Fix NPM Vulnerabilities with NPM Overrides - Secure NOW!

Подписаться 46 тыс.

Просмотров 18 тыс.

50% 1

LATEST: Fix NPM Vulnerabilities with NPM Overrides in order to secure your Packages and Dependencies. This is an updated video to the one I released last year.
Previous NPM Overrides Video:
• How to Fix Vulnerabili...
It's important to secure your NPM packages by ensuring you're using the latest, updated dependencies. Unfortunately some packages don't always update some of their dependencies which can open you up to vulnerabilities.
In this video I show you how to use NPM Overrides to make sure you're using the updated versions and your projects will be more secure.
This is part of an ongoing effort to help people learn to code. I use my DevWP WordPress Development Training Theme as a demonstration, but this will work with other projects as well.
Learn to Create a Custom WordPress Theme with DevWP:
• Master WordPress Theme...
Make sure to follow the steps closely and to always backup your projects.
#npm #nodejs #javascript

Опубликовано:

22 авг 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 18

@vivekiyer9273 2 месяца назад

literally saved 5 days of work. Thank you soo much!!

@PixemWeb 2 месяца назад

Glad it helped!

@houcinehannoun6578 7 месяцев назад

You are a life saver, thank you bro

@PixemWeb 7 месяцев назад

Happy to help.

@swamidhyananurag85 10 месяцев назад

Thank you for such short and effective solution!

@mr_don_key 4 месяца назад

but what about, when you keep these overrides? you fall behind eventually and it's quite labor intensive changing these overrides over and over... What is a package stops in development? (maintainer quits, no ownership transfer.. abandoned lib in essence) If you remove it, it can lead to breakage of other things.. Yet, it's vulnerable.. using an alternative package, can also lead to breaks, since it might not support the needed elements or communicates differently (function names, class names etc, which would mean rewriting you logic code.) Also, who audits this? and on what level? (security, stability, features, etc)

@VideoWow7184 3 месяца назад

We use a tool called renovate to help automatically keep npm packages upto date. If you haven't used Renovate before, it will watch for new versions of packages you are using and create a PR for them. You can even configure it on a package by package bases to automatically merge the PRs immediately or after a stabilization period. It is silver bullet as there are package incompatibilities as you have mentioned above that break tests, lint, etc that you need to fix manually but it does cut down the amount of effort overall when managing many npm packages. It also means that your always up to date so upgrading packages becomes easier since the gap between your current version and the target version will be much smaller.