@pnpm/crypto.shasums-file 1000.0.0

package/LICENSE

@@ -0,0 +1,22 @@
+The MIT License (MIT)
+
+Copyright (c) 2015-2016 Rico Sta. Cruz and other contributors
+Copyright (c) 2016-2025 Zoltan Kochan and other contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,13 @@
+# @pnpm/crypto.shasums-file
+
+> Utils for working with shasums files
+
+## Installation
+
+```sh
+pnpm add @pnpm/crypto.shasums-file
+```
+
+## License
+
+MIT

package/lib/index.d.ts

@@ -0,0 +1,3 @@
+import { type FetchFromRegistry } from '@pnpm/fetching-types';
+export declare function fetchShasumsFile(fetch: FetchFromRegistry, shasumsUrl: string, expectedVersionIntegrity?: string): Promise<string>;
+export declare function pickFileChecksumFromShasumsFile(body: string, fileName: string): string;

package/lib/index.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fetchShasumsFile = fetchShasumsFile;
+exports.pickFileChecksumFromShasumsFile = pickFileChecksumFromShasumsFile;
+const crypto_hash_1 = require("@pnpm/crypto.hash");
+const error_1 = require("@pnpm/error");
+async function fetchShasumsFile(fetch, shasumsUrl, expectedVersionIntegrity) {
+    const res = await fetch(shasumsUrl);
+    if (!res.ok) {
+        throw new error_1.PnpmError('NODE_FETCH_INTEGRITY_FAILED', `Failed to fetch integrity file: ${shasumsUrl} (status: ${res.status})`);
+    }
+    const body = await res.text();
+    if (expectedVersionIntegrity) {
+        const actualVersionIntegrity = (0, crypto_hash_1.createHash)(body);
+        if (expectedVersionIntegrity !== actualVersionIntegrity) {
+            throw new error_1.PnpmError('NODE_VERSION_INTEGRITY_MISMATCH', `The integrity of ${shasumsUrl} failed. Expected: ${expectedVersionIntegrity}. Actual: ${actualVersionIntegrity}`);
+        }
+    }
+    return body;
+}
+const SHA256_REGEX = /^[a-f0-9]{64}$/;
+function pickFileChecksumFromShasumsFile(body, fileName) {
+    const line = body.split('\n').find(line => line.trim().endsWith(`  ${fileName}`));
+    if (!line) {
+        throw new error_1.PnpmError('NODE_INTEGRITY_HASH_NOT_FOUND', `SHA-256 hash not found in SHASUMS256.txt for: ${fileName}`);
+    }
+    const [sha256] = line.trim().split(/\s+/);
+    if (!SHA256_REGEX.test(sha256)) {
+        throw new error_1.PnpmError('NODE_MALFORMED_INTEGRITY_HASH', `Malformed SHA-256 for ${fileName}: ${sha256}`);
+    }
+    const buffer = Buffer.from(sha256, 'hex');
+    const base64 = buffer.toString('base64');
+    return `sha256-${base64}`;
+}
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;AAMA,4CAqBC;AAID,0EAqBC;AApDD,mDAA8C;AAC9C,uCAAuC;AAKhC,KAAK,UAAU,gBAAgB,CACpC,KAAwB,EACxB,UAAkB,EAClB,wBAAiC;IAEjC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAA;IACnC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,iBAAS,CACjB,6BAA6B,EAC7B,mCAAmC,UAAU,aAAa,GAAG,CAAC,MAAM,GAAG,CACxE,CAAA;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IAC7B,IAAI,wBAAwB,EAAE,CAAC;QAC7B,MAAM,sBAAsB,GAAG,IAAA,wBAAU,EAAC,IAAI,CAAC,CAAA;QAC/C,IAAI,wBAAwB,KAAK,sBAAsB,EAAE,CAAC;YACxD,MAAM,IAAI,iBAAS,CAAC,iCAAiC,EAAE,oBAAoB,UAAU,sBAAsB,wBAAwB,aAAa,sBAAsB,EAAE,CAAC,CAAA;QAC3K,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,YAAY,GAAG,gBAAgB,CAAA;AAErC,SAAgB,+BAA+B,CAAE,IAAY,EAAE,QAAgB;IAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAA;IAEjF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,iBAAS,CACjB,+BAA+B,EAC/B,iDAAiD,QAAQ,EAAE,CAC5D,CAAA;IACH,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACzC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,iBAAS,CACjB,+BAA+B,EAC/B,yBAAyB,QAAQ,KAAK,MAAM,EAAE,CAC/C,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACxC,OAAO,UAAU,MAAM,EAAE,CAAA;AAC3B,CAAC"}

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "@pnpm/crypto.shasums-file",
+  "version": "1000.0.0",
+  "description": "Utils for working with shasums files",
+  "keywords": [
+    "pnpm",
+    "pnpm10",
+    "crypto",
+    "shasums-file"
+  ],
+  "license": "MIT",
+  "funding": "https://opencollective.com/pnpm",
+  "repository": "https://github.com/pnpm/pnpm/blob/main/crypto/shasums-file",
+  "homepage": "https://github.com/pnpm/pnpm/blob/main/crypto/shasums-file#readme",
+  "bugs": {
+    "url": "https://github.com/pnpm/pnpm/issues"
+  },
+  "type": "commonjs",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "exports": {
+    ".": "./lib/index.js"
+  },
+  "files": [
+    "lib",
+    "!*.map"
+  ],
+  "dependencies": {
+    "@pnpm/crypto.hash": "1000.2.0",
+    "@pnpm/error": "1000.0.3",
+    "@pnpm/fetching-types": "1000.2.0"
+  },
+  "devDependencies": {
+    "@pnpm/crypto.shasums-file": "1000.0.0"
+  },
+  "engines": {
+    "node": ">=18.12"
+  },
+  "jest": {
+    "preset": "@pnpm/jest-config"
+  },
+  "scripts": {
+    "lint": "eslint \"src/**/*.ts\" \"test/**/*.ts\"",
+    "_test": "jest",
+    "test": "pnpm run compile && pnpm run _test",
+    "compile": "tsc --build && pnpm run lint --fix"
+  }
+}