redbooth / npm-shrinkwrap-check

Util to check that package.json and npm-shrinkwrap.json are in sync.
14 stars 7 forks source link

False negatives errors for npm-shrinkwrap #8

Closed debugwand closed 8 years ago

debugwand commented 8 years ago

I get the following modules being reported as not present in npm-shrinkwrap.json, however when I grep over npm-shrinkwrap.json they are present. All of them are subdependencies

I am using the -3d flag for npm-shrinkwrap-check and npm shrinkwrap -dev to build my shrinkwrap json (attached)

 * esprima-fb found in package.json but not in npm-shrinkwrap.json
 * lodash.repeat found in package.json but not in npm-shrinkwrap.json
 * rc found in package.json but not in npm-shrinkwrap.json
 * tar-pack found in package.json but not in npm-shrinkwrap.json
 * deep-extend found in package.json but not in npm-shrinkwrap.json
 * ini found in package.json but not in npm-shrinkwrap.json
 * fstream-ignore found in package.json but not in npm-shrinkwrap.json
 * uid-number found in package.json but not in npm-shrinkwrap.json
 * node-pre-gyp found in package.json but not in npm-shrinkwrap.json
 * tap-stream found in package.json but not in npm-shrinkwrap.json
 * event-stream found in package.json but not in npm-shrinkwrap.json

npm-shrinkwrap.json.txt

Morantron commented 8 years ago

Duplicate of https://github.com/teambox/npm-shrinkwrap-check/issues/6

debugwand commented 8 years ago

thanks!