{"version":3,"sources":["jsdelivr-header.js","/npm/yarn-audit-fix-ng@1.2.0/dist/index.js"],"names":[],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;ACLA,aACA,IAAI,gBAAmB,MAAQ,KAAK,kBAAqB,OAAO,OAAS,SAAU,EAAG,EAAG,EAAG,QAC7E,IAAP,IAAkB,EAAK,GAC3B,OAAO,eAAe,EAAG,EAAI,CAAE,YAAY,EAAM,IAAK,WAAa,OAAO,EAAE,EAAI,GACnF,EAAI,SAAU,EAAG,EAAG,EAAG,QACT,IAAP,IAAkB,EAAK,GAC3B,EAAE,GAAM,EAAE,EACb,GACG,mBAAsB,MAAQ,KAAK,qBAAwB,OAAO,OAAS,SAAU,EAAG,GACxF,OAAO,eAAe,EAAG,UAAW,CAAE,YAAY,EAAM,MAAO,GAClE,EAAI,SAAS,EAAG,GACb,EAAW,QAAI,CACnB,GACI,aAAgB,MAAQ,KAAK,cAAiB,SAAU,GACxD,GAAI,GAAO,EAAI,WAAY,OAAO,EAClC,IAAI,EAAS,CAAC,EACd,GAAW,MAAP,EAAa,IAAK,IAAI,KAAK,EAAe,YAAN,GAAmB,OAAO,UAAU,eAAe,KAAK,EAAK,IAAI,gBAAgB,EAAQ,EAAK,GAEtI,OADA,mBAAmB,EAAQ,GACpB,CACX,EACA,OAAO,eAAe,QAAS,aAAc,CAAE,OAAO,IACtD,QAAQ,SAAM,EACd,MAAM,GAAK,aAAa,QAAQ,sBAC1B,QAAU,aAAa,QAAQ,YAC/B,KAAO,aAAa,QAAQ,SAC5B,GAAK,aAAa,QAAQ,OAC1B,GAAK,aAAa,QAAQ,kBAC1B,SAAW,QAAQ,UACnB,GAAK,aAAa,QAAQ,WAC1B,OAAS,QAAQ,UACjB,IAAO,IACT,IAAI,EACJ,MAAM,IAAE,EAAM,QAAQ,OAAU,EAC1B,EAAe,KAAK,QAAQ,EAAK,aAEjC,EAAe,OAAO,QAAQ,IAAK,SAAS,KAAK,EAD1B,CAAC,MAAO,SAAU,QAAS,YAC4B,MAAM,EAAM,EAAG,IAAM,CAAE,QAAS,eAAgB,KAAK,KACnI,EAAe,CACjB,OAAO,EACP,UAAW,WAEf,IAAI,EAAO,GAAG,MAAM,GAAG,aAAa,EAAc,UACjC,WAAb,EAAK,OACL,QAAQ,MAAM,6CACd,QAAQ,KAAK,IAEjB,QAAQ,IAAI,wBACZ,IAAI,EAAQ,GAAG,UAAU,EAAc,GACnC,EAAM,QACN,QAAQ,MAAM,2BAA4B,EAAM,MAAM,SACtD,QAAQ,KAAK,IAUjB,IAAI,EAAY,SAAS,MAAM,EAAM,OAChC,WACA,MAAM,MACN,KAAK,GAXV,SAAiB,GACb,IACI,OAAO,GACX,CACA,MAAO,GACH,OAAO,IACX,CACJ,CAImB,EAAQ,IAAM,KAAK,MAAM,OACvC,KAAK,IAAW,IAAI,EAAI,OAAwE,QAAhE,EAAK,aAAmC,EAAS,EAAK,YAAyB,IAAP,OAAgB,EAAS,EAAG,QAAQ,IAC5I,QAAQ,GAAiB,MAAR,IACjB,KAAK,IAAS,CACf,YAAa,EAAK,YAClB,oBAAqB,EAAK,oBAC1B,iBAAkB,EAAK,sBACrB,GAAS,EAAK,cAChB,OAAO,KAAK,GAAW,OAAS,IAChC,QAAQ,IAAI,+BACZ,QAAQ,KAAK,IAEjB,IAAI,EAAW,EAAK,OAChB,EAAkB,GACtB,IAAK,IAAI,KAAW,OAAO,KAAK,GAAW,CAEvC,IAAK,EAAS,GAAgB,EAAQ,MAAM,KACxC,EAAW,EAAU,GACzB,IAAK,EACD,SACJ,IAAI,EAAU,EAAS,GACvB,GAAI,GAAG,UAAU,EAAQ,QAAS,EAAS,qBAAsB,CAC7D,IAAI,EAA0D,QAAnD,EAAK,GAAG,WAAW,EAAS,yBAAsC,IAAP,OAAgB,EAAS,EAAG,SAClG,GAAW,MAAP,EAAa,CACb,QAAQ,MAAM,sCAAuC,EAAS,YAAa,EAAS,kBACpF,QACJ,CACA,IAAK,GAAG,UAAU,EAAK,KAAkB,EAAK,MAAO,CACjD,QAAQ,MAAM,2CAA4C,EAAS,KAAM,EAAS,kBAClF,QACJ,CACA,EAAgB,KAAK,GAAG,KAAW,KACnC,EAAQ,QAAU,EAClB,EAAQ,aAAe,GACvB,EAAQ,UAAY,GACpB,EAAQ,SAAW,EACvB,CACJ,CACK,EAAK,QACN,GAAG,cAAc,EAAc,GAAG,UAAU,IAEhD,QAAQ,IAAI,uBAAwB,EAAgB,KAAK,OACzD,GAAG,UAAU,yCAAyC,IAAO,EAAa,EAE9E,QAAQ,IAAM","file":"/npm/yarn-audit-fix-ng@1.2.0/dist/index.js","sourceRoot":"","sourcesContent":["/**\n * Minified by jsDelivr using Terser v5.39.0.\n * Original file: /npm/yarn-audit-fix-ng@1.2.0/dist/index.js\n *\n * Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files\n */\n","#!/usr/bin/env node\n\"use strict\";\nvar __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {\n    if (k2 === undefined) k2 = k;\n    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });\n}) : (function(o, m, k, k2) {\n    if (k2 === undefined) k2 = k;\n    o[k2] = m[k];\n}));\nvar __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {\n    Object.defineProperty(o, \"default\", { enumerable: true, value: v });\n}) : function(o, v) {\n    o[\"default\"] = v;\n});\nvar __importStar = (this && this.__importStar) || function (mod) {\n    if (mod && mod.__esModule) return mod;\n    var result = {};\n    if (mod != null) for (var k in mod) if (k !== \"default\" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);\n    __setModuleDefault(result, mod);\n    return result;\n};\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.run = void 0;\nconst lf = __importStar(require(\"@yarnpkg/lockfile\"));\nconst process = __importStar(require(\"process\"));\nconst path = __importStar(require(\"path\"));\nconst fs = __importStar(require(\"fs\"));\nconst cp = __importStar(require(\"child_process\"));\nconst lodash_1 = require(\"lodash\");\nconst sv = __importStar(require(\"semver\"));\nconst argv_1 = require(\"./argv\");\nconst run = (opts) => {\n    var _a;\n    const { cwd = process.cwd() } = opts;\n    const yarnlockPath = path.resolve(cwd, \"yarn.lock\");\n    const yarnAuditAllowedOpts = [\"cwd\", \"groups\", \"level\", \"verbose\"];\n    const yarnAuditCmd = argv_1.unparse({ ...lodash_1.pick(opts, yarnAuditAllowedOpts), json: true, _: [] }, { command: \"yarn audit\" }).join(\" \");\n    const spawnOptions = {\n        shell: true,\n        maxBuffer: 128 * 1024 * 1024,\n    };\n    let data = lf.parse(fs.readFileSync(yarnlockPath, \"utf-8\"));\n    if (data.type != \"success\") {\n        console.error(\"Merge conflict in yarn lockfile, aborting\");\n        process.exit(1);\n    }\n    console.log(\"Downloading audit...\");\n    let audit = cp.spawnSync(yarnAuditCmd, spawnOptions);\n    if (audit.error) {\n        console.error(\"Error retrieving audit: \", audit.error.message);\n        process.exit(1);\n    }\n    function attempt(f) {\n        try {\n            return f();\n        }\n        catch (_a) {\n            return null;\n        }\n    }\n    let auditDict = lodash_1.keyBy(audit.stdout\n        .toString()\n        .split(\"\\n\")\n        .map((item) => attempt(() => JSON.parse(item)))\n        .map((item) => { var _a; return (_a = item === null || item === void 0 ? void 0 : item.data) === null || _a === void 0 ? void 0 : _a.advisory; })\n        .filter((item) => item != null)\n        .map((item) => ({\n        module_name: item.module_name,\n        vulnerable_versions: item.vulnerable_versions,\n        patched_versions: item.patched_versions,\n    })), (item) => item.module_name);\n    if (Object.keys(auditDict).length < 1) {\n        console.log(\"Audit check found no issues\");\n        process.exit(0);\n    }\n    let lockfile = data.object;\n    let upgradeVersions = [];\n    for (let depSpec of Object.keys(lockfile)) {\n        // console.log(\"Testing depspec\", depSpec);\n        let [pkgName, desiredRange] = depSpec.split(\"@\");\n        let pkgAudit = auditDict[pkgName];\n        if (!pkgAudit)\n            continue;\n        let pkgSpec = lockfile[depSpec];\n        if (sv.satisfies(pkgSpec.version, pkgAudit.vulnerable_versions)) {\n            let fix = (_a = sv.minVersion(pkgAudit.patched_versions)) === null || _a === void 0 ? void 0 : _a.format();\n            if (fix == null) {\n                console.error(\"Can't find satisfactory version for\", pkgAudit.module_name, pkgAudit.patched_versions);\n                continue;\n            }\n            if (!sv.satisfies(fix, desiredRange) && !opts.force) {\n                console.error(\"Cant find patched version that satisfies\", depSpec, \"in\", pkgAudit.patched_versions);\n                continue;\n            }\n            upgradeVersions.push(`${pkgName}@${fix}`);\n            pkgSpec.version = fix;\n            pkgSpec.dependencies = [];\n            pkgSpec.integrity = \"\";\n            pkgSpec.resolved = \"\";\n        }\n    }\n    if (!opts.dryRun) {\n        fs.writeFileSync(yarnlockPath, lf.stringify(lockfile));\n    }\n    console.log(\"Installing upgrades:\", upgradeVersions.join(\", \"));\n    cp.spawnSync(`yarn install --update-checksums --cwd ${cwd}`, spawnOptions);\n};\nexports.run = run;\n"]}