// compares the inventory of package items in the tree
|
// that is about to be installed (idealTree) with the inventory
|
// of items stored in the package-lock file (virtualTree)
|
//
|
// Returns empty array if no errors found or an array populated
|
// with an entry for each validation error found.
|
function validateLockfile (virtualTree, idealTree) {
|
const errors = []
|
|
// loops through the inventory of packages resulted by ideal tree,
|
// for each package compares the versions with the version stored in the
|
// package-lock and adds an error to the list in case of mismatches
|
for (const [key, entry] of idealTree.entries()) {
|
const lock = virtualTree.get(key)
|
|
if (!lock) {
|
errors.push(`Missing: ${entry.name}@${entry.version} from lock file`)
|
continue
|
}
|
|
if (entry.version !== lock.version) {
|
errors.push(`Invalid: lock file's ${lock.name}@${lock.version} does ` +
|
`not satisfy ${entry.name}@${entry.version}`)
|
}
|
}
|
return errors
|
}
|
|
module.exports = validateLockfile
|
