diff options
Diffstat (limited to 'node_modules/@npmcli/arborist/lib/audit-report.js')
| -rw-r--r-- | node_modules/@npmcli/arborist/lib/audit-report.js | 32 |
1 files changed, 18 insertions, 14 deletions
diff --git a/node_modules/@npmcli/arborist/lib/audit-report.js b/node_modules/@npmcli/arborist/lib/audit-report.js index cd3501c30..bf5af7413 100644 --- a/node_modules/@npmcli/arborist/lib/audit-report.js +++ b/node_modules/@npmcli/arborist/lib/audit-report.js @@ -330,25 +330,29 @@ class AuditReport extends Map { } else if (!this.advisoryVulns.has(name)) this.dependencyVulns.set(name, vuln) - process.emit('time', `auditReport:add:${name}@${range}`) + // wrap in try/finally to ensure we end the timer properly + // and don't leave it hanging to conflict with a future one. + try { + process.emit('time', `auditReport:add:${name}@${range}`) - for (const node of this.tree.inventory.query('name', name)) { - if (vuln.nodes.has(node) || !vuln.isVulnerable(node)) - continue + for (const node of this.tree.inventory.query('name', name)) { + if (vuln.nodes.has(node) || !vuln.isVulnerable(node)) + continue - for (const {from} of node.edgesIn) { - this[_vulnDependents].add(from) + for (const {from} of node.edgesIn) { + this[_vulnDependents].add(from) + } } - } - // if we didn't get anything, then why is this even here?? - if (vuln.nodes.size === 0) - return this.delete(name) + // if we didn't get anything, then why is this even here?? + if (vuln.nodes.size === 0) + return this.delete(name) - if (!vuln.packument) - vuln.packument = await this[_packument](name) - - process.emit('timeEnd', `auditReport:add:${name}@${range}`) + if (!vuln.packument) + vuln.packument = await this[_packument](name) + } finally { + process.emit('timeEnd', `auditReport:add:${name}@${range}`) + } } // convert a quick-audit into a bulk advisory listing |