diff --git a/.changeset/wild-tools-taste.md b/.changeset/wild-tools-taste.md new file mode 100644 index 0000000000..23aad5ef6a --- /dev/null +++ b/.changeset/wild-tools-taste.md @@ -0,0 +1,5 @@ +--- +"@pnpm/audit": patch +--- + +Escape the dependency names to avoud 502 errors from the registry. diff --git a/packages/audit/src/lockfileToAuditTree.ts b/packages/audit/src/lockfileToAuditTree.ts index 21400cafa2..392a474af5 100644 --- a/packages/audit/src/lockfileToAuditTree.ts +++ b/packages/audit/src/lockfileToAuditTree.ts @@ -28,7 +28,10 @@ export default function lockfileToAuditTree ( const dependencies = {} importerWalkers.forEach((importerWalker) => { const importerDeps = lockfileToAuditNode(importerWalker.step) - dependencies[importerWalker.importerId] = { + // For some reason the registry responds with 500 if the keys in dependencies have slashes + // see issue: https://github.com/pnpm/pnpm/issues/2848 + const depName = importerWalker.importerId.replace(/\//g, '__') + dependencies[depName] = { dependencies: importerDeps, requires: toRequires(importerDeps), version: '0.0.0',