npm WARN deprecated [email protected]: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue

Question

I'm getting below warning while installing cordova. How I can resolve it?

Please see the image to know what happened when i ran below commands :

npm update [email protected]

npm update -d

Answer 1

npm update -g [email protected] Resolved this for me, no sweat, let me know if it doesn't work for you. Looking at your screenshots this is 90%+ likely to fix it, I think.

Looks like [email protected] which is listed in a couple of the cordova packages, has a dependency on [email protected] which has a dependency on [email protected]

This is an example of why npm is the package manager of infinite madness. I still like modern JavaScript, but npm is as dangerous as it is useful, in my opinion.

Answer 2

This is what I did to update minimatch

Following a comment on this GitHub issue,

$ npm update minimatch $ npm -v 2.10.1 $ npm install -g npm@3 /usr/local/bin/npm -> /usr/local/lib/node_modules/npm/bin/npm-cli.js [email protected] /usr/local/lib/node_modules/npm $ npm install -g [email protected] /usr/local/lib └─┬ [email protected]    └─┬ [email protected]      ├── [email protected]      └── [email protected]   $ npm -v 3.10.5 $npm view minimatch version 3.0.2