warning about npm v5.7.0

[teh_g]

Critical Linux filesystem permissions are being changed by latest version · Issue #19883 · npm/npm

I'm opening this issue because: npm is crashing. npm is producing an incorrect install. npm is doing something I don't understand. Other (see below for feature requests): What's going wrong? This issue has been happening ever since 5.7.0...

GitHub (github.com)

There is a bug that breaks the OS if you use npm (5.7.0)with sudo. Be forewarned!

So when can NodeBB switch to yarn

[julian]

Heh I've been following that 5.7.0 stuff as it happened. Fun stuff.

Thanks for the warning! Fortunately the danger has passed, npm released v5.7.1

I'm not a big fan of npm, even though our entire plugin ecosystem relies on it. If yarn were to start their own ecosystem (yarn publish!!), I would switch over immediately.

Anyhow. You can use yarn with NodeBB if you'd like. Thanks to @pitaj, you can specify "package_manager": "yarn" in config.json and the ./nodebb commands will default to yarn.

[teh_g]

@julian Hmm, maybe I will make a swap over to Yarn. Not sure if it is worth the effort though...

[julian]

From a development standpoint it is superior. Yarn works great with linked modules, and is backed by a fantastic team (with corporate backing from some major players as well).

npm tends to clobber all of my linked modules sigh.