16 lines
650 B
JavaScript
16 lines
650 B
JavaScript
const fs = require('fs');
|
|
const path = require('path');
|
|
|
|
const lockFileContent = fs.readFileSync(path.resolve('./package-lock.json'), 'utf8');
|
|
|
|
const allowedRegistries = ['registry.yarnpkg.com', 'registry.npmjs.org'];
|
|
const resolvedUrls = lockFileContent.match(/"resolved": "https:.*"/g);
|
|
resolvedUrls.forEach(url => {
|
|
const [, registry] = url.match(/^"resolved": "https:\/\/(.*?)\/.*"$/) || [];
|
|
if (!allowedRegistries.includes(registry)) {
|
|
throw new Error(
|
|
`Disallowed registries ("${registry}") in your package-lock.json!
|
|
Please make sure you are using a public npm registry when downloading your dependencies!`,
|
|
);
|
|
}
|
|
});
|