MagicMirror Forum
    • Recent
    • Tags
    • Unsolved
    • Solved
    • MagicMirror² Repository
    • Documentation
    • 3rd-Party-Modules
    • Donate
    • Discord
    • Register
    • Login
    A New Chapter for MagicMirror: The Community Takes the Lead
    Read the statement by Michael Teeuw here.

    NPM security warnings on fresh install

    Scheduled Pinned Locked Moved Bug Hunt
    9 Posts 5 Posters 2.6k Views 5 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M Offline
      macko76
      last edited by

      After having installed using the automated install on a freshly updated and clean OS i have received warning about 30+ packages posing High security issues. Tried ```
      npm audit fix

      
      Anyone experienced the same and if so, how did you fix it please.
      
      Thank you.
      Mykle1M 1 Reply Last reply Reply Quote 0
      • Mykle1M Offline
        Mykle1 Project Sponsor Module Developer @macko76
        last edited by

        @macko76

        I know this doesn’t help you but I wanted to let you know that I experienced the same thing just last week. However, my circumstances are different than yours. I installed ubuntu 18.04 on a laptop, and then MM afterwards. This is when I received the warning about the high security issues. At the time I thought it was a fault of ubuntu 18.04 so I wiped and installed ubuntu 16.04. Installing MM on this did not result in the security warnings. Not one.

        It is quite possible that your node and npm were inadequate at the time of the MM installation. I think having them at the latest stable version will increase your chances of a successful installation of MM. Of course, that would mean starting over again, updating to the newest, stable versions of node and npm and then installing MM again.

        Good luck to you, mate.

        Create a working config
        How to add modules

        justjim1220J 1 Reply Last reply Reply Quote 0
        • justjim1220J Offline
          justjim1220 Module Developer @Mykle1
          last edited by

          @mykle1

          I did a fresh install of Ubuntu 18.04 to dual boot with Windows 7 then added MM and didn’t get any warnings and this was about a week after MM 2.5.0 came out.

          When I did the fresh install of MM on a Windows PC, I got the warnings, Always have, but I have always done the ‘npm audit fix’ and they were fixed. Or, at least most of them, some required manual fix.

          I have always had those warnings, even get them quite often when installing modules with certain types of dependencies.

          but, with Ubuntu, I never had the warnings.

          "Life's Too Short To Dance With Ugly People"
          Jim Hallock - 1995

          1 Reply Last reply Reply Quote 0
          • A Offline
            awsoo
            last edited by awsoo

            @macko76 Did you have resolved all NPM issues on Linux?
            I’m using Raspbian Jessie Lite on RP3 and getting the same issues which I could get fixed with npm audit fix and manual fix but I can not start the Magic Mirror.

            lavolp3L 2 Replies Last reply Reply Quote 0
            • lavolp3L Offline
              lavolp3 Module Developer @awsoo
              last edited by lavolp3

              @macko76 I have gotten the same problems just today, however not with a really fresh install.

              You COULD do an

              npm audit
              

              and see the audit report.
              You will find in the report what to do to resolve a number of issues. Look into the headers of the tables

              Also,

              npm audit fix
              

              should resolve some of these.

              HOWEVER!!!, one major issue for example (spectron) is a dependency of electron, and I wouldn’t recommend touching these without being clear about the risk that you could destroy your running system.
              So make a backup and be careful!
              I resolved nearly all issues and it’s still running but for obvious reasons I can’t recommend…

              How to troubleshoot modules
              MMM-soccer v2, MMM-AVStock

              A 1 Reply Last reply Reply Quote 0
              • lavolp3L Offline
                lavolp3 Module Developer @awsoo
                last edited by

                @awsoo But you know that you cannot run the MagicMirror on a Raspbian Lite System per se?
                You need the x server and a desktop environment.

                How to troubleshoot modules
                MMM-soccer v2, MMM-AVStock

                A 1 Reply Last reply Reply Quote 1
                • A Offline
                  awsoo @lavolp3
                  last edited by

                  @lavolp3 thank you for your suggestion. I’ve used the npm audit and fix: https://forum.magicmirror.builders/topic/9015/outdated-npm-packages-occur-several-vulnerabilities

                  1 Reply Last reply Reply Quote 1
                  • A Offline
                    awsoo @lavolp3
                    last edited by awsoo

                    @lavolp3 No, I didn’t know it :D Really?
                    Why do I need a desktop environment? Is it possible that this is the reason why I coulnd’t get electron to work?
                    Okay, as I see there is a tutorial how to install it on Jessie Lite :)
                    I will try it tomorrow.

                    1 Reply Last reply Reply Quote 0
                    • A Offline
                      awsoo
                      last edited by awsoo

                      Ok, works after installing desktop environment :D o_O
                      Thank you!

                      1 Reply Last reply Reply Quote 0
                      • 1 / 1
                      • First post
                        Last post
                      Enjoying MagicMirror? Please consider a donation!
                      MagicMirror created by Michael Teeuw.
                      Forum managed by Sam, technical setup by Karsten.
                      This forum is using NodeBB as its core | Contributors
                      Contact | Privacy Policy