yarn-why-duplicate 2.0.0 → 2.2.2

package/LICENSE

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2024 Christophe Hurpeau <christophe@hurpeau.com> (https://christophe.hurpeau.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

package/README.md

@@ -1,16 +1,16 @@
-<h3 align="center">
+<h1 align="center">
   yarn-why-duplicate
-</h3>
+</h1>
 
 <p align="center">
   Simple bin to know why a package is duplicated
 </p>
 
 <p align="center">
-  <a href="https://npmjs.org/package/yarn-why-duplicate"><img src="https://img.shields.io/npm/v/yarn-why-duplicate.svg?style=flat-square"></a>
-  <a href="https://npmjs.org/package/yarn-why-duplicate"><img src="https://img.shields.io/npm/dw/yarn-why-duplicate.svg?style=flat-square"></a>
-  <a href="https://npmjs.org/package/yarn-why-duplicate"><img src="https://img.shields.io/node/v/yarn-why-duplicate.svg?style=flat-square"></a>
-  <a href="https://npmjs.org/package/yarn-why-duplicate"><img src="https://img.shields.io/npm/types/yarn-why-duplicate.svg?style=flat-square"></a>
+  <a href="https://npmjs.org/package/yarn-why-duplicate"><img src="https://img.shields.io/npm/v/yarn-why-duplicate.svg?style=flat-square" alt="npm version"></a>
+  <a href="https://npmjs.org/package/yarn-why-duplicate"><img src="https://img.shields.io/npm/dw/yarn-why-duplicate.svg?style=flat-square" alt="npm downloads"></a>
+  <a href="https://npmjs.org/package/yarn-why-duplicate"><img src="https://img.shields.io/node/v/yarn-why-duplicate.svg?style=flat-square" alt="node version"></a>
+  <a href="https://npmjs.org/package/yarn-why-duplicate"><img src="https://img.shields.io/npm/types/yarn-why-duplicate.svg?style=flat-square" alt="types"></a>
 </p>
 
 ## Usage
@@ -20,3 +20,50 @@ With yarn berry:
 ```
 yarn dlx yarn-why-duplicate <dependencyName>
 ```
+
+One package name, no flags. It runs `yarn why <dependencyName> --json` in the
+working directory, groups the answer by resolved version, and prints each
+version with the dependents that asked for it and the range they asked with:
+
+```
+Found 2 versions:
+
+semver@npm:7.8.5
+- eslint@npm:10.4.0 (semver@npm:^7.6.3)
+- ts-api-utils@npm:2.1.0 (semver@npm:^7.7.1)
+
+semver@npm:6.3.1
+- @babel/core@npm:7.28.4 (semver@npm:^6.3.1)
+```
+
+`No version found` means yarn reported nothing for that name — usually a typo,
+or a package that is not in the tree.
+
+Requires yarn berry (>= 2): yarn 1's `yarn why` output is a different format and
+is rejected with an explicit message rather than misparsed. Exits 1 on that and
+on any error yarn reports.
+
+### Prefer yarn-berry-why-duplicate
+
+This is the original tool, kept working and unchanged. It shells out to
+`yarn why`, so it explains one package at a time, spawns yarn per run, and knows
+nothing about lockstep families or about fixing anything.
+
+[yarn-berry-why-duplicate](../yarn-berry-deduplicate) reads `yarn.lock` directly
+and is what to reach for now: it lists every duplicate at once, takes globs and
+package filters, reports the lockstep clusters, tells you which copies can be
+merged — and its sibling `yarn-berry-deduplicate` applies the merges.
+
+## Notes
+
+- CLI only: there is no importable API. The `exports` map only exposes
+  `./package.json`, so `import "yarn-why-duplicate"` fails by design. Internally
+  the bin is three steps,
+  `readAndParseYarnWhy` → `identifyDuplicates` → `displayDuplicates`, each in
+  its own file under `lib/` and each unit-tested against recorded `yarn why`
+  output in `test/fixtures/`.
+- Plain JavaScript, no TypeScript and no build; node `>=22.18.0`.
+- `Found N versions` counts every version of the named package, duplicated or
+  not — one version is a normal answer, not an error.
+- Colors and descriptor formatting come from `@yarnpkg/core`, configured from
+  the working directory, so output matches what yarn itself prints.

package/bin/yarn-why-duplicate.mjs

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
 
-import { displayDuplicates } from '../lib/displayDuplicates.js';
-import { identifyDuplicates } from '../lib/identifyDuplicates.js';
-import { readAndParseYarnWhy } from '../lib/readAndParseYarnWhy.js';
+import { displayDuplicates } from "../lib/displayDuplicates.js";
+import { identifyDuplicates } from "../lib/identifyDuplicates.js";
+import { readAndParseYarnWhy } from "../lib/readAndParseYarnWhy.js";
 
 const pkgName = process.argv.slice(2)[0];
 
 const yarnWhyResult = readAndParseYarnWhy(pkgName);
 
 for (const line of yarnWhyResult) {
-  if (line.type === 'error') {
+  if (line.type === "error") {
     console.error(`yarn error: ${line.data}`);
     process.exit(1);
-  } else if (line.type === 'step') {
-    console.error('yarn 1 is not supported, use yarn berry (>=2)');
+  } else if (line.type === "step") {
+    console.error("yarn 1 is not supported, use yarn berry (>=2)");
     process.exit(1);
   }
 }

package/lib/displayDuplicates.js

@@ -1,4 +1,4 @@
-import { structUtils, Configuration } from '@yarnpkg/core';
+import { Configuration, structUtils } from "@yarnpkg/core";
 
 export const displayDuplicates = (
   groupByVersions,
@@ -6,13 +6,13 @@ export const displayDuplicates = (
   configuration = Configuration.create(process.cwd()),
 ) => {
   if (groupByVersions.length === 0) {
-    log('No version found');
+    log("No version found");
     return;
   }
 
   log(
     `Found ${groupByVersions.length} version${
-      groupByVersions.length === 1 ? '' : 's'
+      groupByVersions.length === 1 ? "" : "s"
     }:`,
   );
   log();
@@ -25,7 +25,7 @@ export const displayDuplicates = (
           configuration,
           source,
         )} (${structUtils.prettyDescriptor(configuration, descriptor)})`,
-      ); // TODO prettyDescriptor from structUtils
+      );
     }
     log();
   }

package/lib/identifyDuplicates.js

@@ -1,5 +1,5 @@
-import { structUtils } from '@yarnpkg/core';
-import { compare as compareRange } from 'semver';
+import { structUtils } from "@yarnpkg/core";
+import { compare as compareRange } from "semver";
 
 export const identifyDuplicates = (yarnWhyResult) => {
   const groupByVersions = new Map();

package/lib/index.js

@@ -0,0 +1,3 @@
+throw new Error(
+  "yarn-why-duplicate has no programmatic API, use the `yarn-why-duplicate` bin instead",
+);

package/lib/readAndParseYarnWhy.js

@@ -1,16 +1,16 @@
-import { spawnSync } from 'node:child_process';
+import { spawnSync } from "node:child_process";
 
 export const parseYarnWhy = (content) => {
   return content
-    .split('\n')
+    .split("\n")
     .filter(Boolean)
     .map((line) => JSON.parse(line));
 };
 
 export const readAndParseYarnWhy = (pkgName) => {
-  const { stdout, stderr } = spawnSync('yarn', ['why', pkgName, '--json'], {
-    encoding: 'utf8',
-    stdio: 'pipe',
+  const { stdout, stderr } = spawnSync("yarn", ["why", pkgName, "--json"], {
+    encoding: "utf8",
+    stdio: "pipe",
     pwd: process.cwd(),
   });
   if (stderr) {

package/package.json

@@ -1,62 +1,46 @@
 {
   "name": "yarn-why-duplicate",
-  "version": "2.0.0",
+  "version": "2.2.2",
   "description": "Simple bin to know why a package is duplicated",
   "keywords": [
-    "yarn",
-    "berry"
+    "berry",
+    "yarn"
   ],
-  "author": "Christophe Hurpeau <christophe@hurpeau.com> (https://christophe.hurpeau.com)",
-  "license": "ISC",
-  "repository": "https://github.com/christophehurpeau/yarn-why-duplicate.git",
-  "homepage": "https://github.com/christophehurpeau/yarn-why-duplicate#readme",
+  "homepage": "https://github.com/christophehurpeau/pm-tools",
   "bugs": {
-    "url": "https://github.com/christophehurpeau/yarn-why-duplicate/issues"
+    "url": "https://github.com/christophehurpeau/pm-tools/issues"
   },
-  "type": "module",
-  "engines": {
-    "node": ">=18.12.0"
-  },
-  "packageManager": "yarn@4.0.1",
-  "main": "./lib/index.js",
-  "exports": {
-    ".": "./lib/index.js",
-    "./package.json": "./package.json"
+  "license": "MIT",
+  "author": "Christophe Hurpeau <christophe@hurpeau.com> (https://christophe.hurpeau.com)",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/christophehurpeau/pm-tools.git",
+    "directory": "packages/yarn-why-duplicate"
   },
-  "sideEffects": false,
   "bin": "./bin/yarn-why-duplicate.mjs",
   "files": [
     "lib",
     "bin"
   ],
-  "scripts": {
-    "checks": "node scripts/check-package.js",
-    "clean:build": "true",
-    "lint": "yarn run lint:prettier && yarn run lint:eslint",
-    "lint:eslint": "eslint --report-unused-disable-directives --resolve-plugins-relative-to . --quiet *.{js,cjs,mjs} lib bin scripts",
-    "lint:prettier": "pob-root-prettier --check .",
-    "lint:prettier:fix": "pob-root-prettier --write .",
-    "postinstallDev": "pob-root-postinstall",
-    "test": "node --test",
-    "test:coverage": "node --test",
-    "test:watch": "node --test --watch"
+  "type": "module",
+  "sideEffects": false,
+  "main": "./lib/index.js",
+  "exports": {
+    ".": "./lib/index.js",
+    "./package.json": "./package.json"
   },
-  "prettier": "@pob/root/prettier-config",
-  "commitlint": {
-    "extends": [
-      "@pob/commitlint-config"
-    ]
+  "scripts": {
+    "lint": "bun run lint:oxlint && bun run lint:eslint",
+    "lint:eslint": "bun run --cwd '../..' eslint --quiet 'packages/yarn-why-duplicate'",
+    "lint:oxlint": "bun run --cwd '../..' oxlint --quiet 'packages/yarn-why-duplicate'",
+    "test": "bun run --cwd '../..' test -- 'packages/yarn-why-duplicate'"
   },
-  "pob": {},
   "dependencies": {
-    "@yarnpkg/core": "4.0.1",
-    "semver": "7.5.4"
+    "@yarnpkg/core": "4.9.2",
+    "semver": "7.8.5"
+  },
+  "engines": {
+    "node": ">=22.18.0"
   },
-  "devDependencies": {
-    "@pob/commitlint-config": "6.2.0",
-    "@pob/eslint-config": "51.1.2",
-    "@pob/root": "8.6.0",
-    "check-package-dependencies": "6.8.0",
-    "eslint": "8.53.0"
-  }
-}
+  "pob": {}
+}

package/CHANGELOG.md

@@ -1,64 +0,0 @@
-# Changelog
-
-All notable changes to this project will be documented in this file.
-See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
-
-## [2.0.0](https://github.com/christophehurpeau/yarn-why-duplicate/compare/v1.2.0...v2.0.0) (2023-11-05)
-
-
-### ⚠ BREAKING CHANGES
-
-* require node 18
-
-### Features
-
-* update to yarn 4 stable ([704278c](https://github.com/christophehurpeau/yarn-why-duplicate/commit/704278c5643a7fcb61704511b921cfa3485d3b04))
-
-
-### Bug Fixes
-
-* **deps:** update dependency @yarnpkg/core to v4.0.0-rc.43 ([#12](https://github.com/christophehurpeau/yarn-why-duplicate/issues/12)) ([f7d4e20](https://github.com/christophehurpeau/yarn-why-duplicate/commit/f7d4e202efdfa752d00ab834af391dae95896473))
-* **deps:** update dependency @yarnpkg/core to v4.0.0-rc.44 ([#20](https://github.com/christophehurpeau/yarn-why-duplicate/issues/20)) ([2887734](https://github.com/christophehurpeau/yarn-why-duplicate/commit/2887734b2e58e1f48827acfef64457105aea940e))
-* **deps:** update dependency @yarnpkg/core to v4.0.0-rc.45 ([#23](https://github.com/christophehurpeau/yarn-why-duplicate/issues/23)) ([f64c11d](https://github.com/christophehurpeau/yarn-why-duplicate/commit/f64c11d6cf26972e2cc2230cfbaf580f62543e0a))
-* **deps:** update dependency @yarnpkg/core to v4.0.0-rc.46 ([#27](https://github.com/christophehurpeau/yarn-why-duplicate/issues/27)) ([0217338](https://github.com/christophehurpeau/yarn-why-duplicate/commit/021733849c68a20d7d4a57d102e0aa4d58b2bcca))
-* **deps:** update dependency @yarnpkg/core to v4.0.0-rc.47 ([#34](https://github.com/christophehurpeau/yarn-why-duplicate/issues/34)) ([ffdebc6](https://github.com/christophehurpeau/yarn-why-duplicate/commit/ffdebc67829c874742628f7b1ca1cda9259716b7))
-* **deps:** update dependency @yarnpkg/core to v4.0.0-rc.48 ([#38](https://github.com/christophehurpeau/yarn-why-duplicate/issues/38)) ([e98d67a](https://github.com/christophehurpeau/yarn-why-duplicate/commit/e98d67a81a1e7e844ef6fd0ced0a8e7f84f05f72))
-* **deps:** update dependency semver to v7.5.1 ([#18](https://github.com/christophehurpeau/yarn-why-duplicate/issues/18)) ([4b347b9](https://github.com/christophehurpeau/yarn-why-duplicate/commit/4b347b955b6bfdf07c5e4451ac4018cb92fe58ea))
-* **deps:** update dependency semver to v7.5.2 ([#24](https://github.com/christophehurpeau/yarn-why-duplicate/issues/24)) ([9359f4b](https://github.com/christophehurpeau/yarn-why-duplicate/commit/9359f4b096230ca238d7d4702c9543871e48d5af))
-* **deps:** update dependency semver to v7.5.3 ([#26](https://github.com/christophehurpeau/yarn-why-duplicate/issues/26)) ([b6cbe1b](https://github.com/christophehurpeau/yarn-why-duplicate/commit/b6cbe1b2f48a407e0ef765574636e2c1d4bfdfea))
-* **deps:** update dependency semver to v7.5.4 ([#39](https://github.com/christophehurpeau/yarn-why-duplicate/issues/39)) ([bb3599a](https://github.com/christophehurpeau/yarn-why-duplicate/commit/bb3599a7830805e864f5f92180c01bf49ba97efd))
-
-
-### Code Refactoring
-
-* drop node 16 ([be786c3](https://github.com/christophehurpeau/yarn-why-duplicate/commit/be786c3be71e0a7e676ff96faf57f029739a78c4))
-
-
-## [1.2.0](https://github.com/christophehurpeau/yarn-why-duplicate/compare/v1.1.0...v1.2.0) (2023-04-25)
-
-
-### Features
-
-* force 1.2.0 ([72688d8](https://github.com/christophehurpeau/yarn-why-duplicate/commit/72688d83af568ebb83fe8ee261b6ac18adf44f0e))
-
-## [1.1.0](https://github.com/christophehurpeau/yarn-why-duplicate/compare/v1.0.0...v1.1.0) (2023-04-25)
-
-
-### Features
-
-* force 1.1.0 ([d333635](https://github.com/christophehurpeau/yarn-why-duplicate/commit/d3336353ffe709910577310116dab70dd8f25f5c))
-
-## 1.0.0 (2023-04-25)
-
-
-### Features
-
-* **deps:** update dependency semver to v7.5.0 ([#4](https://github.com/christophehurpeau/yarn-why-duplicate/issues/4)) ([f9eee30](https://github.com/christophehurpeau/yarn-why-duplicate/commit/f9eee30e153dea0dc8dabb69b2484dd6dd3be0dc))
-* first commit ([c3a6354](https://github.com/christophehurpeau/yarn-why-duplicate/commit/c3a6354ae139baffc75c4582af439db4f496329c))
-
-
-### Bug Fixes
-
-* add try/catch on compareRange ([357eed7](https://github.com/christophehurpeau/yarn-why-duplicate/commit/357eed715012b156d4abd447f9d7232fdc066d72))
-* use virtuals ([340d56a](https://github.com/christophehurpeau/yarn-why-duplicate/commit/340d56a8abc6c81b9973ed5ecb80604e6905990b))
-* virtual child ([8798439](https://github.com/christophehurpeau/yarn-why-duplicate/commit/8798439ccf4f7ee40292ce9fb734e573a37c1d71))

package/lib/.eslintrc.json

@@ -1,20 +0,0 @@
-{
-  "root": true,
-  "extends": ["@pob/eslint-config/node-module"],
-  "overrides": [
-    {
-      "files": ["**/*.test.{cjs,js}", "__tests__/**/*.{cjs,js}"],
-      "env": {
-        "jest": true
-      },
-      "rules": {
-        "import/no-extraneous-dependencies": [
-          "error",
-          {
-            "devDependencies": true
-          }
-        ]
-      }
-    }
-  ]
-}