213. Why Update Packages?

변지영·2022년 6월 8일
0

Package.json file has some dependencies with some versions of libraries and tools that we use.
NPM allows us to use the package.json file.

When you start doing the project and we install react, your version


The version is going to be high.

When you look through git hub repositories you might see a warning like the one below.

We found some potential security vulnerabilities in your dependencies.

That is in my package.file I have some libraries that I've downloaded or that I'm using in my project that are now outdated that I should upgrade because there's been some security updates.
If you click that section you can see what you should update the program version.

semver

https://semver.npmjs.com/
If you want to see the handlebars package, you can see all the versions that it has now.

On github, if I go to the handle bars vulnerability it tells me that I should upgrade handlebars to this version.
And then copy the version in security of your github repository and at sember.

ex) >=4.0.14 means 'Download anything greater or equal to V 4.0.14
^4.0.14 means that are within version 4.0.14

^: caret symbol

0개의 댓글