[Pkg-javascript-devel] Bug#952656: related upstream bug + behavior of upstream-provided package

[Paolo Greppi]

see: https://github.com/yarnpkg/yarn/issues/1390

upstream-provided package correctly reports the error:

docker run --rm -it debian:buster-slim /bin/bash

apt update && apt install -y curl gnupg2
curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | apt-key add -
echo "deb https://dl.yarnpkg.com/debian/ stable main" | tee /etc/apt/sources.list.d/yarn.list
apt update && apt install -y yarn
apt remove ca-certificates
cat > package.json
{
  "dependencies": {
    "highlight.js": "^9.18.1"
  }
}
^d
cat > yarn.lock
highlight.js@^9.18.1:
  version "9.18.1"
  resolved "https://registry.yarnpkg.com/highlight.js/-/highlight.js-9.18.1.tgz#ed21aa001fe6252bb10a3d76d47573c6539fe13c"
  integrity sha512-OrVKYz70LHsnCgmbXctv/bfuvntIKDz177h0Co37DQ5jamGZLVmoCVMtjMtNZY3X9DrCcKfklHPNeA0uPZhSJg==
^d
yarn install --verbose
yarn install v1.22.0
warning package.json: No license field
verbose 0.77 Checking for configuration file "/.npmrc".
verbose 0.77 Checking for configuration file "/usr/local/share/.npmrc".
verbose 0.771 Checking for configuration file "/usr/etc/npmrc".
verbose 0.771 Checking for configuration file "/root/.npmrc".
verbose 0.771 Checking for configuration file "/.npmrc".
verbose 0.772 Checking for configuration file "/.yarnrc".
verbose 0.772 Checking for configuration file "/usr/local/share/.yarnrc".
verbose 0.773 Checking for configuration file "/usr/etc/yarnrc".
verbose 0.773 Checking for configuration file "/root/.yarnrc".
verbose 0.773 Checking for configuration file "/.yarnrc".
verbose 0.777 current time: 2020-02-27T08:00:59.988Z
verbose 0.813 Performing "GET" request to "https://yarnpkg.com/latest-version".
warning No license field
[1/4] Resolving packages...
[2/4] Fetching packages...
verbose 0.877 Performing "GET" request to "https://registry.yarnpkg.com/highlight.js/-/highlight.js-9.18.1.tgz".
verbose 0.968 Error: unable to get local issuer certificate
    at TLSSocket.onConnectSecure (_tls_wrap.js:1055:34)
    at TLSSocket.emit (events.js:189:13)
    at TLSSocket._finishInit (_tls_wrap.js:633:8)
error An unexpected error occurred: "https://registry.yarnpkg.com/highlight.js/-/highlight.js-9.18.1.tgz: unable to get local issuer certificate".
info If you think this is a bug, please open a bug report with the information provided in "/yarn-error.log".
info Visit https://yarnpkg.com/en/docs/cli/install for documentation about this command.

so there is something wrong with our package

P.