Function ParsePackageJsonWithLock

opensca/sca/javascript/npm.go:189–262

ParsePackageJsonWithLock 借助package.lock解析package.json

(pkgjson *PackageJson, pkglock *PackageLock)

// ParsePackageJsonWithLock 借助package.lock解析package.json
func ParsePackageJsonWithLock(pkgjson *PackageJson, pkglock *PackageLock) *model.DepGraph {

	if pkglock.LockfileVersion == 3 {
		return ParsePackageJsonWithLockV3(pkgjson, pkglock)
	}

	// map[key]
	depNameMap := map[string]*model.DepGraph{}
	devDepNameMap := map[string]*model.DepGraph{}
	_dep := _depSet().LoadOrStore

	// 记录依赖
	for name, lockDep := range pkglock.Dependencies {
		if lockDep.Develop {
			devDepNameMap[name] = _dep(name, lockDep.Version, "dev")
		} else {
			depNameMap[name] = _dep(name, lockDep.Version)
		}
	}

	// 构建依赖关系
	for name, lockDep := range pkglock.Dependencies {
		lockDep.name = name
		q := []*PackageLockDep{lockDep}
		for len(q) > 0 {
			n := q[0]
			q = q[1:]

			var dep *model.DepGraph
			if n.Develop {
				dep = _dep(n.name, n.Version, "dev")
			} else {
				dep = _dep(n.name, n.Version)
			}

			dup := map[string]bool{}
			for name, sub := range n.Dependencies {
				dup[name] = true
				sub.name = name
				q = append(q, sub)
				if sub.Develop || n.Develop {
					dep.AppendChild(_dep(name, sub.Version, "dev"))
				} else {
					dep.AppendChild(_dep(name, sub.Version))
				}
			}

			for name := range n.Requires {
				if dup[name] {
					continue
				}
				if n.Develop {
					dep.AppendChild(devDepNameMap[name])
				} else {
					dep.AppendChild(depNameMap[name])
				}
			}