Javascript and detecting Node version

post by christopher.williams on Jul 27, 2022

Chris Williams

christopher.williams

Jul 2022

I have scanned a node based application and it is returning a finding (sonatype-2012-0022) where the remedy is to run on version of node >= 0.9.4. My application is running on >= 16 and it is defined in the package-lock.json under the engines section.

Is there a way to tell Nexus Lifecycle what version of node the application runs on so findings like the one above aren’t triggered?

Thanks!

719 views