Class: Dependabot::NpmAndYarn::FileParser::LockfileParser

Inherits:
Object
  • Object
show all
Defined in:
lib/dependabot/npm_and_yarn/file_parser/lockfile_parser.rb

Instance Method Summary collapse

Constructor Details

#initialize(dependency_files:) ⇒ LockfileParser

Returns a new instance of LockfileParser.



10
11
12
 
# File 'lib/dependabot/npm_and_yarn/file_parser/lockfile_parser.rb', line 10

def initialize(dependency_files:)
  @dependency_files = dependency_files
end

Instance Method Details

#lockfile_details(dependency_name:, requirement:) ⇒ Object 



22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
 
# File 'lib/dependabot/npm_and_yarn/file_parser/lockfile_parser.rb', line 22

def lockfile_details(dependency_name:, requirement:)
  [*package_locks, *shrinkwraps].each do |package_lock|
    parsed_package_lock_json = parse_package_lock(package_lock)
    next unless parsed_package_lock_json.dig("dependencies",
                                             dependency_name)

    return parsed_package_lock_json.dig("dependencies", dependency_name)
  end

  yarn_locks.each do |yarn_lock|
    parsed_yarn_lock = parse_yarn_lock(yarn_lock)

    details_candidates =
      parsed_yarn_lock.
      select { |k, _| k.split(/(?<=\w)\@/).first == dependency_name }

    # If there's only one entry for this dependency, use it, even if
    # the requirement in the lockfile doesn't match
    details = details_candidates.first.last if details_candidates.one?

    details ||=
      details_candidates.
      find do |k, _|
        k.split(/(?<=\w)\@/)[1..-1].join("@") == requirement
      end&.
      last

    return details if details
  end

  nil
end

#parse ⇒ Object 



14
15
16
17
18
19
20
 
# File 'lib/dependabot/npm_and_yarn/file_parser/lockfile_parser.rb', line 14

def parse
  dependency_set = Dependabot::NpmAndYarn::FileParser::DependencySet.new
  dependency_set += yarn_lock_dependencies if yarn_locks.any?
  dependency_set += package_lock_dependencies if package_locks.any?
  dependency_set += shrinkwrap_dependencies if shrinkwraps.any?
  dependency_set.dependencies
end