npm-pkg-lint 3.10.1 → 3.10.3

package/dist/index.js

@@ -6658,6 +6658,9 @@ function parse(text, options) {
       assertTokenType(tokenType, tt.String);
     }
     const token = tokenizer.token;
+    if (json5 && tokenType === tt.Number && /[+\-0-9]/.test(text[token.loc.start.offset])) {
+      throw new UnexpectedToken(token);
+    }
     let key = tokenType === tt.String ? (
       /** @type {StringNode} */
       createLiteralNode(tokenType)
@@ -16371,7 +16374,13 @@ function* outdatedEngines(pkg, pkgAst, ignoreNodeVersion) {
 // src/rules/verify-engine-constraint.ts
 var import_semver3 = __toESM(require_semver2(), 1);
 var ruleId5 = "invalid-engine-constraint";
-async function* getDeepDependencies(pkg, dependency) {
+async function* getDeepDependencies(pkg, visited, dependency) {
+  if (dependency) {
+    if (visited.has(dependency)) {
+      return;
+    }
+    visited.add(dependency);
+  }
   const pkgData = dependency ? await npmInfo(dependency, { ignoreUnpublished: true }) : pkg;
   if (!pkgData) {
     return;
@@ -16388,7 +16397,7 @@ async function* getDeepDependencies(pkg, dependency) {
     const minVersion = import_semver3.default.minVersion(version3);
     const deep = `${key}@${minVersion ? minVersion.version : version3}`;
     yield deep;
-    yield* getDeepDependencies(pkg, deep);
+    yield* getDeepDependencies(pkg, visited, deep);
   }
 }
 async function verifyDependency(dependency, minDeclared, declaredConstraint) {
@@ -16424,11 +16433,7 @@ async function verifyEngineConstraint(pkg) {
   }
   const messages = [];
   const visited = /* @__PURE__ */ new Set();
-  for await (const dependency of getDeepDependencies(pkg)) {
-    if (visited.has(dependency)) {
-      continue;
-    }
-    visited.add(dependency);
+  for await (const dependency of getDeepDependencies(pkg, visited)) {
     try {
       const message = await verifyDependency(dependency, minDeclared, declaredConstraint);
       if (message) {