sitespeedio / sitespeedio/sitespeed.io

npm-shrinkwrap.json causing issues with internal npm registry

Open
#4,592 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug
Dominant language
JavaScript
Stars
5k
Forks
624
Avg merge
4h 8m
Merged PRs (30d)
2

Description

Have you read the documentation?
URL

n/a

What are you trying to accomplish

Hi,

The current version (39.4.2) of sitespeed.io (and many others as well) includes npm-shrinkwrap.json. It looks like this was introduced many years back, but it is preventing us from installing it in our company setup as we have an internal instance of the npm registry due to security issues.

I wish there was a better solution, something in the .npmrc file for example to disable it on our end, but there is unfortunately not. Until then having npm-shrinkwrap.json will prevent us from using sitespeed.io. Can you please consider removing the file?

Thank you!

What browser did you use?

Other

How to reproduce
On an internal npm registry do an install of the package
Log output

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by inspecting the published npm-shrinkwrap.json and reproduce installation from an internal npm registry as described. Check whether removing that file allows sitespeed.io 39.4.2 to install in the reported setup; done means the package installs successfully without the registry issue.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript, node.js
Domain
tooling
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.