I have a package.json
file with "rtrk": "https://github.com/me/rtrk.git",
entry among the dependencies
.Until today I could normally run npm install
or npm update rtrk
commands and they would work.
Today, the npm install
(update would behave the same) took around 8 minutes until it resulted in an error.
I tried rolling back the versions of both the app and the package to yesterday's versions.
I tried changing the package.json
entry to "rtrk": "git+https://github.com/me/rtrk.git",
.
I tried deleting the node_modules
directory and package-lock.json
file.
I tried npm config set cafile C:\laragon\etc\ssl\cacert.pem
.
None of these helped.
I tried npm config set strict-ssl false
which allowed me to run the commands, but it's only a temporary solution.
Tested devices: Two windows pcs are getting the same error. Macbook can run the commands properly.
Devices dont have active proxies.
EDIT: If I remove my package from the dependencies, npm works. So is it really a certificate issue? Could the certificate of the package be bad somehow? I mean, does the package even have a certificate?
Interesting parts of the error log:
63 timing idealTree:node_modules/rtrk Completed in 140402ms64 timing idealTree:node_modules/svelte-radix Completed in 0ms65 silly placeDep node_modules/rtrk @melt-ui/svelte@0.74.4 OK for: bits-ui@0.18.6 want: 0.74.466 silly placeDep node_modules/rtrk nanoid@5.0.7 OK for: bits-ui@0.18.6 want: ^5.0.567 silly fetch manifest nanoid@^5.0.468 timing idealTree:node_modules/rtrk/node_modules/bits-ui Completed in 8ms69 timing idealTree:node_modules/rtrk/node_modules/@melt-ui/svelte Completed in 0ms70 timing idealTree:node_modules/rtrk/node_modules/nanoid Completed in 0ms71 timing idealTree:node_modules/rtrk/node_modules/tailwind-variants Completed in 0ms72 timing idealTree:buildDeps Completed in 423551ms73 timing idealTree:fixDepFlags Completed in 4ms74 timing idealTree Completed in 423766ms75 timing reify:loadTrees Completed in 423768ms
190 verbose audit error FetchError: request to https://registry.npmjs.org/-/npm/v1/security/audits/quick failed, reason: unable to verify the first certificate190 verbose audit error at ClientRequest.<anonymous> (C:\Users\ratrakone\AppData\Roaming\npm\node_modules\npm\node_modules\minipass-fetch\lib\index.js:130:14)190 verbose audit error at ClientRequest.emit (node:events:518:28)190 verbose audit error at _destroy (node:_http_client:875:13)190 verbose audit error at onSocketNT (node:_http_client:895:5)190 verbose audit error at process.processTicksAndRejections (node:internal/process/task_queues:83:21) {190 verbose audit error code: 'UNABLE_TO_VERIFY_LEAF_SIGNATURE',190 verbose audit error errno: 'UNABLE_TO_VERIFY_LEAF_SIGNATURE',190 verbose audit error type: 'system'
195 timing reifyNode:node_modules/rtrk/node_modules/@melt-ui/svelte Completed in 656ms196 timing reifyNode:node_modules/svelte-radix Completed in 766ms197 timing reifyNode:node_modules/rtrk/node_modules/bits-ui Completed in 852ms198 timing reify:rollback:createSparse Completed in 147ms199 timing reify:rollback:retireShallow Completed in 0ms200 timing command:install Completed in 494519ms
202 verbose stack FetchError: request to https://codeload.github.com/me/rtrk/tar.gz/ef070543e1b4febb1934379cd12df37e8af9545e failed, reason: unable to verify the first certificate202 verbose stack at ClientRequest.<anonymous> (C:\Users\ratrakone\AppData\Roaming\npm\node_modules\npm\node_modules\minipass-fetch\lib\index.js:130:14)202 verbose stack at ClientRequest.emit (node:events:518:28)202 verbose stack at _destroy (node:_http_client:875:13)202 verbose stack at onSocketNT (node:_http_client:895:5)202 verbose stack at process.processTicksAndRejections (node:internal/process/task_queues:83:21)203 verbose cwd C:\custom\dev\my_app204 verbose Windows_NT 10.0.19045205 verbose node v20.11.1206 verbose npm v10.5.1207 error code UNABLE_TO_VERIFY_LEAF_SIGNATURE208 error errno UNABLE_TO_VERIFY_LEAF_SIGNATURE209 error request to https://codeload.github.com/me/rtrk/tar.gz/ef070543e1b4febb1934379cd12df37e8af9545e failed, reason: unable to verify the first certificate210 verbose exit 1211 timing npm Completed in 494896ms212 verbose unfinished npm timer reify 1713556823504213 verbose unfinished npm timer reify:unpack 1713557247314214 verbose unfinished npm timer reifyNode:node_modules/rtrk 1713557247314215 verbose code 1
I also looked up the VERIFY_LEAF_SIGNATURE questions on stackoverflow, but those suggested a certificate problems, which shouldn't be my case as everything worked for months, including yesterday.