[Bug 2000788] Re: NodeJS ships without corepack and suggests npm

2024-12-31 Thread kapouer
Well, actually it would make more sense to add node-corepack to Depends, so let's do that. Reading the file:///usr/share/doc/nodejs/api/corepack.html documentation, it's clear that "npm" still plays a special role, so it's legit to let it sit in Suggests. -- You received this bug notification

[Bug 2000788] Re: NodeJS ships without corepack and suggests npm

2024-12-31 Thread kapouer
Hi, I'm in favor of removing both "npm, node-corepack" from Suggests, and promoting "node-corepack" to Recommends. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2000788 Title: NodeJS ships without c

[Bug 2000788] Re: NodeJS ships without corepack and suggests npm

2024-12-29 Thread Michael De La Rue
I would like to support some priority on this. It's not a security vulnerability as such, but there is a proliferation of different sites which are offering instructions for installing pnpm and yarn on Ubuntu, incuding ones which involve directy piping the output of curl into bash (https://github.c

[Bug 2000788] Re: NodeJS ships without corepack and suggests npm

2024-12-29 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: nodejs (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2000788 Title: Nod