fix: Use npm view as fallback when package is private

Author: david-rodrigues

package-lock.json

@@ -42,7 +42,20 @@ export const getPackageVersions = async (
         return resolve(Object.keys(data.versions))
       }
 
-      return resolve(null)
+      // Uses `npm view` as a fallback.
+      // This usually happens when the package needs authentication.
+      // In this case, we'll let `npm` handle it directly.
+      return exec(`npm view --json ${name} versions`, (error, stdout) => {
+        if (!error) {
+          try {
+            return resolve(JSON.parse(stdout))
+          } catch (e) {
+            /* empty */
+          }
+        }
+
+        return resolve(null)
+      })
     })
   )
 

src/NPM.ts

@@ -165,7 +165,8 @@ export const vscodeSimulator = async (options: SimulatorOptions = {}) => {
       for (const packageName of Object.keys(options.packagesRepository)) {
         if (
           url.endsWith(`/${packageName}`) &&
-          packageName in options.packagesRepository
+          packageName in options.packagesRepository &&
+          !packageName.startsWith("@private/")
         ) {
           return Promise.resolve({
             versions: Object.fromEntries(
@@ -204,6 +205,15 @@ export const vscodeSimulator = async (options: SimulatorOptions = {}) => {
     }
 
     if (typeof callbackReal === "function") {
+      if (command === "npm view --json @private/npm-outdated versions") {
+        callbackReal(
+          null,
+          JSON.stringify(options.packagesRepository!["@private/npm-outdated"])
+        )
+
+        return
+      }
+
       callbackReal("error", null)
     }
 

src/TestUtils.ts

@@ -291,6 +291,27 @@ describe("package diagnostics", () => {
     expect(decorations).toStrictEqual([])
     expect(decorations).toStrictEqual([])
   })
+
+  it("package dependes on auth, so npm view will be used (found)", async () => {
+    const { diagnostics } = await vscodeSimulator({
+      packageJson: { devDependencies: { "@private/npm-outdated": "^1.0.0" } },
+      packagesInstalled: { "@private/npm-outdated": "1.0.0" },
+      packagesRepository: { "@private/npm-outdated": ["1.0.0", "1.0.1"] },
+    })
+
+    expect(diagnostics[0]?.message).toContain("Newer version")
+    expect(diagnostics[0]?.message).toContain("1.0.1")
+  })
+
+  it("package dependes on auth, so npm view will be used (not found)", async () => {
+    const { diagnostics } = await vscodeSimulator({
+      packageJson: { devDependencies: { "@private/jest": "^1.0.0" } },
+      packagesInstalled: { "@private/jest": "1.0.0" },
+      packagesRepository: { "@private/jest": ["1.0.0", "1.0.1"] },
+    })
+
+    expect(diagnostics).toStrictEqual([])
+  })
 })
 
 describe("code actions", () => {