Hey mate.
I have confirmed. I’ve performed all the steps of the project from scratch several times now and get the same results. To demonstrate I’ve documented the steps below.
Prereqs
node –v
v16.13.2
npm –v
8.3.2
git –version
git version 2.35.0
prettier –v
2.5.1
Initial setup
mkdir will-it-miss
cd will-it-miss
mkdir src
git init
Using 'master' as the name for the initial branch.....
npm init –force
npm WARN using --force Recommended protections disabled....
Get project files
Downloaded mdn-will-it-miss-master.zip
Extracted /mdn-will-it-miss-master/src/ to /will-it-miss/src/
Install tools
npm install --save-dev eslint prettier babel-eslint
npm WARN deprecated babel-eslint@10.1.0: babel-eslint is now @babel/eslint-parser. This package will no longer receive updates....
Created /will-it-miss/.prettierrc.json
{
"singleQuote": true,
"trailingComma": "es5"
}
Created /will-it-miss/.eslintrc.json
{
"env": {
"es6": true,
"browser": true
},
"extends": ["eslint:recommended", "plugin:react/recommended"],
"parserOptions": {
"ecmaVersion": 6,
"sourceType": "module",
"ecmaFeatures": {
"jsx": true
}
},
"plugins": ["react"],
"rules": {
"semi": "error",
"no-console": 0,
"react/jsx-uses-vars": "error"
}
}
Installed react plugin
npm install --save-dev eslint-plugin-react
added 46 packages, and audited 166 packages in 4s...
Created /will-it-miss/.postcssrc (postcss github recommends to have json file extension but testing showed no change through adding this)
{
"plugins": {
"postcss-preset-env": {
"stage": 0
}
}
}
Run
npx parcel src/index.html
Building packages until reaches scheduler-tracing.development.js
. Previously let run for 6 hours without success. After 5 minutes, cancelled process via ctrl + c
.
npx parcel src/index.html
username@devbox-01:~/will-it-miss$ npx parcel src/index.html
Server running at http://localhost:1234
/home/username/will-it-miss/src/index.css:undefined:undefined: plugin is not a function
at LazyResult.run (/home/username/will-it-miss/node_modules/parcel-bundler/node_modules/postcss/lib/lazy-result.js:288:14)
at LazyResult.asyncTick (/home/username/will-it-miss/node_modules/parcel-bundler/node_modules/postcss/lib/lazy-result.js:212:26)
at /home/username/will-it-miss/node_modules/parcel-bundler/node_modules/postcss/lib/lazy-result.js:254:14
at new Promise (<anonymous>)
at LazyResult.async (/home/username/will-it-miss/node_modules/parcel-bundler/node_modules/postcss/lib/lazy-result.js:250:23)
at LazyResult.then (/home/username/will-it-miss/node_modules/parcel-bundler/node_modules/postcss/lib/lazy-result.js:131:17)
Troubleshooting
Tried to directly install react assuming that was cause.
npm install react
up to date, audited 1038 packages in 8s...
Tried running npm audit fix
npm audit fix
up to date, audited 1038 packages in 7s
74 packages are looking for funding
run `npm fund` for details
# npm audit report
ansi-regex >2.1.1 <5.0.1
Severity: moderate
Inefficient Regular Expression Complexity in chalk/ansi-regex - https://github.com/advisories/GHSA-93q8-gq69-wqmw
No fix available
node_modules/@parcel/logger/node_modules/ansi-regex
node_modules/ora/node_modules/ansi-regex
strip-ansi 4.0.0 - 5.2.0
Depends on vulnerable versions of ansi-regex
node_modules/@parcel/logger/node_modules/strip-ansi
node_modules/ora/node_modules/strip-ansi
@parcel/logger <=1.11.1
Depends on vulnerable versions of strip-ansi
node_modules/@parcel/logger
parcel-bundler *
Depends on vulnerable versions of @parcel/logger
Depends on vulnerable versions of css-modules-loader-core
Depends on vulnerable versions of fast-glob
Depends on vulnerable versions of node-forge
Depends on vulnerable versions of postcss
node_modules/parcel-bundler
ora 2.0.0 - 4.0.2
Depends on vulnerable versions of strip-ansi
node_modules/ora
glob-parent <5.1.2
Severity: high
Regular expression denial of service - https://github.com/advisories /GHSA-ww39-953v-wcq6
No fix available
node_modules/chokidar/node_modules/glob-parent
node_modules/fast-glob/node_modules/glob-parent
chokidar 1.0.0-rc1 - 2.1.8
Depends on vulnerable versions of glob-parent
node_modules/chokidar
@parcel/watcher <=1.12.1
Depends on vulnerable versions of chokidar
node_modules/@parcel/watcher
fast-glob <=2.2.7
Depends on vulnerable versions of glob-parent
node_modules/fast-glob
parcel-bundler *
Depends on vulnerable versions of @parcel/logger
Depends on vulnerable versions of css-modules-loader-core
Depends on vulnerable versions of fast-glob
Depends on vulnerable versions of node-forge
Depends on vulnerable versions of postcss
node_modules/parcel-bundler
node-forge <1.0.0
Prototype Pollution in node-forge debug API. - https://github.com/advisories/GHSA-5rrq-pxf6-6jx5
No fix available
node_modules/node-forge
parcel-bundler *
Depends on vulnerable versions of @parcel/logger
Depends on vulnerable versions of css-modules-loader-core
Depends on vulnerable versions of fast-glob
Depends on vulnerable versions of node-forge
Depends on vulnerable versions of postcss
nth-check <2.0.1
node_modules/parcel-bundler
nth-check <2.0.1
Severity: moderate
Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr
fix available via `npm audit fix`
node_modules/nth-check
css-select <=3.1.0
Depends on vulnerable versions of nth-check
node_modules/css-select
svgo 1.0.0 - 1.3.2
Depends on vulnerable versions of css-select
node_modules/svgo
htmlnano >=0.1.1
Depends on vulnerable versions of cssnano
Depends on vulnerable versions of purgecss
Depends on vulnerable versions of svgo
Depends on vulnerable versions of uncss
node_modules/htmlnano
postcss-svgo <=5.0.0-rc.2
Depends on vulnerable versions of postcss
Depends on vulnerable versions of svgo
node_modules/postcss-svgo
postcss <=8.2.12
Severity: moderate
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-hwj9-h5mp-3pm3
Regular Expression Denial of Service in postcss - https://github.com/advisories/GHSA-566m-qj78-rww5
No fix available
node_modules/css-declaration-sorter/node_modules/postcss
node_modules/css-modules-loader-core/node_modules/postcss
node_modules/cssnano-preset-default/node_modules/postcss
node_modules/cssnano-util-raw-cache/node_modules/postcss
node_modules/cssnano/node_modules/postcss
node_modules/parcel-bundler/node_modules/postcss
node_modules/postcss-calc/node_modules/postcss
node_modules/postcss-colormin/node_modules/postcss
node_modules/postcss-convert-values/node_modules/postcss
node_modules/postcss-discard-comments/node_modules/postcss
node_modules/postcss-discard-duplicates/node_modules/postcss
node_modules/postcss-discard-empty/node_modules/postcss
node_modules/postcss-discard-overridden/node_modules/postcss
node_modules/postcss-merge-longhand/node_modules/postcss
node_modules/postcss-merge-rules/node_modules/postcss
node_modules/postcss-minify-font-values/node_modules/postcss
node_modules/postcss-minify-gradients/node_modules/postcss
node_modules/postcss-minify-params/node_modules/postcss
node_modules/postcss-minify-selectors/node_modules/postcss
node_modules/postcss-modules-extract-imports/node_modules/postcss
node_modules/postcss-modules-local-by-default/node_modules/postcss
node_modules/postcss-modules-scope/node_modules/postcss
node_modules/postcss-modules-values/node_modules/postcss
node_modules/postcss-normalize-charset/node_modules/postcss
node_modules/postcss-normalize-display-values/node_modules/postcss
node_modules/postcss-normalize-positions/node_modules/postcss
node_modules/postcss-normalize-repeat-style/node_modules/postcss
node_modules/postcss-normalize-string/node_modules/postcss
node_modules/postcss-normalize-timing-functions/node_modules/postcss
node_modules/postcss-normalize-unicode/node_modules/postcss
node_modules/postcss-normalize-url/node_modules/postcss
node_modules/postcss-normalize-whitespace/node_modules/postcss
node_modules/postcss-ordered-values/node_modules/postcss
node_modules/postcss-reduce-initial/node_modules/postcss
node_modules/postcss-reduce-transforms/node_modules/postcss
node_modules/postcss-svgo/node_modules/postcss
node_modules/postcss-unique-selectors/node_modules/postcss
node_modules/purgecss/node_modules/postcss
node_modules/stylehacks/node_modules/postcss
node_modules/uncss/node_modules/postcss
css-declaration-sorter <=5.1.2
Depends on vulnerable versions of postcss
node_modules/css-declaration-sorter
css-modules-loader-core *
Depends on vulnerable versions of postcss
Depends on vulnerable versions of postcss-modules-values
node_modules/css-modules-loader-core
parcel-bundler *
Depends on vulnerable versions of @parcel/logger
Depends on vulnerable versions of css-modules-loader-core
Depends on vulnerable versions of fast-glob
Depends on vulnerable versions of node-forge
Depends on vulnerable versions of postcss
node_modules/parcel-bundler
cssnano <=4.1.11
Depends on vulnerable versions of cssnano-preset-default
Depends on vulnerable versions of postcss
node_modules/cssnano
htmlnano >=0.1.1
Depends on vulnerable versions of cssnano
Depends on vulnerable versions of purgecss
Depends on vulnerable versions of svgo
Depends on vulnerable versions of uncss
node_modules/htmlnano
cssnano-preset-default <=4.0.8
Depends on vulnerable versions of postcss
node_modules/cssnano-preset-default
cssnano-util-raw-cache *
Depends on vulnerable versions of postcss
node_modules/cssnano-util-raw-cache
postcss-calc 4.1.0 - 7.0.5
Depends on vulnerable versions of postcss
node_modules/postcss-calc
postcss-colormin <=4.0.3
Depends on vulnerable versions of postcss
node_modules/postcss-colormin
postcss-convert-values <=4.0.1
Depends on vulnerable versions of postcss
node_modules/postcss-convert-values
postcss-discard-comments <=4.0.2
Depends on vulnerable versions of postcss
node_modules/postcss-discard-comments
postcss-discard-duplicates 1.1.0 - 4.0.2
Depends on vulnerable versions of postcss
node_modules/postcss-discard-duplicates
postcss-discard-empty 1.1.0 - 4.0.1
Depends on vulnerable versions of postcss
node_modules/postcss-discard-empty
postcss-discard-overridden <=4.0.1
Depends on vulnerable versions of postcss
node_modules/postcss-discard-overridden
postcss-merge-longhand <=4.0.11
Depends on vulnerable versions of postcss
Depends on vulnerable versions of stylehacks
node_modules/postcss-merge-longhand
postcss-merge-rules <=4.0.3
Depends on vulnerable versions of postcss
node_modules/postcss-merge-rules
postcss-minify-font-values <=4.0.2
Depends on vulnerable versions of postcss
node_modules/postcss-minify-font-values
postcss-minify-gradients <=4.0.2
Depends on vulnerable versions of postcss
node_modules/postcss-minify-gradients
postcss-minify-params <=4.0.2
Depends on vulnerable versions of postcss
node_modules/postcss-minify-params
postcss-minify-selectors <=4.0.2
Depends on vulnerable versions of postcss
node_modules/postcss-minify-selectors
postcss-modules-extract-imports <=2.0.0
Depends on vulnerable versions of postcss
node_modules/postcss-modules-extract-imports
postcss-modules-local-by-default <=3.0.3
Depends on vulnerable versions of postcss
node_modules/postcss-modules-local-by-default
postcss-modules-scope <=2.2.0
Depends on vulnerable versions of postcss
node_modules/postcss-modules-scope
postcss-modules-values <=3.0.0
Depends on vulnerable versions of postcss
node_modules/postcss-modules-values
postcss-normalize-charset <=4.0.1
Depends on vulnerable versions of postcss
node_modules/postcss-normalize-charset
postcss-normalize-display-values <=4.0.2
Depends on vulnerable versions of postcss
node_modules/postcss-normalize-display-values
postcss-normalize-positions <=4.0.2
Depends on vulnerable versions of postcss
node_modules/postcss-normalize-positions
postcss-normalize-repeat-style <=4.0.2
Depends on vulnerable versions of postcss
node_modules/postcss-normalize-repeat-style
postcss-normalize-string <=4.0.2
Depends on vulnerable versions of postcss
node_modules/postcss-normalize-string
postcss-normalize-timing-functions <=4.0.2
Depends on vulnerable versions of postcss
node_modules/postcss-normalize-timing-functions
postcss-normalize-unicode <=4.0.1
Depends on vulnerable versions of postcss
node_modules/postcss-normalize-unicode
postcss-normalize-url 1.1.0 - 4.0.1
Depends on vulnerable versions of postcss
node_modules/postcss-normalize-url
postcss-normalize-whitespace <=4.0.2
Depends on vulnerable versions of postcss
node_modules/postcss-normalize-whitespace
postcss-ordered-values <=4.1.2
Depends on vulnerable versions of postcss
node_modules/postcss-ordered-values
postcss-reduce-initial <=4.0.3
Depends on vulnerable versions of postcss
node_modules/postcss-reduce-initial
postcss-reduce-transforms <=4.0.2
Depends on vulnerable versions of postcss
node_modules/postcss-reduce-transforms
postcss-svgo <=5.0.0-rc.2
Depends on vulnerable versions of postcss
Depends on vulnerable versions of svgo
node_modules/postcss-svgo
postcss-unique-selectors <=4.0.1
Depends on vulnerable versions of postcss
node_modules/postcss-unique-selectors
purgecss 2.0.1-beta.0 - 3.0.0
Depends on vulnerable versions of postcss
node_modules/purgecss
stylehacks <=4.0.3
Depends on vulnerable versions of postcss
node_modules/stylehacks
uncss >=0.14.0
Depends on vulnerable versions of postcss
node_modules/uncss
54 vulnerabilities (1 low, 48 moderate, 5 high)
To address issues that do not require attention, run:
npm audit fix
Some issues need review, and may require choosing a different dependency.