Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade underscore version 1.9.x #37

Closed
wants to merge 1 commit into from
Closed

Upgrade underscore version 1.9.x #37

wants to merge 1 commit into from

Conversation

jonnynabors
Copy link
Contributor

@jonnynabors jonnynabors commented Dec 20, 2018

Ran into the following error when behind a corporate firewall and adding cfenv to a project from npm:

An unexpected error occurred: "http://registry.npmjs.org/underscore/-/underscore-1.8.3.tgz: Request failed \"403 Forbidden\"".

We tested adding underscore 1.8.3 by itself to our project and got the same error as above. Adding underscore 1.9.x worked fine, so our assumption is that upgrading underscore to 1.9.x will resolve this problem for cfenv for users behind a corporate firewall.

Signed-off-by: Dan Painter <dpainte7@ford.com>
@pmuellr
Copy link
Member

pmuellr commented Feb 21, 2019

Sorry for the delay in responding, somehow this dropped off my radar.

Did you ever find out why you were getting a 403 from the underscore tarball? I just tried here and it works fine. I can't imagine why getting the 1.8.x tarball would be blocked by your firewall, but a 1.9.x one wouldn't.

I checked to see if there was a vulnerability against underscore from snyk.io - didn't see anything. Sometimes customers run software that blocks vulnerable versions from being downloaded.

There's no real harm in upgrading either, so will merge shortly.

@pmuellr
Copy link
Member

pmuellr commented Feb 21, 2019

I've merged this into master, and it's now available in cfenv 1.2.0 on npm.

Thanks so much for your contribution, and again, sorry for the delay!

@pmuellr pmuellr closed this Feb 21, 2019
@jonnynabors jonnynabors deleted the underscore_version branch February 22, 2019 19:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants