Comments (3)
I'm here to answer questions if need be.
from cli.
@novemberborn
@mortentangen you are correct here:
*.podspec file of react native libraries often depend on the author field in package.json (i.e. https://github.com/react-native-webview/react-native-webview/blob/v11.0.2/react-native-webview.podspec#L11).
But here is what I'm getting, when running npm ci
and npm install
commands. I'm not an expert in npm
/node
/js
development, so, sorry, if I'm wrong somewhere. It's just what I have found.
As an example, let's take this npm
package: react-native-keep-awake.
Here it is author
field from package.json
file: author. Just for the record, what data is in package repo.
I'm on LTS node
fermium
node v14.18.0
npm 6.14.15
What I'm getting in ./node_modules/react-native-keep-awake/package.json
author
field after running npm install
:
"author": { "name": "Kyle Corbitt" },
package-lock.json
file is not modified
What I'm getting in ./node_modules/react-native-keep-awake/package.json
author
field after running npm ci
:
"author": "Kyle Corbitt",
package-lock.json
file is not modifiedauthor
value is the same as in package repopackage.json
file. I don't know, if these values are tightly coupled, but, just want to point, that they are the same.
So, what do we have:
- by running
npm ci
andnpm install
we are getting different results in./node_modules/react-native-keep-awake/package.json
author
section - later, when we installing
cocoapods
dependencies, as you mentioned,author
field frompackage.json
is used for*.podspec
file *.podspec
file is used for checksum calculation- we'll have a mismatch in
author
field -> mismatch in checksum
I tried the same npm ci
/npm install
on same project, but with updated node
(active LTS will start shortly for this version, 2021-10-26):
node v16.11.0
npm 8.0.0
And with such configuration I do not getauthor
field mismatch.
The fact, that there is no such issue with newer node
/npm
version, is giving me an assumption, that issue is on npm
/node
side, rather that on cocoapods
side. As I said, I'm not an expert with these tools. I don't know, how exactly they are working, and, possibly, I'm missing something. But this is what I found.
from cli.
Any progress on this bug? This is an issue for react native development with cocoapods as the *.podspec file of react native libraries often depend on the author field in package.json (i.e. https://github.com/react-native-webview/react-native-webview/blob/v11.0.2/react-native-webview.podspec#L11).
The Podfile.lock file contains a checksum of the library based on the content of the podspec file. npm install will create a different checksum than npm ci, which is an issue when running releases on CI servers.
from cli.
Related Issues (20)
- [BUG] DefinitelyTyped `npmcli__arborist` does not match internal `arborist.loadActual(options)` HOT 1
- react.dev - CodeSandbox
- npm v10 does not install .tgz dependencies into other .tgz pedencencies HOT 7
- [BUG] ENOENT: no such file or directory, mkdir 'H:\blog\public\:' HOT 2
- [Change] Make deprecation notices less scary HOT 2
- [BUG] npm error code ENOENT while installing @vue/cli HOT 3
- [BUG] Cursor spinner during password entry HOT 1
- [DOCS] readme.md points to a roadmap that seems out of date
- [BUG] when deleting the package-lock.json without deleting node_modules, and running npm i, @swc/core is installed incorrectly HOT 1
- [BUG] npm error Exit handler never called! HOT 11
- [BUG] Exit handler never called in `npm publish` HOT 5
- [BUG] Exit handler never called! on npm login HOT 2
- Module error HOT 4
- `codeql-analysis.yml` uses actions that use a `deprecated` version of `Node.js` HOT 2
- [BUG] regression? "license" key in lockfile is never populated
- context.document.insertFileFromBase64 Word JavaScript API is not availabe in the latest npm package HOT 1
- [BUG] npm unpublish doesnt work HOT 1
- [BUG] <title> login error HOT 1
- Aji[BUG] <title>
- [BUG] Prepublish doesn't work before npm publish HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cli.