npm audit fix

npm install -g expo-cli 설치하려고 했는데

 

26 vulnerabilities (6 moderate, 17 high, 3 critical)

26가지 취약성(중간 6개, 높음 17개, 중요 3개)

To address issues that do not require attention, run:
  npm audit fix

주의가 필요하지 않은 문제를 해결하려면 다음을 실행하십시오.
   npm audit fix

To address all issues (including breaking changes), run:
  npm audit fix —force

변경 사항 위반을 포함한 모든 문제를 해결하려면 다음을 실행하십시오.

 npm audit fix —force

 

저한테 왜 그러세요;;;;

암튼 그렇게 시작된 구글링

코딩 애플 사이트에 답이 나와있었다.

 

내 전체 오류는 밑에와 같다.

npm install -g expo-cli

npm WARN config global `--global`, `--local` are deprecated. Use `--location=global` instead.

npm ERR! code EACCES

npm ERR! syscall mkdir

npm ERR! path /usr/local/lib/node_modules/expo-cli

npm ERR! errno -13

npm ERR! Error: EACCES: permission denied, mkdir '/usr/local/lib/node_modules/expo-cli'

npm ERR!  [Error: EACCES: permission denied, mkdir '/usr/local/lib/node_modules/expo-cli'] {

npm ERR!   errno: -13,

npm ERR!   code: 'EACCES',

npm ERR!   syscall: 'mkdir',

npm ERR!   path: '/usr/local/lib/node_modules/expo-cli'

npm ERR! }

npm ERR! 

npm ERR! The operation was rejected by your operating system.

npm ERR! It is likely you do not have the permissions to access this file as the current user

npm ERR! 

npm ERR! If you believe this might be a permissions issue, please double-check the

npm ERR! permissions of the file and its containing directories, or try running

npm ERR! the command again as root/Administrator.



npm ERR! A complete log of this run can be found in:

npm ERR!     /Users/youngran/.npm/_logs/2022-07-18T11_56_29_372Z-debug-0.log

yeonglan@yeonglan-ui-MacBookPro ~ % sudo npm install -g expo-cli

Password:

npm WARN config global `--global`, `--local` are deprecated. Use `--location=global` instead.

npm WARN deprecated source-map-url@0.4.1: See https://github.com/lydell/source-map-url#deprecated

npm WARN deprecated resolve-url@0.2.1: https://github.com/lydell/resolve-url#deprecated

npm WARN deprecated urix@0.1.0: Please see https://github.com/lydell/urix#deprecated

npm WARN deprecated source-map-resolve@0.5.3: See https://github.com/lydell/source-map-resolve#deprecated

npm WARN deprecated uuid@3.4.0: Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.

npm WARN deprecated uuid@3.4.0: Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.

npm WARN deprecated fsevents@1.2.13: fsevents 1 will break on node v14+ and could be using insecure binaries. Upgrade to fsevents 2.

npm WARN deprecated querystring@0.2.0: The querystring API is considered Legacy. new code should use the URLSearchParams API instead.

npm WARN deprecated chokidar@2.1.8: Chokidar 2 does not receive security updates since 2019. Upgrade to chokidar 3 with 15x fewer dependencies

npm WARN deprecated stable@0.1.8: Modern JS already guarantees Array#sort() is a stable sort, so this library is deprecated. See the compatibility table on MDN: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/sort#browser_compatibility

npm WARN deprecated svgo@1.3.2: This SVGO version is no longer supported. Upgrade to v2.x.x.

npm WARN deprecated fsevents@1.2.13: fsevents 1 will break on node v14+ and could be using insecure binaries. Upgrade to fsevents 2.

npm WARN deprecated chokidar@2.1.8: Chokidar 2 does not receive security updates since 2019. Upgrade to chokidar 3 with 15x fewer dependencies

npm WARN deprecated uuid@3.4.0: Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.

npm WARN deprecated subscriptions-transport-ws@0.9.8: The `subscriptions-transport-ws` package is no longer maintained. We recommend you use `graphql-ws` instead. For help migrating Apollo software to `graphql-ws`, see https://www.apollographql.com/docs/apollo-server/data/subscriptions/#switching-from-subscriptions-transport-ws    For general help using `graphql-ws`, see https://github.com/enisdenjo/graphql-ws/blob/master/README.md

npm WARN deprecated graphql-tools@3.0.0: This package has been deprecated and now it only exports makeExecutableSchema.\nAnd it will no longer receive updates.\nWe recommend you to migrate to scoped packages such as @graphql-tools/schema, @graphql-tools/utils and etc.\nCheck out https://www.graphql-tools.com to learn what package you should use instead



added 1477 packages, and audited 1478 packages in 1m



122 packages are looking for funding

  run `npm fund` for details



26 vulnerabilities (6 moderate, 17 high, 3 critical)



To address issues that do not require attention, run:

  npm audit fix



To address all issues (including breaking changes), run:

  npm audit fix --force



Run `npm audit` for details.

 

찾아본 결과:

코딩 애플 홈페이지에 작동에 문제없으면 건드리지 않는 게 좋다고 나와있었음.

npm audit fix 하면 오히려 프로젝트가 망가지는 경우가 있다고 함.

그냥 라이브러리들 업데이트되기까지 기다리거나 하면 자연스럽게 해결된다고 함.

 

그래서 그냥 무시하고 다음 도구 설치하니까 괜찮았음.