...
up to date in 1.85s
[!] 3 vulnerabilities found [2672 packages audited]
Severity: 2 low | 1 high
Run `npm audit` for more detail
Ok, let's run npm audit
⬢ power-tools (v8.11.1) npm audit
npm ERR! code EAUDITNOLOCK
npm ERR! audit Neither npm-shrinkwrap.json nor package-lock.json found: Cannot audit a project without a lockfile
npm ERR! audit Try creating one first with: npm i --package-lock-only
npm ERR! A complete log of this run can be found in:
npm ERR! /Users/julianduque/.npm/_logs/2018-05-09T21_24_41_843Z-debug.log
Oh snap, I don't use package-lock, but will follow this suggestion
⬢ power-tools (v8.11.1) npm i --package-lock-only
npm WARN [email protected] No description
npm WARN [email protected] No repository field.
npm http fetch POST 200 https://registry.npmjs.org/-/npm/v1/security/audits/quick 706ms
up to date in 2.129s
[!] 3 vulnerabilities found [2672 packages audited]
Severity: 2 low | 1 high
Run `npm audit` for more detail
Ok, I should be good, let's do it again
⬢ power-tools (v8.11.1) npm audit
npm ERR! code EAUDITNOLOCK
npm ERR! audit Neither npm-shrinkwrap.json nor package-lock.json found: Cannot audit a
project without a lockfile
npm ERR! audit Try creating one first with: npm i --package-lock-only
npm ERR! A complete log of this run can be found in:npm ERR! /Users/julianduque/.npm/_logs/2018-05-09T21_25_54_711Z-debug.log
nope!