Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Security/Build] Node/NPM Dependencies are Out-of-Date & Build Fails w/o Python2 #531

Open
danieldjewell opened this issue Mar 7, 2023 · 0 comments

Comments

@danieldjewell
Copy link

As of today, running a simple npm audit against the current packages.json file reveals 149 vulnerabilities (5 low, 70 moderate, 44 high, 30 critical) ...

Additionally, I receive a build error from node-gyp that it cannot locate python2 (which isn't available, installed, nor supported any longer) ... The dependency tree is something like this (in reverse): [email protected] > [email protected] > @angular/[email protected]... The old version of Angular is probably causing this issue.

For reference, the current version of @angular/cli is 15.2.1 (released 2023-03-01). (Actually, that goes for all of angular... the current version used here is 4.3.6.)

A quick run of npm outdated reveals a significant delta...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant