手动审核-需要您解决一些漏洞|发现1个低严重漏洞

时间:2020-10-01 06:38:13

标签: javascript typescript

我刚刚开始打字稿。 我正在使用Visual Studio。

此命令出现错误:

命令:

sudo npm install --save-dev lite-server

错误:

npm WARN saveError ENOENT: no such file or directory, open '/home/hostbooks/codeacademy/typescript/package.json'
npm notice created a lockfile as package-lock.json. You should commit this file.
npm WARN optional SKIPPING OPTIONAL DEPENDENCY: fsevents@~2.1.2 (node_modules/chokidar/node_modules/fsevents):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for fsevents@2.1.3: wanted {"os":"darwin","arch":"any"} (current: {"os":"linux","arch":"x64"})
npm WARN enoent ENOENT: no such file or directory, open '/home/hostbooks/codeacademy/typescript/package.json'
npm WARN typescript No description
npm WARN typescript No repository field.
npm WARN typescript No README data
npm WARN typescript No license field.

+ lite-server@2.5.4
added 216 packages from 209 contributors and audited 217 packages in 13.118s

4 packages are looking for funding
  run `npm fund` for details

found 1 low severity vulnerability
  run `npm audit fix` to fix them, or `npm audit` for details

在第二条命令上,我得到此输出-

命令: sudo npm审核

┌──────────────────────────────────────────────────────────────────────────────┐
│                                Manual Review                                 │
│            Some vulnerabilities require your attention to resolve            │
│                                                                              │
│         Visit https://go.npm.me/audit-guide for additional guidance          │
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Low           │ Prototype Pollution                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ minimist                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=0.2.1 <1.0.0 || >=1.2.3                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ lite-server [dev]                                            │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ lite-server > minimist                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/1179                            │
└───────────────┴──────────────────────────────────────────────────────────────┘
found 1 low severity vulnerability in 217 scanned packages
  1 vulnerability requires manual review. See the full report for details.

我不知道该怎么解决。我搜索了一下,得到了这个命令,但这不能解决问题- sudo apm审核修复程序

我正在关注本教程以供参考-

https://www.youtube.com/watch?v=BwuLxPH8IDs

参考-

package.json文件-

{
  "name": "vscode",
  "version": "1.0.0",
  "main": "index.js",
  "scripts": {
    "test": "echo \"Error: no test specified\" && exit 1",
    "start": "lite-server"
  },
  "author": "",
  "license": "ISC",
  "keywords": [],
  "description": "",
  "devDependencies": {
    "lite-server": "^2.5.4"
  }
}

package-lock.json文件-

0 个答案:

没有答案