Socket.io downloads external package when installed

[marinho]

Socket.io as a dependency requests [1] when installing, which is blocked by company's security policies.

Is there any solution in place for that? I'm going to fork sc5-styleguide and try to remove Socket.io dependency - not sure if that will be easy or not.

[1] https://github.com/rase-/node-XMLHttpRequest/archive/a6b6f2.tar.gz

[varya]

Could you address this question to https://github.com/socketio/socket.io/issues ? They probably can suggest something.

[marinho]

Thank you for the response. This was the fix: [1], so, that means if you guys upgrade from socket.io~1.3.5 to ^1.4.0 it should fix the issue.

You can refer to [2], [3], [4] and [5] for more info.

I'm filing a PR, as I tried it and got it working, but it's literally just to bump to socket.io 1.4.0 or higher.

[1] socketio/engine.io-client#428
[2] https://github.com/socketio/socket.io/blob/master/History.md#140--2015-11-28
[3] https://github.com/socketio/socket.io-client/blob/master/History.md#140--2015-11-28
[4] https://github.com/socketio/engine.io-client/blob/master/History.md#160--2015-11-28
[5] socketio/socket.io-client@5bafc69

[varya]

Thank you. Merged :-) And should be in the next release.

[marinho]

fantastic! I'll be waiting :P