Package: npm Version: 5.8.0+ds6-2 Severity: normal --- Please enter the report below this line. ---
According to this report: https://dedup.debian.net/binary/npm it should be possible to skip embedding of: - node-uuid - node-xdg-basedir - node-uid-number - node-libnpx Additionally cmd-shim and read-cmd-shim are only required on Windows and it should be possible to patch them away. --- System information. --- Architecture: Kernel: Linux 4.18.0-2-amd64 Debian Release: buster/sid 500 testing-debug debug.mirrors.debian.org 500 testing mi.mirror.garr.it 500 stable packages.microsoft.com --- Package information. --- Depends (Version) | Installed ===============================================-+-============= nodejs (>= 6.11~) | 8.11.2~dfsg-1 ca-certificates | 20170717 node-abbrev (>= 1.1.1~) | 1.1.1-1 node-ansi-regex (>= 3.0~) | 3.0.0-1 node-ansistyles (>= 0.1.3~) | 0.1.3-1 node-aproba (>= 1.2~) | 1.2.0-1 node-archy (>= 1.0~) | 1.0.0-1 node-cacache (>= 10.0.4~) | 10.0.4-1 node-bluebird (>= 3.5.1~) | 3.5.1+dfsg2-2 node-call-limit (>= 1.1~) | 1.1.0-1 node-chownr (>= 1.0.1~) | 1.1.1-1 node-config-chain (>= 1.1.11~) | 1.1.11-1 node-detect-indent (>= 5.0~) | 5.0.0-1 node-detect-newline (>= 2.1~) | 2.1.0-1 node-editor (>= 1.0~) | 1.0.0-1 node-fs-vacuum (>= 1.2.10~) | 1.2.10-2 node-fs-write-stream-atomic (>= 1.0.10~) | 1.0.10-4 node-glob (>= 7.1.2~) | 7.1.3-1 node-graceful-fs (>= 4.1.11~) | 4.1.11-1 node-has-unicode (>= 2.0.1~) | 2.0.1-2 node-hosted-git-info (>= 2.6~) | 2.7.1-1 node-iferr (>= 0.1.5~) | 1.0.2-1 node-inflight (>= 1.0.6~) | 1.0.6-1 node-inherits (>= 2.0.3~) | 2.0.3-1 node-ini (>= 1.3.5~) | 1.3.5-1 node-npm-package-arg | 6.0.0-2 node-promzard | 0.3.0-1 node-jsonstream (>= 1.3.2~) | 1.3.2-1 node-json-parse-better-errors (>= 1.0.1~) | 1.0.2-2 node-lazy-property (>= 1.0~) | 1.0.0-3 node-libnpx (>= 10.0.1~) | 10.2.0-2 node-lockfile (>= 1.0.3~) | 1.0.4-1 node-lru-cache (>= 4.1.1~) | 4.1.1-2 node-mississippi (>= 3.0~) | 3.0.0-1 node-mkdirp (>= 0.3.3) | 0.5.1-1 node-move-concurrently (>= 1.0.1~) | 1.0.1-2 node-nopt | 3.0.6-3 node-normalize-package-data (>= 2.4~) | 2.4.0-1 node-gyp (>= 3.6.2~) | 3.8.0-1 node-resolve-from (>= 4.0~) | 4.0.0-1 node-encoding | 0.1.12-2 node-errno | 0.1.4-1 node-npmlog (>= 4.1.2~) | 4.1.2-1 node-once (>= 1.4~) | 1.4.0-2 node-opener (>= 1.4.3~) | 1.4.3-1 node-osenv (>= 0.1.5~) | 0.1.5-1 node-path-is-inside (>= 1.0.2~) | 1.0.2-1 node-promise-inflight (>= 1.0.1~) | 1.0.1-1 node-ansi | 0.3.0-2 node-qw (>= 1.0.1~) | 1.0.1-1 node-read (>= 1.0.7~) | 1.0.7-1 node-read-package-json (>= 2.0.13~) | 2.0.13-1 node-request (>= 2.83~) | 2.88.1-2 node-retry (>= 0.10.1~) | 0.10.1-1 node-rimraf (>= 2.6.2~) | 2.6.2-1 node-safe-buffer (>= 5.1.1~) | 5.1.2-1 node-semver (>= 5.5~) | 5.5.1-1 node-sha (>= 2.0.1~) | 2.0.1-1 node-slide (>= 1.1.6~) | 1.1.6-2 node-sorted-object (>= 2.0.1~) | 2.0.1-1 node-from2 | 2.3.0-1 node-stream-iterate | 1.2.0-4 node-ssri (>= 5.2.4~) | 5.2.4-2 node-strip-ansi (>= 4.0~) | 4.0.0-1 node-tar (>= 4.4~) | 4.4.6+ds1-3 node-text-table (>= 0.2~) | 0.2.0-2 node-uid-number (>= 0.0.6~) | 0.0.6-1 node-unique-filename (>= 1.1~) | 1.1.0+ds-2 node-unpipe (>= 1.0~) | 1.0.0-1 node-boxen (>= 1.2.1~) | 1.2.2-1 node-import-lazy | 3.0.0.REALLY.2.1.0-1 node-is-npm (>= 1.0~) | 1.0.0-1 node-latest-version (>= 3.0~) | 3.1.0-1 node-semver-diff (>= 2.0~) | 2.1.0-2 node-xdg-basedir (>= 3.0~) | 3.0.0-1 node-validate-npm-package-name (>= 3.0~) | 3.0.0-1 node-which (>= 1.3~) | 1.3.0-2 node-wrappy (>= 1.0.2~) | 1.0.2-1 node-write-file-atomic (>= 2.3~) | 2.3.0-1 Package's Recommends field is empty. Package's Suggests field is empty.