Patrick Connolly

Note that there's another layer here, where: 1. one can intentionally break the integrity hash [EDIT: or substitute a non-corrupt hash in place], then 2. run `npm ci`, and 3....

Ah ok, so maybe this is another issue. Sorry to conflate. `npm ci` on v8.3.0 definitely installs without complaint with a broken integrity hash (at least on my machine). I'll...

In case helpful, sharing our encounter here: https://github.com/GCTC-NTGC/gc-digital-talent/pull/2414#issuecomment-1095659059 Can you confirm that the Alt Reproduction described there is unexpected for NPM v8.3.0? If so, should this be a new issue,...

~~heh sorry, just contributing here from an in-use repo (we're stuck at 8.3.0 I recall), but i'll try HEAD later. Wasn't seeing an issue anywhere, so thought I'd raise it...

ok, finito. (Ha!) node 14.18.1 (stuck on this) npm 8.6.0 using npm workspaces both scenarios still hold -- both malformed integrity hashes and well-formed but unmatching hashes run without failure...

@shadowhand in https://github.com/lcobucci/jwt/issues/32#issuecomment-508733011: > The docs took a long time to digest, and in our case, the gmp requirement a show stopper, as our runtime (lambda + bref) doesn't have...

New link to project: https://github.com/dgraph-io/badger

Great call on yaml anchors, at least when same file. Hitting same issue where I wish to set default for octodns metadata like ```yml - type: A value: 123.45.67.89 octodns:...

https://github.com/23andMe/Yamale is great to yaml validation. Basically a yaml file that configures what can show up in other yaml files, e.g., https://github.com/23andMe/Yamale#using-keywords Might be worth pointing people to yamale explicitly...

There's a php builtin func: http://www.w3schools.com/php/func_filesystem_parse_ini_file.asp I'd say it's a small ops code-smell to be writing config management assets to mess around with config in an executable file. I guess...