Function getPackageInfo

packages/cli/src/commands/publish/npm-utils.ts:156–194

(packageJson: PackageJSON)

//   possible. Such packages (e.g. GitHub Packages with no auto-latest) are
//   published with preState.tag rather than "latest".
export function getPackageInfo(packageJson: PackageJSON) {
  return npmRequestQueue.add(async () => {
    info(`npm info ${packageJson.name}`);

    const { scope, registry } = getCorrectRegistry(packageJson);

    // Bare query: when dist-tags.latest is set, returns the full `versions` array via packument
    // bleed-through, enabling only-pre detection downstream. Returns empty when no `latest` exists.
    let result = await spawn("npm", [
      "info",
      packageJson.name,
      `--${scope ? `${scope}:` : ""}registry=${registry}`,
      "--json",
    ]);

    // Bare query returned nothing — retry with exact version specifier
    // to handle prerelease-only packages on registries without auto-`latest`.
    if (result.stdout.toString() === "") {
      result = await spawn("npm", [
        "info",
        `${packageJson.name}@${packageJson.version}`,
        `--${scope ? `${scope}:` : ""}registry=${registry}`,
        "--json",
      ]);
    }

    // Normalize, just in case. The above prerelease-only package query should already have returned:
    // - either a result (when the package+version exists)
    // - or an error with: "code": "E404", "summary": "No match found for version $VERSION",
    if (result.stdout.toString() === "") {
      return {
        error: {
          code: "E404",
        },
      };
    }
    return jsonParse(result.stdout.toString());
  });
}

export async function infoAllow404(packageJson: PackageJSON) {
  let pkgInfo = await getPackageInfo(packageJson);