[
https://issues.apache.org/jira/browse/NIFI-14779?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Rob Fellows resolved NIFI-14779.
--------------------------------
Resolution: Not A Problem
This was due to npm registry removing the stylus library over fears of malware
being included. this has since been restored and everything is back to normal.
> CI build failing over transitive dependency on stylus no longer available in
> npm registry
> -----------------------------------------------------------------------------------------
>
> Key: NIFI-14779
> URL: https://issues.apache.org/jira/browse/NIFI-14779
> Project: Apache NiFi
> Issue Type: Sub-task
> Components: Core UI
> Reporter: Rob Fellows
> Assignee: Rob Fellows
> Priority: Major
>
> Getting an error in CI when building...
> {noformat}
> [INFO] npm error code E404
> [INFO] npm error 404 Not Found - GET
> https://registry.npmjs.org/stylus/-/stylus-0.64.0.tgz - Not found
> [INFO] npm error 404
> [INFO] npm error 404
> 'stylus@https://registry.npmjs.org/stylus/-/stylus-0.64.0.tgz' is not in this
> registry.
> [INFO] npm error 404
> [INFO] npm error 404 Note that you can also install from a
> [INFO] npm error 404 tarball, folder, http url, or git url.{noformat}
>
>
> It seems this version of stylus has security issues and was removed from npm
> registry. the latest version is "0.0.1-security"
> Advisory: [https://github.com/advisories/GHSA-fh4q-jc76-r59p]
> More info from stylus: [https://github.com/stylus/stylus/issues/2938]
> Request for review of false positive:
> [https://github.com/github/advisory-database/issues/5846]
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
