@cryptotaxi247 / documentation-1
Code Commits Issues Pulls Sessions CI/CD
dhei/classic-tokens
@reggi/path-to-regexp dependabot/npm_and_yarn/main/copy-to-clipboard-4.0.2 dependabot/npm_and_yarn/main/eslint-10.4.0 dependabot/npm_and_yarn/main/npmcli/eslint-config-7.0.0 dependabot/npm_and_yarn/main/proc-log-7.0.0 dependabot/npm_and_yarn/npm_and_yarn-826852524d dependabot/npm_and_yarn/npm_and_yarn-ab9a7f4bc2 deprecate-totp-2fa dhei/classic-tokens gat-bypass-2fa-docs jpg619/fix-accessibility-content-flow jpg619/version-bump-tar-2 kartykp/gat-bypass-2fa-docs kartykp/upgrade-path-to-regex main maitxn/version-bump-tar patch-1 reggi/cache-based-on-version reggi/dev-engines reggi/fix-transform-prettier reggi/overrides update-search-sensitivity
mdx 52 lines 1.42 KB
Raw
1 ---
2 title: About audit reports
3 ---
4
5 Audit reports contain tables of information about security vulnerabilities in your project's dependencies to help you fix the vulnerability or troubleshoot further.
6
7 <Screenshot src="/packages-and-modules/securing-your-code/audit-report-results.png" alt="Screenshot showing command-line audit report results" />
8
9 ## Vulnerability table fields
10
11 - [Severity](#severity)
12 - [Description](#description)
13 - [Package](#package)
14 - [Patched in](#patched-in)
15 - [Dependency of](#dependency-of)
16 - [Path](#path)
17 - [More info](#more-info)
18
19 ### Severity
20
21 The severity of the vulnerability, determined by the impact and exploitability of the vulnerability in its most common use case.
22
23 | Severity | Recommended action |
24 | :------- | :----------------------------- |
25 | Critical | Address immediately |
26 | High | Address as quickly as possible |
27 | Moderate | Address as time allows |
28 | Low | Address at your discretion |
29
30 #### Description
31
32 The description of the vulnerability. For example, "Denial of service".
33
34 #### Package
35
36 The name of the package that contains the vulnerability.
37
38 #### Patched in
39
40 The semantic version range that describes which versions contain a fix for the vulnerability.
41
42 #### Dependency of
43
44 The module that the package with the vulnerability depends on.
45
46 #### Path
47
48 The path to the code that contains the vulnerability.
49
50 #### More info
51
52 A link to the security report.