[
https://issues.apache.org/jira/browse/NIFI-14779?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Rob Fellows updated NIFI-14779:
-------------------------------
Description:
Getting an error in CI when building...
{noformat}
[INFO] npm error code E404
[INFO] npm error 404 Not Found - GET
https://registry.npmjs.org/stylus/-/stylus-0.64.0.tgz - Not found
[INFO] npm error 404
[INFO] npm error 404
'stylus@https://registry.npmjs.org/stylus/-/stylus-0.64.0.tgz' is not in this
registry.
[INFO] npm error 404
[INFO] npm error 404 Note that you can also install from a
[INFO] npm error 404 tarball, folder, http url, or git url.{noformat}
It seems this version of stylus has security issues and was removed from npm
registry. the latest version is "0.0.1-security"
Advisory: [https://github.com/advisories/GHSA-fh4q-jc76-r59p]
More info from stylus: [https://github.com/stylus/stylus/issues/2938]
Request for review of false positive:
[https://github.com/github/advisory-database/issues/5846]
was:
Getting an error in CI when building...
{noformat}
[INFO] npm error code E404
[INFO] npm error 404 Not Found - GET
https://registry.npmjs.org/stylus/-/stylus-0.64.0.tgz - Not found
[INFO] npm error 404
[INFO] npm error 404
'stylus@https://registry.npmjs.org/stylus/-/stylus-0.64.0.tgz' is not in this
registry.
[INFO] npm error 404
[INFO] npm error 404 Note that you can also install from a
[INFO] npm error 404 tarball, folder, http url, or git url.{noformat}
It seems this version of stylus has security issues and was removed from npm
registry. the latest version is "0.0.1-security"
Advisory: [https://github.com/advisories/GHSA-fh4q-jc76-r59p]
More info from stylus: [https://github.com/stylus/stylus/issues/2938]
> CI build failing over transitive dependency on stylus no longer available in
> npm registry
> -----------------------------------------------------------------------------------------
>
> Key: NIFI-14779
> URL: https://issues.apache.org/jira/browse/NIFI-14779
> Project: Apache NiFi
> Issue Type: Sub-task
> Components: Core UI
> Reporter: Rob Fellows
> Assignee: Rob Fellows
> Priority: Major
>
> Getting an error in CI when building...
> {noformat}
> [INFO] npm error code E404
> [INFO] npm error 404 Not Found - GET
> https://registry.npmjs.org/stylus/-/stylus-0.64.0.tgz - Not found
> [INFO] npm error 404
> [INFO] npm error 404
> 'stylus@https://registry.npmjs.org/stylus/-/stylus-0.64.0.tgz' is not in this
> registry.
> [INFO] npm error 404
> [INFO] npm error 404 Note that you can also install from a
> [INFO] npm error 404 tarball, folder, http url, or git url.{noformat}
>
>
> It seems this version of stylus has security issues and was removed from npm
> registry. the latest version is "0.0.1-security"
> Advisory: [https://github.com/advisories/GHSA-fh4q-jc76-r59p]
> More info from stylus: [https://github.com/stylus/stylus/issues/2938]
> Request for review of false positive:
> [https://github.com/github/advisory-database/issues/5846]
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
