-
Hello there,
Thanks for this amazing work but I am reporting here a crucial bug: known malicious packages are not detected when scanned.
How to reproduce:
* Add the following [known malicious p…
-
### pnpm version: 7.1.0
### Code to reproduce the issue:
Go to any pnpm repo, for example: https://github.com/dethcrypto/TypeChain
and do `pnpm dlx echo-cli test`.
### Expected behavior:
…
-
Hey
With release of rsconnect 1.0.0 - i was really happy to learn that you could use a renv.lock file for specifying deployment dependencies.
This was a big help since the release script in ou…
-
- [ ] I'd be willing to implement this feature ([contributing guide](https://github.com/pnpm/pnpm/blob/main/CONTRIBUTING.md))
**Describe the user story**
We need some solution from [lockfile inj…
-
### pnpm version:
7.17.1
### Code to reproduce the issue:
`pnpm i @bazel/typescript` (a few days ago when it was deprecated)
then
`pnpm i @bazel/typescript` now that the deprecation messag…
-
### Is there an existing issue for this?
- [X] I have searched the existing issues
### This issue exists in the latest npm version
- [X] I am using the latest npm
### Current Behavior
I…
-
**Problem**
For some crates running `generate-lockfile` does not result in a working lockfile, whereas running `fetch` does.
**Steps**
```console
$ cargo download -x alcro==0.1.4
INFO: ca…
-
vim-plug would benefit from a lockfile system for the following reasons:
1. Reproducible environments across machines
3. Prevention of unexpected plugin updates
4. Easier rollbacks to known-good …
-
V3.0.3
Lots of:
Inv1 - GivLUT - [ERROR ] - Timed out waiting for regcache
That's a 5 sec wait loop. Had a look in Docker and found /GivTCP_1/.regcache_lockfile_1 has been in existence …
-
See #510
Would be a breaking change so saved for V2.