Uploaded image for project: 'Artifactory Binary Repository'
  1. Artifactory Binary Repository
  2. RTFACT-20763

Artifactory is incorrectly serving external NPM dependencies(when multiple versions of same package involved)

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Done
    • Priority: 4 - Normal
    • Resolution: Done
    • Affects Version/s: 6.15.0
    • Fix Version/s: 7.12.5
    • Component/s: None
    • Labels:
      None
    • Environment:

      Artifactory 6.15.0.

      npm agent version 6.12.0

    • Severity:
      Medium
    • Release Notes:
      Yes

      Description

      Here's a scenario where npm will cache and serve only the first version of external dependencies, even if the later package requires higher versions of the same dependencies. 

       

      Steps to reproduce:

      1) Connect npm agent with artifactory(virtual repo).

      2) Install these two appdynamics packages:

      npm i appdynamics@4.5.17

      npm i appdynamics@4.5.22

        

      appdynamics@4.5.17 has the following external dependencies:

      libagent-napi 4.5.17
      appdynamics-native 4.5.17
      appdynamics-protobuf 4.5.17
      appdynamics-zmq 4.5.17

       

      appdynamics@4.5.22 has the following external dependencies:

      libagent-napi 4.5.22
      appdynamics-native 4.5.22
      appdynamics-protobuf 4.5.22
      appdynamics-zmq 4.5.22**

       

      But if you go to the npm-remote-cache/_external directory you will only see the following dependencies cached:

      libagent-napi 4.5.23 but 4.5.17 is missing
      appdynamics-native 4.5.17 but 4.5.22 is missing
      appdynamics-protobuf 4.5.17 but 4.5.22 is missing
      appdynamics-zmq 4.5.17 but 4.5.22 is missing

       

      The conclusion is that artifactory is still serving older dependencies for the first npm package @4.5.17, even if the later versions are required in the JSON file of the @4.5.22 package.

        Attachments

          Activity

            People

            Assignee:
            tomern Tomer Nir
            Reporter:
            nikp Nik Polovenko (Inactive)
            Votes:
            14 Vote for this issue
            Watchers:
            13 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Sync Status

                Connection: RTFACT Sync
                RTMID-20763 -
                SYNCHRONIZED
                • Last Sync Date: