FM / lib

/usr/local/lib/node_modules/npm/node_modules/@npmcli/arborist/lib/

/usr/local/lib/node_modules/npm/node_modules/@npmcli/arborist/lib

Name	Size	Mode	Actions
arborist/	-	0755	rm
add-rm-pkg-deps.js	5008	0644	edit dl rm
audit-report.js	9619	0644	edit dl rm
calc-dep-flags.js	3359	0644	edit dl rm
can-place-dep.js	14273	0644	edit dl rm
case-insensitive-map.js	1239	0644	edit dl rm
consistent-resolve.js	1247	0644	edit dl rm
debug.js	1282	0644	edit dl rm
deepest-nesting-target.js	691	0644	edit dl rm
dep-valid.js	5128	0644	edit dl rm
diff.js	10327	0644	edit dl rm
edge.js	9988	0644	edit dl rm
from-path.js	1095	0644	edit dl rm
gather-dep-set.js	1286	0644	edit dl rm
index.js	273	0644	edit dl rm
inventory.js	3321	0644	edit dl rm
isolated-classes.js	2717	0644	edit dl rm
link.js	3114	0644	edit dl rm
node.js	49828	0644	edit dl rm
optional-set.js	1201	0644	edit dl rm
override-resolves.js	225	0644	edit dl rm
override-set.js	8773	0644	edit dl rm
packument-cache.js	2557	0644	edit dl rm
peer-entry-sets.js	2632	0644	edit dl rm
place-dep.js	20250	0644	edit dl rm
printable.js	5222	0644	edit dl rm
query-selector-all.js	30361	0644	edit dl rm
realpath.js	2655	0644	edit dl rm
relpath.js	136	0644	edit dl rm
reset-dep-flags.js	542	0644	edit dl rm
retire-path.js	501	0644	edit dl rm
shrinkwrap.js	37721	0644	edit dl rm
signal-handling.js	2245	0644	edit dl rm
signals.js	1381	0644	edit dl rm
spec-from-lock.js	874	0644	edit dl rm
tracker.js	2991	0644	edit dl rm
tree-check.js	4142	0644	edit dl rm
version-from-tgz.js	1488	0644	edit dl rm
vuln.js	5958	0644	edit dl rm
yarn-lock.js	10813	0644	edit dl rm

Edit: /usr/local/lib/node_modules/npm/node_modules/@npmcli/arborist/lib/version-from-tgz.js (1488B)

const semver = require('semver')
const { basename } = require('node:path')
const { URL } = require('node:url')
module.exports = (name, tgz) => {
  const base = basename(tgz)
  if (!base.endsWith('.tgz')) {
    return null
  }

if (tgz.startsWith('http:/') || tgz.startsWith('https:/')) {
    const u = new URL(tgz)
    // registry url?  check for most likely pattern.
    // either /@foo/bar/-/bar-1.2.3.tgz or
    // /foo/-/foo-1.2.3.tgz, and fall through to
    // basename checking.  Note that registries can
    // be mounted below the root url, so /a/b/-/x/y/foo/-/foo-1.2.3.tgz
    // is a potential option.
    const tfsplit = u.pathname.slice(1).split('/-/')
    if (tfsplit.length > 1) {
      const afterTF = tfsplit.pop()
      if (afterTF === base) {
        const pre = tfsplit.pop()
        const preSplit = pre.split(/\/|%2f/i)
        const project = preSplit.pop()
        const scope = preSplit.pop()
        return versionFromBaseScopeName(base, scope, project)
      }
    }
  }

const split = name.split(/\/|%2f/i)
  const project = split.pop()
  const scope = split.pop()
  return versionFromBaseScopeName(base, scope, project)
}

const versionFromBaseScopeName = (base, scope, name) => {
  if (!base.startsWith(name + '-')) {
    return null
  }

const parsed = semver.parse(base.substring(name.length + 1, base.length - 4))
  return parsed ? {
    name: scope && scope.charAt(0) === '@' ? `${scope}/${name}` : name,
    version: parsed.version,
  } : null
}

cmd: