npm ejs install error: 5 vulnerabilities (1 low, 4 critical) - node.js

I was trying to download EJS and i got this error:
npm WARN deprecated transformers#2.1.0: Deprecated, use jstransformer
npm WARN deprecated constantinople#3.0.2: Please update to at least constantinople 3.1.1
npm WARN deprecated jade#1.11.0: Jade has been renamed to pug, please install the latest version of pug instead of jade
added 115 packages, and audited 116 packages in 5s
2 packages are looking for funding
run `npm fund` for details
5 vulnerabilities (1 low, 4 critical)
To address all issues (including breaking changes), run:
npm audit fix --force
Run `npm audit` for details
someone can help me?

Related

npm WARN deprecated fsevents#1.2.4: fsevents 1 will break on node v14+

I keep getting this npm warning after running npm install. I have deleted and reinstalled npm. Nothing seems to work.
npm WARN deprecated fsevents#1.2.4: fsevents 1 will break on node v14+ and could be using insecure binaries. Upgrade to fsevents 2.
up to date, audited 2107 packages in 26s
94 packages are looking for funding
run `npm fund` for details
68 vulnerabilities (14 low, 18 moderate, 32 high, 4 critical)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
Run `npm audit` for details.
first try to reset npm cache
npm cache clean --force
then retry to install npm packages
if nothing happens, try npm install --no-optional or npm install --force
hope that works
The problem isn't with npm, but with your project. It requires (possibly indirectly), fsevents#1.2.4, which is deprecated. You'll need to update your project to require a newer version, e.g.:
"fsevent": "^2.3.2"
and of course, update your project to work with this version.

Can not install firebase tools

I tried to install Firebase all this morning. I follow the tutorial officially on setup Firebase hosting with the command line:
npm install -g firebase-tools
But it keep having trouble with error, here's the error message
pm WARN config global `--global`, `--local` are deprecated. Use `--location=global` instead.
npm WARN deprecated har-validator#5.1.3: this library is no longer supported
npm WARN deprecated debug#4.1.1: Debug versions >=3.2.0 <3.2.7 || >=4 <4.3.1 have a low-severity ReDos regression when used in a Node.js environment. It is recommended you upgrade to 3.2.7 or 4.3.1. (https://github.com/visionmedia/debug/issues/797)
npm WARN deprecated uuid#3.4.0: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details.
npm WARN deprecated request#2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142
changed 647 packages, and audited 648 packages in 10s
38 packages are looking for funding
run `npm fund` for details
11 vulnerabilities (8 moderate, 3 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues (including breaking changes), run:
npm audit fix --force
Run `npm audit` for details.
pshyduc#pshyducs-Air ~ % npm audit
found 0 vulnerabilities
pshyduc#pshyducs-Air ~ % npm audit fix
up to date, audited 1 package in 60ms
found 0 vulnerabilities
pshyduc#pshyducs-Air ~ %
I already search and following steps on npm support
But on step 5 it said, do note that I don't know how to create or modify profile on VSCode so I go straight for NPM_CONFIG_PREFIX=~/.npm-global
pshyduc#pshyducs-Air ~ % source ~/.profile
source: no such file or directory: /Users/pshyduc/.profile
Appreciate all the help
After finding along, I finally found a solution, it's hidden in the Firebase Documentation.
Not very user friendly
Just use this command and you'll be all good
curl -sL https://firebase.tools | bash

node module not installed

below in my VS code i wanted to add node modules folder but it gives me error below and it's not adding it
node#17.7.1 preinstall C:\Users\saad\node_modules\node
node installArchSpecificPackage
node-win-x64#17.7.1
added 1 package in 7.696s
found 0 vulnerabilities
npm WARN #vue/compiler-sfc#3.0.4 requires a peer of vue#3.0.4 but none is installed. You must install peer dependencies yourself.
npm WARN saad#1.0.0 No description
npm WARN saad#1.0.0 No repository field.
node#17.7.1
module#1.2.5
added 4 packages from 1 contributor, removed 6 packages, updated 2 packages, moved 6 packages and audited 1219 packages in 44.799s
70 packages are looking for funding
run npm fund for details
found 13 vulnerabilities (2 low, 5 moderate, 5 high, 1 critical)
run npm audit fix to fix them, or npm audit for details
is there a way to solve this?

I was installing Expo-cli for running React native app but error below happened . how to fix this?

npm:the version of expo doesnot come.I will thanful if u could solve my problem
npm WARN deprecated uuid#3.4.0: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details.
npm WARN deprecated graphql-tools#3.0.0: This package has been deprecated and now it only exports makeExecutableSchema.\nAnd it will no longer receive updates.\nWe recommend you to migrate to scoped packages such as #graphql-tools/schema, #graphql-tools/utils and etc.\nCheck out https://www.graphql-tools.com to learn what package you should use instead```
changed 1710 packages, and audited 1711 packages in 8m
110 packages are looking for funding
run `npm fund` for details
23 vulnerabilities (20 moderate, 3 high)
To address all issues, run:
npm audit fix
Run `npm audit` for details.
.........................
<>

NPM 6 - Should I audit fix all package vulnerabilities?

After installing NPM 6 almost every NPM package that I install on an Angular 6 project has vulnerabilities.
Should I "npm audit fix" every package each time?
Should I reinstall NPM 5? Other solution?
This is the terminal sequlize code I used with its vulnerabilities:
npm i sequelize --save
npm WARN #angular/material#6.2.1 requires a peer of #angular/cdk#6.2.1
but none is installed. You must install peer dependencies yourself.
+ sequelize#4.37.10
added 16 packages from 39 contributors and audited 22308 packages in
10.659s
found 9 vulnerabilities (3 low, 5 moderate, 1 high)
run `npm audit fix` to fix them, or `npm audit` for details
Try performing the below cmd's :
* npm i karma#3.0.0 --save and
* npm install --save-dev protractor#5.4.0

Resources