Skip to content

Previously published npm packages are being overwritten by the publish tool #339

@graves-k

Description

@graves-k

The publish tool should not be overwriting previously published packages.
https://docs.npmjs.com/policies/unpublish
Overwriting published packages is against npm's policy, and I'm not sure how this was even possible because the npm registry should be immutable.

Our stable CI pipeline has failed to build since this PR was merged
DefinitelyTyped/DefinitelyTyped@5f1a949

We are using @types/react-redux 7.1.16. That npm package was originally published 9 months ago, but overwritten 6 days ago.
https://www.npmjs.com/package/@types/react-redux/v/7.1.16

I started looking into some of the other packages that would have been affected by that same PR.
https://www.npmjs.com/package/@types/chai-enzyme/v/0.6.7
https://www.npmjs.com/package/@types/emoji-mart/v/3.0.4
https://www.npmjs.com/package/@types/enzyme/v/3.10.8

All @types packages affected by the above PR have their previously published npm packages overwritten 6 days ago.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions