tarball content timestamps locked to 1985


(Kat Marchán) #1

npm has started publishing packages with all the (contained) file timestamps locked to a certain date in 1985.

This started happening after we locked down tarball dates in order to support reproducible builds.

npm website documentation last modified in 1985
(Kat Marchán) #2

This is entirely intentional, and is the intended design going forward. Systems that were relying on these timestamps will need to find new ways to do this (such as actually diffing stuff), or manually set the file timestamps after install based on publish date.

(Kat Marchán) #3

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.