Use this tag if a question is about npm
Questions tagged [npm]
14 questions
14
votes
2 answers
How to enable the npm cache in a Jenkins build slave that runs in docker?
I have a Docker image, let's call it frontend.image, that I use for a Jenkins build slave. The Jenkins Docker plugin will spin up a container from this image and build artifacts inside the container. This all works great. In this case, the…
Brian Ogden
- 381
- 1
- 4
- 11
14
votes
2 answers
Does `npm audit` add any value when using `dependabot`
Context
There are multiple ways to scan projects for vulnerabilities.
Dependabot can be configured to check repositories for issues, and automatically submits pull requests to resolve.
NPM Audit will scan the packages used in an NPM solution for…
JohnLBevan
- 315
- 1
- 3
- 11
5
votes
1 answer
Force script to fail if "npm install" has network issues
With the current Github outage, I noticed a problem with my packer setup. In a nutshell, I have a packer setup where I call a shell script that looks like this:
#!/bin/bash
set -e
...
npm install
...
I expected that if there is any error during npm…
Philipp Claßen
- 1,675
- 3
- 18
- 30
3
votes
1 answer
npm not found but installed from the shell script file in Dockerfile
I have a following Dockerfile:
FROM ubuntu:18.04
RUN mkdir app && cd app
WORKDIR app/
RUN apt-get update && apt-get install -y \
software-properties-common \
curl \
sudo \
&& curl -O…
Leon Ma
- 33
- 1
- 1
- 4
3
votes
1 answer
When to "npm publish" when using git flow
I'm using the following resources as a guide to git flow:
git-flow cheatsheet
git-flow
Using git-flow to automate your git branching workflow
However, none of them explicitly mention at what point you perform the npm publish from. Do you do this…
Plastikfan
- 143
- 4
2
votes
1 answer
Issue installing NPM packages on Jenkins
I have a Jenkins build I am using for a Vue.js application. I am trying to install all dependancies as part of the pipeline and am running into some issues. I've included the below output as well as the npm install part of my pipeline.
It looks…
joshk132
- 465
- 10
- 22
2
votes
0 answers
`npm audit` is not returning any vulnerabilities, however dependabot is
In order to force devs to update vulnerabilities more often we wanted to add npm audit to a pre-push hook. We thought this would cut down on the number of dependabot alerts too.
However, while dependabot is still raising PRs to our repos npm audit…
JJ3
- 21
- 1
2
votes
1 answer
How to upload a file as user input in Github Actions workflow?
I would like to upload .env file to a build in Github Actions. Is there any way I can do it?
Nitesh B.
- 121
- 4
1
vote
2 answers
How to deploy a ZIP or WAR equivalent (built locally via npm)?
I use NPM to build my web project, and it does so nicely to a little ZIP file. Keeps everything nice and light, and I can easily keep bloat down.
My current process is to use an FTP client (Win SCP), to upload the ZIP file, and then I have a little…
shanehoban
- 111
- 4
1
vote
1 answer
How can container user and host user both have access to same files in volume?
I'm using Docker namespaces in an effort to allow files created within a volume to be arbitrarily read and written to by both the container user and the host user (please let me know if this is even a valid approach to what I'm trying to do!).
My…
aryzing
- 131
- 4
0
votes
2 answers
Dockerhub says Hello World causes CVE-2023-5363 and CVE-2023-5678
Dockerhub says I have the vulnerabilities: CVE-2023-5363 and CVE-2023-5678, which is part of the openssl package.
See this image:
Does anyone know how I can resolve this issue? I've simplified my nodejs project to just console.log('hello world');…
learningtech
- 161
- 1
- 8
0
votes
1 answer
RUN fails while installing Angular on Ubuntu Image
I am trying to create an image for my angular application for running unit and e2e tests. I started from the ubuntu image and then installed the other components. My dockerfile has the following statements.
FROM ubuntu:focal-20201008
RUN apt update…
sridhar pandurangiah
- 129
- 5
0
votes
1 answer
Best practise/standard practise for semantic versioning in development
I have a project that looks like this:
SOME_MONOREPO, managed by lerna
- package-a
- package-b - depends on package-a, package-c
- package-c - is currently private, so not published as npm package.
When package-b…
dwjohnston
- 231
- 3
- 11
-1
votes
1 answer
Stopped the process after executing npm start / macOS homebrew
I was in the process of creating function components. When I noticed a problem was after I hit save and my terminal never updated me if it was a successful compile... I'll admit I panicked... a little. Then started running npm start and been stuck…
