Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-6889

NPM metadata requested over HTTPS tells me to get the tarball over HTTP

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 2.10
    • Fix Version/s: None
    • Component/s: NPM
    • Labels:
    • Story Points:
      2
    • Notability:
      3

      Description

      If I am a savvy user and am using registry.npmjs.org over HTTPS, and issue a metadata request like this one:
      https://registry.npmjs.org/commonjs

      It will tell me to get the tarball over HTTP. What is the point of HTTPS then?

      As I checked, both HTTP and HTTPS URLs works for tarball.

      NPM registry issue
      https://github.com/npm/npm-www/issues/915

      was told to close it, then we filed
      https://github.com/npm/newww/issues/390

      was told to close it, then we filed...
      https://github.com/npm/npm-registry-couchapp/issues/218

      ...hopefully to get some traction.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              cstamas Tamás Cservenák
              Last Updated By:
              Rich Seddon Rich Seddon
              Votes:
              1 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated:
                Date of First Response:

                  tigCommentSecurity.panel-title