Read the statement by Michael Teeuw here.
How to 'manual review' vulnerabilities and what are 'breaking changes'?
-
@DæmonEyes I tried
npm audit
as well -
@DæmonEyes
me again
have you tried sudo npm audit fix? -
i can’t answer on the how to review and resolve the manual issues…
breaking changes are between version x and current version, so api changed how it worked, and all using applications MUST change to the new way or they are broken (won’t work)…
in my old world and IBM, this was NEVER allowed… same data produces same results forever…
u want to change it so NEW data produces NEW results… ok… but old format MUST remain…developers have a lot of NEW work to do, they don’t need to run around and fix old versions of the app…
(usually don’t get paid for fixes like this) -
@sdetweil hmmm that makes sense. So would
npm audit fix --force
help? or just make things worse? -
@thedoorsfanatic Just gave it a go in both the MM directory as well as in general