Error Installing Community n8n-nodes-zalo-tools

Questions
1

I’m installing the “n8n-nodes-zalo-tools” package in the Community node but it gives me an error:

Error installing new package
Error loading package “n8n-nodes-zalo-tools” : Unable to load the specified package Cause: ENOENT: no such file or directory, open ‘/home/humgroup/.n8n/nodes/node_modules/n8n-nodes-zalo-tools/package.json’

Information about your n8n setup

  • **n8n version: 1.89.2
  • **Database (default: SQLite): SQLite
  • **n8n settings EXECUTIONS_PROCESS (default: own, main): none
  • **Running n8n via (Docker, npm, n8n cloud, desktop app): npm
  • **Operating system:
2

Hi @Marketing_Human

We do community nodes auditing at n8nhackers. After checking this node, we get the next results:

A) Code is different between npm and github

  1. npm is @rtawebteam/n8n-nodes-zalo - npm
  2. github is GitHub - anhtai1907/n8n-nodes-zalo
    I suppose user has changed repository references.

B) Old version
Community node is very old (2 years ago) with no updates.
And has breaking changes for the last n8n versions (this could generated problems with your n8n on execution time).

C) Problems on npm audit
Used packages have security issues:

  • :x: axios is vulnerable (Severity: high)
  • :x: braces is vulnerable (Severity: high)
  • :x: chokidar is vulnerable (Severity: high)
  • :x: crypto-js is vulnerable (Severity: critical)
  • :x: glob-watcher is vulnerable (Severity: high)
  • :x: lodash.pick is vulnerable (Severity: high)
  • :x: lodash.set is vulnerable (Severity: high)
  • :x: micromatch is vulnerable (Severity: high)
  • :x: n8n-core is vulnerable (Severity: critical)
  • :x: n8n-workflow is vulnerable (Severity: high)

I have installed it with no problems. But I am not sure if it works on execution time. Try again to install it and create a sample workflow.