且构网

分享程序员开发的那些事...
且构网 - 分享程序员编程开发的那些事

Npm 审计修复 --force react 脚本自动降级

更新时间:2023-09-11 21:09:58

现在,一些开发人员在更新项目时慢慢地遇到了这个希望是暂时的问题.

A few developers are now slowly getting this hopefully temporary problem when they update their projects.

例如:https://github.com/facebook/create-react-app/issues/11012

建议将此留在待办事项列表中,并等待几天包开发人员修复此问题(至少对于已经通知的包)

Recommendation is to leave this on the todo list, and wait a few days while the package developers fix this (at least for the packages that already have been notified)

然后再次运行audit fix

与此同时,一个错误,特别是高"严重性一...

In the meantime, one error in particular the 'high' severity one...

dns-packet  <5.2.2
Severity: high
Memory Exposure - https://npmjs.com/advisories/1745

https://npmjs.com/advisories/1745

如果反应应用程序在公共网络上以开发模式运行,则会出现问题,例如在 heroku 上通过 npm run start 在开发模式下运行服务器到全世界(一个坏主意,考虑搜索如何在生产模式下在 react 应用程序中部署,有几种方法).

Would be an problem if the react-application is running in dev mode on a public network e.g. running a server in dev mode on heroku via npm run start to the whole world (a BAD idea, consider searching how to deploy in react application in production mode, there are a few methods).

如果你是@home,在本地网络上,你应该没问题.

If you are @home, on a local network, you should be ok.

如果您使用的是公共 wifi - 暂时不要使用

If you are on public wifi - just don't for now