Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-25156

Npm Audit doesn't fail fast when no IQ server is configured

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 3.25.0, 3.27.0
    • Fix Version/s: 3.28.0
    • Component/s: npm-audit
    • Labels:
      None

      Description

      If no IQ server is configured / available and a developer runs npm audit then NXRM will parse the package-lock file then download and cache components before checking for the IQ connection and failing. This endpoint should do nothing when IQ is not available.

      Acceptance Criteria

      • npm audit fails fast when no IQ server is configured
      • package-lock.json is not parsed
      • No components are downloaded or cached

        Attachments

          Activity

            People

            Assignee:
            mdodgson Mark Dodgson
            Reporter:
            jstephens Joseph Stephens
            Last Updated By:
            Joe Tom
            Team:
            NXRM - Gunter
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Date of First Response:

                tigCommentSecurity.panel-title

                  PagerDuty