Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-31073

A npm packages global repository url might be oudated

    Details

    • Type: Bug
    • Status: New
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: NPM
    • Labels:

      Description

      If an npm package contains a repository when published, that information is used in the packages global repository url key.

      curl -s https://nexus.local/repository/npm/<package> |jq -r '.repository.url'
      

      If the package does change it's source location and therefore updates it's package.json metadata for the repository and publishes a new version, the global information is not updated.

      This behavior is different from the public npm registry and does not work correctly with related tools (e.g. renovate).

      https://github.com/renovatebot/renovate/discussions/13940

       

        Attachments

          Activity

            People

            Assignee:
            Unassigned Unassigned
            Reporter:
            knisterpeter KnisterPeter
            Last Updated By:
            Andres Ortiz Andres Ortiz
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Date of First Response:

                tigCommentSecurity.panel-title