[BUG] failure to access name on null dep property

Is there an existing issue for this?

[X] I have searched the existing issues

This issue exists in the latest npm version

[X] I am using the latest npm

Current Behavior

I've ended up in a situation with a project using private npm repos, aliases ("foo": "npm:@other/foo") and overrides where npm i fails under 2 conditions:

The project has no name in package.json
The project has a [direct | transitive] dependency with a vulnerability.

For some reason I'm still trying to reproduce, under this scenario the edgeIn.from node has a null name - causing subsequence calls to blow up when trying to report.

The end result is a super burly stacktrace, particularly because you're not sure if its your deps / transitive deps / etc.

6698 verbose stack TypeError: Cannot read properties of null (reading 'name')
6698 verbose stack     at npa (/Users/welch/.volta/tools/image/node/20.8.0/lib/node_modules/npm/node_modules/npm-package-arg/lib/npa.js:27:20)
6698 verbose stack     at FetcherBase.get (/Users/welch/.volta/tools/image/node/20.8.0/lib/node_modules/npm/node_modules/pacote/lib/fetcher.js:482:16)
6698 verbose stack     at Object.packument (/Users/welch/.volta/tools/image/node/20.8.0/lib/node_modules/npm/node_modules/pacote/lib/index.js:18:30)
6698 verbose stack     at [packument] (/Users/welch/.volta/tools/image/node/20.8.0/lib/node_modules/npm/node_modules/@npmcli/metavuln-calculator/lib/index.js:109:22)
6698 verbose stack     at [calculate] (/Users/welch/.volta/tools/image/node/20.8.0/lib/node_modules/npm/node_modules/@npmcli/metavuln-calculator/lib/index.js:57:23)
6698 verbose stack     at Calculator.calculate (/Users/welch/.volta/tools/image/node/20.8.0/lib/node_modules/npm/node_modules/@npmcli/metavuln-calculator/lib/index.js:44:31)
6698 verbose stack     at [init] (/Users/welch/.volta/tools/image/node/20.8.0/lib/node_modules/npm/node_modules/@npmcli/arborist/lib/audit-report.js:177:44)
6698 verbose stack     at async AuditReport.run (/Users/welch/.volta/tools/image/node/20.8.0/lib/node_modules/npm/node_modules/@npmcli/arborist/lib/audit-report.js:109:7)

Expected Behavior

A helpful error message like "Your dependency / packument / etc is broken"

Particularly before kicking off the call to this.calculator.calculate(..) https://github.com/npm/cli/blob/2e4b4ad8bef158def1b2302846ab294fe7a83de4/workspaces/arborist/lib/audit-report.js#L172-L186

Steps To Reproduce

I'm working on a reproduction I can share, but in the meantime wanted to raise here in the meantime as a check for dep.packageName probably is universally a good thing.

Environment

npm: 10.1.0
Node.js: 20.8.0
OS Name: OS X
System Model Name: Macbook Pro M1

npm config:

; node bin location = /Users/welch/.volta/tools/image/node/20.8.0/bin/node
; node version = v20.8.0
; npm local prefix = /Users/welch/<redacted>
; npm version = 10.1.0
; cwd = /Users/welch/<redacted>
; HOME = /Users/welch
; Run `npm config ls -l` to show all defaults.

Please change the title of this bug because it makes search results confusing.

I've got a small reproducer as follows:

{
  "dependencies": {
    "@timwolla/npm-auditor-crash": "git+https://github.com/TimWolla/npm-auditor-crash.git#219613a299f70d03e1bbe48aa19aae8245fd0e1f"
  }
}

Attempting to npm install --verbose that package.json results in:

npm verb cli /usr/local/bin/node /usr/local/bin/npm
npm info using npm@10.2.4
npm info using node@v21.5.0
npm verb title npm install
npm verb argv "install" "--loglevel" "verbose"
npm verb logfile logs-max:10 dir:/home/node/.npm/_logs/2024-11-12T22_56_32_269Z-
npm verb logfile /home/node/.npm/_logs/2024-11-12T22_56_32_269Z-debug-0.log
npm http fetch GET 200 https://registry.npmjs.org/npm 391ms (cache miss)
npm http fetch GET 200 https://codeload.github.com/TimWolla/npm-auditor-crash/tar.gz/219613a299f70d03e1bbe48aa19aae8245fd0e1f 369ms (cache miss)
npm http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-clipboard 91ms (cache miss)
npm http fetch GET 200 https://registry.npmjs.org/lodash-es 78ms (cache miss)
npm http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-engine 261ms (cache miss)
npm http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-core 270ms (cache miss)
npm http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-ui 276ms (cache miss)
npm http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-widget 282ms (cache miss)
npm http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-utils 1177ms (cache miss)
npm http fetch GET 200 https://registry.npmjs.org/color-convert 65ms (cache miss)
npm http fetch GET 200 https://registry.npmjs.org/color-parse 69ms (cache miss)
npm http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-enter 143ms (cache miss)
npm http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-typing 150ms (cache miss)
npm http fetch GET 200 https://registry.npmjs.org/vanilla-colorful 551ms (cache miss)
npm http fetch GET 200 https://registry.npmjs.org/color-name 41ms (cache miss)
npm http fetch GET 200 https://registry.npmjs.org/color-name 49ms (cache miss)
npm WARN skipping integrity check for git dependency ssh://git@github.com/TimWolla/npm-auditor-crash.git 
npm http fetch GET 200 https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz 176ms (cache miss)
npm http fetch GET 200 https://registry.npmjs.org/color-parse/-/color-parse-1.4.2.tgz 185ms (cache miss)
npm http fetch POST 200 https://registry.npmjs.org/-/npm/v1/security/advisories/bulk 210ms
npm http fetch GET 200 https://codeload.github.com/TimWolla/npm-auditor-crash/tar.gz/219613a299f70d03e1bbe48aa19aae8245fd0e1f 296ms (cache revalidated)
npm http fetch GET 200 https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz 334ms (cache miss)
npm notice 
npm notice New minor version of npm available! 10.2.4 -> 10.9.0
npm notice Changelog: https://github.com/npm/cli/releases/tag/v10.9.0
npm notice Run npm install -g npm@10.9.0 to update!
npm notice 
npm verb stack TypeError: Cannot read properties of null (reading 'name')
npm verb stack     at npa (/usr/local/lib/node_modules/npm/node_modules/npm-package-arg/lib/npa.js:27:20)
npm verb stack     at FetcherBase.get (/usr/local/lib/node_modules/npm/node_modules/pacote/lib/fetcher.js:482:16)
npm verb stack     at Object.packument (/usr/local/lib/node_modules/npm/node_modules/pacote/lib/index.js:18:30)
npm verb stack     at [packument] (/usr/local/lib/node_modules/npm/node_modules/@npmcli/metavuln-calculator/lib/index.js:109:22)
npm verb stack     at [calculate] (/usr/local/lib/node_modules/npm/node_modules/@npmcli/metavuln-calculator/lib/index.js:57:23)
npm verb stack     at Calculator.calculate (/usr/local/lib/node_modules/npm/node_modules/@npmcli/metavuln-calculator/lib/index.js:44:31)
npm verb stack     at [init] (/usr/local/lib/node_modules/npm/node_modules/@npmcli/arborist/lib/audit-report.js:177:44)
npm verb stack     at async AuditReport.run (/usr/local/lib/node_modules/npm/node_modules/@npmcli/arborist/lib/audit-report.js:109:7)
npm verb cwd /pwd
npm verb Linux 5.4.0-200-generic
npm verb node v21.5.0
npm verb npm  v10.2.4
npm ERR! Cannot read properties of null (reading 'name')
npm verb exit 1
npm verb unfinished npm timer command:install 1731452192729
npm verb unfinished npm timer reify 1731452192738
npm verb unfinished npm timer reify:audit 1731452195399
npm verb unfinished npm timer reify:unpack 1731452195407
npm verb unfinished npm timer reifyNode:node_modules/@ckeditor/ckeditor5-typing 1731452195407
npm verb unfinished npm timer reifyNode:node_modules/@ckeditor/ckeditor5-enter 1731452195407
npm verb unfinished npm timer reifyNode:node_modules/vanilla-colorful 1731452195407
npm verb unfinished npm timer reifyNode:node_modules/lodash-es 1731452195408
npm verb unfinished npm timer reifyNode:node_modules/@ckeditor/ckeditor5-widget 1731452195408
npm verb unfinished npm timer reifyNode:node_modules/@ckeditor/ckeditor5-utils 1731452195408
npm verb unfinished npm timer reifyNode:node_modules/@ckeditor/ckeditor5-ui 1731452195408
npm verb unfinished npm timer reifyNode:node_modules/@ckeditor/ckeditor5-engine 1731452195408
npm verb unfinished npm timer reifyNode:node_modules/@ckeditor/ckeditor5-core 1731452195408
npm verb unfinished npm timer reifyNode:node_modules/@ckeditor/ckeditor5-clipboard 1731452195408
npm verb unfinished npm timer reifyNode:node_modules/@timwolla/npm-auditor-crash 1731452195408
npm verb unfinished npm timer auditReport:init 1731452195617
npm verb unfinished npm timer metavuln:calculate:security-advisory:null:AUHN8mUB/zS73/ilY+56DN+cUIjNv5mqTVQqBZdfd410fiLPDwyzQN+VPBdyNKTwzI3EEPxLgIiqKqO+5FeR2g== 1731452195794
npm verb unfinished npm timer metavuln:cache:get:security-advisory:null:i1/uaLXorpivIYmND8U3+n94yNl0GNc4aotGowkvEWh8trRTcp66EkaoippRCdJRzx5oENksdeH/YDhDHuvxBw== 1731452195794
npm verb unfinished npm timer metavuln:packument:null 1731452195794
npm verb code 1

For reference, the package.json and package-lock.json of the npm-auditor-crash repository are as follows:

Click to expand

package.json ```json { "dependencies": { "@ckeditor/ckeditor5-clipboard": "^41.3.0" } } ``` package-lock.json ```json { "name": "pwd", "lockfileVersion": 3, "requires": true, "packages": { "": { "dependencies": { "@ckeditor/ckeditor5-clipboard": "^41.3.0" } }, "node_modules/@ckeditor/ckeditor5-clipboard": { "version": "41.4.2", "resolved": "https://registry.npmjs.org/@ckeditor/ckeditor5-clipboard/-/ckeditor5-clipboard-41.4.2.tgz", "integrity": "sha512-cMoGXClFxp5uR5Wr1cZnop5IdmqTZXTcrUuEoyhF+1hk+QDhp2ibQ2dTKu6hw+TTzw3Xd6g8Kj0Oj+mXoIur+w==", "dependencies": { "@ckeditor/ckeditor5-core": "41.4.2", "@ckeditor/ckeditor5-engine": "41.4.2", "@ckeditor/ckeditor5-ui": "41.4.2", "@ckeditor/ckeditor5-utils": "41.4.2", "@ckeditor/ckeditor5-widget": "41.4.2", "lodash-es": "4.17.21" } }, "node_modules/@ckeditor/ckeditor5-core": { "version": "41.4.2", "resolved": "https://registry.npmjs.org/@ckeditor/ckeditor5-core/-/ckeditor5-core-41.4.2.tgz", "integrity": "sha512-kCIJjviiMNIMBMx7XFXFp1IeTELQKv7xyPJiVFDyUftIfthf9uWty72ipZ3BBNBGBkaoTiSzDZ507EsX6czuIQ==", "dependencies": { "@ckeditor/ckeditor5-engine": "41.4.2", "@ckeditor/ckeditor5-utils": "41.4.2", "lodash-es": "4.17.21" } }, "node_modules/@ckeditor/ckeditor5-engine": { "version": "41.4.2", "resolved": "https://registry.npmjs.org/@ckeditor/ckeditor5-engine/-/ckeditor5-engine-41.4.2.tgz", "integrity": "sha512-25JqIzNYvCqQ6f02YY+a8A8xtjClzI0YCio0JGoRG3JHJXzYsQbTPsiokuE1BCwMCu3gYoFz8eKJYt2selLsCw==", "dependencies": { "@ckeditor/ckeditor5-utils": "41.4.2", "lodash-es": "4.17.21" } }, "node_modules/@ckeditor/ckeditor5-enter": { "version": "41.4.2", "resolved": "https://registry.npmjs.org/@ckeditor/ckeditor5-enter/-/ckeditor5-enter-41.4.2.tgz", "integrity": "sha512-pvNNcFGn7TFFuJ1QbT0Jggd5xflORxa5i32nZuSzDLVflXGDKq53xSXxapCzd7XsiVXQlufbXt2SlGj7lhyP1w==", "dependencies": { "@ckeditor/ckeditor5-core": "41.4.2", "@ckeditor/ckeditor5-engine": "41.4.2", "@ckeditor/ckeditor5-utils": "41.4.2" } }, "node_modules/@ckeditor/ckeditor5-typing": { "version": "41.4.2", "resolved": "https://registry.npmjs.org/@ckeditor/ckeditor5-typing/-/ckeditor5-typing-41.4.2.tgz", "integrity": "sha512-dXP+uNl+jkfrSIqMNai2yakR/3JqJ9g0M9WwwnV5vzbEOKD4YKP5+ixvqKb39dwLCLZ4mGpJaX+rjNXBExjSIw==", "dependencies": { "@ckeditor/ckeditor5-core": "41.4.2", "@ckeditor/ckeditor5-engine": "41.4.2", "@ckeditor/ckeditor5-utils": "41.4.2", "lodash-es": "4.17.21" } }, "node_modules/@ckeditor/ckeditor5-ui": { "version": "41.4.2", "resolved": "https://registry.npmjs.org/@ckeditor/ckeditor5-ui/-/ckeditor5-ui-41.4.2.tgz", "integrity": "sha512-wvRbDXJN8PmaWyB0H487DjvdH2ayMyN52+WLkZlVbhX9ICb1sf5XnLz4v/wXeQ4W8JbWdsg2FZIDDQDeXjvyJw==", "dependencies": { "@ckeditor/ckeditor5-core": "41.4.2", "@ckeditor/ckeditor5-utils": "41.4.2", "color-convert": "2.0.1", "color-parse": "1.4.2", "lodash-es": "4.17.21", "vanilla-colorful": "0.7.2" } }, "node_modules/@ckeditor/ckeditor5-utils": { "version": "41.4.2", "resolved": "https://registry.npmjs.org/@ckeditor/ckeditor5-utils/-/ckeditor5-utils-41.4.2.tgz", "integrity": "sha512-VgLr2eLVggyhDqa7H8JUxpnOLTZ0R/YuDZ6ENVUumd9q4VrpNs94ZK0Y/Shp7UmuHQ/sTth+PWTsi+t5KwYqeQ==", "dependencies": { "lodash-es": "4.17.21" } }, "node_modules/@ckeditor/ckeditor5-widget": { "version": "41.4.2", "resolved": "https://registry.npmjs.org/@ckeditor/ckeditor5-widget/-/ckeditor5-widget-41.4.2.tgz", "integrity": "sha512-hpM9Ti2iFvBBIPAESJp3bOY4SR6fzF3V5t46CpVDStLJdqwnQOuZ8Nv1dqzZZWCuK+EByAbY14pgfYM92nNHrQ==", "dependencies": { "@ckeditor/ckeditor5-core": "41.4.2", "@ckeditor/ckeditor5-engine": "41.4.2", "@ckeditor/ckeditor5-enter": "41.4.2", "@ckeditor/ckeditor5-typing": "41.4.2", "@ckeditor/ckeditor5-ui": "41.4.2", "@ckeditor/ckeditor5-utils": "41.4.2", "lodash-es": "4.17.21" } }, "node_modules/color-convert": { "version": "2.0.1", "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz", "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==", "dependencies": { "color-name": "~1.1.4" }, "engines": { "node": ">=7.0.0" } }, "node_modules/color-name": { "version": "1.1.4", "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz", "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==" }, "node_modules/color-parse": { "version": "1.4.2", "resolved": "https://registry.npmjs.org/color-parse/-/color-parse-1.4.2.tgz", "integrity": "sha512-RI7s49/8yqDj3fECFZjUI1Yi0z/Gq1py43oNJivAIIDSyJiOZLfYCRQEgn8HEVAj++PcRe8AnL2XF0fRJ3BTnA==", "dependencies": { "color-name": "^1.0.0" } }, "node_modules/lodash-es": { "version": "4.17.21", "resolved": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.17.21.tgz", "integrity": "sha512-mKnC+QJ9pWVzv+C4/U3rRsHapFfHvQFoFB92e52xeyGMcX6/OlIl78je1u8vePzYZSkkogMPJ2yjxxsb89cxyw==" }, "node_modules/vanilla-colorful": { "version": "0.7.2", "resolved": "https://registry.npmjs.org/vanilla-colorful/-/vanilla-colorful-0.7.2.tgz", "integrity": "sha512-z2YZusTFC6KnLERx1cgoIRX2CjPRP0W75N+3CC6gbvdX5Ch47rZkEMGO2Xnf+IEmi3RiFLxS18gayMA27iU7Kg==" } } } ```

The output for npm 10.9.0 is different, but equally unhelpful:

npm verbose cli /usr/local/bin/node /usr/local/bin/npm
npm info using npm@10.9.0
npm info using node@v23.1.0
npm verbose title npm install
npm verbose argv "install" "--loglevel" "verbose"
npm verbose logfile logs-max:10 dir:/root/.npm/_logs/2024-11-12T23_02_47_816Z-
npm verbose logfile /root/.npm/_logs/2024-11-12T23_02_47_816Z-debug-0.log
(node:48) ExperimentalWarning: CommonJS module /usr/local/lib/node_modules/npm/node_modules/debug/src/node.js is loading ES Module /usr/local/lib/node_modules/npm/node_modules/supports-color/index.js using require().
Support for loading ES Module in require() is an experimental feature and might change at any time
(Use `node --trace-warnings ...` to show where the warning was created)
npm http fetch GET 200 https://codeload.github.com/TimWolla/npm-auditor-crash/tar.gz/219613a299f70d03e1bbe48aa19aae8245fd0e1f 305ms (cache revalidated)
npm http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-clipboard 11ms (cache hit)
npm http fetch GET 200 https://registry.npmjs.org/lodash-es 12ms (cache hit)
npm http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-ui 20ms (cache hit)
npm http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-core 38ms (cache hit)
npm http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-utils 59ms (cache hit)
npm http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-widget 35ms (cache hit)
npm http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-engine 74ms (cache hit)
npm http fetch GET 200 https://registry.npmjs.org/color-parse 13ms (cache hit)
npm http fetch GET 200 https://registry.npmjs.org/vanilla-colorful 16ms (cache hit)
npm http fetch GET 200 https://registry.npmjs.org/color-convert 21ms (cache hit)
npm http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-typing 12ms (cache hit)
npm http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-enter 32ms (cache hit)
npm http fetch GET 200 https://registry.npmjs.org/color-name 8ms (cache hit)
npm http fetch GET 200 https://registry.npmjs.org/color-name 9ms (cache hit)
npm warn skipping integrity check for git dependency ssh://git@github.com/TimWolla/npm-auditor-crash.git
npm http fetch GET 200 https://codeload.github.com/TimWolla/npm-auditor-crash/tar.gz/219613a299f70d03e1bbe48aa19aae8245fd0e1f 163ms (cache revalidated)
npm http fetch POST 200 https://registry.npmjs.org/-/npm/v1/security/advisories/bulk 306ms
npm http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-clipboard 85ms (cache hit)
npm verbose cwd /pwd
npm verbose os Linux 5.4.0-200-generic
npm verbose node v23.1.0
npm verbose npm  v10.9.0
npm verbose exit 1
npm verbose code 1
npm error A complete log of this run can be found in: /root/.npm/_logs/2024-11-12T23_02_47_816Z-debug-0.log

Debug log:

0 verbose cli /usr/local/bin/node /usr/local/bin/npm
1 info using npm@10.9.0
2 info using node@v23.1.0
3 silly config load:file:/usr/local/lib/node_modules/npm/npmrc
4 silly config load:file:/pwd/.npmrc
5 silly config load:file:/root/.npmrc
6 silly config load:file:/usr/local/etc/npmrc
7 verbose title npm install
8 verbose argv "install" "--loglevel" "verbose"
9 verbose logfile logs-max:10 dir:/root/.npm/_logs/2024-11-12T23_02_47_816Z-
10 verbose logfile /root/.npm/_logs/2024-11-12T23_02_47_816Z-debug-0.log
11 silly logfile done cleaning log files
12 silly packumentCache heap:2197815296 maxSize:549453824 maxEntrySize:274726912
13 silly idealTree buildDeps
14 silly fetch manifest @timwolla/npm-auditor-crash@git+https://github.com/TimWolla/npm-auditor-crash.git#219613a299f70d03e1bbe48aa19aae8245fd0e1f
15 http fetch GET 200 https://codeload.github.com/TimWolla/npm-auditor-crash/tar.gz/219613a299f70d03e1bbe48aa19aae8245fd0e1f 305ms (cache revalidated)
16 silly packumentCache heap:2197815296 maxSize:549453824 maxEntrySize:274726912
17 silly placeDep ROOT @timwolla/npm-auditor-crash@ OK for:  want: git+https://github.com/TimWolla/npm-auditor-crash.git#219613a299f70d03e1bbe48aa19aae8245fd0e1f
18 silly fetch manifest @ckeditor/ckeditor5-clipboard@^41.3.0
19 silly packumentCache full:https://registry.npmjs.org/@ckeditor%2fckeditor5-clipboard cache-miss
20 http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-clipboard 11ms (cache hit)
21 silly packumentCache full:https://registry.npmjs.org/@ckeditor%2fckeditor5-clipboard set size:1511989 disposed:false
22 silly placeDep ROOT @ckeditor/ckeditor5-clipboard@41.4.2 OK for: node_modules/@timwolla/npm-auditor-crash want: ^41.3.0
23 silly fetch manifest lodash-es@4.17.21
24 silly packumentCache full:https://registry.npmjs.org/lodash-es cache-miss
25 silly fetch manifest @ckeditor/ckeditor5-ui@41.4.2
26 silly packumentCache full:https://registry.npmjs.org/@ckeditor%2fckeditor5-ui cache-miss
27 silly fetch manifest @ckeditor/ckeditor5-core@41.4.2
28 silly packumentCache full:https://registry.npmjs.org/@ckeditor%2fckeditor5-core cache-miss
29 http fetch GET 200 https://registry.npmjs.org/lodash-es 12ms (cache hit)
30 silly packumentCache full:https://registry.npmjs.org/lodash-es set size:135180 disposed:false
31 silly fetch manifest @ckeditor/ckeditor5-utils@41.4.2
32 silly packumentCache full:https://registry.npmjs.org/@ckeditor%2fckeditor5-utils cache-miss
33 http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-ui 20ms (cache hit)
34 silly packumentCache full:https://registry.npmjs.org/@ckeditor%2fckeditor5-ui set size:1434293 disposed:false
35 silly fetch manifest @ckeditor/ckeditor5-engine@41.4.2
36 silly packumentCache full:https://registry.npmjs.org/@ckeditor%2fckeditor5-engine cache-miss
37 http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-core 38ms (cache hit)
38 silly packumentCache full:https://registry.npmjs.org/@ckeditor%2fckeditor5-core set size:1519737 disposed:false
39 silly fetch manifest @ckeditor/ckeditor5-widget@41.4.2
40 silly packumentCache full:https://registry.npmjs.org/@ckeditor%2fckeditor5-widget cache-miss
41 http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-utils 59ms (cache hit)
42 silly packumentCache full:https://registry.npmjs.org/@ckeditor%2fckeditor5-utils set size:1282881 disposed:false
43 http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-widget 35ms (cache hit)
44 silly packumentCache full:https://registry.npmjs.org/@ckeditor%2fckeditor5-widget set size:1500513 disposed:false
45 http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-engine 74ms (cache hit)
46 silly packumentCache full:https://registry.npmjs.org/@ckeditor%2fckeditor5-engine set size:1487283 disposed:false
47 silly placeDep ROOT @ckeditor/ckeditor5-core@41.4.2 OK for: @ckeditor/ckeditor5-clipboard@41.4.2 want: 41.4.2
48 silly placeDep ROOT @ckeditor/ckeditor5-engine@41.4.2 OK for: @ckeditor/ckeditor5-clipboard@41.4.2 want: 41.4.2
49 silly placeDep ROOT @ckeditor/ckeditor5-ui@41.4.2 OK for: @ckeditor/ckeditor5-clipboard@41.4.2 want: 41.4.2
50 silly placeDep ROOT @ckeditor/ckeditor5-utils@41.4.2 OK for: @ckeditor/ckeditor5-clipboard@41.4.2 want: 41.4.2
51 silly placeDep ROOT @ckeditor/ckeditor5-widget@41.4.2 OK for: @ckeditor/ckeditor5-clipboard@41.4.2 want: 41.4.2
52 silly placeDep ROOT lodash-es@4.17.21 OK for: @ckeditor/ckeditor5-clipboard@41.4.2 want: 4.17.21
53 silly fetch manifest color-parse@1.4.2
54 silly packumentCache full:https://registry.npmjs.org/color-parse cache-miss
55 silly fetch manifest color-convert@2.0.1
56 silly packumentCache full:https://registry.npmjs.org/color-convert cache-miss
57 silly fetch manifest vanilla-colorful@0.7.2
58 silly packumentCache full:https://registry.npmjs.org/vanilla-colorful cache-miss
59 http fetch GET 200 https://registry.npmjs.org/color-parse 13ms (cache hit)
60 silly packumentCache full:https://registry.npmjs.org/color-parse set size:50034 disposed:false
61 silly fetch manifest @ckeditor/ckeditor5-enter@41.4.2
62 silly packumentCache full:https://registry.npmjs.org/@ckeditor%2fckeditor5-enter cache-miss
63 http fetch GET 200 https://registry.npmjs.org/vanilla-colorful 16ms (cache hit)
64 silly packumentCache full:https://registry.npmjs.org/vanilla-colorful set size:114227 disposed:false
65 silly fetch manifest @ckeditor/ckeditor5-typing@41.4.2
66 silly packumentCache full:https://registry.npmjs.org/@ckeditor%2fckeditor5-typing cache-miss
67 http fetch GET 200 https://registry.npmjs.org/color-convert 21ms (cache hit)
68 silly packumentCache full:https://registry.npmjs.org/color-convert set size:61781 disposed:false
69 http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-typing 12ms (cache hit)
70 silly packumentCache full:https://registry.npmjs.org/@ckeditor%2fckeditor5-typing set size:1419909 disposed:false
71 http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-enter 32ms (cache hit)
72 silly packumentCache full:https://registry.npmjs.org/@ckeditor%2fckeditor5-enter set size:1380583 disposed:false
73 silly placeDep ROOT color-convert@2.0.1 OK for: @ckeditor/ckeditor5-ui@41.4.2 want: 2.0.1
74 silly placeDep ROOT color-parse@1.4.2 OK for: @ckeditor/ckeditor5-ui@41.4.2 want: 1.4.2
75 silly placeDep ROOT vanilla-colorful@0.7.2 OK for: @ckeditor/ckeditor5-ui@41.4.2 want: 0.7.2
76 silly fetch manifest color-name@~1.1.4
77 silly packumentCache full:https://registry.npmjs.org/color-name cache-miss
78 silly fetch manifest color-name@^1.0.0
79 silly packumentCache full:https://registry.npmjs.org/color-name cache-miss
80 http fetch GET 200 https://registry.npmjs.org/color-name 8ms (cache hit)
81 silly packumentCache full:https://registry.npmjs.org/color-name set size:16325 disposed:false
82 http fetch GET 200 https://registry.npmjs.org/color-name 9ms (cache hit)
83 silly packumentCache full:https://registry.npmjs.org/color-name set size:16325 disposed:false
84 silly packumentCache full:https://registry.npmjs.org/color-name dispose
85 silly placeDep ROOT @ckeditor/ckeditor5-enter@41.4.2 OK for: @ckeditor/ckeditor5-widget@41.4.2 want: 41.4.2
86 silly placeDep ROOT @ckeditor/ckeditor5-typing@41.4.2 OK for: @ckeditor/ckeditor5-widget@41.4.2 want: 41.4.2
87 silly placeDep ROOT color-name@1.1.4 OK for: color-convert@2.0.1 want: ~1.1.4
88 silly reify moves {}
89 silly audit bulk request {
89 silly audit   '@ckeditor/ckeditor5-clipboard': [ '41.4.2' ],
89 silly audit   '@ckeditor/ckeditor5-core': [ '41.4.2' ],
89 silly audit   '@ckeditor/ckeditor5-engine': [ '41.4.2' ],
89 silly audit   '@ckeditor/ckeditor5-ui': [ '41.4.2' ],
89 silly audit   '@ckeditor/ckeditor5-utils': [ '41.4.2' ],
89 silly audit   '@ckeditor/ckeditor5-widget': [ '41.4.2' ],
89 silly audit   'lodash-es': [ '4.17.21' ],
89 silly audit   'color-convert': [ '2.0.1' ],
89 silly audit   'color-parse': [ '1.4.2' ],
89 silly audit   'vanilla-colorful': [ '0.7.2' ],
89 silly audit   '@ckeditor/ckeditor5-enter': [ '41.4.2' ],
89 silly audit   '@ckeditor/ckeditor5-typing': [ '41.4.2' ],
89 silly audit   'color-name': [ '1.1.4' ]
89 silly audit }
90 warn skipping integrity check for git dependency ssh://git@github.com/TimWolla/npm-auditor-crash.git
91 silly tarball no local data for @ckeditor/ckeditor5-enter@https://registry.npmjs.org/@ckeditor/ckeditor5-enter/-/ckeditor5-enter-41.4.2.tgz. Extracting by manifest.
92 silly tarball no local data for @ckeditor/ckeditor5-typing@https://registry.npmjs.org/@ckeditor/ckeditor5-typing/-/ckeditor5-typing-41.4.2.tgz. Extracting by manifest.
93 silly tarball no local data for vanilla-colorful@https://registry.npmjs.org/vanilla-colorful/-/vanilla-colorful-0.7.2.tgz. Extracting by manifest.
94 silly tarball no local data for lodash-es@https://registry.npmjs.org/lodash-es/-/lodash-es-4.17.21.tgz. Extracting by manifest.
95 silly tarball no local data for @ckeditor/ckeditor5-widget@https://registry.npmjs.org/@ckeditor/ckeditor5-widget/-/ckeditor5-widget-41.4.2.tgz. Extracting by manifest.
96 silly tarball no local data for @ckeditor/ckeditor5-engine@https://registry.npmjs.org/@ckeditor/ckeditor5-engine/-/ckeditor5-engine-41.4.2.tgz. Extracting by manifest.
97 silly tarball no local data for @ckeditor/ckeditor5-ui@https://registry.npmjs.org/@ckeditor/ckeditor5-ui/-/ckeditor5-ui-41.4.2.tgz. Extracting by manifest.
98 silly tarball no local data for @ckeditor/ckeditor5-utils@https://registry.npmjs.org/@ckeditor/ckeditor5-utils/-/ckeditor5-utils-41.4.2.tgz. Extracting by manifest.
99 silly tarball no local data for @ckeditor/ckeditor5-core@https://registry.npmjs.org/@ckeditor/ckeditor5-core/-/ckeditor5-core-41.4.2.tgz. Extracting by manifest.
100 silly tarball no local data for @ckeditor/ckeditor5-clipboard@https://registry.npmjs.org/@ckeditor/ckeditor5-clipboard/-/ckeditor5-clipboard-41.4.2.tgz. Extracting by manifest.
101 http fetch GET 200 https://codeload.github.com/TimWolla/npm-auditor-crash/tar.gz/219613a299f70d03e1bbe48aa19aae8245fd0e1f 163ms (cache revalidated)
102 http fetch POST 200 https://registry.npmjs.org/-/npm/v1/security/advisories/bulk 306ms
103 silly audit report {
103 silly audit report   '@ckeditor/ckeditor5-clipboard': [
103 silly audit report     {
103 silly audit report       id: 1100076,
103 silly audit report       url: 'https://github.com/advisories/GHSA-rgg8-g5x8-wr9v',
103 silly audit report       title: 'Cross-site scripting (XSS) in the clipboard package',
103 silly audit report       severity: 'moderate',
103 silly audit report       vulnerable_versions: '>=40.0.0 <43.1.1',
103 silly audit report       cwe: [Array],
103 silly audit report       cvss: [Object]
103 silly audit report     }
103 silly audit report   ]
103 silly audit report }
104 silly packumentCache corgi:https://registry.npmjs.org/@ckeditor%2fckeditor5-clipboard cache-miss
105 silly packumentCache heap:2197815296 maxSize:549453824 maxEntrySize:274726912
106 http fetch GET 200 https://registry.npmjs.org/@ckeditor%2fckeditor5-clipboard 85ms (cache hit)
107 silly packumentCache corgi:https://registry.npmjs.org/@ckeditor%2fckeditor5-clipboard set size:737515 disposed:false
108 verbose cwd /pwd
109 verbose os Linux 5.4.0-200-generic
110 verbose node v23.1.0
111 verbose npm  v10.9.0
112 verbose exit 1
113 verbose code 1
114 error A complete log of this run can be found in: /root/.npm/_logs/2024-11-12T23_02_47_816Z-debug-0.log

npm / cli