MagicMirror Forum
    • Recent
    • Tags
    • Unsolved
    • Solved
    • MagicMirror² Repository
    • Documentation
    • 3rd-Party-Modules
    • Donate
    • Discord
    • Register
    • Login
    A New Chapter for MagicMirror: The Community Takes the Lead
    Read the statement by Michael Teeuw here.

    NPM security warnings on fresh install

    Scheduled Pinned Locked Moved Bug Hunt
    9 Posts 5 Posters 2.8k Views 5 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • lavolp3L Offline
      lavolp3 Module Developer @awsoo
      last edited by lavolp3

      @macko76 I have gotten the same problems just today, however not with a really fresh install.

      You COULD do an

      npm audit
      

      and see the audit report.
      You will find in the report what to do to resolve a number of issues. Look into the headers of the tables

      Also,

      npm audit fix
      

      should resolve some of these.

      HOWEVER!!!, one major issue for example (spectron) is a dependency of electron, and I wouldn’t recommend touching these without being clear about the risk that you could destroy your running system.
      So make a backup and be careful!
      I resolved nearly all issues and it’s still running but for obvious reasons I can’t recommend…

      How to troubleshoot modules
      MMM-soccer v2, MMM-AVStock

      A 1 Reply Last reply Reply Quote 0
      • lavolp3L Offline
        lavolp3 Module Developer @awsoo
        last edited by

        @awsoo But you know that you cannot run the MagicMirror on a Raspbian Lite System per se?
        You need the x server and a desktop environment.

        How to troubleshoot modules
        MMM-soccer v2, MMM-AVStock

        A 1 Reply Last reply Reply Quote 1
        • A Offline
          awsoo @lavolp3
          last edited by

          @lavolp3 thank you for your suggestion. I’ve used the npm audit and fix: https://forum.magicmirror.builders/topic/9015/outdated-npm-packages-occur-several-vulnerabilities

          1 Reply Last reply Reply Quote 1
          • A Offline
            awsoo @lavolp3
            last edited by awsoo

            @lavolp3 No, I didn’t know it :D Really?
            Why do I need a desktop environment? Is it possible that this is the reason why I coulnd’t get electron to work?
            Okay, as I see there is a tutorial how to install it on Jessie Lite :)
            I will try it tomorrow.

            1 Reply Last reply Reply Quote 0
            • A Offline
              awsoo
              last edited by awsoo

              Ok, works after installing desktop environment :D o_O
              Thank you!

              1 Reply Last reply Reply Quote 0
              • 1 / 1
              • First post
                Last post
              Enjoying MagicMirror? Please consider a donation!
              MagicMirror created by Michael Teeuw.
              Forum managed by Sam, technical setup by Karsten.
              This forum is using NodeBB as its core | Contributors
              Contact | Privacy Policy