Re: URGENT: Apache Flagon UserALEjs NPM credentials

[lewis john mcgibbney <le...@apache.org>]

Hi Josh,
CC dev@ as this is useful for everyone to know.
Thanks for the quick response... and again apologies for the real late
action on by behalf. I went ahead and deprecated the older original
'useralejs' package on NPM as follows

lmcgibbn@MT-207576 /usr/local $ npm deprecate useralejs@1.0.0 "[NOTICE]
THIS PACKAGE HAS BEEN REPLACED BY 'flagon-userale' USE THAT INSTEAD."
lmcgibbn@MT-207576 /usr/local $ npm install useralejs
npm WARN deprecated useralejs@1.0.0: [NOTICE] THIS PACKAGE HAS BEEN
REPLACED BY 'flagon-userale' USE THAT INSTEAD.
...
+ useralejs@1.0.0
added 1 package from 4 contributors, removed 12 packages and audited 214
packages in 1.026s
found 102 vulnerabilities (12 low, 85 moderate, 5 high)
  run `npm audit fix` to fix them, or `npm audit` for details

As you can see the package if formally deprecated.
There is also now a huge red banner which appears at
https://www.npmjs.com/package/useralejs... hopefully this is enough to warn
people against using the old package.
Lewis

On Fri, Sep 6, 2019 at 4:38 AM Joshua Poore <po...@me.com> wrote:

> No worries now, we re-rolled the npm package b/c no one had creds to
> publish under the old package name. The new package is called
> flagon-UserAle.
>
> Would appreciate if you take down the old package so there is no confusion
> with the mainline development.
>
> Joshua Poore
>
>
> On Sep 6, 2019, at 2:38 AM, lewis john mcgibbney <le...@apache.org>
> wrote:
>
> Hi Josh,
> What is the status here? This was buried deep and I am cleaning house
> email box.
> Can I do anything?
> Really sorry about this one... been very busy on my end as you probably
> guessed.
> Lewis
>
> On Thu, Jun 20, 2019 at 8:09 PM Joshua Poore <po...@apache.org> wrote:
>
>> Lewis—
>>
>> We’re preparing a flurry of releases. I really need you to add our new
>> NPM account to be an owner of our ‘useralejs’ npm package. Currently,
>> you’re the only owner and I’ll need to be publishing our NPM package.
>>
>> There is some time sensitivity for us.
>>
>> Instructions follow for adding owners:
>> https://docs.npmjs.com/cli/owner.html
>>
>> At minimum, I need you to add:
>>
>> our new user account: ‘flagon’ (email: poorejc@apache.org
>> <po...@apache.org>)
>>
>> I (and we) really need this done. Flagon is transitioning: I can’t say to
>> who, but they’ll be pulling from NPM and it will do a lot for our community
>> having that many pulls.
>>
>> Thanks in advance!
>>
>> Josh
>>
>
>
> --
> http://home.apache.org/~lewismc/
> http://people.apache.org/keys/committer/lewismc
>
>

-- 
http://home.apache.org/~lewismc/
http://people.apache.org/keys/committer/lewismc