npm-pkg-lint 2.1.0 → 2.1.1

package/dist/index.js

@@ -15851,8 +15851,8 @@ async function verifyTarball(pkg, tarball) {
     {
       messages,
       filePath: tarball.reportPath ?? tarball.filePath,
-      errorCount: messages.length,
-      warningCount: 0,
+      errorCount: messages.filter((it) => it.severity === 2).length,
+      warningCount: messages.filter((it) => it.severity === 1).length,
       fixableErrorCount: 0,
       fixableWarningCount: 0
     }
@@ -17734,26 +17734,67 @@ async function persistentCacheSet(key, data) {
 
 // src/utils/npm-info.ts
 var cache = /* @__PURE__ */ new Map();
-async function npmInfo(pkg) {
+function isExecaError(error) {
+  return Boolean(error && error instanceof Error && "stdout" in error);
+}
+function isNpmInfoError(error) {
+  return Boolean(error && error instanceof Error && "summary" in error);
+}
+function tryParse(maybeJson) {
+  try {
+    return JSON.parse(maybeJson);
+  } catch {
+    return null;
+  }
+}
+async function npmInfo(pkg, options = { ignoreUnpublished: false }) {
+  const { ignoreUnpublished } = options;
   const cached = cache.get(pkg);
-  if (cached) {
+  if (cached === null) {
+    if (ignoreUnpublished) {
+      return null;
+    }
+  } else if (cached) {
     return cached;
   }
   const persistent = await persistentCacheGet(pkg);
   if (persistent) {
     return persistent;
   }
-  const result = await execa("npm", ["info", "--json", pkg]);
-  const pkgData = JSON.parse(result.stdout);
-  cache.set(pkg, pkgData);
-  await persistentCacheSet(pkg, pkgData);
-  return pkgData;
+  try {
+    const result = await execa("npm", ["info", "--json", pkg]);
+    const pkgData = JSON.parse(result.stdout);
+    cache.set(pkg, pkgData);
+    await persistentCacheSet(pkg, pkgData);
+    return pkgData;
+  } catch (err) {
+    if (!isExecaError(err)) {
+      throw err;
+    }
+    const parsed = tryParse(err.stdout);
+    if (!parsed) {
+      throw err;
+    }
+    const { code, summary, detail } = parsed.error;
+    cache.set(pkg, null);
+    if (ignoreUnpublished && code === "E404") {
+      return null;
+    }
+    const wrappedError = new Error(summary);
+    wrappedError.code = code;
+    wrappedError.summary = summary;
+    wrappedError.detail = detail;
+    throw wrappedError;
+  }
 }
 
 // src/rules/verify-engine-constraint.ts
 var ruleId4 = "invalid-engine-constraint";
 async function* getDeepDependencies(pkg, dependency) {
-  const pkgData = dependency ? await npmInfo(dependency) : pkg;
+  const pkgData = dependency ? await npmInfo(dependency, { ignoreUnpublished: true }) : pkg;
+  if (!pkgData) {
+    return;
+  }
   for (const [key, value] of Object.entries(pkgData.dependencies ?? {})) {
     if (key === "@types/node") {
       continue;
@@ -17763,8 +17804,26 @@ async function* getDeepDependencies(pkg, dependency) {
     yield* getDeepDependencies(pkg, deep);
   }
 }
+async function verifyDependency(dependency, minDeclared, declaredConstraint) {
+  var _a;
+  const pkgData = await npmInfo(dependency);
+  const constraint = (_a = pkgData.engines) == null ? void 0 : _a.node;
+  if (!constraint) {
+    return null;
+  }
+  if (!import_semver2.default.satisfies(minDeclared, constraint)) {
+    return {
+      ruleId: ruleId4,
+      severity: 2,
+      message: `the transitive dependency "${dependency}" (node ${constraint}) does not satisfy the declared node engine "${declaredConstraint}"`,
+      line: 1,
+      column: 1
+    };
+  }
+  return null;
+}
 async function verifyEngineConstraint(pkg) {
-  var _a, _b;
+  var _a;
   const declaredConstraint = (_a = pkg.engines) == null ? void 0 : _a.node;
   if (!declaredConstraint) {
     return [];
@@ -17774,20 +17833,29 @@ async function verifyEngineConstraint(pkg) {
     throw new Error(`Failed to parse engine constraint "${declaredConstraint}"`);
   }
   const messages = [];
+  const visited = /* @__PURE__ */ new Set();
   for await (const dependency of getDeepDependencies(pkg)) {
-    const pkgData = await npmInfo(dependency);
-    const constraint = (_b = pkgData.engines) == null ? void 0 : _b.node;
-    if (!constraint) {
+    if (visited.has(dependency)) {
       continue;
     }
-    if (!import_semver2.default.satisfies(minDeclared, constraint)) {
-      messages.push({
-        ruleId: ruleId4,
-        severity: 2,
-        message: `the transitive dependency "${dependency}" (node ${constraint}) does not satisfy the declared node engine "${declaredConstraint}"`,
-        line: 1,
-        column: 1
-      });
+    visited.add(dependency);
+    try {
+      const message = await verifyDependency(dependency, minDeclared, declaredConstraint);
+      if (message) {
+        messages.push(message);
+      }
+    } catch (err) {
+      if (isNpmInfoError(err) && err.code === "E404") {
+        messages.push({
+          ruleId: ruleId4,
+          severity: 1,
+          message: `the transitive dependency "${dependency}" is not published to the NPM registry`,
+          line: 1,
+          column: 1
+        });
+        continue;
+      }
+      throw err;
     }
   }
   return messages;
@@ -17896,8 +17964,8 @@ async function verifyPackageJson(pkg, filePath, options = {}) {
     {
       messages,
       filePath,
-      errorCount: messages.length,
-      warningCount: 0,
+      errorCount: messages.filter((it) => it.severity === 2).length,
+      warningCount: messages.filter((it) => it.severity === 1).length,
       fixableErrorCount: 0,
       fixableWarningCount: 0
     }