimedia.org/r/506359