I have a npm hosted repository with a deployment policy = "Allow redeploy" in order to simulate snapshot versions.
After the second publish, I can't install the dependency anymore because there is a failure when checksums are compared (tested with npm 5.6.0 and yarn 1.3.2).
The problem appears in Nexus 3.7.0. I don't have this problem with Nexus 3.6.2.
Steps to reproduce the problem:
- Create a npm hosted repository with a deployment policy = "Allow redeploy"
- Create a directory with only this package.json:
{ "name": "test-publish", "version": "1.1.0" }
- Publish to the npm hosted repository
npm publish --registry http://localhost:8081/repository/npm-snapshots
- Create a file README.md
- Publish again to the npm hosted repository
- At this step, you can already see there is a problem in the Nexus UI (asset not updated)
- Create another directory with only this package.json:
{ "name": "test-install", "version": "1.1.0", "dependencies": { "test-publish": "1.1.0" } }
- Get the dependencies
npm install
- It fails
npm ERR! code EINTEGRITY npm ERR! sha512-oWVq3ClAsE/fuTaUBWUxAmfK8JqilUmFvy/RoZ9iyvy548j1s4xO8mavrQEpip5UY4+xSidmhcn3/f0lLrokSQ== integrity checksum failed when using sha512: wanted sha512-oWVq3ClAsE/fuTaUBWUxAmfK8JqilUmFvy/RoZ9iyvy548j1s4xO8mavrQEpip5UY4+xSidmhcn3/f0lLrokSQ== but got sha512-nrDFsnCoXUSOosfSgsfCnqBx5+MYA5RuSxJwJU7y65jWe8npDvxIhtuthLLq7qH3Ogkm9HegTKar3iuLy/VkjA==. (158 bytes)