dependabot-npm_and_yarn 0.125.2 → 0.125.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ae99e6c36cdc88f0f62dec813df98ff581a0468d356457eef51008b847f034c6
-  data.tar.gz: 4a3eb575fab37826d0f2dfa1cb443a63c347602d30448b4e30688d99ae880353
+  metadata.gz: e88189590eb01dfeb8fad3851dc497eceafc3b46e81fcf39579f2f547b33a053
+  data.tar.gz: c609ca903390320ef312ad88737d403f1adfb558ccc48a1de2494cf65a8c6e8a
 SHA512:
-  metadata.gz: '08c996cc22935cfa3945f517e3c10954d26290d94276c380f1cbca824e3dd92a2a147f4d37612ed3251f8729f39ee1d997511b3954cb579f1dcc17ad71d42264'
-  data.tar.gz: 9c636874c74ed0818fa1d79b0eb2e545a293435d89cdc97b1ec045e9e1566af851eb6e004c6e1b4004f365054c4db633a626e343c6d3996592d252562f837144
+  metadata.gz: ba52aa70e4ce22621245958937751ceeb7b981864a5d0120713bfd5c626ef440aa379bf21074fe9e472306f7627c5bc499d91a83eb61e536709d40b5b15a8883
+  data.tar.gz: 39d1ec4278a78e1e2e0fde846fb3b7ab7c67b96aa9fdcee322f874aef0eb2e689c0b941b8e47580db403a1ebb1e7ef2b4d5d6c6af209884e053546ec39683626

data/helpers/README.md

@@ -0,0 +1,29 @@
+Native JavaScript helpers
+-------------------------
+
+This directory contains helper functions for npm and yarn, natively written in
+Javascript so that we can utilize the package managers internal APIs and other
+native tooling for these ecosystems.
+
+These helpers are called from the Ruby code via `run.js`, they are passed
+arguments via stdin and return JSON data to stdout.
+
+## Testing
+
+When working on these helpers, it's convenient to write some high level tests in
+JavaScript to make it easier to debug the code.
+
+You can now run the tests from this directory by running:
+
+```
+yarn test path/to/test.js
+```
+
+### Debugging
+
+In order to run an interactive debugger:
+
+- `node --inspect-brk node_modules/.bin/jest --runInBand path/to/test/test.js`
+- In Chrome, nativate to chrome://inspect
+- Click `Open dedicated DevTools for Node`
+- You'll now be able to interactively debug using the chrome dev tools.

data/helpers/lib/npm/conflicting-dependency-parser.js

@@ -18,22 +18,19 @@ async function findConflictingDependencies(directory, depName, targetVersion) {
   });
 
   return await arb.loadVirtual().then((tree) => {
-    var parents = [];
-
+    const parents = [];
     for (const node of tree.inventory.query("name", depName)) {
       for (const edge of node.edgesIn) {
         if (!semver.satisfies(targetVersion, edge.spec)) {
-          var parentVersion;
-          for (const fromEdge of edge.from.edgesIn.values()) {
-            if (fromEdge.name == edge.from.name) {
-              parentVersion = edge.from.version;
-            }
-          }
-
-          parents.push({
-            name: edge.from.name,
-            version: parentVersion,
-            requirement: edge.spec,
+          findTopLevelEdges(edge).forEach((topLevel) => {
+            explanation = buildExplanation(node, edge, topLevel);
+
+            parents.push({
+              explanation: explanation,
+              name: edge.from.name,
+              version: edge.from.version,
+              requirement: edge.spec,
+            });
           });
         }
       }
@@ -43,4 +40,37 @@ async function findConflictingDependencies(directory, depName, targetVersion) {
   });
 }
 
+function buildExplanation(node, directEdge, topLevelEdge) {
+  if (directEdge.from === topLevelEdge.to) {
+    // The nodes parent is top-level
+    return `${directEdge.from.name}@${directEdge.from.version} requires ${directEdge.to.name}@${directEdge.spec}`;
+  } else if (topLevelEdge.to.edgesOut.has(directEdge.from.name)) {
+    // The nodes parent is a direct dependency of the top-level dependency
+    return (
+      `${topLevelEdge.to.name}@${topLevelEdge.to.version} requires ${directEdge.to.name}@${directEdge.spec} ` +
+      `via ${directEdge.from.name}@${directEdge.from.version}`
+    );
+  } else {
+    // The nodes parent is a transitive dependency of the top-level dependency
+    return (
+      `${topLevelEdge.to.name}@${topLevelEdge.to.version} requires ${directEdge.to.name}@${directEdge.spec} ` +
+      `via a transitive dependency on ${directEdge.from.name}@${directEdge.from.version}`
+    );
+  }
+}
+
+function findTopLevelEdges(edge, parents = []) {
+  edge.from.edgesIn.forEach((parent) => {
+    if (parent.from.edgesIn.size === 0) {
+      if (!parents.includes(parent)) {
+        parents.push(parent);
+      }
+    } else {
+      findTopLevelEdges(parent, parents);
+    }
+  });
+
+  return parents;
+}
+
 module.exports = { findConflictingDependencies };

data/helpers/lib/yarn/conflicting-dependency-parser.js

@@ -9,31 +9,168 @@
  *  - An array of objects with conflicting dependencies
  */
 
+const fs = require("fs");
+const path = require("path");
 const semver = require("semver");
 const { parse } = require("./lockfile-parser");
 const { LOCKFILE_ENTRY_REGEX } = require("./helpers");
 
 async function findConflictingDependencies(directory, depName, targetVersion) {
-  var parents = [];
+  const lockfileJson = await parse(directory);
+  const packageJson = fs
+    .readFileSync(path.join(directory, "package.json"))
+    .toString();
+  const dependencyTypes = [
+    "dependencies",
+    "devDependencies",
+    "optionalDependencies",
+  ];
+  const topLevelDependencies = dependencyTypes.flatMap((type) => {
+    return Object.entries(JSON.parse(packageJson)[type] || {});
+  });
+
+  const conflictingParents = topLevelDependencies.flatMap(
+    ([topLevelDepName, topLevelRequirement]) => {
+      const topLevelSpec = {
+        name: topLevelDepName,
+        requirement: topLevelRequirement,
+      };
+
+      return Array.from(
+        findConflictingParentDependencies(
+          topLevelDepName,
+          topLevelRequirement,
+          depName,
+          targetVersion,
+          topLevelSpec,
+          lockfileJson
+        ).values()
+      );
+    }
+  );
 
-  const json = await parse(directory);
+  return conflictingParents.map((parentSpec) => {
+    const explanation = buildExplanation(parentSpec, depName);
+    return {
+      explanation: explanation,
+      name: parentSpec.name,
+      version: parentSpec.version,
+      requirement: parentSpec.requirement,
+    };
+  });
+}
+
+function buildExplanation(parentSpec, targetDepName) {
+  if (
+    parentSpec.name === parentSpec.topLevelSpec.name &&
+    parentSpec.version === parentSpec.topLevelSpec.version
+  ) {
+    // The nodes parent is top-level
+    return (
+      `${parentSpec.name}@${parentSpec.version} requires ${targetDepName}` +
+      `@${parentSpec.requirement}`
+    );
+  } else if (
+    parentSpec.transitiveSpec.name === parentSpec.topLevelSpec.name &&
+    parentSpec.transitiveSpec.version === parentSpec.topLevelSpec.version
+  ) {
+    // The nodes parent is a direct dependency of the top-level dependency
+    return (
+      `${parentSpec.topLevelSpec.name}@${parentSpec.topLevelSpec.version} requires ` +
+      `${targetDepName}@${parentSpec.requirement} ` +
+      `via ${parentSpec.name}@${parentSpec.version}`
+    );
+  } else {
+    // The nodes parent is a transitive dependency of the top-level dependency
+    return (
+      `${parentSpec.topLevelSpec.name}@${parentSpec.topLevelSpec.version} requires ` +
+      `${targetDepName}@${parentSpec.requirement} ` +
+      `via a transitive dependency on ${parentSpec.name}@${parentSpec.version}`
+    );
+  }
+}
 
-  Object.entries(json).forEach(([entry, pkg]) => {
-    if (entry.match(LOCKFILE_ENTRY_REGEX) && pkg.dependencies) {
-      Object.entries(pkg.dependencies).forEach(([subDepName, spec]) => {
-        if (subDepName === depName && !semver.satisfies(targetVersion, spec)) {
-          const [_, parentDepName] = entry.match(LOCKFILE_ENTRY_REGEX);
-          parents.push({
+function findConflictingParentDependencies(
+  dependency,
+  requirement,
+  targetDep,
+  targetversion,
+  topLevelSpec,
+  lockfileJson,
+  transitiveSpec = {},
+  checkedEntries = new Set(),
+  conflictingParents = new Map()
+) {
+  // Prevent infinte loops for circular dependencies by only checking each
+  // lockfile entry once
+  const checkedEntry = [dependency, requirement].join("@");
+  if (checkedEntries.has(checkedEntry)) {
+    return conflictingParents;
+  }
+
+  checkedEntries.add(checkedEntry);
+
+  for (const [entry, pkg] of Object.entries(lockfileJson)) {
+    const [_, parentDepName, parentDepRequirement] = entry.match(
+      LOCKFILE_ENTRY_REGEX
+    );
+    // Decorate the top-level dependency spec with an installed version as we
+    // only have the requirement from the package.json manifest
+    if (
+      topLevelSpec.name == parentDepName &&
+      topLevelSpec.requirement == parentDepRequirement
+    ) {
+      topLevelSpec.version = pkg.version;
+    }
+
+    if (
+      pkg.dependencies &&
+      dependency == parentDepName &&
+      requirement == parentDepRequirement
+    ) {
+      // Recursive check for sub-dependencies finding dependencies that don't
+      // allow the target version of the vulnerable dependency to be installed
+      for (const [subDepName, spec] of Object.entries(pkg.dependencies)) {
+        if (
+          subDepName === targetDep &&
+          !semver.satisfies(targetversion, spec)
+        ) {
+          // Only add the conflicting parent once per version preventing
+          // duplicate dependencies from circular graphs
+          const key = [parentDepName, pkg.version].join("@");
+          conflictingParents.set(key, {
             name: parentDepName,
             version: pkg.version,
             requirement: spec,
+            transitiveSpec,
+            topLevelSpec,
           });
+        } else {
+          // Keep track of the parent dependency as a way to check if the
+          // conflicting dependency ends up being a direct dependency of a
+          // top-level dependency
+          transitiveSpec = {
+            name: parentDepName,
+            version: pkg.version,
+            requirement: parentDepRequirement,
+          };
+          findConflictingParentDependencies(
+            subDepName,
+            spec,
+            targetDep,
+            targetversion,
+            topLevelSpec,
+            lockfileJson,
+            transitiveSpec,
+            checkedEntries,
+            conflictingParents
+          );
         }
-      });
+      }
     }
-  });
+  }
 
-  return parents;
+  return conflictingParents;
 }
 
 module.exports = { findConflictingDependencies };

data/helpers/package.json

@@ -10,16 +10,16 @@
   },
   "dependencies": {
     "@dependabot/yarn-lib": "^1.21.1",
-    "@npmcli/arborist": "^1.0.9",
+    "@npmcli/arborist": "^1.0.13",
     "detect-indent": "^6.0.0",
-    "npm": "6.14.8",
+    "npm": "6.14.9",
     "semver": "^7.3.2"
   },
   "devDependencies": {
-    "eslint": "^7.12.1",
+    "eslint": "^7.14.0",
     "eslint-plugin-prettier": "^3.1.4",
-    "jest": "^26.6.2",
-    "prettier": "^2.1.2",
+    "jest": "^26.6.3",
+    "prettier": "^2.2.1",
     "rimraf": "^3.0.2"
   }
 }

data/helpers/test/npm/conflicting-dependency-parser.test.js

@@ -0,0 +1,67 @@
+const path = require("path");
+const os = require("os");
+const fs = require("fs");
+const rimraf = require("rimraf");
+const {
+  findConflictingDependencies,
+} = require("../../lib/npm/conflicting-dependency-parser");
+const helpers = require("./helpers");
+
+describe("findConflictingDependencies", () => {
+  let tempDir;
+  beforeEach(() => {
+    tempDir = fs.mkdtempSync(os.tmpdir() + path.sep);
+  });
+  afterEach(() => rimraf.sync(tempDir));
+
+  it("finds conflicting dependencies", async () => {
+    helpers.copyDependencies("conflicting-dependency-parser/simple", tempDir);
+
+    const result = await findConflictingDependencies(tempDir, "abind", "2.0.0");
+    expect(result).toEqual([
+      {
+        explanation: "objnest@4.1.2 requires abind@^1.0.0",
+        name: "objnest",
+        version: "4.1.2",
+        requirement: "^1.0.0",
+      },
+    ]);
+  });
+
+  it("finds the top-level conflicting dependency", async () => {
+    helpers.copyDependencies("conflicting-dependency-parser/nested", tempDir);
+
+    const result = await findConflictingDependencies(tempDir, "abind", "2.0.0");
+    expect(result).toEqual([
+      {
+        explanation: "askconfig@4.0.4 requires abind@^1.0.4 via objnest@5.0.10",
+        name: "objnest",
+        version: "5.0.10",
+        requirement: "^1.0.4",
+      },
+    ]);
+  });
+
+  it("explains a deeply nested dependency", async () => {
+    helpers.copyDependencies(
+      "conflicting-dependency-parser/deeply-nested",
+      tempDir
+    );
+
+    const result = await findConflictingDependencies(tempDir, "abind", "2.0.0");
+    expect(result).toEqual([
+      {
+        explanation: "apass@1.1.0 requires abind@^1.0.0 via cipherjson@2.1.0",
+        name: "cipherjson",
+        version: "2.1.0",
+        requirement: "^1.0.0",
+      },
+      {
+        explanation: `apass@1.1.0 requires abind@^1.0.0 via a transitive dependency on objnest@3.0.9`,
+        name: "objnest",
+        version: "3.0.9",
+        requirement: "^1.0.0",
+      },
+    ]);
+  });
+});

data/helpers/test/npm/fixtures/conflicting-dependency-parser/deeply-nested/package-lock.json

@@ -0,0 +1,565 @@
+{
+  "name": "test",
+  "version": "1.0.0",
+  "lockfileVersion": 1,
+  "requires": true,
+  "dependencies": {
+    "abind": {
+      "version": "1.0.5",
+      "resolved": "https://registry.npmjs.org/abind/-/abind-1.0.5.tgz",
+      "integrity": "sha512-dbaEZphdPje0ihqSdWg36Sb8S20TuqQomiz2593oIx+enQ9Q4vDZRjIzhnkWltGRKVKqC28kTribkgRLBexWVQ=="
+    },
+    "aglob": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/aglob/-/aglob-2.0.1.tgz",
+      "integrity": "sha1-kl7PJC11AkLAcVrNMy+V90kGZhQ=",
+      "requires": {
+        "co": "^4.6.0",
+        "glob": "^7.1.1"
+      }
+    },
+    "ansi-regex": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz",
+      "integrity": "sha1-w7M6te42DYbg5ijwRorn7yfWVN8="
+    },
+    "apass": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/apass/-/apass-1.1.0.tgz",
+      "integrity": "sha1-WNdSImWxQTtctC/2v/CfIaKDVpc=",
+      "requires": {
+        "asfs": "^1.1.1",
+        "askconfig": "^3.0.5",
+        "cipherjson": "^2.1.0",
+        "co": "^4.6.0",
+        "colorprint": "^4.1.0",
+        "commander": "^2.9.0",
+        "execcli": "^4.0.10",
+        "fmtjson": "^3.0.7"
+      }
+    },
+    "argx": {
+      "version": "3.0.2",
+      "resolved": "https://registry.npmjs.org/argx/-/argx-3.0.2.tgz",
+      "integrity": "sha1-G6qI0WCrb1Rrbs4OB1lswrs0JKk=",
+      "requires": {
+        "iftype": "^3.0.0"
+      }
+    },
+    "arrayreduce": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/arrayreduce/-/arrayreduce-2.1.0.tgz",
+      "integrity": "sha1-6lg24whra1S3pWK0eez4BpyU0Qo="
+    },
+    "asfs": {
+      "version": "1.2.3",
+      "resolved": "https://registry.npmjs.org/asfs/-/asfs-1.2.3.tgz",
+      "integrity": "sha1-VnE2PoPEOQjvFaJciBkcYbUICDM=",
+      "requires": {
+        "aglob": "^2.0.1",
+        "co": "^4.6.0",
+        "filecopy": "^3.0.0",
+        "mkdirp": "^0.5.1"
+      }
+    },
+    "askconfig": {
+      "version": "3.0.5",
+      "resolved": "https://registry.npmjs.org/askconfig/-/askconfig-3.0.5.tgz",
+      "integrity": "sha1-PwcA078U8w44yAH57QDC2Wgqne0=",
+      "requires": {
+        "argx": "^3.0.0",
+        "cli-color": "^1.1.0",
+        "co": "^4.6.0",
+        "objnest": "^3.0.6"
+      }
+    },
+    "asleep": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/asleep/-/asleep-1.0.3.tgz",
+      "integrity": "sha1-oQTiSsIpVjxCXk6n51tXihnuIY4="
+    },
+    "async": {
+      "version": "2.6.3",
+      "resolved": "https://registry.npmjs.org/async/-/async-2.6.3.tgz",
+      "integrity": "sha512-zflvls11DCy+dQWzTW2dzuilv8Z5X/pjfmZOWba6TNIVDm+2UDaJmXSOXlasHKfNBs8oo3M0aT50fDEWfKZjXg==",
+      "requires": {
+        "lodash": "^4.17.14"
+      }
+    },
+    "babel-runtime": {
+      "version": "6.26.0",
+      "resolved": "https://registry.npmjs.org/babel-runtime/-/babel-runtime-6.26.0.tgz",
+      "integrity": "sha1-llxwWGaOgrVde/4E/yM3vItWR/4=",
+      "requires": {
+        "core-js": "^2.4.0",
+        "regenerator-runtime": "^0.11.0"
+      }
+    },
+    "balanced-match": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz",
+      "integrity": "sha1-ibTRmasr7kneFk6gK4nORi1xt2c="
+    },
+    "brace-expansion": {
+      "version": "1.1.11",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz",
+      "integrity": "sha512-iCuPHDFgrHX7H2vEI/5xpz07zSHB00TpugqhmYtVmMO6518mCuRMoOYFldEBl0g187ufozdaHgWKcYFb61qGiA==",
+      "requires": {
+        "balanced-match": "^1.0.0",
+        "concat-map": "0.0.1"
+      }
+    },
+    "cipherjson": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/cipherjson/-/cipherjson-2.1.0.tgz",
+      "integrity": "sha1-NxWib+PkEKL2W9jQw3jnzdei0eI=",
+      "requires": {
+        "abind": "^1.0.0",
+        "argx": "^3.0.2",
+        "async": "^2.1.4",
+        "objnest": "^3.0.9",
+        "writeout": "^2.1.0"
+      }
+    },
+    "cli-color": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/cli-color/-/cli-color-1.4.0.tgz",
+      "integrity": "sha512-xu6RvQqqrWEo6MPR1eixqGPywhYBHRs653F9jfXB2Hx4jdM/3WxiNE1vppRmxtMIfl16SFYTpYlrnqH/HsK/2w==",
+      "requires": {
+        "ansi-regex": "^2.1.1",
+        "d": "1",
+        "es5-ext": "^0.10.46",
+        "es6-iterator": "^2.0.3",
+        "memoizee": "^0.4.14",
+        "timers-ext": "^0.1.5"
+      }
+    },
+    "co": {
+      "version": "4.6.0",
+      "resolved": "https://registry.npmjs.org/co/-/co-4.6.0.tgz",
+      "integrity": "sha1-bqa989hTrlTMuOR7+gvz+QMfsYQ="
+    },
+    "colorprint": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/colorprint/-/colorprint-4.1.0.tgz",
+      "integrity": "sha1-BSroTEv9Ed7l7xvwfC9iVYT8CYk=",
+      "requires": {
+        "cli-color": "^1.1.0",
+        "commander": "^2.9.0"
+      }
+    },
+    "commander": {
+      "version": "2.20.3",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz",
+      "integrity": "sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ=="
+    },
+    "concat-map": {
+      "version": "0.0.1",
+      "resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz",
+      "integrity": "sha1-2Klr13/Wjfd5OnMDajug1UBdR3s="
+    },
+    "core-js": {
+      "version": "2.6.11",
+      "resolved": "https://registry.npmjs.org/core-js/-/core-js-2.6.11.tgz",
+      "integrity": "sha512-5wjnpaT/3dV+XB4borEsnAYQchn00XSgTAWKDkEqv+K8KevjbzmofK6hfJ9TZIlpj2N0xQpazy7PiRQiWHqzWg=="
+    },
+    "d": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/d/-/d-1.0.1.tgz",
+      "integrity": "sha512-m62ShEObQ39CfralilEQRjH6oAMtNCV1xJyEx5LpRYUVN+EviphDgUc/F3hnYbADmkiNs67Y+3ylmlG7Lnu+FA==",
+      "requires": {
+        "es5-ext": "^0.10.50",
+        "type": "^1.0.1"
+      }
+    },
+    "es5-ext": {
+      "version": "0.10.53",
+      "resolved": "https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.53.tgz",
+      "integrity": "sha512-Xs2Stw6NiNHWypzRTY1MtaG/uJlwCk8kH81920ma8mvN8Xq1gsfhZvpkImLQArw8AHnv8MT2I45J3c0R8slE+Q==",
+      "requires": {
+        "es6-iterator": "~2.0.3",
+        "es6-symbol": "~3.1.3",
+        "next-tick": "~1.0.0"
+      }
+    },
+    "es6-iterator": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/es6-iterator/-/es6-iterator-2.0.3.tgz",
+      "integrity": "sha1-p96IkUGgWpSwhUQDstCg+/qY87c=",
+      "requires": {
+        "d": "1",
+        "es5-ext": "^0.10.35",
+        "es6-symbol": "^3.1.1"
+      }
+    },
+    "es6-symbol": {
+      "version": "3.1.3",
+      "resolved": "https://registry.npmjs.org/es6-symbol/-/es6-symbol-3.1.3.tgz",
+      "integrity": "sha512-NJ6Yn3FuDinBaBRWl/q5X/s4koRHBrgKAu+yGI6JCBeiu3qrcbJhwT2GeR/EXVfylRk8dpQVJoLEFhK+Mu31NA==",
+      "requires": {
+        "d": "^1.0.1",
+        "ext": "^1.1.2"
+      }
+    },
+    "es6-weak-map": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/es6-weak-map/-/es6-weak-map-2.0.3.tgz",
+      "integrity": "sha512-p5um32HOTO1kP+w7PRnB+5lQ43Z6muuMuIMffvDN8ZB4GcnjLBV6zGStpbASIMk4DCAvEaamhe2zhyCb/QXXsA==",
+      "requires": {
+        "d": "1",
+        "es5-ext": "^0.10.46",
+        "es6-iterator": "^2.0.3",
+        "es6-symbol": "^3.1.1"
+      }
+    },
+    "event-emitter": {
+      "version": "0.3.5",
+      "resolved": "https://registry.npmjs.org/event-emitter/-/event-emitter-0.3.5.tgz",
+      "integrity": "sha1-34xp7vFkeSPHFXuc6DhAYQsCzDk=",
+      "requires": {
+        "d": "1",
+        "es5-ext": "~0.10.14"
+      }
+    },
+    "execcli": {
+      "version": "4.0.11",
+      "resolved": "https://registry.npmjs.org/execcli/-/execcli-4.0.11.tgz",
+      "integrity": "sha1-PbmCCoP6EkK5v7UNEVUdBQWSfUM=",
+      "requires": {
+        "argx": "^3.0.0",
+        "arrayreduce": "^2.1.0",
+        "babel-runtime": "^6.23.0",
+        "findout": "^2.0.1",
+        "hasbin": "^1.2.3",
+        "stringcase": "^3.2.1"
+      }
+    },
+    "ext": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/ext/-/ext-1.4.0.tgz",
+      "integrity": "sha512-Key5NIsUxdqKg3vIsdw9dSuXpPCQ297y6wBjL30edxwPgt2E44WcWBZey/ZvUc6sERLTxKdyCu4gZFmUbk1Q7A==",
+      "requires": {
+        "type": "^2.0.0"
+      },
+      "dependencies": {
+        "type": {
+          "version": "2.1.0",
+          "resolved": "https://registry.npmjs.org/type/-/type-2.1.0.tgz",
+          "integrity": "sha512-G9absDWvhAWCV2gmF1zKud3OyC61nZDwWvBL2DApaVFogI07CprggiQAOOjvp2NRjYWFzPyu7vwtDrQFq8jeSA=="
+        }
+      }
+    },
+    "extend": {
+      "version": "3.0.2",
+      "resolved": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz",
+      "integrity": "sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g=="
+    },
+    "filecopy": {
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/filecopy/-/filecopy-3.0.1.tgz",
+      "integrity": "sha1-hqX4pylo7K6qW7suPoEKh3zUmWY=",
+      "requires": {
+        "aglob": "^2.0.1",
+        "argx": "^3.0.0",
+        "co": "^4.6.0",
+        "mkdirp": "^0.5.1"
+      }
+    },
+    "filedel": {
+      "version": "4.1.2",
+      "resolved": "https://registry.npmjs.org/filedel/-/filedel-4.1.2.tgz",
+      "integrity": "sha512-GmCi+mLI3DgGFde0W3vsZshRtSBK5BxTkrVLioGLoARBY5Ef42anaXP1PmQTI6AI/TVoM8Mkw5mBisGy5MPlTA==",
+      "requires": {
+        "aglob": "^3.0.2",
+        "argx": "^4.0.4",
+        "asfs": "^2.3.0",
+        "rimraf": "^3.0.2"
+      },
+      "dependencies": {
+        "aglob": {
+          "version": "3.0.2",
+          "resolved": "https://registry.npmjs.org/aglob/-/aglob-3.0.2.tgz",
+          "integrity": "sha512-0khk6p36zn0NbYAMtNov7o4VQpWOZChVt+cQHIEb0KSqxNn5hvGU2+pPI5+6vydUhe8W3ZxREMcpkAmMEi8p9Q==",
+          "requires": {
+            "glob": "^7.1.3"
+          }
+        },
+        "argx": {
+          "version": "4.0.4",
+          "resolved": "https://registry.npmjs.org/argx/-/argx-4.0.4.tgz",
+          "integrity": "sha512-XLWeRTNBJRzQkbMweLIxdtnvpE7iYUBraPwrIJX57FjL4D1RHLMJRM1AyEP6KZHgvjW7TSnxF8MpGic7YdTGOA==",
+          "requires": {
+            "iftype": "^4.0.9"
+          }
+        },
+        "asfs": {
+          "version": "2.3.0",
+          "resolved": "https://registry.npmjs.org/asfs/-/asfs-2.3.0.tgz",
+          "integrity": "sha512-mPfLlrZuoDFjR0Cd9ructfhJ4Cq0OH3CNVaO2RjMk+I9Utfb28sxFdnAVPByziTzTh2jgd7wX7Wy+8LIBjz2nw==",
+          "requires": {
+            "aglob": "^3.0.1",
+            "filecopy": "^4.1.0",
+            "mkdirp": "^1.0.3"
+          }
+        },
+        "filecopy": {
+          "version": "4.1.0",
+          "resolved": "https://registry.npmjs.org/filecopy/-/filecopy-4.1.0.tgz",
+          "integrity": "sha512-1K2VHl+WVzODCwcZzmSrNCUIYTM37F4/yny0bI05bN3PdQHZjfszsW2L2yia7/Xb1B854f6XrA3ZTv0KjBmogA==",
+          "requires": {
+            "aglob": "^3.0.2",
+            "argx": "^4.0.4",
+            "mkdirp": "^1.0.3"
+          }
+        },
+        "iftype": {
+          "version": "4.0.9",
+          "resolved": "https://registry.npmjs.org/iftype/-/iftype-4.0.9.tgz",
+          "integrity": "sha512-01Klo+04dkDzY193D1GVfOdQzmpqaYFJTAlZKRztkT/BOaU7sSnvxGimSln+7DMqLUP4tpDTNFgxqVPLYZVypA=="
+        },
+        "mkdirp": {
+          "version": "1.0.4",
+          "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz",
+          "integrity": "sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw=="
+        }
+      }
+    },
+    "findout": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/findout/-/findout-2.1.2.tgz",
+      "integrity": "sha1-eEFc9z7Z4nwC4pqbxETn0ir2AQU=",
+      "requires": {
+        "babel-runtime": "^6.11.6",
+        "co": "^4.6.0"
+      }
+    },
+    "fmtjson": {
+      "version": "3.0.7",
+      "resolved": "https://registry.npmjs.org/fmtjson/-/fmtjson-3.0.7.tgz",
+      "integrity": "sha1-eGM+7hRk33CotIRWfN7rS+j/08w=",
+      "requires": {
+        "aglob": "^1.0.2",
+        "argx": "^3.0.1",
+        "asfs": "^1.0.5",
+        "co": "^4.6.0",
+        "writeout": "^2.0.7"
+      },
+      "dependencies": {
+        "aglob": {
+          "version": "1.1.1",
+          "resolved": "https://registry.npmjs.org/aglob/-/aglob-1.1.1.tgz",
+          "integrity": "sha1-+VJpKq29nVKHdekUtpXgdjH58Io=",
+          "requires": {
+            "babel-runtime": "^6.11.6",
+            "co": "^4.6.0",
+            "glob": "^7.0.5"
+          }
+        }
+      }
+    },
+    "fs.realpath": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz",
+      "integrity": "sha1-FQStJSMVjKpA20onh8sBQRmU6k8="
+    },
+    "glob": {
+      "version": "7.1.6",
+      "resolved": "https://registry.npmjs.org/glob/-/glob-7.1.6.tgz",
+      "integrity": "sha512-LwaxwyZ72Lk7vZINtNNrywX0ZuLyStrdDtabefZKAY5ZGJhVtgdznluResxNmPitE0SAO+O26sWTHeKSI2wMBA==",
+      "requires": {
+        "fs.realpath": "^1.0.0",
+        "inflight": "^1.0.4",
+        "inherits": "2",
+        "minimatch": "^3.0.4",
+        "once": "^1.3.0",
+        "path-is-absolute": "^1.0.0"
+      }
+    },
+    "hasbin": {
+      "version": "1.2.3",
+      "resolved": "https://registry.npmjs.org/hasbin/-/hasbin-1.2.3.tgz",
+      "integrity": "sha1-eMWSaJPIAhXCtWiuH9P8q3omlrA=",
+      "requires": {
+        "async": "~1.5"
+      },
+      "dependencies": {
+        "async": {
+          "version": "1.5.2",
+          "resolved": "https://registry.npmjs.org/async/-/async-1.5.2.tgz",
+          "integrity": "sha1-7GphrlZIDAw8skHJVhjiCJL5Zyo="
+        }
+      }
+    },
+    "iftype": {
+      "version": "3.0.2",
+      "resolved": "https://registry.npmjs.org/iftype/-/iftype-3.0.2.tgz",
+      "integrity": "sha1-V3EmHmT7NaaA0yDTZox1Kfklq3Q=",
+      "requires": {
+        "babel-runtime": "^6.11.6"
+      }
+    },
+    "inflight": {
+      "version": "1.0.6",
+      "resolved": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz",
+      "integrity": "sha1-Sb1jMdfQLQwJvJEKEHW6gWW1bfk=",
+      "requires": {
+        "once": "^1.3.0",
+        "wrappy": "1"
+      }
+    },
+    "inherits": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
+      "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ=="
+    },
+    "is-promise": {
+      "version": "2.2.2",
+      "resolved": "https://registry.npmjs.org/is-promise/-/is-promise-2.2.2.tgz",
+      "integrity": "sha512-+lP4/6lKUBfQjZ2pdxThZvLUAafmZb8OAxFb8XXtiQmS35INgr85hdOGoEs124ez1FCnZJt6jau/T+alh58QFQ=="
+    },
+    "lodash": {
+      "version": "4.17.20",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz",
+      "integrity": "sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA=="
+    },
+    "lru-queue": {
+      "version": "0.1.0",
+      "resolved": "https://registry.npmjs.org/lru-queue/-/lru-queue-0.1.0.tgz",
+      "integrity": "sha1-Jzi9nw089PhEkMVzbEhpmsYyzaM=",
+      "requires": {
+        "es5-ext": "~0.10.2"
+      }
+    },
+    "memoizee": {
+      "version": "0.4.14",
+      "resolved": "https://registry.npmjs.org/memoizee/-/memoizee-0.4.14.tgz",
+      "integrity": "sha512-/SWFvWegAIYAO4NQMpcX+gcra0yEZu4OntmUdrBaWrJncxOqAziGFlHxc7yjKVK2uu3lpPW27P27wkR82wA8mg==",
+      "requires": {
+        "d": "1",
+        "es5-ext": "^0.10.45",
+        "es6-weak-map": "^2.0.2",
+        "event-emitter": "^0.3.5",
+        "is-promise": "^2.1",
+        "lru-queue": "0.1",
+        "next-tick": "1",
+        "timers-ext": "^0.1.5"
+      }
+    },
+    "minimatch": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz",
+      "integrity": "sha512-yJHVQEhyqPLUTgt9B83PXu6W3rx4MvvHvSUvToogpwoGDOUQ+yDrR0HRot+yOCdCO7u4hX3pWft6kWBBcqh0UA==",
+      "requires": {
+        "brace-expansion": "^1.1.7"
+      }
+    },
+    "minimist": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz",
+      "integrity": "sha512-FM9nNUYrRBAELZQT3xeZQ7fmMOBg6nWNmJKTcgsJeaLstP/UODVpGsr5OhXhhXg6f+qtJ8uiZ+PUxkDWcgIXLw=="
+    },
+    "mkdirp": {
+      "version": "0.5.5",
+      "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.5.tgz",
+      "integrity": "sha512-NKmAlESf6jMGym1++R0Ra7wvhV+wFW63FaSOFPwRahvea0gMUcGUhVeAg/0BC0wiv9ih5NYPB1Wn1UEI1/L+xQ==",
+      "requires": {
+        "minimist": "^1.2.5"
+      }
+    },
+    "next-tick": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/next-tick/-/next-tick-1.0.0.tgz",
+      "integrity": "sha1-yobR/ogoFpsBICCOPchCS524NCw="
+    },
+    "objnest": {
+      "version": "3.0.9",
+      "resolved": "https://registry.npmjs.org/objnest/-/objnest-3.0.9.tgz",
+      "integrity": "sha1-yBHtOVXPRgO6Ncx+A0j+oZUbk5U=",
+      "requires": {
+        "abind": "^1.0.0",
+        "extend": "^3.0.0"
+      }
+    },
+    "once": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
+      "integrity": "sha1-WDsap3WWHUsROsF9nFC6753Xa9E=",
+      "requires": {
+        "wrappy": "1"
+      }
+    },
+    "path-is-absolute": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz",
+      "integrity": "sha1-F0uSaHNVNP+8es5r9TpanhtcX18="
+    },
+    "regenerator-runtime": {
+      "version": "0.11.1",
+      "resolved": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.11.1.tgz",
+      "integrity": "sha512-MguG95oij0fC3QV3URf4V2SDYGJhJnJGqvIIgdECeODCT98wSWDAJ94SSuVpYQUoTcGUIL6L4yNB7j1DFFHSBg=="
+    },
+    "rimraf": {
+      "version": "3.0.2",
+      "resolved": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz",
+      "integrity": "sha512-JZkJMZkAGFFPP2YqXZXPbMlMBgsxzE8ILs4lMIX/2o0L9UBw9O/Y3o6wFw/i9YLapcUJWwqbi3kdxIPdC62TIA==",
+      "requires": {
+        "glob": "^7.1.3"
+      }
+    },
+    "stringcase": {
+      "version": "3.2.1",
+      "resolved": "https://registry.npmjs.org/stringcase/-/stringcase-3.2.1.tgz",
+      "integrity": "sha1-iTRRYwSXZM92q89c4Ctkv7ZHLlY="
+    },
+    "timers-ext": {
+      "version": "0.1.7",
+      "resolved": "https://registry.npmjs.org/timers-ext/-/timers-ext-0.1.7.tgz",
+      "integrity": "sha512-b85NUNzTSdodShTIbky6ZF02e8STtVVfD+fu4aXXShEELpozH+bCpJLYMPZbsABN2wDH7fJpqIoXxJpzbf0NqQ==",
+      "requires": {
+        "es5-ext": "~0.10.46",
+        "next-tick": "1"
+      }
+    },
+    "type": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/type/-/type-1.2.0.tgz",
+      "integrity": "sha512-+5nt5AAniqsCnu2cEQQdpzCAh33kVx8n0VoFidKpB1dVVLAN/F+bgVOqOJqOnEnrhp222clB5p3vUlD+1QAnfg=="
+    },
+    "wrappy": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
+      "integrity": "sha1-tSQ9jz7BqjXxNkYFvA0QNuMKtp8="
+    },
+    "writeout": {
+      "version": "2.3.4",
+      "resolved": "https://registry.npmjs.org/writeout/-/writeout-2.3.4.tgz",
+      "integrity": "sha512-8EO+2MdDKvyhVGGA7hXtCOWIyfpzi1PAkmYTFUhq3/duskEDYzcDvZTiYgVV/CectCRSelGdIW++ym58uNOuYw==",
+      "requires": {
+        "argx": "^4.0.4",
+        "asleep": "^1.0.3",
+        "filedel": "^4.1.2",
+        "mkdirp": "^1.0.4"
+      },
+      "dependencies": {
+        "argx": {
+          "version": "4.0.4",
+          "resolved": "https://registry.npmjs.org/argx/-/argx-4.0.4.tgz",
+          "integrity": "sha512-XLWeRTNBJRzQkbMweLIxdtnvpE7iYUBraPwrIJX57FjL4D1RHLMJRM1AyEP6KZHgvjW7TSnxF8MpGic7YdTGOA==",
+          "requires": {
+            "iftype": "^4.0.9"
+          }
+        },
+        "iftype": {
+          "version": "4.0.9",
+          "resolved": "https://registry.npmjs.org/iftype/-/iftype-4.0.9.tgz",
+          "integrity": "sha512-01Klo+04dkDzY193D1GVfOdQzmpqaYFJTAlZKRztkT/BOaU7sSnvxGimSln+7DMqLUP4tpDTNFgxqVPLYZVypA=="
+        },
+        "mkdirp": {
+          "version": "1.0.4",
+          "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz",
+          "integrity": "sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw=="
+        }
+      }
+    }
+  }
+}