Description

Does Artifactory Support Shrinkwrap NPM dependency urls?

AuthorFullName__c
David Xu
articleNumber
000004217
ft:sourceType
Salesforce
FirstPublishedDate
2019-07-08T22:35:14Z
lastModifiedDate
2019-07-08
VersionNumber
2

Artifactory does not support shrinkwrap URLs for NPM dependencies.  The npm client uses checksums in order to verify a package, and using shrinkwrap forces changing the checksum on-the-fly. This is time consuming and will result in a time out.
Additionally hard coding NPM dependency URLs is not best practice and shrinkwrapped URLs are known to have issues when interacting with proxies:

Npm install -ddd will show resolution ignoring .npmrc configurations
id="docs-internal-guid-e8cfb494-8566-01c0-f04c-590266a187d6">Usually to registry.npmjs.org

  • Resolution results in a 400 error

    • One possible error is “418: I am a teapot”

  • If registry.npmjs.org is unavailable, the resolution could hang and/or time out