Function processAudit

packages/plugin-js-packages/src/lib/runner/runner.ts:95–139

(
  id: PackageManagerId,
  depGroups: DependencyGroup[],
  auditLevelMapping: AuditSeverity,
  packageJsonPath: PackageJsonPath,
)

}

async function processAudit(
  id: PackageManagerId,
  depGroups: DependencyGroup[],
  auditLevelMapping: AuditSeverity,
  packageJsonPath: PackageJsonPath,
) {
  const pm = packageManagers[id];
  const supportedAuditDepGroups =
    pm.audit.supportedDepGroups ?? dependencyGroups;
  const compatibleAuditDepGroups = depGroups.filter(group =>
    supportedAuditDepGroups.includes(group),
  );

  logger.info(
    `Auditing packages for ${pluralizeToken('dependency group', compatibleAuditDepGroups.length)} (${compatibleAuditDepGroups.join(', ')}) ...`,
  );

  const auditResults = await asyncSequential(
    compatibleAuditDepGroups,
    async (depGroup): Promise<[DependencyGroup, AuditResult]> => {
      const { stdout } = await executeProcess({
        command: pm.command,
        args: pm.audit.getCommandArgs(depGroup),
        cwd: packageJsonPath ? path.dirname(packageJsonPath) : process.cwd(),
        ignoreExitCode: pm.audit.ignoreExitCode,
      });
      return [depGroup, pm.audit.unifyResult(stdout)];
    },
  );

  const resultsMap = objectFromEntries(auditResults);
  const uniqueResults = pm.audit.postProcessResult?.(resultsMap) ?? resultsMap;

  logAuditSummary(uniqueResults);

  return compatibleAuditDepGroups.map(depGroup =>
    auditResultToAuditOutput(
      // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
      uniqueResults[depGroup]!,
      id,
      depGroup,
      auditLevelMapping,
    ),
  );
}

function logAuditSummary(
  results: Partial<Record<DependencyGroup, AuditResult>>,