提示有高危漏洞,之后了解到是版本低的原因
    本例中tar版本需要升级到4.4.8

    1. Sign in,
    2. We found a potential security vulnerability in a repository for which you have been granted security alert access.
    3. Only users who have been assigned access to security alerts will receive these notifications.
    4. Unsubscribe · Email preferences · Terms · Privacy · Sign into GitHub
    5. GitHub, Inc.
    6. 88 Colin P Kelly Jr St.
    7. San Francisco, CA 94107
    8. /Whchat-progammer
    9. Known high severity security vulnerability detected in tar < 4.4.2 defined in package-lock.json.
    10. package-lock.json update suggested: tar ~> 4.4.2.
    11. Always verify the validity and compatibility of suggestions with your codebase.
    12. R

    询问后了解到等上测后即可