[Dependencies] box-interesect installation error

[FernandezMathieu]

Hello,

My company is running into an issue with the latest versions of plotly.js (> 2.5).
We are installing the package through jupyterlab-plotly and are running into dependency issues.

Indeed, plotly.js is installing the box-intersect package directly from github (amongst many other packages), which is not accessible through our company CI network.

This behavior is very problematic as we cannot find a workaround yet.
We have tried installing locally the dependencies, yet npm still tries to reach for github and fails the installation. Event installing plotly.js 2.4.X fails, because npm will detect a higher version.

Possible solutions :

• Restrict versions of plotly.js in jupyterlab-plotly more strictly.
  At the moment, jupyterlab-plotly references plotly.js too loosely, and always allows for version 2.5 to be installed. ^2.4.2 -> ~2.4.2
• Publish the many dependencies to npm rather than fetching them direclty from github.

[archmoj]

Please consider using 'plotly.js-dist' or 'plotly.js-dist-min' packages instead of 'plotly.js'.

[FernandezMathieu]

Thanks @archmoj, unfortunately we already tried, but the command jupyter labextension install jupyterlab-plotly fetch plotly.js and try to install it even if 'plotly.js-dist' or 'plotly.js-dist-min' are installed.
Even if i installed them with the alias "plotly.js"

[archmoj]

@nicolaskruchten could we change this line to dist?
https://github.com/plotly/plotly.py/blob/ce0ed07d872c487698bde9d52e1f1aadf17aa65f/packages/javascript/jupyterlab-plotly/package.json#L68

[sathish-akasapu]

Hi, we are also facing the same issue with plotly.js (> 2.5) with box-intersect when running npm install prod version from docker file.
We are using plotly.js with angular-plotly.js
The package worked fine with local build.
I observed some of the packages were pointing to github urls in package-lock.json file

For now we reverted to old version (~2.4.2) and working fine with it.

[nicolaskruchten]

Should be fixed with 2.6 :)