high severity vulnerability

[sxzctzppyw]

Hi,
Please see screenshot.
It says: found 1 high severity vulnerability in 1612 scanned packages

[kb3eua]

Duplicate of RealFaviconGenerator/rfg-api#23

[rohan-deshpande]

You can get around this by using npx ie., in an npm script:

npx cli-real-favicon generate ./path/to/favicon/description.json ./path/to/favicon/data.json ./path/to/favicon

[kb3eua]

@rohan-deshpande That does not address the issue on any level. Just using npx does not magically make rfg-api use a newer version of axios... the vulnerability is still there.

[rohan-deshpande]

Since the security vulnerability is related to the usage of a proxy in axios requests axios/axios#3369 I would say that actually this is a non issue because rfg-api doesn't even use a proxy https://github.com/RealFaviconGenerator/rfg-api/blob/master/index.js#L40

If you read the related issue you'd see that this is basically confirmed axios/axios#3369 (comment)

This is why using npx is helpful, because you don't get a non-issue warning in your npm audit.