• Recent
  • Tags
  • Unsolved
  • Solved
  • MagicMirror² Repository
  • Documentation
  • 3rd-Party-Modules
  • Donate
  • Discord
  • Register
  • Login
MagicMirror Forum
  • Recent
  • Tags
  • Unsolved
  • Solved
  • MagicMirror² Repository
  • Documentation
  • 3rd-Party-Modules
  • Donate
  • Discord
  • Register
  • Login
A New Chapter for MagicMirror: The Community Takes the Lead
Read the statement by Michael Teeuw here.

NPM security warnings on fresh install

Scheduled Pinned Locked Moved Bug Hunt
9 Posts 5 Posters 2.5k Views 5 Watching
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • L Offline
    lavolp3 Module Developer @awsoo
    last edited by lavolp3 Nov 2, 2018, 7:29 PM Nov 2, 2018, 7:28 PM

    @macko76 I have gotten the same problems just today, however not with a really fresh install.

    You COULD do an

    npm audit
    

    and see the audit report.
    You will find in the report what to do to resolve a number of issues. Look into the headers of the tables

    Also,

    npm audit fix
    

    should resolve some of these.

    HOWEVER!!!, one major issue for example (spectron) is a dependency of electron, and I wouldn’t recommend touching these without being clear about the risk that you could destroy your running system.
    So make a backup and be careful!
    I resolved nearly all issues and it’s still running but for obvious reasons I can’t recommend…

    How to troubleshoot modules
    MMM-soccer v2, MMM-AVStock

    A 1 Reply Last reply Nov 2, 2018, 9:24 PM Reply Quote 0
    • L Offline
      lavolp3 Module Developer @awsoo
      last edited by Nov 2, 2018, 7:29 PM

      @awsoo But you know that you cannot run the MagicMirror on a Raspbian Lite System per se?
      You need the x server and a desktop environment.

      How to troubleshoot modules
      MMM-soccer v2, MMM-AVStock

      A 1 Reply Last reply Nov 2, 2018, 9:28 PM Reply Quote 1
      • A Offline
        awsoo @lavolp3
        last edited by Nov 2, 2018, 9:24 PM

        @lavolp3 thank you for your suggestion. I’ve used the npm audit and fix: https://forum.magicmirror.builders/topic/9015/outdated-npm-packages-occur-several-vulnerabilities

        1 Reply Last reply Reply Quote 1
        • A Offline
          awsoo @lavolp3
          last edited by awsoo Nov 2, 2018, 9:29 PM Nov 2, 2018, 9:28 PM

          @lavolp3 No, I didn’t know it :D Really?
          Why do I need a desktop environment? Is it possible that this is the reason why I coulnd’t get electron to work?
          Okay, as I see there is a tutorial how to install it on Jessie Lite :)
          I will try it tomorrow.

          1 Reply Last reply Reply Quote 0
          • A Offline
            awsoo
            last edited by awsoo Nov 2, 2018, 10:08 PM Nov 2, 2018, 10:08 PM

            Ok, works after installing desktop environment :D o_O
            Thank you!

            1 Reply Last reply Reply Quote 0
            • 1 / 1
            1 / 1
            • First post
              9/9
              Last post
            Enjoying MagicMirror? Please consider a donation!
            MagicMirror created by Michael Teeuw.
            Forum managed by Sam, technical setup by Karsten.
            This forum is using NodeBB as its core | Contributors
            Contact | Privacy Policy