invalid destination for symbolic link in bundle

[vpszi]

i'm using the macos-alias package which contains a python3 symlink.
i managed to sucessfully sign my app with the following configuration:

    osxSign:{
            identity: '<my-identity>',
            ignore: 'node_gyp_bins/python3',
            strictVerify: false,
          },

when i open my app on a different device i get the following error message: “My App” is damaged and can’t be opened. This file was downloaded on an unknown date.

i get a more detailed error with spctl --assess --type execute --verbose --ignore-cache --no-cache My-App.app:
My-App.app: rejected (invalid destination for symbolic link in bundle)

How can i fix this issue?

[matt-oakes]

It looks like this was an issues in node-gpy which has been fixed in this PR nodejs/node-gyp#2721

It's yet to be released, so for now you'll need to use something like patch-package to patch it youself locally until a new release of node-gyp.