News for hackers. Stuff that matters.

A comment on GitHub Advisory Database now powers NPM audit. Parent comment

Re:GitHub Advisory Database now powers NPM audit by recursive on Friday October 08, 2021 @07:47AM (#28798134)
Just because npm audit says something doesn't mean it has any impact at all. Most of its outputs are false positives.
[ Parent | on HN ]
Re:GitHub Advisory Database now powers NPM audit by charcircuit on Friday October 08, 2021 @09:44AM (#28799217)
But when it's not a false positive, when it actually impacts your project it should be easy to update.
[ Parent | on HN ]