Server : Apache/2.4.41 (Ubuntu) System : Linux absol.cf 5.4.0-198-generic #218-Ubuntu SMP Fri Sep 27 20:18:53 UTC 2024 x86_64 User : www-data ( 33) PHP Version : 7.4.33 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, Directory :  /usr/local/n/versions/node/14.15.4/lib/node_modules/npm/node_modules/lock-verify/

Upload File : current_dir [ Writeable ] document_root [ Writeable ]

'use strict'
module.exports = lockVerify

const fs = require('fs')
const path = require('path')
const npa = require('npm-package-arg')
const semver = require('semver')

function lockVerify(check) {
  if (!check) check = '.'

  const pjson = readJson(`${check}/package.json`)
  let plock = readJson(`${check}/npm-shrinkwrap.json`)
    .catch(() => readJson(`${check}/package-lock.json`))

  return Promise.all([pjson, plock]).then(result => {
    const pjson = result[0]
    const plock = result[1]
    let warnings = []
    let errors = []
    for (let type of [['dependencies'], ['devDependencies'], ['optionalDependencies', true]]) {
      const deps = pjson[type[0]]
      if (!deps) continue
      const isOptional = type[1]
      Object.keys(deps).forEach(name => {
        const spec = npa.resolve(name, deps[name])
        const lock = plock.dependencies[name]
        if (!lock) {
          if (isOptional) {
            warnings.push('Optional missing: ' + name + '@' + deps[name])
          } else {
            errors.push('Missing: ' + name + '@' + deps[name])
          }
          return
        }
        if (spec.registry) {
          // Can't match tags to package-lock w/o network
          if (spec.type === 'tag') return
          if (spec.type === 'alias') {
            const lockSpec = npa.resolve(name, lock.version)
            if (!semver.satisfies(lockSpec.subSpec.fetchSpec, spec.subSpec.fetchSpec)) {
              errors.push("Invalid: lock file's " + name + '@' + lock.version + ' does not satisfy ' + name + '@' + spec.rawSpec)
              return
            }
          } else {
            if (!semver.satisfies(lock.version, spec.fetchSpec)) {
              errors.push("Invalid: lock file's " + name + '@' + lock.version + ' does not satisfy ' + name + '@' + spec.fetchSpec)
              return
            }
          }
        } else if (spec.type === 'git') {
          // can't verify git w/o network
          return
        } else if (spec.type === 'remote') {
          if (lock.version !== spec.fetchSpec) {
            errors.push("Invalid: lock file's " + name + '@' + lock.version + ' does not satisfy ' + name + '@' + spec.fetchSpec)
            return
          }
        } else if (spec.type === 'file' || spec.type === 'directory') {
          const lockSpec = npa.resolve(name, lock.version)
          if (spec.fetchSpec !== lockSpec.fetchSpec) {
            errors.push("Invalid: lock file's " + name + '@' + lock.version + ' does not satisfy ' + name + '@' + deps[name])
            return
          }
        } else {
          console.log(spec)
        }
      })
    }
    return Promise.resolve({status: errors.length === 0, warnings: warnings, errors: errors})
  })
}

function readJson (file) {
  return new Promise((resolve, reject) => {
    fs.readFile(file, (err, content) => {
      if (err) return reject(err)
      return resolve(JSON.parse(content))
    })
  })
}