Function strictAllowScriptsError

workspaces/arborist/lib/unreviewed-scripts.js:81–99

(unreviewed, { remediation } = {})

// caller-specific guidance appended after the package list (npm install vs
// npm exec have different remediation commands).
const strictAllowScriptsError = (unreviewed, { remediation } = {}) => {
  const lines = unreviewed.map(({ node, scripts }) => {
    const events = Object.entries(scripts)
      .map(([event, body]) => `${event}: ${body}`)
      .join('; ')
    const name = node.package?.name || node.name
    const version = node.package?.version || ''
    const label = version ? `${name}@${version}` : name
    return `  ${label} (${events})`
  }).join('\n')

  return Object.assign(
    new Error(
      `--strict-allow-scripts: ${unreviewed.length} package(s) have install ` +
      `scripts not covered by allowScripts:\n${lines}\n${remediation}`
    ),
    { code: 'ESTRICTALLOWSCRIPTS' }
  )
}

module.exports = { collectUnreviewedScripts, strictAllowScriptsError }