Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add npm audit resolve command #9

Closed
wants to merge 55 commits into from
Closed

Conversation

naugtur
Copy link

@naugtur naugtur commented Jul 12, 2018

Add means for a human to resolve issues if they can't be fixed and interactively make decisions about each issue.

See https://npm.community/t/interactive-tool-to-manage-audit-findings-npm-audit-resolve/197

I'm still hoping to discuss this, as I assume I'm not aware of all npm-cli features and modes of operation.

TODO:

  • (partially done) add handling of npm configuration like prefix that I don't know how to do as of now
  • make npm audit use the audit-resolv.json if present
  • fix node6 support (a dependency is using ... syntax)

zkat and others added 30 commits May 24, 2018 14:36
styfle and others added 25 commits June 28, 2018 14:50
This fixes the regular expression matching in `xcode_emulation`
to also handle version numbers with multiple-digit major versions
which would otherwise break under use of XCode 10

Fixes: nodejs/node-gyp#1454
PR-URL: npm/npm#20948
Credit: @Trott
Reviewed-By: @zkat
I wasn't clear on the exact behaviour with the shorthand, but I think this change is correct.

PR-URL: npm/npm#21019
Credit: @davidgilbertson
Reviewed-By: @zkat
Downgraded to allow better deduplication
replaces cli-table2
npm install foo, not npm install foo``

PR-URL: npm/npm#21165
Credit: @hchiam
Reviewed-By: @zkat
Explicitly state that republishing an unpublished package requires a 72h waiting period.

PR-URL: npm/npm#20920
Credit: @gmattie
Reviewed-By: @zkat
@naugtur naugtur requested a review from a team as a code owner July 12, 2018 18:17
@naugtur
Copy link
Author

naugtur commented Jul 12, 2018

misclick, sorry...

@naugtur naugtur closed this Jul 12, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.