Questions tagged [npm]
Use this tag if a question is about npm
15 questions
0 votes
0 answers
6 views
Authentication with github when using sonatype nexus in CI builds only for NodeJS
We have a NodeJS project in our kubernetes cluster. We are looking at using Sonatype Nexus(self hosted) for caching packages. One package is a private package that we host on github npm registry. We ...
0 votes
2 answers
185 views
Dockerhub says Hello World causes CVE-2023-5363 and CVE-2023-5678
Dockerhub says I have the vulnerabilities: CVE-2023-5363 and CVE-2023-5678, which is part of the openssl package. See this image: Does anyone know how I can resolve this issue? I've simplified my ...
-1 votes
1 answer
33 views
Stopped the process after executing npm start / macOS homebrew
I was in the process of creating function components. When I noticed a problem was after I hit save and my terminal never updated me if it was a successful compile... I'll admit I panicked... a little....
2 votes
0 answers
232 views
`npm audit` is not returning any vulnerabilities, however dependabot is
In order to force devs to update vulnerabilities more often we wanted to add npm audit to a pre-push hook. We thought this would cut down on the number of dependabot alerts too. However, while ...
2 votes
1 answer
2k views
How to upload a file as user input in Github Actions workflow?
I would like to upload .env file to a build in Github Actions. Is there any way I can do it?
0 votes
1 answer
646 views
RUN fails while installing Angular on Ubuntu Image
I am trying to create an image for my angular application for running unit and e2e tests. I started from the ubuntu image and then installed the other components. My dockerfile has the following ...
14 votes
2 answers
4k views
Does `npm audit` add any value when using `dependabot`
Context There are multiple ways to scan projects for vulnerabilities. Dependabot can be configured to check repositories for issues, and automatically submits pull requests to resolve. NPM Audit will ...
0 votes
1 answer
277 views
Best practise/standard practise for semantic versioning in development
I have a project that looks like this: SOME_MONOREPO, managed by lerna - package-a - package-b - depends on package-a, package-c - package-c - is currently private, so ...
3 votes
1 answer
514 views
When to "npm publish" when using git flow
I'm using the following resources as a guide to git flow: git-flow cheatsheet git-flow Using git-flow to automate your git branching workflow However, none of them explicitly mention at what point you ...
2 votes
1 answer
9k views
Issue installing NPM packages on Jenkins
I have a Jenkins build I am using for a Vue.js application. I am trying to install all dependancies as part of the pipeline and am running into some issues. I've included the below output as well as ...
3 votes
1 answer
17k views
npm not found but installed from the shell script file in Dockerfile
I have a following Dockerfile: FROM ubuntu:18.04 RUN mkdir app && cd app WORKDIR app/ RUN apt-get update && apt-get install -y \ software-properties-common \ curl \ sudo ...
1 vote
2 answers
577 views
How to deploy a ZIP or WAR equivalent (built locally via npm)?
I use NPM to build my web project, and it does so nicely to a little ZIP file. Keeps everything nice and light, and I can easily keep bloat down. My current process is to use an FTP client (Win SCP), ...
1 vote
1 answer
206 views
How can container user and host user both have access to same files in volume?
I'm using Docker namespaces in an effort to allow files created within a volume to be arbitrarily read and written to by both the container user and the host user (please let me know if this is even a ...
14 votes
2 answers
29k views
How to enable the npm cache in a Jenkins build slave that runs in docker?
I have a Docker image, let's call it frontend.image, that I use for a Jenkins build slave. The Jenkins Docker plugin will spin up a container from this image and build artifacts inside the container. ...
5 votes
1 answer
1k views
Force script to fail if "npm install" has network issues
With the current Github outage, I noticed a problem with my packer setup. In a nutshell, I have a packer setup where I call a shell script that looks like this: #!/bin/bash set -e ... npm install ... ...