snyk-nodejs-lockfile-parser
Version:
Generate a dep tree given a lockfile
79 lines • 3.19 kB
JavaScript
;
Object.defineProperty(exports, "__esModule", { value: true });
exports.LockfileV5Parser = void 0;
const dependency_path_1 = require("dependency-path");
const lockfile_parser_1 = require("./lockfile-parser");
class LockfileV5Parser extends lockfile_parser_1.PnpmLockfileParser {
constructor(rawPnpmLock, workspaceArgs) {
// In case of no dependencies, pnpm@7 (lokfile version 5)
// does not create a lockfile at `pnpm install`
if (!rawPnpmLock) {
rawPnpmLock = {
lockfileVersion: '5',
};
}
super(rawPnpmLock, workspaceArgs);
}
parseDepPath(depPath) {
// The 'dependency-path' parsing package only works for lockfiles v5
const { name, version } = (0, dependency_path_1.parse)(depPath);
if (!version) {
return { name };
}
return {
name,
version: this.excludeTransPeerDepsVersions(version),
};
}
normalizeTopLevelDeps(dependencies, isDev, importerName) {
return Object.entries(dependencies).reduce((pnpmDeps, [name, version]) => {
version = this.normalizeVersion(name, version, isDev, importerName);
pnpmDeps[name] = {
name,
version,
isDev,
};
return pnpmDeps;
}, {});
}
normalizePackagesDeps(dependencies, isDev, importerName) {
return Object.entries(dependencies).reduce((pnpmDeps, [name, version]) => {
version = this.normalizeVersion(name, version, isDev, importerName);
pnpmDeps[name] = version;
return pnpmDeps;
}, {});
}
// Dependency path and versions include transitive peer dependencies separated by '_'
// e.g. in dependencies
// dependencies:
// acorn-jsx: 5.3.2_acorn@7.4.1
// OR in dependency path:
// '/@babel/preset-typescript/7.12.13_@babel+core@7.12.13'
// https://github.com/pnpm/spec/blob/master/dependency-path.md
excludeTransPeerDepsVersions(fullVersionStr) {
return fullVersionStr.split('_')[0];
}
// eslint-disable-next-line @typescript-eslint/explicit-module-boundary-types
normaliseImporters(rawPnpmLock) {
if (!('importers' in rawPnpmLock)) {
return {};
}
const rawImporters = rawPnpmLock.importers;
return Object.entries(rawImporters).reduce(
// eslint-disable-next-line @typescript-eslint/no-explicit-any
(acc, [key, val]) => {
// No deps case
if (!('dependencies' in val)) {
return Object.assign(Object.assign({}, acc), { [key]: {} });
}
// eslint-disable-next-line @typescript-eslint/no-non-null-assertion
const deps = val.dependencies;
const depsNormalized = Object.fromEntries(Object.entries(deps).map(([depName, version]) => {
return [depName, version];
}));
return Object.assign(Object.assign({}, acc), { [key]: depsNormalized });
}, {});
}
}
exports.LockfileV5Parser = LockfileV5Parser;
//# sourceMappingURL=lockfile-v5.js.map