简体繁体 English

mat stepper bar 不在 npm 注册表中

[英]mat stepper bar is not in the npm registry

原文 2021-02-07 07:31:23 6 1 javascript/ angular

Our app depends on this npm package, all of a sudden it stopped working, and not able to install it again through npm i.我们的应用程序依赖于这个 npm package，突然它停止工作，并且无法通过 npm i 再次安装它。 How can I fix this?我怎样才能解决这个问题？

Error while installing it: mat stepper bar is not in the npm registry安装时出错：mat stepper bar 不在 npm 注册表中

Below is the message from their official webpage以下是他们官方网页的消息

Mat-stepper-bar is a JavaScript package in the npm registry that has been compromised. Mat-stepper-bar 是 npm 注册表中的 JavaScript package 已被破坏。 Our team is working on it:( If you have any questions, please email us at ngmicroapp@gmail.com我们的团队正在努力：（如果您有任何问题，请通过 ngmicroapp@gmail.com 联系我们 email

1 个解决方案

Package status: deleted? Package 状态：已删除？

It looks like the package was deleted from NPM recently, since it is still in Google's cache .看起来 package 最近已从 NPM 中删除，因为它仍在Google 的缓存中。

Recourse追索权

Unfortunately, there is not much you can do.不幸的是，您无能为力。 There is no repository listed in the README or in the published package details - if you knew that the source code lived on a repo in GitHub, you could install the package from there, instead.自述文件或已发布的 package 详细信息中没有列出存储库 - 如果您知道源代码位于 GitHub 的存储库中，则可以从那里安装 ZEFE90A8E604A7C840E88D03A67F6B78D。

Public Mirror?公共镜子？

Your best bet is to try to find a public NPM mirror that still has the package.您最好的选择是尝试找到一个公共 NPM 镜像，该镜像仍然具有 package。 Aliyun seems to have one , although I am not very familiar with that site and do not know if that is a reliable source. 阿里云好像有一个，虽然我对那个网站不是很熟悉，不知道那是不是一个可靠的来源。

To prevent this in the future为了防止将来发生这种情况

Use a local NPM mirror使用本地 NPM 镜像

Going forward, you should keep a local NPM mirror if you use volatile packages.展望未来，如果您使用易失包，您应该保留一个本地NPM 镜像。

Vet your packages审查你的包裹

A better rule of thumb, however, is to avoid relying on relatively unused and undeveloped packages.然而，更好的经验法则是避免依赖相对未使用和未开发的软件包。

Before using a package, ensure that it:在使用 package 之前，请确保：

meets basic package cleanliness requirements, such as listing a repository满足基本的 package 清洁度要求，例如列出存储库
is well-documented有据可查
is well-tested久经考验
has a consistent development history, which makes it less likely to be abandoned具有一致的发展历史，这使得它不太可能被放弃
has a minimum number stars on GitHub OR forks OR npm downloads在 GitHub 或分叉或 npm 下载上具有最少星数

Using a package that fails to meet these requirements adds technical debt to your product, as you are more likely to encounter bugs, take longer to understand undocumented functions, or may discover that the package is renamed or deleted.使用不符合这些要求的 package 会给您的产品增加技术债务，因为您更有可能遇到错误，需要更长时间才能了解未记录的功能，或者可能会发现 package 被重命名或删除。