sitespeedio / sitespeedio/sitespeed.io
npm-shrinkwrap.json causing issues with internal npm registry
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 5k
- Forks
- 624
- Avg merge
- 4h 8m
- Merged PRs (30d)
- 2
Description
Have you read the documentation?
- Yes, I've read the how to make a reproducable bug guide
- Yes, I've read the how to debug my script guide
URL
n/a
What are you trying to accomplish
Hi,
The current version (39.4.2) of sitespeed.io (and many others as well) includes npm-shrinkwrap.json. It looks like this was introduced many years back, but it is preventing us from installing it in our company setup as we have an internal instance of the npm registry due to security issues.
I wish there was a better solution, something in the .npmrc file for example to disable it on our end, but there is unfortunately not. Until then having npm-shrinkwrap.json will prevent us from using sitespeed.io. Can you please consider removing the file?
Thank you!
What browser did you use?
Other
How to reproduce
On an internal npm registry do an install of the package
Log output
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by inspecting the published npm-shrinkwrap.json and reproduce installation from an internal npm registry as described. Check whether removing that file allows sitespeed.io 39.4.2 to install in the reported setup; done means the package installs successfully without the registry issue.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript, node.js
- Domain
- tooling
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100