Sails: 25 vulnerabilities require manual review

[Saeed-Pooyanfar]

Sails version: 1.1.0
Node version: 8.15.0
NPM version: 6.7.0
DB adapter name: N/A
DB adapter version: N/A
Operating system: Ubuntu 18.04 LTS

---

Hi,
After installing sails, npm says:
found 25 vulnerabilities (23 low, 2 critical)

Critical │ Command Injection │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ open │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ No patch available │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ sails │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ sails > machinepack-process > open │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://npmjs.com/advisories/663

Critical │ Command Injection │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ open │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ No patch available │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ sails │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ sails > sails-generate > machinepack-process > open │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://npmjs.com/advisories/663

Anyway great framework, thanks.

[sailsbot]

Hi @Saeed-Pooyanfar! It looks like you may have removed some required elements from the initial comment template, without which I can't verify that this post meets our contribution guidelines. To re-open this issue, please copy the template from here, paste it at the beginning of your initial comment, and follow the instructions in the text. Then post a new comment (e.g. "ok, fixed!") so that I know to go back and check.

Sorry to be a hassle, but following these instructions ensures that we can help you in the best way possible and keep the Sails project running smoothly.

*If you feel this message is in error, or you want to debate the merits of my existence (sniffle), please contact [email protected]

[johnabrams7]

@Saeed-Pooyanfar - Thanks for taking the time to explore these messages. I have a helpful clip for Sails that explains these NPM warnings and vulnerabilities further: Sails.js ENGINEERING 110: NPM Warnings