Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FATAL: Unable to load template: Cannot find module 'taffydb' #17

Open
carstingaxion opened this issue Sep 16, 2023 · 0 comments
Open

FATAL: Unable to load template: Cannot find module 'taffydb' #17

carstingaxion opened this issue Sep 16, 2023 · 0 comments
Labels
bug Something isn't working dependencies 3rd-party Dependencies security Issues that have security implications

Comments

@carstingaxion
Copy link
Member

carstingaxion commented Sep 16, 2023

$ npm run build:docs

> build:docs
> rm -rf ./docs/dev/hooks && jsdoc -c hookdoc-conf.json plugin.php inc

FATAL: Unable to load template: Cannot find module 'taffydb'
Require stack:
- [...]/ft-admin-ui/node_modules/wp-hookdoc/template/publish.js
- [...]/ft-admin-ui/node_modules/jsdoc/cli.js
- [...]/ft-admin-ui/node_modules/jsdoc/jsdoc.js

... to remove a dependency of TaffyDB, which was being reported as a vulnerability. An unfortunate side effect of that is that our existing jsdoc theme (minami) requires TaffyDB without a proper entry in their package.json. minami also appears to be unmaintained.

Quoted from newrelic/node-newrelic#1500 because wp-hookdocs is our minami. Unfortunately.

This is the pure dependency hell, because we just wanted to use


Don't install taffydb, it had 1 high vulnerability:

taffydb *
Severity: high
TaffyDB can allow access to any data items in the DB
No fix available
node_modules/taffydb

GHSA-mxhp-79qh-mcx6

@carstingaxion carstingaxion added bug Something isn't working dependencies 3rd-party Dependencies labels Sep 16, 2023
@carstingaxion carstingaxion added the security Issues that have security implications label Sep 16, 2023
carstingaxion added a commit that referenced this issue Sep 16, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working dependencies 3rd-party Dependencies security Issues that have security implications
Projects
Status: No status
Development

No branches or pull requests

1 participant