codesandbox-client
codesandbox-client copied to clipboard
Unable to build with Yarn 3 when @codesandbox/common is included in a project
🐛 bug report
Preflight Checklist
- [ x] I have read the Contributing Guidelines for this project.
- [x ] I agree to follow the Code of Conduct that this project adheres to.
- [ x] I have searched the issue tracker for an issue that matches the one I want to file, without success.
Description of the problem
Unable to build with Yarn 3 included. Yarn 3 does not like (rightfully) the inclusion of a git repo dependency and will fail with the following error:
YN0018: │ humps@https://github.com/CompuIves/humps.git#commit=7ee34e874c808cf60e7119ee71ac71b8bf2189b7: The remote archive doesn't match the expected checksum
To Reproduce
make a project that uses Yarn 3 and has @codesandbox/common as a dependency
There is a workaround: Use YARN_CHECKSUM_BEHAVIOR=update yarn install
, but this turns off Yarn's checksum validation mechanism which introduces a large security hole.
How to fix
Publish CompuIves/humps
as an npm package
Hey @matyasf ,
I'm afraid we're not supporting Yarn3 just yet, we'd recommend using Yarn2 on Codesandbox to avoid any issues