Breaking npm

npm-console-output.txt

npm WARN optional SKIPPING OPTIONAL DEPENDENCY: fsevents@1.1.3 (node_modules\fsevents):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for fsevents@1.1.3: wanted {"os":"darwin","arch":"any"} (current: {"os":"win32","arch":"x64"})

npm ERR! path C:\myproject\node_modules\requirejs\bin\r.js.2470650542
npm ERR! code EPERM
npm ERR! errno -4048
npm ERR! syscall rename
npm ERR! Error: EPERM: operation not permitted, rename 'C:\myproject\node_modules\requirejs\bin\r.js.2470650542' -> 'C:\myproject\node_modules\requirejs\bin\r.js'
npm ERR!  { Error: EPERM: operation not permitted, rename 'C:\myproject\node_modules\requirejs\bin\r.js.2470650542' -> 'C:\myproject\node_modules\requirejs\bin\r.js'
npm ERR!   cause:
npm ERR!    { Error: EPERM: operation not permitted, rename 'C:\myproject\node_modules\requirejs\bin\r.js.2470650542' -> 'C:\myproject\node_modules\requirejs\bin\r.js'
npm ERR!      errno: -4048,
npm ERR!      code: 'EPERM',
npm ERR!      syscall: 'rename',
npm ERR!      path: 'C:\\myproject\\node_modules\\requirejs\\bin\\r.js.2470650542',
npm ERR!      dest: 'C:\\myproject\\node_modules\\requirejs\\bin\\r.js' },
npm ERR!   stack: 'Error: EPERM: operation not permitted, rename \'C:\\myproject\\node_modules\\requirejs\\bin\\r.js.2470650542\' -> \'C:\\myproject\\node_modules\\requirejs\\bin\\r.js\'',
npm ERR!   errno: -4048,
npm ERR!   code: 'EPERM',
npm ERR!   syscall: 'rename',
npm ERR!   path: 'C:\\myproject\\node_modules\\requirejs\\bin\\r.js.2470650542',
npm ERR!   dest: 'C:\\myproject\\node_modules\\requirejs\\bin\\r.js',
npm ERR!   parent: 'test-package' }
npm ERR!
npm ERR! Please try running this command again as root/Administrator.

npm ERR! A complete log of this run can be found in:
npm ERR!     C:\Users\Administrator\AppData\Roaming\npm-cache\_logs\2018-02-27T1
7_24_52_814Z-debug.log

package.json

{
  "name": "test-package",
  "version": "1.0.0",
  "description": "This package.json sometimes makes npm trip over its own file locks.",
  "main": "index.js",
  "dependencies": {
    "body-parser": "^1.16.1",
    "dts-generator": "^2.1.0",
    "es6-promise": "^4.0.5",
    "express": "^4.14.1",
    "http-server": "0.10.0",
    "jasmine-core": "^2.5.2",
    "jasmine-node": "1.14.5",
    "karma": "^1.4.1",
    "karma-chrome-launcher": "^2.0.0",
    "karma-firefox-launcher": "1.0.0",
    "karma-jasmine": "^1.1.0",
    "karma-junit-reporter": "^1.2.0",
    "karma-phantomjs-launcher": "^1.0.2",
    "karma-phantomjs-shim": "1.4.0",
    "karma-requirejs": "^1.1.0",
    "less": "1.4.1",
    "mapstrace": "1.0.0",
    "merge": "1.2.0",
    "phantomjs-prebuilt": "^2.1.14",
    "react-tools": "^0.13.3",
    "requirejs": "^2.3.2",
    "rsvp": "^3.3.3",
    "stack-trace": "0.0.9",
    "tslib": "^1.5.0",
    "tslint": "^4.4.2",
    "tsviz": "1.0.10",
    "unzip": "0.1.11"
  },
  "scripts": {
    "test": "echo \"Error: no test specified\" && exit 1"
  },
  "author": "Miguel Ventura",
  "repository": {
    "type": "svn",
    "url": "https://srvptsvn/"
  },
  "readmeFilename": "README.txt",
  "license": "MIT"
}

procmon-analysis.csv

procmon-analysis.description.md

Reading Procmon Report

The CSV file contains filesystem access operations filtered for the presence of requirejs in the path being accessed.

It starts with a cmd.exe completely deleting node_modules.

It then follows a run of npm install.

Analysis

• On line 512 we see that package.json was dealt with (file is closed)
• It's followed by a few operations on r.js file
• On line 554 we see a sequence of ReadFile over r.js and WriteFile over r.js.2470650542
• On line 588 we see r.js.4274692157 joining the bunch
• On line 628 both r.js and r.js.2470650542 are closed
• A handle for r.js was left open along with a handle for r.js.4274692157. They seem to follow the same pattern of reading from r.js and writing on r.js.number
• On line 636, a rename is attempted from r.js.2470650542 to r.js but it breaks because the file still has an open handle

Interesting aspects

The r.js file is large and the module requirejs that contains it is installed both as a direct package dependency as is installed as a dependency of several packages.