panki/npm-manifest-check
panki/npm-manifest-check
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

code cleanup

Browse Source
This commit is contained in:
Felix Pankratz 2023-06-29 16:52:01 +02:00
parent 9e98dc6631
commit 78988233f4
1 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
npm-manifest-check.py
View File

@ -9,7 +9,7 @@ import json
def parse_manifest(pkg): def parse_manifest(pkg):
# get and parse the manifest which contains the values reported on the frontend # get and parse the manifest which contains the values reported on the frontend
url = 'https://registry.npmjs.com/' + pkg + '/' url = 'https://registry.npmjs.com/{}/'.format(pkg)
parsed = json.loads(requests.get(url).text) parsed = json.loads(requests.get(url).text)
# extract the interesting bits # extract the interesting bits
@ -17,25 +17,27 @@ def parse_manifest(pkg):
latest_manifest = parsed['versions'][latest_ver] latest_manifest = parsed['versions'][latest_ver]
try: try:
dependencies = parsed['versions'][latest_ver]['dependencies'] dependencies = latest_manifest['dependencies']
except KeyError: except KeyError:
dependencies = None dependencies = None
try: try:
scripts = parsed['versions'][latest_ver]['scripts'] scripts = latest_manifest['scripts']
except KeyError: except KeyError:
scripts = None scripts = None
name = parsed['versions'][latest_ver]['name'] name = latest_manifest['name']
return latest_ver, dependencies, scripts, name return latest_ver, dependencies, scripts, name
def get_actual_manifest(pkg, ver): def get_actual_manifest(pkg, ver):
# get and parse the manifest as it would be installed # get and parse the manifest as it would be installed
index_url = 'https://www.npmjs.com/package/' + pkg + '/v/' + ver + '/index' # first, we need to find the package.json delivered with the package:
index_url = 'https://www.npmjs.com/package/{}/v/{}/index'.format(pkg, ver)
index = json.loads(requests.get(index_url).text) index = json.loads(requests.get(index_url).text)
hexsum = index['files']['/package.json']['hex'] hexsum = index['files']['/package.json']['hex']
manifest_url = 'https://www.npmjs.com/package/{}/file/{}'.format(pkg, hexsum) manifest_url = 'https://www.npmjs.com/package/{}/file/{}'.format(pkg, hexsum)
# now we can parse it
manifest = json.loads(requests.get(manifest_url).text) manifest = json.loads(requests.get(manifest_url).text)
version = manifest['version'] version = manifest['version']
try: try:
@ -55,7 +57,6 @@ def main():
import sys import sys
mismatch = False mismatch = False
pkg = sys.argv[1] pkg = sys.argv[1]
#manifest = get_registry_manifest(pkg)
reported_ver, reported_dependencies, reported_scripts, reported_name = parse_manifest(pkg) reported_ver, reported_dependencies, reported_scripts, reported_name = parse_manifest(pkg)
actual_ver, actual_dependencies, actual_scripts, actual_name = get_actual_manifest(pkg, reported_ver) actual_ver, actual_dependencies, actual_scripts, actual_name = get_actual_manifest(pkg, reported_ver)