inveniosoftware / inveniosoftware/cookiecutter-invenio-instance

tests: fix npm vulnerabilities

Open
#216 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Python
Stars
6
Forks
38
PR merge metrics
No merged PRs in 30d

Description

A fresh v3.2 install reports the following during ``./bootstrap.sh``. Start with high severity.

```
found 8 vulnerabilities (1 low, 4 moderate, 3 high)
run `npm audit fix` to fix them, or `npm audit` for details
```

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by running ./bootstrap.sh on a fresh v3.2 install and then inspect the npm audit output, prioritizing the three high-severity findings. Identify the dependency changes required and rerun the bootstrap and audit checks; done means the reported high-severity vulnerabilities are resolved.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript, shell
Domain
build-system, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.