TLDR;
當(dāng)使用淘寶npm源或者npmmirror.com的時(shí)候,npm install --no-audit
淘寶npm源 aka. https://registry.npm.taobao.org/ 已經(jīng)重定向到 https://registry.npmmirror.com
盡量避免繼續(xù)使用淘寶npm源域名弄砍,Chrome會(huì)提示SSL證書(shū)錯(cuò)誤羹与。
npm install 會(huì)默認(rèn)檢查安裝的依賴?yán)锩嬗袥](méi)有漏洞像街,而這項(xiàng)功能依賴registry的audit相關(guān)接口。npmmirror.com只是提供了資源文件下載的加速,并沒(méi)有提供audit相關(guān)接口實(shí)現(xiàn)。
詳情日志見(jiàn)下方:
npm http fetch POST 501 https://registry.npmmirror.com/-/npm/v1/security/advisories/bulk 71485ms attempt #3 (cache skip)
npm sill audit bulk request failed [object Object]
npm http fetch POST 501 https://registry.npmmirror.com/-/npm/v1/security/audits/quick 70704ms attempt #3 (cache skip)
npm verb audit error HttpErrorGeneral: 501 Method Not Implemented - POST https://registry.npmmirror.com/-/npm/v1/security/audits/quick - [NOT_IMPLEMENTED] /-/npm/v1/security/audits/quick not implemented yet
npm verb audit error at C:\Program Files\nodejs\node_modules\npm\node_modules\npm-registry-fetch\check-response.js:95:15
npm verb audit error at runMicrotasks (<anonymous>)
npm verb audit error at processTicksAndRejections (node:internal/process/task_queues:96:5)
npm verb audit error at async Map.[getReport] (C:\Program Files\nodejs\node_modules\npm\node_modules\@npmcli\arborist\lib\audit-report.js:337:21)
npm verb audit error at async Map.run (C:\Program Files\nodejs\node_modules\npm\node_modules\@npmcli\arborist\lib\audit-report.js:107:19)
npm verb audit error at async Arborist.reify (C:\Program Files\nodejs\node_modules\npm\node_modules\@npmcli\arborist\lib\arborist\reify.js:154:5)
npm verb audit error at async Install.install (C:\Program Files\nodejs\node_modules\npm\lib\install.js:170:5)
npm verb audit error HttpErrorGeneral: 501 Method Not Implemented - POST https://registry.npmmirror.com/-/npm/v1/security/audits/quick - [NOT_IMPLEMENTED] /-/npm/v1/security/audits/quick not implemented yet
npm verb audit error at C:\Program Files\nodejs\node_modules\npm\node_modules\npm-registry-fetch\check-response.js:95:15
npm verb audit error at runMicrotasks (<anonymous>)
npm verb audit error at processTicksAndRejections (node:internal/process/task_queues:96:5)
npm verb audit error at async Map.[getReport] (C:\Program Files\nodejs\node_modules\npm\node_modules\@npmcli\arborist\lib\audit-report.js:337:21)
npm verb audit error at async Map.run (C:\Program Files\nodejs\node_modules\npm\node_modules\@npmcli\arborist\lib\audit-report.js:107:19)
npm verb audit error at async Arborist.reify (C:\Program Files\nodejs\node_modules\npm\node_modules\@npmcli\arborist\lib\arborist\reify.js:154:5)
npm verb audit error at async Install.install (C:\Program Files\nodejs\node_modules\npm\lib\install.js:170:5) {
npm verb audit error headers: [Object: null prototype] {
npm verb audit error server: [ 'Tengine' ],
npm verb audit error 'content-type': [ 'application/json; charset=utf-8' ],
npm verb audit error 'content-length': [ '81' ],
npm verb audit error connection: [ 'keep-alive' ],
npm verb audit error 'strict-transport-security': [ 'max-age=5184000' ],
npm verb audit error date: [ 'Wed, 24 Apr 2024 03:08:16 GMT' ],
npm verb audit error vary: [ 'Origin' ],
npm verb audit error 'request-id': [ 'e4eaf010-01e7-11ef-88b9-039fe19a3c34' ],
npm verb audit error 'x-frame-options': [ 'SAMEORIGIN' ],
npm verb audit error 'x-xss-protection': [ '1; mode=block' ],
npm verb audit error 'x-content-type-options': [ 'nosniff' ],
npm verb audit error 'x-download-options': [ 'noopen' ],
npm verb audit error 'x-readtime': [ '1.144' ],
npm verb audit error 'ali-swift-global-savetime': [ '1713928096' ],
npm verb audit error via: [
npm verb audit error 'cache4.l2cn3135[0,0,501-0,H], cache77.l2cn3135[0,0], kunlun5.cn3909[55,55,501-1281,M], kunlun10.cn3909[56,0]'
npm verb audit error ],
npm verb audit error age: [ '0' ],
npm verb audit error 'x-cache': [ 'MISS TCP_MISS dirn:-2:-2' ],
npm verb audit error 'x-swift-error': [ 'orig response 5xx error' ],
npm verb audit error 'x-swift-savetime': [ 'Wed, 24 Apr 2024 03:08:16 GMT' ],
npm verb audit error 'x-swift-cachetime': [ '1' ],
npm verb audit error 'timing-allow-origin': [ '*' ],
npm verb audit error eagleid: [ '8ccfecac17139280965711367e' ],
npm verb audit error 'x-fetch-attempts': [ '3' ],
npm verb audit error 'x-local-cache-status': [ 'skip' ]
npm verb audit error },
npm verb audit error statusCode: 501,
npm verb audit error code: 'E501',
npm verb audit error method: 'POST',
npm verb audit error uri: 'https://registry.npmmirror.com/-/npm/v1/security/audits/quick',
npm verb audit error body: {
npm verb audit error error: '[NOT_IMPLEMENTED] /-/npm/v1/security/audits/quick not implemented yet'
npm verb audit error },
npm verb audit error pkgid: undefined
npm verb audit error }
npm sill
npm timing auditReport:getReport Completed in 143364ms
npm sill audit report null
npm timing reify:audit Completed in 143365ms
npm timing reify Completed in 148042ms