You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
MINI-EPIC: next steps for v7 integration 2020-03-03 #971
([v7] Complete npm install command #995) improve install/ci output (may need to revisit the design, since a giant single-color archy representation of the logical tree is not super helpful, even as a silly output log -- if we're going to dump an archy into the log, it should probably be the physical tree, at least). Note that this affects both install and ci.
ensure deduping of dependencies in node_modules
Document/RFC (add more to this list as we remember/find/decide them)
npm commands that are a call to Arborist.reify() in some fashion:
install
ci
update
link
install-test
install-ci-test
uninstall (easy)
prune
dedupe (probably needs some work on Arborist.buildIdealTree to actually
do the deduping bit without completely regenerating it, but should be
straightforward)
audit fix (in progress isaacs)
Land npm publish PR
NB: this and libcipm are the last remaining items holding npm-registry-fetch@4 in place.
Finish Arborist.audit(), and audit integration with Arborist.reify()
replace npm-audit-report (in progress)
outdated (in progress - claudiahdz)
All reify commands above need consistent output at the end of their
run, including funding, quick audit, and summary results (in progress
isaacs, pending finishing Arborist.audit)
shrinkwrap command
npm install --package-lock-only
remove lib/fetch-package-metadata.js once nothing is using it
remove lib/install/*.js once nothing is using it
npm commands to port to Arborist.loadActual
ls
fund
fully remove all uid/gid setting stuff
update mkdirp to 1.x everywhere
fully remove these configs which are no longer relevant:
user
group
uid
gid
umask
dev (or convert to alias for --include=dev)
onload-script (and actually remove its usage)
scripts-prepend-node-path
unsafe-perm
Add support to Arborist for --format-package-lock flag
do not treat test special in scripts (ie, just go ahead and run and
fail if no scripts.test present, instead of creating a default fail
message)
@ljharb You can view the zenhub url by logging in with GitHub. It's just an organizing view of tickets across multiple repos, with some scrummy sprint type decorations applied.
Activity
isaacs commentedon Apr 18, 2020
Updated list:
Beta Release Blockers
Arborist.reify()in some fashion:do the deduping bit without completely regenerating it, but should be
straightforward)
npm publishPRlibcipmare the last remaining items holdingnpm-registry-fetch@4in place.Arborist.audit(), and audit integration withArborist.reify()npm-audit-report(in progress)run, including funding, quick audit, and summary results (in progress
isaacs, pending finishing Arborist.audit)
npm install --package-lock-onlylib/fetch-package-metadata.jsonce nothing is using itlib/install/*.jsonce nothing is using it--include=dev)--format-package-lockflagtestspecial in scripts (ie, just go ahead and run andfail if no
scripts.testpresent, instead of creating a default failmessage)
7.0.0 release blockers (but not 7.0.0-beta blockers)
process.umask()process.umask()everywhere else, but tar is the only hardone
lib, and enforce 100%code coverage with a coverage-map
Can be 7.1 or later release
itself will be more straightforward, but some subtle UX work.
isaacs commentedon Apr 18, 2020
cc: @ethomson @jeremyepling @scottdensmore
darcyclarke commentedon Jun 1, 2020
Note: we've broken out this Epic into smaller issues & Epics; You can find the in-progress items here: https://app.zenhub.com/workspaces/community--open-source-5dc50ffc58ce25000154fc64/board?labels=release%207.x&repos=139910229,193812680,193818300,206620712,219775300,195874389,1357199,9556133,15821540,19761728,20658455,25002984,87129681,92022198,92569773,98075774,102792426,106227009,122357526,131072921,193812470,193813560,193816752,210390077,233293453,146668808,125480737,156104684,145055756,128109144,27612014,28640038,200085633,193817839,145919620,146349815,145500230,246167265,246110676,235679249,246439333
ljharb commentedon Jun 1, 2020
those aren't on github tho
isaacs commentedon Jun 1, 2020
@ljharb You can view the zenhub url by logging in with GitHub. It's just an organizing view of tickets across multiple repos, with some scrummy sprint type decorations applied.
ljharb commentedon Jun 2, 2020
Not without granting it full write permissions on all my public and private repos :-/
isaacs commentedon Jun 3, 2020
Could always create an alt account. Idk. 🤷♂️