Some builds won't work! (Update - all clear again!)

News
1

Earlier today, a developer pushed an update to the colors.js library to npm. It has serious bugs in it.

Colors.js is a very widely used library - last week, it was downloaded over 22,000,000 times.

We don’t use this library ourselves, but some common Cordova plugins do - such as cordova.plugins.diagnostic. Until the problem is fixed, we’ve added that plugin to our red list. Builds using it will get a message.

Fixing this will be up to the maintainers of cordova.plugins.diagnostic or colors.js. It isn’t something we have any control at VoltBuilder. The problem will affect all Cordova users (as well as many other people), not just the VoltBuilder servers.

We’re running an analysis on all the Cordova plugins to see if other plugins are affected.

2

We’ve disabled several plugins for the time being. We’ll continue to monitor the situation:

  • cordova-custom-config - fixed
  • cordova-js - not a plugin
  • cordova-plugin-antitampering - fixed
  • cordova-plugin-email - fixed
  • cordova-plugin-ionic-webview - fixed
  • cordova-plugin-sqlite-2 - fixed
  • cordova-plugin-wifi-manager - fixed
  • cordova-plugin-wkwebview-sync-cookies - fixed
  • cordova-utils - not a plugin
  • cordova.diagnostic.plugin - replaced by cordova.plugins.diagnostic
  • cordova.plugins.diagnostic - fixed
3

cordova.plugins.diagnostic is back- the maintainer issued a new version. Make sure you are referencing the latest release:

<plugin name="cordova.plugins.diagnostic" spec="^6.1.1" />
4

This story has made the front page of Slashdot.

5

All plugins, with the exception of one, are back online. They’ve all been checked for their usage of colors.js. If you are using cordova.diagnostic.plugin, replace it with cordova.plugins.diagnostic.