Class: Dependabot::Bun::Package::PackageDetailsFetcher

Inherits:
Object
  • Object
show all
Extended by:
T::Sig
Defined in:
lib/dependabot/bun/package/package_details_fetcher.rb

Constant Summary collapse

GLOBAL_REGISTRY = 
"registry.npmjs.org"
NPM_OFFICIAL_WEBSITE = 
"https://www.npmjs.com"
API_AUTHORIZATION_KEY = 
"Authorization"
API_AUTHORIZATION_VALUE_BASIC_PREFIX = 
"Basic"
API_RESPONSE_STATUS_SUCCESS_PREFIX = 
"2"
RELEASE_TIME_KEY = 
"time"
RELEASE_VERSIONS_KEY = 
"versions"
RELEASE_DIST_TAGS_KEY = 
"dist-tags"
RELEASE_DIST_TAGS_LATEST_KEY = 
"latest"
RELEASE_ENGINES_KEY = 
"engines"
RELEASE_LANGUAGE_KEY = 
"node"
RELEASE_DEPRECATION_KEY = 
"deprecated"
RELEASE_REPOSITORY_KEY = 
"repository"
RELEASE_PACKAGE_TYPE_KEY = 
"type"
RELEASE_PACKAGE_TYPE_GIT = 
"git"
RELEASE_PACKAGE_TYPE_NPM = 
"npm"
REGISTRY_FILE_NPMRC = 
".npmrc"
REGISTRY_FILE_YARNRC = 
".yarnrc"
REGISTRY_FILE_YARNRC_YML = 
".yarnrc.yml"

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(dependency:, dependency_files:, credentials:) ⇒ PackageDetailsFetcher

Returns a new instance of PackageDetailsFetcher.



47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
 
# File 'lib/dependabot/bun/package/package_details_fetcher.rb', line 47

def initialize(
  dependency:,
  dependency_files:,
  credentials:
)
  @dependency = T.let(dependency, Dependabot::Dependency)
  @dependency_files = T.let(dependency_files, T::Array[Dependabot::DependencyFile])
  @credentials = T.let(credentials, T::Array[Dependabot::Credential])

  @npm_details = T.let(nil, T.nilable(T::Hash[String, T.untyped]))
  @dist_tags = T.let(nil, T.nilable(T::Hash[String, String]))
  @registry_finder = T.let(nil, T.nilable(Package::RegistryFinder))
  @version_endpoint_working = T.let(nil, T.nilable(T::Boolean))
  @yanked = T.let({}, T::Hash[Gem::Version, T.nilable(T::Boolean)])
end

Instance Attribute Details

#credentials ⇒ Object (readonly)

Returns the value of attribute credentials.



67
68
69
 
# File 'lib/dependabot/bun/package/package_details_fetcher.rb', line 67

def credentials
  @credentials
end

#dependency ⇒ Object (readonly)

Returns the value of attribute dependency.



64
65
66
 
# File 'lib/dependabot/bun/package/package_details_fetcher.rb', line 64

def dependency
  @dependency
end

#dependency_files ⇒ Object (readonly)

Returns the value of attribute dependency_files.



70
71
72
 
# File 'lib/dependabot/bun/package/package_details_fetcher.rb', line 70

def dependency_files
  @dependency_files
end

Instance Method Details

#custom_registry? ⇒ Boolean

Returns:

  • (Boolean) 


93
94
95
 
# File 'lib/dependabot/bun/package/package_details_fetcher.rb', line 93

def custom_registry?
  registry_finder.custom_registry?
end

#dependency_url ⇒ Object 



98
99
100
 
# File 'lib/dependabot/bun/package/package_details_fetcher.rb', line 98

def dependency_url
  registry_finder.dependency_url
end

#fetch ⇒ Object 



73
74
75
76
77
78
79
80
 
# File 'lib/dependabot/bun/package/package_details_fetcher.rb', line 73

def fetch
  package_data = npm_details
  Dependabot::Package::PackageDetails.new(
    dependency: @dependency,
    releases: package_data ? parse_versions(package_data) : [],
    dist_tags: dist_tags
  )
end

#npm_details ⇒ Object 



88
89
90
 
# File 'lib/dependabot/bun/package/package_details_fetcher.rb', line 88

def npm_details
  @npm_details ||= fetch_npm_details
end

#valid_npm_details? ⇒ Boolean

Returns:

  • (Boolean) 


83
84
85
 
# File 'lib/dependabot/bun/package/package_details_fetcher.rb', line 83

def valid_npm_details?
  !dist_tags.nil?
end

#yanked?(version) ⇒ Boolean

Returns:

  • (Boolean) 


103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
 
# File 'lib/dependabot/bun/package/package_details_fetcher.rb', line 103

def yanked?(version)
  return @yanked[version] || false if @yanked.key?(version)

  @yanked[version] =
    begin
      if dependency_registry == GLOBAL_REGISTRY
        status = Dependabot::RegistryClient.head(
          url: registry_finder.tarball_url(version),
          headers: registry_auth_headers
        ).status
      else
        status = Dependabot::RegistryClient.get(
          url: dependency_url + "/#{version}",
          headers: registry_auth_headers
        ).status

        if status == 404
          # Some registries don't handle escaped package names properly
          status = Dependabot::RegistryClient.get(
            url: dependency_url.gsub("%2F", "/") + "/#{version}",
            headers: registry_auth_headers
          ).status
        end
      end

      version_not_found = status == 404
      version_not_found && version_endpoint_working?
    rescue Excon::Error::Timeout, Excon::Error::Socket
      # Give the benefit of the doubt if the registry is playing up
      false
    end

  @yanked[version] || false
end