node.js - how to determine where npm packages are hosted? -
i'm trying install npm packages on machine has controlled access internet. can request network team grant me access remote host/port i'm not clear hosts/ports need access.
are packages installed via npm available via single host/port? if not, how can determine list of hosts/ports need access to?
i appreciate opening access npm hosts/ports may not best approach security perspective , may better download npm modules on separate machine upload secure host.
there 2 standard places storing npm packages: https://registry.npmjs.org , https://github.com. must have access them.
install packages , create npm-shrinkwrap.json file (using command npm shrinkwrap npm<5, in npm>5 file called package-lock.json , it's automatically generated). open created lock file, take @ resolved field of each package.
the part of npm.shrinkwrap file:
"lodash": { "version": "4.17.4", "from": "lodash@4.17.4", "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.4.tgz" }, "ng-bootstrap-lightbox": { "version": "1.0.1", "from": "git+https://github.com/themyth92/ng-bootstrap-lightbox.git", "resolved": "git+https://github.com/themyth92/ng-bootstrap-lightbox.git#b44c086723ccf066834b3edb654273c4661a4ad1" }
Comments
Post a Comment