Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Maintenance: review @types/github-script dev dependency #28

Open
dreamorosi opened this issue May 9, 2024 · 0 comments
Open

Maintenance: review @types/github-script dev dependency #28

dreamorosi opened this issue May 9, 2024 · 0 comments

Comments

@dreamorosi
Copy link
Collaborator

Summary

The @types/github-script package appears to have been installed using the git+ssh scheme (as opposed to conventional npm I).

This prevents npm from performing integrity checks on the dependency when running npm ci:

npm WARN skipping integrity check for git dependency ssh://[email protected]/actions/github-script.git

We should review this and consider fixing it, if possible.

Why is this needed?

So that when installing dependencies the integrity checks are run on every dependency in the lock file.

Solution

Most likely uninstall & reinstall @types/github-script as npm package.

Future readers

Please react with 👍 and your use case to help us understand customer demand.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant