@pnpm/crypto.integrity 1100.0.0-0

package/LICENSE

@@ -0,0 +1,22 @@
+The MIT License (MIT)
+
+Copyright (c) 2015-2016 Rico Sta. Cruz and other contributors
+Copyright (c) 2016-2026 Zoltan Kochan and other contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,47 @@
+# @pnpm/crypto.integrity
+
+> Parse and format integrity strings
+
+Utilities for working with single-hash integrity strings in the format `algorithm-base64hash` (e.g., `sha512-abc123...`). This is the format used in pnpm lockfiles.
+
+## Installation
+
+```sh
+pnpm add @pnpm/crypto.integrity
+```
+
+## Usage
+
+```ts
+import { parseIntegrity } from '@pnpm/crypto.integrity'
+
+const { algorithm, hexDigest } = parseIntegrity('sha512-9/u6bgY2+JDlb7vzKD5STG+jIErimDgtYkdB0NxmODJuKCxBvl5CVNiCB3LFUYosWowMf37aGVlKfrU5RT4e1w==')
+
+console.log(algorithm)  // 'sha512'
+console.log(hexDigest)  // 'f7fbba6e0636f890e56fbbf3283e524c6fa3204ae298382d624741d0dc6638326e282c41be5e4254d8820772c5518a2c5a8c0c7f7eda19594a7eb539453e1ed7'
+```
+
+## API
+
+### `parseIntegrity(integrity: string): ParsedIntegrity`
+
+Parses an integrity string and returns the algorithm and hex-encoded digest.
+
+Throws `PnpmError` with code `INVALID_INTEGRITY` if:
+- The format is invalid (must be `algorithm-base64hash`)
+- The base64 hash decodes to an empty digest
+
+### `formatIntegrity(algorithm: string, hexDigest: string): string`
+
+Formats a hex digest into an integrity string.
+
+```ts
+import { formatIntegrity } from '@pnpm/crypto.integrity'
+
+const integrity = formatIntegrity('sha512', 'f7fbba6e...')
+// 'sha512-9/u6bgY2+JDlb7vzKD5STG+...'
+```
+
+## License
+
+MIT

package/lib/index.d.ts

@@ -0,0 +1,13 @@
+export interface ParsedIntegrity {
+    algorithm: string;
+    hexDigest: string;
+}
+/**
+ * Parses an integrity string (e.g., "sha512-base64hash") into its components.
+ * @throws PnpmError if the integrity format is invalid
+ */
+export declare function parseIntegrity(integrity: string): ParsedIntegrity;
+/**
+ * Formats a hex digest into an integrity string (e.g., "sha512-base64hash").
+ */
+export declare function formatIntegrity(algorithm: string, hexDigest: string): string;

package/lib/index.js

@@ -0,0 +1,25 @@
+import { PnpmError } from '@pnpm/error';
+// Matches the integrity format "algo-base64hash"
+const INTEGRITY_REGEX = /^([^-]+)-([a-z0-9+/=]+)$/i;
+/**
+ * Parses an integrity string (e.g., "sha512-base64hash") into its components.
+ * @throws PnpmError if the integrity format is invalid
+ */
+export function parseIntegrity(integrity) {
+    const match = integrity.match(INTEGRITY_REGEX);
+    if (!match) {
+        throw new PnpmError('INVALID_INTEGRITY', `Invalid integrity format: expected "algo-base64hash", got "${integrity}"`);
+    }
+    const hexDigest = Buffer.from(match[2], 'base64').toString('hex');
+    if (hexDigest.length === 0) {
+        throw new PnpmError('INVALID_INTEGRITY', 'Invalid integrity: base64 hash decoded to empty digest');
+    }
+    return { algorithm: match[1], hexDigest };
+}
+/**
+ * Formats a hex digest into an integrity string (e.g., "sha512-base64hash").
+ */
+export function formatIntegrity(algorithm, hexDigest) {
+    return `${algorithm}-${Buffer.from(hexDigest, 'hex').toString('base64')}`;
+}
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAEvC,iDAAiD;AACjD,MAAM,eAAe,GAAG,2BAA2B,CAAA;AAOnD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAE,SAAiB,EAAmB;IAClE,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;IAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,SAAS,CAAC,mBAAmB,EAAE,8DAA8D,SAAS,GAAG,CAAC,CAAA;IACtH,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACjE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,SAAS,CAAC,mBAAmB,EAAE,wDAAwD,CAAC,CAAA;IACpG,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAA;AAAA,CAC1C;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAE,SAAiB,EAAE,SAAiB,EAAU;IAC7E,OAAO,GAAG,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;AAAA,CAC1E"}

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@pnpm/crypto.integrity",
+  "version": "1100.0.0-0",
+  "description": "Parse and validate integrity strings",
+  "keywords": [
+    "pnpm",
+    "pnpm11",
+    "crypto",
+    "integrity"
+  ],
+  "license": "MIT",
+  "funding": "https://opencollective.com/pnpm",
+  "repository": "https://github.com/pnpm/pnpm/tree/main/crypto/integrity",
+  "homepage": "https://github.com/pnpm/pnpm/tree/main/crypto/integrity#readme",
+  "bugs": {
+    "url": "https://github.com/pnpm/pnpm/issues"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "exports": {
+    ".": "./lib/index.js"
+  },
+  "files": [
+    "lib",
+    "!*.map"
+  ],
+  "dependencies": {
+    "@pnpm/error": "1000.0.5"
+  },
+  "devDependencies": {
+    "@pnpm/crypto.integrity": "1100.0.0-0"
+  },
+  "engines": {
+    "node": ">=22.12"
+  },
+  "jest": {
+    "preset": "@pnpm/jest-config"
+  },
+  "scripts": {
+    "lint": "eslint \"src/**/*.ts\" \"test/**/*.ts\"",
+    "_test": "cross-env NODE_OPTIONS=\"$NODE_OPTIONS --experimental-vm-modules\" jest",
+    "test": "pnpm run compile && pnpm run _test",
+    "compile": "tsgo --build && pnpm run lint --fix"
+  }
+}