Sub-dependency causing download to fail in enterprise-environments.

[annitya]

Current behavior:

The server-package has a dependency tar-fs which has a dependency bl
which contains a file test/indexOf containing the string arglebargleglopglyf.
Our firewall then gets a hit on this signature which causes the download to fail.

The problem is present in 4.1.0, but absent in 4.0.2.

Desired behavior:

Download goes smoothly because there are no "hacking-signatures" in any sub-dependencies

Test code to reproduce

Can't help you with this one I'm afraid. Our firewall is apparently super-secret, so I don't know which tool they are using.

Versions

Cypress, Windows 10 version 4.1.0.

Related

Posted issue in offending dependency here.
Pull-request for said issue.

[jennifer-shehane]

Opened PR to pull in bl dep update with PR into tar-stream which would then need to be released and updated in tar-fs. mafintosh/tar-stream#113

[annitya]

Semver should take care of things @jennifer-shehane I installed registry-js locally and it correctly pulled in tar-stream@2.1.1 :)

[jennifer-shehane]

Closing as resolved.