fca-rqzax-remake 0.0.1-security → 8.19.2

package/.config/npm/node_global/lib/node_modules/npm/node_modules/libnpmexec/lib/index.js

@@ -0,0 +1,275 @@
+'use strict'
+
+const { mkdir } = require('fs/promises')
+const Arborist = require('@npmcli/arborist')
+const ciInfo = require('ci-info')
+const crypto = require('crypto')
+const log = require('proc-log')
+const npa = require('npm-package-arg')
+const npmlog = require('npmlog')
+const pacote = require('pacote')
+const read = require('read')
+const semver = require('semver')
+
+const { fileExists, localFileExists } = require('./file-exists.js')
+const getBinFromManifest = require('./get-bin-from-manifest.js')
+const noTTY = require('./no-tty.js')
+const runScript = require('./run-script.js')
+const isWindows = require('./is-windows.js')
+
+const { dirname, resolve } = require('path')
+
+const binPaths = []
+
+// when checking the local tree we look up manifests, cache those results by
+// spec.raw so we don't have to fetch again when we check npxCache
+const manifests = new Map()
+
+const getManifest = async (spec, flatOptions) => {
+  if (!manifests.has(spec.raw)) {
+    const manifest = await pacote.manifest(spec, { ...flatOptions, preferOnline: true })
+    manifests.set(spec.raw, manifest)
+  }
+  return manifests.get(spec.raw)
+}
+
+// Returns the required manifest if the spec is missing from the tree
+// Returns the found node if it is in the tree
+const missingFromTree = async ({ spec, tree, flatOptions }) => {
+  if (spec.registry && spec.type !== 'tag') {
+    // registry spec that is not a specific tag.
+    const nodesBySpec = tree.inventory.query('packageName', spec.name)
+    for (const node of nodesBySpec) {
+      // package requested by name only (or name@*)
+      if (spec.rawSpec === '*') {
+        return { node }
+      }
+      // package requested by specific version
+      if (spec.type === 'version' && (node.pkgid === spec.raw)) {
+        return { node }
+      }
+      // package requested by version range, only remaining registry type
+      if (semver.satisfies(node.package.version, spec.rawSpec)) {
+        return { node }
+      }
+    }
+    const manifest = await getManifest(spec, flatOptions)
+    return { manifest }
+  } else {
+    // non-registry spec, or a specific tag.  Look up manifest and check
+    // resolved to see if it's in the tree.
+    const manifest = await getManifest(spec, flatOptions)
+    if (spec.type === 'directory') {
+      return { manifest }
+    }
+    const nodesByManifest = tree.inventory.query('packageName', manifest.name)
+    for (const node of nodesByManifest) {
+      if (node.package.resolved === manifest._resolved) {
+        // we have a package by the same name and the same resolved destination, nothing to add.
+        return { node }
+      }
+    }
+    return { manifest }
+  }
+}
+
+const exec = async (opts) => {
+  const {
+    args = [],
+    call = '',
+    localBin = resolve('./node_modules/.bin'),
+    locationMsg = undefined,
+    globalBin = '',
+    globalPath,
+    output,
+    // dereference values because we manipulate it later
+    packages: [...packages] = [],
+    path = '.',
+    runPath = '.',
+    scriptShell = isWindows ? process.env.ComSpec || 'cmd' : 'sh',
+    ...flatOptions
+  } = opts
+
+  let yes = opts.yes
+  const run = () => runScript({
+    args,
+    call,
+    flatOptions,
+    locationMsg,
+    output,
+    path,
+    binPaths,
+    runPath,
+    scriptShell,
+  })
+
+  // interactive mode
+  if (!call && !args.length && !packages.length) {
+    return run()
+  }
+
+  let needPackageCommandSwap = (args.length > 0) && (packages.length === 0)
+  // If they asked for a command w/o specifying a package, see if there is a
+  // bin that directly matches that name:
+  // - in the local package itself
+  // - in the local tree
+  // - globally
+  if (needPackageCommandSwap) {
+    let localManifest
+    try {
+      localManifest = await pacote.manifest(path, flatOptions)
+    } catch {
+      // no local package.json? no problem, move one.
+    }
+    if (localManifest?.bin?.[args[0]]) {
+      // we have to install the local package into the npx cache so that its
+      // bin links get set up
+      flatOptions.installLinks = false
+      // args[0] will exist when the package is installed
+      packages.push(path)
+      yes = true
+      needPackageCommandSwap = false
+    } else {
+      const dir = dirname(dirname(localBin))
+      const localBinPath = await localFileExists(dir, args[0], '/')
+      if (localBinPath) {
+        binPaths.push(localBinPath)
+        return await run()
+      } else if (globalPath && await fileExists(`${globalBin}/${args[0]}`)) {
+        binPaths.push(globalBin)
+        return await run()
+      }
+      // We swap out args[0] with the bin from the manifest later
+      packages.push(args[0])
+    }
+  }
+
+  // Resolve any directory specs so that the npx directory is unique to the
+  // resolved directory, not the potentially relative one (i.e. "npx .")
+  for (const i in packages) {
+    const pkg = packages[i]
+    const spec = npa(pkg)
+    if (spec.type === 'directory') {
+      packages[i] = spec.fetchSpec
+    }
+  }
+
+  const localArb = new Arborist({ ...flatOptions, path })
+  const localTree = await localArb.loadActual()
+
+  // Find anything that isn't installed locally
+  const needInstall = []
+  let commandManifest
+  await Promise.all(packages.map(async (pkg, i) => {
+    const spec = npa(pkg, path)
+    const { manifest, node } = await missingFromTree({ spec, tree: localTree, flatOptions })
+    if (manifest) {
+      // Package does not exist in the local tree
+      needInstall.push({ spec, manifest })
+      if (i === 0) {
+        commandManifest = manifest
+      }
+    } else if (i === 0) {
+      // The node.package has enough to look up the bin
+      commandManifest = node.package
+    }
+  }))
+
+  if (needPackageCommandSwap) {
+    const spec = npa(args[0])
+
+    if (spec.type === 'directory') {
+      yes = true
+    }
+
+    args[0] = getBinFromManifest(commandManifest)
+
+    if (needInstall.length > 0 && globalPath) {
+      // See if the package is installed globally, and run the translated bin
+      const globalArb = new Arborist({ ...flatOptions, path: globalPath, global: true })
+      const globalTree = await globalArb.loadActual()
+      const { manifest: globalManifest } =
+        await missingFromTree({ spec, tree: globalTree, flatOptions })
+      if (!globalManifest && await fileExists(`${globalBin}/${args[0]}`)) {
+        binPaths.push(globalBin)
+        return await run()
+      }
+    }
+  }
+
+  const add = []
+  if (needInstall.length > 0) {
+    // Install things to the npx cache, if needed
+    const { npxCache } = flatOptions
+    if (!npxCache) {
+      throw new Error('Must provide a valid npxCache path')
+    }
+    const hash = crypto.createHash('sha512')
+      .update(packages.map(p => {
+        // Keeps the npx directory unique to the resolved directory, not the
+        // potentially relative one (i.e. "npx .")
+        const spec = npa(p)
+        if (spec.type === 'directory') {
+          return spec.fetchSpec
+        }
+        return p
+      }).sort((a, b) => a.localeCompare(b, 'en')).join('\n'))
+      .digest('hex')
+      .slice(0, 16)
+    const installDir = resolve(npxCache, hash)
+    await mkdir(installDir, { recursive: true })
+    const npxArb = new Arborist({
+      ...flatOptions,
+      path: installDir,
+    })
+    const npxTree = await npxArb.loadActual()
+    await Promise.all(needInstall.map(async ({ spec }) => {
+      const { manifest } = await missingFromTree({ spec, tree: npxTree, flatOptions })
+      if (manifest) {
+        // Manifest is not in npxCache, we need to install it there
+        if (!spec.registry) {
+          add.push(manifest._from)
+        } else {
+          add.push(manifest._id)
+        }
+      }
+    }))
+
+    if (add.length) {
+      if (!yes) {
+        // set -n to always say no
+        if (yes === false) {
+          throw new Error('canceled')
+        }
+
+        if (noTTY() || ciInfo.isCI) {
+          log.warn('exec', `The following package${
+            add.length === 1 ? ' was' : 's were'
+          } not found and will be installed: ${
+            add.map((pkg) => pkg.replace(/@$/, '')).join(', ')
+          }`)
+        } else {
+          const addList = add.map(a => `  ${a.replace(/@$/, '')}`)
+            .join('\n') + '\n'
+          const prompt = `Need to install the following packages:\n${
+          addList
+        }Ok to proceed? `
+          npmlog.clearProgress()
+          const confirm = await read({ prompt, default: 'y' })
+          if (confirm.trim().toLowerCase().charAt(0) !== 'y') {
+            throw new Error('canceled')
+          }
+        }
+      }
+      await npxArb.reify({
+        ...flatOptions,
+        add,
+      })
+    }
+    binPaths.push(resolve(installDir, 'node_modules/.bin'))
+  }
+
+  return await run()
+}
+
+module.exports = exec

package/.config/npm/node_global/lib/node_modules/npm/node_modules/libnpmexec/lib/is-windows.js

@@ -0,0 +1 @@
+module.exports = process.platform === 'win32'

package/.config/npm/node_global/lib/node_modules/npm/node_modules/libnpmexec/lib/no-tty.js

@@ -0,0 +1 @@
+module.exports = () => !process.stdin.isTTY

package/.config/npm/node_global/lib/node_modules/npm/node_modules/libnpmexec/lib/run-script.js

@@ -0,0 +1,80 @@
+const chalk = require('chalk')
+const ciInfo = require('ci-info')
+const runScript = require('@npmcli/run-script')
+const readPackageJson = require('read-package-json-fast')
+const npmlog = require('npmlog')
+const log = require('proc-log')
+const noTTY = require('./no-tty.js')
+
+const nocolor = {
+  reset: s => s,
+  bold: s => s,
+  dim: s => s,
+}
+
+const run = async ({
+  args,
+  call,
+  flatOptions,
+  locationMsg,
+  output = () => {},
+  path,
+  binPaths,
+  runPath,
+  scriptShell,
+}) => {
+  // turn list of args into command string
+  const script = call || args.shift() || scriptShell
+  const color = !!flatOptions.color
+  const colorize = color ? chalk : nocolor
+
+  // do the fakey runScript dance
+  // still should work if no package.json in cwd
+  const realPkg = await readPackageJson(`${path}/package.json`)
+    .catch(() => ({}))
+  const pkg = {
+    ...realPkg,
+    scripts: {
+      ...(realPkg.scripts || {}),
+      npx: script,
+    },
+  }
+
+  npmlog.disableProgress()
+
+  try {
+    if (script === scriptShell) {
+      if (!noTTY()) {
+        if (ciInfo.isCI) {
+          return log.warn('exec', 'Interactive mode disabled in CI environment')
+        }
+
+        locationMsg = locationMsg || ` at location:\n${colorize.dim(runPath)}`
+
+        output(`${
+          colorize.reset('\nEntering npm script environment')
+        }${
+          colorize.reset(locationMsg)
+        }${
+          colorize.bold('\nType \'exit\' or ^D when finished\n')
+        }`)
+      }
+    }
+    return await runScript({
+      ...flatOptions,
+      pkg,
+      banner: false,
+      // we always run in cwd, not --prefix
+      path: runPath,
+      binPaths,
+      event: 'npx',
+      args,
+      stdio: 'inherit',
+      scriptShell,
+    })
+  } finally {
+    npmlog.enableProgress()
+  }
+}
+
+module.exports = run

package/.config/npm/node_global/lib/node_modules/npm/node_modules/libnpmexec/package.json

@@ -0,0 +1,81 @@
+{
+  "name": "libnpmexec",
+  "version": "5.0.12",
+  "files": [
+    "bin/",
+    "lib/"
+  ],
+  "main": "lib/index.js",
+  "engines": {
+    "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
+  },
+  "description": "npm exec (npx) programmatic API",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/npm/cli.git",
+    "directory": "workspaces/libnpmexec"
+  },
+  "keywords": [
+    "npm",
+    "npmcli",
+    "libnpm",
+    "cli",
+    "workspaces",
+    "libnpmexec"
+  ],
+  "author": "GitHub Inc.",
+  "contributors": [
+    {
+      "name": "Ruy Adorno",
+      "url": "https://ruyadorno.com",
+      "twitter": "ruyadorno"
+    }
+  ],
+  "license": "ISC",
+  "scripts": {
+    "lint": "eslint \"**/*.js\"",
+    "posttest": "node ../.. run lint",
+    "test": "tap",
+    "snap": "tap",
+    "postlint": "template-oss-check",
+    "lintfix": "node ../.. run lint -- --fix",
+    "template-oss-apply": "template-oss-apply --force"
+  },
+  "tap": {
+    "color": true,
+    "files": "test/*.js",
+    "nyc-arg": [
+      "--exclude",
+      "tap-snapshots/**"
+    ]
+  },
+  "devDependencies": {
+    "@npmcli/eslint-config": "^4.0.0",
+    "@npmcli/mock-registry": "^1.0.0",
+    "@npmcli/template-oss": "4.11.4",
+    "bin-links": "^4.0.1",
+    "just-extend": "^6.2.0",
+    "just-safe-set": "^4.2.1",
+    "minify-registry-metadata": "^3.0.0",
+    "tap": "^16.3.4"
+  },
+  "dependencies": {
+    "@npmcli/arborist": "^6.2.4",
+    "@npmcli/run-script": "^6.0.0",
+    "chalk": "^4.1.0",
+    "ci-info": "^3.7.1",
+    "npm-package-arg": "^10.1.0",
+    "npmlog": "^7.0.1",
+    "pacote": "^15.0.8",
+    "proc-log": "^3.0.0",
+    "read": "^2.0.0",
+    "read-package-json-fast": "^3.0.2",
+    "semver": "^7.3.7",
+    "walk-up-path": "^1.0.0"
+  },
+  "templateOSS": {
+    "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
+    "version": "4.11.4",
+    "content": "../../scripts/template-oss/index.js"
+  }
+}

package/.config/npm/node_global/lib/node_modules/npm/node_modules/libnpmfund/LICENSE

@@ -0,0 +1,15 @@
+The ISC License
+
+Copyright (c) npm Inc.
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

package/.config/npm/node_global/lib/node_modules/npm/node_modules/libnpmfund/README.md

@@ -0,0 +1,131 @@
+# libnpmfund
+
+[![npm version](https://img.shields.io/npm/v/libnpmfund.svg)](https://npm.im/libnpmfund)
+[![license](https://img.shields.io/npm/l/libnpmfund.svg)](https://npm.im/libnpmfund)
+[![CI - libnpmfund](https://github.com/npm/cli/actions/workflows/ci-libnpmfund.yml/badge.svg)](https://github.com/npm/cli/actions/workflows/ci-libnpmfund.yml)
+
+[`libnpmfund`](https://github.com/npm/libnpmfund) is a Node.js library for
+retrieving **funding** information for packages installed using
+[`arborist`](https://github.com/npm/arborist).
+
+## Table of Contents
+
+* [Example](#example)
+* [Install](#install)
+* [Contributing](#contributing)
+* [API](#api)
+* [LICENSE](#license)
+
+## Example
+
+```js
+const { read } = require('libnpmfund')
+
+const fundingInfo = await read()
+console.log(
+  JSON.stringify(fundingInfo, null, 2)
+)
+// => {
+  length: 2,
+  name: 'foo',
+  version: '1.0.0',
+  funding: { url: 'https://example.com' },
+  dependencies: {
+    bar: {
+      version: '1.0.0',
+      funding: { url: 'http://collective.example.com' }
+    }
+  }
+}
+```
+
+## Install
+
+`$ npm install libnpmfund`
+
+### Contributing
+
+The npm team enthusiastically welcomes contributions and project participation!
+There's a bunch of things you can do if you want to contribute! The
+[Contributor Guide](https://github.com/npm/cli/blob/latest/CONTRIBUTING.md)
+outlines the process for community interaction and contribution. Please don't
+hesitate to jump in if you'd like to, or even ask us questions if something
+isn't clear.
+
+All participants and maintainers in this project are expected to follow the
+[npm Code of Conduct](https://www.npmjs.com/policies/conduct), and just
+generally be excellent to each other.
+
+Please refer to the [Changelog](CHANGELOG.md) for project history details, too.
+
+Happy hacking!
+
+### API
+
+##### <a name="fund.read"></a> `> fund.read([opts]) -> Promise<Object>`
+
+Reads **funding** info from a npm install and returns a promise for a
+tree object that only contains packages in which funding info is defined.
+
+Options:
+
+- `countOnly`: Uses the tree-traversal logic from **npm fund** but skips over
+any obj definition and just returns an obj containing `{ length }` - useful for
+things such as printing a `6 packages are looking for funding` msg.
+- `workspaces`: `Array<String>` List of workspaces names to filter for,
+the result will only include a subset of the resulting tree that includes
+only the nodes that are children of the listed workspaces names.
+- `path`, `registry` and more [Arborist](https://github.com/npm/arborist/) options.
+
+##### <a name="fund.readTree"></a> `> fund.readTree(tree, [opts]) -> Promise<Object>`
+
+Reads **funding** info from a given install tree and returns a tree object
+that only contains packages in which funding info is defined.
+
+- `tree`: An [`arborist`](https://github.com/npm/arborist) tree to be used, e.g:
+
+```js
+const Arborist = require('@npmcli/arborist')
+const { readTree } = require('libnpmfund')
+
+const arb = new Arborist({ path: process.cwd() })
+const tree = await arb.loadActual()
+
+return readTree(tree, { countOnly: false })
+```
+
+Options:
+
+- `countOnly`: Uses the tree-traversal logic from **npm fund** but skips over
+any obj definition and just returns an obj containing `{ length }` - useful for
+things such as printing a `6 packages are looking for funding` msg.
+
+##### <a name="fund.normalizeFunding"></a> `> fund.normalizeFunding(funding) -> Object`
+
+From a `funding` `<object|string|array>`, retrieves normalized funding objects
+containing a `url` property.
+
+e.g:
+
+```js
+normalizeFunding('http://example.com')
+// => {
+  url: 'http://example.com'
+}
+```
+
+##### <a name="fund.isValidFunding"></a> `> fund.isValidFunding(funding) -> Boolean`
+
+Returns `<true>` if `funding` is a valid funding object, e.g:
+
+```js
+isValidFunding({ foo: 'not a valid funding obj' })
+// => false
+
+isValidFunding('http://example.com')
+// => true
+```
+
+## LICENSE
+
+[ISC](./LICENSE)