Skip to content

Conversation

@nisrulz
Copy link

@nisrulz nisrulz commented Oct 23, 2025

This PR updates dependencies via running npm audit fix


Console logs:

❯ npm install  

added 631 packages, and audited 632 packages in 12s

148 packages are looking for funding
  run `npm fund` for details

8 vulnerabilities (2 low, 3 moderate, 2 high, 1 critical)

To address all issues, run:
  npm audit fix

Run `npm audit` for details.

On running npm audit fix

❯ npm audit fix

added 4 packages, removed 7 packages, changed 26 packages, and audited 629 packages in 7s

148 packages are looking for funding
  run `npm fund` for details

# npm audit report

electron  <35.7.5
Severity: moderate
Electron has ASAR Integrity Bypass via resource modification - https://github.com/advisories/GHSA-vmqv-hx8q-j7mg
fix available via `npm audit fix --force`
Will install electron@38.4.0, which is a breaking change
node_modules/electron

1 moderate severity vulnerability

To address all issues (including breaking changes), run:
  npm audit fix --force

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant