Latest release breaking npm installs on older versions

[jamesplease]

Just cross-linking this issue:

cosmiconfig/cosmiconfig#103

I think this is an npm issue, but I'm not sure. Still investigating!

---

Relevant npm issue: npm/npm#19534

[cormacrelf]

The code seems to be maintained by @mbensch now, at https://github.com/mbensch/require-from-string

That repo doesn't have issues enabled, so I guess here is the place to be? Except the maintainer won't be subscribed.

[vtyrtov]

yarn similarly

`yarn add v1.3.2
[1/4] 🔍 Resolving packages...
Couldn't find any versions for "require-from-string" that matches "^1.1.0"
? Please choose a version of "require-from-string" from this list: 2.0.2
error Received malformed response from registry for "timed-out". The registry may be down.
info Visit https://yarnpkg.com/en/docs/cli/add for documentation about this command.

Aborting installation.`

[BlackHole1]

I have the same problem.

[squigg]

broken here too - old versions are no longer available and it's breaking builds. I was getting a 404 for a few minutes on the NPM site, seems as though the entire package was taken offline.

mbensch took it over, but now getting the issue below due to missing older versions:

pm ERR! code E404 npm ERR! 404 Not Found: require-from-string@https://registry.npmjs.org/require-from-string/-/require-from-string-1.2.1.tgz

[cormacrelf]

Yes, the entire website/registry entries for both require-from-string and pinkie-promise (which has had the same version bump) did appear to be completely down for a little while. It was as if each package had never existed, and came back with only one version. I hope this isn't a security issue, but it may be possible that the new maintainer can upload any code they want in the old version slots which were meant to be immutable.

[mbrezovsky]

angular/cli installation fails due to

sudo npm install -g @angular/cli
npm ERR! code ETARGET
npm ERR! notarget No matching version found for require-from-string@^1.1.0
npm ERR! notarget In most cases you or one of your dependencies are requesting
npm ERR! notarget a package version that doesn't exist.
npm ERR! notarget
npm ERR! notarget It was specified as a dependency of 'cosmiconfig'
npm ERR! notarget

[jamesplease]

@blackholegalaxy it's not a repository hijack. This is definitely an npm error :)

Turns out I was wrong!

[JAertgeerts]

https://github.com/npm/registry/issues/255

[mbensch]

The original author deleted his account and all his packages. I have re-published a few of them but it's a lot to keep up with right now.

[marco476]

Same problem and same npm-issue.
I found this error by create-react-app.

[m4scosta]

With the same problem here, version 1.2.1

[oppodeldoc]

https://status.npmjs.org/incidents/41zfb8qpvrdj

[m4scosta]

Anyone knows which versions are available?

[jamesplease]

@Marcospy 2.0.2, but all of the versions should be back up once npm fixes their problem. Also, 2.0.2 may be removed at that time given that someone else published over the missing package.

[rhinonan]

I have the same problem......

[jamesplease]

Should be fixed now @rhinonan (see https://status.npmjs.org/incidents/41zfb8qpvrdj ). Closin'