https://supertokens.com/ logo
Title
a

Aithusa

02/07/2023, 4:49 PM
I'm getting npm audit messages with supertokens-node
r

rp

02/07/2023, 8:18 PM
hey @Aithusa which version of the node SDK are you using? We updated this dependency to >= 9
Hmm. We depend on ^9.0.0 of that lib.
Try reinstalling your node modules
a

Aithusa

02/07/2023, 9:20 PM
I deleted my node_modules and ran npm install but I'm still getting the same audit report
r

rp

02/08/2023, 4:57 AM
whats the version of jsonwebtoken in package-lock.json?
a

Aithusa

02/09/2023, 5:50 PM
"jsonwebtoken": "^8.5.1",
r

rp

02/09/2023, 6:29 PM
right. Thats why.
So our sdk depends on ^9.0.0
maybe something else is adding an older version to your app
Might wanna check that out
a

Aithusa

02/10/2023, 3:25 AM
It also happens when I do npm init and npm install supertokens-node in a fresh project
r

rp

02/10/2023, 5:08 AM
hmm. Ok let me check. Maybe some depdency of ours thats causing an issue
hey @Aithusa - i just tried the fresh install as well and it gave jsonwebtoken version 9.0.0. Can you send over your package-lock.json file here?
a

Aithusa

02/10/2023, 6:25 AM
sh
npm init
npm install supertokens-node
My version is 9.0.0 for jsonwebtokens
r

rp

02/10/2023, 6:30 AM
@kakashi_44 can help here
k

kakashi_44

02/10/2023, 11:46 AM
Hey @Aithusa , can you try doing
npm install "https://github.com/supertokens/supertokens-node.git#package-version-update" --save
let me know if it fixes the issue for you and I'll create a PR for that
a

Aithusa

02/10/2023, 5:11 PM
Yes that seems to work
r

rp

02/10/2023, 5:11 PM
ok great! we will release this version