snyk-nodejs-lockfile-parser 2.4.2 → 2.4.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -3,12 +3,12 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
3
3
|
exports.parsePnpmWorkspace = void 0;
|
|
4
4
|
const debugModule = require("debug");
|
|
5
5
|
const path = require("path");
|
|
6
|
+
const utils_1 = require("../../utils");
|
|
6
7
|
const util_1 = require("../util");
|
|
7
8
|
const build_dep_graph_pnpm_1 = require("./build-dep-graph-pnpm");
|
|
9
|
+
const constants_1 = require("./constants");
|
|
8
10
|
const index_1 = require("./lockfile-parser/index");
|
|
9
|
-
const utils_1 = require("../../utils");
|
|
10
11
|
const utils_2 = require("./utils");
|
|
11
|
-
const constants_1 = require("./constants");
|
|
12
12
|
const debug = debugModule('snyk-pnpm-workspaces');
|
|
13
13
|
// Compute project versions map
|
|
14
14
|
// This is needed because the lockfile doesn't present the version of
|
|
@@ -36,12 +36,21 @@ function computeProjectVersionMaps(root, targets) {
|
|
|
36
36
|
}
|
|
37
37
|
const parsePnpmWorkspace = async (root, workspaceDir, options) => {
|
|
38
38
|
const scannedProjects = [];
|
|
39
|
-
const { includeDevDeps, includePeerDeps, includeOptionalDeps, strictOutOfSync, pruneWithinTopLevelDeps, } = options;
|
|
39
|
+
const { includeDevDeps, includePeerDeps, includeOptionalDeps, strictOutOfSync, pruneWithinTopLevelDeps, exclude, } = options;
|
|
40
40
|
const pnpmLockfileContents = (0, utils_2.getFileContents)(root, path.join(workspaceDir, 'pnpm-lock.yaml')).content;
|
|
41
41
|
const lockfileVersion = (0, utils_1.getPnpmLockfileVersion)(pnpmLockfileContents);
|
|
42
42
|
const lockFileParser = (0, index_1.getPnpmLockfileParser)(pnpmLockfileContents, lockfileVersion);
|
|
43
43
|
const projectVersionsMaps = computeProjectVersionMaps(workspaceDir, Object.keys(lockFileParser.importers));
|
|
44
|
+
const excludeList = exclude ? exclude.split(',').map((s) => s.trim()) : [];
|
|
44
45
|
for (const importer of Object.keys(lockFileParser.importers)) {
|
|
46
|
+
if (excludeList.length > 0) {
|
|
47
|
+
const importerParts = importer.split('/');
|
|
48
|
+
const shouldExclude = excludeList.some((excludeName) => importerParts.includes(excludeName));
|
|
49
|
+
if (shouldExclude) {
|
|
50
|
+
debug(`Skipping excluded importer: ${importer}`);
|
|
51
|
+
continue;
|
|
52
|
+
}
|
|
53
|
+
}
|
|
45
54
|
const resolvedImporterPath = path.join(workspaceDir, importer);
|
|
46
55
|
const packagePath = path.join(resolvedImporterPath, 'package.json');
|
|
47
56
|
debug(`Processing project ${packagePath} as part of a pnpm workspace`);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"parse-workspace.js","sourceRoot":"","sources":["../../../lib/dep-graph-builders/pnpm/parse-workspace.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"parse-workspace.js","sourceRoot":"","sources":["../../../lib/dep-graph-builders/pnpm/parse-workspace.ts"],"names":[],"mappings":";;;AACA,qCAAqC;AACrC,6BAA6B;AAC7B,uCAAqD;AAMrD,kCAAuC;AACvC,iEAA2D;AAC3D,2CAAgD;AAChD,mDAAgE;AAEhE,mCAA0C;AAE1C,MAAM,KAAK,GAAG,WAAW,CAAC,sBAAsB,CAAC,CAAC;AAElD,+BAA+B;AAC/B,qEAAqE;AACrE,oEAAoE;AACpE,iCAAiC;AACjC,SAAS,yBAAyB,CAAC,IAAY,EAAE,OAAiB;IAChE,MAAM,kBAAkB,GAAG,EAAE,CAAC;IAC9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACjE,MAAM,WAAW,GAAG,IAAA,uBAAe,EAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;QAE/D,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,IAAA,mBAAY,EAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACxD,kBAAkB,CAAC,MAAM,CAAC,GAAG;gBAC3B,OAAO,EAAE,aAAa,CAAC,OAAO,IAAI,6BAAiB;gBACnD,IAAI,EAAE,aAAa,CAAC,IAAI;aACzB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,KAAK,CACH,sCAAsC,mBAAmB,YAAY,GAAG,EAAE,CAC3E,CAAC;YACF,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAEM,MAAM,kBAAkB,GAAG,KAAK,EACrC,IAAY,EACZ,YAAoB,EACpB,OAAgC,EAChC,EAAE;IACF,MAAM,eAAe,GAAyB,EAAE,CAAC;IACjD,MAAM,EACJ,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,uBAAuB,EACvB,OAAO,GACR,GAAG,OAAO,CAAC;IAEZ,MAAM,oBAAoB,GAAG,IAAA,uBAAe,EAC1C,IAAI,EACJ,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAC1C,CAAC,OAAO,CAAC;IAEV,MAAM,eAAe,GAAG,IAAA,8BAAsB,EAAC,oBAAoB,CAAC,CAAC;IACrE,MAAM,cAAc,GAAuB,IAAA,6BAAqB,EAC9D,oBAAoB,EACpB,eAAe,CAChB,CAAC;IAEF,MAAM,mBAAmB,GAAG,yBAAyB,CACnD,YAAY,EACZ,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CACtC,CAAC;IAEF,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE3E,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1C,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CACrD,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,CACpC,CAAC;YAEF,IAAI,aAAa,EAAE,CAAC;gBAClB,KAAK,CAAC,+BAA+B,QAAQ,EAAE,CAAC,CAAC;gBACjD,SAAS;YACX,CAAC;QACH,CAAC;QACD,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;QACpE,KAAK,CAAC,sBAAsB,WAAW,8BAA8B,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,IAAA,uBAAe,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAEvD,MAAM,OAAO,GAAoB,IAAA,mBAAY,EAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAEnE,cAAc,CAAC,aAAa,GAAG;YAC7B,WAAW,EAAE,IAAI;YACjB,kBAAkB,EAAE,mBAAmB;SACxC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAa,MAAM,IAAA,wCAAiB,EAChD,cAAc,EACd,OAAO,EACP;gBACE,cAAc;gBACd,eAAe;gBACf,eAAe;gBACf,mBAAmB;gBACnB,uBAAuB;aACxB,EACD,QAAQ,CACT,CAAC;YAEF,MAAM,OAAO,GAAuB;gBAClC,cAAc,EAAE,MAAM;gBACtB,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC;gBACrD,QAAQ;gBACR,MAAM,EAAE;oBACN,IAAI,EAAE,6BAA6B;oBACnC,OAAO,EAAE,OAAO,CAAC,OAAO;iBACzB;aACF,CAAC;YACF,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,KAAK,CAAC,4BAA4B,WAAW,CAAC,QAAQ,YAAY,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC,CAAC;AAtFW,QAAA,kBAAkB,sBAsF7B"}
|
package/package.json
CHANGED