0 verbose cli /root/.hermes/node/bin/node /usr/local/bin/npm
1 info using npm@11.19.1
2 info using node@v26.8.2
3 silly config load:file:/root/.hermes/node/lib/node_modules/npm/npmrc
4 silly config load:file:/usr/local/lib/hermes-agent/.npmrc
5 silly config load:file:/root/.npmrc
6 silly config load:file:/root/.hermes/node/etc/npmrc
7 verbose title npm audit
8 verbose argv "audit" "--json" "--workspace" "ui-tui"
9 verbose logfile logs-max:10 dir:/root/.npm/_logs/2026-09-12T07_51_51_453Z-
10 verbose logfile /root/.npm/_logs/2026-09-12T07_51_51_453Z-debug-0.log
11 silly logfile done cleaning log files
12 silly packumentCache heap:2248146944 maxSize:562036736 maxEntrySize:281018368
13 silly audit bulk request {
13 silly audit   semver: [ '7.8.5' ],
13 silly audit   '@types/node': [ '22.20.1' ],
13 silly audit   'lru-cache': [ '11.5.2' ],
13 silly audit   'undici-types': [ '6.21.0' ],
13 silly audit   '@alcalzone/ansi-tokenize': [ '0.1.3', '0.3.0' ],
13 silly audit   '@asamuzakjp/css-color': [ '5.1.11' ],
13 silly audit   '@asamuzakjp/dom-selector': [ '7.1.1' ],
13 silly audit   '@asamuzakjp/generational-cache': [ '1.0.1' ],
13 silly audit   '@asamuzakjp/nwsapi': [ '2.3.9' ],
13 silly audit   nanoid: [ '3.3.18' ],
13 silly audit   '@bramus/specificity': [ '2.4.2' ],
13 silly audit   '@csstools/color-helpers': [ '6.1.0' ],
13 silly audit   '@csstools/css-calc': [ '3.2.1' ],
13 silly audit   '@csstools/css-color-parser': [ '4.1.9' ],
13 silly audit   '@csstools/css-parser-algorithms': [ '4.0.0' ],
13 silly audit   '@csstools/css-syntax-patches-for-csstree': [ '1.1.6' ],
13 silly audit   '@csstools/css-tokenizer': [ '4.0.0' ],
13 silly audit   'ansi-styles': [ '6.2.3' ],
13 silly audit   chalk: [ '5.6.2' ],
13 silly audit   'supports-color': [ '7.2.0' ],
13 silly audit   '@emnapi/core': [ '2.0.0-alpha.3' ],
13 silly audit   '@emnapi/runtime': [ '2.0.0-alpha.3' ],
13 silly audit   '@emnapi/wasi-threads': [ '2.0.1' ],
13 silly audit   '@esbuild/aix-ppc64': [ '0.28.1' ],
13 silly audit   '@esbuild/android-arm': [ '0.28.1' ],
13 silly audit   '@esbuild/android-arm64': [ '0.28.1' ],
13 silly audit   '@esbuild/android-x64': [ '0.28.1' ],
13 silly audit   '@esbuild/darwin-arm64': [ '0.28.1' ],
13 silly audit   '@esbuild/darwin-x64': [ '0.28.1' ],
13 silly audit   '@esbuild/freebsd-arm64': [ '0.28.1' ],
13 silly audit   '@esbuild/freebsd-x64': [ '0.28.1' ],
13 silly audit   '@esbuild/linux-arm': [ '0.28.1' ],
13 silly audit   '@esbuild/linux-arm64': [ '0.28.1' ],
13 silly audit   '@esbuild/linux-ia32': [ '0.28.1' ],
13 silly audit   '@esbuild/linux-loong64': [ '0.28.1' ],
13 silly audit   '@esbuild/linux-mips64el': [ '0.28.1' ],
13 silly audit   '@esbuild/linux-ppc64': [ '0.28.1' ],
13 silly audit   '@esbuild/linux-riscv64': [ '0.28.1' ],
13 silly audit   '@esbuild/linux-s390x': [ '0.28.1' ],
13 silly audit   '@esbuild/linux-x64': [ '0.28.1' ],
13 silly audit   '@esbuild/netbsd-arm64': [ '0.28.1' ],
13 silly audit   '@esbuild/netbsd-x64': [ '0.28.1' ],
13 silly audit   '@esbuild/openbsd-arm64': [ '0.28.1' ],
13 silly audit   '@esbuild/openbsd-x64': [ '0.28.1' ],
13 silly audit   '@esbuild/openharmony-arm64': [ '0.28.1' ],
13 silly audit   '@esbuild/sunos-x64': [ '0.28.1' ],
13 silly audit   '@esbuild/win32-arm64': [ '0.28.1' ],
13 silly audit   '@esbuild/win32-ia32': [ '0.28.1' ],
13 silly audit   '@esbuild/win32-x64': [ '0.28.1' ],
13 silly audit   '@exodus/bytes': [ '1.15.1' ],
13 silly audit   'emoji-regex': [ '10.6.0' ],
13 silly audit   'string-width': [ '8.2.2', '7.2.0' ],
13 silly audit   'wrap-ansi': [ '10.0.0', '9.0.2' ],
13 silly audit   '@jridgewell/sourcemap-codec': [ '1.5.5' ],
13 silly audit   '@nanostores/react': [ '1.1.0' ],
13 silly audit   '@noble/hashes': [ '2.2.0' ],
13 silly audit   '@oxc-project/types': [ '0.142.0' ],
13 silly audit   '@rolldown/binding-android-arm64': [ '1.2.1' ],
13 silly audit   '@rolldown/binding-darwin-arm64': [ '1.2.1' ],
13 silly audit   '@rolldown/binding-darwin-x64': [ '1.2.1' ],
13 silly audit   '@rolldown/binding-freebsd-x64': [ '1.2.1' ],
13 silly audit   '@rolldown/binding-linux-arm-gnueabihf': [ '1.2.1' ],
13 silly audit   '@rolldown/binding-linux-arm64-gnu': [ '1.2.1' ],
13 silly audit   '@rolldown/binding-linux-arm64-musl': [ '1.2.1' ],
13 silly audit   '@rolldown/binding-linux-ppc64-gnu': [ '1.2.1' ],
13 silly audit   '@rolldown/binding-linux-s390x-gnu': [ '1.2.1' ],
13 silly audit   '@rolldown/binding-linux-x64-gnu': [ '1.2.1' ],
13 silly audit   '@rolldown/binding-linux-x64-musl': [ '1.2.1' ],
13 silly audit   '@rolldown/binding-openharmony-arm64': [ '1.2.1' ],
13 silly audit   '@rolldown/binding-wasm32-wasi': [ '1.2.1' ],
13 silly audit   '@rolldown/binding-win32-arm64-msvc': [ '1.2.1' ],
13 silly audit   '@rolldown/binding-win32-x64-msvc': [ '1.2.1' ],
13 silly audit   '@rolldown/pluginutils': [ '1.0.1' ],
13 silly audit   '@standard-schema/spec': [ '1.1.0' ],
13 silly audit   '@types/chai': [ '5.2.3' ],
13 silly audit   '@types/deep-eql': [ '4.0.2' ],
13 silly audit   '@types/estree': [ '1.0.9' ],
13 silly audit   '@types/react': [ '19.2.17' ],
13 silly audit   '@vitest/expect': [ '4.1.10' ],
13 silly audit   '@vitest/mocker': [ '4.1.10' ],
13 silly audit   '@vitest/pretty-format': [ '4.1.10' ],
13 silly audit   '@vitest/runner': [ '4.1.10' ],
13 silly audit   '@vitest/snapshot': [ '4.1.10' ],
13 silly audit   '@vitest/spy': [ '4.1.10' ],
13 silly audit   '@vitest/utils': [ '4.1.10' ],
13 silly audit   'indent-string': [ '5.0.0' ],
13 silly audit   'ansi-escapes': [ '7.3.0' ],
13 silly audit   'ansi-regex': [ '6.2.2' ],
13 silly audit   'assertion-error': [ '2.0.1' ],
13 silly audit   'auto-bind': [ '5.0.1' ],
13 silly audit   'bidi-js': [ '1.0.3' ],
13 silly audit   chai: [ '6.2.2' ],
13 silly audit   'cli-boxes': [ '3.0.0', '4.0.1' ],
13 silly audit   'cli-cursor': [ '4.0.0' ],
13 silly audit   'cli-truncate': [ '6.1.1' ],
13 silly audit   'code-excerpt': [ '4.0.0' ],
13 silly audit   'convert-source-map': [ '2.0.0' ],
13 silly audit   'convert-to-spaces': [ '2.0.1' ],
13 silly audit   'css-tree': [ '3.2.1' ],
13 silly audit   csstype: [ '3.2.3' ],
13 silly audit   'data-urls': [ '7.0.0' ],
13 silly audit   'decimal.js': [ '10.6.0' ],
13 silly audit   'detect-libc': [ '2.1.2' ],
13 silly audit   entities: [ '8.0.0' ],
13 silly audit   'is-fullwidth-code-point': [ '5.1.0', '4.0.0' ],
13 silly audit   'strip-ansi': [ '7.2.0' ],
13 silly audit   environment: [ '1.1.0' ],
13 silly audit   'es-module-lexer': [ '2.3.1' ],
13 silly audit   'es-toolkit': [ '1.49.0' ],
13 silly audit   esbuild: [ '0.28.1' ],
13 silly audit   'escape-string-regexp': [ '2.0.0' ],
13 silly audit   'estree-walker': [ '3.0.3' ],
13 silly audit   'expect-type': [ '1.4.0' ],
13 silly audit   fdir: [ '6.5.0' ],
13 silly audit   fsevents: [ '2.3.3' ],
13 silly audit   'signal-exit': [ '3.0.7', '4.1.0' ],
13 silly audit   'get-east-asian-width': [ '1.6.0' ],
13 silly audit   'has-flag': [ '4.0.0' ],
13 silly audit   'html-encoding-sniffer': [ '6.0.0' ],
13 silly audit   ink: [ '7.1.1' ],
13 silly audit   'ink-text-input': [ '6.0.0' ],
13 silly audit   'type-fest': [ '5.8.0', '4.41.0' ],
13 silly audit   'is-in-ci': [ '2.0.0' ],
13 silly audit   'is-potential-custom-element-name': [ '1.0.1' ],
13 silly audit   jiti: [ '2.7.0' ],
13 silly audit   jsdom: [ '29.1.1' ],
13 silly audit   parse5: [ '8.0.1' ],
13 silly audit   lightningcss: [ '1.33.0' ],
13 silly audit   'lightningcss-android-arm64': [ '1.32.0' ],
13 silly audit   'lightningcss-darwin-arm64': [ '1.32.0' ],
13 silly audit   'lightningcss-darwin-x64': [ '1.32.0' ],
13 silly audit   'lightningcss-freebsd-x64': [ '1.32.0' ],
13 silly audit   'lightningcss-linux-arm-gnueabihf': [ '1.32.0' ],
13 silly audit   'lightningcss-linux-arm64-gnu': [ '1.32.0' ],
13 silly audit   'lightningcss-linux-arm64-musl': [ '1.32.0' ],
13 silly audit   'lightningcss-linux-x64-gnu': [ '1.32.0' ],
13 silly audit   'lightningcss-linux-x64-musl': [ '1.32.0' ],
13 silly audit   'lightningcss-win32-arm64-msvc': [ '1.32.0' ],
13 silly audit   'lightningcss-win32-x64-msvc': [ '1.32.0' ],
13 silly audit   'lodash-es': [ '4.18.1' ],
13 silly audit   'lodash.debounce': [ '4.0.8' ],
13 silly audit   'magic-string': [ '0.30.21' ],
13 silly audit   'mdn-data': [ '2.27.1' ],
13 silly audit   'mimic-fn': [ '2.1.0' ],
13 silly audit   nanostores: [ '1.4.2' ],
13 silly audit   tr46: [ '6.0.0' ],
13 silly audit   'webidl-conversions': [ '8.0.1' ],
13 silly audit   'whatwg-url': [ '16.0.1' ],
13 silly audit   undici: [ '7.29.0', '6.28.0' ],
13 silly audit   obug: [ '2.1.4' ],
13 silly audit   onetime: [ '5.1.2' ],
13 silly audit   'patch-console': [ '2.0.0' ],
13 silly audit   pathe: [ '2.0.3' ],
13 silly audit   picocolors: [ '1.1.1' ],
13 silly audit   picomatch: [ '4.0.5' ],
13 silly audit   prettier: [ '3.9.5' ],
13 silly audit   punycode: [ '2.3.1' ],
13 silly audit   react: [ '19.2.7' ],
13 silly audit   'react-reconciler': [ '0.33.0' ],
13 silly audit   'require-from-string': [ '2.0.2' ],
13 silly audit   'restore-cursor': [ '4.0.0' ],
13 silly audit   rolldown: [ '1.2.1' ],
13 silly audit   postcss: [ '8.5.23' ],
13 silly audit   saxes: [ '6.0.0' ],
13 silly audit   scheduler: [ '0.27.0' ],
13 silly audit   siginfo: [ '2.0.0' ],
13 silly audit   'slice-ansi': [ '9.0.0' ],
13 silly audit   'source-map-js': [ '1.2.1' ],
13 silly audit   'stack-utils': [ '2.0.6' ],
13 silly audit   stackback: [ '0.0.2' ],
13 silly audit   'std-env': [ '4.2.0' ],
13 silly audit   'supports-hyperlinks': [ '3.2.0' ],
13 silly audit   'symbol-tree': [ '3.2.4' ],
13 silly audit   'tagged-tag': [ '1.0.0' ],
13 silly audit   'terminal-size': [ '4.0.1' ],
13 silly audit   tinybench: [ '2.9.0' ],
13 silly audit   tinyexec: [ '1.2.4' ],
13 silly audit   tinyglobby: [ '0.2.17' ],
13 silly audit   tinyrainbow: [ '3.1.0' ],
13 silly audit   tldts: [ '7.4.9' ],
13 silly audit   'tldts-core': [ '7.4.9' ],
13 silly audit   'tough-cookie': [ '6.0.2' ],
13 silly audit   tslib: [ '2.8.1' ],
13 silly audit   tsx: [ '4.23.1' ],
13 silly audit   typescript: [ '6.0.3' ],
13 silly audit   'unicode-animations': [ '1.0.3' ],
13 silly audit   'usehooks-ts': [ '3.1.1' ],
13 silly audit   vite: [ '8.2.0' ],
13 silly audit   vitest: [ '4.1.10' ],
13 silly audit   'w3c-xmlserializer': [ '5.0.0' ],
13 silly audit   'whatwg-mimetype': [ '5.0.0' ],
13 silly audit   'why-is-node-running': [ '2.3.0' ],
13 silly audit   'widest-line': [ '6.0.0' ],
13 silly audit   ws: [ '8.21.1' ],
13 silly audit   'xml-name-validator': [ '5.0.0' ],
13 silly audit   xmlchars: [ '2.2.0' ],
13 silly audit   'yoga-layout': [ '3.2.1' ]
13 silly audit }
14 http fetch POST 200 https://registry.npmjs.org/-/npm/v1/security/advisories/bulk 86ms
15 silly audit report {
15 silly audit report   '@vitest/mocker': [
15 silly audit report     {
15 silly audit report       id: 1193684,
15 silly audit report       url: 'https://github.com/advisories/GHSA-82fw-gwwq-j7x9',
15 silly audit report       title: 'Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock',
15 silly audit report       severity: 'moderate',
15 silly audit report       vulnerable_versions: '>=2.1.0 <4.1.11',
15 silly audit report       cwe: [Array],
15 silly audit report       cvss: [Object]
15 silly audit report     }
15 silly audit report   ],
15 silly audit report   vitest: [
15 silly audit report     {
15 silly audit report       id: 1193683,
15 silly audit report       url: 'https://github.com/advisories/GHSA-82fw-gwwq-j7x9',
15 silly audit report       title: 'Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock',
15 silly audit report       severity: 'moderate',
15 silly audit report       vulnerable_versions: '>=2.1.0 <4.1.11',
15 silly audit report       cwe: [Array],
15 silly audit report       cvss: [Object]
15 silly audit report     }
15 silly audit report   ]
15 silly audit report }
16 silly packumentCache full:https://registry.npmjs.org/@vitest%2fmocker cache-miss
17 silly packumentCache full:https://registry.npmjs.org/vitest cache-miss
18 http cache https://registry.npmjs.org/@vitest%2fmocker 12ms (cache hit)
19 silly packumentCache full:https://registry.npmjs.org/@vitest%2fmocker set size:354387 disposed:false
20 http cache https://registry.npmjs.org/vitest 19ms (cache hit)
21 silly packumentCache full:https://registry.npmjs.org/vitest set size:2258303 disposed:false
22 verbose cwd /usr/local/lib/hermes-agent
23 verbose os Linux 7.0.0-30-generic
24 verbose node v26.8.2
25 verbose npm  v11.19.1
26 verbose exit 1
27 verbose code 1