elm-codegen cannot be built as-is in a sandboxed environment such as Nix.
The npm dependencies with no hash listed may be nondeterministic, which is disallowed in reproducible builds.
There are workarounds, such as applying this patch in the Nix build process, but I'd like to upstream this patch to share it with other elm-codegen users, and to lock down the dependency versions for all npm users.
Problem
elm-codegen cannot be built as-is in a sandboxed environment such as Nix. The npm dependencies with no hash listed may be nondeterministic, which is disallowed in reproducible builds.
There are workarounds, such as applying this patch in the Nix build process, but I'd like to upstream this patch to share it with other elm-codegen users, and to lock down the dependency versions for all npm users.
Solution
Use jeslie0/npm-lockfile-fix to fill in the missing hashes.