gitea-mirror/trivy
1
0
Fork 0
mirror of https://github.com/aquasecurity/trivy.git synced 2025-12-24 03:58:12 -08:00
Code Issues Packages Projects Releases Wiki Activity
Files
b5859d3fb50392ff3e30ad4313fa5e2ce5f6d407
trivy/pkg/dependency/parser/nodejs/npm/parse_testcase.go
Teppei Fukuda 73899610e8 feat(nodejs): respect peer dependencies for dependency tree (#7989) 
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
2024-12-05 07:57:12 +00:00

1720 lines
38 KiB
Go
Raw Blame History

package npm
import ftypes "github.com/aquasecurity/trivy/pkg/fanal/types"
var (
// docker run --name node --rm -it node@sha256:51dd437f31812df71108b81385e2945071ec813d5815fa3403855669c8f3432b sh
// mkdir node_v1 && cd node_v1
// npm init --force
// npm install --save finalhandler@1.1.1 body-parser@1.18.3 ms@1.0.0 @babel/helper-string-parser@7.19.4
// npm install --save-dev debug@2.5.2
// npm install --save-optional promise
// npm i --lockfile-version 1
// packages are filled manually
npmV1Pkgs = []ftypes.Package{
{
ID: "@babel/helper-string-parser@7.19.4",
Name: "@babel/helper-string-parser",
Version: "7.19.4",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.19.4.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 7,
EndLine: 11,
},
},
},
{
ID: "asap@2.0.6",
Name: "asap",
Version: "2.0.6",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/asap/-/asap-2.0.6.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 12,
EndLine: 17,
},
},
},
{
ID: "body-parser@1.18.3",
Name: "body-parser",
Version: "1.18.3",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/body-parser/-/body-parser-1.18.3.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 18,
EndLine: 49,
},
},
},
{
ID: "bytes@3.0.0",
Name: "bytes",
Version: "3.0.0",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/bytes/-/bytes-3.0.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 50,
EndLine: 54,
},
},
},
{
ID: "content-type@1.0.5",
Name: "content-type",
Version: "1.0.5",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 55,
EndLine: 59,
},
},
},
{
ID: "debug@2.5.2",
Name: "debug",
Version: "2.5.2",
Dev: true,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/debug/-/debug-2.5.2.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 60,
EndLine: 76,
},
},
},
{
ID: "debug@2.6.9",
Name: "debug",
Version: "2.6.9",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 35,
EndLine: 42,
},
{
StartLine: 111,
EndLine: 118,
},
},
},
{
ID: "depd@1.1.2",
Name: "depd",
Version: "1.1.2",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/depd/-/depd-1.1.2.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 77,
EndLine: 81,
},
},
},
{
ID: "ee-first@1.1.1",
Name: "ee-first",
Version: "1.1.1",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 82,
EndLine: 86,
},
},
},
{
ID: "encodeurl@1.0.2",
Name: "encodeurl",
Version: "1.0.2",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 87,
EndLine: 91,
},
},
},
{
ID: "escape-html@1.0.3",
Name: "escape-html",
Version: "1.0.3",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 92,
EndLine: 96,
},
},
},
{
ID: "finalhandler@1.1.1",
Name: "finalhandler",
Version: "1.1.1",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/finalhandler/-/finalhandler-1.1.1.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 97,
EndLine: 125,
},
},
},
{
ID: "http-errors@1.6.3",
Name: "http-errors",
Version: "1.6.3",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/http-errors/-/http-errors-1.6.3.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 126,
EndLine: 136,
},
},
},
{
ID: "iconv-lite@0.4.23",
Name: "iconv-lite",
Version: "0.4.23",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.23.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 137,
EndLine: 144,
},
},
},
{
ID: "inherits@2.0.3",
Name: "inherits",
Version: "2.0.3",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 145,
EndLine: 149,
},
},
},
{
ID: "media-typer@0.3.0",
Name: "media-typer",
Version: "0.3.0",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 150,
EndLine: 154,
},
},
},
{
ID: "mime-db@1.52.0",
Name: "mime-db",
Version: "1.52.0",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 155,
EndLine: 159,
},
},
},
{
ID: "mime-types@2.1.35",
Name: "mime-types",
Version: "2.1.35",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 160,
EndLine: 167,
},
},
},
{
ID: "ms@0.7.2",
Name: "ms",
Version: "0.7.2",
Dev: true,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/ms/-/ms-0.7.2.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 69,
EndLine: 74,
},
},
},
{
ID: "ms@1.0.0",
Name: "ms",
Version: "1.0.0",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/ms/-/ms-1.0.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 168,
EndLine: 172,
},
},
},
{
ID: "ms@2.0.0",
Name: "ms",
Version: "2.0.0",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 43,
EndLine: 47,
},
{
StartLine: 119,
EndLine: 123,
},
},
},
{
ID: "on-finished@2.3.0",
Name: "on-finished",
Version: "2.3.0",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/on-finished/-/on-finished-2.3.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 173,
EndLine: 180,
},
},
},
{
ID: "parseurl@1.3.3",
Name: "parseurl",
Version: "1.3.3",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 181,
EndLine: 185,
},
},
},
{
ID: "promise@8.3.0",
Name: "promise",
Version: "8.3.0",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/promise/-/promise-8.3.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 186,
EndLine: 194,
},
},
},
{
ID: "qs@6.5.2",
Name: "qs",
Version: "6.5.2",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/qs/-/qs-6.5.2.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 195,
EndLine: 199,
},
},
},
{
ID: "raw-body@2.3.3",
Name: "raw-body",
Version: "2.3.3",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/raw-body/-/raw-body-2.3.3.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 200,
EndLine: 210,
},
},
},
{
ID: "safer-buffer@2.1.2",
Name: "safer-buffer",
Version: "2.1.2",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 211,
EndLine: 215,
},
},
},
{
ID: "setprototypeof@1.1.0",
Name: "setprototypeof",
Version: "1.1.0",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.1.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 216,
EndLine: 220,
},
},
},
{
ID: "statuses@1.4.0",
Name: "statuses",
Version: "1.4.0",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/statuses/-/statuses-1.4.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 221,
EndLine: 225,
},
},
},
{
ID: "type-is@1.6.18",
Name: "type-is",
Version: "1.6.18",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 226,
EndLine: 234,
},
},
},
{
ID: "unpipe@1.0.0",
Name: "unpipe",
Version: "1.0.0",
Dev: false,
Relationship: ftypes.RelationshipUnknown,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 235,
EndLine: 239,
},
},
},
}
// dependencies are filled manually
npmDeps = []ftypes.Dependency{
{
ID: "body-parser@1.18.3",
DependsOn: []string{
"bytes@3.0.0",
"content-type@1.0.5",
"debug@2.6.9",
"depd@1.1.2",
"http-errors@1.6.3",
"iconv-lite@0.4.23",
"on-finished@2.3.0",
"qs@6.5.2",
"raw-body@2.3.3",
"type-is@1.6.18",
},
},
{
ID: "debug@2.5.2",
DependsOn: []string{"ms@0.7.2"},
},
{
ID: "debug@2.6.9",
DependsOn: []string{"ms@2.0.0"},
},
{
ID: "finalhandler@1.1.1",
DependsOn: []string{
"debug@2.6.9",
"encodeurl@1.0.2",
"escape-html@1.0.3",
"on-finished@2.3.0",
"parseurl@1.3.3",
"statuses@1.4.0",
"unpipe@1.0.0",
},
},
{
ID: "http-errors@1.6.3",
DependsOn: []string{
"depd@1.1.2",
"inherits@2.0.3",
"setprototypeof@1.1.0",
"statuses@1.4.0",
},
},
{
ID: "iconv-lite@0.4.23",
DependsOn: []string{"safer-buffer@2.1.2"},
},
{
ID: "mime-types@2.1.35",
DependsOn: []string{"mime-db@1.52.0"},
},
{
ID: "on-finished@2.3.0",
DependsOn: []string{"ee-first@1.1.1"},
},
{
ID: "promise@8.3.0",
DependsOn: []string{"asap@2.0.6"},
},
{
ID: "raw-body@2.3.3",
DependsOn: []string{
"bytes@3.0.0",
"http-errors@1.6.3",
"iconv-lite@0.4.23",
"unpipe@1.0.0",
},
},
{
ID: "type-is@1.6.18",
DependsOn: []string{
"media-typer@0.3.0",
"mime-types@2.1.35",
},
},
}
// ... and
// npm i --lockfile-version 2
// same as npmV1Pkgs but change `Indirect` field to false for `body-parser@1.18.3`, `finalhandler@1.1.1`, `@babel/helper-string-parser@7.19.4`, `promise@8.3.0` and `ms@1.0.0` packages.
// also need to get locations from `packages` struct
// --- lockfile version 3 ---
// npm i --lockfile-version 3
// same as npmV2Pkgs.
npmV2Pkgs = []ftypes.Package{
{
ID: "@babel/helper-string-parser@7.19.4",
Name: "@babel/helper-string-parser",
Version: "7.19.4",
Dev: false,
Relationship: ftypes.RelationshipDirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.19.4.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 24,
EndLine: 31,
},
},
},
{
ID: "body-parser@1.18.3",
Name: "body-parser",
Version: "1.18.3",
Dev: false,
Relationship: ftypes.RelationshipDirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/body-parser/-/body-parser-1.18.3.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 38,
EndLine: 57,
},
},
},
{
ID: "debug@2.5.2",
Name: "debug",
Version: "2.5.2",
Dev: true,
Relationship: ftypes.RelationshipDirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/debug/-/debug-2.5.2.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 87,
EndLine: 95,
},
},
},
{
ID: "finalhandler@1.1.1",
Name: "finalhandler",
Version: "1.1.1",
Dev: false,
Relationship: ftypes.RelationshipDirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/finalhandler/-/finalhandler-1.1.1.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 128,
EndLine: 144,
},
},
},
{
ID: "ms@1.0.0",
Name: "ms",
Version: "1.0.0",
Dev: false,
Relationship: ftypes.RelationshipDirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/ms/-/ms-1.0.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 215,
EndLine: 219,
},
},
},
{
ID: "promise@8.3.0",
Name: "promise",
Version: "8.3.0",
Dev: false,
Relationship: ftypes.RelationshipDirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/promise/-/promise-8.3.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 239,
EndLine: 247,
},
},
},
{
ID: "asap@2.0.6",
Name: "asap",
Version: "2.0.6",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/asap/-/asap-2.0.6.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 32,
EndLine: 37,
},
},
},
{
ID: "bytes@3.0.0",
Name: "bytes",
Version: "3.0.0",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/bytes/-/bytes-3.0.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 71,
EndLine: 78,
},
},
},
{
ID: "content-type@1.0.5",
Name: "content-type",
Version: "1.0.5",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 79,
EndLine: 86,
},
},
},
{
ID: "debug@2.6.9",
Name: "debug",
Version: "2.6.9",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 58,
EndLine: 65,
},
{
StartLine: 145,
EndLine: 152,
},
},
},
{
ID: "depd@1.1.2",
Name: "depd",
Version: "1.1.2",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/depd/-/depd-1.1.2.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 102,
EndLine: 109,
},
},
},
{
ID: "ee-first@1.1.1",
Name: "ee-first",
Version: "1.1.1",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 110,
EndLine: 114,
},
},
},
{
ID: "encodeurl@1.0.2",
Name: "encodeurl",
Version: "1.0.2",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 115,
EndLine: 122,
},
},
},
{
ID: "escape-html@1.0.3",
Name: "escape-html",
Version: "1.0.3",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 123,
EndLine: 127,
},
},
},
{
ID: "http-errors@1.6.3",
Name: "http-errors",
Version: "1.6.3",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/http-errors/-/http-errors-1.6.3.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 158,
EndLine: 171,
},
},
},
{
ID: "iconv-lite@0.4.23",
Name: "iconv-lite",
Version: "0.4.23",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.23.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 172,
EndLine: 182,
},
},
},
{
ID: "inherits@2.0.3",
Name: "inherits",
Version: "2.0.3",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 183,
EndLine: 187,
},
},
},
{
ID: "media-typer@0.3.0",
Name: "media-typer",
Version: "0.3.0",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 188,
EndLine: 195,
},
},
},
{
ID: "mime-db@1.52.0",
Name: "mime-db",
Version: "1.52.0",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 196,
EndLine: 203,
},
},
},
{
ID: "mime-types@2.1.35",
Name: "mime-types",
Version: "2.1.35",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 204,
EndLine: 214,
},
},
},
{
ID: "ms@0.7.2",
Name: "ms",
Version: "0.7.2",
Dev: true,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/ms/-/ms-0.7.2.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 96,
EndLine: 101,
},
},
},
{
ID: "ms@2.0.0",
Name: "ms",
Version: "2.0.0",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 66,
EndLine: 70,
},
{
StartLine: 153,
EndLine: 157,
},
},
},
{
ID: "on-finished@2.3.0",
Name: "on-finished",
Version: "2.3.0",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/on-finished/-/on-finished-2.3.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 220,
EndLine: 230,
},
},
},
{
ID: "parseurl@1.3.3",
Name: "parseurl",
Version: "1.3.3",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 231,
EndLine: 238,
},
},
},
{
ID: "qs@6.5.2",
Name: "qs",
Version: "6.5.2",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/qs/-/qs-6.5.2.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 248,
EndLine: 255,
},
},
},
{
ID: "raw-body@2.3.3",
Name: "raw-body",
Version: "2.3.3",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/raw-body/-/raw-body-2.3.3.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 256,
EndLine: 269,
},
},
},
{
ID: "safer-buffer@2.1.2",
Name: "safer-buffer",
Version: "2.1.2",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 270,
EndLine: 274,
},
},
},
{
ID: "setprototypeof@1.1.0",
Name: "setprototypeof",
Version: "1.1.0",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.1.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 275,
EndLine: 279,
},
},
},
{
ID: "statuses@1.4.0",
Name: "statuses",
Version: "1.4.0",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/statuses/-/statuses-1.4.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 280,
EndLine: 287,
},
},
},
{
ID: "type-is@1.6.18",
Name: "type-is",
Version: "1.6.18",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 288,
EndLine: 299,
},
},
},
{
ID: "unpipe@1.0.0",
Name: "unpipe",
Version: "1.0.0",
Dev: false,
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 300,
EndLine: 307,
},
},
},
}
// docker run --name node --rm -it node@sha256:51dd437f31812df71108b81385e2945071ec813d5815fa3403855669c8f3432b sh
// mkdir node_v3_with_workspace && cd node_v3_with_workspace
// npm init --force
// npm init -w ./functions/func1 !!! use `function1` name for package
// grep -v "version" ./functions/func1/package.json > tmpfile && mv tmpfile ./functions/func1/package.json
// npm init -w ./functions/nested_func --force
// npm install --save debug@2.5.2
// sed -i 's/\^/=/g' package.json
// npm install --save debug@2.6.9 -w nested_func
// npm install nested_func -w function1
// grep -v "functions/func1" ./package.json > tmpfile && mv tmpfile ./package.json
// sed -i 's/functions\/nested_func/functions\/*/g' package.json
// npm update
// packages are filled manually
npmV3WithWorkspacePkgs = []ftypes.Package{
{
ID: "debug@2.5.2",
Name: "debug",
Version: "2.5.2",
Relationship: ftypes.RelationshipDirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/debug/-/debug-2.5.2.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 39,
EndLine: 46,
},
},
},
{
ID: "function1",
Name: "function1",
Version: "",
Relationship: ftypes.RelationshipDirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "functions/func1",
},
},
Locations: []ftypes.Location{
{
StartLine: 18,
EndLine: 23,
},
},
},
{
ID: "nested_func@1.0.0",
Name: "nested_func",
Version: "1.0.0",
Relationship: ftypes.RelationshipDirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "functions/nested_func",
},
},
Locations: []ftypes.Location{
{
StartLine: 24,
EndLine: 30,
},
},
},
{
ID: "debug@2.6.9",
Name: "debug",
Version: "2.6.9",
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 31,
EndLine: 38,
},
},
},
{
ID: "ms@0.7.2",
Name: "ms",
Version: "0.7.2",
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/ms/-/ms-0.7.2.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 47,
EndLine: 51,
},
},
},
{
ID: "ms@2.0.0",
Name: "ms",
Version: "2.0.0",
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 56,
EndLine: 60,
},
},
},
}
npmV3WithWorkspaceDeps = []ftypes.Dependency{
{
ID: "debug@2.5.2",
DependsOn: []string{"ms@0.7.2"},
},
{
ID: "debug@2.6.9",
DependsOn: []string{"ms@2.0.0"},
},
{
ID: "function1",
DependsOn: []string{"nested_func@1.0.0"},
},
{
ID: "nested_func@1.0.0",
DependsOn: []string{"debug@2.6.9"},
},
}
// docker run --name node --rm -it node@sha256:51dd437f31812df71108b81385e2945071ec813d5815fa3403855669c8f3432b sh
// mkdir node_v3_with_peer && cd node_v3_with_peer
// npm init --force
// npm install --save winston-mail@2.0.0
// npm install --save-peer lodash@4.17.21
// npm update
//
// Delete unnecessary packages from package-lock.json
// Packages are filled manually
npmV3WithPeerDependenciesPkgs = []ftypes.Package{
{
ID: "lodash@4.17.21",
Name: "lodash",
Version: "4.17.21",
Relationship: ftypes.RelationshipDirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 30,
EndLine: 36,
},
},
},
{
ID: "winston-mail@2.0.0",
Name: "winston-mail",
Version: "2.0.0",
Relationship: ftypes.RelationshipDirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/winston-mail/-/winston-mail-2.0.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 60,
EndLine: 74,
},
},
},
{
ID: "mustache@2.3.2",
Name: "mustache",
Version: "2.3.2",
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/mustache/-/mustache-2.3.2.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 18,
EndLine: 29,
},
},
},
{
ID: "triple-beam@1.4.1",
Name: "triple-beam",
Version: "1.4.1",
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/triple-beam/-/triple-beam-1.4.1.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 37,
EndLine: 46,
},
},
},
{
ID: "winston@3.17.0",
Name: "winston",
Version: "3.17.0",
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/winston/-/winston-3.17.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 47,
EndLine: 59,
},
},
},
}
npmV3WithPeerDependenciesDeps = []ftypes.Dependency{
{
ID: "winston-mail@2.0.0",
DependsOn: []string{
"mustache@2.3.2",
"winston@3.17.0",
},
},
{
ID: "winston@3.17.0",
DependsOn: []string{"triple-beam@1.4.1"},
},
}
// docker run --name node --rm -it node@sha256:51dd437f31812df71108b81385e2945071ec813d5815fa3403855669c8f3432b sh
// mkdir node_v3_without_direct_deps && cd node_v3_without_direct_deps
// npm init --force
// npm init -w ./functions/func1 --force
// npm install --save debug@2.6.9 -w func1
// packages are filled manually
npmV3WithoutRootDepsField = []ftypes.Package{
{
ID: "func1@1.0.0",
Name: "func1",
Version: "1.0.0",
Relationship: ftypes.RelationshipDirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "functions/func1",
},
},
Locations: []ftypes.Location{
{
StartLine: 15,
EndLine: 21,
},
},
},
{
ID: "debug@2.6.9",
Name: "debug",
Version: "2.6.9",
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 22,
EndLine: 29,
},
},
},
{
ID: "ms@2.0.0",
Name: "ms",
Version: "2.0.0",
Relationship: ftypes.RelationshipIndirect,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 34,
EndLine: 38,
},
},
},
}
npmV3WithoutRootDepsFieldDeps = []ftypes.Dependency{
{
ID: "debug@2.6.9",
DependsOn: []string{"ms@2.0.0"},
},
{
ID: "func1@1.0.0",
DependsOn: []string{"debug@2.6.9"},
},
}
npmV3WithSameDevAndNonDevPkgs = []ftypes.Package{
{
ID: "fsevents@1.2.9",
Name: "fsevents",
Version: "1.2.9",
Relationship: ftypes.RelationshipDirect,
Dev: true,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/fsevents/-/fsevents-1.2.9.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 18,
EndLine: 37,
},
},
},
{
ID: "minimist@0.0.8",
Name: "minimist",
Version: "0.0.8",
Relationship: ftypes.RelationshipDirect,
Dev: false,
ExternalReferences: []ftypes.ExternalRef{
{
Type: ftypes.RefOther,
URL: "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz",
},
},
Locations: []ftypes.Location{
{
StartLine: 38,
EndLine: 43,
},
{
StartLine: 68,
EndLine: 72,
},
},
},
{
ID: "mkdirp@0.5.1",
Name: "mkdirp",
Version: "0.5.1",
Relationship: ftypes.RelationshipIndirect,
Dev: true,
Locations: []ftypes.Location{
{
StartLine: 44,
EndLine: 55,
},
},
},
{
ID: "node-pre-gyp@0.12.0",
Name: "node-pre-gyp",
Version: "0.12.0",
Relationship: ftypes.RelationshipIndirect,
Dev: true,
Locations: []ftypes.Location{
{
StartLine: 56,
EndLine: 67,
},
},
},
}
npmV3WithSameDevAndNonDevDeps = []ftypes.Dependency{
{
ID: "fsevents@1.2.9",
DependsOn: []string{"node-pre-gyp@0.12.0"},
},
{
ID: "mkdirp@0.5.1",
DependsOn: []string{"minimist@0.0.8"},
},
{
ID: "node-pre-gyp@0.12.0",
DependsOn: []string{"mkdirp@0.5.1"},
},
}
)
Reference in New Issue View Git Blame Copy Permalink