Function trustedDisplay

workspaces/arborist/lib/script-allowed.js:369–376

(node)

// falls back to node.version when the URL doesn't carry one. Do not
// use for policy matching.
const trustedDisplay = (node) => {
  const trusted = getTrustedRegistryIdentity(node)
  /* istanbul ignore next: defensive fallbacks for nodes without name/version */
  return {
    name: (trusted && trusted.name) || node.name || null,
    version: (trusted && trusted.version) || node.version || null,
  }
}

module.exports = isScriptAllowed
module.exports.isScriptAllowed = isScriptAllowed