search

sonatype-nexus-community / nexus-repository-composer

Composer support for the Nexus Repository Manager (work in progress!)
Eclipse Public License 1.0
214 stars 81 forks source link

package hashes missing (null) in group or proxy repositories #72

Open ssube opened 4 years ago

ssube commented 4 years ago

See package hashes in the packages.json file, so Composer can utilize its local caching.

Running Composer while using the Nexus repository config breaks caching, which makes updating packages quite a bit slower.

This appears to be caused by missing hashes in the packages.json file:

{"providers-url":"https://example.com/repository/proxy-composer-packagist/p/%package%.json","providers":{"lukexf/simplelinkshortener":{"sha256":null},"dubroquin/search-engine":{"sha256":null},"solu-admin/languages-crud":{"sha256":null},"idoheo/string-generator":{"sha256":null},"gilberg-vrn/php-foursquare":{"sha256":null},"phpf/httputil":{"sha256":null},"highsolutions/feed":{"sha256":null},"fut/connectors":{"sha256":null},"aminkt/yii2-appcache":{"sha256":null},"overblog/mediawiki":{"sha256":null},"org/cotailored_base_drush_commands":{"sha256":null},"drdplus/person":{"sha256":null},"d-scribe/laravel-apidoc-generator":{"sha256":null},"yellow/yellowdemo-php":{"sha256":null},"fahad19/sitemaps":{"sha256":null},"frosas/misc-bundle":{"sha256":null},"ekyna/cms-bundle":{"sha256":null},"mikejw/elib-base":{"sha256":null},"bogdik/yii2-chosen":{"sha256":null},"ttree/fusion-documentfinder":{"sha256":null},"maikuolan/sfs-mass-ip-checker":{"sha256":null},"armezit/m2-wfpc":{"sha256":null},"silverstripe/legacydatetimefields":{"sha256":null},"abraovic/mysql-querybuilder":{"sha256":null},"klisl/laravel-statistics":{"sha256":null},"andremyid/activitylog":{"sha256":null},"artemmelnik/laravelshoppingcart":{"sha256":null},"sanpi/assetic":{"sha256":null},"adamdburton/nanoftpd":{"sha256":null},"imxiangli/yii2-ladda":{"sha256":null},"folkevil/moloquent-menus":{"sha256":null},"bitandblack/font-loader":{"sha256":null},"reason-digital/virgin-money-giving-api":{"sha256":null},"appel/copy-notes":{"sha256":null},"coreshop/bankwire":{"sha256":null},"artpar/omnipay-payuindia":{"sha256":null},"honey-comb/translations":{"sha256":null},"uchi-pro/api-client":{"sha256":null},"twodudes/simpleorm":{"sha256":null},"keboola/ex-generic-moduleinterface":{"sha256":null},"vanquyet/yii2-banner":{"sha256":null},"k9606/kxcel":{"sha256":null},"docomoinnovations/cloud_orchestrator":{"sha256":null},"bramceulemans/php-project":{"sha256":null},"gaohua/urlscanner":{"sha256":null},"kappa/tester":{"sha256":null},"alksily/memory":{"sha256":null},"programarivm/hello-world-bundle":{"sha256":null},"marissen/magento2-module-better-order-incrementing":{"sha256":null},"batmahir/oauth2-api":{"sha256":null},"los/request-id":{"sha256":null},"voximplant/phpsdk":{"sha256":null},"kuborgh/csv-bundle":{"sha256":null},"sudeep/formparse":{"sha256":null},"hosannahighertech/yii2-oauth2-server":{"sha256":null},"madewithlove/illuminate-psr-cache-bridge":{"sha256":null},"intrepidity/healthcheck":{"sha256":null},"awang/weapp-sdk":{"sha256":null},"yb/umsdk":{"sha256":null},"gcworld/formsystem":{"sha256":null},"mhochm/laravel-jadephp":{"sha256":null},"mthaml/silex-mthaml":{"sha256":null},"spacedmonkey/built-in-taxos-cpt":{"sha256":null},"onethirtyone/repository-pattern":{"sha256":null},"doetech/diedump":{"sha256":null},"chbiel/jenkins-php-api":{"sha256":null},"wyrihaximus/react-parallel":{"sha256":null},"coreshop/menu-bundle":{"sha256":null},"openeyes/oph-le-intravitrealinjection":{"sha256":null},"maragonha/openboleto":{"sha256":null},"jimmyjs/laravel-csv":{"sha256":null},"markdegroot/omnipay-ideal":{"sha256":null},"gamringer/php-json-pointer":{"sha256":null},"simplonlua/lua-calculator-bundle":{"sha256":null},"neos/utility-objecthandling":{"sha256":null},"lightair/easycurl":{"sha256":null},"svilborg/laravel-gitlab-ci-cmd":{"sha256":null},"protos/build":{"sha256":null},"bantenprov/proposal":{"sha256":null},"stuttter/wp-term-meta":{"sha256":null},"l0wskilled/alice-bundle-odm":{"sha256":null},"johnpitcher/public-vendor":{"sha256":null},"lukewaite/laravel-queue-aws-batch":{"sha256":null},"alescx/forum":{"sha256":null},"typo3/cms-fluid-styled-content":{"sha256":null},"lunfel/october-translatable-trait":{"sha256":null},"semyonchetvertnyh/omnipay-paysera":{"sha256":null},"loborec/yii-shortcuts":{"sha256":null},"robphilp/validator":{"sha256":null}

This somehow forces Composer to look up package metadata every time it runs, for every package. While the plugin holds up and CI uses cached deps, this makes local developer updates rather painful.

Running Nexus OSS 3.21.2-03 with the plugin (0.0.5 from master) loaded semi-permanently. Not seeing any errors in the server logs. This seems related to https://github.com/sonatype-nexus-community/nexus-repository-composer/issues/64, since the Packagist composer.json seems to include a zipball URL and hash.