package.json links a git:// dependency that can't be used without authentication #380

Closed
opened 2025-11-09 09:47:56 -06:00 by GiteaMirror · 3 comments
Owner

Originally created by @sertraline on GitHub (Aug 1, 2024).

bug description

This commit 6626d74746 has linked youtubei.js to a commit, but the URL starts with git://.

The issue is that unauthenticated git users will be unable to run npm install or yarn install, as Github does not allow unauthenticated users to use the 9418 port.

The solution is to replace git:// with https://.

screenshots

image

Moreover, this commit fails to build. Relevant bug report: https://github.com/LuanRT/YouTube.js/issues/716

image

Originally created by @sertraline on GitHub (Aug 1, 2024). ### bug description This commit https://github.com/imputnet/cobalt/commit/6626d74746b88420ec80e6b707a8d7cd01a4f5d9 has linked `youtubei.js` to a commit, but the URL starts with git://. The issue is that unauthenticated git users will be unable to run `npm install` or `yarn install`, as [Github does not allow unauthenticated users to use the 9418 port](https://github.blog/security/application-security/improving-git-protocol-security-github/). The solution is to replace `git://` with `https://`. ### screenshots ![image](https://github.com/user-attachments/assets/9cd76997-fd27-4988-835b-025e29661be4) Moreover, this commit fails to build. Relevant bug report: https://github.com/LuanRT/YouTube.js/issues/716 ![image](https://github.com/user-attachments/assets/4680d5ed-b087-4c5a-8766-2ae24b5c9e6b)
GiteaMirror added the bug label 2025-11-09 09:47:56 -06:00
Author
Owner

@wukko commented on GitHub (Aug 1, 2024):

i've updated the dependency to npm package version that includes the needed commit in 50f312f, so the issue should be resolved now

@wukko commented on GitHub (Aug 1, 2024): i've updated the dependency to npm package version that includes the needed commit in [50f312f](https://github.com/imputnet/cobalt/commit/50f312fc71a55e3bfbb32d39fe1f32cf938526a0), so the issue should be resolved now
Author
Owner

@wukko commented on GitHub (Aug 1, 2024):

lmk if it's actually fixed

@wukko commented on GitHub (Aug 1, 2024): lmk if it's actually fixed
Author
Owner

@sertraline commented on GitHub (Aug 1, 2024):

it is fixed. Thanks

@sertraline commented on GitHub (Aug 1, 2024): it is fixed. Thanks
Sign in to join this conversation.