Method runPrune

lib/utils/allow-scripts-cmd.js:333–381

(args)

  // longer match an installed package with an install script. Edits only
  // package.json (never `.npmrc`/CLI policy); `--dry-run` reports without writing.
  async runPrune (args) {
    const all = !!this.npm.config.get('all')
    if (args.length > 0 || all) {
      throw this.usageError(
        '`npm install-scripts prune` cannot be combined with positional arguments or `--all`.'
      )
    }

    const dryRun = !!this.npm.config.get('dry-run')
    const pkg = await pkgJson.load(this.npm.prefix)
    const existing = pkg.content.allowScripts && typeof pkg.content.allowScripts === 'object'
      ? pkg.content.allowScripts
      : {}

    let removed = []
    if (Object.keys(existing).length > 0) {
      const Arborist = require('@npmcli/arborist')
      const arb = new Arborist({
        ...this.npm.flatOptions,
        path: this.npm.prefix,
      })
      await arb.loadActual()

      // Candidate install nodes (mirrors collectUnreviewedScripts), tagged with
      // whether each has install scripts so the classifier can tell "gone" from
      // "no longer has scripts".
      const nodes = []
      for (const node of arb.actualTree.inventory.values()) {
        if (node.isProjectRoot || node.isWorkspace || node.isLink || node.inBundle || node.inert) {
          continue
        }
        const scripts = await getInstallScripts(node)
        nodes.push({ node, hasScripts: Object.keys(scripts).length > 0 })
      }

      const { remaining, removed: unused } = classifyUnusedEntries(existing, nodes)
      removed = unused

      if (removed.length > 0 && !dryRun) {
        // Drop the field entirely when nothing is left rather than leaving `{}`.
        pkg.update({
          allowScripts: Object.keys(remaining).length > 0 ? remaining : undefined,
        })
        await pkg.save()
      }
    }

    this.printPruneSummary({ removed, dryRun })
  }

  printPruneSummary ({ removed, dryRun }) {
    if (this.npm.flatOptions.json) {