dependency-tree

Running ‘npm audit fix –force’ downgrades react-scripts

One of the create-react-app maintainers has announced that they cannot fix this as the vulnerabilities affect transitive dependencies, and that it should not matter. The reasoning is that the npm audit feature was built with Node apps in mind, not build tools. Vulnerabilities in the dependencies should (in most cases) not translate to vulnerabilities in … Read more

create-react-app dependency version issues with React 18

Until this is fixed for now you can delete the node_modules folder and package-lock.json. Next, open package.json and change “react”: “^18.0.0” & “react-dom”: “^18.0.0” to an earlier version e.g: “react”: “^17.0.2” & “react-dom”: “^17.0.2”. Finally, you can run npm install. Alternative Solution (Try this first!): solution suggested by joooni1998): delete both node_modules and package-lock.json run … Read more