pacote 7.5.1 → 7.6.1

package/CHANGELOG.md

@@ -2,6 +2,46 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+<a name="7.6.1"></a>
+## [7.6.1](https://github.com/zkat/pacote/compare/v7.6.0...v7.6.1) (2018-03-08)
+
+
+### Bug Fixes
+
+* **standard:** update to new standard rules ([bb52d02](https://github.com/zkat/pacote/commit/bb52d02))
+
+
+
+<a name="7.6.0"></a>
+# [7.6.0](https://github.com/zkat/pacote/compare/v7.5.3...v7.6.0) (2018-03-08)
+
+
+### Features
+
+* **git:** added retry logic for all git operations. ([#136](https://github.com/zkat/pacote/issues/136)) ([425c58d](https://github.com/zkat/pacote/commit/425c58d))
+
+
+
+<a name="7.5.3"></a>
+## [7.5.3](https://github.com/zkat/pacote/compare/v7.5.2...v7.5.3) (2018-03-02)
+
+
+### Bug Fixes
+
+* **tarball:** stop dropping stream errors on the floor ([3db03c2](https://github.com/zkat/pacote/commit/3db03c2))
+
+
+
+<a name="7.5.2"></a>
+## [7.5.2](https://github.com/zkat/pacote/compare/v7.5.1...v7.5.2) (2018-03-02)
+
+
+### Bug Fixes
+
+* **console:** remove spurious debugging console.log :< ([5b8b509](https://github.com/zkat/pacote/commit/5b8b509))
+
+
+
 <a name="7.5.1"></a>
 ## [7.5.1](https://github.com/zkat/pacote/compare/v7.5.0...v7.5.1) (2018-03-01)
 

package/extract.js

@@ -24,27 +24,27 @@ function extract (spec, dest, opts) {
   return withTarballStream(spec, opts, stream => {
     return tryExtract(spec, stream, dest, opts)
   })
-  .then(() => {
-    if (!opts.resolved) {
-      const pjson = path.join(dest, 'package.json')
-      return readFileAsync(pjson, 'utf8')
-      .then(str => truncateAsync(pjson)
-      .then(() => appendFileAsync(pjson, str.replace(
-        /}\s*$/,
-        `\n,"_resolved": ${
-          JSON.stringify(opts.resolved || '')
-        }\n,"_integrity": ${
-          JSON.stringify(opts.integrity || '')
-        }\n,"_from": ${
-          JSON.stringify(spec.toString())
-        }\n}`
-      ))))
-    }
-  })
-  .then(() => opts.log.silly(
-    'extract',
-    `${spec} extracted to ${dest} (${Date.now() - startTime}ms)`
-  ))
+    .then(() => {
+      if (!opts.resolved) {
+        const pjson = path.join(dest, 'package.json')
+        return readFileAsync(pjson, 'utf8')
+          .then(str => truncateAsync(pjson)
+            .then(() => appendFileAsync(pjson, str.replace(
+              /}\s*$/,
+              `\n,"_resolved": ${
+                JSON.stringify(opts.resolved || '')
+              }\n,"_integrity": ${
+                JSON.stringify(opts.integrity || '')
+              }\n,"_from": ${
+                JSON.stringify(spec.toString())
+              }\n}`
+            ))))
+      }
+    })
+    .then(() => opts.log.silly(
+      'extract',
+      `${spec} extracted to ${dest} (${Date.now() - startTime}ms)`
+    ))
 }
 
 function tryExtract (spec, tarStream, dest, opts) {
@@ -52,19 +52,19 @@ function tryExtract (spec, tarStream, dest, opts) {
     tarStream.on('error', reject)
     setImmediate(resolve)
   })
-  .then(() => rimraf(dest))
-  .then(() => mkdirp(dest))
-  .then(() => new BB((resolve, reject) => {
-    const xtractor = extractStream(spec, dest, opts)
-    tarStream.on('error', reject)
-    xtractor.on('error', reject)
-    xtractor.on('close', resolve)
-    tarStream.pipe(xtractor)
-  }))
-  .catch(err => {
-    if (err.code === 'EINTEGRITY') {
-      err.message = `Verification failed while extracting ${spec}:\n${err.message}`
-    }
-    throw err
-  })
+    .then(() => rimraf(dest))
+    .then(() => mkdirp(dest))
+    .then(() => new BB((resolve, reject) => {
+      const xtractor = extractStream(spec, dest, opts)
+      tarStream.on('error', reject)
+      xtractor.on('error', reject)
+      xtractor.on('close', resolve)
+      tarStream.pipe(xtractor)
+    }))
+    .catch(err => {
+      if (err.code === 'EINTEGRITY') {
+        err.message = `Verification failed while extracting ${spec}:\n${err.message}`
+      }
+      throw err
+    })
 }

package/lib/fetchers/file.js

@@ -52,13 +52,13 @@ Fetcher.impl(fetchFile, {
       } else {
         let integrity
         const cacheWriter = !opts.cache
-        ? BB.resolve(null)
-        : (pipe(
-          fs.createReadStream(src),
-          cacache.put.stream(opts.cache, `pacote:tarball:${src}`, {
-            integrity: opts.integrity
-          }).on('integrity', d => { integrity = d })
-        ))
+          ? BB.resolve(null)
+          : (pipe(
+            fs.createReadStream(src),
+            cacache.put.stream(opts.cache, `pacote:tarball:${src}`, {
+              integrity: opts.integrity
+            }).on('integrity', d => { integrity = d })
+          ))
         return cacheWriter.then(() => {
           if (integrity) { stream.emit('integrity', integrity) }
           return pipe(fs.createReadStream(src), stream)

package/lib/fetchers/git.js

@@ -135,16 +135,16 @@ function resolve (url, spec, name, opts) {
   const isSemver = !!spec.gitRange
   return git.revs(url, opts).then(remoteRefs => {
     return isSemver
-    ? pickManifest({
-      versions: remoteRefs.versions,
-      'dist-tags': remoteRefs['dist-tags'],
-      name: name
-    }, spec.gitRange, opts)
-    : remoteRefs
-    ? BB.resolve(
-      remoteRefs.refs[spec.gitCommittish] || remoteRefs.refs[remoteRefs.shas[spec.gitCommittish]]
-    )
-    : null
+      ? pickManifest({
+        versions: remoteRefs.versions,
+        'dist-tags': remoteRefs['dist-tags'],
+        name: name
+      }, spec.gitRange, opts)
+      : remoteRefs
+        ? BB.resolve(
+          remoteRefs.refs[spec.gitCommittish] || remoteRefs.refs[remoteRefs.shas[spec.gitCommittish]]
+        )
+        : null
   })
 }
 

package/lib/fetchers/registry/fetch.js

@@ -68,12 +68,12 @@ function logRequest (uri, res, startTime, opts) {
 
 function getCacheMode (opts) {
   return opts.offline
-  ? 'only-if-cached'
-  : opts.preferOffline
-  ? 'force-cache'
-  : opts.preferOnline
-  ? 'no-cache'
-  : 'default'
+    ? 'only-if-cached'
+    : opts.preferOffline
+      ? 'force-cache'
+      : opts.preferOnline
+        ? 'no-cache'
+        : 'default'
 }
 
 function getHeaders (uri, registry, opts) {

package/lib/fetchers/registry/manifest.js

@@ -28,8 +28,8 @@ function manifest (spec, opts) {
 
 function metadataUrl (registry, name) {
   const normalized = registry.slice(-1) !== '/'
-  ? registry + '/'
-  : registry
+    ? registry + '/'
+    : registry
   return url.resolve(normalized, name)
 }
 

package/lib/fetchers/registry/tarball.js

@@ -60,20 +60,20 @@ function fromManifest (manifest, spec, opts) {
     integrity: manifest._integrity,
     algorithms: [
       manifest._integrity
-      ? ssri.parse(manifest._integrity).pickAlgorithm()
-      : 'sha1'
+        ? ssri.parse(manifest._integrity).pickAlgorithm()
+        : 'sha1'
     ],
     spec
   }, opts))
-  .then(res => {
-    const hash = res.headers.get('x-local-cache-hash')
-    if (hash) {
-      stream.emit('integrity', decodeURIComponent(hash))
-    }
-    res.body.on('error', err => stream.emit('error', err))
-    res.body.pipe(stream)
-  })
-  .catch(err => stream.emit('error', err))
+    .then(res => {
+      const hash = res.headers.get('x-local-cache-hash')
+      if (hash) {
+        stream.emit('integrity', decodeURIComponent(hash))
+      }
+      res.body.on('error', err => stream.emit('error', err))
+      res.body.pipe(stream)
+    })
+    .catch(err => stream.emit('error', err))
   return stream
 }
 

package/lib/finalize-manifest.js

@@ -38,8 +38,8 @@ function finalizeManifest (pkg, spec, opts) {
   opts = optCheck(opts)
 
   const cachedManifest = (opts.cache && key && !opts.preferOnline && !opts.fullMetadata)
-  ? cacache.get.info(opts.cache, key, opts)
-  : BB.resolve(null)
+    ? cacache.get.info(opts.cache, key, opts)
+    : BB.resolve(null)
 
   return cachedManifest.then(cached => {
     if (cached && cached.metadata.manifest) {
@@ -47,8 +47,8 @@ function finalizeManifest (pkg, spec, opts) {
     } else {
       return tarballedProps(pkg, spec, opts).then(props => {
         return pkg && pkg.name
-        ? new Manifest(pkg, props, opts.fullMetadata)
-        : new Manifest(props, null, opts.fullMetadata)
+          ? new Manifest(pkg, props, opts.fullMetadata)
+          : new Manifest(props, null, opts.fullMetadata)
       }).then(manifest => {
         const cacheKey = key || finalKey(manifest, spec)
         if (!opts.cache || !cacheKey) {
@@ -169,8 +169,8 @@ function tarballedProps (pkg, spec, opts) {
         // to add to bin
         if (paths && paths.length) {
           const dirBin = mani
-          ? (mani && mani.directories && mani.directories.bin)
-          : (pkg && pkg.directories && pkg.directories.bin)
+            ? (mani && mani.directories && mani.directories.bin)
+            : (pkg && pkg.directories && pkg.directories.bin)
           if (dirBin) {
             extraProps.bin = {}
             paths.forEach(filePath => {

package/lib/util/git.js

@@ -12,6 +12,7 @@ const optCheck = require('./opt-check')
 const osenv = require('osenv')
 const path = require('path')
 const pinflight = require('promise-inflight')
+const promiseRetry = require('promise-retry')
 const uniqueFilename = require('unique-filename')
 const which = BB.promisify(require('which'))
 const semver = require('semver')
@@ -26,6 +27,23 @@ const GOOD_ENV_VARS = new Set([
   'GIT_SSL_NO_VERIFY'
 ])
 
+const GIT_TRANSIENT_ERRORS = [
+  'remote error: Internal Server Error',
+  'The remote end hung up unexpectedly',
+  'Connection timed out',
+  'Operation timed out',
+  'Failed to connect to .* Timed out',
+  'Connection reset by peer',
+  'SSL_ERROR_SYSCALL',
+  'The requested URL returned error: 503'
+].join('|')
+
+const GIT_TRANSIENT_ERROR_RE = new RegExp(GIT_TRANSIENT_ERRORS)
+
+function shouldRetry (error) {
+  return GIT_TRANSIENT_ERROR_RE.test(error)
+}
+
 const GIT_ = 'GIT_'
 let GITENV
 function gitEnv () {
@@ -114,57 +132,51 @@ function revs (repo, opts) {
   return pinflight(`ls-remote:${repo}`, () => {
     return spawnGit(['ls-remote', '-h', '-t', repo], {
       env: gitEnv()
-    }, opts).then(child => {
-      let stdout = ''
-      let stderr = ''
-      child.stdout.on('data', d => { stdout += d })
-      child.stderr.on('data', d => { stderr += d })
-      return finished(child).catch(err => {
-        err.message = `Error while executing:\n${GITPATH} ls-remote -h -t ${repo}\n\n${stderr}\n${err.message}`
-        throw err
-      }).then(() => {
-        return stdout.split('\n').reduce((revs, line) => {
-          const split = line.split(/\s+/, 2)
-          if (split.length < 2) { return revs }
-          const sha = split[0].trim()
-          const ref = split[1].trim().match(/(?:refs\/[^/]+\/)?(.*)/)[1]
-          if (!ref) { return revs } // ???
-          if (ref.endsWith(CARET_BRACES)) { return revs } // refs/tags/x^{} crap
-          const type = refType(line)
-          const doc = {sha, ref, type}
-
-          revs.refs[ref] = doc
-          // We can check out shallow clones on specific SHAs if we have a ref
-          if (revs.shas[sha]) {
-            revs.shas[sha].push(ref)
-          } else {
-            revs.shas[sha] = [ref]
-          }
+    }, opts).then((stdout) => {
+      return stdout.split('\n').reduce((revs, line) => {
+        const split = line.split(/\s+/, 2)
+        if (split.length < 2) { return revs }
+        const sha = split[0].trim()
+        const ref = split[1].trim().match(/(?:refs\/[^/]+\/)?(.*)/)[1]
+        if (!ref) { return revs } // ???
+        if (ref.endsWith(CARET_BRACES)) { return revs } // refs/tags/x^{} crap
+        const type = refType(line)
+        const doc = {sha, ref, type}
 
-          if (type === 'tag') {
-            const match = ref.match(/v?(\d+\.\d+\.\d+(?:[-+].+)?)$/)
-            if (match && semver.valid(match[1], true)) {
-              revs.versions[semver.clean(match[1], true)] = doc
-            }
-          }
+        revs.refs[ref] = doc
+        // We can check out shallow clones on specific SHAs if we have a ref
+        if (revs.shas[sha]) {
+          revs.shas[sha].push(ref)
+        } else {
+          revs.shas[sha] = [ref]
+        }
 
-          return revs
-        }, {versions: {}, 'dist-tags': {}, refs: {}, shas: {}})
-      }).then(revs => {
-        if (revs.refs.HEAD) {
-          const HEAD = revs.refs.HEAD
-          Object.keys(revs.versions).forEach(v => {
-            if (v.sha === HEAD.sha) {
-              revs['dist-tags'].HEAD = v
-              if (!revs.refs.latest) {
-                revs['dist-tags'].latest = revs.refs.HEAD
-              }
-            }
-          })
+        if (type === 'tag') {
+          const match = ref.match(/v?(\d+\.\d+\.\d+(?:[-+].+)?)$/)
+          if (match && semver.valid(match[1], true)) {
+            revs.versions[semver.clean(match[1], true)] = doc
+          }
         }
-        REVS.set(repo, revs)
+
         return revs
-      })
+      }, {versions: {}, 'dist-tags': {}, refs: {}, shas: {}})
+    }, err => {
+      err.message = `Error while executing:\n${GITPATH} ls-remote -h -t ${repo}\n\n${err.stderr}\n${err.message}`
+      throw err
+    }).then(revs => {
+      if (revs.refs.HEAD) {
+        const HEAD = revs.refs.HEAD
+        Object.keys(revs.versions).forEach(v => {
+          if (v.sha === HEAD.sha) {
+            revs['dist-tags'].HEAD = v
+            if (!revs.refs.latest) {
+              revs['dist-tags'].latest = revs.refs.HEAD
+            }
+          }
+        })
+      }
+      REVS.set(repo, revs)
+      return revs
     })
   })
 }
@@ -173,7 +185,18 @@ module.exports._exec = execGit
 function execGit (gitArgs, gitOpts, opts) {
   opts = optCheck(opts)
   return checkGit().then(gitPath => {
-    return execFileAsync(gitPath, gitArgs, mkOpts(gitOpts, opts))
+    return promiseRetry((retry, number) => {
+      if (number !== 1) {
+        opts.log.silly('pacote', 'Retrying git command: ' + gitArgs.join(' ') + ' attempt # ' + number)
+      }
+      return execFileAsync(gitPath, gitArgs, mkOpts(gitOpts, opts)).catch((err) => {
+        if (shouldRetry(err)) {
+          retry(err)
+        } else {
+          throw err
+        }
+      })
+    }, opts.retry)
   })
 }
 
@@ -181,7 +204,28 @@ module.exports._spawn = spawnGit
 function spawnGit (gitArgs, gitOpts, opts) {
   opts = optCheck(opts)
   return checkGit().then(gitPath => {
-    return cp.spawn(gitPath, gitArgs, mkOpts(gitOpts, opts))
+    return promiseRetry((retry, number) => {
+      if (number !== 1) {
+        opts.log.silly('pacote', 'Retrying git command: ' + gitArgs.join(' ') + ' attempt # ' + number)
+      }
+      const child = cp.spawn(gitPath, gitArgs, mkOpts(gitOpts, opts))
+
+      let stdout = ''
+      let stderr = ''
+      child.stdout.on('data', d => { stdout += d })
+      child.stderr.on('data', d => { stderr += d })
+
+      return finished(child).catch(err => {
+        if (shouldRetry(stderr)) {
+          retry(err)
+        } else {
+          err.stderr = stderr
+          throw err
+        }
+      }).then(() => {
+        return stdout
+      })
+    }, opts.retry)
   })
 }
 
@@ -214,10 +258,10 @@ const REFS_HEADS = 'refs/heads/'
 const HEAD = 'HEAD'
 function refType (ref) {
   return ref.indexOf(REFS_TAGS) !== -1
-  ? 'tag'
-  : ref.indexOf(REFS_HEADS) !== -1
-  ? 'branch'
-  : ref.endsWith(HEAD)
-  ? 'head'
-  : 'other'
+    ? 'tag'
+    : ref.indexOf(REFS_HEADS) !== -1
+      ? 'branch'
+      : ref.endsWith(HEAD)
+        ? 'head'
+        : 'other'
 }

package/lib/util/opt-check.js

@@ -45,8 +45,8 @@ function PacoteOptions (opts) {
   this.fullMetadata = opts.fullMetadata
   this.alwaysAuth = opts.alwaysAuth
   this.includeDeprecated = opts.includeDeprecated == null
-  ? true
-  : opts.includeDeprecated
+    ? true
+    : opts.includeDeprecated
 
   this.dirPacker = opts.dirPacker || null
 

package/lib/util/pack-dir.js

@@ -14,8 +14,8 @@ function packDir (manifest, label, dir, target, opts) {
   opts = optCheck(opts)
 
   const packer = opts.dirPacker
-  ? BB.resolve(opts.dirPacker(manifest, dir))
-  : mkPacker(dir)
+    ? BB.resolve(opts.dirPacker(manifest, dir))
+    : mkPacker(dir)
 
   if (!opts.cache) {
     return packer.then(packer => pipe(packer, target))

package/lib/with-tarball-stream.js

@@ -27,108 +27,107 @@ function withTarballStream (spec, opts, streamHandler) {
     opts.resolved &&
     opts.resolved.startsWith('file:')
   )
-  ? BB.try(() => {
+    ? BB.try(() => {
     // NOTE - this is a special shortcut! Packages installed as files do not
     // have a `resolved` field -- this specific case only occurs when you have,
     // say, a git dependency or a registry dependency that you've packaged into
     // a local file, and put that file: spec in the `resolved` field.
-    opts.log.silly('pacote', `trying ${spec} by local file: ${opts.resolved}`)
-    const file = path.resolve(opts.where || '.', opts.resolved.substr(5))
-    return statAsync(file)
-    .then(() => {
-      const verifier = ssri.integrityStream({integrity: opts.integrity})
-      const stream = fs.createReadStream(file)
-      .on('error', err => verifier.emit('error', err))
-      .pipe(verifier)
-      return streamHandler(stream)
-    })
-    .catch(err => {
-      if (err.code === 'EINTEGRITY') {
-        opts.log.warn('pacote', `EINTEGRITY while extracting ${spec} from ${file}.You will have to recreate the file.`)
-        opts.log.verbose('pacote', `EINTEGRITY for ${spec}: ${err.message}`)
-      }
-      throw err
+      opts.log.silly('pacote', `trying ${spec} by local file: ${opts.resolved}`)
+      const file = path.resolve(opts.where || '.', opts.resolved.substr(5))
+      return statAsync(file)
+        .then(() => {
+          const verifier = ssri.integrityStream({integrity: opts.integrity})
+          const stream = fs.createReadStream(file)
+            .on('error', err => verifier.emit('error', err))
+            .pipe(verifier)
+          return streamHandler(stream)
+        })
+        .catch(err => {
+          if (err.code === 'EINTEGRITY') {
+            opts.log.warn('pacote', `EINTEGRITY while extracting ${spec} from ${file}.You will have to recreate the file.`)
+            opts.log.verbose('pacote', `EINTEGRITY for ${spec}: ${err.message}`)
+          }
+          throw err
+        })
     })
-  })
-  : BB.reject(Object.assign(new Error('no file!'), {code: 'ENOENT'}))
+    : BB.reject(Object.assign(new Error('no file!'), {code: 'ENOENT'}))
 
   const tryDigest = tryFile
-  .catch(err => {
-    if (
-      opts.preferOnline ||
+    .catch(err => {
+      if (
+        opts.preferOnline ||
       !opts.cache ||
       !opts.integrity ||
       !RETRIABLE_ERRORS.has(err.code)
-    ) {
-      throw err
-    } else {
-      opts.log.silly('tarball', `trying ${spec} by hash: ${opts.integrity}`)
-      const stream = cacache.get.stream.byDigest(
-        opts.cache, opts.integrity, opts
-      )
-      stream.once('error', err => stream.on('newListener', (ev, l) => {
-        if (ev === 'error') { l(err) }
-      }))
-      return streamHandler(stream)
-      .catch(err => {
-        if (err.code === 'EINTEGRITY' || err.code === 'Z_DATA_ERROR') {
-          opts.log.warn('tarball', `cached data for ${spec} (${opts.integrity}) seems to be corrupted. Refreshing cache.`)
-          return cleanUpCached(opts.cache, opts.integrity, opts)
-          .then(() => { throw err })
-        } else {
-          throw err
-        }
-      })
-    }
-  })
+      ) {
+        throw err
+      } else {
+        opts.log.silly('tarball', `trying ${spec} by hash: ${opts.integrity}`)
+        const stream = cacache.get.stream.byDigest(
+          opts.cache, opts.integrity, opts
+        )
+        stream.once('error', err => stream.on('newListener', (ev, l) => {
+          if (ev === 'error') { l(err) }
+        }))
+        return streamHandler(stream)
+          .catch(err => {
+            if (err.code === 'EINTEGRITY' || err.code === 'Z_DATA_ERROR') {
+              opts.log.warn('tarball', `cached data for ${spec} (${opts.integrity}) seems to be corrupted. Refreshing cache.`)
+              return cleanUpCached(opts.cache, opts.integrity, opts)
+                .then(() => { throw err })
+            } else {
+              throw err
+            }
+          })
+      }
+    })
 
   const trySpec = tryDigest
-  .catch(err => {
-    if (!RETRIABLE_ERRORS.has(err.code)) {
+    .catch(err => {
+      if (!RETRIABLE_ERRORS.has(err.code)) {
       // If it's not one of our retriable errors, bail out and give up.
-      throw err
-    } else {
-      opts.log.silly(
-        'tarball',
-        `no local data for ${spec}. Extracting by manifest.`
-      )
-      return BB.resolve(retry((tryAgain, attemptNum) => {
-        const tardata = fetch.tarball(spec, opts)
-        if (!opts.resolved) {
-          tardata.on('manifest', m => {
-            opts.resolved = m._resolved
-          })
-          tardata.on('integrity', i => {
-            opts.integrity = i
-          })
-        }
-        tardata.on('error', err => console.error('ERROR:', err))
-        return BB.try(() => streamHandler(tardata))
-        .catch(err => {
-          // Retry once if we have a cache, to clear up any weird conditions.
-          // Don't retry network errors, though -- make-fetch-happen has already
-          // taken care of making sure we're all set on that front.
-          if (opts.cache && err.code && !err.code.match(/^E\d{3}$/)) {
-            if (err.code === 'EINTEGRITY' || err.code === 'Z_DATA_ERROR') {
-              opts.log.warn('tarball', `tarball data for ${spec} (${opts.integrity}) seems to be corrupted. Trying one more time.`)
-            }
-            return cleanUpCached(opts.cache, err.sri, opts)
-            .then(() => tryAgain(err))
-          } else {
-            throw err
+        throw err
+      } else {
+        opts.log.silly(
+          'tarball',
+          `no local data for ${spec}. Extracting by manifest.`
+        )
+        return BB.resolve(retry((tryAgain, attemptNum) => {
+          const tardata = fetch.tarball(spec, opts)
+          if (!opts.resolved) {
+            tardata.on('manifest', m => {
+              opts.resolved = m._resolved
+            })
+            tardata.on('integrity', i => {
+              opts.integrity = i
+            })
           }
-        })
-      }, {retries: 1}))
-    }
-  })
+          return BB.try(() => streamHandler(tardata))
+            .catch(err => {
+              // Retry once if we have a cache, to clear up any weird conditions.
+              // Don't retry network errors, though -- make-fetch-happen has already
+              // taken care of making sure we're all set on that front.
+              if (opts.cache && err.code && !err.code.match(/^E\d{3}$/)) {
+                if (err.code === 'EINTEGRITY' || err.code === 'Z_DATA_ERROR') {
+                  opts.log.warn('tarball', `tarball data for ${spec} (${opts.integrity}) seems to be corrupted. Trying one more time.`)
+                }
+                return cleanUpCached(opts.cache, err.sri, opts)
+                  .then(() => tryAgain(err))
+              } else {
+                throw err
+              }
+            })
+        }, {retries: 1}))
+      }
+    })
 
   return trySpec
-  .catch(err => {
-    if (err.code === 'EINTEGRITY') {
-      err.message = `Verification failed while extracting ${spec}:\n${err.message}`
-    }
-    throw err
-  })
+    .catch(err => {
+      if (err.code === 'EINTEGRITY') {
+        err.message = `Verification failed while extracting ${spec}:\n${err.message}`
+      }
+      throw err
+    })
 }
 
 function cleanUpCached (cachePath, integrity, opts) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pacote",
-  "version": "7.5.1",
+  "version": "7.6.1",
   "description": "JavaScript package downloader",
   "main": "index.js",
   "files": [
@@ -48,7 +48,7 @@
     "lru-cache": "^4.1.1",
     "make-fetch-happen": "^2.6.0",
     "minimatch": "^3.0.4",
-    "mississippi": "^2.0.0",
+    "mississippi": "^3.0.0",
     "mkdirp": "^0.5.1",
     "normalize-package-data": "^2.4.0",
     "npm-package-arg": "^6.0.0",
@@ -62,19 +62,19 @@
     "safe-buffer": "^5.1.1",
     "semver": "^5.5.0",
     "ssri": "^5.2.4",
-    "tar": "^4.3.3",
+    "tar": "^4.4.0",
     "unique-filename": "^1.1.0",
     "which": "^1.3.0"
   },
   "devDependencies": {
-    "nock": "^9.1.6",
+    "nock": "^9.2.3",
     "npmlog": "^4.1.2",
     "nyc": "^11.4.1",
     "require-inject": "^1.4.2",
-    "standard": "^10.0.3",
+    "standard": "^11.0.0",
     "standard-version": "^4.3.0",
     "tacks": "^1.2.6",
-    "tap": "^11.1.0",
+    "tap": "^11.1.2",
     "tar-stream": "^1.5.5",
     "weallbehave": "^1.2.0",
     "weallcontribute": "^1.0.7"

package/tarball.js

@@ -45,6 +45,7 @@ function tarballStream (spec, opts) {
       })
     }
   })
+    .catch(err => output.emit('error', err))
   return output
 }
 
@@ -53,14 +54,14 @@ function tarballToFile (spec, dest, opts) {
   opts = optCheck(opts)
   spec = npa(spec, opts.where)
   return mkdirp(path.dirname(dest))
-  .then(() => withTarballStream(spec, opts, stream => {
-    return rimraf(dest)
-    .then(() => new BB((resolve, reject) => {
-      const writer = fs.createWriteStream(dest)
-      stream.on('error', reject)
-      writer.on('error', reject)
-      writer.on('close', resolve)
-      stream.pipe(writer)
+    .then(() => withTarballStream(spec, opts, stream => {
+      return rimraf(dest)
+        .then(() => new BB((resolve, reject) => {
+          const writer = fs.createWriteStream(dest)
+          stream.on('error', reject)
+          writer.on('error', reject)
+          writer.on('close', resolve)
+          stream.pipe(writer)
+        }))
     }))
-  }))
 }