Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
FS#69912 - [typescript] [npm-check-updates] package includes /usr/lib/node_modules/root/
Attached to Project:
Community Packages
Opened by Johannes Wienke (languitar) - Monday, 08 March 2021, 09:06 GMT
Last edited by Felix Yan (felixonmars) - Tuesday, 09 March 2021, 13:07 GMT
Opened by Johannes Wienke (languitar) - Monday, 08 March 2021, 09:06 GMT
Last edited by Felix Yan (felixonmars) - Tuesday, 09 March 2021, 13:07 GMT
|
DetailsDescription:
The current typescript package 4.2.3-1 includes a folder /usr/lib/node_modules/root/. This seems to happen since an upstream change to node or npm as one of my packages was also affected and included the exact same files. Therefore, the potential for conflicts is very high an these files shouldn't exist in the package in any case. Additional info: * package version(s): 4.2.3-1 Steps to reproduce: ❯ pacman -Qo /usr/lib/node_modules/root/ /usr/lib/node_modules/root/ is owned by typescript 4.2. |
This task depends upon
Closed by Felix Yan (felixonmars)
Tuesday, 09 March 2021, 13:07 GMT
Reason for closing: Fixed
Additional comments about closing: typescript 4.2.3-2
npm-check-updates 11.2.0-1
Tuesday, 09 March 2021, 13:07 GMT
Reason for closing: Fixed
Additional comments about closing: typescript 4.2.3-2
npm-check-updates 11.2.0-1

There seems to be a serious issue with the tooling here, any PKGBUILD using `npm install --user root` appears to have this problem when it gets rebuilt/updated.

Yes, my AUR package was also affected. I could work around that after removing the user flag

Btw, https://wiki.archlinux.org/index.php/Node.js_package_guidelines doesn't mention that flag.

It did, someone just removed it: https://wiki.archlinux.org/index.php?title=Node.js_package_guidelines&diff=654198&oldid=650163