question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Change the default "botName" to avoid confusion in package dependencies

See original GitHub issue

On a fresh t2.micro, I install nvm, install a stable Node, and hubot appears to not be able to install! 😦

ubuntu@ip-10-2-6-57:~/hubot$ yo hubot
? ==========================================================================
We're constantly looking for ways to make yo better!
May we anonymously report usage statistics to improve the tool over time?
More info: https://github.com/yeoman/insight & http://yeoman.io
========================================================================== Yes
                     _____________________________
                    /                             \
   //\              |      Extracting input for    |
  ////\    _____    |   self-replication process   |
 //////\  /_____\   \                             /
 ======= |[^_/\_]|   /----------------------------
  |   | _|___@@__|__
  +===+/  ///     \_\
   | |_\ /// HUBOT/\\
   |___/\//      /  \\
         \      /   +---+
          \____/    |   |
           | //|    +===+
            \//      |xx|

? Owner User <user@example.com>
? Bot name hubot
? Description A simple helpful robot for your Company
? Bot adapter shell
   create bin/hubot
   create bin/hubot.cmd
   create Procfile
   create README.md
   create external-scripts.json
   create hubot-scripts.json
   create .gitignore
   create package.json
   create scripts/example.coffee
   create .editorconfig
                     _____________________________
 _____              /                             \
 \    \             |   Self-replication process   |
 |    |    _____    |          complete...         |
 |__\\|   /_____\   \     Good luck with that.    /
   |//+  |[^_/\_]|   /----------------------------
  |   | _|___@@__|__
  +===+/  ///     \_\
   | |_\ /// HUBOT/\\
   |___/\//      /  \\
         \      /   +---+
          \____/    |   |
           | //|    +===+
            \//      |xx|

npm ERR! Linux 3.13.0-74-generic
npm ERR! argv "/home/ubuntu/.nvm/versions/node/v6.2.1/bin/node" "/home/ubuntu/.nvm/versions/node/v6.2.1/bin/npm" "install" "hubot" "hubot-scripts" "hubot-diagnostics" "hubot-help" "hubot-heroku-keepalive" "hubot-google-images" "hubot-google-translate" "hubot-pugme" "hubot-maps" "hubot-redis-brain" "hubot-rules" "hubot-shipit" "hubot-shell" "--save"
npm ERR! node v6.2.1
npm ERR! npm  v3.9.3
npm ERR! code ENOSELF

npm ERR! Refusing to install hubot as a dependency of itself
npm ERR!
npm ERR! If you need help, you may report this error at:
npm ERR!     <https://github.com/npm/npm/issues>

npm ERR! Please include the following file with any support request:
npm ERR!     /home/ubuntu/hubot/npm-debug.log

Where should I look next to figure how to finish this hubot install?

Issue Analytics

  • State:open
  • Created 7 years ago
  • Comments:5 (2 by maintainers)

github_iconTop GitHub Comments

1reaction
gr2mcommented, Jul 1, 2017

we should change the default and prevent people from calling their own bot “hubot”

0reactions
technicalpicklescommented, Jun 30, 2017

This is still a problem, so re-opening and pinning.

Read more comments on GitHub >

github_iconTop Results From Across the Web

How to Prevent Dependency Confusion - ActiveState
Just use the package manager npm to download and install it on demand. Want a Python module? Pip, Python's package manager, will include...
Read more >
Detect and prevent dependency confusion attacks on npm to ...
In this article, we will learn about each of the ways this supply chain attack manifests, and detail how to mitigate each of...
Read more >
How to prevent package dependency confusion attacks
Discussing the best solution to all of your problems related to preventing package dependency confusion and other software supply chain ...
Read more >
Control your npm packages & avoid dependency confusion
Configure projects to use private registry be default. Your applications security is only as strong as its weakest link. So make sure private ......
Read more >
Avoiding dependency confusion in python - pip - Stack Overflow
The article mentions the algorithm pip uses: Checks whether library exists on the specified (internal) package index; Checks whether library ...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found