Azure / Azure/azure-sdk-tools

Autorest extensions don't use an npm lock file when resolving dependencies

Open
#7,256 0 comments 0 reactions 0 assignees View on GitHub
Central-EngSys
Dominant language
C#
Stars
135
Forks
260
Avg merge
3d 1h
Merged PRs (30d)
144

Description

Autorest downloads extensions on demand and ignores node_modules and package-lock files.

Autorest tells yarn and npm to ignore lock files:
https://github.com/Azure/autorest/blob/main/packages/libs/extension/src/yarn.ts#L105
https://github.com/Azure/autorest/blob/main/packages/libs/extension/src/npm.ts#L15

Contributor guide

Open the contributing guide

Research direction

Start with packages/libs/extension/src/yarn.ts at line 105 and packages/libs/extension/src/npm.ts at line 15 to trace how Autorest invokes yarn and npm. Confirm how extension downloads currently ignore node_modules and package-lock files; done means dependency resolution respects the available lock files.

Written by the indexing model from the issue text.

Assessment

Tech stack
node.js, typescript
Domain
tooling
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.