tar-dependency 0.1.0 → 0.3.0

package/.nvmrc

@@ -0,0 +1 @@
+24

package/README.md

@@ -15,7 +15,7 @@ We created this tool to replace [Bower](https://bower.io/), where packages are n
 
 ## Requirements
 
-This library needs at least NodeJS >= 12.20.0
+This library needs at least NodeJS >= 20
 
 ## Installation
 
@@ -91,4 +91,45 @@ and then install them with
 
 `tar-dependency install`
 
-(c) 2017-2021 alex@alexi.ch
+### Authentication / Private repositories
+
+URLs support `${ENV_VAR}` placeholders, which are expanded from environment variables at install time. This keeps secrets out of `package.json` and version control.
+
+For example, to authenticate against a private GitLab instance:
+
+```json
+{
+  "tarDependencies": {
+    "components/components-ext": {
+      "url": "https://gitlab.kadenpartner.ch/kp/extjs/repository/4.2.6-min/archive.tgz?private_token=${KP_GITLAB_TOKEN}",
+      "strip": 1
+    }
+  }
+}
+```
+
+Store the token in your shell environment (e.g. `~/.zshenv` or `~/.zshrc`):
+
+```bash
+export KP_GITLAB_TOKEN=glpat-xxxx
+```
+
+The raw URL (with the placeholder, not the expanded value) is printed to the console, so tokens are never leaked in logs.
+
+## Changelog
+
+### 0.3.0 - Mar 2026
+
+* Added `${ENV_VAR}` placeholder support in URLs for authentication against private registries
+
+### 0.2.0 - Feb 2025
+
+* [breaking] Updated to NodeJS >= 20 with ES Modules
+* [breaking] You need a NodeJS version that supports ES Modules (~ V.14.0)
+* Updated dependant packages
+
+### 0.1.0
+
+Initial release
+
+(c) 2017-2026 alex@alexi.ch

package/bin/cmd.js

@@ -4,13 +4,14 @@
  *
  * It assumes a package.json in the actual working directory.
  *
- * (c) 2017 alex@alexi.ch
+ * (c) 2017-2025 alex@alexi.ch
  */
 
-const lib = require('../index.js');
-const jsonfile = require('jsonfile');
-const path = require('path');
-const program = require('commander');
+import process from 'node:process';
+import lib from '../index.js';
+import jsonfile from 'jsonfile';
+import path from 'path';
+import { program } from 'commander';
 
 function setWorkingDir(dir) {
     process.chdir(dir);

package/eslint.config.js

@@ -0,0 +1,46 @@
+import eslintPluginPrettierRecommended from 'eslint-plugin-prettier/recommended';
+import json from 'eslint-plugin-json';
+
+// eslint.config.js
+export default [
+    eslintPluginPrettierRecommended,
+    {
+        files: ['**/*.json'],
+        ...json.configs['recommended']
+    },
+    {
+        // extends: ['prettier', 'plugin:json/recommended'],
+        languageOptions: {
+            ecmaVersion: 2017
+        },
+        // env: {
+        //     node: true
+        // },
+        // plugins: ['prettier', 'json'],
+        rules: {
+            'prettier/prettier': [
+                'error',
+                {
+                    singleQuote: true,
+                    tabWidth: 4,
+                    printWidth: 120
+                }
+            ],
+            'no-unused-vars': [
+                'error',
+                {
+                    vars: 'all',
+                    args: 'none'
+                }
+            ],
+            semi: ['error', 'always'],
+            curly: 'error',
+            eqeqeq: 'error',
+            'no-eval': 'error',
+            'no-loop-func': 'error',
+            radix: 'error',
+            'comma-dangle': 'error',
+            'no-undef': 'error'
+        }
+    }
+];

package/index.js

@@ -1,15 +1,16 @@
 /**
  * tar-dependency module
  *
- * (c) 2017 alex@alexi.ch
+ * (c) 2017-2025 alex@alexi.ch
  */
-const path = require('path'),
-    jsonfile = require('jsonfile'),
-    rimraf = require('rimraf'),
-    mkdirp = require('mkdirp'),
-    tar = require('tar'),
-    fetch = require('node-fetch'),
-    util = require('util');
+import process from 'node:process';
+import console from 'node:console';
+import path from 'path';
+import jsonfile from 'jsonfile';
+import { rimraf } from 'rimraf';
+import { mkdirp } from 'mkdirp';
+import * as tar from 'tar';
+import fetch from 'node-fetch';
 
 function normalizePathKey(str) {
     return (str || '').replace(/(^\/)|(\/$)/g, ''); // remove leading/trailing slashes)
@@ -30,21 +31,18 @@ function normalizePathKey(str) {
  *
  * This function returns a promise that resolves when all dependencies are installed.
  */
-async function installTarDependencies(config, destKey) {
+async function installTarDependencies(config) {
     config = config || {};
     const deps = config.tarDependencies || {};
 
-    destKey = normalizePathKey(destKey);
     for (const key of Object.keys(deps)) {
-        if (destKey && key !== destKey) {
-            return;
-        }
         const fullOutdir = path.join(process.cwd(), key);
-        const url = deps[key].url;
+        const rawUrl = deps[key].url;
+        const url = rawUrl.replaceAll(/\$\{(\w+)\}/g, (_, name) => encodeURIComponent(process.env[name] ?? ''));
         const strip = deps[key].strip === undefined ? 1 : Number(deps[key].strip);
 
-        console.log('tar package: ' + url + ' => ' + key);
-        await util.promisify(rimraf)(fullOutdir);
+        console.log('tar package: ' + rawUrl + ' => ' + key);
+        await rimraf(fullOutdir);
         await mkdirp(fullOutdir);
 
         const response = await fetch(url);
@@ -96,7 +94,7 @@ async function removeArchive(config, destDir) {
     }
 
     const fullOutdir = path.join(process.cwd(), destDir);
-    await util.promisify(rimraf)(fullOutdir);
+    await rimraf(fullOutdir);
 }
 
 /*
@@ -107,10 +105,10 @@ async function removeArchive(config, destDir) {
  */
 async function saveConf(config, file) {
     config = config || {};
-    await util.promisify(jsonfile.writeFileSync)(file, config, { spaces: 2 });
+    await jsonfile.writeFile(file, config, { spaces: 2 });
 }
 
-module.exports = {
+export default {
     install: installTarDependencies,
     add: addArchive,
     remove: removeArchive,

package/package.json

@@ -1,83 +1,49 @@
 {
-    "name": "tar-dependency",
-    "version": "0.1.0",
-    "description": "Fetches .tar(.gz) archives defined in package.json and extracts them to a specific location.",
-    "main": "index.js",
-    "scripts": {
-        "test": "echo \"Error: no test specified\" && exit 1"
+  "name": "tar-dependency",
+  "version": "0.3.0",
+  "description": "Fetches .tar(.gz) archives defined in package.json and extracts them to a specific location.",
+  "main": "index.js",
+  "type": "module",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "author": "Alexander Schenkel",
+  "email": "alex@alexi.ch",
+  "license": "MIT",
+  "dependencies": {
+    "commander": "^13.1.0",
+    "jsonfile": "^6.2.1",
+    "mkdirp": "^3.0.1",
+    "node-fetch": "^2.6.5",
+    "rimraf": "^6.1.3",
+    "tar": "^7.5.16"
+  },
+  "devDependencies": {
+    "eslint": "^9.20.0",
+    "eslint-config-prettier": "^10.0.1",
+    "eslint-plugin-json": "^4.0.1",
+    "eslint-plugin-prettier": "^5.2.3",
+    "prettier": "^3.5.0"
+  },
+  "bin": {
+    "tar-dependency": "bin/cmd.js"
+  },
+  "prettier": {
+    "printWidth": 120,
+    "tabWidth": 4,
+    "useTabs": false,
+    "semi": true,
+    "singleQuote": true,
+    "trailingComma": "none"
+  },
+  "tarDependencies": {
+    "packages/fontawesome": {
+      "url": "http://reposerver.kp.local/lib/fontawesome-pro-6.7.2-web.tar.gz",
+      "strip": 1
     },
-    "author": "Alexander Schenkel",
-    "email": "alex@alexi.ch",
-    "license": "MIT",
-    "dependencies": {
-        "commander": "^8.2.0",
-        "jsonfile": "^6.1.0",
-        "mkdirp": "^1.0.4",
-        "node-fetch": "^2.6.5",
-        "rimraf": "^3.0.2",
-        "tar": "^6.1.11"
-    },
-    "devDependencies": {
-        "eslint": "^7.32.0",
-        "eslint-config-prettier": "^8.3.0",
-        "eslint-plugin-json": "^3.1.0",
-        "eslint-plugin-prettier": "^4.0.0",
-        "prettier": "^2.4.1"
-    },
-    "bin": {
-        "tar-dependency": "bin/cmd.js"
-    },
-    "eslintConfig": {
-        "root": true,
-        "parserOptions": {
-            "ecmaVersion": 2017
-        },
-        "extends": [
-            "prettier",
-            "plugin:json/recommended"
-        ],
-        "env": {
-            "node": true
-        },
-        "plugins": [
-            "prettier",
-            "json"
-        ],
-        "rules": {
-            "prettier/prettier": [
-                "error",
-                {
-                    "singleQuote": true,
-                    "tabWidth": 4,
-                    "printWidth": 120
-                }
-            ],
-            "no-unused-vars": [
-                "error",
-                {
-                    "vars": "all",
-                    "args": "none"
-                }
-            ],
-            "semi": [
-                "error",
-                "always"
-            ],
-            "curly": "error",
-            "eqeqeq": "error",
-            "no-eval": "error",
-            "no-loop-func": "error",
-            "radix": "error",
-            "comma-dangle": "error",
-            "no-undef": "error"
-        }
-    },
-    "prettier": {
-        "printWidth": 120,
-        "tabWidth": 4,
-        "useTabs": false,
-        "semi": true,
-        "singleQuote": true,
-        "trailingComma": "none"
+    "packages/php-injector": {
+      "url": "https://github.com/bylexus/php-injector/archive/0.0.8.tar.gz",
+      "strip": 1
     }
+  }
 }