@gkiely/safe-install 0.1.6 → 0.1.8

package/README.md

@@ -68,6 +68,12 @@ You can pass npm install args through:
 npm run safe-install left-pad@latest
 ```
 
+You can run npm update through the same command:
+
+```sh
+npm run safe-install -- update
+```
+
 ## What `safe-install` does
 
 `safe-install` runs npm install with scripts blocked, then runs install scripts only for packages listed in

package/dist/index.d.ts

@@ -16,6 +16,9 @@ type PackageLock = {
 type ParsedCommand = {
     kind: "install";
     args: string[];
+} | {
+    kind: "update";
+    args: string[];
 } | {
     kind: "review-deps";
 } | {
@@ -29,8 +32,10 @@ type SafeInstallConfig = {
 export declare function getSafeInstallConfig(pkg: PackageJson): SafeInstallConfig;
 export declare function assertNoBlockedExoticSubdeps(config: SafeInstallConfig, packageLock: PackageLock): void;
 export declare function getInstallArgs(args?: readonly string[]): string[];
+export declare function getUpdateArgs(args?: readonly string[]): string[];
 export declare function parseCommand(args: readonly string[]): ParsedCommand;
 export declare function reviewDepsCommand(): void;
 export declare function installCommand(args?: readonly string[]): void;
+export declare function updateCommand(args?: readonly string[]): void;
 export declare function main(args?: string[]): void;
 export {};

package/dist/index.js

@@ -118,13 +118,20 @@ function run(command, args) {
 export function getInstallArgs(args = []) {
     return ["install", "--ignore-scripts", ...args];
 }
+export function getUpdateArgs(args = []) {
+    return ["update", "--ignore-scripts", ...args];
+}
 export function parseCommand(args) {
     if (args.includes("--help") || args.includes("-h")) {
         return { kind: "help" };
     }
-    if (args[0] === "--" && args[1] === "review-deps") {
+    if ((args[0] === "--" && args[1] === "review-deps") ||
+        args[0] === "review-deps") {
         return { kind: "review-deps" };
     }
+    if (args[0] === "--" && args[1] === "update") {
+        return { kind: "update", args: args.slice(2) };
+    }
     return { kind: "install", args: args.filter((arg) => arg !== "--") };
 }
 function printHelp() {
@@ -135,6 +142,8 @@ Usage:
                         Run npm install with scripts disabled, then rebuild trusted dependencies
   safe-install -- review-deps
                         List dependencies that declare install-time scripts
+  safe-install -- update [npm update args]
+                        Run npm update with scripts disabled, then rebuild trusted dependencies
 `);
 }
 export function reviewDepsCommand() {
@@ -151,10 +160,16 @@ export function reviewDepsCommand() {
     console.log("Review these packages before adding them to trustedDependencies.");
 }
 export function installCommand(args = []) {
+    runPackageManagerThenRebuild(getInstallArgs(args));
+}
+export function updateCommand(args = []) {
+    runPackageManagerThenRebuild(getUpdateArgs(args));
+}
+function runPackageManagerThenRebuild(npmArgs) {
     const pkg = readPackageJson();
     const config = getSafeInstallConfig(pkg);
     const trustedDependencies = getTrustedDependencies(pkg);
-    run("npm", getInstallArgs(args));
+    run("npm", [...npmArgs]);
     if (existsSync("package-lock.json")) {
         assertNoBlockedExoticSubdeps(config, readPackageLock());
     }
@@ -172,6 +187,10 @@ export function main(args = process.argv.slice(2)) {
         reviewDepsCommand();
         return;
     }
+    if (command.kind === "update") {
+        updateCommand(command.args);
+        return;
+    }
     installCommand(command.args);
 }
 if (process.argv[1] && realpathSync(fileURLToPath(import.meta.url)) === realpathSync(process.argv[1])) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gkiely/safe-install",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "description": "Run npm installs with lifecycle scripts disabled, then rebuild explicitly trusted dependencies.",
   "author": "Grant Kiely <grant@youneedawiki.com>",
   "license": "MIT",
@@ -47,7 +47,7 @@
     "prepublishOnly": "npm run typecheck && npm test",
     "release": "npm run typecheck && npm test && npm version patch && npm publish --access public && git push --follow-tags",
     "safe-install": "node dist/index.js",
-    "test": "node --test",
+    "test": "npm run build && node --test",
     "typecheck": "tsc --noEmit"
   },
   "devDependencies": {