Does something change in publishing mechanism?
akhomchenko opened this issue · comments
Description
Last 3 versions (19.2.1, 19.2.0, 19.1.0) yield tar errors on install:
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN tar TAR_ENTRY_INVALID checksum failure
npm WARN deprecated har-validator@5.1.5: this library is no longer supported
npm WARN deprecated boom@7.3.0: This module has moved and is now available at @hapi/boom. Please update your dependencies as this version is no longer maintained an may contain bugs and security issues.
npm WARN deprecated hoek@6.1.3: This module has moved and is now available at @hapi/hoek. Please update your dependencies as this version is no longer maintained an may contain bugs and security issues.
npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142
added 261 packages, and audited 262 packages in 14s
15 packages are looking for funding
run `npm fund` for details
5 high severity vulnerabilities
To address all issues (including breaking changes), run:
npm audit fix --force
Run `npm audit` for details.
I've checked with both tar and gtar on my osx and they also complain:
$ tar xvf mongodb-data-service-19.2.1.tgz [246/393]
x package/.depcheckrc
tar: Damaged tar archive
tar: Retrying...
tar: Damaged tar archive
tar: Retrying...
tar: Damaged tar archive
tar: Retrying...
tar: Damaged tar archive
tar: Retrying...
tar: Damaged tar archive
tar: Retrying...
tar: Damaged tar archive
tar: Retrying...
tar: Damaged tar archive
tar: Retrying...
tar: Damaged tar archive
tar: Retrying...
tar: Damaged tar archive
tar: Retrying...
tar: Damaged tar archive
tar: Retrying...
tar: Damaged tar archive
tar: Retrying...
tar: Damaged tar archive
tar: Retrying...
tar: Damaged tar archive
tar: Retrying...
tar: Damaged tar archive
tar: Retrying...
tar: Damaged tar archive
tar: Retrying...
tar: Damaged tar archive
tar: Retrying...
tar: Damaged tar archive
tar: Retrying...
tar: Damaged tar archive
tar: Retrying...
tar: Damaged tar archive
tar: Retrying...
tar: Damaged tar archive
tar: Retrying...
tar: Damaged tar archive
tar: Retrying...
tar: Damaged tar archive
tar: Retrying...
x package/lib/data-service.js
x package/index.js
x package/lib/instance-detail-helper.js
x package/lib/native-client.js
x package/package.json
x package/README.md
$ gtar xvf mongodb-data-service-19.2.1.tgz
package/.depcheckrc
gtar: Skipping to next header
package/lib/data-service.js
package/index.js
package/lib/instance-detail-helper.js
package/lib/native-client.js
package/package.json
package/README.md
gtar: Exiting with failure status due to previous errors
$ echo $?
2
versions:
$ node --version
v15.14.0
$ npm --version
7.9.0
$ tar --version
bsdtar 3.3.2 - libarchive 3.3.2 zlib/1.2.11 liblzma/5.0.5 bz2lib/1.0.6
$ gtar --version
tar (GNU tar) 1.34
Also yields errors if I try to untar with node's tar:
// named untar.js
const tar = require('tar');
tar.x({
file: 'mongodb-data-service-19.2.1.tgz',
onwarn: (code, message, data) => {
console.warn(
`error in ${data.file}: error = ${data.code}, header = ${JSON.stringify(data.header)}`
);
}
});
$ node untar.js
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":"ignores: [\n \"pre-commit\"\n]\n","mode":null,"uid":null,"gid":null,"size":null,"mtime":null,"cksum":null,"linkpath":"","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":"Apache License\nVersion 2.0, January 2004\nhttp://www.apache.org/licenses/\n\nTERMS AND CONDITIONS FOR U","mode":null,"uid":null,"gid":null,"size":null,"mtime":"1970-01-01T00:00:01.000Z","cksum":null,"linkpath":"ense\" shall mean the terms and conditions for use, reproduction,\nand distribution as defined by Sect","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":"rolled by, or are under common\ncontrol with that entity. For the purposes of this definition,\n\"contr","mode":null,"uid":null,"gid":null,"size":null,"mtime":null,"cksum":null,"linkpath":"\ndirection or management of such entity, whether by contract or\notherwise, or (ii) ownership of fift","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":"aking modifications,\nincluding but not limited to software source code, documentation\nsource, and co","mode":null,"uid":null,"gid":null,"size":null,"mtime":null,"cksum":null,"linkpath":"ulting from mechanical\ntransformation or translation of a Source form, including but\nnot limited to ","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":"ttached to the work\n(an example is provided in the Appendix below).\n\n\"Derivative Works\" shall mean a","mode":null,"uid":null,"gid":null,"size":null,"mtime":null,"cksum":null,"linkpath":"on (or derived from) the Work and for which the\neditorial revisions, annotations, elaborations, or o","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":" Works thereof.\n\n\"Contribution\" shall mean any work of authorship, including\nthe original version of","mode":null,"uid":null,"gid":null,"size":null,"mtime":null,"cksum":null,"linkpath":" or Derivative Works thereof, that is intentionally\nsubmitted to Licensor for inclusion in the Work ","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":"epresentatives, including but not limited to\ncommunication on electronic mailing lists, source code ","mode":null,"uid":null,"gid":null,"size":null,"mtime":null,"cksum":null,"linkpath":"ged by, or on behalf of, the\nLicensor for the purpose of discussing and improving the Work, but\nexcl","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":" Licensor and\nsubsequently incorporated within the Work.\n\n2. Grant of Copyright License. Subject to ","mode":null,"uid":null,"gid":null,"size":null,"mtime":null,"cksum":null,"linkpath":"r hereby grants to You a perpetual,\nworldwide, non-exclusive, no-charge, royalty-free, irrevocable\nc","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":"s License, each Contributor hereby grants to You a perpetual,\nworldwide, non-exclusive, no-charge, r","mode":null,"uid":null,"gid":null,"size":null,"mtime":null,"cksum":null,"linkpath":"n) patent license to make, have made,\nuse, offer to sell, sell, import, and otherwise transfer the W","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":"If You\ninstitute patent litigation against any entity (including a\ncross-claim or counterclaim in a ","mode":null,"uid":null,"gid":null,"size":null,"mtime":null,"cksum":null,"linkpath":"rated within the Work constitutes direct\nor contributory patent infringement, then any patent licens","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":"nd in Source or Object form, provided that You\nmeet the following conditions:\n\n(a) You must give any","mode":null,"uid":null,"gid":null,"size":null,"mtime":null,"cksum":null,"linkpath":"of this License; and\n\n(b) You must cause any modified files to carry prominent notices\nstating that ","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":" part of\nthe Derivative Works; and\n\n(d) If the Work includes a \"NOTICE\" text file as part of its\ndis","mode":null,"uid":null,"gid":null,"size":null,"mtime":null,"cksum":null,"linkpath":"must\ninclude a readable copy of the attribution notices contained\nwithin such NOTICE file, excluding","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":"ivative Works; or,\nwithin a display generated by the Derivative Works, if and\nwherever such third-pa","mode":null,"uid":null,"gid":null,"size":null,"mtime":null,"cksum":null,"linkpath":"ile are for informational purposes only and\ndo not modify the License. You may add Your own attribut","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":"t to Your modifications and\nmay provide additional or different license terms and conditions\nfor use","mode":null,"uid":null,"gid":null,"size":null,"mtime":null,"cksum":null,"linkpath":"\nfor any such Derivative Works as a whole, provided Your use,\nreproduction, and distribution of the ","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":"and conditions of\nthis License, without any additional terms or conditions.\nNotwithstanding the abov","mode":null,"uid":null,"gid":null,"size":null,"mtime":null,"cksum":null,"linkpath":"any separate license agreement you may have executed\nwith Licensor regarding such Contributions.\n\n6.","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":"f the NOTICE file.\n\n7. Disclaimer of Warranty. Unless required by applicable law or\nagreed to in wri","mode":null,"uid":null,"gid":null,"size":null,"mtime":null,"cksum":null,"linkpath":"ovides its Contributions) on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either ","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":" Work and assume any\nrisks associated with Your exercise of permissions under this License.\n\n8. Limi","mode":null,"uid":null,"gid":null,"size":null,"mtime":null,"cksum":null,"linkpath":"y,\nwhether in tort (including negligence), contract, or otherwise,\nunless required by applicable law","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":"e or out of the use or inability to use the\nWork (including but not limited to damages for loss of g","mode":null,"uid":null,"gid":null,"size":null,"mtime":null,"cksum":null,"linkpath":"or any and all\nother commercial damages or losses), even if such Contributor\nhas been advised of the","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":"ons and/or rights consistent with this\nLicense. However, in accepting such obligations, You may act ","mode":null,"uid":null,"gid":null,"size":null,"mtime":null,"cksum":null,"linkpath":"not on behalf\nof any other Contributor, and only if You agree to indemnify,\ndefend, and hold each Co","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":" apply the Apache License to your work, attach the following\nboilerplate notice, with the fields enc","mode":null,"uid":null,"gid":null,"size":null,"mtime":null,"cksum":null,"linkpath":" information. (Don't include\nthe brackets!) The text should be enclosed in the appropriate\ncomment ","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":"wner}\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file exc","mode":null,"uid":null,"gid":null,"size":null,"mtime":null,"cksum":null,"linkpath":" of the License at\n\nhttp://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}
error in mongodb-data-service-19.2.1.tgz: error = TAR_ENTRY_INVALID, header = {"cksumValid":false,"needPax":false,"nullBlock":false,"block":null,"path":"r the License.\n","mode":null,"uid":null,"gid":null,"size":null,"mtime":null,"cksum":null,"linkpath":"","uname":null,"gname":null,"devmaj":0,"devmin":0,"atime":null,"ctime":null}