-
Notifications
You must be signed in to change notification settings - Fork 3.4k
Add npm audit resolve command #10
New issue
Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? # to your account
Conversation
614c234
to
322d9c2
Compare
Hey @naugtur! We just met to talk about this stuff and how to handle this PR. The conclusion is a couple of points:
|
Sounds legit. It'd be nice, since it's an interactive tool, to get some feedback from people using it in the wild. I wonder how to put my early version in front of some people as a trusted-tester stage for the resolver. |
@naugtur Could you post a comment here once you've done that, so I can subscribe to the RFC discussion? |
Sure, I wanted to have it posted already, but it's a little intimidating and I feel like I need to write a lot :) |
The RFC is up. Hope it was worth the wait... cc @isiahmeadows |
Add means for a human to resolve issues if they can't be fixed and interactively make decisions about each issue.
See https://npm.community/t/interactive-tool-to-manage-audit-findings-npm-audit-resolve/197
I'm still hoping to discuss this, as I assume I'm not aware of all npm-cli features and modes of operation.
TODO:
prefix
that I don't know how to do as of now...
syntax)