Arch Linux User Repository

Hi,

the companion app has stoped working today. I use vivaldi and the Video DownloadHelper says in its config "Companion App not installed \ Checking companion app returned: Native host has exited.". I have reloaded the extention and clicked on "Recheck" but it didn't work.

Does anybody know what's happening?

EDIT: It worked again after the last Vivaldi Update 5.1 :).

On a slow internet connection it fails, because during build() it downloads stuff (can't you move this to the source array or to prepare(), btw.?), and then times out:

==> Starting build()...
[...]
⸨######⠂⠂⠂⠂⠂⠂⠂⠂⠂⠂⠂⠂⸩ ⠴ idealTree:plugin-error: timing idealTree:node_modules/plugin-error Completed in 13ms
[...]
npm WARN deprecated urix@0.1.0: Please see https://github.com/lydell/urix#deprecated
npm WARN deprecated har-validator@5.1.5: this library is no longer supported
npm WARN deprecated resolve-url@0.2.1: https://github.com/lydell/resolve-url#deprecated
npm WARN deprecated chokidar@2.1.8: Chokidar 2 will break on node v14+. Upgrade to chokidar 3 with 15x less dependencies.
npm WARN deprecated mkdirp@0.3.5: Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)
npm WARN deprecated uuid@3.4.0: Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.
npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142

added 707 packages, and audited 708 packages in 28s

28 packages are looking for funding
  run `npm fund` for details

6 high severity vulnerabilities

To address all issues (including breaking changes), run:
  npm audit fix --force

Run `npm audit` for details.
[13:33:49] Using gulpfile ~/.cache/yay/vdhcoapp/src/vdhcoapp-1.6.3/gulpfile.js
[13:33:49] Starting 'default'...
[13:33:49] Starting 'build-local'...
> pkg@4.5.1
> Fetching base Node.js binaries to PKG_CACHE_PATH
  fetched-v12.16.1-linux-x64   [=======             ] 35%
[...]
npm ERR! code ERR_SOCKET_TIMEOUT
npm ERR! network Socket timeout
npm ERR! network This is a problem related to network connectivity.
[...]

My network works fine, but capped to 1Mbit/s, sometimes slower. After each iteration of a makepkg run it reaches a bit further. Can you change the PKGBUILD such that slow network does not cause failure, and such that all source is already downloaded before build() starts (e.g. in prepare(), if the source array or makedepends is not an option)?

Works well.

for interchangeability with binary release

provides=vdhcoapp
conflicts=vdhcoapp-bin

package is building ok with upstream nodejs v15

You can edit build files and type nodejs-lts-fermium instead nodejs-lts-dubnium in PKGBUIL

@soloturn: they fixed as many of the vulnerabilities as possible in the new release. Check https://github.com/mi-g/vdhcoapp/issues/28

found 30 vulnerabilities (15 low, 6 moderate, 9 high) ??

Strongly recommend that users of this package seek other options. Upstream has significant issues that are not being addressed and likely won't be. Current AUR maintainer has also not been very responsive to very valid questions regarding these issues.

Why does this package rely on the builtin installation of a json config file instead of letting pacman take care of that? And where is that file even going? looking at the scary many vulns open in its dependencies, that might not be the biggest problem even…

This package cannot be built with nodejs 12 from the repo.

It needs nodejs-lts-dubnium as makedepend. This is a upstream problem.

You can build it in a clean chroot or install nodejs-lts-dubnium before building and then reinstall nodejs after the package is installed. It does not need nodejs-lts-dubnium to run.