package-changed/lib/get-packagelock-hash.js

Tells you whether or not dependencies in package.json have been changed.

"use strict";
var __importDefault = (this && this.__importDefault) || function (mod) {
    return (mod && mod.__esModule) ? mod : { "default": mod };
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.getPackagelockHash = void 0;
var crypto_1 = __importDefault(require("crypto"));
var fs_1 = __importDefault(require("fs"));
exports.getPackagelockHash = function (packagelockPath) {
    var _a, _b, _c, _d;
    if (!packagelockPath)
        return;
    var hashSum = crypto_1.default.createHash('md5');
    // read package-lock.json
    var contents = fs_1.default.readFileSync(packagelockPath, 'utf-8');
    // parse it
    var packageBlob = JSON.parse(contents);
    // exclude name and version of the main package from the hash
    delete packageBlob.name;
    (_b = (_a = packageBlob['packages']) === null || _a === void 0 ? void 0 : _a['']) === null || _b === void 0 ? true : delete _b.name;
    delete packageBlob.version;
    (_d = (_c = packageBlob['packages']) === null || _c === void 0 ? void 0 : _c['']) === null || _d === void 0 ? true : delete _d.version;
    // calculate hash
    var fileJson = JSON.stringify(packageBlob);
    hashSum.update(Buffer.from(fileJson));
    return hashSum.digest('hex');
};