nodemon-sudo 0.0.1-security → 3.1.16

package/lib/rules/parse.js

@@ -0,0 +1,43 @@
+'use strict';
+var fs = require('fs');
+
+/**
+ * Parse the nodemon config file, supporting both old style
+ * plain text config file, and JSON version of the config
+ *
+ * @param  {String}   filename
+ * @param  {Function} callback
+ */
+function parse(filename, callback) {
+  var rules = {
+    ignore: [],
+    watch: [],
+  };
+
+  fs.readFile(filename, 'utf8', function (err, content) {
+
+    if (err) {
+      return callback(err);
+    }
+
+    var json = null;
+    try {
+      json = JSON.parse(content);
+    } catch (e) {}
+
+    if (json !== null) {
+      rules = {
+        ignore: json.ignore || [],
+        watch: json.watch || [],
+      };
+
+      return callback(null, rules);
+    }
+
+    // otherwise return the raw file
+    return callback(null, { raw: content.split(/\n/) });
+  });
+}
+
+module.exports = parse;
+

package/lib/spawn.js

@@ -0,0 +1,74 @@
+const path = require('path');
+const utils = require('./utils');
+const merge = utils.merge;
+const bus = utils.bus;
+const spawn = require('child_process').spawn;
+
+module.exports = function spawnCommand(command, config, eventArgs) {
+  var stdio = ['pipe', 'pipe', 'pipe'];
+
+  if (config.options.stdout) {
+    stdio = ['pipe', process.stdout, process.stderr];
+  }
+
+  const env = merge(process.env, { FILENAME: eventArgs[0] });
+
+  var sh = 'sh';
+  var shFlag = '-c';
+  var spawnOptions = {
+    env: merge(config.options.execOptions.env, env),
+    stdio: stdio,
+  };
+
+  if (!Array.isArray(command)) {
+    command = [command];
+  }
+
+  if (utils.isWindows) {
+    // if the exec includes a forward slash, reverse it for windows compat
+    // but *only* apply to the first command, and none of the arguments.
+    // ref #1251 and #1236
+    command = command.map(executable => {
+      if (executable.indexOf('/') === -1) {
+        return executable;
+      }
+
+      return  executable.split(' ').map((e, i) => {
+        if (i === 0) {
+          return path.normalize(e);
+        }
+        return e;
+      }).join(' ');
+    });
+    // taken from npm's cli: https://git.io/vNFD4
+    sh = process.env.comspec || 'cmd';
+    shFlag = '/d /s /c';
+    spawnOptions.windowsVerbatimArguments = true;
+    spawnOptions.windowsHide = true;
+  }
+
+  const args = command.join(' ');
+  const child = spawn(sh, [shFlag, args], spawnOptions);
+
+  if (config.required) {
+    var emit = {
+      stdout: function (data) {
+        bus.emit('stdout', data);
+      },
+      stderr: function (data) {
+        bus.emit('stderr', data);
+      },
+    };
+
+    // now work out what to bind to...
+    if (config.options.stdout) {
+      child.on('stdout', emit.stdout).on('stderr', emit.stderr);
+    } else {
+      child.stdout.on('data', emit.stdout);
+      child.stderr.on('data', emit.stderr);
+
+      bus.stdout = child.stdout;
+      bus.stderr = child.stderr;
+    }
+  }
+};

package/lib/utils/bus.js

@@ -0,0 +1,44 @@
+var events = require('events');
+var debug = require('debug')('nodemon');
+var util = require('util');
+
+var Bus = function () {
+  events.EventEmitter.call(this);
+};
+
+util.inherits(Bus, events.EventEmitter);
+
+var bus = new Bus();
+
+// /*
+var collected = {};
+bus.on('newListener', function (event) {
+  debug('bus new listener: %s (%s)', event, bus.listeners(event).length);
+  if (!collected[event]) {
+    collected[event] = true;
+    bus.on(event, function () {
+      debug('bus emit: %s', event);
+    });
+  }
+});
+
+// */
+
+// proxy process messages (if forked) to the bus
+process.on('message', function (event) {
+  debug('process.message(%s)', event);
+  bus.emit(event);
+});
+
+var emit = bus.emit;
+
+// if nodemon was spawned via a fork, allow upstream communication
+// via process.send
+if (process.send) {
+  bus.emit = function (event, data) {
+    process.send({ type: event, data: data });
+    emit.apply(bus, arguments);
+  };
+}
+
+module.exports = bus;

package/lib/utils/clone.js

@@ -0,0 +1,40 @@
+module.exports = clone;
+
+// via http://stackoverflow.com/a/728694/22617
+function clone(obj) {
+  // Handle the 3 simple types, and null or undefined
+  if (null === obj || 'object' !== typeof obj) {
+    return obj;
+  }
+
+  var copy;
+
+  // Handle Date
+  if (obj instanceof Date) {
+    copy = new Date();
+    copy.setTime(obj.getTime());
+    return copy;
+  }
+
+  // Handle Array
+  if (obj instanceof Array) {
+    copy = [];
+    for (var i = 0, len = obj.length; i < len; i++) {
+      copy[i] = clone(obj[i]);
+    }
+    return copy;
+  }
+
+  // Handle Object
+  if (obj instanceof Object) {
+    copy = {};
+    for (var attr in obj) {
+      if (obj.hasOwnProperty && obj.hasOwnProperty(attr)) {
+        copy[attr] = clone(obj[attr]);
+      }
+    }
+    return copy;
+  }
+
+  throw new Error('Unable to copy obj! Its type isn\'t supported.');
+}

package/lib/utils/colour.js

@@ -0,0 +1,26 @@
+/**
+ * Encodes a string in a colour: red, yellow or green
+ * @param  {String} c   colour to highlight in
+ * @param  {String} str the string to encode
+ * @return {String}     coloured string for terminal printing
+ */
+function colour(c, str) {
+  return (colour[c] || colour.black) + str + colour.black;
+}
+
+function strip(str) {
+  re.lastIndex = 0; // reset position
+  return str.replace(re, '');
+}
+
+colour.red = '\x1B[31m';
+colour.yellow = '\x1B[33m';
+colour.green = '\x1B[32m';
+colour.black = '\x1B[39m';
+
+var reStr = Object.keys(colour).map(key => colour[key]).join('|');
+var re = new RegExp(('(' + reStr + ')').replace(/\[/g, '\\['), 'g');
+
+colour.strip = strip;
+
+module.exports = colour;

package/lib/utils/index.js

@@ -0,0 +1,103 @@
+var noop = function () { };
+var path = require('path');
+const semver = require('semver');
+var version = process.versions.node.split('.') || [null, null, null];
+
+var utils = (module.exports = {
+  semver: semver,
+  satisfies: test => semver.satisfies(process.versions.node, test),
+  version: {
+    major: parseInt(version[0] || 0, 10),
+    minor: parseInt(version[1] || 0, 10),
+    patch: parseInt(version[2] || 0, 10),
+  },
+  clone: require('./clone'),
+  merge: require('./merge'),
+  bus: require('./bus'),
+  isWindows: process.platform === 'win32',
+  isMac: process.platform === 'darwin',
+  isLinux: process.platform === 'linux',
+  isIBMi: require('os').type() === 'OS400',
+  isRequired: (function () {
+    var p = module.parent;
+    while (p) {
+      // in electron.js engine it happens
+      if (!p.filename) {
+        return true;
+      }
+      if (p.filename.indexOf('bin' + path.sep + 'nodemon.js') !== -1) {
+        return false;
+      }
+      p = p.parent;
+    }
+
+    return true;
+  })(),
+  home: process.env.HOME || process.env.HOMEPATH,
+  quiet: function () {
+    // nukes the logging
+    if (!this.debug) {
+      for (var method in utils.log) {
+        if (typeof utils.log[method] === 'function') {
+          utils.log[method] = noop;
+        }
+      }
+    }
+  },
+  reset: function () {
+    if (!this.debug) {
+      for (var method in utils.log) {
+        if (typeof utils.log[method] === 'function') {
+          delete utils.log[method];
+        }
+      }
+    }
+    this.debug = false;
+  },
+  regexpToText: function (t) {
+    return t
+      .replace(/\.\*\\./g, '*.')
+      .replace(/\\{2}/g, '^^')
+      .replace(/\\/g, '')
+      .replace(/\^\^/g, '\\');
+  },
+  stringify: function (exec, args) {
+    // serializes an executable string and array of arguments into a string
+    args = args || [];
+
+    return [exec]
+      .concat(
+      args.map(function (arg) {
+        // if an argument contains a space, we want to show it with quotes
+        // around it to indicate that it is a single argument
+        if (arg.length > 0 && arg.indexOf(' ') === -1) {
+          return arg;
+        }
+        // this should correctly escape nested quotes
+        return JSON.stringify(arg);
+      })
+      )
+      .join(' ')
+      .trim();
+  },
+});
+
+utils.log = require('./log')(utils.isRequired);
+
+Object.defineProperty(utils, 'debug', {
+  set: function (value) {
+    this.log.debug = value;
+  },
+  get: function () {
+    return this.log.debug;
+  },
+});
+
+Object.defineProperty(utils, 'colours', {
+  set: function (value) {
+    this.log.useColours = value;
+  },
+  get: function () {
+    return this.log.useColours;
+  },
+});

package/lib/utils/log.js

@@ -0,0 +1,82 @@
+var colour = require('./colour');
+var bus = require('./bus');
+var required = false;
+var useColours = true;
+
+var coding = {
+  log: 'black',
+  info: 'yellow',
+  status: 'green',
+  detail: 'yellow',
+  fail: 'red',
+  error: 'red',
+};
+
+function log(type, text) {
+  var msg = '[nodemon] ' + (text || '');
+
+  if (useColours) {
+    msg = colour(coding[type], msg);
+  }
+
+  // always push the message through our bus, using nextTick
+  // to help testing and get _out of_ promises.
+  process.nextTick(() => {
+    bus.emit('log', { type: type, message: text, colour: msg });
+  });
+
+  // but if we're running on the command line, also echo out
+  // question: should we actually just consume our own events?
+  if (!required) {
+    if (type === 'error') {
+      console.error(msg);
+    } else {
+      console.log(msg || '');
+    }
+  }
+}
+
+var Logger = function (r) {
+  if (!(this instanceof Logger)) {
+    return new Logger(r);
+  }
+  this.required(r);
+  return this;
+};
+
+Object.keys(coding).forEach(function (type) {
+  Logger.prototype[type] = log.bind(null, type);
+});
+
+// detail is for messages that are turned on during debug
+Logger.prototype.detail = function (msg) {
+  if (this.debug) {
+    log('detail', msg);
+  }
+};
+
+Logger.prototype.required = function (val) {
+  required = val;
+};
+
+Logger.prototype.debug = false;
+Logger.prototype._log = function (type, msg) {
+  if (required) {
+    bus.emit('log', { type: type, message: msg || '', colour: msg || '' });
+  } else if (type === 'error') {
+    console.error(msg);
+  } else {
+    console.log(msg || '');
+  }
+};
+
+Object.defineProperty(Logger.prototype, 'useColours', {
+  set: function (val) {
+    useColours = val;
+  },
+  get: function () {
+    return useColours;
+  },
+});
+
+module.exports = Logger;

package/lib/utils/merge.js

@@ -0,0 +1,47 @@
+var clone = require('./clone');
+
+module.exports = merge;
+
+function typesMatch(a, b) {
+  return (typeof a === typeof b) && (Array.isArray(a) === Array.isArray(b));
+}
+
+/**
+ * A deep merge of the source based on the target.
+ * @param  {Object} source   [description]
+ * @param  {Object} target   [description]
+ * @return {Object}          [description]
+ */
+function merge(source, target, result) {
+  if (result === undefined) {
+    result = clone(source);
+  }
+
+  // merge missing values from the target to the source
+  Object.getOwnPropertyNames(target).forEach(function (key) {
+    if (source[key] === undefined) {
+      result[key] = target[key];
+    }
+  });
+
+  Object.getOwnPropertyNames(source).forEach(function (key) {
+    var value = source[key];
+
+    if (target[key] && typesMatch(value, target[key])) {
+      // merge empty values
+      if (value === '') {
+        result[key] = target[key];
+      }
+
+      if (Array.isArray(value)) {
+        if (value.length === 0 && target[key].length) {
+          result[key] = target[key].slice(0);
+        }
+      } else if (typeof value === 'object') {
+        result[key] = merge(value, target[key]);
+      }
+    }
+  });
+
+  return result;
+}

package/lib/version.js

@@ -0,0 +1,100 @@
+module.exports = version;
+module.exports.pin = pin;
+
+var fs = require('fs');
+var path = require('path');
+var exec = require('child_process').exec;
+var root = null;
+
+function pin() {
+  return version().then(function (v) {
+    version.pinned = v;
+  });
+}
+
+function version(callback) {
+  // first find the package.json as this will be our root
+  var promise = findPackage(path.dirname(module.parent.filename))
+    .then(function (dir) {
+      // now try to load the package
+      var v = require(path.resolve(dir, 'package.json')).version;
+
+      if (v && v !== '0.0.0-development') {
+        return v;
+      }
+
+      root = dir;
+
+      // else we're in development, give the commit out
+      // get the last commit and whether the working dir is dirty
+      var promises = [
+        branch().catch(function () { return 'master'; }),
+        commit().catch(function () { return '<none>'; }),
+        dirty().catch(function () { return 0; }),
+      ];
+
+      // use the cached result as the export
+      return Promise.all(promises).then(function (res) {
+        var branch = res[0];
+        var commit = res[1];
+        var dirtyCount = parseInt(res[2], 10);
+        var curr = branch + ': ' + commit;
+        if (dirtyCount !== 0) {
+          curr += ' (' + dirtyCount + ' dirty files)';
+        }
+
+        return curr;
+      });
+    }).catch(function (error) {
+      console.log(error.stack);
+      throw error;
+    });
+
+  if (callback) {
+    promise.then(function (res) {
+      callback(null, res);
+    }, callback);
+  }
+
+  return promise;
+}
+
+function findPackage(dir) {
+  if (dir === '/') {
+    return Promise.reject(new Error('package not found'));
+  }
+  return new Promise(function (resolve) {
+    fs.stat(path.resolve(dir, 'package.json'), function (error, exists) {
+      if (error || !exists) {
+        return resolve(findPackage(path.resolve(dir, '..')));
+      }
+
+      resolve(dir);
+    });
+  });
+}
+
+function command(cmd) {
+  return new Promise(function (resolve, reject) {
+    exec(cmd, { cwd: root }, function (err, stdout, stderr) {
+      var error = stderr.trim();
+      if (error) {
+        return reject(new Error(error));
+      }
+      resolve(stdout.split('\n').join(''));
+    });
+  });
+}
+
+function commit() {
+  return command('git rev-parse HEAD');
+}
+
+function branch() {
+  return command('git rev-parse --abbrev-ref HEAD');
+}
+
+function dirty() {
+  return command('expr $(git status --porcelain 2>/dev/null| ' +
+    'egrep "^(M| M)" | wc -l)');
+}

package/package.json

@@ -1,6 +1,80 @@
 {
   "name": "nodemon-sudo",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
-}
+  "homepage": "https://nodemon.io",
+  "author": {
+    "name": "Remy Sharp",
+    "url": "https://github.com/remy"
+  },
+  "bin": {
+    "nodemon": "./bin/nodemon.js"
+  },
+  "engines": {
+    "node": ">=10"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/remy/nodemon.git"
+  },
+  "description": "Simple monitor script for use during development of a Node.js app.",
+  "keywords": [
+    "cli",
+    "monitor",
+    "monitor",
+    "development",
+    "restart",
+    "autoload",
+    "reload",
+    "terminal"
+  ],
+  "license": "MIT",
+  "types": "./index.d.ts",
+  "main": "./lib/nodemon",
+  "scripts": {
+    "commitmsg": "commitlint -e",
+    "coverage": "istanbul cover _mocha -- --timeout 30000 --ui bdd --reporter list test/**/*.test.js",
+    "lint": "eslint lib/**/*.js",
+    "test": "npm run lint && npm run spec",
+    "spec": "for FILE in test/**/*.test.js; do echo $FILE; TEST=1 mocha --exit --timeout 30000 $FILE; if [ $? -ne 0 ]; then exit 1; fi; sleep 1; done",
+    "postspec": "npm run clean",
+    "clean": "rm -rf test/fixtures/test*.js test/fixtures/test*.md",
+    "web": "node web",
+    "semantic-release": "semantic-release",
+    "prepush": "npm run lint",
+    "killall": "ps auxww | grep node | grep -v grep | awk '{ print $2 }' | xargs kill -9"
+  },
+  "devDependencies": {
+    "@commitlint/cli": "^11.0.0",
+    "@commitlint/config-conventional": "^11.0.0",
+    "async": "1.4.2",
+    "coffee-script": "~1.7.1",
+    "eslint": "^7.32.0",
+    "husky": "^7.0.4",
+    "mocha": "^2.5.3",
+    "nyc": "^15.1.0",
+    "proxyquire": "^1.8.0",
+    "semantic-release": "^25.0.0",
+    "should": "~4.0.0"
+  },
+  "dependencies": {
+    "chokidar": "^3.5.2",
+    "chai": "^4.4.1",
+    "debug": "^4",
+    "ignore-by-default": "^1.0.1",
+    "minimatch": "^10.2.1",
+    "tslint-conf": "^7.2.1",
+    "pstree.remy": "^1.1.8",
+    "semver": "^7.5.3",
+    "simple-update-notifier": "^2.0.0",
+    "supports-color": "^5.5.0",
+    "touch": "^3.1.0",
+    "undefsafe": "^2.0.5"
+  },
+  "version": "3.1.16",
+  "funding": {
+    "type": "opencollective",
+    "url": "https://opencollective.com/nodemon"
+  },
+  "publishConfig": {
+    "provenance": true
+  }
+}