Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

cannot resolve dependency during npm install #312

Open
rick-james-norwex opened this issue Mar 18, 2022 · 1 comment
Open

cannot resolve dependency during npm install #312

rick-james-norwex opened this issue Mar 18, 2022 · 1 comment

Comments

@rick-james-norwex
Copy link

npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR!
npm ERR! While resolving: [email protected]
npm ERR! Found: [email protected]
npm ERR! node_modules/mocha
npm ERR! mocha@"^9.2.2" from the root project
npm ERR!
npm ERR! Could not resolve dependency:
npm ERR! peer mocha@"3.0.0 - 7.x.x" from [email protected]
npm ERR! node_modules/mocha-parallel-tests
npm ERR! mocha-parallel-tests@"*" from the root project

@rick-james-norwex
Copy link
Author

there is a library which forks this one to try and support mocha ^9 however it comes with several vulnerabilities
https://www.npmjs.com/package/mocha9-parallel-tests
https://github.com/ntedgi/mocha-parallel-tests

npm audit report

ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - GHSA-93q8-gq69-wqmw
No fix available
node_modules/mocha9-parallel-tests/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/mocha9-parallel-tests/node_modules/strip-ansi
cliui 4.0.0 - 5.0.0
Depends on vulnerable versions of strip-ansi
Depends on vulnerable versions of wrap-ansi
node_modules/mocha9-parallel-tests/node_modules/cliui
yargs 10.1.0 - 15.0.0
Depends on vulnerable versions of cliui
Depends on vulnerable versions of string-width
node_modules/mocha9-parallel-tests/node_modules/yargs
mocha9-parallel-tests *
Depends on vulnerable versions of yargs
node_modules/mocha9-parallel-tests
string-width 2.1.0 - 4.1.0
Depends on vulnerable versions of strip-ansi
node_modules/mocha9-parallel-tests/node_modules/string-width
wrap-ansi 3.0.0 - 6.1.0
Depends on vulnerable versions of string-width
Depends on vulnerable versions of strip-ansi
node_modules/mocha9-parallel-tests/node_modules/wrap-ansi

7 moderate severity vulnerabilities

Some issues need review, and may require choosing
a different dependency.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant