Deno audit --fix flag fails to resolve vulnerabilities despite documentation
A developer testing Deno's built-in audit command found that its --fix flag did not resolve any vulnerabilities. The test used Deno 2.9.7 on a project with intentionally outdated packages known to have security flaws. The audit correctly identified 13 vulnerabilities across multiple severity levels. However, the documented --fix flag, along with --ignore and --frozen-lockfile options, left all vulnerabilities unchanged. This behavior contradicts the official documentation for these recently added features.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in