Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Fix 5 High Severities under following two issues:
By installing corresponding packages, and edit versions inside package-lock.json.
Since npm install won't install newest versions but just meeting criteria to requirement, running npm install again would change my manual definitions in package-lock.json.
If current solution isn't good enough, I'll try update version for packages on the root(to see if that could raise the requirement of versions for its dependencies)
The root package for node-forge is firebase-tools (not up-to-date)
The root package for url-regex is gulp-concat-css (has been up-to-date)
ps:
I updated firebase-tools to most recent version, somehow the node-forge installed still in version 0.9.2 which has high severities.
I reverted the manual changes in package-lock.json