[Pkg-javascript-devel] Bug#952656: yarnpkg: should depend on ca-certificates

[Paolo Greppi]

Package: yarnpkg
Version: 1.21.1-1
Severity: normal

if ca-certificates is not installed, yarnpkg will hang or quit abruptly without
any error message / error status.

To reproduce:
sudo apt install yarnpkg
sudo apt remove ca-certificates
cd $(mktemp -d)
cat > package.json
{
  "dependencies": {
    "highlight.js": "^9.17.1",
    "reveal.js": "^3.8.0"
  }
}
^d
yarnpkg install --verbose
[crash]

-- System Information:
Debian Release: 10.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-8-amd64 (SMP w/12 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8), LANGUAGE= (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages yarnpkg depends on:
ii  node-asap                          2.0.6-1
ii  node-babel-runtime                 6.26.0+dfsg-3
ii  node-bytes                         3.0.0-1
ii  node-camelcase                     5.0.0-1
ii  node-chalk                         2.3.0-2
ii  node-chownr                        1.1.1-1
ii  node-ci-info                       1.1.2-1
ii  node-cli-table                     0.3.1-1
ii  node-commander                     2.12.2-3
ii  node-death                         1.0.0-1
ii  node-debug                         3.1.0-2
ii  node-deep-equal                    1.0.1-1
ii  node-detect-indent                 5.0.0-1
ii  node-duplexify                     3.6.1-1
ii  node-emoji                         1.8.1-1
ii  node-fast-levenshtein              2.0.5-1
ii  node-glob                          7.1.3-2
ii  node-imports-loader                0.7.1-1
ii  node-ini                           1.3.5-1
ii  node-inquirer                      3.3.0-2
ii  node-invariant                     2.2.2-1
ii  node-is-builtin-module             2.0.0-1
ii  node-js-yaml                       3.13.1+dfsg-2~bpo10+1
ii  node-loud-rejection                1.6.0-1
ii  node-micromatch                    2.3.11-1
ii  node-minimatch                     3.0.4-3
ii  node-mkdirp                        0.5.1-1
ii  node-node-uuid                     3.3.2-2
ii  node-object-path                   0.11.4-2
ii  node-path-root                     0.1.1-1
ii  node-proper-lockfile               2.0.1-1
ii  node-puka                          1.0.0+dfsg-1
ii  node-pump                          3.0.0-1
ii  node-pumpify                       1.5.1-1
ii  node-read                          1.0.7-1
ii  node-request                       2.88.1-2
ii  node-request-capture-har           1.2.2-1
ii  node-resolve                       1.5.0-1
ii  node-rimraf                        2.6.2-1
ii  node-semver                        5.5.1-1
ii  node-ssri                          5.2.4-2
ii  node-strict-uri-encode             2.0.0-1
ii  node-strip-ansi                    4.0.0-1
ii  node-strip-bom                     3.0.0-1
ii  node-tar-stream                    1.5.2-1
ii  node-validate-npm-package-license  3.0.1-1
ii  node-yn                            3.0.0-1
ii  nodejs                             10.15.2~dfsg-2

yarnpkg recommends no packages.

yarnpkg suggests no packages.

-- no debconf information