yarnpkg/yarn

`yarn tag list` prompts for NPM credentials

Open

#5325 opened on Feb 6, 2018

View on GitHub
 (3 comments) (0 reactions) (1 assignee)JavaScript (41,514 stars) (2,731 forks)batch import
cat-buggood first issuehelp wantedtriaged

Description

Do you want to request a feature or report a bug? Bug

What is the current behavior? yarn tag list prompts for email/password when trying to list tags.

If the current behavior is a bug, please provide the steps to reproduce.

$ yarn tag list inferno
yarn tag v1.3.2
warning package.json: "dependencies" has dependency "lodash" with range "^3.10.1" that collides with a dependency in "devDependencies" of the same name with version "^4.13.1"
[1/3] Logging in...
info npm username: ....
info npm email: ....
question npm password:

What is the expected behavior?

$ npm dist-tag ls inferno
alpha#4-1: 4.0.0-alpha1
latest: 3.10.1
next: 4.0.0-19

Please mention your node.js, yarn and operating system version. Node 6.12.2, Yarn 1.3.2, Windows 7

Contributor guide

Tech stack
javascriptnodejs
Domain
cliauthentication
Issue type
bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
familiarity with yarn CLIunderstanding of npm authentication
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
50
Research direction
The issue is about `yarn tag list` prompting for NPM credentials. Investigate the command implementation in `src/cli/commands/tag.js` to locate where authentication is required for a read only operation. Since the 1.x line is frozen, check if the bug exists in the berry repository (https://github.com/yarnpkg/berry) and consider reporting or finding a fix there. Review any existing discussions or PRs related to this behavior.