nodejs.pkg on macOS catalina platform

[MajuMadhusudanan]

NodeJS.v12.9.0.pkg
macOS Mojave 10.14.6 and Catalina 10.15
install
nodeJS package

I have downloaded latest nodeJS.v12.9.0 package file from nodejs website and bundled it into our product setup. Apple introduced notarization of package files and binaries recently from Mojave 10.14.6 and macOS catalina onwards. So i need to notarize my package file for deploying it on catalina.

But notarization failed due to nodejs .pkg file. Apple expects all package files to be notarised from catalina onwards. Can anyone send me link of nodeJS package file (notarized one)? Is there anychange required in distribution package?

[Hakerh400]

See nodejs/node#29216
Edit: I see you posted comment on the linked issue too. What is the reason for opening another issue here?

[MajuMadhusudanan]

Yes. Sorry. I'm new to nodeJS. I thought nodejs/node#29216 is for reporting bug. I was integrating and testing latest version of nodeJS. But I don't see any difference in behaviour. That is why i posted a question in nodes\help link

[gireeshpunathil]

@MajuMadhusudanan - is this still an issue?

[MajuMadhusudanan]

Yes. Tested using v12.14.0 build and Apple still reporting warnings for the below executables (term-size and node).

"issues": [
{
"severity": "warning",
"code": null,
"path": "Sample.pkg Contents/Payload/Library/Application Support/iManage/Script/node-v12.14.0.pkg/npm-v6.13.4.pkg Contents/Payload/usr/local/lib/node_modules/npm/node_modules/term-size/vendor/macos/term-size",
"message": "The binary is not signed.",
"docUrl": null,
"architecture": "x86_64"
},
{
"severity": "warning",
"code": null,
"path": "Sample.pkg Contents/Payload/Library/Application Support/iManage/Script/node-v12.14.0.pkg/npm-v6.13.4.pkg Contents/Payload/usr/local/lib/node_modules/npm/node_modules/term-size/vendor/macos/term-size",
"message": "The signature does not include a secure timestamp.",
"docUrl": null,
"architecture": "x86_64"
},
{
"severity": "warning",
"code": null,
"path": "Sample.pkg Contents/Payload/Library/Application Support/iManage/Script/node-v12.14.0.pkg/npm-v6.13.4.pkg Contents/Payload/usr/local/lib/node_modules/npm/node_modules/term-size/vendor/macos/term-size",
"message": "The executable does not have the hardened runtime enabled.",
"docUrl": null,
"architecture": "x86_64"
},
{
"severity": "warning",
"code": null,
"path": "Sample.pkg Contents/Payload/Library/Application Support/iManage/Script/node-v12.14.0.pkg/node-v12.14.0.pkg Contents/Payload/usr/local/bin/node",
"message": "The signature algorithm used is too weak.",
"docUrl": null,
"architecture": "x86_64"
},
{
"severity": "warning",
"code": null,
"path": "Sample.pkg Contents/Payload/Library/Application Support/iManage/Script/node-v12.14.0.pkg/node-v12.14.0.pkg Contents/Payload/usr/local/bin/node",
"message": "The executable does not have the hardened runtime enabled.",
"docUrl": null,
"architecture": "x86_64"
}
]

[github-actions]

There has been no activity on this issue for 3 years and it may no longer be relevant. It will be closed 1 month after the last non-automated comment.

[github-actions]

There has been no activity on this issue and it is being closed. If you feel closing this issue is not the right thing to do, please leave a comment.