node.js - 如何手动修复 npm install 期间显示的漏洞？

Question

我是 NodeJS 的初学者，在安装包的过程中遇到了一些漏洞错误。我之前也遇到过一些错误。并且通过简单地更新包来修复。此外，“npm audit fix”也没有帮助。以下是“npm audit”的结果。谁能告诉我，如何手动更新这些依赖项？

                       === npm audit security report ===                        


                             Manual Review                                  
         Some vulnerabilities require your attention to resolve             

      Visit https://go.npm.me/audit-guide for additional guidance           


      High            Command Injection                                             

      Package         tree-kill                                                     

      Patched in      >=1.2.2                                                       

      Dependency of   @angular-devkit/build-angular [dev]                           

      Path            @angular-devkit/build-angular > @ngtools/webpack > tree-kill  

      More info       https://npmjs.com/advisories/1432                             


      High            Command Injection                                             

      Package         tree-kill                                                     

      Patched in      >=1.2.2                                                       

      Dependency of   @angular-devkit/build-angular [dev]                           

      Path            @angular-devkit/build-angular > tree-kill                     

      More info       https://npmjs.com/advisories/1432                             

    found 2 high severity vulnerabilities in 16547 scanned packages
      2 vulnerabilities require manual review. See the full report for details. 

另外，我可以手动更新路径“@angular-devkit/build-angular > @ngtools/webpack > tree-kill”和“@angular-devkit/build-angular > tree-kill”下的“tree-kill”包吗? 如果是，那我该怎么做？

npm 版本 - 6.12.1 节点版本 - 12.13.1

感谢您的帮助！

标签： node.jsnpmpackage.json