package-changed/esm/get-packagelock-hash.js

Tells you whether or not dependencies in package.json have been changed.

import crypto from 'crypto';
import fs from 'fs';
export var getPackagelockHash = function (packagelockPath) {
    var _a, _b, _c, _d;
    if (!packagelockPath)
        return;
    var hashSum = crypto.createHash('md5');
    // read package-lock.json
    var contents = fs.readFileSync(packagelockPath, 'utf-8');
    // parse it
    var packageBlob = JSON.parse(contents);
    // exclude name and version of the main package from the hash
    delete packageBlob.name;
    (_b = (_a = packageBlob['packages']) === null || _a === void 0 ? void 0 : _a['']) === null || _b === void 0 ? true : delete _b.name;
    delete packageBlob.version;
    (_d = (_c = packageBlob['packages']) === null || _c === void 0 ? void 0 : _c['']) === null || _d === void 0 ? true : delete _d.version;
    // calculate hash
    var fileJson = JSON.stringify(packageBlob);
    hashSum.update(Buffer.from(fileJson));
    return hashSum.digest('hex');
};