@@ -18,8 +18,7 @@ def initialize(importmap_path = "config/importmap.rb", vendor_path: "vendor/java
18
18
19
19
def outdated_packages
20
20
packages_with_versions . each . with_object ( [ ] ) do |( package , current_version ) , outdated_packages |
21
- outdated_package = OutdatedPackage . new ( name : package ,
22
- current_version : current_version )
21
+ outdated_package = OutdatedPackage . new ( name : package , current_version : current_version )
23
22
24
23
if !( response = get_package ( package ) )
25
24
outdated_package . error = 'Response error'
@@ -39,18 +38,19 @@ def outdated_packages
39
38
def vulnerable_packages
40
39
get_audit . flat_map do |package , vulnerabilities |
41
40
vulnerabilities . map do |vulnerability |
42
- VulnerablePackage . new ( name : package ,
43
- severity : vulnerability [ 'severity' ] ,
44
- vulnerable_versions : vulnerability [ 'vulnerable_versions' ] ,
45
- vulnerability : vulnerability [ 'title' ] )
41
+ VulnerablePackage . new (
42
+ name : package ,
43
+ severity : vulnerability [ 'severity' ] ,
44
+ vulnerable_versions : vulnerability [ 'vulnerable_versions' ] ,
45
+ vulnerability : vulnerability [ 'title' ]
46
+ )
46
47
end
47
48
end . sort_by { |p | [ p . name , p . severity ] }
48
49
end
49
50
50
51
def packages_with_versions
51
52
# We cannot use the name after "pin" because some dependencies are loaded from inside packages
52
53
# Eg. pin "buffer", to: "https://ga.jspm.io/npm:@jspm/[email protected] /nodelibs/browser/buffer.js"
53
-
54
54
with_versions = importmap . scan ( /^pin .*(?<=npm:|npm\/ |skypack\. dev\/ |unpkg\. com\/ )(.*)(?=@\d +\. \d +\. \d +)@(\d +\. \d +\. \d +(?:[^\/ \s ["']]*)).*$/ ) |
55
55
importmap . scan ( /#{ PIN_REGEX } #.*@(\d +\. \d +\. \d +(?:[^\s ]*)).*$/ )
56
56
0 commit comments