panki/npm-manifest-check
panki/npm-manifest-check
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

add check for scripts

Browse Source
This commit is contained in:
Felix Pankratz 2023-06-29 14:27:15 +02:00
parent 3545fb7611
commit 1ac965a6c2
1 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
check.py
View File

@ -21,10 +21,11 @@ def parse_manifest(manifest):
latest_manifest = parsed['versions'][latest_ver] latest_manifest = parsed['versions'][latest_ver]
dependencies = parsed['versions'][latest_ver]['dependencies'] dependencies = parsed['versions'][latest_ver]['dependencies']
scripts = parsed['versions'][latest_ver]['scripts']
# extract number of dependencies # extract number of dependencies
print('latest version: {}'.format(latest_ver)) print('latest version: {}'.format(latest_ver))
return latest_ver, dependencies return latest_ver, dependencies, scripts
def get_actual_manifest(pkg, ver): def get_actual_manifest(pkg, ver):
index_url = 'https://www.npmjs.com/package/' + pkg + '/v/' + ver + '/index' index_url = 'https://www.npmjs.com/package/' + pkg + '/v/' + ver + '/index'
@ -34,7 +35,8 @@ def get_actual_manifest(pkg, ver):
manifest_url = 'https://www.npmjs.com/package/{}/file/{}'.format(pkg, hexsum) manifest_url = 'https://www.npmjs.com/package/{}/file/{}'.format(pkg, hexsum)
manifest = json.loads(requests.get(manifest_url).text) manifest = json.loads(requests.get(manifest_url).text)
dependencies = manifest['dependencies'] dependencies = manifest['dependencies']
return dependencies scripts = manifest['scripts']
return dependencies, scripts
@ -42,14 +44,18 @@ def main():
import sys import sys
pkg = sys.argv[1] pkg = sys.argv[1]
manifest = get_registry_manifest(pkg) manifest = get_registry_manifest(pkg)
ver, reported_dependencies = parse_manifest(manifest) ver, reported_dependencies, reported_scripts = parse_manifest(manifest)
actual_dependencies = get_actual_manifest(pkg, ver) actual_dependencies, actual_scripts = get_actual_manifest(pkg, ver)
if actual_dependencies != reported_dependencies: if actual_dependencies != reported_dependencies:
print('Dependency mismatch detected for {}!'.format(pkg)) print('Dependency mismatch detected for {}!'.format(pkg))
print('Reported dependencies: {}'.format(reported_dependencies)) print('Reported dependencies: {}'.format(reported_dependencies))
print('Actual dependencies: {}'.format(actual_dependencies)) print('Actual dependencies: {}'.format(actual_dependencies))
else: else:
print('No mismatch detected for {}.'.format(pkg)) print('No mismatch detected for {}.'.format(pkg))
if actual_scripts != reported_scripts:
print('Scripts mismatch detected for {}!'.format(pkg))
print('Reported scripts: {}'.format(reported_scripts))
print('Actual scripts: {}'.format(actual_scripts))
if __name__ == '__main__': if __name__ == '__main__':