mirror of
https://github.com/safedep/pmg.git
synced 2026-08-03 07:24:09 +02:00
* Add support for yarn package manager - Added yarn command handler in cmd/npm/yarn.go - Added DefaultYarnPackageManagerConfig() in packagemanager/npm.go - Added yarn dev flag support (--dev/-D) in ParseCommand() - Added yarn analytics tracking in internal/analytics/event.go - Registered yarn command in main.go - Added yarn to alias setup in internal/alias/alias.go - Added comprehensive test suite in packagemanager/yarn_test.go - All tests passing (12 yarn tests + existing tests) Resolves #30 Signed-off-by: shrvansudhakara <shrvansudhakara@gmail.com> * docs: update README with yarn package manager support Updated documentation to reflect yarn support addition: - Changed yarn status from '🚧 Planned' to '✅ Active' in package managers table - Added 'pmg yarn add <package>' command example - Added 'yarn add <package-name>' to command list - Added 'yarn install # Uses yarn.lock' to lockfile examples This documentation update corresponds to the yarn implementation in the previous commit. Related to #30 Signed-off-by: shrvansudhakara <shrvansudhakara@gmail.com> * fix: address review feedback for yarn support - Add support for bare 'yarn' command as manifest install - Validate yarn install does not accept package names - Add YarnExtractor for yarn.lock file support Changes: - packagemanager/npm.go: Added bare yarn command handling and validation - packagemanager/yarn_test.go: Added test for bare yarn command - extractor/ecosystems.go: Added Yarn PackageManagerName and extractor - extractor/npm.go: Added YarnExtractor implementation - go.mod, go.sum: Updated dependencies Addresses review feedback from @Sahilb315 - Bare yarn command now triggers manifest install per docs - yarn install <package> is now properly rejected - yarn.lock extraction support added Related to #30 Signed-off-by: shrvansudhakara <shrvansudhakara@gmail.com> * chore: tidy go.mod and go.sum to remove unused dependencies Signed-off-by: shrvansudhakara <shrvansudhakara@gmail.com> * fix: add yarn.lock extractor mapping - Add yarn.lock case in getExtractorForFile switch - Import yarnlock extractor from osv-scalibr - Enables lockfile parsing for manifest-based installations Tested both package-based and manifest-based installations successfully. Addresses review feedback from @Sahilb315 Signed-off-by: shrvansudhakara <shrvansudhakara@gmail.com> * test: add validation test for yarn install with package name - Add test case to verify 'yarn install <package>' is rejected - Ensures invalid syntax returns no install targets - Confirms IsManifestInstall is false for invalid commands Addresses review feedback from @Sahilb315 Signed-off-by: shrvansudhakara <shrvansudhakara@gmail.com> --------- Signed-off-by: shrvansudhakara <shrvansudhakara@gmail.com>
79 lines
2.0 KiB
Go
79 lines
2.0 KiB
Go
package extractor
|
|
|
|
import (
|
|
packagev1 "buf.build/gen/go/safedep/api/protocolbuffers/go/safedep/messages/package/v1"
|
|
)
|
|
|
|
// NpmExtractor handles package-lock.json files
|
|
type NpmExtractor struct{}
|
|
|
|
func (n *NpmExtractor) GetSupportedFiles() []string {
|
|
return []string{"package-lock.json"}
|
|
}
|
|
|
|
func (n *NpmExtractor) GetEcosystem() packagev1.Ecosystem {
|
|
return packagev1.Ecosystem_ECOSYSTEM_NPM
|
|
}
|
|
|
|
func (n *NpmExtractor) GetPackageManager() PackageManagerName {
|
|
return Npm
|
|
}
|
|
|
|
func (n *NpmExtractor) Extract(lockfilePath, scanDir string) ([]*packagev1.PackageVersion, error) {
|
|
return parseLockfile(lockfilePath, scanDir, n.GetEcosystem())
|
|
}
|
|
|
|
// PnpmExtractor handles pnpm-lock.yaml files
|
|
type PnpmExtractor struct{}
|
|
|
|
func (p *PnpmExtractor) GetSupportedFiles() []string {
|
|
return []string{"pnpm-lock.yaml"}
|
|
}
|
|
|
|
func (p *PnpmExtractor) GetEcosystem() packagev1.Ecosystem {
|
|
return packagev1.Ecosystem_ECOSYSTEM_NPM
|
|
}
|
|
|
|
func (p *PnpmExtractor) GetPackageManager() PackageManagerName {
|
|
return Pnpm
|
|
}
|
|
|
|
func (p *PnpmExtractor) Extract(lockfilePath, scanDir string) ([]*packagev1.PackageVersion, error) {
|
|
return parseLockfile(lockfilePath, scanDir, p.GetEcosystem())
|
|
}
|
|
|
|
type BunExtractor struct{}
|
|
|
|
func (n *BunExtractor) GetSupportedFiles() []string {
|
|
return []string{"bun.lock"}
|
|
}
|
|
|
|
func (n *BunExtractor) GetEcosystem() packagev1.Ecosystem {
|
|
return packagev1.Ecosystem_ECOSYSTEM_NPM
|
|
}
|
|
|
|
func (n *BunExtractor) GetPackageManager() PackageManagerName {
|
|
return Bun
|
|
}
|
|
|
|
func (n *BunExtractor) Extract(lockfilePath, scanDir string) ([]*packagev1.PackageVersion, error) {
|
|
return parseLockfile(lockfilePath, scanDir, n.GetEcosystem())
|
|
}
|
|
|
|
type YarnExtractor struct{}
|
|
|
|
func (y *YarnExtractor) GetSupportedFiles() []string {
|
|
return []string{"yarn.lock"}
|
|
}
|
|
|
|
func (y *YarnExtractor) GetEcosystem() packagev1.Ecosystem {
|
|
return packagev1.Ecosystem_ECOSYSTEM_NPM
|
|
}
|
|
|
|
func (y *YarnExtractor) GetPackageManager() PackageManagerName {
|
|
return Yarn
|
|
}
|
|
|
|
func (y *YarnExtractor) Extract(lockfilePath, scanDir string) ([]*packagev1.PackageVersion, error) {
|
|
return parseLockfile(lockfilePath, scanDir, y.GetEcosystem())
|
|
} |