CodingGarden / meower

A basic twitter clone built to demonstrate the full stack.
MIT License
222 stars 102 forks source link

Removed event-stream from package-lock.json #1

Closed andreaslorozco closed 4 years ago

andreaslorozco commented 5 years ago

Hey @w3cj ,

I forked and was installing meower locally but when I ran npm install I ran into an error message:

npm ERR! 404 Not Found: flatmap-stream@0.1.0I

Diving into this issue, it seems that this is related to that malware/package which was injected into event-stream. It is talked about here, where someone else had a very similar problem on another repo: https://github.com/winstonjs/winston/issues/1542

I removed the package-lock.json file and ran npm install again. The result is an updated package-lock.json file with some dependencies updated and event-stream completely removed from them (as it was removed from npm completely).

This fixes the issue for me. I don't really know if someone else ran into this issue but it feels it would be generalized.

Let me know what you think! :)

(Am I doing PRs right? lol )