package-audit.js

const exec = require('child_process').exec;

const AUDIT_EXCEPTIONS = [
  'tar',
  'trim-newlines',
  'css-what',
  'normalize-url',
  'diff',
  'shelljs',
  // no patches available
  'ansi-html',
  'minimist',
  'moment',
  'axios',
  'async',
  'nth-check',
  'semver-regex',
  'scss-tokenizer',
  'codecov', // no package found
  'loader-utils', // breaks building
  'json5',
  'http-cache-semantics',
  'cacheable-request',
  'dns-packet',
  'decode-uri-component',
  '@openzeppelin/contracts',
  'engine.io',
  'socket.io-parser',
  'fast-xml-parser',
  '@grpc/grpc-js',
  'is_js',
  'get-func-name',
  'chart.js',
  'browserify-sign',
  'lodash.pick',
  'ip',
  'webpack-dev-middleware',
  'web3-utils',
  '@solana/web3.js',
  'lodash.template',
  'html-minifier',
  'braces',
  'ws',
  // issues after new enkrypt ens lib
  'lodash',
  'node-forge',
  'elliptic',
  'protobufjs',
  'minimatch',
  'socket.io',
  'semver'
];
const execute = (command, callback) => {
  exec(
    command,
    {
      maxBuffer: 2000 * 4096
    },
    (error, stdout, stderr) => {
      callback(stdout);
    }
  );
};
execute('npm audit --json', json => {
  const advisories = JSON.parse(json).advisories;
  if (!advisories) {
    console.info('Most likely npm audit is unavailable', json);
    process.exit(0);
  }
  let auditPass = true;
  for (const id in advisories) {
    if (
      advisories[id].severity === 'high' &&
      !AUDIT_EXCEPTIONS.includes(advisories[id].module_name)
    ) {
      console.error('AUDIT Failed', advisories[id]);
      auditPass = false;
    }
  }
  if (!auditPass) process.exit(1);
  console.log('AUDIT complete');
});