test: validate semver

Author: dominykas

package.json

@@ -7,7 +7,7 @@
     "url": "https://github.com/dominykas/allow-scripts.git"
   },
   "scripts": {
-    "test": "lab -L -t 80 -m 5000"
+    "test": "lab -L -t 83 -m 5000"
   },
   "bin": {
     "allow-scripts": "./bin/allow-scripts.js"

test/fixtures/allowed-semver.json

@@ -0,0 +1,14 @@
+{
+  "private": true,
+  "name": "@example/allowed-false",
+  "version": "0.0.0",
+  "dependencies": {
+    "@example/with-install-script": "*",
+    "@example/with-postinstall-script": "*",
+    "@example/without-scripts": "*"
+  },
+  "allowScripts": {
+    "@example/with-install-script": "1.x.x",
+    "@example/with-postinstall-script": "*"
+  }
+}

test/index.js

@@ -70,5 +70,20 @@ describe('allow-scripts', () => {
             expect(fixture.getActualResult()).to.equal('postinstall from with-postinstall-script');
             expect(fixture.getLog()).to.contain('skip node_modules/@example/with-install-script (because it is not allowed in package.json)');
         });
+
+        it('skips scripts which are outside of allowed semver range', async () => {
+
+            const fixture = Fixtures.setup('allowed-semver', [
+                'with-install-script',
+                'with-postinstall-script',
+                'without-scripts'
+            ]);
+
+            await Allow.run({});
+
+            expect(fixture.getActualResult()).not.to.contain('with-install-script');
+            expect(fixture.getActualResult()).to.equal('postinstall from with-postinstall-script');
+            expect(fixture.getLog()).to.contain('skip node_modules/@example/with-install-script (because 0.0.0 is outside of allowed range: 1.x.x)');
+        });
     });
 });