Skip to content

Install fails on npm 12 with EALLOWREMOTE (reconnect-core) — workaround inside #302

Description

@bwp91

If installing or updating this plugin fails with:

npm error code EALLOWREMOTE
npm error Fetching packages of type "remote" have been disabled
npm error Refusing to fetch "reconnect-core@https://github.com/dodo/reconnect-core/tarball/merged"

What is happening: npm 12 introduced a new security default that refuses to download dependencies which point at a raw URL instead of the npm registry. Deep inside the ecovacs-deebot library that this plugin uses, one package (node-xmpp-core) declares such a URL, so installs fail on npm 12. Older npm versions are unaffected.

Workaround — run this once on your Homebridge machine, as the user that Homebridge runs as (often pi):

npm config set allow-remote all

Installs and updates (including from the Homebridge UI) will then work again. You can undo it later with npm config delete allow-remote.

This affects ALL versions of the plugin, and every other consumer of the underlying library — it is not something the plugin can fully fix on its own. The proper fix needs to land in the ecovacs-deebot library, tracked upstream here: mrbungle64/ecovacs-deebot.js#593

This issue stays pinned until the upstream fix ships.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions