Skip to content

lodash missing time field message when npm registry includes time field #11619

@MikeMcC399

Description

@MikeMcC399

Verify latest release

  • I verified that the issue exists in the latest pnpm release

pnpm version

11.1.1

Which area(s) of pnpm are affected? (leave empty if unsure)

CLI

Link to the code that reproduces this issue or a replay of the bug

No response

Reproduction steps

cd $(mktemp -d)
npm install pnpm@11.1.1 -g
pnpm init
pnpm add lodash@4.18.1 -E

Describe the Bug

pnpm outputs the warning

[WARN] The metadata of lodash is missing the "time" field; skipping the minimumReleaseAge check for this package.

although when viewing lodash in the npm registry with

npm view lodash

shows

dist-tags:
latest: 4.18.1

published a month ago by jdalton <john.david.dalton@gmail.com>

and

$ npm view lodash time | grep 4.18.1
  '4.18.1': '2026-04-01T21:01:20.458Z'

Expected Behavior

Since lodash@4.18.1 contains a timestamp in the npm registry, no warning should be output

Which Node.js version are you using?

24.15.0

Which operating systems have you used?

  • macOS
  • Windows
  • Linux

If your OS is a Linux based, which one it is? (Include the version if relevant)

Ubuntu 24.04.4 LTS

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No fields configured for Bug.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions