D7net
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
opt
/
alt
/
alt-nodejs22
/
root
/
usr
/
lib
/
node_modules
/
npm
/
node_modules
/
libnpmpublish
/
lib
/
Filename :
unpublish.js
back
Copy
'use strict' const { URL } = require('node:url') const npa = require('npm-package-arg') const npmFetch = require('npm-registry-fetch') const semver = require('semver') // given a tarball url and a registry url, returns just the // relevant pathname portion of it, so that it can be handled // elegantly by npm-registry-fetch which only expects pathnames // and handles the registry hostname via opts const getPathname = (tarball, registry) => { const registryUrl = new URL(registry).pathname.slice(1) let tarballUrl = new URL(tarball).pathname.slice(1) // test the tarball url to see if it starts with a possible // pathname from the registry url, in that case strips that portion // of it so that we only return the post-registry-url pathname if (registryUrl) { tarballUrl = tarballUrl.slice(registryUrl.length) } return tarballUrl } const unpublish = async (spec, opts) => { spec = npa(spec) // spec is used to pick the appropriate registry/auth combo. opts = { force: false, ...opts, spec, } try { const pkgUri = spec.escapedName const pkg = await npmFetch.json(pkgUri, { ...opts, query: { write: true }, }) const version = spec.rawSpec const allVersions = pkg.versions || {} const versionData = allVersions[version] const rawSpecs = (!spec.rawSpec || spec.rawSpec === '*') const onlyVersion = Object.keys(allVersions).length === 1 const noVersions = !Object.keys(allVersions).length // if missing specific version, // assumed unpublished if (!versionData && !rawSpecs && !noVersions) { return true } // unpublish all versions of a package: // - no specs supplied "npm unpublish foo" // - all specs ("*") "npm unpublish foo@*" // - there was only one version // - has no versions field on packument if (rawSpecs || onlyVersion || noVersions) { await npmFetch(`${pkgUri}/-rev/${pkg._rev}`, { ...opts, method: 'DELETE', ignoreBody: true, }) return true } else { const dist = allVersions[version].dist delete allVersions[version] const latestVer = pkg['dist-tags'].latest // deleting dist tags associated to version Object.keys(pkg['dist-tags']).forEach(tag => { if (pkg['dist-tags'][tag] === version) { delete pkg['dist-tags'][tag] } }) if (latestVer === version) { pkg['dist-tags'].latest = Object.keys( allVersions ).sort(semver.compareLoose).pop() } delete pkg._revisions delete pkg._attachments // Update packument with removed versions await npmFetch(`${pkgUri}/-rev/${pkg._rev}`, { ...opts, method: 'PUT', body: pkg, ignoreBody: true, }) // Remove the tarball itself const { _rev } = await npmFetch.json(pkgUri, { ...opts, query: { write: true }, }) const tarballUrl = getPathname(dist.tarball, opts.registry) await npmFetch(`${tarballUrl}/-rev/${_rev}`, { ...opts, method: 'DELETE', ignoreBody: true, }) return true } } catch (err) { if (err.code !== 'E404') { throw err } return true } } module.exports = unpublish