pastoralist 0.0.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2022 Jeff Wainwright
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,39 @@
+# Pastoralist (WIP)
+
+A tool to watch over node module *overrides and resolutions 🐑 👩🏽‍🌾
+
+> *overrides: throughout this repository the key words "overrides" and "resolutions" are used interchangeably as the nomenclature between npm, pnpm, and yarn differs.
+## Synopsis
+
+While maintaining a secure `node_module` ecosystem, `package.json` overrides and resolutions assist in ensuring vulnerable dependencies are not installed.
+
+Pastoralist manages node overrides and resolutions so you don't have to.
+
+## How Pastoralist works
+
+Pastoralist manages overrides and resolutions object by, first, creating a reviewable list of overrides and, second, removing unneeded overrides and resolutions items.
+### Key notes
+
+1. Pastoralist does **not** manage what is added to overrides and resolutions objects.
+2. Pastoralist **does** manage a package that exists in the overrides object
+   - Pastoralist will remove overrides and resolutions if they become unneeded according to child `package.json`'s spec.
+
+## Inistall
+
+```sh
+npm install pastoralist --save-dev
+# pastoralist does not expect to be a dependency! It's a tool
+```
+
+## Usage
+
+Pastoralist is built to be used as a CLI program. Run and configure to your liking.
+### Basic
+
+```sh
+pastoralist <...args to be added>
+```
+
+### Advanced
+
+Pastoralist can _and should be incorporated_ into your workflow—which every way is best for you and your team's developer experience! 👌

package/dist/chunk-T637KLSH.mjs

@@ -0,0 +1,23 @@
+import {
+  update
+} from "./chunk-WXUCJGGF.mjs";
+
+// src/program.ts
+import { program } from "commander";
+var version = "VERSION";
+async function action(options = {}) {
+  try {
+    if (options == null ? void 0 : options.isTestingCLI)
+      console.info({ options });
+    update(options);
+  } catch (err) {
+    console.error(err);
+  }
+}
+program.version(version).description("Pastoralist, a utility CLI to manage your dependency overrides").option("-p, --path <path>", "the path to the package.json file to manage").option("-d, --depPaths <depPaths>", "a path to dependency package.json files").option("-t, --isTestingCLI", "enables CLI testing, no scripts are run").parse(process.argv).action(action);
+var program_default = program;
+
+export {
+  action,
+  program_default
+};

package/dist/chunk-WXUCJGGF.mjs

@@ -0,0 +1,130 @@
+var __defProp = Object.defineProperty;
+var __defProps = Object.defineProperties;
+var __getOwnPropDescs = Object.getOwnPropertyDescriptors;
+var __getOwnPropSymbols = Object.getOwnPropertySymbols;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __propIsEnum = Object.prototype.propertyIsEnumerable;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __spreadValues = (a, b) => {
+  for (var prop in b || (b = {}))
+    if (__hasOwnProp.call(b, prop))
+      __defNormalProp(a, prop, b[prop]);
+  if (__getOwnPropSymbols)
+    for (var prop of __getOwnPropSymbols(b)) {
+      if (__propIsEnum.call(b, prop))
+        __defNormalProp(a, prop, b[prop]);
+    }
+  return a;
+};
+var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined")
+    return require.apply(this, arguments);
+  throw new Error('Dynamic require of "' + x + '" is not supported');
+});
+
+// src/scripts.ts
+import { resolve } from "path";
+import { writeFile } from "fs";
+import { sync } from "fast-glob";
+import { compare } from "compare-versions";
+function resolveJSON(path) {
+  const jsonPath = resolve(path);
+  return __require(jsonPath);
+}
+function resolveResolutions({
+  config: {
+    overrides: npmOverrides = {},
+    pnpm: { overrides: pnpmOverrides = {} } = {},
+    resolutions = {}
+  } = {},
+  options: { debug = false } = {}
+}) {
+  const overridesItems = Object.keys(npmOverrides);
+  const hasOverrides = overridesItems.length > 0;
+  const hasComplexOverrides = hasOverrides && overridesItems.some((name) => typeof npmOverrides[name] === "object");
+  if (hasComplexOverrides && debug) {
+    console.warn("\u{1F411} \u{1F469}\u{1F3FD}\u200D\u{1F33E} Pastoralist only supports simple overrides! Pastoralist is bypassing the specified complex overrides. \u{1F44C}");
+  }
+  const overrides = hasOverrides ? overridesItems.filter((name) => typeof npmOverrides[name] === "string").reduce((acc, name) => __spreadProps(__spreadValues({}, acc), { [name]: npmOverrides[name] }), {}) : {};
+  return __spreadValues(__spreadValues(__spreadValues({}, overrides), pnpmOverrides), resolutions);
+}
+function updateAppendix({
+  dependencies,
+  resolutions,
+  name,
+  version,
+  appendix = {}
+}) {
+  const dependencyList = Object.keys(dependencies);
+  const resolutionsList = Object.keys(resolutions);
+  return resolutionsList.reduce((acc, resolution) => {
+    if (!dependencyList.includes(resolution)) {
+      const hasResolutionOverride = compare(resolutions[resolution], dependencies[resolution], ">");
+      if (hasResolutionOverride) {
+        return __spreadProps(__spreadValues(__spreadValues({}, appendix), acc), {
+          [`${resolution}@${resolutions[resolution]}`]: __spreadProps(__spreadValues({}, appendix[`${resolution}@${resolutions[resolution]}`]), {
+            [name]: [version]
+          })
+        });
+      }
+    }
+    return acc || {};
+  }, {});
+}
+function updatePackageJSON({
+  appendix,
+  path,
+  config,
+  resolutions
+}) {
+  var _a;
+  const jsonPath = resolve(path);
+  const pastoralist = (config == null ? void 0 : config.pastoralist) ? __spreadProps(__spreadValues({}, config.pastoralist), { appendix }) : { appendix };
+  const json = __spreadValues(__spreadProps(__spreadValues({}, config), {
+    pastoralist
+  }), (config == null ? void 0 : config.resolutions) ? { resolutions } : (config == null ? void 0 : config.overrides) ? { overrides: resolutions } : ((_a = config == null ? void 0 : config.pnpm) == null ? void 0 : _a.overrides) ? { pnpm: __spreadProps(__spreadValues({}, config.pnpm), { overrides: resolutions }) } : {});
+  writeFile(jsonPath, JSON.stringify(json, null, 2), (err) => console.log(`\u{1F411} \u{1F469}\u{1F3FD}\u200D\u{1F33E} Pastoralist had an issue updating overrides or resolutions in the package.json!${err ? `, ${err}` : ""}`));
+}
+function update(options) {
+  const { depPaths = ["node_modules/**/package.json"], path = "package.json" } = options;
+  const config = resolveJSON(path);
+  const resolutions = resolveResolutions({ options, config });
+  const resolutionsList = Object.keys(resolutions);
+  const nodeModulePackageJSONs = sync(depPaths);
+  const appendix = nodeModulePackageJSONs.reduce((acc, packageJSON) => {
+    const { dependencies = {}, name, version } = resolveJSON(packageJSON);
+    const dependenciesList = Object.keys(dependencies);
+    if (!dependenciesList.length)
+      return acc;
+    const hasOverriddenDependencies = dependenciesList.some((dependencyItem) => resolutionsList.includes(dependencyItem));
+    if (!hasOverriddenDependencies)
+      return acc;
+    const appendixItem = updateAppendix(__spreadValues({
+      dependencies,
+      name,
+      resolutions,
+      version
+    }, options.appendix ? { appendix: options.appendix } : {}));
+    return __spreadValues(__spreadValues({}, acc), appendixItem);
+  }, {});
+  const appendixItems = Object.keys(appendix);
+  const updatedResolutions = appendixItems.length > 0 && appendixItems.filter((item) => Object.keys(appendix[item]).length > 0);
+  updatePackageJSON({
+    appendix,
+    path,
+    config,
+    resolutions: updatedResolutions
+  });
+  return appendix;
+}
+
+export {
+  resolveJSON,
+  resolveResolutions,
+  updateAppendix,
+  updatePackageJSON,
+  update
+};

package/dist/index.js

@@ -0,0 +1,132 @@
+#!/usr/bin/env node
+var __defProp = Object.defineProperty;
+var __defProps = Object.defineProperties;
+var __getOwnPropDescs = Object.getOwnPropertyDescriptors;
+var __getOwnPropSymbols = Object.getOwnPropertySymbols;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __propIsEnum = Object.prototype.propertyIsEnumerable;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __spreadValues = (a, b) => {
+  for (var prop in b || (b = {}))
+    if (__hasOwnProp.call(b, prop))
+      __defNormalProp(a, prop, b[prop]);
+  if (__getOwnPropSymbols)
+    for (var prop of __getOwnPropSymbols(b)) {
+      if (__propIsEnum.call(b, prop))
+        __defNormalProp(a, prop, b[prop]);
+    }
+  return a;
+};
+var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
+
+// src/program.ts
+var import_commander = require("commander");
+
+// src/scripts.ts
+var import_path = require("path");
+var import_fs = require("fs");
+var import_fast_glob = require("fast-glob");
+var import_compare_versions = require("compare-versions");
+function resolveJSON(path) {
+  const jsonPath = (0, import_path.resolve)(path);
+  return require(jsonPath);
+}
+function resolveResolutions({
+  config: {
+    overrides: npmOverrides = {},
+    pnpm: { overrides: pnpmOverrides = {} } = {},
+    resolutions = {}
+  } = {},
+  options: { debug = false } = {}
+}) {
+  const overridesItems = Object.keys(npmOverrides);
+  const hasOverrides = overridesItems.length > 0;
+  const hasComplexOverrides = hasOverrides && overridesItems.some((name) => typeof npmOverrides[name] === "object");
+  if (hasComplexOverrides && debug) {
+    console.warn("\u{1F411} \u{1F469}\u{1F3FD}\u200D\u{1F33E} Pastoralist only supports simple overrides! Pastoralist is bypassing the specified complex overrides. \u{1F44C}");
+  }
+  const overrides = hasOverrides ? overridesItems.filter((name) => typeof npmOverrides[name] === "string").reduce((acc, name) => __spreadProps(__spreadValues({}, acc), { [name]: npmOverrides[name] }), {}) : {};
+  return __spreadValues(__spreadValues(__spreadValues({}, overrides), pnpmOverrides), resolutions);
+}
+function updateAppendix({
+  dependencies,
+  resolutions,
+  name,
+  version: version2,
+  appendix = {}
+}) {
+  const dependencyList = Object.keys(dependencies);
+  const resolutionsList = Object.keys(resolutions);
+  return resolutionsList.reduce((acc, resolution) => {
+    if (!dependencyList.includes(resolution)) {
+      const hasResolutionOverride = (0, import_compare_versions.compare)(resolutions[resolution], dependencies[resolution], ">");
+      if (hasResolutionOverride) {
+        return __spreadProps(__spreadValues(__spreadValues({}, appendix), acc), {
+          [`${resolution}@${resolutions[resolution]}`]: __spreadProps(__spreadValues({}, appendix[`${resolution}@${resolutions[resolution]}`]), {
+            [name]: [version2]
+          })
+        });
+      }
+    }
+    return acc || {};
+  }, {});
+}
+function updatePackageJSON({
+  appendix,
+  path,
+  config,
+  resolutions
+}) {
+  var _a;
+  const jsonPath = (0, import_path.resolve)(path);
+  const pastoralist = (config == null ? void 0 : config.pastoralist) ? __spreadProps(__spreadValues({}, config.pastoralist), { appendix }) : { appendix };
+  const json = __spreadValues(__spreadProps(__spreadValues({}, config), {
+    pastoralist
+  }), (config == null ? void 0 : config.resolutions) ? { resolutions } : (config == null ? void 0 : config.overrides) ? { overrides: resolutions } : ((_a = config == null ? void 0 : config.pnpm) == null ? void 0 : _a.overrides) ? { pnpm: __spreadProps(__spreadValues({}, config.pnpm), { overrides: resolutions }) } : {});
+  (0, import_fs.writeFile)(jsonPath, JSON.stringify(json, null, 2), (err) => console.log(`\u{1F411} \u{1F469}\u{1F3FD}\u200D\u{1F33E} Pastoralist had an issue updating overrides or resolutions in the package.json!${err ? `, ${err}` : ""}`));
+}
+function update(options) {
+  const { depPaths = ["node_modules/**/package.json"], path = "package.json" } = options;
+  const config = resolveJSON(path);
+  const resolutions = resolveResolutions({ options, config });
+  const resolutionsList = Object.keys(resolutions);
+  const nodeModulePackageJSONs = (0, import_fast_glob.sync)(depPaths);
+  const appendix = nodeModulePackageJSONs.reduce((acc, packageJSON) => {
+    const { dependencies = {}, name, version: version2 } = resolveJSON(packageJSON);
+    const dependenciesList = Object.keys(dependencies);
+    if (!dependenciesList.length)
+      return acc;
+    const hasOverriddenDependencies = dependenciesList.some((dependencyItem) => resolutionsList.includes(dependencyItem));
+    if (!hasOverriddenDependencies)
+      return acc;
+    const appendixItem = updateAppendix(__spreadValues({
+      dependencies,
+      name,
+      resolutions,
+      version: version2
+    }, options.appendix ? { appendix: options.appendix } : {}));
+    return __spreadValues(__spreadValues({}, acc), appendixItem);
+  }, {});
+  const appendixItems = Object.keys(appendix);
+  const updatedResolutions = appendixItems.length > 0 && appendixItems.filter((item) => Object.keys(appendix[item]).length > 0);
+  updatePackageJSON({
+    appendix,
+    path,
+    config,
+    resolutions: updatedResolutions
+  });
+  return appendix;
+}
+
+// src/program.ts
+var version = "VERSION";
+async function action(options = {}) {
+  try {
+    if (options == null ? void 0 : options.isTestingCLI)
+      console.info({ options });
+    update(options);
+  } catch (err) {
+    console.error(err);
+  }
+}
+import_commander.program.version(version).description("Pastoralist, a utility CLI to manage your dependency overrides").option("-p, --path <path>", "the path to the package.json file to manage").option("-d, --depPaths <depPaths>", "a path to dependency package.json files").option("-t, --isTestingCLI", "enables CLI testing, no scripts are run").parse(process.argv).action(action);

package/dist/index.mjs

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import "./chunk-T637KLSH.mjs";
+import "./chunk-WXUCJGGF.mjs";

package/dist/program.js

@@ -0,0 +1,158 @@
+#!/usr/bin/env node
+var __defProp = Object.defineProperty;
+var __defProps = Object.defineProperties;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropDescs = Object.getOwnPropertyDescriptors;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getOwnPropSymbols = Object.getOwnPropertySymbols;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __propIsEnum = Object.prototype.propertyIsEnumerable;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __spreadValues = (a, b) => {
+  for (var prop in b || (b = {}))
+    if (__hasOwnProp.call(b, prop))
+      __defNormalProp(a, prop, b[prop]);
+  if (__getOwnPropSymbols)
+    for (var prop of __getOwnPropSymbols(b)) {
+      if (__propIsEnum.call(b, prop))
+        __defNormalProp(a, prop, b[prop]);
+    }
+  return a;
+};
+var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/program.ts
+var program_exports = {};
+__export(program_exports, {
+  action: () => action,
+  default: () => program_default
+});
+module.exports = __toCommonJS(program_exports);
+var import_commander = require("commander");
+
+// src/scripts.ts
+var import_path = require("path");
+var import_fs = require("fs");
+var import_fast_glob = require("fast-glob");
+var import_compare_versions = require("compare-versions");
+function resolveJSON(path) {
+  const jsonPath = (0, import_path.resolve)(path);
+  return require(jsonPath);
+}
+function resolveResolutions({
+  config: {
+    overrides: npmOverrides = {},
+    pnpm: { overrides: pnpmOverrides = {} } = {},
+    resolutions = {}
+  } = {},
+  options: { debug = false } = {}
+}) {
+  const overridesItems = Object.keys(npmOverrides);
+  const hasOverrides = overridesItems.length > 0;
+  const hasComplexOverrides = hasOverrides && overridesItems.some((name) => typeof npmOverrides[name] === "object");
+  if (hasComplexOverrides && debug) {
+    console.warn("\u{1F411} \u{1F469}\u{1F3FD}\u200D\u{1F33E} Pastoralist only supports simple overrides! Pastoralist is bypassing the specified complex overrides. \u{1F44C}");
+  }
+  const overrides = hasOverrides ? overridesItems.filter((name) => typeof npmOverrides[name] === "string").reduce((acc, name) => __spreadProps(__spreadValues({}, acc), { [name]: npmOverrides[name] }), {}) : {};
+  return __spreadValues(__spreadValues(__spreadValues({}, overrides), pnpmOverrides), resolutions);
+}
+function updateAppendix({
+  dependencies,
+  resolutions,
+  name,
+  version: version2,
+  appendix = {}
+}) {
+  const dependencyList = Object.keys(dependencies);
+  const resolutionsList = Object.keys(resolutions);
+  return resolutionsList.reduce((acc, resolution) => {
+    if (!dependencyList.includes(resolution)) {
+      const hasResolutionOverride = (0, import_compare_versions.compare)(resolutions[resolution], dependencies[resolution], ">");
+      if (hasResolutionOverride) {
+        return __spreadProps(__spreadValues(__spreadValues({}, appendix), acc), {
+          [`${resolution}@${resolutions[resolution]}`]: __spreadProps(__spreadValues({}, appendix[`${resolution}@${resolutions[resolution]}`]), {
+            [name]: [version2]
+          })
+        });
+      }
+    }
+    return acc || {};
+  }, {});
+}
+function updatePackageJSON({
+  appendix,
+  path,
+  config,
+  resolutions
+}) {
+  var _a;
+  const jsonPath = (0, import_path.resolve)(path);
+  const pastoralist = (config == null ? void 0 : config.pastoralist) ? __spreadProps(__spreadValues({}, config.pastoralist), { appendix }) : { appendix };
+  const json = __spreadValues(__spreadProps(__spreadValues({}, config), {
+    pastoralist
+  }), (config == null ? void 0 : config.resolutions) ? { resolutions } : (config == null ? void 0 : config.overrides) ? { overrides: resolutions } : ((_a = config == null ? void 0 : config.pnpm) == null ? void 0 : _a.overrides) ? { pnpm: __spreadProps(__spreadValues({}, config.pnpm), { overrides: resolutions }) } : {});
+  (0, import_fs.writeFile)(jsonPath, JSON.stringify(json, null, 2), (err) => console.log(`\u{1F411} \u{1F469}\u{1F3FD}\u200D\u{1F33E} Pastoralist had an issue updating overrides or resolutions in the package.json!${err ? `, ${err}` : ""}`));
+}
+function update(options) {
+  const { depPaths = ["node_modules/**/package.json"], path = "package.json" } = options;
+  const config = resolveJSON(path);
+  const resolutions = resolveResolutions({ options, config });
+  const resolutionsList = Object.keys(resolutions);
+  const nodeModulePackageJSONs = (0, import_fast_glob.sync)(depPaths);
+  const appendix = nodeModulePackageJSONs.reduce((acc, packageJSON) => {
+    const { dependencies = {}, name, version: version2 } = resolveJSON(packageJSON);
+    const dependenciesList = Object.keys(dependencies);
+    if (!dependenciesList.length)
+      return acc;
+    const hasOverriddenDependencies = dependenciesList.some((dependencyItem) => resolutionsList.includes(dependencyItem));
+    if (!hasOverriddenDependencies)
+      return acc;
+    const appendixItem = updateAppendix(__spreadValues({
+      dependencies,
+      name,
+      resolutions,
+      version: version2
+    }, options.appendix ? { appendix: options.appendix } : {}));
+    return __spreadValues(__spreadValues({}, acc), appendixItem);
+  }, {});
+  const appendixItems = Object.keys(appendix);
+  const updatedResolutions = appendixItems.length > 0 && appendixItems.filter((item) => Object.keys(appendix[item]).length > 0);
+  updatePackageJSON({
+    appendix,
+    path,
+    config,
+    resolutions: updatedResolutions
+  });
+  return appendix;
+}
+
+// src/program.ts
+var version = "VERSION";
+async function action(options = {}) {
+  try {
+    if (options == null ? void 0 : options.isTestingCLI)
+      console.info({ options });
+    update(options);
+  } catch (err) {
+    console.error(err);
+  }
+}
+import_commander.program.version(version).description("Pastoralist, a utility CLI to manage your dependency overrides").option("-p, --path <path>", "the path to the package.json file to manage").option("-d, --depPaths <depPaths>", "a path to dependency package.json files").option("-t, --isTestingCLI", "enables CLI testing, no scripts are run").parse(process.argv).action(action);
+var program_default = import_commander.program;
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  action
+});

package/dist/program.mjs

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+import {
+  action,
+  program_default
+} from "./chunk-T637KLSH.mjs";
+import "./chunk-WXUCJGGF.mjs";
+export {
+  action,
+  program_default as default
+};

package/dist/scripts.js

@@ -0,0 +1,148 @@
+#!/usr/bin/env node
+var __defProp = Object.defineProperty;
+var __defProps = Object.defineProperties;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropDescs = Object.getOwnPropertyDescriptors;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getOwnPropSymbols = Object.getOwnPropertySymbols;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __propIsEnum = Object.prototype.propertyIsEnumerable;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __spreadValues = (a, b) => {
+  for (var prop in b || (b = {}))
+    if (__hasOwnProp.call(b, prop))
+      __defNormalProp(a, prop, b[prop]);
+  if (__getOwnPropSymbols)
+    for (var prop of __getOwnPropSymbols(b)) {
+      if (__propIsEnum.call(b, prop))
+        __defNormalProp(a, prop, b[prop]);
+    }
+  return a;
+};
+var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/scripts.ts
+var scripts_exports = {};
+__export(scripts_exports, {
+  resolveJSON: () => resolveJSON,
+  resolveResolutions: () => resolveResolutions,
+  update: () => update,
+  updateAppendix: () => updateAppendix,
+  updatePackageJSON: () => updatePackageJSON
+});
+module.exports = __toCommonJS(scripts_exports);
+var import_path = require("path");
+var import_fs = require("fs");
+var import_fast_glob = require("fast-glob");
+var import_compare_versions = require("compare-versions");
+function resolveJSON(path) {
+  const jsonPath = (0, import_path.resolve)(path);
+  return require(jsonPath);
+}
+function resolveResolutions({
+  config: {
+    overrides: npmOverrides = {},
+    pnpm: { overrides: pnpmOverrides = {} } = {},
+    resolutions = {}
+  } = {},
+  options: { debug = false } = {}
+}) {
+  const overridesItems = Object.keys(npmOverrides);
+  const hasOverrides = overridesItems.length > 0;
+  const hasComplexOverrides = hasOverrides && overridesItems.some((name) => typeof npmOverrides[name] === "object");
+  if (hasComplexOverrides && debug) {
+    console.warn("\u{1F411} \u{1F469}\u{1F3FD}\u200D\u{1F33E} Pastoralist only supports simple overrides! Pastoralist is bypassing the specified complex overrides. \u{1F44C}");
+  }
+  const overrides = hasOverrides ? overridesItems.filter((name) => typeof npmOverrides[name] === "string").reduce((acc, name) => __spreadProps(__spreadValues({}, acc), { [name]: npmOverrides[name] }), {}) : {};
+  return __spreadValues(__spreadValues(__spreadValues({}, overrides), pnpmOverrides), resolutions);
+}
+function updateAppendix({
+  dependencies,
+  resolutions,
+  name,
+  version,
+  appendix = {}
+}) {
+  const dependencyList = Object.keys(dependencies);
+  const resolutionsList = Object.keys(resolutions);
+  return resolutionsList.reduce((acc, resolution) => {
+    if (!dependencyList.includes(resolution)) {
+      const hasResolutionOverride = (0, import_compare_versions.compare)(resolutions[resolution], dependencies[resolution], ">");
+      if (hasResolutionOverride) {
+        return __spreadProps(__spreadValues(__spreadValues({}, appendix), acc), {
+          [`${resolution}@${resolutions[resolution]}`]: __spreadProps(__spreadValues({}, appendix[`${resolution}@${resolutions[resolution]}`]), {
+            [name]: [version]
+          })
+        });
+      }
+    }
+    return acc || {};
+  }, {});
+}
+function updatePackageJSON({
+  appendix,
+  path,
+  config,
+  resolutions
+}) {
+  var _a;
+  const jsonPath = (0, import_path.resolve)(path);
+  const pastoralist = (config == null ? void 0 : config.pastoralist) ? __spreadProps(__spreadValues({}, config.pastoralist), { appendix }) : { appendix };
+  const json = __spreadValues(__spreadProps(__spreadValues({}, config), {
+    pastoralist
+  }), (config == null ? void 0 : config.resolutions) ? { resolutions } : (config == null ? void 0 : config.overrides) ? { overrides: resolutions } : ((_a = config == null ? void 0 : config.pnpm) == null ? void 0 : _a.overrides) ? { pnpm: __spreadProps(__spreadValues({}, config.pnpm), { overrides: resolutions }) } : {});
+  (0, import_fs.writeFile)(jsonPath, JSON.stringify(json, null, 2), (err) => console.log(`\u{1F411} \u{1F469}\u{1F3FD}\u200D\u{1F33E} Pastoralist had an issue updating overrides or resolutions in the package.json!${err ? `, ${err}` : ""}`));
+}
+function update(options) {
+  const { depPaths = ["node_modules/**/package.json"], path = "package.json" } = options;
+  const config = resolveJSON(path);
+  const resolutions = resolveResolutions({ options, config });
+  const resolutionsList = Object.keys(resolutions);
+  const nodeModulePackageJSONs = (0, import_fast_glob.sync)(depPaths);
+  const appendix = nodeModulePackageJSONs.reduce((acc, packageJSON) => {
+    const { dependencies = {}, name, version } = resolveJSON(packageJSON);
+    const dependenciesList = Object.keys(dependencies);
+    if (!dependenciesList.length)
+      return acc;
+    const hasOverriddenDependencies = dependenciesList.some((dependencyItem) => resolutionsList.includes(dependencyItem));
+    if (!hasOverriddenDependencies)
+      return acc;
+    const appendixItem = updateAppendix(__spreadValues({
+      dependencies,
+      name,
+      resolutions,
+      version
+    }, options.appendix ? { appendix: options.appendix } : {}));
+    return __spreadValues(__spreadValues({}, acc), appendixItem);
+  }, {});
+  const appendixItems = Object.keys(appendix);
+  const updatedResolutions = appendixItems.length > 0 && appendixItems.filter((item) => Object.keys(appendix[item]).length > 0);
+  updatePackageJSON({
+    appendix,
+    path,
+    config,
+    resolutions: updatedResolutions
+  });
+  return appendix;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  resolveJSON,
+  resolveResolutions,
+  update,
+  updateAppendix,
+  updatePackageJSON
+});

package/dist/scripts.mjs

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+import {
+  resolveJSON,
+  resolveResolutions,
+  update,
+  updateAppendix,
+  updatePackageJSON
+} from "./chunk-WXUCJGGF.mjs";
+export {
+  resolveJSON,
+  resolveResolutions,
+  update,
+  updateAppendix,
+  updatePackageJSON
+};

package/dist/types.d.ts

@@ -0,0 +1,47 @@
+declare type PastoralistJSON = {
+    dependencies?: Record<string, string>;
+    name: string;
+    version: string;
+    resolutions?: Record<string, string>;
+    overrides?: Record<string, string>;
+    pnpm?: {
+        overrides?: Record<string, string>;
+    };
+    pastoralist?: {
+        appendix?: Appendix;
+    };
+};
+declare type Appendix = Record<string, Record<string, string> | string>;
+declare type ResolveResolutionOptions = {
+    config?: {
+        overrides?: Record<string, string> | undefined;
+        pnpm?: {
+            overrides?: Record<string, string> | undefined;
+        };
+        resolutions?: Record<string, string> | undefined;
+    };
+    options?: Options;
+};
+declare type UpdateAppendixOptions = {
+    appendix?: Appendix;
+    dependencies: Record<string, string>;
+    resolutions: Record<string, string>;
+    name: string;
+    version: string;
+};
+declare type Options = {
+    appendix?: Appendix;
+    debug?: boolean;
+    isTestingCLI?: boolean;
+    path?: string;
+    depPaths?: string[];
+};
+declare type OverridesType = Record<string, string>;
+declare type UpdatePackageJSONOptions = {
+    appendix?: Appendix;
+    path: string;
+    config: PastoralistJSON;
+    resolutions?: false | string[];
+};
+
+export { Appendix, Options, OverridesType, PastoralistJSON, ResolveResolutionOptions, UpdateAppendixOptions, UpdatePackageJSONOptions };

package/dist/types.js

@@ -0,0 +1,17 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/types.ts
+var types_exports = {};
+module.exports = __toCommonJS(types_exports);

package/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "pastoralist",
+  "version": "0.0.2",
+  "description": "(WIP) a tool to watch over node module resolutions and overrides 🐑 👩🏽‍🌾",
+  "main": "dist/index.js",
+  "types": "dist/types.d.ts",
+  "exports": {
+    ".": {
+      "require": "./dist/index.cjs",
+      "import": "./dist/index.mjs"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "bin": {
+    "pastoralist": "./dist/index.js"
+  },
+  "scripts": {
+    "build": "tsup src/index.ts src/program.ts src/scripts.ts --format cjs,esm && tsup src/types.ts --dts-only",
+    "test": "vitest run"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/yowainwright/pastoralist.git"
+  },
+  "keywords": [
+    "resolutions",
+    "overrides",
+    "dependencies",
+    "security",
+    "dependency-management",
+    "yarn",
+    "pnpm"
+  ],
+  "author": "Jeff Wainwright <https:jeffry.in> (yowainwright@gmail.com)",
+  "license": "MIT",
+  "bugs": {
+    "url": "https://github.com/yowainwright/pastoralist/issues"
+  },
+  "homepage": "https://github.com/yowainwright/pastoralist#readme",
+  "dependencies": {
+    "commander": "^9.2.0",
+    "compare-versions": "^4.1.3",
+    "fast-glob": "^3.2.11"
+  },
+  "devDependencies": {
+    "@types/node": "^17.0.31",
+    "@typescript-eslint/eslint-plugin": "^5.14.0",
+    "@typescript-eslint/parser": "^5.21.0",
+    "eslint": "^8.10.0",
+    "eslint-config-prettier": "^8.5.0",
+    "release-it": "^15.0.0",
+    "stdouttojson": "^0.3.1",
+    "ts-node": "^10.7.0",
+    "tslib": "^2.3.1",
+    "tsup": "^5.12.6",
+    "typescript": "^4.6.4",
+    "vitest": "^0.10.0"
+  }
+}