[Pkg-javascript-devel] Bug#1000673: reportbug: npm package depends on too many packages, including X11
Mikel Pérez
io at mikelpr.com
Fri Nov 26 22:57:36 GMT 2021
Package: npm
Severity: serious
Justification: Policy 2.2.1
X-Debbugs-Cc: io at mikelpr.com
Dear Maintainer,
I was installing npm on my headless raspberry pi when I noticed it pulls
unnecessary libx11 packages and xserver-utils. Since they're not listed
on the package dependencies, I assume one of the dependencies is that
which includes it. Still, I find it doubtful that anything that depends
on X is actually needed to run npm.
I believe the dependency list needs to be revised.
I tried with the debian docker image too so it is not a raspbian bug.
-- System Information:
Debian Release: 11.1
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 5.14.18-300.fc35.x86_64 (SMP w/16 CPU threads)
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: unable to detect
Versions of packages npm depends on:
ii ca-certificates 20210119
pn node-abbrev <none>
pn node-agent-base <none>
pn node-ajv <none>
pn node-ansi <none>
pn node-ansi-regex <none>
pn node-ansi-styles <none>
pn node-ansistyles <none>
pn node-aproba <none>
pn node-archy <none>
pn node-are-we-there-yet <none>
pn node-asap <none>
pn node-asn1 <none>
pn node-assert-plus <none>
pn node-asynckit <none>
pn node-aws-sign2 <none>
pn node-aws4 <none>
pn node-balanced-match <none>
pn node-bcrypt-pbkdf <none>
pn node-brace-expansion <none>
pn node-builtins <none>
pn node-cacache <none>
pn node-caseless <none>
pn node-chalk <none>
pn node-chownr <none>
pn node-clone <none>
pn node-color-convert <none>
pn node-color-name <none>
pn node-colors <none>
pn node-columnify <none>
pn node-combined-stream <none>
pn node-concat-map <none>
pn node-console-control-strings <none>
pn node-core-util-is <none>
pn node-dashdash <none>
pn node-debug <none>
pn node-defaults <none>
pn node-delayed-stream <none>
pn node-delegates <none>
pn node-depd <none>
pn node-ecc-jsbn <none>
pn node-encoding <none>
pn node-err-code <none>
pn node-extend <none>
pn node-extsprintf <none>
pn node-fast-deep-equal <none>
pn node-forever-agent <none>
pn node-form-data <none>
pn node-fs.realpath <none>
pn node-function-bind <none>
pn node-gauge <none>
pn node-getpass <none>
pn node-glob <none>
pn node-graceful-fs <none>
pn node-gyp <none>
pn node-har-schema <none>
pn node-har-validator <none>
pn node-has-flag <none>
pn node-http-signature <none>
pn node-https-proxy-agent <none>
pn node-iconv-lite <none>
pn node-imurmurhash <none>
pn node-indent-string <none>
pn node-inflight <none>
pn node-inherits <none>
pn node-ini <none>
pn node-ip <none>
pn node-ip-regex <none>
pn node-is-typedarray <none>
pn node-isarray <none>
pn node-isexe <none>
pn node-isstream <none>
pn node-jsbn <none>
pn node-json-parse-better-errors <none>
pn node-json-schema <none>
pn node-json-schema-traverse <none>
pn node-json-stable-stringify <none>
pn node-json-stringify-safe <none>
pn node-jsonparse <none>
pn node-jsonstream <none>
pn node-jsprim <none>
pn node-leven <none>
pn node-lockfile <none>
pn node-mime <none>
pn node-mime-types <none>
pn node-minimatch <none>
pn node-mkdirp <none>
pn node-ms <none>
pn node-mute-stream <none>
pn node-nopt <none>
pn node-normalize-package-data <none>
pn node-npm-bundled <none>
pn node-npm-package-arg <none>
pn node-npmlog <none>
pn node-number-is-nan <none>
pn node-oauth-sign <none>
pn node-object-assign <none>
pn node-opener <none>
pn node-p-map <none>
pn node-path-is-absolute <none>
pn node-performance-now <none>
pn node-process-nextick-args <none>
pn node-promise-retry <none>
pn node-promzard <none>
pn node-psl <none>
pn node-puka <none>
pn node-punycode <none>
pn node-qs <none>
pn node-read <none>
pn node-read-package-json <none>
pn node-readable-stream <none>
pn node-resolve <none>
pn node-resolve-from <none>
pn node-retry <none>
pn node-rimraf <none>
pn node-safe-buffer <none>
pn node-semver <none>
pn node-set-blocking <none>
pn node-signal-exit <none>
pn node-slash <none>
pn node-spdx-correct <none>
pn node-spdx-exceptions <none>
pn node-spdx-expression-parse <none>
pn node-spdx-license-ids <none>
pn node-sshpk <none>
pn node-ssri <none>
pn node-string-decoder <none>
pn node-string-width <none>
pn node-strip-ansi <none>
pn node-supports-color <none>
pn node-tar <none>
pn node-text-table <none>
pn node-tunnel-agent <none>
pn node-tweetnacl <none>
pn node-typedarray-to-buffer <none>
pn node-uri-js <none>
pn node-util-deprecate <none>
pn node-uuid <none>
pn node-validate-npm-package-name <none>
pn node-verror <none>
pn node-wcwidth.js <none>
pn node-which <none>
pn node-wide-align <none>
pn node-wrappy <none>
pn node-write-file-atomic <none>
pn node-yallist <none>
pn nodejs <none>
Versions of packages npm recommends:
pn git <none>
npm suggests no packages.
More information about the Pkg-javascript-devel
mailing list