I check in and push a package-lock.json file that contains links to e.g. “https colon slash slash registry dot npmjs dot com.” When I push this file and run “npm install” using NPM 6, the links in the file update to use “http colon slash slash registry dot npmjs dot com.” (I’m not allowed to post li…

Hi @kevinburke - I don’t think I have the full picture, as I am not able to recreate this using the provided CircleCI image. docker run -it circleci/node:8.9.4-browsers bash cd ~ && git clone https://github.com/cBioPortal/cbioportal-frontend.git cd cbioportal-frontend npm install cat package-lock.j…

Hey Eddie, thanks for looking into the issue. We’re actually using the node 10 image for our repo and can’t think of what would cause the flakey protocol used to resolve dependencies other than the registry being set differently than what we are using on our dev environments (using the default HTTPS…

Could it have to do with the specific NPM package being installed? That would be weird.

I checked the node 10 image and registry still set to use https globally. circleci@ed5b84b1dd62:~/repo$ npm config ls -l | grep registry metrics-registry = "https://registry.npmjs.org/" ; metrics-registry = null (overridden) registry = "https://registry.npmjs.org/" I don’t know if upping the provi…

I’ve opened a ticket with NPM as I believe this may be a security issue.

"npm install" downgrades package-lock.json links from HTTPS to HTTP

Build Environment Programming Languages

Topic		Replies	Views
Running npm install is adding a "name" key to the package-lock Programming Languages nodejs	0	1734	October 7, 2021
Npm install won't run on CircleCI, but works well locally Feedback & Bug Reports npm	2	20513	December 11, 2018
Build fails while installing npm v7 Feedback & Bug Reports nodejs	5	4123	January 29, 2021
Cached wrong host means I can't run npm install Feedback & Bug Reports 2.0	1	950	November 29, 2018
NPM5 package-lock file Feedback & Bug Reports nodejs , npm	0	1264	June 27, 2017

"npm install" downgrades package-lock.json links from HTTPS to HTTP

Related topics