Method parse

src/packagedcode/npm.py:621–797

(cls, location, package_only=False)

    @classmethod
    def parse(cls, location, package_only=False):

        with io.open(location, encoding='utf-8') as loc:
            package_data = json.load(loc)

        # we have two formats: v1 and v2
        lockfile_version = package_data.get('lockfileVersion', 1)
        root_name = package_data.get('name')
        root_version = package_data.get('version')
        root_ns, _ , root_name = root_name.rpartition('/')

        extra_data = dict(lockfile_version=lockfile_version)
        # this is the top level element that we return
        root_package_mapping = dict(
            datasource_id=cls.datasource_id,
            type=cls.default_package_type,
            primary_language=cls.default_primary_language,
            namespace=root_ns,
            name=root_name,
            version=root_version,
            extra_data=extra_data,
            **get_urls(root_ns, root_name, root_version)
        )
        root_package_data = models.PackageData.from_data(root_package_mapping, package_only)

        # https://docs.npmjs.com/cli/v8/configuring-npm/package-lock-json#lockfileversion
        if lockfile_version == 1:
            deps_key = 'dependencies'
        else:
            # v2 and may be v3???
            deps_key = 'packages'

        deps_mapping = package_data.get(deps_key) or {}

        # Top level package metadata is present here
        root_pkg = deps_mapping.get("")
        if root_pkg:
            pkg_name = root_pkg.get('name')
            pkg_ns, _ , pkg_name = pkg_name.rpartition('/')
            pkg_version = root_pkg.get('version')
            pkg_purl = PackageURL(
                type=cls.default_package_type,
                namespace=pkg_ns,
                name=pkg_name,
                version=pkg_version,
            ).to_string()
            if pkg_purl != root_package_data.purl:
                if TRACE_NPM:
                    logger_debug(f'BaseNpmLockHandler: parse: purl mismatch: {pkg_purl} vs {root_package_data.purl}')
            else:
                extracted_license_statement = root_pkg.get('license')
                if extracted_license_statement:
                    root_package_data.extracted_license_statement = extracted_license_statement
                    root_package_data.populate_license_fields()

                deps_mapper(
                    deps=root_pkg.get('devDependencies') or {},
                    package=root_package_data,