npm / npm/cli

[BUG] npm install asking for a password on nested private packages using git+ssh.

Open
#2,725 11 comments 13 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Bug Priority 2 Release 7.x
Dominant language
JavaScript
Stars
10.1k
Forks
4.7k
Avg merge
2d 2h
Merged PRs (30d)
19

Description

Current Behavior:

npm asks for a password (through VS Code) when installing private bitbucket packages that have another private package on its dependencies using git+ssh.
In a separate terminal it just get stuck in the private package installation for around 20 minutes before throwing a lot of errors.

Expected Behavior:

npm installs git+ssh packages using my SSH credentials (just like v6 did)

Steps To Reproduce:
  1. Have SSH configured.
  2. Install any private package from bitbucket (or another host. I cant test on any other than bitbucket) that depends on another private package, both using the format git+ssh://git@bitbucket.org:company-name/package-name.git.
Environment:
  • OS: Ubuntu 20.04
  • Node: 14.15.5
  • npm: 7.5.4

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing npm install with nested private Bitbucket packages using git+ssh and the listed Node 14.15.5 and npm 7.5.4 environment, then compare the behavior with npm 6. Done means the nested packages install using configured SSH credentials without a password prompt, prolonged hang, or resulting errors.

Written by the indexing model from the issue text.

Assessment

Tech stack
git, javascript, nodejs
Domain
cli
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.