put urls on their own line for accessibility

Author: reggi

lib/trust-cmd.js

@@ -78,16 +78,26 @@ class TrustCommand extends BaseCommand {
           if (fromPackageJson && fromPackageJson[key]) {
             parts.push(`(${chalk.yellow(`from package.json`)})`)
           }
-          if (urls && urls[key]) {
-            parts.push(`(${chalk.blue(urls[key])})`)
-          }
           lines.push(parts.join(' '))
         }
       }
       if (pad) {
         output.standard()
       }
       output.standard(lines.join('\n'))
+      // Print URLs on their own lines after config, following the same order as rest keys
+      if (urls) {
+        const urlLines = []
+        for (const key of Object.keys(rest)) {
+          if (urls[key]) {
+            urlLines.push(chalk.blue(urls[key]))
+          }
+        }
+        if (urlLines.length > 0) {
+          output.standard()
+          output.standard(urlLines.join('\n'))
+        }
+      }
       if (pad) {
         output.standard()
       }

test/lib/trust-cmd.js

@@ -784,3 +784,65 @@ t.test('TrustCommand - logOptions with fromPackageJson and urls', async t => {
   t.ok(output.includes('from package.json'), 'shows fromPackageJson indicator')
   t.match(output, /https:\/\/github\.com\/npm\/cli\b/, 'shows URL')
 })
+
+t.test('TrustCommand - logOptions with no urls', async t => {
+  const { npm, joinedOutput } = await loadMockNpm(t, {
+    config: {
+      '//registry.npmjs.org/:_authToken': 'test-auth-token',
+    },
+  })
+
+  class TestTrustCmd extends TrustCommand {
+    static name = 'test'
+    static description = 'Test command'
+  }
+
+  const cmd = new TestTrustCmd(npm)
+
+  // Call logOptions without urls object
+  cmd.logOptions({
+    values: {
+      type: 'github',
+      id: 'test-id',
+      repository: 'npm/cli',
+      file: 'workflow.yml',
+    },
+  })
+  const output = joinedOutput()
+  t.ok(output.includes('repository'), 'shows repository field')
+  t.ok(output.includes('file'), 'shows file field')
+  t.notOk(output.includes('Links to verify manually'), 'does not show links header when no urls')
+})
+
+t.test('TrustCommand - logOptions with urls but all values are null', async t => {
+  const { npm, joinedOutput } = await loadMockNpm(t, {
+    config: {
+      '//registry.npmjs.org/:_authToken': 'test-auth-token',
+    },
+  })
+
+  class TestTrustCmd extends TrustCommand {
+    static name = 'test'
+    static description = 'Test command'
+  }
+
+  const cmd = new TestTrustCmd(npm)
+
+  // Call logOptions with urls object but all values are null/undefined
+  cmd.logOptions({
+    values: {
+      type: 'github',
+      id: 'test-id',
+      repository: 'npm/cli',
+      file: 'workflow.yml',
+    },
+    urls: {
+      repository: null,
+      file: undefined,
+    },
+  })
+  const output = joinedOutput()
+  t.ok(output.includes('repository'), 'shows repository field')
+  t.ok(output.includes('file'), 'shows file field')
+  t.notOk(output.includes('Links to verify manually'), 'does not show links header when all urls are null')
+})