@pnpm/lockfile.verification 1001.0.5 → 1001.1.0

package/lib/allProjectsAreUpToDate.js

@@ -4,15 +4,14 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.allProjectsAreUpToDate = allProjectsAreUpToDate;
-const lockfile_utils_1 = require("@pnpm/lockfile.utils");
 const types_1 = require("@pnpm/types");
 const p_every_1 = __importDefault(require("p-every"));
-const any_1 = __importDefault(require("ramda/src/any"));
 const isEmpty_1 = __importDefault(require("ramda/src/isEmpty"));
 const allCatalogsAreUpToDate_1 = require("./allCatalogsAreUpToDate");
 const getWorkspacePackagesByDirectory_1 = require("./getWorkspacePackagesByDirectory");
 const linkedPackagesAreUpToDate_1 = require("./linkedPackagesAreUpToDate");
 const satisfiesPackageManifest_1 = require("./satisfiesPackageManifest");
+const localTarballDepsAreUpToDate_1 = require("./localTarballDepsAreUpToDate");
 async function allProjectsAreUpToDate(projects, opts) {
     // Projects may declare dependencies using catalog protocol specifiers. If the
     // catalog config definitions are edited by users, projects using them are out
@@ -32,24 +31,25 @@ async function allProjectsAreUpToDate(projects, opts) {
         lockfilePackages: opts.wantedLockfile.packages,
         lockfileDir: opts.lockfileDir,
     });
-    return (0, p_every_1.default)(projects, (project) => {
+    const _localTarballDepsAreUpToDate = localTarballDepsAreUpToDate_1.localTarballDepsAreUpToDate.bind(null, {
+        fileIntegrityCache: new Map(),
+        lockfilePackages: opts.wantedLockfile.packages,
+        lockfileDir: opts.lockfileDir,
+    });
+    return (0, p_every_1.default)(projects, async (project) => {
         const importer = opts.wantedLockfile.importers[project.id];
         if (importer == null) {
             return types_1.DEPENDENCIES_FIELDS.every((depType) => project.manifest[depType] == null || (0, isEmpty_1.default)(project.manifest[depType]));
         }
+        const projectInfo = {
+            dir: project.rootDir,
+            manifest: project.manifest,
+            snapshot: importer,
+        };
         return importer != null &&
-            !hasLocalTarballDepsInRoot(importer) &&
             _satisfiesPackageManifest(importer, project.manifest).satisfies &&
-            _linkedPackagesAreUpToDate({
-                dir: project.rootDir,
-                manifest: project.manifest,
-                snapshot: importer,
-            });
+            (await _localTarballDepsAreUpToDate(projectInfo)) &&
+            (_linkedPackagesAreUpToDate(projectInfo));
     });
 }
-function hasLocalTarballDepsInRoot(importer) {
-    return (0, any_1.default)(lockfile_utils_1.refIsLocalTarball, Object.values(importer.dependencies ?? {})) ||
-        (0, any_1.default)(lockfile_utils_1.refIsLocalTarball, Object.values(importer.devDependencies ?? {})) ||
-        (0, any_1.default)(lockfile_utils_1.refIsLocalTarball, Object.values(importer.optionalDependencies ?? {}));
-}
 //# sourceMappingURL=allProjectsAreUpToDate.js.map

package/lib/allProjectsAreUpToDate.js.map

@@ -1 +1 @@
-{"version":3,"file":"allProjectsAreUpToDate.js","sourceRoot":"","sources":["../src/allProjectsAreUpToDate.ts"],"names":[],"mappings":";;;;;AAiBA,wDA6CC;AAxDD,yDAAwD;AAExD,uCAAiE;AACjE,sDAA4B;AAC5B,wDAA+B;AAC/B,gEAAuC;AACvC,qEAAiE;AACjE,uFAAmF;AACnF,2EAAuE;AACvE,yEAAqE;AAE9D,KAAK,UAAU,sBAAsB,CAC1C,QAAiF,EACjF,IAQC;IAED,8EAA8E;IAC9E,8EAA8E;IAC9E,WAAW;IACX,IAAI,CAAC,IAAA,+CAAsB,EAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAA,iEAA+B,EAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5G,MAAM,yBAAyB,GAAG,mDAAwB,CAAC,IAAI,CAAC,IAAI,EAAE;QACpE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;KACxD,CAAC,CAAA;IACF,MAAM,0BAA0B,GAAG,qDAAyB,CAAC,IAAI,CAAC,IAAI,EAAE;QACtE,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,cAAc;QACd,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ;QAC9C,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC,CAAA;IACF,OAAO,IAAA,iBAAM,EAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC1D,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,OAAO,2BAAmB,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,IAAA,iBAAO,EAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QACxH,CAAC;QACD,OAAO,QAAQ,IAAI,IAAI;YACrB,CAAC,yBAAyB,CAAC,QAAQ,CAAC;YACpC,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,SAAS;YAC/D,0BAA0B,CAAC;gBACzB,GAAG,EAAE,OAAO,CAAC,OAAO;gBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAA;IACN,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAE,QAAyB;IAC3D,OAAO,IAAA,aAAG,EAAC,kCAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QACvE,IAAA,aAAG,EAAC,kCAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;QACrE,IAAA,aAAG,EAAC,kCAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAA;AAC9E,CAAC"}
+{"version":3,"file":"allProjectsAreUpToDate.js","sourceRoot":"","sources":["../src/allProjectsAreUpToDate.ts"],"names":[],"mappings":";;;;;AAeA,wDAqDC;AA9DD,uCAAiE;AACjE,sDAA4B;AAC5B,gEAAuC;AACvC,qEAAiE;AACjE,uFAAmF;AACnF,2EAAuE;AACvE,yEAAqE;AACrE,+EAA2E;AAEpE,KAAK,UAAU,sBAAsB,CAC1C,QAAiF,EACjF,IAQC;IAED,8EAA8E;IAC9E,8EAA8E;IAC9E,WAAW;IACX,IAAI,CAAC,IAAA,+CAAsB,EAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAA,iEAA+B,EAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5G,MAAM,yBAAyB,GAAG,mDAAwB,CAAC,IAAI,CAAC,IAAI,EAAE;QACpE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;KACxD,CAAC,CAAA;IACF,MAAM,0BAA0B,GAAG,qDAAyB,CAAC,IAAI,CAAC,IAAI,EAAE;QACtE,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,cAAc;QACd,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ;QAC9C,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC,CAAA;IACF,MAAM,4BAA4B,GAAG,yDAA2B,CAAC,IAAI,CAAC,IAAI,EAAE;QAC1E,kBAAkB,EAAE,IAAI,GAAG,EAAE;QAC7B,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ;QAC9C,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC,CAAA;IACF,OAAO,IAAA,iBAAM,EAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC1D,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,OAAO,2BAAmB,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,IAAA,iBAAO,EAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QACxH,CAAC;QAED,MAAM,WAAW,GAAG;YAClB,GAAG,EAAE,OAAO,CAAC,OAAO;YACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,QAAQ;SACnB,CAAA;QAED,OAAO,QAAQ,IAAI,IAAI;YACrB,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,SAAS;YAC/D,CAAC,MAAM,4BAA4B,CAAC,WAAW,CAAC,CAAC;YACjD,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/lib/index.d.ts

@@ -1,4 +1,5 @@
 export { allProjectsAreUpToDate } from './allProjectsAreUpToDate';
 export { getWorkspacePackagesByDirectory } from './getWorkspacePackagesByDirectory';
+export { localTarballDepsAreUpToDate } from './localTarballDepsAreUpToDate';
 export { linkedPackagesAreUpToDate } from './linkedPackagesAreUpToDate';
 export { satisfiesPackageManifest } from './satisfiesPackageManifest';

package/lib/index.js

@@ -1,10 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.satisfiesPackageManifest = exports.linkedPackagesAreUpToDate = exports.getWorkspacePackagesByDirectory = exports.allProjectsAreUpToDate = void 0;
+exports.satisfiesPackageManifest = exports.linkedPackagesAreUpToDate = exports.localTarballDepsAreUpToDate = exports.getWorkspacePackagesByDirectory = exports.allProjectsAreUpToDate = void 0;
 var allProjectsAreUpToDate_1 = require("./allProjectsAreUpToDate");
 Object.defineProperty(exports, "allProjectsAreUpToDate", { enumerable: true, get: function () { return allProjectsAreUpToDate_1.allProjectsAreUpToDate; } });
 var getWorkspacePackagesByDirectory_1 = require("./getWorkspacePackagesByDirectory");
 Object.defineProperty(exports, "getWorkspacePackagesByDirectory", { enumerable: true, get: function () { return getWorkspacePackagesByDirectory_1.getWorkspacePackagesByDirectory; } });
+var localTarballDepsAreUpToDate_1 = require("./localTarballDepsAreUpToDate");
+Object.defineProperty(exports, "localTarballDepsAreUpToDate", { enumerable: true, get: function () { return localTarballDepsAreUpToDate_1.localTarballDepsAreUpToDate; } });
 var linkedPackagesAreUpToDate_1 = require("./linkedPackagesAreUpToDate");
 Object.defineProperty(exports, "linkedPackagesAreUpToDate", { enumerable: true, get: function () { return linkedPackagesAreUpToDate_1.linkedPackagesAreUpToDate; } });
 var satisfiesPackageManifest_1 = require("./satisfiesPackageManifest");

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,mEAAiE;AAAxD,gIAAA,sBAAsB,OAAA;AAC/B,qFAAmF;AAA1E,kJAAA,+BAA+B,OAAA;AACxC,yEAAuE;AAA9D,sIAAA,yBAAyB,OAAA;AAClC,uEAAqE;AAA5D,oIAAA,wBAAwB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,mEAAiE;AAAxD,gIAAA,sBAAsB,OAAA;AAC/B,qFAAmF;AAA1E,kJAAA,+BAA+B,OAAA;AACxC,6EAA2E;AAAlE,0IAAA,2BAA2B,OAAA;AACpC,yEAAuE;AAA9D,sIAAA,yBAAyB,OAAA;AAClC,uEAAqE;AAA5D,oIAAA,wBAAwB,OAAA"}

package/lib/localTarballDepsAreUpToDate.d.ts

@@ -0,0 +1,22 @@
+import { type ProjectSnapshot, type PackageSnapshots } from '@pnpm/lockfile.types';
+export interface LocalTarballDepsUpToDateContext {
+    /**
+     * Local cache of local absolute file paths to their integrity. Expected to be
+     * initialized to an empty map by the caller.
+     */
+    readonly fileIntegrityCache: Map<string, Promise<string>>;
+    readonly lockfilePackages?: PackageSnapshots;
+    readonly lockfileDir: string;
+}
+/**
+ * Returns false if a local tarball file has been changed on disk since the last
+ * installation recorded by the project snapshot.
+ *
+ * This function only inspects the project's lockfile snapshot. It does not
+ * inspect the current project manifest. The caller of this function is expected
+ * to handle changes to the project manifest that would cause the corresponding
+ * project snapshot to become out of date.
+ */
+export declare function localTarballDepsAreUpToDate({ fileIntegrityCache, lockfilePackages, lockfileDir, }: LocalTarballDepsUpToDateContext, project: {
+    snapshot: ProjectSnapshot;
+}): Promise<boolean>;

package/lib/localTarballDepsAreUpToDate.js

@@ -0,0 +1,63 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.localTarballDepsAreUpToDate = localTarballDepsAreUpToDate;
+const crypto_hash_1 = require("@pnpm/crypto.hash");
+const dependency_path_1 = require("@pnpm/dependency-path");
+const lockfile_utils_1 = require("@pnpm/lockfile.utils");
+const types_1 = require("@pnpm/types");
+const node_path_1 = __importDefault(require("node:path"));
+const p_every_1 = __importDefault(require("p-every"));
+/**
+ * Returns false if a local tarball file has been changed on disk since the last
+ * installation recorded by the project snapshot.
+ *
+ * This function only inspects the project's lockfile snapshot. It does not
+ * inspect the current project manifest. The caller of this function is expected
+ * to handle changes to the project manifest that would cause the corresponding
+ * project snapshot to become out of date.
+ */
+async function localTarballDepsAreUpToDate({ fileIntegrityCache, lockfilePackages, lockfileDir, }, project) {
+    return (0, p_every_1.default)(types_1.DEPENDENCIES_FIELDS, (depField) => {
+        const lockfileDeps = project.snapshot[depField];
+        // If the lockfile is missing a snapshot for this project's dependencies, we
+        // can return true. The "satisfiesPackageManifest" logic in
+        // "allProjectsAreUpToDate" will catch mismatches between a project's
+        // manifest and snapshot dependencies size.
+        if (lockfileDeps == null) {
+            return true;
+        }
+        return (0, p_every_1.default)(Object.entries(lockfileDeps), async ([depName, ref]) => {
+            if (!(0, lockfile_utils_1.refIsLocalTarball)(ref)) {
+                return true;
+            }
+            const depPath = (0, dependency_path_1.refToRelative)(ref, depName);
+            const packageSnapshot = depPath != null ? lockfilePackages?.[depPath] : null;
+            // If there's no snapshot for this local tarball yet, the project is out
+            // of date and needs to be resolved. This should only happen with a
+            // broken lockfile.
+            if (packageSnapshot == null) {
+                return false;
+            }
+            const filePath = node_path_1.default.join(lockfileDir, ref.slice('file:'.length));
+            const fileIntegrityPromise = fileIntegrityCache.get(filePath) ?? (0, crypto_hash_1.getTarballIntegrity)(filePath);
+            if (!fileIntegrityCache.has(filePath)) {
+                fileIntegrityCache.set(filePath, fileIntegrityPromise);
+            }
+            let fileIntegrity;
+            try {
+                fileIntegrity = await fileIntegrityPromise;
+            }
+            catch (err) {
+                // If there was an error reading the tarball, assume the lockfile is
+                // out of date. The full resolution process will emit a clearer error
+                // later during install.
+                return false;
+            }
+            return packageSnapshot.resolution.integrity === fileIntegrity;
+        });
+    });
+}
+//# sourceMappingURL=localTarballDepsAreUpToDate.js.map

package/lib/localTarballDepsAreUpToDate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localTarballDepsAreUpToDate.js","sourceRoot":"","sources":["../src/localTarballDepsAreUpToDate.ts"],"names":[],"mappings":";;;;;AA+BA,kEA0DC;AAzFD,mDAAuD;AACvD,2DAAqD;AAMrD,yDAAwD;AACxD,uCAAiD;AACjD,0DAA4B;AAC5B,sDAA4B;AAY5B;;;;;;;;GAQG;AACI,KAAK,UAAU,2BAA2B,CAC/C,EACE,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,GACqB,EAClC,OAEC;IAED,OAAO,IAAA,iBAAM,EAAC,2BAAmB,EAAE,CAAC,QAAQ,EAAE,EAAE;QAC9C,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAE/C,4EAA4E;QAC5E,2DAA2D;QAC3D,qEAAqE;QACrE,2CAA2C;QAC3C,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;YACzB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,IAAA,iBAAM,EACX,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAC5B,KAAK,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE;YACvB,IAAI,CAAC,IAAA,kCAAiB,EAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,OAAO,IAAI,CAAA;YACb,CAAC;YAED,MAAM,OAAO,GAAG,IAAA,+BAAa,EAAC,GAAG,EAAE,OAAO,CAAC,CAAA;YAC3C,MAAM,eAAe,GAAG,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YAE5E,wEAAwE;YACxE,mEAAmE;YACnE,mBAAmB;YACnB,IAAI,eAAe,IAAI,IAAI,EAAE,CAAC;gBAC5B,OAAO,KAAK,CAAA;YACd,CAAC;YAED,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;YAElE,MAAM,oBAAoB,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAA,iCAAmB,EAAC,QAAQ,CAAC,CAAA;YAC9F,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAA;YACxD,CAAC;YAED,IAAI,aAAqB,CAAA;YACzB,IAAI,CAAC;gBACH,aAAa,GAAG,MAAM,oBAAoB,CAAA;YAC5C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,oEAAoE;gBACpE,qEAAqE;gBACrE,wBAAwB;gBACxB,OAAO,KAAK,CAAA;YACd,CAAC;YAED,OAAQ,eAAe,CAAC,UAAgC,CAAC,SAAS,KAAK,aAAa,CAAA;QACtF,CAAC,CAAC,CAAA;IACN,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/package.json

@@ -1,55 +1,58 @@
 {
   "name": "@pnpm/lockfile.verification",
-  "version": "1001.0.5",
+  "version": "1001.1.0",
   "description": "Checks a lockfile",
-  "main": "lib/index.js",
-  "types": "lib/index.d.ts",
-  "files": [
-    "lib",
-    "!*.map"
-  ],
-  "engines": {
-    "node": ">=18.12"
-  },
-  "repository": "https://github.com/pnpm/pnpm/blob/main/lockfile/verification",
   "keywords": [
-    "pnpm10",
     "pnpm",
+    "pnpm10",
     "lockfile"
   ],
   "license": "MIT",
+  "funding": "https://opencollective.com/pnpm",
+  "repository": "https://github.com/pnpm/pnpm/blob/main/lockfile/verification",
+  "homepage": "https://github.com/pnpm/pnpm/blob/main/lockfile/verification#readme",
   "bugs": {
     "url": "https://github.com/pnpm/pnpm/issues"
   },
-  "homepage": "https://github.com/pnpm/pnpm/blob/main/lockfile/verification#readme",
-  "peerDependencies": {
-    "@pnpm/logger": ">=5.1.0 <1001.0.0"
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "exports": {
+    ".": "./lib/index.js"
   },
+  "files": [
+    "lib",
+    "!*.map"
+  ],
   "dependencies": {
     "p-every": "^2.0.0",
     "ramda": "npm:@pnpm/ramda@0.28.1",
-    "semver": "^7.6.2",
+    "semver": "^7.7.1",
     "version-selector-type": "^3.0.0",
-    "@pnpm/get-context": "1001.0.5",
     "@pnpm/catalogs.types": "1000.0.0",
-    "@pnpm/dependency-path": "1000.0.2",
-    "@pnpm/lockfile.types": "1001.0.2",
-    "@pnpm/resolver-base": "1000.1.2",
-    "@pnpm/types": "1000.1.1",
-    "@pnpm/read-package-json": "1000.0.3",
-    "@pnpm/lockfile.utils": "1001.0.2"
+    "@pnpm/dependency-path": "1000.0.4",
+    "@pnpm/crypto.hash": "1000.1.0",
+    "@pnpm/get-context": "1001.0.7",
+    "@pnpm/lockfile.types": "1001.0.4",
+    "@pnpm/lockfile.utils": "1001.0.4",
+    "@pnpm/resolver-base": "1000.1.4",
+    "@pnpm/read-package-json": "1000.0.5",
+    "@pnpm/types": "1000.2.1"
+  },
+  "peerDependencies": {
+    "@pnpm/logger": ">=5.1.0 <1001.0.0"
   },
   "devDependencies": {
     "@types/ramda": "0.29.12",
     "@types/semver": "7.5.3",
-    "@pnpm/constants": "1001.1.0",
-    "@pnpm/lockfile.verification": "1001.0.5",
+    "@types/tar-stream": "^2.2.3",
+    "tar-stream": "^2.2.0",
     "@pnpm/logger": "1000.0.0",
-    "@pnpm/prepare": "0.0.111"
+    "@pnpm/prepare": "0.0.113",
+    "@pnpm/constants": "1001.1.0",
+    "@pnpm/lockfile.verification": "1001.1.0"
   },
-  "funding": "https://opencollective.com/pnpm",
-  "exports": {
-    ".": "./lib/index.js"
+  "engines": {
+    "node": ">=18.12"
   },
   "jest": {
     "preset": "@pnpm/jest-config"