Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

[Bug]: Unable to install packages from CodeSandbox

See original GitHub issue

Self-service

I’d be willing to implement a fix

Describe the bug

Package URLs from CodeSandbox doesn’t include tgz so Yarn is unable to install them

Originally reported by @phryneas

To reproduce

const installPromise = packageJsonAndInstall({
	dependencies: {
		[`@reduxjs/toolkit`]: `https://pkg.csb.dev/reduxjs/redux-toolkit/commit/7491320d/@reduxjs/toolkit`,
	},
});

await expect(installPromise).resolves.toBeTruthy();

Environment

  System:
    OS: Windows 10 10.0.19042
    CPU: (16) x64 AMD Ryzen 7 3700X 8-Core Processor
  Binaries:
    Node: 16.7.0 - ~\AppData\Local\Temp\xfs-d3717859\node.CMD
    Yarn: 3.0.1-git.20210819.hash-32881f98b - ~\AppData\Local\Temp\xfs-d3717859\yarn.CMD
    npm: 7.20.1 - C:\nodejs\npm.CMD

Additional context

No response

Issue Analytics

State:
Created 2 years ago
Reactions:2
Comments:6 (3 by maintainers)

Top GitHub Comments

3reactions

ylemkimoncommented, Aug 26, 2021

A workaround would be to use a url hash: yarn add @reduxjs/toolkit@https://pkg.csb.dev/reduxjs/redux-toolkit/commit/7491320d/@reduxjs/toolkit#.tgz.

0reactions

Andaristcommented, Dec 16, 2021

Until CSB fixes how they are generating package.json manifests, this plugin can be used as a workaround:

module.exports = {
  name: 'fix-csb-deps',
  factory: (require) => {
    const crypto = require('crypto')

    // https://github.com/yarnpkg/berry/blob/5411f76bcd89d1d6f430f4bd0e16146ce9fdd370/packages/yarnpkg-core/sources/hashUtils.ts#L5-L26
    function makeHash(...args) {
      const hash = crypto.createHash(`sha512`)

      let acc = ``
      for (const arg of args) {
        if (typeof arg === `string`) {
          acc += arg
        } else if (arg) {
          if (acc) {
            hash.update(acc)
            acc = ``
          }

          hash.update(arg)
        }
      }

      if (acc) hash.update(acc)

      return hash.digest(`hex`)
    }

    return {
      hooks: {
        reduceDependency(dependency, project, locator, initialDependency, { resolver, resolveOptions }) {
          if (dependency.range.startsWith('https://pkg.csb.dev/') && !dependency.range.endsWith('/_pkg.tgz')) {
            const newRange = `${dependency.range}/_pkg.tgz`
            const fixedDescriptor = {
              identHash: dependency.identHash,
              scope: dependency.scope,
              name: dependency.name,
              descriptorHash: makeHash(dependency.identHash, newRange),
              range: newRange,
            }
            return fixedDescriptor
          }
          return dependency
        },
      },
    }
  },
}