Я сейчас пытаюсь запустить проект. Когда я пытаюсь установить пакеты с npm install, я получаю found 12 vulnerabilities (8 low, 4 high) in 68482 scanned packages. Кажется, проблема в пакете decompress, используемом в @truffle/contract, потому что это отчет аудита:
High Arbitrary File Write
Package decompress
Patched in No patch available
Dependency of @truffle/contract [dev]
Path @truffle/contract > @truffle/interface-adapter > web3 >
web3-bzz > swarm-js > decompress
More info https://npmjs.com/advisories/1217
High Arbitrary File Write
Package decompress
Patched in No patch available
Dependency of @truffle/contract [dev]
Path @truffle/contract > ethereum-ens > web3 > web3-bzz >
swarm-js > decompress
More info https://npmjs.com/advisories/1217
High Arbitrary File Write
Package decompress
Patched in No patch available
Dependency of @truffle/contract [dev]
Path @truffle/contract > web3 > web3-bzz > swarm-js > decompress
More info https://npmjs.com/advisories/1217
High Arbitrary File Write
Package decompress
Patched in No patch available
Dependency of decompress [dev]
Path decompress
More info https://npmjs.com/advisories/1217
Я скопировал только часть отчета с высокими уязвимостями.
К сожалению, ссылка справки ("https://npmjs.com/advisories/1217") также не имеет решения.
У меня проблема с пакетом decompress, когда я включаю пакет @truffle/contract. Это мои зависимости:
"dependencies": {
"@angular/animations": "9.0.7",
"@angular/common": "9.0.7",
"@angular/compiler": "9.0.7",
"@angular/compiler-cli": "9.0.7",
"@angular/core": "9.0.7",
"@angular/forms": "9.0.7",
"@angular/platform-browser": "9.0.7",
"@angular/platform-browser-dynamic": "9.0.7",
"@ionic-native/core": "5.22.0",
"@ionic-native/qr-scanner": "5.22.0",
"@ionic-native/splash-screen": "5.22.0",
"@ionic-native/status-bar": "5.22.0",
"@ionic/storage": "2.2.0",
"angular": "1.7.9",
"cordova-android": "^8.1.0",
"cordova-browser": "5.0.4",
"cordova-plugin-device": "^2.0.2",
"cordova-plugin-ionic-keyboard": "^2.1.3",
"cordova-plugin-ionic-webview": "^4.1.3",
"cordova-plugin-qrscanner": "^2.6.0",
"cordova-plugin-splashscreen": "^5.0.2",
"cordova-plugin-whitelist": "^1.3.3",
"cordova-sqlite-storage": "^2.4.0",
"node-pre-gyp": "0.14.0",
"picomatch": "2.2.1",
"rxjs": "^6.5.3",
"tslib": "1.10.0",
"zone.js": "0.10.3"
},
"devDependencies": {
"@ionic/cli": "6.3.0",
"@truffle/contract": "^4.1.13",
"@types/node": "^10.11.5",
"cordova": "^9.0.0",
"cross-env": "7.0.2",
"decompress": "^4.2.0",
"ganache-cli": "6.9.1",
"http-server": "0.12.1",
"minimist": "^1.2.5",
"superagent": "5.2.2",
"truffle": "5.1.17",
"truffle-wallet-provider": "^0.0.5",
"typescript": "3.7.3"
},
"optionalDependencies": {
"fsevents": "*"
},
Может кто-нибудь помочь мне с этой ошибкой.
Илия