verdaccio/e2e/cli/e2e-pnpm-commons/audit.ts

import { afterAll, beforeAll, describe, expect, test } from 'vitest';

import { addRegistry, initialSetup, prepareGenericEmptyProject } from '@verdaccio/test-cli-commons';

export function runAudit(pnpm) {
  describe('audit a package', () => {
    let registry;

    beforeAll(async () => {
      const setup = await initialSetup();
      registry = setup.registry;
      await registry.init();
    });

    test.each([['verdaccio-memory', '@verdaccio/cli']])(
      'should audit a package %s',
      async (pkgName) => {
        const { tempFolder } = await prepareGenericEmptyProject(
          pkgName,
          '1.0.0-patch',
          registry.port,
          registry.getToken(),
          registry.getRegistryUrl(),
          { jquery: '3.6.1' }
        );
        // install is required to create package lock file
        await pnpm({ cwd: tempFolder }, 'install', ...addRegistry(registry.getRegistryUrl()));
        const resp = await pnpm(
          { cwd: tempFolder },
          'audit',
          '--json',
          ...addRegistry(registry.getRegistryUrl())
        );
        const parsedBody = JSON.parse(resp.stdout as string);
        expect(parsedBody.metadata).toBeDefined();
        expect(parsedBody.actions).toBeDefined();
        expect(parsedBody.advisories).toBeDefined();
        expect(parsedBody.muted).toBeDefined();
      }
    );

    afterAll(async () => {
      registry.stop();
    });
  });
}