papers 2.2.0 → 2.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 8920678dc22b3cb5e808318218cc9173f2fa9b12
-  data.tar.gz: e6cf43b697b50fb7076460b98c91275b62e9bc9a
+  metadata.gz: 04a56da48ddc413020f2fcd656e2db6e0e3b0ba8
+  data.tar.gz: 94f31684ae3f21f18b919cefbb167f024045f5ad
 SHA512:
-  metadata.gz: 7ffdda6169b1b528c35468acccce5c1a343008cdb057dd7a0c0408700558a7f0f400cf9491c9372e7f840e9f1b02ce09adb7429f1522c4203d11f7d83e504150
-  data.tar.gz: fea0e35cfe2e43700cabd46b8bd5c820d7ead96c3bc1efb7a48380d681bc844ffa9efe701c5df7aea5817d7ac854478e49f3b260086dd0129c88b402caa62f4c
+  metadata.gz: e70b63d4c27b79bbc19a4144664738a933fbe31301d3a3c335bf5aae3e0bdae5ae6227034a41203b4cbb9772959b9977b66e3f31d71748966d15203c78520009
+  data.tar.gz: 5a3a99002c51bc3f0529d6593e5193dd005d495e6afa4cf1e5f99dc00eee7f569f70622bc52de5be032d087d08a2b90c01ff1d0086580fddbf5493bdfd20cc5a

data/CHANGELOG.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## 2.3.0
+* Add `config.ignore_npm_dev_dependencies` option to not apply validation to npm devDepdency modules. This is useful if you don't need to consider packages that aren't use in production.
+
 ## 2.2.0
 
 * Fix empty npm package name bug. The name of an npm package would be blank when its version was,

data/README.md

@@ -102,6 +102,9 @@ Papers.configure do |config|
   # Configures Papers to validate licenses for NPM dependencies. Defaults to false.
   config.validate_npm_packages = false
 
+  # Configured Papers to ignore NPM dev dependencies. Defaults to false.
+  config.ignore_npm_dev_dependencies = false
+
   # Configures where Papers should look for the package.json file. Defaults to:
   # package.json in the root directory of the project
   config.npm_package_json_path = File.join(Dir.pwd, 'package.json')

data/lib/papers/configuration.rb

@@ -9,6 +9,7 @@ module Papers
     attr_accessor :validate_javascript
     attr_accessor :validate_bower_components
     attr_accessor :validate_npm_packages
+    attr_accessor :ignore_npm_dev_dependencies
 
     attr_accessor :javascript_paths
     attr_accessor :whitelist_javascript_paths
@@ -37,7 +38,7 @@ module Papers
       @validate_javascript       = true
       @validate_bower_components = false
       @validate_npm_packages = false
-
+      @ignore_npm_dev_dependencies = false
 
       @javascript_paths = [
         File.join(Dir.pwd, 'app',    'assets', 'javascripts'),
@@ -67,5 +68,9 @@ module Papers
       !!@validate_npm_packages
     end
 
+    def ignore_npm_dev_dependencies?
+      !!@ignore_npm_dev_dependencies
+    end
+
   end
 end

data/lib/papers/dependency_specification/npm_package.rb

@@ -7,7 +7,8 @@ module Papers
     end
 
     def self.full_introspected_entries
-      packages = (package['dependencies'] || {}).merge((package['devDependencies'] || {}))
+      packages = (package['dependencies'] || {})
+      packages.merge!((package['devDependencies'] || {})) unless Papers.config.ignore_npm_dev_dependencies
       packages.map do |name, version|
         # FIXME: This version cleanup is inadequate for npm version specifiers, which may be git or
         # tarball URLs.

data/lib/papers/version.rb

@@ -1,7 +1,7 @@
 module Papers
   class Version
     MAJOR = 2
-    MINOR = 2
+    MINOR = 3
     PATCH = 0
 
     def self.to_s

data/spec/npm_package_spec.rb

@@ -22,19 +22,28 @@ describe 'NpmPackageSpecification' do
       expect { Papers::NpmPackage.full_introspected_entries }.to raise_error JSON::ParserError
     end
 
-    it 'combines dependencies and devDependencies' do
+    it 'combines dependencies and devDependencies by default' do
       allow(Papers::NpmPackage).to receive(:package).and_return({
         'dependencies'    => { 'prod_package' => '~> 1.2.3' },
         'devDependencies' => {'dev_package' => '~> 1.2.0'}
       })
-
-
       expect(Papers::NpmPackage.full_introspected_entries).to eq([
         { 'name' => 'prod_package', 'version' => '1.2.3' },
         { 'name' => 'dev_package', 'version' => '1.2.0' }
       ])
     end
 
+    it 'does not combine dependencies and devDependencies when ignore_npm_dev_dependencies is true' do
+      allow(Papers::NpmPackage).to receive(:package).and_return({
+        'dependencies'    => { 'prod_package' => '~> 1.2.3' },
+        'devDependencies' => {'dev_package' => '~> 1.2.0'}
+      })
+      allow_any_instance_of(Papers::Configuration).to receive(:ignore_npm_dev_dependencies).and_return(true)
+      expect(Papers::NpmPackage.full_introspected_entries).to eq([
+        { 'name' => 'prod_package', 'version' => '1.2.3' }
+      ])
+    end
+
     it 'returns dependencies when devDependencies is not defined' do
       allow(Papers::NpmPackage).to receive(:package).and_return({
         'dependencies' => { 'npm_package' => '1.2.3' }

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: papers
 version: !ruby/object:Gem::Version
-  version: 2.2.0
+  version: 2.3.0
 platform: ruby
 authors:
 - Ralph Bodenner
@@ -12,7 +12,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-08-10 00:00:00.000000000 Z
+date: 2015-10-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake