docs: add tip about harmless vulnerabilities (#10535)

Co-authored-by: Sébastien Lorber <slorber@users.noreply.github.com>
This commit is contained in:
Liviu Ionescu 2024-10-03 14:29:32 +03:00 committed by GitHub
parent 0657e5806c
commit e8545b5280
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -163,6 +163,12 @@ Then, in the directory containing `package.json`, run your package manager's ins
npm install
```
:::tip
`npm install` may report several vulnerabilities and recommend running `npm audit` to address them. Typically, these reported vulnerabilities, such as RegExp DOS vulnerabilities, are harmless and can be safely ignored. Also read this article, which reflects our thinking: [npm audit: Broken by Design](https://overreacted.io/npm-audit-broken-by-design/).
:::
To check that the update occurred successfully, run:
```bash