⭐️ npm.packages resource

[chris-rock]

This PR adds a new npm resource to gather npm pacakges.

It supports finding the globally installed packages via:

// returns all globally installed direct and transitive dependencies on your operating system
cnquery> npm.packages
npm.global.list: [
  0: npm.package name="npm" version="10.2.4"
  1: npm.package name="yarn" version="1.22.21"
]

// to query the direct dependencies, use use the directDependencies field
cnquery> npm.packages.directDependencies
npm.packages.directDependencies: [
  0: npm.package name="npm" version="10.2.4"
  1: npm.package name="yarn" version="1.22.21"
]

You can also parse individual projects:

// gather transitive dependencies
cnquery> npm.packages("/Users/chris/github/jquery/jquery")
npm.packages.list: [
  0: npm.package name="jquery" version="4.0.0-pre"
  2: npm.package name="node_modules/@aashutoshrathi/word-wrap" version="1.2.6"
  3: npm.package name="node_modules/@babel/cli" version="7.22.9"
  4: npm.package name="node_modules/@babel/cli/node_modules/glob" version="7.2.3"
  5: npm.package name="node_modules/@babel/cli/node_modules/minimatch" version="3.1.2"
  6: npm.package name="node_modules/@babel/code-frame" version="7.22.13"
...

// the root package is available via the root field
cnquery>  npm.packages("/Users/chris/trials/jquery/jquery").root
npm.packages.root: npm.package name="jquery" version="4.0.0-pre"

// in case the package has direct dependencies, you can query that via:
cnquery> npm.packages("/Users/chris/trials/jquery/jquery").directDependencies
npm.packages.directDependencies: []

[github-actions]

Test Results

2 790 tests  +1   2 789 ✅ +1   47s ⏱️ -5s
  186 suites ±0       1 💤 ±0 
    5 files   ±0       0 ❌ ±0 

Results for commit b1387f8. ± Comparison against base commit b4b0122.

This pull request removes 4 and adds 5 tests. Note that renamed tests count towards both.

go.mondoo.com/cnquery/v10/llx ‑ TestSuccess/2024-02-16_12:09:26.018262027_+0000_UTC_m=+0.011313872
go.mondoo.com/cnquery/v10/llx ‑ TestTruthy/2024-02-16_12:09:26.018262027_+0000_UTC_m=+0.011313872
go.mondoo.com/cnquery/v10/llx ‑ TestTruthy/2024-02-16_12:09:26.018262027_+0000_UTC_m=+0.011313872#01
go.mondoo.com/cnquery/v10/providers/os/resources/npm ‑ TestPackageJsonLockParser

go.mondoo.com/cnquery/v10/llx ‑ TestSuccess/2024-02-16_09:57:04.499621508_+0000_UTC_m=+0.011226490
go.mondoo.com/cnquery/v10/llx ‑ TestTruthy/2024-02-16_09:57:04.499621508_+0000_UTC_m=+0.011226490
go.mondoo.com/cnquery/v10/llx ‑ TestTruthy/2024-02-16_09:57:04.499621508_+0000_UTC_m=+0.011226490#01
go.mondoo.com/cnquery/v10/providers/os/resources/npm ‑ TestPackageJsonLockWithDependencies
go.mondoo.com/cnquery/v10/providers/os/resources/npm ‑ TestPackageJsonLockWithPackages

♻️ This comment has been updated with latest results.

[jaym]

[nit] it might be a good time to introduce a struct to return. that's a lot of return values

[chris-rock]

will do that in another round. great idea.

[imilchev]

since we use 1.22 you can safely do for _, f := range files

[chris-rock]

I still do not trust go on this 🤣 That burned me too often.