__ __ __ __ _____ _ _ _____ _ _ _ | \/ | \ \ / / | __ \ (_) | | / ____| | | | | | \ / |_ __\ V / | |__) | __ ___ ____ _| |_ ___ | (___ | |__ ___| | | | |\/| | '__|> < | ___/ '__| \ \ / / _` | __/ _ \ \___ \| '_ \ / _ \ | | | | | | |_ / . \ | | | | | |\ V / (_| | || __/ ____) | | | | __/ | | |_| |_|_(_)_/ \_\ |_| |_| |_| \_/ \__,_|\__\___| |_____/|_| |_|\___V 2.1 if you need WebShell for Seo everyday contact me on Telegram Telegram Address : @jackleetFor_More_Tools:
const npmAuditReport = require('npm-audit-report')
const ArboristWorkspaceCmd = require('../arborist-cmd.js')
const auditError = require('../utils/audit-error.js')
const { log, output } = require('proc-log')
const reifyFinish = require('../utils/reify-finish.js')
const VerifySignatures = require('../utils/verify-signatures.js')
class Audit extends ArboristWorkspaceCmd {
static description = 'Run a security audit'
static name = 'audit'
static params = [
'audit-level',
'dry-run',
'force',
'json',
'package-lock-only',
'package-lock',
'omit',
'include',
'foreground-scripts',
'ignore-scripts',
'include-attestations',
...super.params,
]
static usage = ['[fix|signatures]']
static async completion (opts) {
const argv = opts.conf.argv.remain
if (argv.length === 2) {
return ['fix', 'signatures']
}
switch (argv[2]) {
case 'fix':
case 'signatures':
return []
default:
throw Object.assign(new Error(`${argv[2]} not recognized`), {
code: 'EUSAGE',
})
}
}
async exec (args) {
if (args[0] === 'signatures') {
await this.auditSignatures()
} else {
await this.auditAdvisories(args)
}
}
async auditAdvisories (args) {
const fix = args[0] === 'fix'
if (this.npm.config.get('package-lock') === false && fix) {
throw this.usageError('fix cannot be used without a package-lock')
}
const reporter = this.npm.config.get('json') ? 'json' : 'detail'
const Arborist = require('@npmcli/arborist')
const opts = {
...this.npm.flatOptions,
audit: true,
path: this.npm.prefix,
reporter,
workspaces: this.workspaceNames,
}
const arb = new Arborist(opts)
await arb.audit({ fix })
if (fix) {
await reifyFinish(this.npm, arb)
} else {
// will throw if there's an error, because this is an audit command
auditError(this.npm, arb.auditReport)
const result = npmAuditReport(arb.auditReport, {
...opts,
chalk: this.npm.chalk,
})
process.exitCode = process.exitCode || result.exitCode
output.standard(result.report)
}
}
async auditSignatures () {
if (this.npm.global) {
throw Object.assign(
new Error('`npm audit signatures` does not support global packages'), {
code: 'EAUDITGLOBAL',
}
)
}
log.verbose('audit', 'loading installed dependencies')
const Arborist = require('@npmcli/arborist')
const opts = {
...this.npm.flatOptions,
path: this.npm.prefix,
workspaces: this.workspaceNames,
}
const arb = new Arborist(opts)
const tree = await arb.loadActual()
let filterSet = new Set()
if (opts.workspaces && opts.workspaces.length) {
filterSet =
arb.workspaceDependencySet(
tree,
opts.workspaces,
this.npm.flatOptions.includeWorkspaceRoot
)
} else if (!this.npm.flatOptions.workspacesEnabled) {
filterSet =
arb.excludeWorkspacesDependencySet(tree)
}
const verify = new VerifySignatures(tree, filterSet, this.npm, { ...opts })
await verify.run()
}
}
module.exports = Audit
| Name | Type | Size | Permission | Actions |
|---|---|---|---|---|
| trust | Folder | 0755 |
|
|
| access.js | File | 6.17 KB | 0644 |
|
| adduser.js | File | 1.29 KB | 0644 |
|
| audit.js | File | 3.17 KB | 0644 |
|
| bugs.js | File | 847 B | 0644 |
|
| cache.js | File | 11.48 KB | 0644 |
|
| ci.js | File | 4.24 KB | 0644 |
|
| completion.js | File | 10.83 KB | 0644 |
|
| config.js | File | 11.48 KB | 0644 |
|
| dedupe.js | File | 1.42 KB | 0644 |
|
| deprecate.js | File | 2.43 KB | 0644 |
|
| diff.js | File | 7.92 KB | 0644 |
|
| dist-tag.js | File | 5.5 KB | 0644 |
|
| docs.js | File | 449 B | 0644 |
|
| doctor.js | File | 9.99 KB | 0644 |
|
| edit.js | File | 1.72 KB | 0644 |
|
| exec.js | File | 3.39 KB | 0644 |
|
| explain.js | File | 3.55 KB | 0644 |
|
| explore.js | File | 2.11 KB | 0644 |
|
| find-dupes.js | File | 578 B | 0644 |
|
| fund.js | File | 6.38 KB | 0644 |
|
| get.js | File | 538 B | 0644 |
|
| help-search.js | File | 5.53 KB | 0644 |
|
| help.js | File | 3.64 KB | 0644 |
|
| init.js | File | 7.02 KB | 0644 |
|
| install-ci-test.js | File | 308 B | 0644 |
|
| install-test.js | File | 303 B | 0644 |
|
| install.js | File | 5.1 KB | 0644 |
|
| link.js | File | 5.24 KB | 0644 |
|
| ll.js | File | 234 B | 0644 |
|
| login.js | File | 1.29 KB | 0644 |
|
| logout.js | File | 1.42 KB | 0644 |
|
| ls.js | File | 18.03 KB | 0644 |
|
| org.js | File | 3.96 KB | 0644 |
|
| outdated.js | File | 7.92 KB | 0644 |
|
| owner.js | File | 5.95 KB | 0644 |
|
| pack.js | File | 2.77 KB | 0644 |
|
| ping.js | File | 873 B | 0644 |
|
| pkg.js | File | 3.58 KB | 0644 |
|
| prefix.js | File | 309 B | 0644 |
|
| profile.js | File | 10.3 KB | 0644 |
|
| prune.js | File | 770 B | 0644 |
|
| publish.js | File | 9.47 KB | 0644 |
|
| query.js | File | 3.75 KB | 0644 |
|
| rebuild.js | File | 2.15 KB | 0644 |
|
| repo.js | File | 1.24 KB | 0644 |
|
| restart.js | File | 303 B | 0644 |
|
| root.js | File | 295 B | 0644 |
|
| run.js | File | 6.27 KB | 0644 |
|
| sbom.js | File | 4.47 KB | 0644 |
|
| search.js | File | 1.83 KB | 0644 |
|
| set.js | File | 632 B | 0644 |
|
| shrinkwrap.js | File | 2.63 KB | 0644 |
|
| star.js | File | 1.88 KB | 0644 |
|
| stars.js | File | 1.03 KB | 0644 |
|
| start.js | File | 293 B | 0644 |
|
| stop.js | File | 288 B | 0644 |
|
| team.js | File | 4.33 KB | 0644 |
|
| test.js | File | 288 B | 0644 |
|
| token.js | File | 7.96 KB | 0644 |
|
| undeprecate.js | File | 302 B | 0644 |
|
| uninstall.js | File | 1.49 KB | 0644 |
|
| unpublish.js | File | 5.24 KB | 0644 |
|
| unstar.js | File | 183 B | 0644 |
|
| update.js | File | 1.69 KB | 0644 |
|
| version.js | File | 3.54 KB | 0644 |
|
| view.js | File | 13.48 KB | 0644 |
|
| whoami.js | File | 527 B | 0644 |
|