Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The 'tar' node package needs to be updated #1918

Closed
jkim7 opened this issue Oct 14, 2019 · 3 comments
Closed

The 'tar' node package needs to be updated #1918

jkim7 opened this issue Oct 14, 2019 · 3 comments

Comments

@jkim7
Copy link

jkim7 commented Oct 14, 2019

Hi

Older versions of tar has a file called cb-never-called-1.0.1.tgz, and it triggers a warning on virus scans, could you guys upgrade to a newer version of tar to remove it?

thanks

  • Node Version:
  • Platform:
  • Compiler:
  • Module:
Verbose output (from npm or node-gyp):
Paste your log here, between the backticks. It can be:
  - npm --verbose output,
  - or contents of npm-debug.log,
  - or output of node-gyp rebuild --verbose.
@rvagg
Copy link
Member

rvagg commented Oct 14, 2019

Please use a newer version of node-gyp, or npm if you are using it from there. This should already have been resolved.

@rvagg rvagg closed this as completed Oct 14, 2019
@rvagg
Copy link
Member

rvagg commented Oct 14, 2019

OK, I take that back. I don't know about the specific issue you're pointing out but it looks like a v5 of node-tar has been released. We should look at that.

@rvagg rvagg reopened this Oct 14, 2019
@rvagg
Copy link
Member

rvagg commented Oct 15, 2019

It looks like this was resolved in node-tar v3, isaacs/node-tar#72 (comment), we are on to v4 and I can't find the file in the package. So, indeed, upgrade your node-gyp or npm and it should go away. I'll deal with a node-tar upgrade separately.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants