Is there any update of the npm dependencies?
Hello I just bought the Megatronic, I install the Angular demo 1 for testing and when I just install the dependencies I got this log in which I got 4 high vulnerabilities, I see that core-js is no longer maintained and not recommented for usage etc.. in adition to sass and npmcli so.. please review it:
npm WARN deprecated @types/sass@1.45.0: This is a stub types definition. sass provides its own type definitions, so you do not need this installed.
npm WARN deprecated @npmcli/move-file@2.0.1: This functionality has been moved to @npmcli/fs
npm WARN deprecated core-js@2.6.12: core-js@<3.23.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Some versions have web compatibility issues. Please, upgrade your dependencies to the actual version of core-js.
added 1620 packages, and audited 1621 packages in 31s
178 packages are looking for funding
run `npm fund` for details
30 vulnerabilities (26 moderate, 4 high)
To address issues that do not require attention, run:
npm audit fix
To address all issues possible (including breaking changes), run:
npm audit fix --force
Some issues need review, and may require choosing
a different dependency.
Run `npm audit` for details.
Replies (4)
Hi,
I suggest trying to install the npm plugins using "yarn" instead of "npm install" to see if it helps resolve the warning issue. Yarn is another package manager that can be used as an alternative to npm.
By using yarn, it might have fewer warning messages during the installation process. Additionally, our team is actively working on updating the dependencies to address any potential issues. We will release an updated version soon to ensure a smoother installation process.
Please give yarn a try and let us know if you encounter any further issues.
Thanks
All right I will try it, I was following the documentation here: https://preview.keenthemes.com/metronic8/angular/docs/quick-start
And it uses npm so thats why I was using it, but I will try it and let you know.
Thanks
Now test it with Yarn and it seems to be another Issues similars than npm:
There are a lot of warnings trying to avoid to use some dependenciesyarn install
yarn install v1.22.19
info No lockfile found.
warning package-lock.json found. Your project contains lock files generated by tools other than Yarn. It is advised not to mix package managers in order to avoid resolution inconsistencies caused by unsynchronized lock files. To clear this warning, remove package-lock.json.
[1/4] Resolving packages...
warning Resolution field "autoprefixer@10.4.5" is incompatible with requested version "autoprefixer@10.4.13"
warning @angular-devkit/build-angular > webpack-dev-middleware > memfs@3.6.0: this will be v4
warning @angular-devkit/build-angular > webpack-dev-server > webpack-dev-middleware > memfs@3.6.0: this will be v4
warning @types/sass-loader > @types/sass@1.45.0: This is a stub types definition. sass provides its own type definitions, so you do not need this installed.
warning rtlcss-webpack-plugin > babel-runtime > core-js@2.6.12: core-js@<3.23.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Some versions have web compatibility issues. Please, upgrade your dependencies to the actual version of core-js.
[2/4] Fetching packages...
[3/4] Linking dependencies...
warning " > autoprefixer@10.4.5" has unmet peer dependency "postcss@^8.1.0".
warning " > @angular/material@15.2.9" has unmet peer dependency "@angular/cdk@15.2.9".
[4/4] Building fresh packages...
success Saved lockfile.
Done in 153.54s.
Hi Arturo Solano,
Apologies for the delay. And thank you for your feedback.
We will try to update all related plugins and remove the outdated warnings as many as possible.
Thanks
