const fs = require('fs');
const path = require('path');

const lockFileContent = fs.readFileSync(path.resolve('./package-lock.json'), 'utf8');

const allowedRegistries = ['registry.yarnpkg.com', 'registry.npmjs.org'];
const resolvedUrls = lockFileContent.match(/"resolved": "https:.*"/g);
resolvedUrls.forEach(url => {
  const [, registry] = url.match(/^"resolved": "https:\/\/(.*?)\/.*"$/) || [];
  if (!allowedRegistries.includes(registry)) {
    throw new Error(
      `Disallowed registries ("${registry}") in your package-lock.json!
      Please make sure you are using a public npm registry when downloading your dependencies!`,
    );
  }
});