snyk-nodejs-lockfile-parser 1.52.11 → 1.53.1

package/README.md

@@ -14,6 +14,7 @@ Dep graph generation supported for:
 
 - `package-lock.json` (at Versions 2 and 3)
 - `yarn.lock`
+- `pnpm-lock.yaml` (lockfileVersion 5.x or 6.x)
 
 Legacy dep tree supported for:
 

package/dist/dep-graph-builders/index.d.ts

@@ -1,4 +1,6 @@
 import { parseYarnLockV1Project, parseYarnLockV1WorkspaceProject, buildDepGraphYarnLockV1SimpleCyclesPruned, buildDepGraphYarnLockV1Simple, buildDepGraphYarnLockV1WorkspaceCyclesPruned, buildDepGraphYarnLockV1Workspace, extractPkgsFromYarnLockV1 } from './yarn-lock-v1';
 import { buildDepGraphYarnLockV2Simple, parseYarnLockV2Project, extractPkgsFromYarnLockV2 } from './yarn-lock-v2';
 import { parseNpmLockV2Project } from './npm-lock-v2';
-export { parseNpmLockV2Project, parseYarnLockV1Project, buildDepGraphYarnLockV1Workspace, buildDepGraphYarnLockV1SimpleCyclesPruned, buildDepGraphYarnLockV1Simple, buildDepGraphYarnLockV1WorkspaceCyclesPruned, parseYarnLockV1WorkspaceProject, extractPkgsFromYarnLockV1, buildDepGraphYarnLockV2Simple, parseYarnLockV2Project, extractPkgsFromYarnLockV2, };
+import { parsePnpmProject } from './pnpm';
+import { parsePkgJson } from './util';
+export { parseNpmLockV2Project, parseYarnLockV1Project, buildDepGraphYarnLockV1Workspace, buildDepGraphYarnLockV1SimpleCyclesPruned, buildDepGraphYarnLockV1Simple, buildDepGraphYarnLockV1WorkspaceCyclesPruned, parseYarnLockV1WorkspaceProject, extractPkgsFromYarnLockV1, buildDepGraphYarnLockV2Simple, parseYarnLockV2Project, extractPkgsFromYarnLockV2, parsePnpmProject, parsePkgJson, };

package/dist/dep-graph-builders/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.extractPkgsFromYarnLockV2 = exports.parseYarnLockV2Project = exports.buildDepGraphYarnLockV2Simple = exports.extractPkgsFromYarnLockV1 = exports.parseYarnLockV1WorkspaceProject = exports.buildDepGraphYarnLockV1WorkspaceCyclesPruned = exports.buildDepGraphYarnLockV1Simple = exports.buildDepGraphYarnLockV1SimpleCyclesPruned = exports.buildDepGraphYarnLockV1Workspace = exports.parseYarnLockV1Project = exports.parseNpmLockV2Project = void 0;
+exports.parsePkgJson = exports.parsePnpmProject = exports.extractPkgsFromYarnLockV2 = exports.parseYarnLockV2Project = exports.buildDepGraphYarnLockV2Simple = exports.extractPkgsFromYarnLockV1 = exports.parseYarnLockV1WorkspaceProject = exports.buildDepGraphYarnLockV1WorkspaceCyclesPruned = exports.buildDepGraphYarnLockV1Simple = exports.buildDepGraphYarnLockV1SimpleCyclesPruned = exports.buildDepGraphYarnLockV1Workspace = exports.parseYarnLockV1Project = exports.parseNpmLockV2Project = void 0;
 const yarn_lock_v1_1 = require("./yarn-lock-v1");
 Object.defineProperty(exports, "parseYarnLockV1Project", { enumerable: true, get: function () { return yarn_lock_v1_1.parseYarnLockV1Project; } });
 Object.defineProperty(exports, "parseYarnLockV1WorkspaceProject", { enumerable: true, get: function () { return yarn_lock_v1_1.parseYarnLockV1WorkspaceProject; } });
@@ -15,4 +15,8 @@ Object.defineProperty(exports, "parseYarnLockV2Project", { enumerable: true, get
 Object.defineProperty(exports, "extractPkgsFromYarnLockV2", { enumerable: true, get: function () { return yarn_lock_v2_1.extractPkgsFromYarnLockV2; } });
 const npm_lock_v2_1 = require("./npm-lock-v2");
 Object.defineProperty(exports, "parseNpmLockV2Project", { enumerable: true, get: function () { return npm_lock_v2_1.parseNpmLockV2Project; } });
+const pnpm_1 = require("./pnpm");
+Object.defineProperty(exports, "parsePnpmProject", { enumerable: true, get: function () { return pnpm_1.parsePnpmProject; } });
+const util_1 = require("./util");
+Object.defineProperty(exports, "parsePkgJson", { enumerable: true, get: function () { return util_1.parsePkgJson; } });
 //# sourceMappingURL=index.js.map

package/dist/dep-graph-builders/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../lib/dep-graph-builders/index.ts"],"names":[],"mappings":";;;AAAA,iDAQwB;AAUtB,uGAjBA,qCAAsB,OAiBA;AAKtB,gHArBA,8CAA+B,OAqBA;AAH/B,0HAjBA,wDAAyC,OAiBA;AACzC,8GAjBA,4CAA6B,OAiBA;AAC7B,6HAjBA,2DAA4C,OAiBA;AAH5C,iHAbA,+CAAgC,OAaA;AAKhC,0GAjBA,wCAAyB,OAiBA;AAf3B,iDAIwB;AAYtB,8GAfA,4CAA6B,OAeA;AAC7B,uGAfA,qCAAsB,OAeA;AACtB,0GAfA,wCAAyB,OAeA;AAb3B,+CAAsD;AAGpD,sGAHO,mCAAqB,OAGP"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../lib/dep-graph-builders/index.ts"],"names":[],"mappings":";;;AAAA,iDAQwB;AAYtB,uGAnBA,qCAAsB,OAmBA;AAKtB,gHAvBA,8CAA+B,OAuBA;AAH/B,0HAnBA,wDAAyC,OAmBA;AACzC,8GAnBA,4CAA6B,OAmBA;AAC7B,6HAnBA,2DAA4C,OAmBA;AAH5C,iHAfA,+CAAgC,OAeA;AAKhC,0GAnBA,wCAAyB,OAmBA;AAjB3B,iDAIwB;AActB,8GAjBA,4CAA6B,OAiBA;AAC7B,uGAjBA,qCAAsB,OAiBA;AACtB,0GAjBA,wCAAyB,OAiBA;AAf3B,+CAAsD;AAKpD,sGALO,mCAAqB,OAKP;AAJvB,iCAA0C;AAexC,iGAfO,uBAAgB,OAeP;AAdlB,iCAAsC;AAepC,6FAfO,mBAAY,OAeP"}

package/dist/dep-graph-builders/pnpm/build-dep-graph-pnpm.d.ts

@@ -0,0 +1,4 @@
+import type { PnpmProjectParseOptions, PnpmWorkspaceArgs } from '../types';
+import type { PackageJsonBase } from '../types';
+import { PnpmLockfileParser } from './lockfile-parser/lockfile-parser';
+export declare const buildDepGraphPnpm: (lockFileParser: PnpmLockfileParser, pkgJson: PackageJsonBase, options: PnpmProjectParseOptions, workspaceArgs?: PnpmWorkspaceArgs) => Promise<import("@snyk/dep-graph").DepGraph>;

package/dist/dep-graph-builders/pnpm/build-dep-graph-pnpm.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildDepGraphPnpm = void 0;
+const dep_graph_1 = require("@snyk/dep-graph");
+const util_1 = require("../util");
+const utils_1 = require("./utils");
+const event_loop_spinner_1 = require("event-loop-spinner");
+const buildDepGraphPnpm = async (lockFileParser, pkgJson, options, workspaceArgs) => {
+    var _a;
+    const { strictOutOfSync, includeOptionalDeps, pruneWithinTopLevelDeps } = options;
+    const depGraphBuilder = new dep_graph_1.DepGraphBuilder({ name: 'pnpm' }, { name: pkgJson.name, version: pkgJson.version });
+    const extractedPnpmPkgs = lockFileParser.extractedPackages;
+    const topLevelDeps = (0, util_1.getTopLevelDeps)(pkgJson, options);
+    const extractedTopLevelDeps = lockFileParser.extractTopLevelDependencies(options) || {};
+    for (const name of Object.keys(topLevelDeps)) {
+        topLevelDeps[name].version = extractedTopLevelDeps[name].version;
+    }
+    const rootNode = {
+        id: 'root-node',
+        name: pkgJson.name,
+        version: pkgJson.version,
+        dependencies: topLevelDeps,
+        isDev: false,
+    };
+    await dfsVisit(depGraphBuilder, rootNode, extractedPnpmPkgs, strictOutOfSync, includeOptionalDeps, 
+    // we have rootWorkspaceOverrides if this is workspace pkg with overrides
+    // at root - therefore it should take precedent
+    // TODO: inspect if this is needed at all, seems like pnpm resolves everything in lockfile
+    (workspaceArgs === null || workspaceArgs === void 0 ? void 0 : workspaceArgs.rootOverrides) || ((_a = pkgJson.pnpm) === null || _a === void 0 ? void 0 : _a.overrides) || {}, pruneWithinTopLevelDeps, lockFileParser);
+    return depGraphBuilder.build();
+};
+exports.buildDepGraphPnpm = buildDepGraphPnpm;
+/**
+ * Use DFS to add all nodes and edges to the depGraphBuilder and prune cyclic nodes.
+ * The visitedMap keep track of which nodes have already been discovered during traversal.
+ *  - If a node doesn't exist in the map, it means it hasn't been visited.
+ *  - If a node is already visited, simply connect the new node with this node.
+ */
+const dfsVisit = async (depGraphBuilder, node, extractedPnpmPkgs, strictOutOfSync, includeOptionalDeps, overrides, pruneWithinTopLevel, lockFileParser, visited) => {
+    for (const [name, depInfo] of Object.entries(node.dependencies || {})) {
+        if (event_loop_spinner_1.eventLoopSpinner.isStarving()) {
+            await event_loop_spinner_1.eventLoopSpinner.spin();
+        }
+        const localVisited = visited || new Set();
+        const childNode = (0, utils_1.getPnpmChildNode)(name, depInfo, extractedPnpmPkgs, strictOutOfSync, includeOptionalDeps, lockFileParser);
+        if (localVisited.has(childNode.id)) {
+            if (pruneWithinTopLevel) {
+                const prunedId = `${childNode.id}:pruned`;
+                depGraphBuilder.addPkgNode({ name: childNode.name, version: childNode.version }, prunedId, {
+                    labels: Object.assign({ scope: childNode.isDev ? 'dev' : 'prod', pruned: 'true' }, (node.missingLockFileEntry && {
+                        missingLockFileEntry: 'true',
+                    })),
+                });
+                depGraphBuilder.connectDep(node.id, prunedId);
+            }
+            else {
+                depGraphBuilder.connectDep(node.id, childNode.id);
+            }
+            continue;
+        }
+        depGraphBuilder.addPkgNode({ name: childNode.name, version: childNode.version }, childNode.id, {
+            labels: Object.assign({ scope: childNode.isDev ? 'dev' : 'prod' }, (node.missingLockFileEntry && {
+                missingLockFileEntry: 'true',
+            })),
+        });
+        depGraphBuilder.connectDep(node.id, childNode.id);
+        localVisited.add(childNode.id);
+        await dfsVisit(depGraphBuilder, childNode, extractedPnpmPkgs, strictOutOfSync, includeOptionalDeps, overrides, pruneWithinTopLevel, lockFileParser, localVisited);
+    }
+};
+//# sourceMappingURL=build-dep-graph-pnpm.js.map

package/dist/dep-graph-builders/pnpm/build-dep-graph-pnpm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-dep-graph-pnpm.js","sourceRoot":"","sources":["../../../lib/dep-graph-builders/pnpm/build-dep-graph-pnpm.ts"],"names":[],"mappings":";;;AAAA,+CAAkD;AAClD,kCAA0C;AAO1C,mCAA2C;AAC3C,2DAAsD;AAI/C,MAAM,iBAAiB,GAAG,KAAK,EACpC,cAAkC,EAClC,OAAwB,EACxB,OAAgC,EAChC,aAAiC,EACjC,EAAE;;IACF,MAAM,EAAE,eAAe,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,GACrE,OAAO,CAAC;IAEV,MAAM,eAAe,GAAG,IAAI,2BAAe,CACzC,EAAE,IAAI,EAAE,MAAM,EAAE,EAChB,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CACjD,CAAC;IAEF,MAAM,iBAAiB,GACrB,cAAc,CAAC,iBAAiB,CAAC;IAEnC,MAAM,YAAY,GAAG,IAAA,sBAAe,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAEvD,MAAM,qBAAqB,GACzB,cAAc,CAAC,2BAA2B,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAE5D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE;QAC5C,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;KAClE;IAED,MAAM,QAAQ,GAAa;QACzB,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,YAAY,EAAE,YAAY;QAC1B,KAAK,EAAE,KAAK;KACb,CAAC;IAEF,MAAM,QAAQ,CACZ,eAAe,EACf,QAAQ,EACR,iBAAiB,EACjB,eAAe,EACf,mBAAmB;IACnB,yEAAyE;IACzE,+CAA+C;IAC/C,0FAA0F;IAC1F,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,aAAa,MAAI,MAAA,OAAO,CAAC,IAAI,0CAAE,SAAS,CAAA,IAAI,EAAE,EAC7D,uBAAuB,EACvB,cAAc,CACf,CAAC;IAEF,OAAO,eAAe,CAAC,KAAK,EAAE,CAAC;AACjC,CAAC,CAAC;AAjDW,QAAA,iBAAiB,qBAiD5B;AAEF;;;;;GAKG;AACH,MAAM,QAAQ,GAAG,KAAK,EACpB,eAAgC,EAChC,IAAc,EACd,iBAAqC,EACrC,eAAwB,EACxB,mBAA4B,EAC5B,SAAoB,EACpB,mBAA4B,EAC5B,cAAkC,EAClC,OAAqB,EACN,EAAE;IACjB,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE;QACrE,IAAI,qCAAgB,CAAC,UAAU,EAAE,EAAE;YACjC,MAAM,qCAAgB,CAAC,IAAI,EAAE,CAAC;SAC/B;QAED,MAAM,YAAY,GAAG,OAAO,IAAI,IAAI,GAAG,EAAU,CAAC;QAElD,MAAM,SAAS,GAAa,IAAA,wBAAgB,EAC1C,IAAI,EACJ,OAAO,EACP,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,cAAc,CACf,CAAC;QAEF,IAAI,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE;YAClC,IAAI,mBAAmB,EAAE;gBACvB,MAAM,QAAQ,GAAG,GAAG,SAAS,CAAC,EAAE,SAAS,CAAC;gBAC1C,eAAe,CAAC,UAAU,CACxB,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,EACpD,QAAQ,EACR;oBACE,MAAM,kBACJ,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EACvC,MAAM,EAAE,MAAM,IACX,CAAC,IAAI,CAAC,oBAAoB,IAAI;wBAC/B,oBAAoB,EAAE,MAAM;qBAC7B,CAAC,CACH;iBACF,CACF,CAAC;gBACF,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;aAC/C;iBAAM;gBACL,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;aACnD;YACD,SAAS;SACV;QAED,eAAe,CAAC,UAAU,CACxB,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,EACpD,SAAS,CAAC,EAAE,EACZ;YACE,MAAM,kBACJ,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IACpC,CAAC,IAAI,CAAC,oBAAoB,IAAI;gBAC/B,oBAAoB,EAAE,MAAM;aAC7B,CAAC,CACH;SACF,CACF,CAAC;QACF,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAClD,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC/B,MAAM,QAAQ,CACZ,eAAe,EACf,SAAS,EACT,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,SAAS,EACT,mBAAmB,EACnB,cAAc,EACd,YAAY,CACb,CAAC;KACH;AACH,CAAC,CAAC"}

package/dist/dep-graph-builders/pnpm/index.d.ts

@@ -0,0 +1,4 @@
+import { PnpmProjectParseOptions, PnpmWorkspaceArgs } from '../types';
+import { DepGraph } from '@snyk/dep-graph';
+import { NodeLockfileVersion } from '../../utils';
+export declare const parsePnpmProject: (pkgJsonContent: string, pnpmLockContent: string, options: PnpmProjectParseOptions, lockfileVersion?: NodeLockfileVersion, workspaceArgs?: PnpmWorkspaceArgs) => Promise<DepGraph>;

package/dist/dep-graph-builders/pnpm/index.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parsePnpmProject = void 0;
+const util_1 = require("../util");
+const build_dep_graph_pnpm_1 = require("./build-dep-graph-pnpm");
+const index_1 = require("./lockfile-parser/index");
+const parsePnpmProject = async (pkgJsonContent, pnpmLockContent, options, lockfileVersion, workspaceArgs) => {
+    const { includeDevDeps, includeOptionalDeps, strictOutOfSync, pruneWithinTopLevelDeps, } = options;
+    const pkgJson = (0, util_1.parsePkgJson)(pkgJsonContent);
+    const lockFileParser = (0, index_1.getPnpmLockfileParser)(pnpmLockContent, lockfileVersion, workspaceArgs);
+    const depgraph = await (0, build_dep_graph_pnpm_1.buildDepGraphPnpm)(lockFileParser, pkgJson, {
+        includeDevDeps,
+        strictOutOfSync,
+        includeOptionalDeps,
+        pruneWithinTopLevelDeps,
+    }, workspaceArgs);
+    return depgraph;
+};
+exports.parsePnpmProject = parsePnpmProject;
+//# sourceMappingURL=index.js.map

package/dist/dep-graph-builders/pnpm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/dep-graph-builders/pnpm/index.ts"],"names":[],"mappings":";;;AAAA,kCAAuC;AAMvC,iEAA2D;AAE3D,mDAAgE;AAIzD,MAAM,gBAAgB,GAAG,KAAK,EACnC,cAAsB,EACtB,eAAuB,EACvB,OAAgC,EAChC,eAAqC,EACrC,aAAiC,EACd,EAAE;IACrB,MAAM,EACJ,cAAc,EACd,mBAAmB,EACnB,eAAe,EACf,uBAAuB,GACxB,GAAG,OAAO,CAAC;IAEZ,MAAM,OAAO,GAAoB,IAAA,mBAAY,EAAC,cAAc,CAAC,CAAC;IAE9D,MAAM,cAAc,GAAuB,IAAA,6BAAqB,EAC9D,eAAe,EACf,eAAe,EACf,aAAa,CACd,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,IAAA,wCAAiB,EACtC,cAAc,EACd,OAAO,EACP;QACE,cAAc;QACd,eAAe;QACf,mBAAmB;QACnB,uBAAuB;KACxB,EACD,aAAa,CACd,CAAC;IAEF,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAnCW,QAAA,gBAAgB,oBAmC3B"}

package/dist/dep-graph-builders/pnpm/lockfile-parser/index.d.ts

@@ -0,0 +1,4 @@
+import { PnpmLockfileParser } from './lockfile-parser';
+import { PnpmWorkspaceArgs } from '../../types';
+import { NodeLockfileVersion } from '../../../utils';
+export declare function getPnpmLockfileParser(pnpmLockContent: string, lockfileVersion?: NodeLockfileVersion, workspaceArgs?: PnpmWorkspaceArgs): PnpmLockfileParser;

package/dist/dep-graph-builders/pnpm/lockfile-parser/index.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getPnpmLockfileParser = void 0;
+const js_yaml_1 = require("js-yaml");
+const lockfile_v6_1 = require("./lockfile-v6");
+const lockfile_v5_1 = require("./lockfile-v5");
+const error_catalog_nodejs_public_1 = require("@snyk/error-catalog-nodejs-public");
+const utils_1 = require("../../../utils");
+function getPnpmLockfileParser(pnpmLockContent, lockfileVersion, workspaceArgs) {
+    const rawPnpmLock = (0, js_yaml_1.load)(pnpmLockContent, {
+        json: true,
+        schema: js_yaml_1.FAILSAFE_SCHEMA,
+    });
+    const version = rawPnpmLock.lockfileVersion;
+    if (lockfileVersion === utils_1.NodeLockfileVersion.PnpmLockV5 ||
+        version.startsWith('5')) {
+        return new lockfile_v5_1.LockfileV5Parser(rawPnpmLock, workspaceArgs);
+    }
+    if (lockfileVersion === utils_1.NodeLockfileVersion.PnpmLockV6 ||
+        version.startsWith('6')) {
+        return new lockfile_v6_1.LockfileV6Parser(rawPnpmLock, workspaceArgs);
+    }
+    throw new error_catalog_nodejs_public_1.OpenSourceEcosystems.PnpmUnsupportedLockfileVersionError(`The pnpm-lock.yaml lockfile version ${lockfileVersion} is not supported`);
+}
+exports.getPnpmLockfileParser = getPnpmLockfileParser;
+//# sourceMappingURL=index.js.map

package/dist/dep-graph-builders/pnpm/lockfile-parser/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../lib/dep-graph-builders/pnpm/lockfile-parser/index.ts"],"names":[],"mappings":";;;AAAA,qCAAgD;AAEhD,+CAAiD;AACjD,+CAAiD;AAEjD,mFAAyE;AACzE,0CAAqD;AAErD,SAAgB,qBAAqB,CACnC,eAAuB,EACvB,eAAqC,EACrC,aAAiC;IAEjC,MAAM,WAAW,GAAG,IAAA,cAAI,EAAC,eAAe,EAAE;QACxC,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,yBAAe;KACxB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,WAAW,CAAC,eAAe,CAAC;IAE5C,IACE,eAAe,KAAK,2BAAmB,CAAC,UAAU;QAClD,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EACvB;QACA,OAAO,IAAI,8BAAgB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;KACzD;IAED,IACE,eAAe,KAAK,2BAAmB,CAAC,UAAU;QAClD,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EACvB;QACA,OAAO,IAAI,8BAAgB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;KACzD;IAED,MAAM,IAAI,kDAAoB,CAAC,mCAAmC,CAChE,uCAAuC,eAAe,mBAAmB,CAC1E,CAAC;AACJ,CAAC;AA5BD,sDA4BC"}

package/dist/dep-graph-builders/pnpm/lockfile-parser/lockfile-parser.d.ts

@@ -0,0 +1,28 @@
+import { PnpmWorkspaceArgs } from '../../types';
+import { NormalisedPnpmPkgs, ParsedDepPath, PnpmDepPath, PnpmDeps, PnpmLockPkg } from '../types';
+export declare abstract class PnpmLockfileParser {
+    lockFileVersion: string;
+    rawPnpmLock: any;
+    packages: Record<PnpmDepPath, PnpmLockPkg>;
+    dependencies: Record<string, any>;
+    devDependencies: Record<string, any>;
+    optionalDependencies: Record<string, any>;
+    peerDependencies: Record<string, any>;
+    extractedPackages: NormalisedPnpmPkgs;
+    workspaceArgs?: PnpmWorkspaceArgs;
+    constructor(rawPnpmLock: any, workspaceArgs?: PnpmWorkspaceArgs);
+    isWorkspaceLockfile(): boolean | undefined;
+    getRoot(rawPnpmLock: any): any;
+    extractPackages(): NormalisedPnpmPkgs;
+    extractTopLevelDependencies(options: {
+        includeDevDeps: boolean;
+        includeOptionalDeps?: boolean;
+        includePeerDeps?: boolean;
+    }): PnpmDeps;
+    normalizeVersion(name: string, version: string, isDev: boolean): string;
+    resolveWorkspacesCrossReference(name: string, version: string, isDev: boolean): string;
+    abstract normalizePackagesDeps(dependencies: any, isDev: any): Record<string, string>;
+    abstract normalizeTopLevelDeps(dependencies: any, isDev: any): PnpmDeps;
+    abstract parseDepPath(depPath: string): ParsedDepPath;
+    abstract excludeTransPeerDepsVersions(fullVersionStr: string): string;
+}

package/dist/dep-graph-builders/pnpm/lockfile-parser/lockfile-parser.js

@@ -0,0 +1,119 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PnpmLockfileParser = void 0;
+const semver_1 = require("semver");
+const pathUtil = require("path");
+class PnpmLockfileParser {
+    constructor(rawPnpmLock, workspaceArgs) {
+        this.rawPnpmLock = rawPnpmLock;
+        this.lockFileVersion = rawPnpmLock.lockFileVersion;
+        this.workspaceArgs = workspaceArgs;
+        const depsRoot = this.getRoot(rawPnpmLock);
+        this.packages = rawPnpmLock.packages || {};
+        this.dependencies = depsRoot.dependencies || {};
+        this.devDependencies = depsRoot.devDependencies || {};
+        this.optionalDependencies = depsRoot.optionalDependencies || {};
+        this.peerDependencies = depsRoot.peerDependencies || {};
+        this.extractedPackages = this.extractPackages();
+    }
+    isWorkspaceLockfile() {
+        var _a;
+        return (_a = this.workspaceArgs) === null || _a === void 0 ? void 0 : _a.isWorkspacePkg;
+    }
+    getRoot(rawPnpmLock) {
+        var _a, _b;
+        let depsRoot = rawPnpmLock;
+        if ((_a = this.workspaceArgs) === null || _a === void 0 ? void 0 : _a.isWorkspacePkg) {
+            depsRoot = rawPnpmLock.importers[this.workspaceArgs.workspacePath];
+        }
+        if ((_b = this.workspaceArgs) === null || _b === void 0 ? void 0 : _b.isRoot) {
+            if (!this.workspaceArgs.workspacePath) {
+                this.workspaceArgs.workspacePath = '.';
+            }
+            depsRoot = rawPnpmLock.importers[this.workspaceArgs.workspacePath];
+        }
+        return depsRoot;
+    }
+    extractPackages() {
+        const packages = {};
+        Object.entries(this.packages).forEach(([depPath, versionData]) => {
+            // name and version are optional in version data - if they don't show up in version data, they can be deducted from the dependency path
+            let { name, version } = versionData;
+            if (!(name && version)) {
+                ({ name, version } = this.parseDepPath(depPath));
+            }
+            const pkg = {
+                id: depPath,
+                name,
+                version,
+                isDev: versionData.dev == 'true',
+                dependencies: versionData.dependencies,
+                optionalDependencies: versionData.dependencies,
+            };
+            packages[`${pkg.name}@${pkg.version}`] = pkg;
+        });
+        return packages;
+    }
+    extractTopLevelDependencies(options) {
+        const prodDeps = this.normalizeTopLevelDeps(this.dependencies || {}, false);
+        const devDeps = options.includeDevDeps
+            ? this.normalizeTopLevelDeps(this.devDependencies || {}, true)
+            : {};
+        const optionalDeps = options.includeOptionalDeps
+            ? this.normalizeTopLevelDeps(this.optionalDependencies || {}, false)
+            : {};
+        const peerDeps = options.includePeerDeps
+            ? this.normalizeTopLevelDeps(this.peerDependencies || {}, false)
+            : {};
+        return Object.assign(Object.assign(Object.assign(Object.assign({}, prodDeps), devDeps), optionalDeps), peerDeps);
+    }
+    normalizeVersion(name, version, isDev) {
+        if (this.isWorkspaceLockfile()) {
+            version = this.resolveWorkspacesCrossReference(name, version, isDev);
+        }
+        if (!(0, semver_1.valid)(version)) {
+            version = this.excludeTransPeerDepsVersions(version);
+            if (!(0, semver_1.valid)(version)) {
+                // for npm and git ref packages
+                // they show up in packages with keys equal to the version in top level deps
+                // e.g. body-parser with version github.com/expressjs/body-parser/263f602e6ae34add6332c1eb4caa808893b0b711
+                if (this.packages[version]) {
+                    return this.packages[version].version;
+                }
+            }
+        }
+        return version;
+    }
+    resolveWorkspacesCrossReference(name, version, isDev) {
+        if (!this.workspaceArgs) {
+            return version;
+        }
+        if (version.startsWith('link:')) {
+            // In  workspaces example:
+            // package-b:
+            //   specifier: 1.0.0
+            //   version: link:../pkg-b
+            const depPath = version.split('link:')[1];
+            const resolvedPathDep = pathUtil
+                .join(this.workspaceArgs.workspacePath, depPath)
+                .replace(/\\/g, '/');
+            // cross referenced package, we add it to the extracted packages
+            version = this.workspaceArgs.projectsVersionMap[resolvedPathDep];
+            const subDeps = this.rawPnpmLock.importers[resolvedPathDep] || {
+                dependencies: {},
+            };
+            // todo: consider getting devDependencies, optionaldependencies
+            const resolvedDeps = this.normalizePackagesDeps(subDeps.dependencies, isDev);
+            this.extractedPackages[`${name}@${version}`] = {
+                name,
+                version,
+                id: `${name}@${version}`,
+                isDev,
+                dependencies: resolvedDeps,
+            };
+        }
+        return version;
+    }
+}
+exports.PnpmLockfileParser = PnpmLockfileParser;
+//# sourceMappingURL=lockfile-parser.js.map

package/dist/dep-graph-builders/pnpm/lockfile-parser/lockfile-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockfile-parser.js","sourceRoot":"","sources":["../../../../lib/dep-graph-builders/pnpm/lockfile-parser/lockfile-parser.ts"],"names":[],"mappings":";;;AASA,mCAA+B;AAC/B,iCAAiC;AAEjC,MAAsB,kBAAkB;IAWtC,YAAmB,WAAgB,EAAE,aAAiC;QACpE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC,eAAe,CAAC;QACnD,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,YAAY,IAAI,EAAE,CAAC;QAChD,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,eAAe,IAAI,EAAE,CAAC;QACtD,IAAI,CAAC,oBAAoB,GAAG,QAAQ,CAAC,oBAAoB,IAAI,EAAE,CAAC;QAChE,IAAI,CAAC,gBAAgB,GAAG,QAAQ,CAAC,gBAAgB,IAAI,EAAE,CAAC;QACxD,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;IAClD,CAAC;IAEM,mBAAmB;;QACxB,OAAO,MAAA,IAAI,CAAC,aAAa,0CAAE,cAAc,CAAC;IAC5C,CAAC;IAEM,OAAO,CAAC,WAAgB;;QAC7B,IAAI,QAAQ,GAAG,WAAW,CAAC;QAC3B,IAAI,MAAA,IAAI,CAAC,aAAa,0CAAE,cAAc,EAAE;YACtC,QAAQ,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;SACpE;QACD,IAAI,MAAA,IAAI,CAAC,aAAa,0CAAE,MAAM,EAAE;YAC9B,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE;gBACrC,IAAI,CAAC,aAAa,CAAC,aAAa,GAAG,GAAG,CAAC;aACxC;YACD,QAAQ,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;SACpE;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEM,eAAe;QACpB,MAAM,QAAQ,GAAuB,EAAE,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CACnC,CAAC,CAAC,OAAO,EAAE,WAAW,CAAgB,EAAE,EAAE;YACxC,uIAAuI;YACvI,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC;YACpC,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE;gBACtB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;aAClD;YACD,MAAM,GAAG,GAAsB;gBAC7B,EAAE,EAAE,OAAO;gBACX,IAAI;gBACJ,OAAO;gBACP,KAAK,EAAE,WAAW,CAAC,GAAG,IAAI,MAAM;gBAChC,YAAY,EAAE,WAAW,CAAC,YAAY;gBACtC,oBAAoB,EAAE,WAAW,CAAC,YAAY;aAC/C,CAAC;YACF,QAAQ,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,GAAG,CAAC;QAC/C,CAAC,CACF,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEM,2BAA2B,CAAC,OAIlC;QACC,MAAM,QAAQ,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc;YACpC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,EAAE,IAAI,CAAC;YAC9D,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,YAAY,GAAG,OAAO,CAAC,mBAAmB;YAC9C,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,EAAE,KAAK,CAAC;YACpE,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe;YACtC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,EAAE,KAAK,CAAC;YAChE,CAAC,CAAC,EAAE,CAAC;QAEP,mEAAY,QAAQ,GAAK,OAAO,GAAK,YAAY,GAAK,QAAQ,EAAG;IACnE,CAAC;IAEM,gBAAgB,CACrB,IAAY,EACZ,OAAe,EACf,KAAc;QAEd,IAAI,IAAI,CAAC,mBAAmB,EAAE,EAAE;YAC9B,OAAO,GAAG,IAAI,CAAC,+BAA+B,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;SACtE;QACD,IAAI,CAAC,IAAA,cAAK,EAAC,OAAO,CAAC,EAAE;YACnB,OAAO,GAAG,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC;YACrD,IAAI,CAAC,IAAA,cAAK,EAAC,OAAO,CAAC,EAAE;gBACnB,+BAA+B;gBAC/B,4EAA4E;gBAC5E,0GAA0G;gBAC1G,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE;oBAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAQ,CAAC;iBACxC;aACF;SACF;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEM,+BAA+B,CACpC,IAAY,EACZ,OAAe,EACf,KAAc;QAEd,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;YACvB,OAAO,OAAO,CAAC;SAChB;QACD,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;YAC/B,0BAA0B;YAC1B,aAAa;YACb,qBAAqB;YACrB,2BAA2B;YAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1C,MAAM,eAAe,GAAG,QAAQ;iBAC7B,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,OAAO,CAAC;iBAC/C,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACvB,gEAAgE;YAChE,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC;YAEjE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI;gBAC7D,YAAY,EAAE,EAAE;aACjB,CAAC;YACF,+DAA+D;YAC/D,MAAM,YAAY,GAAG,IAAI,CAAC,qBAAqB,CAC7C,OAAO,CAAC,YAAY,EACpB,KAAK,CACN,CAAC;YAEF,IAAI,CAAC,iBAAiB,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC,GAAG;gBAC7C,IAAI;gBACJ,OAAO;gBACP,EAAE,EAAE,GAAG,IAAI,IAAI,OAAO,EAAE;gBACxB,KAAK;gBACL,YAAY,EAAE,YAAY;aAC3B,CAAC;SACH;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CAiCF;AAnLD,gDAmLC"}

package/dist/dep-graph-builders/pnpm/lockfile-parser/lockfile-v5.d.ts

@@ -0,0 +1,11 @@
+import { ParsedDepPath, PnpmDeps } from '../types';
+import { PnpmLockfileParser } from './lockfile-parser';
+import { PnpmWorkspaceArgs } from '../../types';
+export declare class LockfileV5Parser extends PnpmLockfileParser {
+    specifiers: Record<string, string>;
+    constructor(rawPnpmLock: any, workspaceArgs?: PnpmWorkspaceArgs);
+    parseDepPath(depPath: string): ParsedDepPath;
+    normalizeTopLevelDeps(dependencies: Record<string, string>, isDev: boolean): PnpmDeps;
+    normalizePackagesDeps(dependencies: Record<string, string>, isDev: boolean): Record<string, string>;
+    excludeTransPeerDepsVersions(fullVersionStr: string): string;
+}

package/dist/dep-graph-builders/pnpm/lockfile-parser/lockfile-v5.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LockfileV5Parser = void 0;
+const dependency_path_1 = require("dependency-path");
+const lockfile_parser_1 = require("./lockfile-parser");
+class LockfileV5Parser extends lockfile_parser_1.PnpmLockfileParser {
+    constructor(rawPnpmLock, workspaceArgs) {
+        super(rawPnpmLock, workspaceArgs);
+        const depsRoot = this.getRoot(rawPnpmLock);
+        this.specifiers = depsRoot.specifiers;
+    }
+    parseDepPath(depPath) {
+        // The 'dependency-path' parsing package only works for lockfiles v5
+        const { name, version } = (0, dependency_path_1.parse)(depPath);
+        if (!version) {
+            return { name };
+        }
+        return {
+            name,
+            version: this.excludeTransPeerDepsVersions(version),
+        };
+    }
+    normalizeTopLevelDeps(dependencies, isDev) {
+        return Object.entries(dependencies).reduce((pnpmDeps, [name, version]) => {
+            version = this.normalizeVersion(name, version, isDev);
+            pnpmDeps[name] = {
+                name,
+                version,
+                isDev,
+                specifier: this.specifiers[name],
+            };
+            return pnpmDeps;
+        }, {});
+    }
+    normalizePackagesDeps(dependencies, isDev) {
+        return Object.entries(dependencies).reduce((pnpmDeps, [name, version]) => {
+            version = this.normalizeVersion(name, version, isDev);
+            pnpmDeps[name] = version;
+            return pnpmDeps;
+        }, {});
+    }
+    // Dependency path and versions include transitive peer dependencies separated by '_'
+    // e.g. in dependencies
+    // dependencies:
+    //    acorn-jsx: 5.3.2_acorn@7.4.1
+    // OR in dependency path:
+    // '/@babel/preset-typescript/7.12.13_@babel+core@7.12.13'
+    // https://github.com/pnpm/spec/blob/master/dependency-path.md
+    excludeTransPeerDepsVersions(fullVersionStr) {
+        return fullVersionStr.split('_')[0];
+    }
+}
+exports.LockfileV5Parser = LockfileV5Parser;
+//# sourceMappingURL=lockfile-v5.js.map

package/dist/dep-graph-builders/pnpm/lockfile-parser/lockfile-v5.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockfile-v5.js","sourceRoot":"","sources":["../../../../lib/dep-graph-builders/pnpm/lockfile-parser/lockfile-v5.ts"],"names":[],"mappings":";;;AAAA,qDAAwC;AAExC,uDAAuD;AAGvD,MAAa,gBAAiB,SAAQ,oCAAkB;IAGtD,YAAmB,WAAgB,EAAE,aAAiC;QACpE,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;IACxC,CAAC;IAEM,YAAY,CAAC,OAAe;QACjC,oEAAoE;QACpE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAA,uBAAK,EAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,EAAE;YACZ,OAAO,EAAE,IAAI,EAAE,CAAC;SACjB;QACD,OAAO;YACL,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC;SACpD,CAAC;IACJ,CAAC;IAEM,qBAAqB,CAC1B,YAAoC,EACpC,KAAc;QAEd,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,MAAM,CACxC,CAAC,QAAkB,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE;YACtC,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC,GAAG;gBACf,IAAI;gBACJ,OAAO;gBACP,KAAK;gBACL,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;aACjC,CAAC;YACF,OAAO,QAAQ,CAAC;QAClB,CAAC,EACD,EAAE,CACH,CAAC;IACJ,CAAC;IAEM,qBAAqB,CAC1B,YAAoC,EACpC,KAAc;QAEd,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,MAAM,CACxC,CAAC,QAAgC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE;YACpD,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;YACzB,OAAO,QAAQ,CAAC;QAClB,CAAC,EACD,EAAE,CACH,CAAC;IACJ,CAAC;IAED,qFAAqF;IACrF,uBAAuB;IACvB,gBAAgB;IAChB,kCAAkC;IAClC,yBAAyB;IACzB,0DAA0D;IAC1D,8DAA8D;IACvD,4BAA4B,CAAC,cAAsB;QACxD,OAAO,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;CACF;AAhED,4CAgEC"}

package/dist/dep-graph-builders/pnpm/lockfile-parser/lockfile-v6.d.ts

@@ -0,0 +1,12 @@
+import { PnpmWorkspaceArgs } from '../../types';
+import { ParsedDepPath, PnpmDeps } from '../types';
+import { PnpmLockfileParser } from './lockfile-parser';
+export declare class LockfileV6Parser extends PnpmLockfileParser {
+    settings: any;
+    constructor(rawPnpmLock: any, workspaceArgs?: PnpmWorkspaceArgs);
+    parseDepPath(depPath: string): ParsedDepPath;
+    normalizeTopLevelDeps(dependencies: Record<string, Record<string, string>>, isDev: boolean): PnpmDeps;
+    normalizePackagesDeps(dependencies: Record<string, Record<string, string>>, isDev: boolean): Record<string, string>;
+    excludeTransPeerDepsVersions(fullVersionStr: string): string;
+    static isAbsoluteDepenencyPath(dependencyPath: string): boolean;
+}

package/dist/dep-graph-builders/pnpm/lockfile-parser/lockfile-v6.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LockfileV6Parser = void 0;
+const lockfile_parser_1 = require("./lockfile-parser");
+class LockfileV6Parser extends lockfile_parser_1.PnpmLockfileParser {
+    constructor(rawPnpmLock, workspaceArgs) {
+        super(rawPnpmLock, workspaceArgs);
+        this.settings = rawPnpmLock.settings;
+    }
+    parseDepPath(depPath) {
+        // Exclude transitive peer deps from depPath
+        // e.g. '/cdktf-cli@0.20.3(ink@3.2.0)(react@17.0.2)' -> cdktf-cli@0.20.3
+        depPath = this.excludeTransPeerDepsVersions(depPath);
+        // Check if path is absolute (doesn't start with '/')
+        // If it's not absolute, omit first '/'
+        depPath = LockfileV6Parser.isAbsoluteDepenencyPath(depPath)
+            ? depPath
+            : depPath.substring(1);
+        // Next, get version based on the last occurence of '@' separator
+        // e.g. @babel/code-frame@7.24.2 -> name: @babel/code-frame and version: 7.24.2
+        const sepIndex = depPath.lastIndexOf('@');
+        if (sepIndex === -1) {
+            return {};
+        }
+        const name = depPath.substring(0, sepIndex);
+        const version = depPath.substring(sepIndex + 1);
+        return {
+            name,
+            version,
+        };
+    }
+    normalizeTopLevelDeps(dependencies, isDev) {
+        return Object.entries(dependencies).reduce((pnpmDeps, [name, depInfo]) => {
+            const version = this.normalizeVersion(name, depInfo.version, isDev);
+            pnpmDeps[name] = {
+                name,
+                version,
+                specifier: depInfo.specifier,
+                isDev,
+            };
+            return pnpmDeps;
+        }, {});
+    }
+    normalizePackagesDeps(dependencies, isDev) {
+        return Object.entries(dependencies).reduce((pnpmDeps, [name, depInfo]) => {
+            const version = this.normalizeVersion(name, depInfo.version, isDev);
+            pnpmDeps[name] = version;
+            return pnpmDeps;
+        }, {});
+    }
+    // Dependency path and versions include transitive peer dependencies encapsulated in dependencies
+    // e.g. '/cdktf-cli@0.20.3(ink@3.2.0)(react@17.0.2)' -> cdktf-cli@0.20.3
+    excludeTransPeerDepsVersions(fullVersionStr) {
+        var _a;
+        const match = fullVersionStr.match(/([^)]*)\(/);
+        return (_a = match === null || match === void 0 ? void 0 : match[1]) !== null && _a !== void 0 ? _a : fullVersionStr;
+    }
+    static isAbsoluteDepenencyPath(dependencyPath) {
+        return dependencyPath[0] !== '/';
+    }
+}
+exports.LockfileV6Parser = LockfileV6Parser;
+//# sourceMappingURL=lockfile-v6.js.map

package/dist/dep-graph-builders/pnpm/lockfile-parser/lockfile-v6.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockfile-v6.js","sourceRoot":"","sources":["../../../../lib/dep-graph-builders/pnpm/lockfile-parser/lockfile-v6.ts"],"names":[],"mappings":";;;AAEA,uDAAuD;AAEvD,MAAa,gBAAiB,SAAQ,oCAAkB;IAGtD,YAAmB,WAAgB,EAAE,aAAiC;QACpE,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAClC,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC;IACvC,CAAC;IAEM,YAAY,CAAC,OAAe;QACjC,4CAA4C;QAC5C,wEAAwE;QACxE,OAAO,GAAG,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAErD,qDAAqD;QACrD,uCAAuC;QACvC,OAAO,GAAG,gBAAgB,CAAC,uBAAuB,CAAC,OAAO,CAAC;YACzD,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAEzB,iEAAiE;QACjE,+EAA+E;QAC/E,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE;YACnB,OAAO,EAAE,CAAC;SACX;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QAChD,OAAO;YACL,IAAI;YACJ,OAAO;SACR,CAAC;IACJ,CAAC;IAEM,qBAAqB,CAC1B,YAAoD,EACpD,KAAc;QAEd,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,MAAM,CACxC,CAAC,QAAkB,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE;YACtC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACpE,QAAQ,CAAC,IAAI,CAAC,GAAG;gBACf,IAAI;gBACJ,OAAO;gBACP,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,KAAK;aACN,CAAC;YACF,OAAO,QAAQ,CAAC;QAClB,CAAC,EACD,EAAE,CACH,CAAC;IACJ,CAAC;IAEM,qBAAqB,CAC1B,YAAoD,EACpD,KAAc;QAEd,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,MAAM,CACxC,CAAC,QAAgC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE;YACpD,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACpE,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;YACzB,OAAO,QAAQ,CAAC;QAClB,CAAC,EACD,EAAE,CACH,CAAC;IACJ,CAAC;IAED,iGAAiG;IACjG,wEAAwE;IACjE,4BAA4B,CAAC,cAAsB;;QACxD,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,OAAO,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAG,CAAC,CAAC,mCAAI,cAAc,CAAC;IACtC,CAAC;IAEM,MAAM,CAAC,uBAAuB,CAAC,cAAsB;QAC1D,OAAO,cAAc,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;IACnC,CAAC;CACF;AA5ED,4CA4EC"}

package/dist/dep-graph-builders/pnpm/types.d.ts

@@ -0,0 +1,49 @@
+import { PkgIdentifier } from '../types';
+import { Dependencies } from '../util';
+export declare type PnpmDepPath = string;
+export declare type PnpmLockPkg = {
+    name?: string;
+    version?: string;
+    id?: string;
+    dev: boolean;
+    optional?: boolean;
+    dependencies: Record<string, string>;
+    optionalDependencies?: Record<string, string>;
+    peerDependencies?: Record<string, string>;
+    engines?: Record<string, string>;
+    os?: string;
+    cpu?: string;
+    deprecated?: boolean;
+    bundledDependencies?: Record<string, string>;
+    requiresBuild?: boolean;
+    prepare?: boolean;
+    hasBin?: boolean;
+};
+export declare type NormalisedPnpmPkg = {
+    name: string;
+    version: string;
+    id: string;
+    isDev: boolean;
+    dependencies: Record<string, string>;
+    optionalDependencies?: Record<string, string>;
+};
+export declare type PnpmNode = {
+    name: string;
+    version: string;
+    id: string;
+    isDev: boolean;
+    dependencies: Dependencies;
+    optionalDependencies?: Dependencies;
+    missingLockFileEntry?: boolean;
+};
+export declare type NormalisedPnpmPkgs = Record<PkgIdentifier, NormalisedPnpmPkg>;
+export declare type PnpmDeps = Record<string, {
+    name: string;
+    version: string;
+    specifier?: string;
+    isDev: boolean;
+}>;
+export declare type ParsedDepPath = {
+    name?: string;
+    version?: string;
+};

package/dist/dep-graph-builders/pnpm/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/dep-graph-builders/pnpm/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../lib/dep-graph-builders/pnpm/types.ts"],"names":[],"mappings":""}

package/dist/dep-graph-builders/pnpm/utils.d.ts

@@ -0,0 +1,6 @@
+import { PnpmLockfileParser } from './lockfile-parser/lockfile-parser';
+import { NormalisedPnpmPkgs, PnpmNode } from './types';
+export declare const getPnpmChildNode: (name: string, depInfo: {
+    version: string;
+    isDev: boolean;
+}, pkgs: NormalisedPnpmPkgs, strictOutOfSync: boolean, includeOptionalDeps: boolean, lockfileParser: PnpmLockfileParser) => PnpmNode;

package/dist/dep-graph-builders/pnpm/utils.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getPnpmChildNode = void 0;
+const __1 = require("../..");
+const util_1 = require("../util");
+const semver_1 = require("semver");
+const error_catalog_nodejs_public_1 = require("@snyk/error-catalog-nodejs-public");
+const out_of_sync_error_1 = require("../../errors/out-of-sync-error");
+const getPnpmChildNode = (name, depInfo, pkgs, strictOutOfSync, includeOptionalDeps, lockfileParser) => {
+    const resolvedVersion = (0, semver_1.valid)(depInfo.version) || depInfo.version === undefined
+        ? depInfo.version
+        : lockfileParser.excludeTransPeerDepsVersions(depInfo.version);
+    const childNodeKey = `${name}@${resolvedVersion}`;
+    if (!pkgs[childNodeKey]) {
+        if (lockfileParser.isWorkspaceLockfile()) {
+            return {
+                id: childNodeKey,
+                name: name,
+                version: resolvedVersion,
+                dependencies: {},
+                isDev: depInfo.isDev,
+            };
+        }
+        if (strictOutOfSync && !/^file:/.test(depInfo.version)) {
+            const errMessage = `Dependency ${childNodeKey} was not found in ` +
+                `${out_of_sync_error_1.LOCK_FILE_NAME[__1.LockfileType.pnpm]}. Your package.json and ` +
+                `${out_of_sync_error_1.LOCK_FILE_NAME[__1.LockfileType.pnpm]} are probably out of sync. Please run ` +
+                `"${out_of_sync_error_1.INSTALL_COMMAND[__1.LockfileType.pnpm]}" and try again.`;
+            throw new error_catalog_nodejs_public_1.OpenSourceEcosystems.PnpmOutOfSyncError(errMessage);
+        }
+        else {
+            return {
+                id: childNodeKey,
+                name: name,
+                version: resolvedVersion,
+                dependencies: {},
+                isDev: depInfo.isDev,
+                missingLockFileEntry: true,
+            };
+        }
+    }
+    else {
+        const depData = pkgs[childNodeKey];
+        const dependencies = (0, util_1.getGraphDependencies)(depData.dependencies || {}, depInfo.isDev);
+        const optionalDependencies = includeOptionalDeps
+            ? (0, util_1.getGraphDependencies)(depData.optionalDependencies || {}, depInfo.isDev)
+            : {};
+        return {
+            id: `${name}@${depData.version}`,
+            name: name,
+            version: resolvedVersion,
+            dependencies: Object.assign(Object.assign({}, dependencies), optionalDependencies),
+            isDev: depInfo.isDev,
+        };
+    }
+};
+exports.getPnpmChildNode = getPnpmChildNode;
+//# sourceMappingURL=utils.js.map

package/dist/dep-graph-builders/pnpm/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../lib/dep-graph-builders/pnpm/utils.ts"],"names":[],"mappings":";;;AAAA,6BAAqC;AACrC,kCAA+C;AAG/C,mCAA+B;AAC/B,mFAAyE;AACzE,sEAGwC;AAEjC,MAAM,gBAAgB,GAAG,CAC9B,IAAY,EACZ,OAA4C,EAC5C,IAAwB,EACxB,eAAwB,EACxB,mBAA4B,EAC5B,cAAkC,EACxB,EAAE;IACZ,MAAM,eAAe,GACnB,IAAA,cAAK,EAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;QACrD,CAAC,CAAC,OAAO,CAAC,OAAO;QACjB,CAAC,CAAC,cAAc,CAAC,4BAA4B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,GAAG,IAAI,IAAI,eAAe,EAAE,CAAC;IAClD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE;QACvB,IAAI,cAAc,CAAC,mBAAmB,EAAE,EAAE;YACxC,OAAO;gBACL,EAAE,EAAE,YAAY;gBAChB,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,eAAe;gBACxB,YAAY,EAAE,EAAE;gBAChB,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC;SACH;QACD,IAAI,eAAe,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YACtD,MAAM,UAAU,GACd,cAAc,YAAY,oBAAoB;gBAC9C,GAAG,kCAAc,CAAC,gBAAY,CAAC,IAAI,CAAC,0BAA0B;gBAC9D,GACE,kCAAc,CAAC,gBAAY,CAAC,IAAI,CAClC,wCAAwC;gBACxC,IAAI,mCAAe,CAAC,gBAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC;YAC3D,MAAM,IAAI,kDAAoB,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;SAC/D;aAAM;YACL,OAAO;gBACL,EAAE,EAAE,YAAY;gBAChB,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,eAAe;gBACxB,YAAY,EAAE,EAAE;gBAChB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,oBAAoB,EAAE,IAAI;aAC3B,CAAC;SACH;KACF;SAAM;QACL,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;QACnC,MAAM,YAAY,GAAG,IAAA,2BAAoB,EACvC,OAAO,CAAC,YAAY,IAAI,EAAE,EAC1B,OAAO,CAAC,KAAK,CACd,CAAC;QACF,MAAM,oBAAoB,GAAG,mBAAmB;YAC9C,CAAC,CAAC,IAAA,2BAAoB,EAAC,OAAO,CAAC,oBAAoB,IAAI,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC;YACzE,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,EAAE,EAAE,GAAG,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE;YAChC,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,eAAe;YACxB,YAAY,kCAAO,YAAY,GAAK,oBAAoB,CAAE;YAC1D,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC;KACH;AACH,CAAC,CAAC;AA3DW,QAAA,gBAAgB,oBA2D3B"}

package/dist/dep-graph-builders/types.d.ts

@@ -7,6 +7,9 @@ export declare type PackageJsonBase = {
     peerDependencies?: Record<string, string>;
     resolutions?: Record<string, string>;
     overrides?: Overrides;
+    pnpm?: {
+        overrides?: Overrides;
+    };
 };
 export declare type Overrides = string | {
     [key: string]: Overrides;
@@ -55,3 +58,16 @@ export declare type Yarn1DepGraphBuildOptions = {
     strictOutOfSync: boolean;
     pruneWithinTopLevelDeps: boolean;
 };
+export declare type PnpmWorkspaceArgs = {
+    isWorkspacePkg: boolean;
+    isRoot: boolean;
+    workspacePath: string;
+    projectsVersionMap: Record<string, string>;
+    rootOverrides: Overrides;
+};
+export declare type PnpmProjectParseOptions = {
+    includeDevDeps: boolean;
+    includeOptionalDeps: boolean;
+    strictOutOfSync: boolean;
+    pruneWithinTopLevelDeps: boolean;
+};

package/dist/dep-graph-builders/util.js

@@ -33,9 +33,9 @@ exports.getTopLevelDeps = getTopLevelDeps;
  * For example, { 'mime-db': '~1.12.0' } will be converted to { 'mime-db': { version: '~1.12.0', isDev: true/false } }.
  */
 const getGraphDependencies = (dependencies, isDev) => {
-    return Object.entries(dependencies).reduce((acc, [name, semver]) => {
-        acc[name] = { version: semver, isDev: isDev };
-        return acc;
+    return Object.entries(dependencies).reduce((pnpmDeps, [name, semver]) => {
+        pnpmDeps[name] = { version: semver, isDev: isDev };
+        return pnpmDeps;
     }, {});
 };
 exports.getGraphDependencies = getGraphDependencies;

package/dist/dep-graph-builders/util.js.map

@@ -1 +1 @@
-{"version":3,"file":"util.js","sourceRoot":"","sources":["../../lib/dep-graph-builders/util.ts"],"names":[],"mappings":";;;AAEA,sCAAkD;AAElD,sCAA2C;AAC3C,wCAA0C;AAenC,MAAM,iBAAiB,GAAG,CAC/B,eAAgC,EAChC,IAAa,EACb,OAGC,EACgB,EAAE;IACnB,OAAO,eAAe,CAAC,UAAU,CAC/B,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAC1C,IAAI,CAAC,EAAE,EACP;QACE,MAAM,8CACJ,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAC/B,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAC1C,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAC9C,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,CAAC,CACnE;KACF,CACF,CAAC;AACJ,CAAC,CAAC;AApBW,QAAA,iBAAiB,qBAoB5B;AAEF;;;GAGG;AACI,MAAM,eAAe,GAAG,CAC7B,OAAwB,EACxB,OAIC,EACa,EAAE;IAChB,MAAM,QAAQ,GAAG,IAAA,4BAAoB,EAAC,OAAO,CAAC,YAAY,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IAEzE,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc;QACpC,CAAC,CAAC,IAAA,4BAAoB,EAAC,OAAO,CAAC,eAAe,IAAI,EAAE,EAAE,IAAI,CAAC;QAC3D,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,YAAY,GAAG,OAAO,CAAC,mBAAmB;QAC9C,CAAC,CAAC,IAAA,4BAAoB,EAAC,OAAO,CAAC,oBAAoB,IAAI,EAAE,EAAE,KAAK,CAAC;QACjE,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe;QACtC,CAAC,CAAC,IAAA,4BAAoB,EAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,EAAE,KAAK,CAAC;QAC7D,CAAC,CAAC,EAAE,CAAC;IAEP,mEAAY,QAAQ,GAAK,OAAO,GAAK,YAAY,GAAK,QAAQ,EAAG;AACnE,CAAC,CAAC;AAvBW,QAAA,eAAe,mBAuB1B;AAEF;;;GAGG;AACI,MAAM,oBAAoB,GAAG,CAClC,YAAoC,EACpC,KAAK,EACS,EAAE;IAChB,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,MAAM,CACxC,CAAC,GAAiB,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE;QACpC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC9C,OAAO,GAAG,CAAC;IACb,CAAC,EACD,EAAE,CACH,CAAC;AACJ,CAAC,CAAC;AAXW,QAAA,oBAAoB,wBAW/B;AAEF,SAAgB,YAAY,CAAC,cAAsB;IACjD,IAAI;QACF,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACjD,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE;YACvB,aAAa,CAAC,IAAI,GAAG,cAAc,CAAC;SACrC;QACD,OAAO,aAAa,CAAC;KACtB;IAAC,OAAO,CAAC,EAAE;QACV,MAAM,IAAI,8BAAqB,CAC7B,yCAAyC,GAAI,CAAW,CAAC,OAAO,CACjE,CAAC;KACH;AACH,CAAC;AAZD,oCAYC;AAEM,MAAM,YAAY,GAAG,CAC1B,IAAY,EACZ,OAA4C,EAC5C,IAAoB,EACpB,eAAwB,EACxB,mBAA4B,EAC5B,EAAE;IACF,MAAM,YAAY,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAClD,IAAI,SAAkB,CAAC;IAEvB,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE;QACvB,IAAI,eAAe,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YACtD,MAAM,IAAI,uBAAc,CAAC,YAAY,EAAE,sBAAY,CAAC,IAAI,CAAC,CAAC;SAC3D;aAAM;YACL,SAAS,GAAG;gBACV,EAAE,EAAE,YAAY;gBAChB,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,YAAY,EAAE,EAAE;gBAChB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,oBAAoB,EAAE,IAAI;aAC3B,CAAC;SACH;KACF;SAAM;QACL,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;QACnC,MAAM,YAAY,GAAG,IAAA,4BAAoB,EACvC,OAAO,CAAC,YAAY,IAAI,EAAE,EAC1B,OAAO,CAAC,KAAK,CACd,CAAC;QACF,MAAM,oBAAoB,GAAG,mBAAmB;YAC9C,CAAC,CAAC,IAAA,4BAAoB,EAAC,OAAO,CAAC,oBAAoB,IAAI,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC;YACzE,CAAC,CAAC,EAAE,CAAC;QACP,SAAS,GAAG;YACV,EAAE,EAAE,GAAG,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE;YAChC,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,YAAY,kCAAO,YAAY,GAAK,oBAAoB,CAAE;YAC1D,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC;KACH;IAED,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AA1CW,QAAA,YAAY,gBA0CvB"}
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../../lib/dep-graph-builders/util.ts"],"names":[],"mappings":";;;AAEA,sCAAkD;AAElD,sCAA2C;AAC3C,wCAA0C;AAenC,MAAM,iBAAiB,GAAG,CAC/B,eAAgC,EAChC,IAAa,EACb,OAGC,EACgB,EAAE;IACnB,OAAO,eAAe,CAAC,UAAU,CAC/B,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAC1C,IAAI,CAAC,EAAE,EACP;QACE,MAAM,8CACJ,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAC/B,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAC1C,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAC9C,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,CAAC,CACnE;KACF,CACF,CAAC;AACJ,CAAC,CAAC;AApBW,QAAA,iBAAiB,qBAoB5B;AAEF;;;GAGG;AACI,MAAM,eAAe,GAAG,CAC7B,OAAwB,EACxB,OAIC,EACa,EAAE;IAChB,MAAM,QAAQ,GAAG,IAAA,4BAAoB,EAAC,OAAO,CAAC,YAAY,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IAEzE,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc;QACpC,CAAC,CAAC,IAAA,4BAAoB,EAAC,OAAO,CAAC,eAAe,IAAI,EAAE,EAAE,IAAI,CAAC;QAC3D,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,YAAY,GAAG,OAAO,CAAC,mBAAmB;QAC9C,CAAC,CAAC,IAAA,4BAAoB,EAAC,OAAO,CAAC,oBAAoB,IAAI,EAAE,EAAE,KAAK,CAAC;QACjE,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe;QACtC,CAAC,CAAC,IAAA,4BAAoB,EAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,EAAE,KAAK,CAAC;QAC7D,CAAC,CAAC,EAAE,CAAC;IAEP,mEAAY,QAAQ,GAAK,OAAO,GAAK,YAAY,GAAK,QAAQ,EAAG;AACnE,CAAC,CAAC;AAvBW,QAAA,eAAe,mBAuB1B;AAEF;;;GAGG;AACI,MAAM,oBAAoB,GAAG,CAClC,YAAoC,EACpC,KAAK,EACS,EAAE;IAChB,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,MAAM,CACxC,CAAC,QAAsB,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE;QACzC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACnD,OAAO,QAAQ,CAAC;IAClB,CAAC,EACD,EAAE,CACH,CAAC;AACJ,CAAC,CAAC;AAXW,QAAA,oBAAoB,wBAW/B;AAEF,SAAgB,YAAY,CAAC,cAAsB;IACjD,IAAI;QACF,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACjD,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE;YACvB,aAAa,CAAC,IAAI,GAAG,cAAc,CAAC;SACrC;QACD,OAAO,aAAa,CAAC;KACtB;IAAC,OAAO,CAAC,EAAE;QACV,MAAM,IAAI,8BAAqB,CAC7B,yCAAyC,GAAI,CAAW,CAAC,OAAO,CACjE,CAAC;KACH;AACH,CAAC;AAZD,oCAYC;AAEM,MAAM,YAAY,GAAG,CAC1B,IAAY,EACZ,OAA4C,EAC5C,IAAoB,EACpB,eAAwB,EACxB,mBAA4B,EAC5B,EAAE;IACF,MAAM,YAAY,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAClD,IAAI,SAAkB,CAAC;IAEvB,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE;QACvB,IAAI,eAAe,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YACtD,MAAM,IAAI,uBAAc,CAAC,YAAY,EAAE,sBAAY,CAAC,IAAI,CAAC,CAAC;SAC3D;aAAM;YACL,SAAS,GAAG;gBACV,EAAE,EAAE,YAAY;gBAChB,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,YAAY,EAAE,EAAE;gBAChB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,oBAAoB,EAAE,IAAI;aAC3B,CAAC;SACH;KACF;SAAM;QACL,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;QACnC,MAAM,YAAY,GAAG,IAAA,4BAAoB,EACvC,OAAO,CAAC,YAAY,IAAI,EAAE,EAC1B,OAAO,CAAC,KAAK,CACd,CAAC;QACF,MAAM,oBAAoB,GAAG,mBAAmB;YAC9C,CAAC,CAAC,IAAA,4BAAoB,EAAC,OAAO,CAAC,oBAAoB,IAAI,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC;YACzE,CAAC,CAAC,EAAE,CAAC;QACP,SAAS,GAAG;YACV,EAAE,EAAE,GAAG,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE;YAChC,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,YAAY,kCAAO,YAAY,GAAK,oBAAoB,CAAE;YAC1D,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC;KACH;IAED,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AA1CW,QAAA,YAAY,gBA0CvB"}

package/dist/errors/out-of-sync-error.d.ts

@@ -1,4 +1,18 @@
 import { LockfileType } from '../parsers';
+export declare const LOCK_FILE_NAME: {
+    npm: string;
+    npm7: string;
+    yarn: string;
+    yarn2: string;
+    pnpm: string;
+};
+export declare const INSTALL_COMMAND: {
+    npm: string;
+    npm7: string;
+    yarn: string;
+    yarn2: string;
+    pnpm: string;
+};
 export declare class OutOfSyncError extends Error {
     code: number;
     name: string;

package/dist/errors/out-of-sync-error.js

@@ -1,24 +1,26 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OutOfSyncError = void 0;
-const LOCK_FILE_NAME = {
+exports.OutOfSyncError = exports.INSTALL_COMMAND = exports.LOCK_FILE_NAME = void 0;
+exports.LOCK_FILE_NAME = {
     npm: 'package-lock.json',
     npm7: 'package-lock.json',
     yarn: 'yarn.lock',
     yarn2: 'yarn.lock',
+    pnpm: 'pnpm-lock.yaml',
 };
-const INSTALL_COMMAND = {
+exports.INSTALL_COMMAND = {
     npm: 'npm install',
     npm7: 'npm install',
     yarn: 'yarn install',
     yarn2: 'yarn install',
+    pnpm: 'pnpm install',
 };
 class OutOfSyncError extends Error {
     constructor(dependencyName, lockFileType) {
         super(`Dependency ${dependencyName} was not found in ` +
-            `${LOCK_FILE_NAME[lockFileType]}. Your package.json and ` +
-            `${LOCK_FILE_NAME[lockFileType]} are probably out of sync. Please run ` +
-            `"${INSTALL_COMMAND[lockFileType]}" and try again.`);
+            `${exports.LOCK_FILE_NAME[lockFileType]}. Your package.json and ` +
+            `${exports.LOCK_FILE_NAME[lockFileType]} are probably out of sync. Please run ` +
+            `"${exports.INSTALL_COMMAND[lockFileType]}" and try again.`);
         this.code = 422;
         this.name = 'OutOfSyncError';
         this.dependencyName = dependencyName;

package/dist/errors/out-of-sync-error.js.map

@@ -1 +1 @@
-{"version":3,"file":"out-of-sync-error.js","sourceRoot":"","sources":["../../lib/errors/out-of-sync-error.ts"],"names":[],"mappings":";;;AAEA,MAAM,cAAc,GAAG;IACrB,GAAG,EAAE,mBAAmB;IACxB,IAAI,EAAE,mBAAmB;IACzB,IAAI,EAAE,WAAW;IACjB,KAAK,EAAE,WAAW;CACnB,CAAC;AAEF,MAAM,eAAe,GAAG;IACtB,GAAG,EAAE,aAAa;IAClB,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,cAAc;IACpB,KAAK,EAAE,cAAc;CACtB,CAAC;AAEF,MAAa,cAAe,SAAQ,KAAK;IAMvC,YAAY,cAAsB,EAAE,YAA0B;QAC5D,KAAK,CACH,cAAc,cAAc,oBAAoB;YAC9C,GAAG,cAAc,CAAC,YAAY,CAAC,0BAA0B;YACzD,GAAG,cAAc,CAAC,YAAY,CAAC,wCAAwC;YACvE,IAAI,eAAe,CAAC,YAAY,CAAC,kBAAkB,CACtD,CAAC;QAXG,SAAI,GAAG,GAAG,CAAC;QACX,SAAI,GAAG,gBAAgB,CAAC;QAW7B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAChD,CAAC;CACF;AAjBD,wCAiBC"}
+{"version":3,"file":"out-of-sync-error.js","sourceRoot":"","sources":["../../lib/errors/out-of-sync-error.ts"],"names":[],"mappings":";;;AAEa,QAAA,cAAc,GAAG;IAC5B,GAAG,EAAE,mBAAmB;IACxB,IAAI,EAAE,mBAAmB;IACzB,IAAI,EAAE,WAAW;IACjB,KAAK,EAAE,WAAW;IAClB,IAAI,EAAE,gBAAgB;CACvB,CAAC;AAEW,QAAA,eAAe,GAAG;IAC7B,GAAG,EAAE,aAAa;IAClB,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,cAAc;IACpB,KAAK,EAAE,cAAc;IACrB,IAAI,EAAE,cAAc;CACrB,CAAC;AAEF,MAAa,cAAe,SAAQ,KAAK;IAMvC,YAAY,cAAsB,EAAE,YAA0B;QAC5D,KAAK,CACH,cAAc,cAAc,oBAAoB;YAC9C,GAAG,sBAAc,CAAC,YAAY,CAAC,0BAA0B;YACzD,GAAG,sBAAc,CAAC,YAAY,CAAC,wCAAwC;YACvE,IAAI,uBAAe,CAAC,YAAY,CAAC,kBAAkB,CACtD,CAAC;QAXG,SAAI,GAAG,GAAG,CAAC;QACX,SAAI,GAAG,gBAAgB,CAAC;QAW7B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAChD,CAAC;CACF;AAjBD,wCAiBC"}

package/dist/index.d.ts

@@ -1,11 +1,11 @@
-import { ManifestFile, PkgTree, Scope, LockfileType, getYarnWorkspaces } from './parsers';
+import { ManifestFile, PkgTree, Scope, LockfileType, getYarnWorkspaces, getPnpmWorkspaces } from './parsers';
 import { UnsupportedRuntimeError, InvalidUserInputError, OutOfSyncError } from './errors';
 import { buildDepGraphFromCliOutput } from './cli-parsers';
-export { buildDepTree, buildDepTreeFromFiles, buildDepGraphFromCliOutput, getYarnWorkspacesFromFiles, getYarnWorkspaces, PkgTree, Scope, LockfileType, UnsupportedRuntimeError, InvalidUserInputError, OutOfSyncError, ManifestFile, };
-import { parseNpmLockV2Project, extractPkgsFromYarnLockV1, parseYarnLockV1Project, parseYarnLockV1WorkspaceProject, buildDepGraphYarnLockV1SimpleCyclesPruned, buildDepGraphYarnLockV1Simple, buildDepGraphYarnLockV1WorkspaceCyclesPruned, buildDepGraphYarnLockV1Workspace, extractPkgsFromYarnLockV2, parseYarnLockV2Project, buildDepGraphYarnLockV2Simple } from './dep-graph-builders';
+export { buildDepTree, buildDepTreeFromFiles, buildDepGraphFromCliOutput, getYarnWorkspacesFromFiles, getYarnWorkspaces, getPnpmWorkspaces, PkgTree, Scope, LockfileType, UnsupportedRuntimeError, InvalidUserInputError, OutOfSyncError, ManifestFile, };
+import { parseNpmLockV2Project, extractPkgsFromYarnLockV1, parseYarnLockV1Project, parseYarnLockV1WorkspaceProject, buildDepGraphYarnLockV1SimpleCyclesPruned, buildDepGraphYarnLockV1Simple, buildDepGraphYarnLockV1WorkspaceCyclesPruned, buildDepGraphYarnLockV1Workspace, extractPkgsFromYarnLockV2, parseYarnLockV2Project, buildDepGraphYarnLockV2Simple, parsePnpmProject, parsePkgJson } from './dep-graph-builders';
 import type { PackageJsonBase, NormalisedPkgs, ProjectParseOptions, YarnLockV2ProjectParseOptions } from './dep-graph-builders/types';
-import { getLockfileVersionFromFile, getNpmLockfileVersion, getYarnLockfileVersion, NodeLockfileVersion } from './utils';
-export { parseNpmLockV2Project, extractPkgsFromYarnLockV1, parseYarnLockV1Project, parseYarnLockV1WorkspaceProject, buildDepGraphYarnLockV1SimpleCyclesPruned, buildDepGraphYarnLockV1Simple, buildDepGraphYarnLockV1WorkspaceCyclesPruned, buildDepGraphYarnLockV1Workspace, extractPkgsFromYarnLockV2, parseYarnLockV2Project, buildDepGraphYarnLockV2Simple, PackageJsonBase, ProjectParseOptions, YarnLockV2ProjectParseOptions, NormalisedPkgs, NormalisedPkgs as YarnLockPackages, getLockfileVersionFromFile, getNpmLockfileVersion, getYarnLockfileVersion, NodeLockfileVersion, };
+import { getLockfileVersionFromFile, getNpmLockfileVersion, getYarnLockfileVersion, getPnpmLockfileVersion, NodeLockfileVersion } from './utils';
+export { parseNpmLockV2Project, extractPkgsFromYarnLockV1, parseYarnLockV1Project, parseYarnLockV1WorkspaceProject, buildDepGraphYarnLockV1SimpleCyclesPruned, buildDepGraphYarnLockV1Simple, buildDepGraphYarnLockV1WorkspaceCyclesPruned, buildDepGraphYarnLockV1Workspace, extractPkgsFromYarnLockV2, parseYarnLockV2Project, buildDepGraphYarnLockV2Simple, parsePnpmProject, parsePkgJson, PackageJsonBase, ProjectParseOptions, YarnLockV2ProjectParseOptions, NormalisedPkgs, NormalisedPkgs as YarnLockPackages, getLockfileVersionFromFile, getNpmLockfileVersion, getYarnLockfileVersion, getPnpmLockfileVersion, NodeLockfileVersion, };
 declare function buildDepTree(manifestFileContents: string, lockFileContents: string, includeDev?: boolean, lockfileType?: LockfileType, strictOutOfSync?: boolean, defaultManifestFileName?: string): Promise<PkgTree>;
 declare function buildDepTreeFromFiles(root: string, manifestFilePath: string, lockFilePath: string, includeDev?: boolean, strictOutOfSync?: boolean): Promise<PkgTree>;
 declare function getYarnWorkspacesFromFiles(root: any, manifestFilePath: string): string[] | false;

package/dist/index.js

@@ -1,12 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getYarnLockfileType = exports.NodeLockfileVersion = exports.getYarnLockfileVersion = exports.getNpmLockfileVersion = exports.getLockfileVersionFromFile = exports.buildDepGraphYarnLockV2Simple = exports.parseYarnLockV2Project = exports.extractPkgsFromYarnLockV2 = exports.buildDepGraphYarnLockV1Workspace = exports.buildDepGraphYarnLockV1WorkspaceCyclesPruned = exports.buildDepGraphYarnLockV1Simple = exports.buildDepGraphYarnLockV1SimpleCyclesPruned = exports.parseYarnLockV1WorkspaceProject = exports.parseYarnLockV1Project = exports.extractPkgsFromYarnLockV1 = exports.parseNpmLockV2Project = exports.OutOfSyncError = exports.InvalidUserInputError = exports.UnsupportedRuntimeError = exports.LockfileType = exports.Scope = exports.getYarnWorkspaces = exports.getYarnWorkspacesFromFiles = exports.buildDepGraphFromCliOutput = exports.buildDepTreeFromFiles = exports.buildDepTree = void 0;
+exports.getYarnLockfileType = exports.NodeLockfileVersion = exports.getPnpmLockfileVersion = exports.getYarnLockfileVersion = exports.getNpmLockfileVersion = exports.getLockfileVersionFromFile = exports.parsePkgJson = exports.parsePnpmProject = exports.buildDepGraphYarnLockV2Simple = exports.parseYarnLockV2Project = exports.extractPkgsFromYarnLockV2 = exports.buildDepGraphYarnLockV1Workspace = exports.buildDepGraphYarnLockV1WorkspaceCyclesPruned = exports.buildDepGraphYarnLockV1Simple = exports.buildDepGraphYarnLockV1SimpleCyclesPruned = exports.parseYarnLockV1WorkspaceProject = exports.parseYarnLockV1Project = exports.extractPkgsFromYarnLockV1 = exports.parseNpmLockV2Project = exports.OutOfSyncError = exports.InvalidUserInputError = exports.UnsupportedRuntimeError = exports.LockfileType = exports.Scope = exports.getPnpmWorkspaces = exports.getYarnWorkspaces = exports.getYarnWorkspacesFromFiles = exports.buildDepGraphFromCliOutput = exports.buildDepTreeFromFiles = exports.buildDepTree = void 0;
 const fs = require("fs");
 const path = require("path");
 const parsers_1 = require("./parsers");
 Object.defineProperty(exports, "Scope", { enumerable: true, get: function () { return parsers_1.Scope; } });
 Object.defineProperty(exports, "LockfileType", { enumerable: true, get: function () { return parsers_1.LockfileType; } });
 Object.defineProperty(exports, "getYarnWorkspaces", { enumerable: true, get: function () { return parsers_1.getYarnWorkspaces; } });
+Object.defineProperty(exports, "getPnpmWorkspaces", { enumerable: true, get: function () { return parsers_1.getPnpmWorkspaces; } });
 const package_lock_parser_1 = require("./parsers/package-lock-parser");
 const yarn_lock_parser_1 = require("./parsers/yarn-lock-parser");
 const yarn2_lock_parser_1 = require("./parsers/yarn2-lock-parser");
@@ -30,10 +31,13 @@ Object.defineProperty(exports, "buildDepGraphYarnLockV1Workspace", { enumerable:
 Object.defineProperty(exports, "extractPkgsFromYarnLockV2", { enumerable: true, get: function () { return dep_graph_builders_1.extractPkgsFromYarnLockV2; } });
 Object.defineProperty(exports, "parseYarnLockV2Project", { enumerable: true, get: function () { return dep_graph_builders_1.parseYarnLockV2Project; } });
 Object.defineProperty(exports, "buildDepGraphYarnLockV2Simple", { enumerable: true, get: function () { return dep_graph_builders_1.buildDepGraphYarnLockV2Simple; } });
+Object.defineProperty(exports, "parsePnpmProject", { enumerable: true, get: function () { return dep_graph_builders_1.parsePnpmProject; } });
+Object.defineProperty(exports, "parsePkgJson", { enumerable: true, get: function () { return dep_graph_builders_1.parsePkgJson; } });
 const utils_1 = require("./utils");
 Object.defineProperty(exports, "getLockfileVersionFromFile", { enumerable: true, get: function () { return utils_1.getLockfileVersionFromFile; } });
 Object.defineProperty(exports, "getNpmLockfileVersion", { enumerable: true, get: function () { return utils_1.getNpmLockfileVersion; } });
 Object.defineProperty(exports, "getYarnLockfileVersion", { enumerable: true, get: function () { return utils_1.getYarnLockfileVersion; } });
+Object.defineProperty(exports, "getPnpmLockfileVersion", { enumerable: true, get: function () { return utils_1.getPnpmLockfileVersion; } });
 Object.defineProperty(exports, "NodeLockfileVersion", { enumerable: true, get: function () { return utils_1.NodeLockfileVersion; } });
 // **********************************
 async function buildDepTree(manifestFileContents, lockFileContents, includeDev = false, lockfileType, strictOutOfSync = true, defaultManifestFileName = 'package.json') {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../lib/index.ts"],"names":[],"mappings":";;;AAAA,yBAAyB;AACzB,6BAA6B;AAC7B,uCASmB;AAkBjB,sFAtBA,eAAK,OAsBA;AACL,6FArBA,sBAAY,OAqBA;AAHZ,kGAjBA,2BAAiB,OAiBA;AAfnB,uEAAkE;AAClE,iEAA4D;AAC5D,mEAA8D;AAC9D,qCAIkB;AAYhB,wGAfA,gCAAuB,OAeA;AACvB,sGAfA,8BAAqB,OAeA;AACrB,+FAfA,uBAAc,OAeA;AAbhB,+CAA2D;AAKzD,2GALO,wCAA0B,OAKP;AAY5B,mDAAmD;AACnD,mDAAmD;AACnD,6DAY8B;AAc5B,sGAzBA,0CAAqB,OAyBA;AACrB,0GAzBA,8CAAyB,OAyBA;AACzB,uGAzBA,2CAAsB,OAyBA;AACtB,gHAzBA,oDAA+B,OAyBA;AAC/B,0HAzBA,8DAAyC,OAyBA;AACzC,8GAzBA,kDAA6B,OAyBA;AAC7B,6HAzBA,iEAA4C,OAyBA;AAC5C,iHAzBA,qDAAgC,OAyBA;AAChC,0GAzBA,8CAAyB,OAyBA;AACzB,uGAzBA,2CAAsB,OAyBA;AACtB,8GAzBA,kDAA6B,OAyBA;AAjB/B,mCAKiB;AAkBf,2GAtBA,kCAA0B,OAsBA;AAC1B,sGAtBA,6BAAqB,OAsBA;AACrB,uGAtBA,8BAAsB,OAsBA;AACtB,oGAtBA,2BAAmB,OAsBA;AAErB,qCAAqC;AAErC,KAAK,UAAU,YAAY,CACzB,oBAA4B,EAC5B,gBAAwB,EACxB,UAAU,GAAG,KAAK,EAClB,YAA2B,EAC3B,kBAA2B,IAAI,EAC/B,0BAAkC,cAAc;IAEhD,IAAI,CAAC,YAAY,EAAE;QACjB,YAAY,GAAG,sBAAY,CAAC,GAAG,CAAC;KACjC;SAAM,IAAI,YAAY,KAAK,sBAAY,CAAC,IAAI,EAAE;QAC7C,YAAY,GAAG,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;KACtD;IAED,IAAI,cAA8B,CAAC;IACnC,QAAQ,YAAY,EAAE;QACpB,KAAK,sBAAY,CAAC,GAAG;YACnB,cAAc,GAAG,IAAI,uCAAiB,EAAE,CAAC;YACzC,MAAM;QACR,KAAK,sBAAY,CAAC,IAAI;YACpB,cAAc,GAAG,IAAI,iCAAc,EAAE,CAAC;YACtC,MAAM;QACR,KAAK,sBAAY,CAAC,KAAK;YACrB,cAAc,GAAG,IAAI,mCAAe,EAAE,CAAC;YACvC,MAAM;QACR;YACE,MAAM,IAAI,8BAAqB,CAC7B,4BAA4B;gBAC1B,GAAG,YAAY,+CAA+C;gBAC9D,YAAY,CACf,CAAC;KACL;IAED,MAAM,YAAY,GAAiB,IAAA,2BAAiB,EAAC,oBAAoB,CAAC,CAAC;IAC3E,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE;QACtB,YAAY,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC;YAC1D,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YACxC,CAAC,CAAC,uBAAuB,CAAC;KAC7B;IAED,MAAM,QAAQ,GAAa,cAAc,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC;IAC1E,OAAO,cAAc,CAAC,iBAAiB,CACrC,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,eAAe,CAChB,CAAC;AACJ,CAAC;AAhHC,oCAAY;AAkHd,KAAK,UAAU,qBAAqB,CAClC,IAAY,EACZ,gBAAwB,EACxB,YAAoB,EACpB,UAAU,GAAG,KAAK,EAClB,eAAe,GAAG,IAAI;IAEtB,IAAI,CAAC,IAAI,IAAI,CAAC,gBAAgB,IAAI,CAAC,YAAY,EAAE;QAC/C,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;KAC5E;IAED,MAAM,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAClE,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAE1D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE;QACxC,MAAM,IAAI,8BAAqB,CAC7B,wCAAwC;YACtC,aAAa,oBAAoB,EAAE,CACtC,CAAC;KACH;IACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE;QACpC,MAAM,IAAI,8BAAqB,CAC7B,kCAAkC,GAAG,gBAAgB,CACtD,CAAC;KACH;IAED,MAAM,oBAAoB,GAAG,EAAE,CAAC,YAAY,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;IAC5E,MAAM,gBAAgB,GAAG,EAAE,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAEpE,IAAI,YAA0B,CAAC;IAC/B,IAAI,YAAY,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE;QAC9C,YAAY,GAAG,sBAAY,CAAC,GAAG,CAAC;KACjC;SAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;QAC7C,YAAY,GAAG,mBAAmB,CAAC,gBAAgB,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;KAC1E;SAAM;QACL,MAAM,IAAI,8BAAqB,CAC7B,oBAAoB,YAAY,IAAI;YAClC,uDAAuD,CAC1D,CAAC;KACH;IAED,OAAO,MAAM,YAAY,CACvB,oBAAoB,EACpB,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,eAAe,EACf,gBAAgB,CACjB,CAAC;AACJ,CAAC;AAlKC,sDAAqB;AAoKvB,SAAS,0BAA0B,CACjC,IAAI,EACJ,gBAAwB;IAExB,IAAI,CAAC,IAAI,IAAI,CAAC,gBAAgB,EAAE;QAC9B,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;KACH;IACD,MAAM,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAClE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE;QACxC,MAAM,IAAI,8BAAqB,CAC7B,wCAAwC;YACtC,aAAa,oBAAoB,EAAE,CACtC,CAAC;KACH;IACD,MAAM,oBAAoB,GAAG,EAAE,CAAC,YAAY,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;IAE5E,OAAO,IAAA,2BAAiB,EAAC,oBAAoB,CAAC,CAAC;AACjD,CAAC;AArLC,gEAA0B;AAuL5B,SAAgB,mBAAmB,CACjC,gBAAwB,EACxB,IAAa,EACb,YAAqB;IAErB,IACE,gBAAgB,CAAC,QAAQ,CAAC,YAAY,CAAC;QACvC,CAAC,IAAI;YACH,YAAY;YACZ,EAAE,CAAC,UAAU,CACX,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CACrE,CAAC,EACJ;QACA,OAAO,sBAAY,CAAC,KAAK,CAAC;KAC3B;SAAM;QACL,OAAO,sBAAY,CAAC,IAAI,CAAC;KAC1B;AACH,CAAC;AAjBD,kDAiBC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../lib/index.ts"],"names":[],"mappings":";;;AAAA,yBAAyB;AACzB,6BAA6B;AAC7B,uCAUmB;AAmBjB,sFAxBA,eAAK,OAwBA;AACL,6FAvBA,sBAAY,OAuBA;AAJZ,kGAlBA,2BAAiB,OAkBA;AACjB,kGAlBA,2BAAiB,OAkBA;AAhBnB,uEAAkE;AAClE,iEAA4D;AAC5D,mEAA8D;AAC9D,qCAIkB;AAahB,wGAhBA,gCAAuB,OAgBA;AACvB,sGAhBA,8BAAqB,OAgBA;AACrB,+FAhBA,uBAAc,OAgBA;AAdhB,+CAA2D;AAKzD,2GALO,wCAA0B,OAKP;AAa5B,mDAAmD;AACnD,mDAAmD;AACnD,6DAc8B;AAe5B,sGA5BA,0CAAqB,OA4BA;AACrB,0GA5BA,8CAAyB,OA4BA;AACzB,uGA5BA,2CAAsB,OA4BA;AACtB,gHA5BA,oDAA+B,OA4BA;AAC/B,0HA5BA,8DAAyC,OA4BA;AACzC,8GA5BA,kDAA6B,OA4BA;AAC7B,6HA5BA,iEAA4C,OA4BA;AAC5C,iHA5BA,qDAAgC,OA4BA;AAChC,0GA5BA,8CAAyB,OA4BA;AACzB,uGA5BA,2CAAsB,OA4BA;AACtB,8GA5BA,kDAA6B,OA4BA;AAC7B,iGA5BA,qCAAgB,OA4BA;AAChB,6FA5BA,iCAAY,OA4BA;AApBd,mCAMiB;AAoBf,2GAzBA,kCAA0B,OAyBA;AAC1B,sGAzBA,6BAAqB,OAyBA;AACrB,uGAzBA,8BAAsB,OAyBA;AACtB,uGAzBA,8BAAsB,OAyBA;AACtB,oGAzBA,2BAAmB,OAyBA;AAErB,qCAAqC;AAErC,KAAK,UAAU,YAAY,CACzB,oBAA4B,EAC5B,gBAAwB,EACxB,UAAU,GAAG,KAAK,EAClB,YAA2B,EAC3B,kBAA2B,IAAI,EAC/B,0BAAkC,cAAc;IAEhD,IAAI,CAAC,YAAY,EAAE;QACjB,YAAY,GAAG,sBAAY,CAAC,GAAG,CAAC;KACjC;SAAM,IAAI,YAAY,KAAK,sBAAY,CAAC,IAAI,EAAE;QAC7C,YAAY,GAAG,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;KACtD;IAED,IAAI,cAA8B,CAAC;IACnC,QAAQ,YAAY,EAAE;QACpB,KAAK,sBAAY,CAAC,GAAG;YACnB,cAAc,GAAG,IAAI,uCAAiB,EAAE,CAAC;YACzC,MAAM;QACR,KAAK,sBAAY,CAAC,IAAI;YACpB,cAAc,GAAG,IAAI,iCAAc,EAAE,CAAC;YACtC,MAAM;QACR,KAAK,sBAAY,CAAC,KAAK;YACrB,cAAc,GAAG,IAAI,mCAAe,EAAE,CAAC;YACvC,MAAM;QAER;YACE,MAAM,IAAI,8BAAqB,CAC7B,4BAA4B;gBAC1B,GAAG,YAAY,+CAA+C;gBAC9D,YAAY,CACf,CAAC;KACL;IAED,MAAM,YAAY,GAAiB,IAAA,2BAAiB,EAAC,oBAAoB,CAAC,CAAC;IAC3E,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE;QACtB,YAAY,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC;YAC1D,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YACxC,CAAC,CAAC,uBAAuB,CAAC;KAC7B;IAED,MAAM,QAAQ,GAAa,cAAc,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC;IAC1E,OAAO,cAAc,CAAC,iBAAiB,CACrC,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,eAAe,CAChB,CAAC;AACJ,CAAC;AAxHC,oCAAY;AA0Hd,KAAK,UAAU,qBAAqB,CAClC,IAAY,EACZ,gBAAwB,EACxB,YAAoB,EACpB,UAAU,GAAG,KAAK,EAClB,eAAe,GAAG,IAAI;IAEtB,IAAI,CAAC,IAAI,IAAI,CAAC,gBAAgB,IAAI,CAAC,YAAY,EAAE;QAC/C,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;KAC5E;IAED,MAAM,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAClE,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAE1D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE;QACxC,MAAM,IAAI,8BAAqB,CAC7B,wCAAwC;YACtC,aAAa,oBAAoB,EAAE,CACtC,CAAC;KACH;IACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE;QACpC,MAAM,IAAI,8BAAqB,CAC7B,kCAAkC,GAAG,gBAAgB,CACtD,CAAC;KACH;IAED,MAAM,oBAAoB,GAAG,EAAE,CAAC,YAAY,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;IAC5E,MAAM,gBAAgB,GAAG,EAAE,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAEpE,IAAI,YAA0B,CAAC;IAC/B,IAAI,YAAY,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE;QAC9C,YAAY,GAAG,sBAAY,CAAC,GAAG,CAAC;KACjC;SAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;QAC7C,YAAY,GAAG,mBAAmB,CAAC,gBAAgB,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;KAC1E;SAAM;QACL,MAAM,IAAI,8BAAqB,CAC7B,oBAAoB,YAAY,IAAI;YAClC,uDAAuD,CAC1D,CAAC;KACH;IAED,OAAO,MAAM,YAAY,CACvB,oBAAoB,EACpB,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,eAAe,EACf,gBAAgB,CACjB,CAAC;AACJ,CAAC;AA1KC,sDAAqB;AA4KvB,SAAS,0BAA0B,CACjC,IAAI,EACJ,gBAAwB;IAExB,IAAI,CAAC,IAAI,IAAI,CAAC,gBAAgB,EAAE;QAC9B,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;KACH;IACD,MAAM,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAClE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE;QACxC,MAAM,IAAI,8BAAqB,CAC7B,wCAAwC;YACtC,aAAa,oBAAoB,EAAE,CACtC,CAAC;KACH;IACD,MAAM,oBAAoB,GAAG,EAAE,CAAC,YAAY,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;IAE5E,OAAO,IAAA,2BAAiB,EAAC,oBAAoB,CAAC,CAAC;AACjD,CAAC;AA7LC,gEAA0B;AA+L5B,SAAgB,mBAAmB,CACjC,gBAAwB,EACxB,IAAa,EACb,YAAqB;IAErB,IACE,gBAAgB,CAAC,QAAQ,CAAC,YAAY,CAAC;QACvC,CAAC,IAAI;YACH,YAAY;YACZ,EAAE,CAAC,UAAU,CACX,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CACrE,CAAC,EACJ;QACA,OAAO,sBAAY,CAAC,KAAK,CAAC;KAC3B;SAAM;QACL,OAAO,sBAAY,CAAC,IAAI,CAAC;KAC1B;AACH,CAAC;AAjBD,kDAiBC"}

package/dist/parsers/index.d.ts

@@ -68,7 +68,8 @@ export declare enum LockfileType {
     npm = "npm",
     npm7 = "npm7",
     yarn = "yarn",
-    yarn2 = "yarn2"
+    yarn2 = "yarn2",
+    pnpm = "pnpm"
 }
 export interface LockfileParser {
     parseLockFile: (lockFileContents: string) => Lockfile;
@@ -84,4 +85,5 @@ export declare function getTopLevelDeps({ targetFile, includeDev, includePeerDep
 }): Dep[];
 export declare function createDepTreeDepFromDep(dep: Dep): DepTreeDep;
 export declare function getYarnWorkspaces(targetFile: string): string[] | false;
+export declare function getPnpmWorkspaces(workspacesYamlFile: string): string[];
 export {};

package/dist/parsers/index.js

@@ -1,7 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getYarnWorkspaces = exports.createDepTreeDepFromDep = exports.getTopLevelDeps = exports.parseManifestFile = exports.LockfileType = exports.Scope = void 0;
+exports.getPnpmWorkspaces = exports.getYarnWorkspaces = exports.createDepTreeDepFromDep = exports.getTopLevelDeps = exports.parseManifestFile = exports.LockfileType = exports.Scope = void 0;
 const errors_1 = require("../errors");
+const js_yaml_1 = require("js-yaml");
 var Scope;
 (function (Scope) {
     Scope["prod"] = "prod";
@@ -13,6 +14,7 @@ var LockfileType;
     LockfileType["npm7"] = "npm7";
     LockfileType["yarn"] = "yarn";
     LockfileType["yarn2"] = "yarn2";
+    LockfileType["pnpm"] = "pnpm";
 })(LockfileType = exports.LockfileType || (exports.LockfileType = {}));
 function parseManifestFile(manifestFileContents) {
     try {
@@ -86,4 +88,24 @@ function getYarnWorkspaces(targetFile) {
     }
 }
 exports.getYarnWorkspaces = getYarnWorkspaces;
+function getPnpmWorkspaces(workspacesYamlFile) {
+    try {
+        const rawPnpmWorkspacesYaml = (0, js_yaml_1.load)(workspacesYamlFile, {
+            json: true,
+            schema: js_yaml_1.FAILSAFE_SCHEMA,
+        });
+        if (rawPnpmWorkspacesYaml && rawPnpmWorkspacesYaml.packages) {
+            if (Array.isArray(rawPnpmWorkspacesYaml.packages)) {
+                return rawPnpmWorkspacesYaml.packages;
+            }
+        }
+        // By default, all packages of all subdirectories are included.
+        // https://pnpm.io/pnpm-workspace_yaml
+        return ['*'];
+    }
+    catch (e) {
+        throw new errors_1.InvalidUserInputError('package.json parsing failed with ' + `error ${e.message}`);
+    }
+}
+exports.getPnpmWorkspaces = getPnpmWorkspaces;
 //# sourceMappingURL=index.js.map

package/dist/parsers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../lib/parsers/index.ts"],"names":[],"mappings":";;;AAEA,sCAAkD;AAsElD,IAAY,KAGX;AAHD,WAAY,KAAK;IACf,sBAAa,CAAA;IACb,oBAAW,CAAA;AACb,CAAC,EAHW,KAAK,GAAL,aAAK,KAAL,aAAK,QAGhB;AAED,IAAY,YAKX;AALD,WAAY,YAAY;IACtB,2BAAW,CAAA;IACX,6BAAa,CAAA;IACb,6BAAa,CAAA;IACb,+BAAe,CAAA;AACjB,CAAC,EALW,YAAY,GAAZ,oBAAY,KAAZ,oBAAY,QAKvB;AAcD,SAAgB,iBAAiB,CAAC,oBAA4B;IAC5D,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;KACzC;IAAC,OAAO,CAAC,EAAE;QACV,MAAM,IAAI,8BAAqB,CAC7B,yCAAyC,GAAI,CAAW,CAAC,OAAO,CACjE,CAAC;KACH;AACH,CAAC;AARD,8CAQC;AAED,SAAgB,eAAe,CAAC,EAC9B,UAAU,EACV,UAAU,EACV,eAAe,GAAG,KAAK,EACvB,qBAAqB,GAAG,KAAK,GAM9B;;IACC,IAAI,YAAY,GAAU,EAAE,CAAC;IAE7B,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,+CACtC,UAAU,CAAC,YAAY,GACvB,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,GAChD,CAAC,UAAU,CAAC,oBAAoB,IAAI,EAAE,CAAC,EAC1C,CAAC;IAEH,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,oBAAoB,EAAE;QAClD,YAAY,CAAC,IAAI,CAAC;YAChB,GAAG,EACD,UAAU,IAAI,UAAU,CAAC,eAAe;gBACtC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC;gBACpC,CAAC,CAAC,KAAK;YACX,IAAI;YACJ,OAAO;SACR,CAAC,CAAC;KACJ;IAED,IAAI,eAAe,IAAI,UAAU,CAAC,gBAAgB,EAAE;QAClD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE;YACzE,IAAI,MAAA,MAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,oBAAoB,0CAAG,IAAI,CAAC,0CAAE,QAAQ,EAAE;gBACtD,SAAS;aACV;YACD,YAAY,CAAC,IAAI,CAAC;gBAChB,IAAI;gBACJ,OAAO;aACR,CAAC,CAAC;SACJ;KACF;IAED,IAAI,qBAAqB,IAAI,UAAU,CAAC,WAAW,EAAE;QACnD,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;YACpE,OAAO,CAAC,OAAO,CAAC,GAAG,UAAU,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC;YAC1C,UAAU;SACX,CAAC,CACH,CAAC;QAEF,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACtC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,iCAAM,GAAG,KAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAE,IAAG,CAAC,CAAC,GAAG,CACxE,CAAC;KACH;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAvDD,0CAuDC;AAED,SAAgB,uBAAuB,CAAC,GAAQ;IAC9C,OAAO;QACL,MAAM,EAAE;YACN,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI;SACxC;QACD,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC;AACJ,CAAC;AARD,0DAQC;AAED,SAAgB,iBAAiB,CAAC,UAAkB;IAClD,IAAI;QACF,MAAM,WAAW,GAAiB,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAChE,IAAI,CAAC,CAAC,WAAW,CAAC,UAAU,IAAI,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE;YACrD,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE;gBACzC,OAAO,WAAW,CAAC,UAAU,CAAC;aAC/B;YACD,IACE,UAAU,IAAI,WAAW,CAAC,UAAU;gBACpC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,EAC9C;gBACA,OAAO,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC;aACxC;SACF;QACD,OAAO,KAAK,CAAC;KACd;IAAC,OAAO,CAAC,EAAE;QACV,MAAM,IAAI,8BAAqB,CAC7B,mCAAmC,GAAG,SAAU,CAAW,CAAC,OAAO,EAAE,CACtE,CAAC;KACH;AACH,CAAC;AApBD,8CAoBC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../lib/parsers/index.ts"],"names":[],"mappings":";;;AAEA,sCAAkD;AAElD,qCAAgD;AAqEhD,IAAY,KAGX;AAHD,WAAY,KAAK;IACf,sBAAa,CAAA;IACb,oBAAW,CAAA;AACb,CAAC,EAHW,KAAK,GAAL,aAAK,KAAL,aAAK,QAGhB;AAED,IAAY,YAMX;AAND,WAAY,YAAY;IACtB,2BAAW,CAAA;IACX,6BAAa,CAAA;IACb,6BAAa,CAAA;IACb,+BAAe,CAAA;IACf,6BAAa,CAAA;AACf,CAAC,EANW,YAAY,GAAZ,oBAAY,KAAZ,oBAAY,QAMvB;AAcD,SAAgB,iBAAiB,CAAC,oBAA4B;IAC5D,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;KACzC;IAAC,OAAO,CAAC,EAAE;QACV,MAAM,IAAI,8BAAqB,CAC7B,yCAAyC,GAAI,CAAW,CAAC,OAAO,CACjE,CAAC;KACH;AACH,CAAC;AARD,8CAQC;AAED,SAAgB,eAAe,CAAC,EAC9B,UAAU,EACV,UAAU,EACV,eAAe,GAAG,KAAK,EACvB,qBAAqB,GAAG,KAAK,GAM9B;;IACC,IAAI,YAAY,GAAU,EAAE,CAAC;IAE7B,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,+CACtC,UAAU,CAAC,YAAY,GACvB,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,GAChD,CAAC,UAAU,CAAC,oBAAoB,IAAI,EAAE,CAAC,EAC1C,CAAC;IAEH,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,oBAAoB,EAAE;QAClD,YAAY,CAAC,IAAI,CAAC;YAChB,GAAG,EACD,UAAU,IAAI,UAAU,CAAC,eAAe;gBACtC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC;gBACpC,CAAC,CAAC,KAAK;YACX,IAAI;YACJ,OAAO;SACR,CAAC,CAAC;KACJ;IAED,IAAI,eAAe,IAAI,UAAU,CAAC,gBAAgB,EAAE;QAClD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE;YACzE,IAAI,MAAA,MAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,oBAAoB,0CAAG,IAAI,CAAC,0CAAE,QAAQ,EAAE;gBACtD,SAAS;aACV;YACD,YAAY,CAAC,IAAI,CAAC;gBAChB,IAAI;gBACJ,OAAO;aACR,CAAC,CAAC;SACJ;KACF;IAED,IAAI,qBAAqB,IAAI,UAAU,CAAC,WAAW,EAAE;QACnD,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;YACpE,OAAO,CAAC,OAAO,CAAC,GAAG,UAAU,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC;YAC1C,UAAU;SACX,CAAC,CACH,CAAC;QAEF,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACtC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,iCAAM,GAAG,KAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAE,IAAG,CAAC,CAAC,GAAG,CACxE,CAAC;KACH;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAvDD,0CAuDC;AAED,SAAgB,uBAAuB,CAAC,GAAQ;IAC9C,OAAO;QACL,MAAM,EAAE;YACN,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI;SACxC;QACD,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC;AACJ,CAAC;AARD,0DAQC;AAED,SAAgB,iBAAiB,CAAC,UAAkB;IAClD,IAAI;QACF,MAAM,WAAW,GAAiB,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAChE,IAAI,CAAC,CAAC,WAAW,CAAC,UAAU,IAAI,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE;YACrD,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE;gBACzC,OAAO,WAAW,CAAC,UAAU,CAAC;aAC/B;YACD,IACE,UAAU,IAAI,WAAW,CAAC,UAAU;gBACpC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,EAC9C;gBACA,OAAO,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC;aACxC;SACF;QACD,OAAO,KAAK,CAAC;KACd;IAAC,OAAO,CAAC,EAAE;QACV,MAAM,IAAI,8BAAqB,CAC7B,mCAAmC,GAAG,SAAU,CAAW,CAAC,OAAO,EAAE,CACtE,CAAC;KACH;AACH,CAAC;AApBD,8CAoBC;AAED,SAAgB,iBAAiB,CAAC,kBAA0B;IAC1D,IAAI;QACF,MAAM,qBAAqB,GAAG,IAAA,cAAI,EAAC,kBAAkB,EAAE;YACrD,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,yBAAe;SACxB,CAAC,CAAC;QAEH,IAAI,qBAAqB,IAAI,qBAAqB,CAAC,QAAQ,EAAE;YAC3D,IAAI,KAAK,CAAC,OAAO,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE;gBACjD,OAAO,qBAAqB,CAAC,QAAQ,CAAC;aACvC;SACF;QACD,+DAA+D;QAC/D,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,CAAC;KACd;IAAC,OAAO,CAAC,EAAE;QACV,MAAM,IAAI,8BAAqB,CAC7B,mCAAmC,GAAG,SAAU,CAAW,CAAC,OAAO,EAAE,CACtE,CAAC;KACH;AACH,CAAC;AApBD,8CAoBC"}

package/dist/utils.d.ts

@@ -3,8 +3,11 @@ export declare enum NodeLockfileVersion {
     NpmLockV2 = "NPM_LOCK_V2",
     NpmLockV3 = "NPM_LOCK_V3",
     YarnLockV1 = "YARN_LOCK_V1",
-    YarnLockV2 = "YARN_LOCK_V2"
+    YarnLockV2 = "YARN_LOCK_V2",
+    PnpmLockV5 = "PNPM_LOCK_V5",
+    PnpmLockV6 = "PNPM_LOCK_V6"
 }
 export declare const getLockfileVersionFromFile: (targetFile: string) => NodeLockfileVersion;
+export declare function getPnpmLockfileVersion(lockFileContents: string): NodeLockfileVersion.PnpmLockV5 | NodeLockfileVersion.PnpmLockV6;
 export declare function getYarnLockfileVersion(lockFileContents: string): NodeLockfileVersion.YarnLockV1 | NodeLockfileVersion.YarnLockV2;
 export declare function getNpmLockfileVersion(lockFileContents: string): NodeLockfileVersion.NpmLockV1 | NodeLockfileVersion.NpmLockV2 | NodeLockfileVersion.NpmLockV3;

package/dist/utils.js

@@ -1,8 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getNpmLockfileVersion = exports.getYarnLockfileVersion = exports.getLockfileVersionFromFile = exports.NodeLockfileVersion = void 0;
+exports.getNpmLockfileVersion = exports.getYarnLockfileVersion = exports.getPnpmLockfileVersion = exports.getLockfileVersionFromFile = exports.NodeLockfileVersion = void 0;
 const fs_1 = require("fs");
+const js_yaml_1 = require("js-yaml");
 const errors_1 = require("./errors");
+const error_catalog_nodejs_public_1 = require("@snyk/error-catalog-nodejs-public");
 var NodeLockfileVersion;
 (function (NodeLockfileVersion) {
     NodeLockfileVersion["NpmLockV1"] = "NPM_LOCK_V1";
@@ -10,6 +12,8 @@ var NodeLockfileVersion;
     NodeLockfileVersion["NpmLockV3"] = "NPM_LOCK_V3";
     NodeLockfileVersion["YarnLockV1"] = "YARN_LOCK_V1";
     NodeLockfileVersion["YarnLockV2"] = "YARN_LOCK_V2";
+    NodeLockfileVersion["PnpmLockV5"] = "PNPM_LOCK_V5";
+    NodeLockfileVersion["PnpmLockV6"] = "PNPM_LOCK_V6";
 })(NodeLockfileVersion = exports.NodeLockfileVersion || (exports.NodeLockfileVersion = {}));
 const getLockfileVersionFromFile = (targetFile) => {
     const lockFileContents = (0, fs_1.readFileSync)(targetFile, 'utf-8');
@@ -19,12 +23,32 @@ const getLockfileVersionFromFile = (targetFile) => {
     else if (targetFile.endsWith('yarn.lock')) {
         return getYarnLockfileVersion(lockFileContents);
     }
+    else if (targetFile.endsWith('pnpm-lock.yaml')) {
+        return getPnpmLockfileVersion(lockFileContents);
+    }
     else {
         throw new errors_1.InvalidUserInputError(`Unknown lockfile ${targetFile}. ` +
             'Please provide either package-lock.json or yarn.lock.');
     }
 };
 exports.getLockfileVersionFromFile = getLockfileVersionFromFile;
+function getPnpmLockfileVersion(lockFileContents) {
+    const rawPnpmLock = (0, js_yaml_1.load)(lockFileContents, {
+        json: true,
+        schema: js_yaml_1.FAILSAFE_SCHEMA,
+    });
+    const { lockfileVersion } = rawPnpmLock;
+    if (lockfileVersion.startsWith('5')) {
+        return NodeLockfileVersion.PnpmLockV5;
+    }
+    else if (lockfileVersion.startsWith('6')) {
+        return NodeLockfileVersion.PnpmLockV6;
+    }
+    else {
+        throw new error_catalog_nodejs_public_1.OpenSourceEcosystems.PnpmUnsupportedLockfileVersionError(`The pnpm-lock.yaml lockfile version ${lockfileVersion} is not supported`);
+    }
+}
+exports.getPnpmLockfileVersion = getPnpmLockfileVersion;
 function getYarnLockfileVersion(lockFileContents) {
     if (lockFileContents.includes('__metadata')) {
         return NodeLockfileVersion.YarnLockV2;

package/dist/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","sourceRoot":"","sources":["../lib/utils.ts"],"names":[],"mappings":";;;AAAA,2BAAkC;AAClC,qCAAiD;AAEjD,IAAY,mBAMX;AAND,WAAY,mBAAmB;IAC7B,gDAAyB,CAAA;IACzB,gDAAyB,CAAA;IACzB,gDAAyB,CAAA;IACzB,kDAA2B,CAAA;IAC3B,kDAA2B,CAAA;AAC7B,CAAC,EANW,mBAAmB,GAAnB,2BAAmB,KAAnB,2BAAmB,QAM9B;AAEM,MAAM,0BAA0B,GAAG,CACxC,UAAkB,EACG,EAAE;IACvB,MAAM,gBAAgB,GAAG,IAAA,iBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,UAAU,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE;QAC5C,OAAO,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;KAChD;SAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;QAC3C,OAAO,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;KACjD;SAAM;QACL,MAAM,IAAI,8BAAqB,CAC7B,oBAAoB,UAAU,IAAI;YAChC,uDAAuD,CAC1D,CAAC;KACH;AACH,CAAC,CAAC;AAdW,QAAA,0BAA0B,8BAcrC;AAEF,SAAgB,sBAAsB,CACpC,gBAAwB;IAExB,IAAI,gBAAgB,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE;QAC3C,OAAO,mBAAmB,CAAC,UAAU,CAAC;KACvC;SAAM;QACL,OAAO,mBAAmB,CAAC,UAAU,CAAC;KACvC;AACH,CAAC;AARD,wDAQC;AAED,SAAgB,qBAAqB,CACnC,gBAAwB;IAKxB,IAAI;QACF,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAClD,MAAM,eAAe,GAAkB,YAAY,CAAC,eAAe,IAAI,IAAI,CAAC;QAE5E,QAAQ,eAAe,EAAE;YACvB,KAAK,IAAI,CAAC;YACV,KAAK,CAAC;gBACJ,OAAO,mBAAmB,CAAC,SAAS,CAAC;YACvC,KAAK,CAAC;gBACJ,OAAO,mBAAmB,CAAC,SAAS,CAAC;YACvC,KAAK,CAAC;gBACJ,OAAO,mBAAmB,CAAC,SAAS,CAAC;YACvC;gBACE,MAAM,IAAI,8BAAqB,CAC7B,yDAAyD;oBACvD,mEAAmE,CACtE,CAAC;SACL;KACF;IAAC,OAAO,CAAC,EAAE;QACV,MAAM,IAAI,8BAAqB,CAC7B,0FAA0F,CAC3F,CAAC;KACH;AACH,CAAC;AA7BD,sDA6BC"}
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../lib/utils.ts"],"names":[],"mappings":";;;AAAA,2BAAkC;AAClC,qCAAgD;AAChD,qCAAiD;AACjD,mFAAyE;AAEzE,IAAY,mBAQX;AARD,WAAY,mBAAmB;IAC7B,gDAAyB,CAAA;IACzB,gDAAyB,CAAA;IACzB,gDAAyB,CAAA;IACzB,kDAA2B,CAAA;IAC3B,kDAA2B,CAAA;IAC3B,kDAA2B,CAAA;IAC3B,kDAA2B,CAAA;AAC7B,CAAC,EARW,mBAAmB,GAAnB,2BAAmB,KAAnB,2BAAmB,QAQ9B;AAEM,MAAM,0BAA0B,GAAG,CACxC,UAAkB,EACG,EAAE;IACvB,MAAM,gBAAgB,GAAG,IAAA,iBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,UAAU,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE;QAC5C,OAAO,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;KAChD;SAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;QAC3C,OAAO,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;KACjD;SAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QAChD,OAAO,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;KACjD;SAAM;QACL,MAAM,IAAI,8BAAqB,CAC7B,oBAAoB,UAAU,IAAI;YAChC,uDAAuD,CAC1D,CAAC;KACH;AACH,CAAC,CAAC;AAhBW,QAAA,0BAA0B,8BAgBrC;AAEF,SAAgB,sBAAsB,CACpC,gBAAwB;IAExB,MAAM,WAAW,GAAG,IAAA,cAAI,EAAC,gBAAgB,EAAE;QACzC,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,yBAAe;KACxB,CAAC,CAAC;IACH,MAAM,EAAE,eAAe,EAAE,GAAG,WAAW,CAAC;IACxC,IAAI,eAAe,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;QACnC,OAAO,mBAAmB,CAAC,UAAU,CAAC;KACvC;SAAM,IAAI,eAAe,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;QAC1C,OAAO,mBAAmB,CAAC,UAAU,CAAC;KACvC;SAAM;QACL,MAAM,IAAI,kDAAoB,CAAC,mCAAmC,CAChE,uCAAuC,eAAe,mBAAmB,CAC1E,CAAC;KACH;AACH,CAAC;AAjBD,wDAiBC;AAED,SAAgB,sBAAsB,CACpC,gBAAwB;IAExB,IAAI,gBAAgB,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE;QAC3C,OAAO,mBAAmB,CAAC,UAAU,CAAC;KACvC;SAAM;QACL,OAAO,mBAAmB,CAAC,UAAU,CAAC;KACvC;AACH,CAAC;AARD,wDAQC;AAED,SAAgB,qBAAqB,CACnC,gBAAwB;IAKxB,IAAI;QACF,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAClD,MAAM,eAAe,GAAkB,YAAY,CAAC,eAAe,IAAI,IAAI,CAAC;QAE5E,QAAQ,eAAe,EAAE;YACvB,KAAK,IAAI,CAAC;YACV,KAAK,CAAC;gBACJ,OAAO,mBAAmB,CAAC,SAAS,CAAC;YACvC,KAAK,CAAC;gBACJ,OAAO,mBAAmB,CAAC,SAAS,CAAC;YACvC,KAAK,CAAC;gBACJ,OAAO,mBAAmB,CAAC,SAAS,CAAC;YACvC;gBACE,MAAM,IAAI,8BAAqB,CAC7B,yDAAyD;oBACvD,mEAAmE,CACtE,CAAC;SACL;KACF;IAAC,OAAO,CAAC,EAAE;QACV,MAAM,IAAI,8BAAqB,CAC7B,0FAA0F,CAC3F,CAAC;KACH;AACH,CAAC;AA7BD,sDA6BC"}

package/package.json

@@ -8,7 +8,7 @@
   "scripts": {
     "test": "npm run unit-test && npm run test:jest",
     "unit-test": "tap --ts -Rspec ./test/lib/*.test.[tj]s --timeout=300 --no-check-coverage",
-    "test:jest": "jest",
+    "test:jest": "jest --coverage --runInBand",
     "lint": "eslint --color --cache '{lib,test}/**/*.{js,ts}' && prettier --check '{lib,test}/**/*.{js,ts}'",
     "format": "prettier --write '{lib,test}/**/*.{js,ts,json}'",
     "build": "tsc",
@@ -31,19 +31,21 @@
   ],
   "homepage": "https://github.com/snyk/nodejs-lockfile-parser#readme",
   "dependencies": {
+    "@snyk/error-catalog-nodejs-public": "^5.16.0",
     "@snyk/dep-graph": "^2.3.0",
     "@snyk/graphlib": "2.1.9-patch.3",
     "@yarnpkg/core": "^2.4.0",
     "@yarnpkg/lockfile": "^1.1.0",
+    "dependency-path": "^9.2.8",
     "event-loop-spinner": "^2.0.0",
     "js-yaml": "^4.1.0",
     "lodash.clonedeep": "^4.5.0",
-    "p-map": "^4.0.0",
     "lodash.flatmap": "^4.5.0",
     "lodash.isempty": "^4.4.0",
     "lodash.topairs": "^4.3.0",
     "micromatch": "^4.0.5",
-    "semver": "^7.3.5",
+    "p-map": "^4.0.0",
+    "semver": "^7.6.0",
     "snyk-config": "^5.0.0",
     "tslib": "^1.9.3",
     "uuid": "^8.3.0"
@@ -65,5 +67,5 @@
     "typescript": "4.8.4"
   },
   "packageManager": "yarn@2.4.1",
-  "version": "1.52.11"
+  "version": "1.53.1"
 }