Node v22

.github/workflows/nodejs.yml

@@ -1,20 +1,22 @@
 name: Node.js CI
 
-on: [push, pull_request]
+on:
+  push:
+  pull_request:
 
 jobs:
   build:
     strategy:
       matrix:
-        node-version: [10.x, 12.x, 14.x]
-        os: [ubuntu-latest, windows-latest, macOS-latest]
+        node-version: [22.x]
+        os: [ubuntu-latest, windows-latest, macos-latest]
     runs-on: ${{ matrix.os }}
 
     steps:
-    - uses: actions/checkout@v2
-    - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v1
-      with:
-        node-version: ${{ matrix.node-version }}
-    - run: npm install
-    - run: npm test
+      - uses: actions/checkout@v4
+      - name: Use Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node-version }}
+      - run: npm install
+      - run: npm test

.gitignore

@@ -57,21 +57,14 @@ typings/
 # dotenv environment variables file
 .env
 
-# bundleDependencies
-!node_modules/fs-extra/*
-!node_modules/gunzip-maybe/*
-!node_modules/is-root/*
-!node_modules/node-gyp/*
-!node_modules/npm-package-arg/*
-!node_modules/npm-path/*
-!node_modules/promise-each/*
-!node_modules/request/*
-!node_modules/semver/*
-!node_modules/tar-fs/*
-!node_modules/tar-stream/*
-!node_modules/update-notifier/*
-!node_modules/which/*
-!node_modules/yargs/*
-
 # dep
 __pycache__
+
+# Standard cache
+.cache/
+
+# Tap test artifacts
+.tap/
+
+# Temporary home directory
+.tmp-home

bin/dep.js

@@ -2,38 +2,61 @@
 
 const semver = require('semver')
 const yargs = require('yargs')
-const updateNotifier = require('update-notifier')
 const commands = {
   install: require('../lib/install'),
   lock: require('../lib/lock'),
   run: require('../lib/run')
 }
 const pkgJSON = require('../package.json')
-const notifier = updateNotifier({ pkg: pkgJSON })
 
-if (!semver.satisfies(process.version, pkgJSON.engine.node)) {
-  process.stderr.write('dep works only on Node.js LTS versions\n')
-  process.stderr.write('See the schedule: https://github.com/nodejs/LTS#lts-schedule1\n')
+const allowLegacyNode = ['1', 'true', 'yes'].includes((process.env.DEP_ALLOW_OLD_NODE || '').toLowerCase())
+
+if (!allowLegacyNode && !semver.satisfies(process.version, pkgJSON.engine.node)) {
+  process.stderr.write(`dep requires Node.js ${pkgJSON.engine.node} (detected ${process.version})\n`)
+  process.stderr.write('Upgrade Node.js to continue.\n')
   process.exit(1)
 }
 
-if (notifier.update) {
-  notifier.notify()
+const loadUpdateNotifier = async () => {
+  try {
+    const mod = await import('update-notifier')
+    return mod.default ?? mod
+  } catch (error) {
+    if (!process.env.DEP_SILENCE_UPDATE_NOTIFIER_ERRORS && (process.env.DEBUG || process.env.NODE_ENV === 'test')) {
+      // Surface failures when debugging to ease troubleshooting
+      console.error('Failed to load update-notifier:', error.message)
+    }
+    return null
+  }
 }
 
-yargs.usage(pkgJSON.description)
+const run = async () => {
+  const updateNotifier = await loadUpdateNotifier()
+  const notifier = updateNotifier ? updateNotifier({ pkg: pkgJSON }) : null
 
-yargs.help('help')
-  .alias('help', 'h')
+  if (notifier?.update) {
+    notifier.notify()
+  }
 
-yargs.version()
-  .alias('version', 'v')
-  .describe('version', 'Show version information')
+  yargs.usage(pkgJSON.description)
 
-Object.keys(commands).forEach((i) => {
-  yargs.command(commands[i])
-})
+  yargs.help('help')
+    .alias('help', 'h')
+
+  yargs.version()
+    .alias('version', 'v')
+    .describe('version', 'Show version information')
+
+  Object.keys(commands).forEach((i) => {
+    yargs.command(commands[i])
+  })
 
-const argv = yargs.argv
+  const argv = yargs.argv
 
-if (!argv._handled) yargs.showHelp()
+  if (!argv._handled) yargs.showHelp()
+}
+
+run().catch((error) => {
+  console.error(error)
+  process.exit(1)
+})

lib/install.js

@@ -31,7 +31,7 @@ const install = (argv) => {
       'devDependencies'
     ]
   }
-  var deps = Object.assign({}, optionalDependencies)
+  const deps = Object.assign({}, optionalDependencies)
   allDependencies[only].forEach((key) => {
     if (!pkgJSON[key]) return
     Object.assign(deps, pkgJSON[key])
@@ -53,7 +53,7 @@ const install = (argv) => {
       global.nativeBuildQueue.forEach((cwd) => {
         try {
           process.stdout.write('Building dependencies\n')
-          nodeGyp({ cwd: cwd })
+          nodeGyp({ cwd })
         } catch (e) {
           // remove the pkg since the deps could be optional
           fs.removeSync(cwd)

lib/install/installer.js

@@ -18,7 +18,7 @@ const installer = (dep, deps, base, resolve, reject) => {
   fs.ensureDirSync(target)
 
   const pkg = deps[dep]
-  var fetch
+  let fetch
 
   switch (pkg.type) {
     case 'git':
@@ -55,7 +55,7 @@ const installer = (dep, deps, base, resolve, reject) => {
     if (!pkg.dependencies) return resolve()
     const tasks = Object.keys(pkg.dependencies).map((item) => {
       const list = pkg.dependencies
-      var keys = [].concat(base, dep)
+      const keys = [].concat(base, dep)
       if (keys.length > 1) keys.splice(-1, 0, 'node_modules')
       return new Promise((resolve, reject) => {
         installer(item, list, keys, resolve, reject)

lib/install/installer/bin.js

@@ -2,29 +2,94 @@ const fs = require('fs-extra')
 const path = require('path')
 const nm = require('../../utils/nm')
 
+const isWindows = process.platform === 'win32'
+const removeIfExists = (filePath) => {
+  try {
+    fs.rmSync(filePath, { force: true })
+  } catch (error) {
+    if (error.code !== 'ENOENT') {
+      throw error
+    }
+  }
+}
+
+const makePosixLink = (source, dest) => {
+  removeIfExists(dest)
+  fs.symlinkSync(source, dest)
+  try {
+    fs.chmodSync(source, 0o755)
+  } catch (error) {
+    if (error.code !== 'ENOENT') throw error
+  }
+}
+
+const makeWindowsShims = (source, dest) => {
+  removeIfExists(dest)
+  let linked = false
+  try {
+    fs.symlinkSync(source, dest, 'file')
+    linked = true
+  } catch (error) {
+    if (!['EACCES', 'EPERM', 'UNKNOWN'].includes(error.code)) {
+      throw error
+    }
+    fs.copyFileSync(source, dest)
+  }
+
+  try {
+    fs.chmodSync(source, 0o755)
+  } catch (error) {
+    if (!['ENOENT', 'EPERM', 'EINVAL'].includes(error.code)) {
+      throw error
+    }
+  }
+
+  const nodePath = process.execPath
+  const cmdContent = `@ECHO OFF\r\n"${nodePath}" "${source}" %*\r\n`
+  const psContent = `& "${nodePath}" "${source}" $args\r\n`
+
+  removeIfExists(`${dest}.cmd`)
+  removeIfExists(`${dest}.ps1`)
+
+  fs.writeFileSync(`${dest}.cmd`, cmdContent, 'utf8')
+  fs.writeFileSync(`${dest}.ps1`, psContent, 'utf8')
+
+  return linked
+}
+
+const createBinEntry = (command, relativePath, targetDir) => {
+  const binDir = path.join(nm, '.bin')
+  const source = path.join(targetDir, relativePath)
+  const dest = path.join(binDir, command)
+
+  fs.ensureDirSync(binDir)
+
+  if (isWindows) {
+    makeWindowsShims(source, dest)
+  } else {
+    makePosixLink(source, dest)
+  }
+
+  if (!isWindows) return
+
+  try {
+    fs.chmodSync(dest, 0o755)
+  } catch (error) {
+    if (!['ENOENT', 'EPERM', 'EINVAL'].includes(error.code)) {
+      throw error
+    }
+  }
+}
+
 const bin = (key, target) => {
   const pkgJSON = require(path.join(target, 'package.json'))
   if (!pkgJSON.bin) return
-  fs.ensureDirSync(path.join(nm, '.bin'))
+
   if (typeof pkgJSON.bin === 'string') {
-    try {
-      fs.unlinkSync(path.join(nm, '.bin', key))
-    } catch (e) {}
-    fs.symlinkSync(
-      path.join(target, pkgJSON.bin),
-      path.join(nm, '.bin', key)
-    )
-    fs.chmodSync(path.join(target, pkgJSON.bin), '0755')
+    createBinEntry(key, pkgJSON.bin, target)
   } else if (typeof pkgJSON.bin === 'object') {
     Object.keys(pkgJSON.bin).forEach((cmd) => {
-      try {
-        fs.unlinkSync(path.join(nm, '.bin', cmd))
-      } catch (e) {}
-      fs.symlinkSync(
-        path.join(target, pkgJSON.bin[cmd]),
-        path.join(nm, '.bin', cmd)
-      )
-      fs.chmodSync(path.join(target, pkgJSON.bin[cmd]), '0755')
+      createBinEntry(cmd, pkgJSON.bin[cmd], target)
     })
   }
 }

lib/install/installer/git.js

@@ -8,8 +8,8 @@ module.exports = (pkg, cwd) => {
 
   git.sync(['clone', url, cwd, '--quiet'])
   if (!fs.pathExistsSync(path.join(cwd, '.gitmodules'))) {
-    return git(['checkout', hash, '--quiet'], { cwd: cwd })
+    return git(['checkout', hash, '--quiet'], { cwd })
   }
-  git.sync(['checkout', hash, '--quiet'], { cwd: cwd })
-  return git(['submodule', 'update', '--init', '--recursive', '--quiet'], { cwd: cwd })
+  git.sync(['checkout', hash, '--quiet'], { cwd })
+  return git(['submodule', 'update', '--init', '--recursive', '--quiet'], { cwd })
 }

lib/install/installer/registry.js

@@ -1,23 +1,15 @@
-const request = require('request')
 const tar = require('tar-fs')
 const gunzip = require('gunzip-maybe')
 const npmrc = require('../../utils/npmrc')
+const { pipeline } = require('node:stream/promises')
+const { requestStream } = require('../../utils/http')
 
-module.exports = (pkg, cwd) => {
-  const options = {
-    url: pkg.tarball,
+module.exports = async (pkg, cwd) => {
+  const extract = tar.extract(cwd, { strip: 1 })
+  const { stream } = await requestStream(pkg.tarball, {
     headers: {
       'User-Agent': npmrc.userAgent
     }
-  }
-  return new Promise((resolve, reject) => {
-    const extract = tar.extract(cwd, { strip: 1 })
-    extract.on('finish', () => {
-      resolve()
-    })
-    request.get(options)
-      .pipe(gunzip())
-      .pipe(extract)
-      .on('error', reject)
   })
+  await pipeline(stream, gunzip(), extract)
 }

lib/install/installer/remote.js

@@ -1,23 +1,15 @@
-const request = require('request')
 const tar = require('tar-fs')
 const gunzip = require('gunzip-maybe')
 const npmrc = require('../../utils/npmrc')
+const { pipeline } = require('node:stream/promises')
+const { requestStream } = require('../../utils/http')
 
-module.exports = (pkg, cwd) => {
-  const options = {
-    url: pkg.url,
+module.exports = async (pkg, cwd) => {
+  const extract = tar.extract(cwd, { strip: 1 })
+  const { stream } = await requestStream(pkg.url, {
     headers: {
       'User-Agent': npmrc.userAgent
     }
-  }
-  return new Promise((resolve, reject) => {
-    const extract = tar.extract(cwd, { strip: 1 })
-    extract.on('finish', () => {
-      resolve()
-    })
-    request.get(options)
-      .pipe(gunzip())
-      .pipe(extract)
-      .on('error', reject)
   })
+  await pipeline(stream, gunzip(), extract)
 }

lib/install/resolver.js

@@ -9,8 +9,8 @@ const resolver = (dep, deps, base, resolve, reject) => {
       return resolve()
     }
   }
-  for (var i = 0; base.length > i; i += 2) {
-    var target = tree.getter(global.dependenciesTree, base.slice(0, i))
+  for (let i = 0; base.length > i; i += 2) {
+    const target = tree.getter(global.dependenciesTree, base.slice(0, i))
     if (target && target[dep] && target[dep].version) {
       if (semver.satisfies(target[dep].version, deps[dep])) {
         return resolve()
@@ -30,7 +30,7 @@ const resolver = (dep, deps, base, resolve, reject) => {
 
     const tasks = Object.keys(pkg.dependencies).map((item) => {
       const list = pkg.dependencies
-      var keys = base.length === 0
+      const keys = base.length === 0
         ? [].concat(`${dep}@${pkg.version}`)
         : [].concat(base, 'dependencies', `${dep}@${pkg.version}`)
       return new Promise((resolve, reject) => {