Skip to content

Integrity check failure #1315

@aMOPel

Description

@aMOPel

My assumption is that a file at a specific url on esm.sh is immutable, meaning I get the same checksum for the same url, independent of the point in time I test it.

I stumbled over this while packaging the deno fresh cli for nix.

In an older version of fresh, the lockfile had this entry:

{
    "https://esm.sh/@docsearch/js@3.5.2/es2020/js.mjs": "9b278cf3c0b26feded7d8efeac8e2b50f76bbafcf173a95002944bcc3482830a",
}

Source

now it has this entry (which is the correct checksum for that url at the time of writing):

{
    "https://esm.sh/@docsearch/js@3.5.2/es2020/js.mjs": "964600b3c133bccfa6a5ffa240e8272a08eeff22f5fea6993aa085cfc9e4d750",
}

Source

I am not sure, if this is a problem with deno or with esm or if somebody messed with the lockfile by hand (I doubt that).

Or is my assumption wrong andd files on esm.sh are not immutable?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions