truffle-box / drizzle-box

This box comes with everything you need to start using smart contracts from a react app with Drizzle. It includes drizzle, drizzle-react and drizzle-react-components to give you a complete overview of Drizzle's capabilities.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Can't unbox on CI environments

brunobar79 opened this issue · comments

Probably because of this https://github.com/truffle-box/drizzle-box/blob/master/scripts/build.js#L123
you are not able to unbox on CircleCI environments since when you run npm install it's also running npm audit, and because the current version of react-dev-utils has a vulnerability and throws a warning, the command exits.

You can see this happening here: https://circleci.com/gh/MetaMask/metamask-extension/64714

You might want to bump react-dev-utils to the latest version and maybe run npm install --no-audit
here instead to avoid future issues like this when one of the dependencies has a new vuln.

Fixed via #62