Pimatic Unsave? - Pimatic "npm audit security report"
Hey,
i switched over from a Raspberry 3 to a Lattepanda Delta with Ubuntu. Pimatic works fine but NPM reports a lot of Securtiy Messages for Pimatic.
“found 68 vulnerabilities (14 low, 38 moderate, 15 high, 1 critical) in 2818 scanned packages”
Here the Full-Audit Log: https://leetwerk-designs.de/a/npm-log.txt
Is this a Problem?
@tehmilcho said in Pimatic Unsave? - Pimatic "npm audit security report":
Is this a Problem?
@tehmilcho said in Pimatic Unsave? - Pimatic "npm audit security report":
Is this a Problem?
I think you should be fine if you do not expose pimatic to the internet. Most of the issues apply to stuff used in the third party packages. To effectively mitigate these issues (upgrading third party package most of the time) we have to ditch Node 4 support which is EOL anyway!
"It always takes longer than you expect, even when you take into account Hofstadter's Law.", Hofstadter's Law
@mwittig Mhh i have my Pimatic open via Internet 
Its behind a ReverseProxy from my Synlogoy NAS.
The “Errormessage” says i should run “npm Audit Fix” will this fix it or will it crash my Pimatic?
You might want to update your npm and node.
What are your versions?
npm -version and node --version should tell you.
The first thing to do might be to install a higher npm version, which will then also require a reinstall of pimatic.
See the wiki for that.
Remember to save your pimatic-database.sqlite and config.json (and possibly your certificates?)
