pnpm version: [email protected]

When running pnpm install with a populated pnpm-store the error ERR_PNPM_UNEXPECTED_PKG_CONTENT_IN_STORE is shown for an aliased package coming from a private registry. Specifically it is the gsap/business package from Greensock aliased to the gsap package.

ERR_PNPM_UNEXPECTED_PKG_CONTENT_IN_STORE  Package name mismatch found while reading {"integrity":"sha512-kJzSzrnGNrCAx0wCwNkHLc3rRckuebvfzWFLI5u+60mLDIm7jc986XUzS4+UnRuh1HCavALEuAsgWPqtVw8Low==","registry":"https://npm.greensock.com/","tarball":"https://npm.greensock.com/@gsap%2fbusiness/-/business-3.10.4.tgz"} from the store. This means that the lockfile is broken. Expected package: @gsap/[email protected]. Actual package in the store by the given integrity: [email protected].

Code to reproduce the issue:

package.json

{
    "name": "boilerplate",
    "license": "UNLICENSED",
    "private": true,
    "engines": {
        "node": ">= 16",
        "pnpm": ">= 7"
    },
    "dependencies": {
        "gsap": "npm:@gsap/business@^3.9.0"
    }
}

.npmrc

engine-strict=true
shamefully-hoist=true
@gsap:registry=https://npm.greensock.com/
//npm.greensock.com/:_authToken=secret

Expected behavior:

Installation of the specific package from the pnpm-store should work.

Actual behavior:

Installation of the package from the pnpm-store fails.

Additional information:

• pnpm: 7.1.0 (via corepack)
• node: 16.15.0
• OS: Linux (platform.sh CI build environment)