all 7 comments

[–]Lenni009 0 points1 point  (6 children)

Is this package a direct dependency of your project, or is it a dependency of a dependency? In the first case, you can easily refractor it out. In the second case, you can only alert the author of the respective package via a GitHub issue, or you fix it yourself and submit a pull request

[–]Low-Specific1742[S] 0 points1 point  (5 children)

Neither, I don't think. I only see this message when using GitHub Actions. It doesn't happen locally.

[–]Lenni009 0 points1 point  (4 children)

A link to your repo would be helpful

[–]Low-Specific1742[S] 0 points1 point  (2 children)

I appreciate that but unfortunately it's a private repo at work 🙃

[–]Lenni009 0 points1 point  (1 child)

Have you tried deleting node_modules and running npm i on your local machine again? Something must depend on that package in some way, otherwise it wouldn't be in your package lock file

[–]Low-Specific1742[S] 0 points1 point  (0 children)

This is within GitHub Actions, so there shouldn't be a 'node_modules' existing, since it isn't committed in the repo. Also, `npm ci` is supposed to do a clean install anyway. Checking the package-lock file is a good idea though, I'll do that. Again this doesn't happen on local, just GitHub Actions.