Missing packages in registry.npmjs.org - minmatch

[arunk]

Select Topic Area

General

Body

I'm using the npm package mjml for writing email templates, which depends on the package minmatch, found here - https://www.npmjs.com/package/minimatch . A recent Github dependabot security alert says that the minmatch package needs to be updated to patch a bug. But when either trying to allow Dependabot to create the fix, or doing it myself in my local repository with pnpm audit --fix , I get an error - https://registry.npmjs.org/minmatch 404 not found. The package appears to be there on npmjs but not in the registry.

[ilkinsufi]

I think the package name here is minimatch, not minmatch.

The npm page you linked is for minimatch:
https://www.npmjs.com/package/minimatch

So this registry URL should also be:
https://registry.npmjs.org/minimatch

minmatch returns 404 because that package name does not exist in the npm registry.

If Dependabot or your audit output is showing minmatch, I’d double-check the exact dependency name in the alert and in the lockfile, because this may be a typo/mismatch rather than the package being missing from the registry.

[arunk]

ty for catching that! i seemed to have made a typo while entering the package name by hand into package.json