Question
Why my node.js application's package-lock.json is auto updated with a lot of aws related SDK?
- Posted on April 14, 2023
- DigitalOcean DropletsJavaScriptNode.js
Asked by peterlee34567
Hello expert, today when I try to sync my code on droplet from git, I was not able to do so and it turns out that package-lock.json file at droplet has been updated and then I checked difference with my checked-in version and I saw a lot of library like the following:
- node_modules/@aws-crypto/ie11-detection
- node_modules/@aws-crypto/ie11-detection/node_modules/tslib
- node_modules/@aws-crypto/sha256-browser"
- etc.
Any idea what’s going on? I haven’t found anything from internet. Thanks for your insights in advance.
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.
Hollie's Hub for Good
Working on improving health and education, reducing inequality, and spurring economic growth? We’d like to help.
Get started for free
Enter your email to get $200 in credit for your first 60 days with DigitalOcean.
New accounts only. By submitting your email you agree to our Privacy Policy.
Hi there,
The mentioned libraries are part of the AWS Encryption SDK for JavaScript, which is typically used for client-side encryption and decryption of data.
Did you by any chance run
npm updateon your Droplet directly? This would indeed update yourpackage-lock.jsonfile.What I could suggest here is:
package-lock.jsonfile on your Droplet, just in case you need it later.mv package-lock.json package-lock.json.bakReplace the
package-lock.jsonon the droplet with the one from your Git repository. You can either copy it from your local machine to the droplet usingscpor download it directly from your Git repository usingwgetorcurl, depending on your setup.Run
npm cito install the exact versions of the dependencies specified in yourpackage-lock.jsonfile. This command will delete the existingnode_modulesdirectory and recreate it with the correct dependencies.Let me know how it goes!
Best,
Bobby