first draft

Author: dominykas

.eslintrc

@@ -0,0 +1,3 @@
+{
+  "extends": "./node_modules/lab/lib/linter/.eslintrc.js"
+}

.gitignore

@@ -0,0 +1,3 @@
+.idea
+node_modules
+

bin/allow-scripts.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+
+'use strict';
+
+const Allow = require('..');
+
+Allow.run();

lib/index.js

@@ -0,0 +1,113 @@
+'use strict';
+
+const Npm = require('libnpm');
+const Path = require('path');
+const Topo = require('topo');
+
+
+
+const internals = {};
+
+
+internals.scan = (tree, parent, map = new Map(), scanned = new Set()) => {
+
+    for (const [k, v] of tree.dependencies) {
+
+        if (v.hasCycle()) {
+            console.warn(`Cycle in ${k} - skipping`);
+            continue;
+        }
+
+        const path = v.path();
+        if (!map.has(path)) {
+            map.set(path, []);
+        }
+
+        const node = map.get(path);
+        node.push(parent);
+
+        if (!scanned.has(v)) {
+            scanned.add(v);
+            internals.scan(v, v.path(), map, scanned);
+        }
+    }
+
+    return map;
+};
+
+
+internals.queue = (tree) => {
+
+    const map = internals.scan(tree);
+    const topo = new Topo();
+    for (const [group, before] of map) {
+        topo.add(group, { group, before });
+    }
+
+    return topo.nodes;
+};
+
+exports.run = (cmd = 'install') => {
+
+    const cwd = process.cwd();
+    const pkg = require(Path.join(cwd, 'package.json'));
+    const shrinkwrap = require(Path.join(cwd, 'npm-shrinkwrap.json'));
+
+    const tree = Npm.logicalTree(pkg, shrinkwrap);
+    const queue = internals.queue(tree);
+
+    const allowed = (pkg.allowScripts || {})[cmd] || {};
+
+    queue
+        .map((path) => {
+
+            const childPkg = require(Path.join(cwd, path, 'package.json'));
+
+            return [path, childPkg];
+        })
+        .filter(([,childPkg]) => {
+
+            return childPkg.scripts && (childPkg.scripts[cmd] || childPkg.scripts[`pre${cmd}`] || childPkg.scripts[`post${childPkg}`]);
+        })
+        .filter(([,childPkg]) => {
+
+            const name = childPkg.name;
+            if (allowed[name] === undefined) {
+                throw new Error(`No entry for ${name}`);
+            }
+
+            return allowed[name];
+        })
+        .forEach(([path, childPkg]) => {
+
+            console.log(`==========> install ${path}...`);
+
+            Npm.runScript(childPkg, 'install', Path.join(cwd, path), {
+                dir: cwd,
+                log: Object.assign({
+                    pause: () => {},
+                    clearProgress: () => {},
+                    showProgress: () => {},
+                    verbose: () => {},
+                    silly: () => {},
+                    resume: () => {}
+                }, console),
+                config: {}
+            });
+
+            console.log(`==========> postinstall ${path}...`);
+
+            Npm.runScript(childPkg, 'postinstall', Path.join(cwd, path), {
+                dir: cwd,
+                log: Object.assign({
+                    pause: () => {},
+                    clearProgress: () => {},
+                    showProgress: () => {},
+                    verbose: () => {},
+                    silly: () => {},
+                    resume: () => {}
+                }, console),
+                config: {}
+            });
+        });
+};

package.json

@@ -0,0 +1,21 @@
+{
+  "name": "allow-scripts",
+  "version": "0.0.0",
+  "description": "Execute allowed lifecycle scripts",
+  "main": "lib/index.js",
+  "scripts": {
+    "test": "lab -L -n"
+  },
+  "bin": {
+    "allow-scripts": "./bin/allow-scripts.js"
+  },
+  "author": "",
+  "license": "MIT",
+  "dependencies": {
+    "libnpm": "^2.0.1",
+    "topo": "^3.0.3"
+  },
+  "devDependencies": {
+    "lab": "^18.0.1"
+  }
+}