mirror of
https://github.com/zhw2590582/ArtPlayer.git
synced 2026-10-08 10:56:15 -08:00
54 lines
2.8 KiB
JavaScript
54 lines
2.8 KiB
JavaScript
import assert from 'node:assert/strict'
|
|
import fs from 'node:fs'
|
|
import path from 'node:path'
|
|
import process from 'node:process'
|
|
import { fileURLToPath } from 'node:url'
|
|
import lockfile from '@yarnpkg/lockfile'
|
|
|
|
const root = fileURLToPath(new URL('../', import.meta.url))
|
|
const read = name => JSON.parse(fs.readFileSync(path.join(root, name), 'utf8'))
|
|
const manifest = read('package.json')
|
|
const parsed = lockfile.parse(fs.readFileSync(path.join(root, 'yarn.lock'), 'utf8'))
|
|
assert.equal(parsed.type, 'success', 'Yarn lock must parse without conflicts')
|
|
assert(!fs.existsSync(path.join(root, 'package-lock.json')), 'Maintain yarn.lock only')
|
|
assert.equal(manifest.packageManager, 'yarn@1.22.22', 'Use the agreed Yarn Classic version')
|
|
const lock = parsed.object
|
|
const nodeVersion = fs.readFileSync(path.join(root, '.node-version'), 'utf8').trim()
|
|
const [major, minor] = process.versions.node.split('.').map(Number)
|
|
assert((major === 20 && minor >= 19) || (major === 22 && minor >= 12) || major >= 23, 'Build tooling requires Node ^20.19.0 || >=22.12.0')
|
|
for (const [name, version] of Object.entries(manifest.devDependencies)) {
|
|
const pinned = version.match(/^(?:npm:(?:@[^/]+\/)?[^@]+@)?(\d+\.\d+\.\d+(?:-[\w.-]+)?)$/)?.[1]
|
|
assert(pinned, `Unpinned development dependency: ${name}`)
|
|
assert.equal(lock[`${name}@${version}`]?.version, pinned, `Lock resolution differs: ${name}`)
|
|
}
|
|
|
|
const checked = new Set()
|
|
function checkDependencies(pkg) {
|
|
for (const field of ['dependencies', 'devDependencies', 'optionalDependencies']) {
|
|
for (const [name, range] of Object.entries(pkg[field] || {})) {
|
|
const selector = `${name}@${range}`
|
|
assert(lock[selector], `Dependency missing from Yarn lock: ${selector}`)
|
|
if (checked.has(selector))
|
|
continue
|
|
checked.add(selector)
|
|
assert(lock[selector].resolved && lock[selector].integrity, `Missing registry integrity: ${selector}`)
|
|
checkDependencies(lock[selector])
|
|
}
|
|
}
|
|
}
|
|
checkDependencies(manifest)
|
|
let packages = 0
|
|
for (const dir of fs.readdirSync(path.join(root, 'packages'))) {
|
|
const filename = `packages/${dir}/package.json`
|
|
if (!fs.existsSync(path.join(root, filename)))
|
|
continue
|
|
checkDependencies(read(filename))
|
|
packages += 1
|
|
}
|
|
if (process.argv.includes('--strict')) {
|
|
assert.equal(process.versions.node, nodeVersion, 'Use the pinned .node-version runtime')
|
|
const actualManager = process.env.npm_config_user_agent?.split(' ')[0]
|
|
assert.equal(actualManager, manifest.packageManager.replace('@', '/'), 'Run yarn check:toolchain --strict with the pinned Yarn')
|
|
}
|
|
console.log(`Toolchain verified: ${packages} workspaces, ${Object.keys(manifest.devDependencies).length} pinned tools, ${checked.size} dependency selectors; Node ${process.versions.node} (canonical ${nodeVersion}), ${manifest.packageManager}`)
|