@nodesecure/scanner 5.2.0 → 5.2.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nodesecure/scanner",
-  "version": "5.2.0",
+  "version": "5.2.1",
   "description": "A package API to run a static analysis of your module's dependencies.",
   "exports": "./index.js",
   "engines": {

package/src/depWalker.js

@@ -268,7 +268,7 @@ export async function depWalker(manifest, options = {}, logger = new Logger()) {
 
       if (dependencies.has(name)) {
         const dep = dependencies.get(name);
-        promisesToWait.push(manifestMetadata(name, version, dep.metadata));
+        promisesToWait.push(manifestMetadata(name, version, dep));
 
         const currVersion = Object.keys(current.versions)[0];
         if (currVersion in dep.versions) {

package/src/npmRegistry.js

@@ -8,12 +8,23 @@ import { packument, packumentVersion } from "@nodesecure/npm-registry-sdk";
 // Import Internal Dependencies
 import { parseAuthor, getLinks } from "./utils/index.js";
 
-export async function manifestMetadata(name, version, metadata) {
+export async function manifestMetadata(
+  name,
+  version,
+  dependency
+) {
   try {
     const pkgVersion = await packumentVersion(name, version);
 
     const integrity = getPackumentVersionIntegrity(pkgVersion);
-    metadata.integrity[version] = integrity;
+    Object.assign(
+      dependency.versions[version],
+      {
+        links: getLinks(pkgVersion)
+      }
+    );
+
+    dependency.metadata.integrity[version] = integrity;
   }
   catch {
     // Ignore

package/src/utils/getLinks.js

@@ -19,12 +19,17 @@ function getVCSRepositoryURL(link) {
   }
 }
 
-export function getLinks(pkg) {
-  const homepage = pkg.homepage || null;
-  const repositoryUrl = pkg.repository?.url || null;
+/**
+ * @param {import("@nodesecure/npm-registry-sdk").PackumentVersion} packumentVersion
+ */
+export function getLinks(
+  packumentVersion
+) {
+  const homepage = packumentVersion.homepage || null;
+  const repositoryUrl = packumentVersion.repository?.url || null;
 
   return {
-    npm: `https://www.npmjs.com/package/${pkg.name}/v/${pkg.version}`,
+    npm: `https://www.npmjs.com/package/${packumentVersion.name}/v/${packumentVersion.version}`,
     homepage,
     repository: getVCSRepositoryURL(homepage) ?? getVCSRepositoryURL(repositoryUrl)
   };