4.0.0 is not published to npm

[limonte]

https://github.com/nodejs/node-gyp/blob/master/package.json#L14

https://www.npmjs.com/package/node-gyp

Expected: 4.0.0 is published to npm

[limonte]

hm, 75cfae2

The bump to v4.0.0 happened 2 years ago, but 4.0.0 was never published to npm.

I have no idea what is happening with releasing of this package, can someone explain this mystery?

[limonte]

this issue results into node-gyp being vulnerable:

[JCMais]

Related to #1717

cc @nodejs/node-gyp

[shehi]

@limonte , this situation will be remedied?

[limonte]

@shehi I'm not the maintainer of this package. 2 years wasn't enough to run npm publish so I'd assume we'll need to wait a few more years.

[ChALkeR]

I think this is now fixed per #1718 (comment) (thanks, @rvagg!).

Closing this now, feel free to reopen and/or comment though.

$ npm i node-gyp
+ node-gyp@4.0.0
added 100 packages from 67 contributors and audited 156 packages in 5.265s
found 0 vulnerabilities