Autorest extensions don't use an npm lock file when resolving dependencies
Open
Central-EngSys
- Dominant language
- C#
- Stars
- 135
- Forks
- 260
- Avg merge
- 3d 1h
- Merged PRs (30d)
- 144
Description
Autorest downloads extensions on demand and ignores node_modules and package-lock files.
Autorest tells yarn and npm to ignore lock files:
https://github.com/Azure/autorest/blob/main/packages/libs/extension/src/yarn.ts#L105
https://github.com/Azure/autorest/blob/main/packages/libs/extension/src/npm.ts#L15
Contributor guide
Research direction
Start with packages/libs/extension/src/yarn.ts at line 105 and packages/libs/extension/src/npm.ts at line 15 to trace how Autorest invokes yarn and npm. Confirm how extension downloads currently ignore node_modules and package-lock files; done means dependency resolution respects the available lock files.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- node.js, typescript
- Domain
- tooling
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100