fact-bounty icon indicating copy to clipboard operation
fact-bounty copied to clipboard

Vulnerabilities found while setting up fact-bounty-client

Open shivanshuraj1333 opened this issue 6 years ago • 0 comments

While setting up the project when we setup fact-bounty-client and install all the project dependencies by running npm install inside fact-Bounty/fact-bounty-client we get different warnings and we found 431 vulnerabilities (429 low, 1 moderate, 1 high) as shown in the below figure.

Screenshot from 2020-03-29 18-07-46

Fig. 1

As suggested (from fig.) if we run npm audit fix, it fixes 360 vulnerabilities out of 431, from the remaining vulnerabilities, 2 vulnerabilities required manual review and could not be updated and 1 package update for 69 vulnerabilities involved breaking changes.

Screenshot from 2020-03-29 18-16-39

Fig. 2

So, the current code base should be modified to remove the warnings and vulnerabilities.

shivanshuraj1333 avatar Mar 29 '20 12:03 shivanshuraj1333