Re: [bitbake-devel][PATCH 0/2] fetch/npm: fix security issue and re-enable fetcher

Alexander Kanavin <[email protected]> Tue, 16 Jun 2026 11:51:39 +0200
Newsgroups org.openembedded.lists.bitbake-devel
Message-ID <CANNYZj-w2oCUwSEOAhr4=T1cFKzuchUPpcr=sUZnYN_c5_zk9Q@mail.gmail.com>
On Thu, 11 Jun 2026 at 09:16, Thomas Perrot via lists.openembedded.org
<[email protected]> wrote:
> > I suspect there is a patch missing or something here as it doesn't
> > touch npm.py and half the changes above appear missing...
>
> Sorry, that’s strange, it seems I made a mistake with b4. I’ll resend
> them.

What happened to that? :)

There are users of the fetcher that resort to horrible hacks, and
there's just been another request for it, so if you have patches, that
would be most welcome.

Alex