This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 65%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERN%3C/text%3E%3C/svg%3E)
There were 38 vulnerabilities displayed on the terminal after installing Truffle using npm and 13 vulnerabilities for Ganache. However when I tried the command on another machine, the installation completed with no vulnerabilities. Is this normal or is there a way to fix this
Thanks
This question is related to the following Learning Module
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 86%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Hi Rajesh Nair,
Thank you for posting your query on the Microsoft Q&A forum.
To address the vulnerabilities found after installing Truffle and Ganache, you can follow these steps to investigate and resolve them:
npm audit command to get a detailed report of the vulnerabilities.
npm audit
npm audit fix command to automatically apply any available patches.
npm audit fix
npm audit fix doesn't resolve all issues, it might be necessary to manually address some of the vulnerabilities by updating specific packages. Check the detailed audit report to identify which packages need updates.
npm update <package-name>
node_modules and package-lock.json followed by a fresh installation can help:
rm
Both the machines have windows 11 with updates till date. Node JS and npm versions are the same. Sharing the details Screenshot (741).png
Hi Rajesh Nair,
Thank you for posting your query on the Microsoft Q&A forum.
Since both your machines are running Windows 11 with identical Node.js and npm versions, the vulnerabilities found might not be related to the operating system or Node.js itself, but rather to the packages installed via npm, such as Truffle and Ganache, and their dependencies.
Here’s a step-by-step approach to address vulnerabilities:
Audit Dependencies: Run npm audit in your project directory. This command will identify vulnerabilities in your npm packages.
Update Packages: Use npm update or npm install [package-name]@latest to update packages to their latest versions. This often resolves vulnerabilities associated with outdated dependencies.
Automated Fixes: Run npm audit fix to automatically resolve as many vulnerabilities as possible. This command updates packages within the bounds specified in package.json.
Manual Intervention: For any vulnerabilities that npm audit fix cannot resolve automatically, you may need to:
npm install [package-name]@latest.
npm audit to ensure that all vulnerabilities are resolved.Security Best Practices:
By following these steps, you can address vulnerabilities and ensure that your development environment remains secure.
If the reply was helpful, please don’t forget to upvote or accept it as an answer, thank you!
Hi Rajesh Nair,
Just checking in to see if you had got a chance to see the previous response. To benefit the community, find the right answers, please do mark the post which was helpful by clicking on Accept Answer/Upvote. Has your issue been resolved? If you are still experiencing the problem, please inform us. We are happy to help you.
Hi Rajesh Nair,
Just checking in to see if you had got a chance to see the previous response. To benefit the community, find the right answers, please do mark the post which was helpful by clicking on Accept Answer/Upvote. Has your issue been resolved? If you are still experiencing the problem, please inform us. We are happy to help you.