You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
[BUG] npm audit fix is not returning the arborist diff #3531
npm audit fix --json produces a summary with numbers of items added/removed/updated etc.
Expected Behavior
npm audit fix --json returns enough information to deduce:
dependency tree path (in any reasonable form)
package name (could be included in path)
advisory id
(nice to have) was it a breaking version bump
So that npm-audit-resolver and other tools could keep track of what has been fixed:
"1754|cssnano>cssnano-preset-default>postcss-svgo>svgo>css-select>css-what": {
"decision": "fix",
"madeAt": 1625857145332
},
Steps To Reproduce
npm init -y
npm i lodash@4.17.0
npm audit fix --json
Environment
OS: any
Node: any
npm: 7
Reacted by Ronan Jouchet, Luiz Ferraz and Jonathan Park
Activity