inveniosoftware / inveniosoftware/cookiecutter-invenio-instance
tests: fix npm vulnerabilities
Open
enhancement
- Dominant language
- Python
- Stars
- 6
- Forks
- 38
- PR merge metrics
- No merged PRs in 30d
Description
A fresh v3.2 install reports the following during ``./bootstrap.sh``. Start with high severity.
```
found 8 vulnerabilities (1 low, 4 moderate, 3 high)
run `npm audit fix` to fix them, or `npm audit` for details
```
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by running ./bootstrap.sh on a fresh v3.2 install and then inspect the npm audit output, prioritizing the three high-severity findings. Identify the dependency changes required and rerun the bootstrap and audit checks; done means the reported high-severity vulnerabilities are resolved.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript, shell
- Domain
- build-system, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100