Snyk抱怨包锁中缺少fsevents，但fsevents不是必需的，Snyk忽略了--strict of sync=false

Question

今天不能在我的任何项目上运行snyk，到处都有相同的错误。

snyk test-------------------------------------------------------------------------------------------------

Dependency fsevents was not found in package-lock.json. Your package.json and package-lock.json are probably out of sync. Please run "npm install" and try again.

npm安装和npm安装和npm i——仅包锁定不执行任何操作

FSEvents甚至不是包中的要求。json

package.json相关章节：

  "dependencies": {
    "bcrypt": "^5.0.1",
    "cookie-parser": "^1.4.5",
    "cors": "^2.8.5",
    "csurf": "^1.11.0",
    "debug": "~4.3.1",
    "express": "~4.17.1",
    "express-handlebars": "^5.3.0",
    "express-rate-limit": "^5.2.6",
    "helmet": "^4.4.1",
    "morgan": "~1.10.0",
    "mysql2": "^2.2.5",
    "node-cron": "^3.0.0",
    "node-fetch": "^2.6.1",
    "nodemailer": "^6.5.0",
    "redis": "^3.1.0",
    "sequelize": "^6.6.2",
    "sequelize-cli": "^6.2.0",
    "uuid": "^8.3.2",
    "winston": "^3.3.3"
  },
  "devDependencies": {
    "app-root-path": "^3.0.0",
    "babel-eslint": "^10.1.0",
    "chai": "^4.3.4",
    "chai-http": "^4.3.0",
    "eslint": "^7.23.0",
    "express-openapi-validate": "^0.5.1",
    "js-yaml": "^4.0.0",
    "jsdoc": "^3.6.6",
    "mocha": "^8.3.2",
    "nyc": "^15.1.0",
    "openapi-types": "^7.2.3",
    "sinon": "^10.0.0",
    "snyk": "^1.526.0",
    "swagger-jsdoc": "^6.1.0",
    "winston-syslog": "^2.4.4"
  }
}




Answer 1

我希望你已经解决了这个问题，但发现这个线程与相同的问题，所以张贴，如果有人发现它以后。

fsevents可能是一些其他依赖项的可传递依赖项，请检查包锁。json适用于哪一个。它是仅用于访问文件系统事件的MacOS（darwin）包。

我跑着让它工作

npm upgrade

在再次运行snyk之前。