johnny-dependency - npm Package Compare versions

Comparing version 0.1.0 to 0.2.0

lib/index.js

 
 
-const pacote = require('pacote');
+const getAllDependencies = require('./get-dependencies');
 
-const untildify = require('untildify');
-const fs = require('fs');
-const npa = require('npm-package-arg');
+const getLatestDependencies = require('./get-latest-dependencies');
+const { resolveDependencies, formatGraphWithoutCircularDeps } = require('./format-dependencies');
 const _ = require('lodash');
 
-const npmrcPath = untildify('~/.npmrc');
-const npmrc = fs.readFileSync(npmrcPath, 'utf8');
-const tokenMatch = npmrc.match(/.*authToken=(.*)/);
-const token = tokenMatch && tokenMatch[1];
-
-const examplePackage = {
-  name: '@domain-group/fe-co-button',
-  version: '3.0.0'
-};
-
-function getPackage(npmPackage) {
-  const spec = `${npmPackage.name}@${npmPackage.version}`;
-
-  return pacote.manifest(spec, {
-    auth: {
-      token
-    }
-  });
+function buildGraph(rootPackage, pacoteOptions) {
+  return getAllDependencies(rootPackage, pacoteOptions).then(result => getLatestDependencies(_.uniq(result.dependencies.map(npmPackage => npmPackage.name))).then(latestVersions => formatGraphWithoutCircularDeps(rootPackage, resolveDependencies(result), latestVersions)));
 }
 
-function flattenDependencies(deps, found) {
-  return Object.keys(deps).reduce((acc, name) => {
-    const version = deps[name];
-    if (_.get(found, [name, 'versions', version]) === undefined) {
-      // eslint-disable-next-line no-use-before-define
-      acc.push({ name, version });
-    }
-    return acc;
-  }, []);
-}
-
-function validateDeps(packages) {
-  return packages.filter(npmPackage => {
-    const type = npa(`${npmPackage.name}@${npmPackage.version}`).type;
-    return type === 'tag' || type === 'version' || type === 'range';
-  });
-}
-
-function addPackageToGraph(npmPackage, found) {
-  return getPackage(npmPackage).then(manifest => {
-    if (_.get(found, [npmPackage.name, 'versions', manifest.version])) {
-      return Promise.resolve();
-    }
-
-    if (npmPackage.version === 'latest') {
-      _.setWith(found, [npmPackage.name, 'latestVersion'], manifest.version, Object);
-    }
-
-    const deps = {
-      deps: manifest.dependencies,
-      devDeps: manifest.devDependencies,
-      peerDeps: manifest.peerDependencies
-    };
-
-    _.setWith(found, [npmPackage.name, 'versions', manifest.version], deps, Object);
-
-    const flatDeps = flattenDependencies(deps.deps, found)
-    // devDeps seems to cause errors for many packages
-    // .concat(flattenDependencies(deps.devDeps, found));
-    .concat(flattenDependencies(deps.peerDeps, found));
-
-    const validDeps = validateDeps(flatDeps);
-
-    return Promise.all(validDeps.map(missingPackage =>
-    // eslint-disable-next-line no-use-before-define
-    buildGraph(missingPackage, found))).then(() => found);
-  }).catch(error => {
-    console.error(error);
-    Promise.resolve();
-  });
-}
-
-function buildGraph(npmPackage, found = {}) {
-  return new Promise(res => {
-    if (found[npmPackage.name] === undefined) {
-      addPackageToGraph({ name: npmPackage.name, version: 'latest' }, found).then(newFound => {
-        res(newFound);
-      });
-    }
-
-    res(found);
-  }).then(newFound => addPackageToGraph(npmPackage, newFound));
-}
-
-buildGraph(examplePackage).then(res => console.log('res', JSON.stringify(res, null, 2)));
+module.exports = buildGraph;

package.json

 {
   "name": "johnny-dependency",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Get a graph of npm dependencies",
@@ -10,3 +10,3 @@ "main": "lib/index.js",
     "build": "babel src/ -d lib/",
-    "start": "yarn run build && node lib/index.js",
+    "start": "yarn run build && node lib/cli.js",
     "prepublish": "yarn run build",
@@ -33,4 +33,5 @@ "lint": "./node_modules/.bin/eslint src/",
     "pacote": "^2.7.36",
+    "rxjs": "^5.4.1",
     "untildify": "^3.0.2"
   }
 }

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

100228

increased by2.04%

Number of package files

16

increased by45.45%

Lines of code

197

increased by4.79%

Worsened metrics

Dependency count

5

increased by25%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedrxjs@^5.4.1

• + Addedrxjs@5.5.12(transitive)

• + Addedsymbol-observable@1.0.1(transitive)