search

SocketCluster / sc-domain

Node.js Domain module using Promises
0 stars 0 forks source link

Re-Publish Package on NPM? #1

Open 67726e opened 3 weeks ago

67726e commented 3 weeks ago

We're getting build errors at work today for an application with this package as a transitive dependency. 

#14 5.607 npm ERR! 404  'sc-domain@1.0.1' is not in the npm registry.

Attempting to install via npm on the CLI gives:

/tmp % npm install sc-domain
npm ERR! code ENOVERSIONS
npm ERR! No valid versions available for sc-domain

The package does appear to be missing in NPM, with the package being a 404 when access in the browser, https://www.npmjs.com/package/sc-domain

Any idea where the package went?

67726e commented 3 weeks ago

Well, I've searched around for any CVEs referencing this particular library and could not find one. Since it's been deleted I went and cloned the project, bumped the version to 1.0.2 and did an overrides: { "sc-domain": "1.0.2" } in my package.json. For whatever reason, I spent two hours successfully using an file:./vendor/sc-domain style override locally but ran into build errors with GitHub Action despite using the same version both locally (via nvm) and in the Dockerfile (12.22.12).

If there's some serious reason why this package was deleted - please let me know, but considering this is an internal application sitting inside the wire on an ECS Cluster in AWS I'm not exactly concerned unless it's a BitCoin miner anyway.

67726e commented 3 weeks ago

I'm even more confused... looking at the code it's an incredibly lightweight library here with no room for any compromise that I'm seeing. There are no dependencies for the package itself... how did this library come to be deleted?