Method parse

src/packagedcode/npm.py:1168–1369

Parses and yields package dependencies for all lockfile versions present in the spec: https://github.com/pnpm/spec/blob/master/lockfile/

(cls, location, package_only=False)

    @classmethod
    def parse(cls, location, package_only=False):
        """
        Parses and yields package dependencies for all lockfile versions
        present in the spec: https://github.com/pnpm/spec/blob/master/lockfile/
        """

        with open(location) as yl:
            lock_data = saneyaml.load(yl.read())

        lockfile_version = lock_data.get("lockfileVersion")
        is_shrinkwrap = False
        if not lockfile_version:
            lockfile_version = lock_data.get("shrinkwrapVersion")
            lockfile_minor_version = lock_data.get("shrinkwrapMinorVersion")
            if lockfile_minor_version:
                lockfile_version = f"{lockfile_version}.{lockfile_minor_version}"
            is_shrinkwrap = True

        extra_data = {
            "lockfileVersion": lockfile_version,
        }
        major_v, minor_v = lockfile_version.split(".")

        resolved_packages = lock_data.get("packages", {})
        dependency_relations = lock_data.get("snapshots", {})
        dependency_relations_by_purl = {}
        if dependency_relations:
            for purl_fields, relations in dependency_relations.items():
                clean_purl_fields = purl_fields.split("(")[0]
                sections = clean_purl_fields.split("/")
                namespace = None
                if len(sections) == 2:
                    namespace, name_version = sections
                elif len(sections) == 1:
                    name_version, = sections
                name, version = name_version.split("@")

                purl = PackageURL(
                    type=cls.default_package_type,
                    name=name,
                    namespace=namespace,
                    version=version,
                ).to_string()
                dependency_relations_by_purl[purl] = relations

        dependencies_by_purl = {}

        for purl_fields, data in resolved_packages.items():
            if major_v == "6":
                clean_purl_fields = purl_fields.split("(")[0]
            elif major_v == "5" or is_shrinkwrap:
                clean_purl_fields = purl_fields.split("_")[0]
            elif major_v == "9":
                clean_purl_fields = purl_fields
            else:
                message = f"Unknown pnpm lockfile format: {lockfile_version}"
                raise UnknownPnpmLockFormat(message, purl_fields)