ava errors on Node <4.5.0 due to hullabaloo-config-manager

[exogen]

Description

Running ava errors immediately on Node 4.4 and lower with TypeError: this is not a typed array from hullabaloo-config-manager. That module's package.json specifies its minimum Node version as 4.5 and they ain't kiddin' – this affects basic usage of AVA.

(Unfortunately npm doesn't seem to warn about engines for transitive dependencies, so it doesn't even warn about hullabaloo-config-manager, but I believe it would warn about ava directly.)

I recommend updating AVA's engines from Node >=4 to >=4.5.

Test Source

// Empty test is fine to reproduce.

Error Message & Stack Trace

 ⠋ /Users/becbrian/Projects/Tests/test-ava/node_modules/ava/lib/cli.js:196
					throw err;
					^

TypeError: this is not a typed array.
    at Function.from (native)
    at Verifier.toBuffer (/Users/becbrian/Projects/Tests/test-ava/node_modules/hullabaloo-config-manager/lib/Verifier.js:137:19)
    at /Users/becbrian/Projects/Tests/test-ava/node_modules/ava/lib/babel-config.js:78:46
From previous event:
    at Api.run (/Users/becbrian/Projects/Tests/test-ava/node_modules/ava/api.js:71:5)
    at Object.exports.run.api.on.api.run.then [as run] (/Users/becbrian/Projects/Tests/test-ava/node_modules/ava/lib/cli.js:187:7)
    at Object.<anonymous> (/Users/becbrian/Projects/Tests/test-ava/node_modules/ava/cli.js:22:24)
    at Module._compile (module.js:409:26)
    at Object.Module._extensions..js (module.js:416:10)
    at Module.load (module.js:343:32)
    at Function.Module._load (module.js:300:12)
    at Function.Module.runMain (module.js:441:10)
    at startup (node.js:139:18)
    at node.js:968:3

Config

(no config necessary)

Command-Line Arguments

ava

Relevant Links

• hullabaloo-config-manager

Environment

$ node -e "var os=require('os');console.log('Node.js ' + process.version + '\n' + os.platform() + ' ' + os.release())"
Node.js v4.4.7
darwin 16.5.0
$ ava --version
0.19.1
$ npm --version
4.4.4

[novemberborn]

Ah yeah. Buffer.from() was backported in 4.5. Since new Buffer() is deprecated in newer Node.js versions it's annoying to have to work around it. We should update the version range and see if that leads to any issues. There have been security releases since 4.5 even so ideally nobody is using such old versions in production.

[exogen]

There have been security releases since 4.5 even so ideally nobody is using such old versions in production.

I agree. Unfortunately pre-4.5 seems to be the default on CircleCI, which is how I discovered this (all my projects using AVA were failing). I added a circle.yml to force a newer version. AVA can't fix that directly, but debugging would have been quicker if npm had warned about engines (it doesn't warn about hullabaloo-config-manager, but would warn about ava since it's a direct dep). I can open a PR to update the version range this evening. :)

[novemberborn]

I can open a PR to update the version range

That'd be great!

debugging would have been quicker if npm had warned about engines

Do you think AVA should flat out refuse to start if it detects an outdated Node.js version?

[exogen]

Do you think AVA should flat out refuse to start if it detects an outdated Node.js version?

I'd probably give people's environment the benefit of the doubt (like maybe they patched it up/polyfilled it to work somehow?), but print a warning when AVA starts – this would be more immediately visible than npm's warning (the user may have installed a long time ago before running ava in non-CI cases).

[novemberborn]

I'd probably give people's environment the benefit of the doubt (like maybe they patched it up/polyfilled it to work somehow?), but print a warning when AVA starts – this would be more immediately visible than npm's warning (the user may have installed a long time ago before running ava in non-CI cases).

👍

[southpolesteve]

@novemberborn Just came across this bug too. Wanted to chime in and say that AWS Lambda is still uses 4.3.2 as their "Node 4" version. We're working on getting stuff over to node 6 but it was only released recently. I would imagine plenty of Lambda users still using 4.3.2 in production including ourselves.

[novemberborn]

@southpolesteve interesting. I still think the right answer is to require 4.5 or above though. Even if this particular dependency is under our (mine) control, it's quite likely (over Node.js 4's maintenance lifetime) for other dependencies to assume the newer Buffer APIs exist.

[southpolesteve]

Yeah I think you are probably right. Just sucks that this happened at all. I've also sent a note to AWS telling them to upgrade their node 4 version :)

[reconbot]

Node 4 is lts you know? I think https://github.com/feross/safe-buffer would do what's needed here.