[Bug 1919295] Review Request: npm-name-cli - Check whether a package or organization name is available on npm

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



https://bugzilla.redhat.com/show_bug.cgi?id=1919295

code@xxxxxxxxxxxxxxxxxx changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Doc Type|---                         |If docs needed, set a value



--- Comment #1 from code@xxxxxxxxxxxxxxxxxx ---
Comments on rpmlint messages:

npm-name-cli.noarch: E: useless-provides bundled(nodejs-ansi-styles)
[… many similar messages …]

I do not know why rpmlint thinks this is useless, but these are the required
virtual Provides for the bundled node dependencies. All node-based RPMs under
the new guidelines will have them.

npm-name-cli.noarch: W: only-non-binary-in-usr-lib

All node-based RPMs will have this as well, based on the location of
/usr/lib/node_modules/ (%node_sitelib).

npm-name-cli.noarch: W: hidden-file-or-dir
/usr/lib/node_modules/npm-name-cli/node_modules/.bin
[… many similar messages …]

Dotfiles under node_modules are normal.

npm-name-cli.noarch: E: script-without-shebang
/usr/lib/node_modules/npm-name-cli/node_modules_prod/@types/normalize-package-data/package.json
[… many similar messages …]

My view is that blindly attempting to correct the many extra or missing
executable bits in bundled node module dependencies is a fool’s errand, more
likely to accidentally break something than accomplish anything useful. (I
would be willing to chmod a-x all .json files if a reviewer felt strongly about
it.)

npm-name-cli.noarch: E: zero-length
/usr/lib/node_modules/npm-name-cli/node_modules_prod/package-json/node_modules/@sindresorhus/is/dist/example.d.ts

Again, there is no reason to go mucking around inside the bundled dependencies.

npm-name-cli.src: W: no-%build-section

Normal for a node-based RPM; there is nothing to do.

npm-name-cli.src: W: invalid-url Source1: npm-name-cli-3.0.0-nm-prod.tgz

This is the usual bundled dependencies tarball.


-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are always notified about changes to this product and component
_______________________________________________
package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-review@xxxxxxxxxxxxxxxxxxxxxxx




[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite Conditions]     [KDE Users]

  Powered by Linux