Updating npm packages

Check the version of packages

$ npm list react react-dom react-scripts
├── [email protected]
├── [email protected]
└── [email protected]

Update

Inside package.json

{
  "dependencies": {
    "gh-pages": "2.0.1",
    "react": "^16.8.6",
    "react-dom": "^16.8.6"
  }
  // ...
}

Adding a ^ sign in front of version allows npm to update to latest stable version. When trying to npm install without ^ sign, it will install the exact version.

$ npm update

• Update packages to latest version, even without ^ sign.

• Sometimes update might fail because of versions noted in lock file.

• There may be vulnerabilities regarding security issues in the message.

npm audit fix

Updates to version that doesn't have security concerns.