truffle-box/drizzle-box

Can't unbox on CI environments

brunobar79 opened this issue · 1 comments

Probably because of this https://github.com/truffle-box/drizzle-box/blob/master/scripts/build.js#L123
you are not able to unbox on CircleCI environments since when you run npm install it's also running npm audit, and because the current version of react-dev-utils has a vulnerability and throws a warning, the command exits.

You can see this happening here: https://circleci.com/gh/MetaMask/metamask-extension/64714

You might want to bump react-dev-utils to the latest version and maybe run npm install --no-audit
here instead to avoid future issues like this when one of the dependencies has a new vuln.

Fixed via #62