npm

How to replace an npm package

1. In the root directory of your project, open the package.json file.

2. If the vulnerability is in a direct dependency just replace the existing version constraint in the dependencies section:

   {
      "dependencies": {
         "package": "1.7.9-sp1"
      }
   }

3. If the vulnerability is in a transitive dependency just add to the overrides section (if one doesn't exist yet, you'll have to add it to the file) the following:

   {
      "overrides": {
         "package@1.7.9": "1.7.9-sp1"
      }
   }

4. In the root directory, run npm install.