Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue #15

Closed
TuguldurJ opened this issue Feb 25, 2019 · 1 comment
Closed
Labels

Comments

@TuguldurJ
Copy link

When installing this package via NPM, I get the following warnings and errors:
npm install highlight.js vue-highlight.js

npm WARN deprecated minimatch@2.0.10: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
npm WARN deprecated minimatch@0.3.0: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
npm WARN deprecated minimatch@1.0.0: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
npm WARN deprecated graceful-fs@3.0.11: please upgrade to graceful-fs 4 for compatibility with current and future versions of Node.js
npm WARN deprecated node-uuid@1.4.8: Use uuid module instead
npm WARN deprecated hoek@0.9.1: The major version is no longer supported. Please update to 4.x or newer
npm ERR! path /Users//node_modules/highlight.js/tools/build.js
npm ERR! code ENOENT
npm ERR! errno -2
npm ERR! syscall chmod
npm ERR! enoent ENOENT: no such file or directory, chmod '/Users/
/node_modules/highlight.js/tools/build.js'
npm ERR! enoent This is related to npm not being able to find a file.

Please consider that highlightjs updated their package.

@gluons
Copy link
Owner

gluons commented Feb 25, 2019

vue-highlight.js does not contain any minimatch in dependencies.
See http://npm.broofa.com/?q=vue-highlight.js

Currently, vue-highlight.js does not contain any vulnerability.
See Snyk Vulnerabilities for npm package

highlight.js install error may relate to highlightjs/highlight.js#1984
You can still use previous version of highlight.js that does not have install problem.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants