Skip to content

Invalid shrinkwrapped pacote version triggers npm ELSPROBLEMS #1325

@stabpd

Description

@stabpd

npm ls --all exits with error ELSPROBLEMS for invalid pacote dependency version.

pacote@^19.0.2 is required by @ui5/project@4.0.13. But @ui5/cli@4.0.48's npm-shrinkwrap.json forces pacote@20.0.1.

This causes other tooling to fail.
(e.g. SBOM generation via @cyclonedx/cyclonedx-npm)

Expected Behavior

I expect @ui5/cli not to cause any errors with npm tooling.

Current Behavior

@ui5/cli@4.0.48 causes npm ls --all to exit with error code 130, printing ELSPROBLEMS error.

Steps to Reproduce the Issue

mkdir test
cd test
npm init -y
npm install @ui5/cli
npm ls --all

Context

  • UI5 Module Version (output of ui5 --version when using the CLI): unknown
  • Node.js Version: v22.22.1
  • npm Version: 10.9.4
  • OS/Platform: macOS 26
  • Browser (if relevant): unknown
  • Other information regarding your environment (optional): nothing

Log Output / Stack Trace

npm ls --all
[...]
│ ├─┬ pacote@20.0.1 invalid: "^19.0.2" from node_modules/@ui5/cli/node_modules/@ui5/project
[...]

npm error code ELSPROBLEMS
npm error invalid: pacote@20.0.1 /path/to/test/node_modules/@ui5/cli/node_modules/pacote
npm error A complete log of this run can be found in: /my/home/.npm/_logs/2026-03-16T09_40_00_000Z-debug-0.log

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions