How to Fix Vulnerability Issues in Node.JS & Gulp with NPM Override

[@PixemWeb]

*UPDATED NPM Video* ua-cam.com/video/VAHkHj3I6Wg/v-deo.html

[@UBO58]

11ty drove me crazy with some vulnerable packages / dependencies. So you explained exactly what I was looking for. Thanks a lot man!

[@iulianpet-fy4qd]

First comment ever on UA-cam, you're the man!. Thank you for sharing knowledge. Just subscribed! And thumb up!

[@gophius]

Excellent tip, worked like a charm!

[@uttkarshpatel8947]

Thank You very much, i was getting 4 vulnerabilities because of semver, but after using override to version 7.5.3, it was fixed

[@PixemWeb]

Glad it helped. 🙌

[@jakubgadzala7474]

Thanks man, solved the problem. Subscribed.

[@PixemWeb]

Awesome, glad it helped.

[@j.r.r.tolkien8724]

Great explanation. Thanks a lot.

[@PixemWeb]

No problem, I’m glad it helped. Thanks for watching 🙏

[@ok_basil]

Thank you very much! Worked like a charm!!

[@DriveChannel-dy6dg]

hi. when I copy an image using this syntax src/styles/**/*.scss . Then gulp cannot copy the images

[@shoelaced]

Thank YOU. I was getting so sick of the Dependabot alerts about glob-parent.

[@rlxpudding2056]

Thank you very, you are awesome. Your tut helped me so much!

[@PixemWeb]

No problem. I’m glad it was helpful. Thanks for watching 🙏🙏

[@TianyuShen-e3f]

It's really useful!

[@qaziarsalanshah5184]

Really helpful 👍

[@PixemWeb]

Thanks 🙏

[@user-ti9py9pg4t]

man this really helped me thanks

[@PhilDiasPJD]

Awesome video and extremely helpful. If say you were using Yarn instead of npm, would you follow a similar approach with the overrides? Thanks

[@PixemWeb]

With Yarn, you would use resolutions instead. The concept is the same, just different terminology. Thanks for the question, and for watching.

[@PhilDiasPJD]

@@PixemWeb just had a quick look at resolutions. Like you say, the concept is the same. Thanks.

[@aizatariq3347]

How did you know which version of chokidar, glob-parent to override?

[@RisingMooon]

Thank you so much for this video! The gulp vulnerability messages were driving me crazy

[@aizatariq3347]

How did you know which version of chokidar, glob-parent to override?

[@PixemWeb]

I went to NPM and looked for the current version. Then I tested to make sure that using it wouldn’t cause problems with my workflow.

[@VinceM1000]

This is great and I have used this on a couple of projects. A new high severity vulnerability has come up and it looks bad. How do I fix ua-parser-js 0.8.1 - 1.0.32? Would this be an override as well? How would I go about doing this one?

[@VinceM1000]

I tried to do an override but it didn't work it says
node_modules/browser-sync/node_modules/ua-parser-js
browser-sync >=2.27.6
Depends on vulnerable versions of ua-parser-js
node_modules/browser-sync

[@shabanlukyamuzi4012]

THANK YOU SIR!!👍

[@aliabdel-shaheed1124]

thanks alot 😍

[@ZukoTheShinigami]

THANK YOU SO MUCH!!!

[@KvWater]

very epic

[@Сергій-о3э]

Thanks a lot

[@SLCODEGEN]

Yes it works

[@LEGORAYStudios]

Nope, it generates more vulnerabilities with that command for some reason. I just ended deleting my npm project and start from full scratch.