🤖 PeerChecker

An implementation of npm arborist with PeerSpin check.

🛠️ Build

cmake -B build/release -D CMAKE_BUILD_TYPE=Release
cmake --build build/release

You should see and edit the config.hpp before building.

The default main.cpp will not get input and output. YOU MUST RUN THE FUNCTION ON YOUR OWN DEMAND. It's quite easy: just give input to and get output from the parse function in main.cpp You can write your own multi-processing logic.

The inputs are: name and version of your parsing target. The outputs are: a dep tree, a dir tree and corresponding log.

The dep tree is the same as "npm ls -a", which may like below:

{
    "[email protected]": {
        "@ungap/[email protected]": {},
        "[email protected]": {},
        "[email protected]": {},
        "[email protected]": {
            "[email protected]": {
                "[email protected]": "deduped",
                "[email protected]": {}
            },
            ...,
            "[email protected]": {},
            "[email protected]": {
                "[email protected]": "deduped"
            }
        },
        ...
    }
}

The dir tree is the same as the node_modules directory created by npm, which may like below:

{
    "@ungap/[email protected]": {},
    "[email protected]": {},
    "[email protected]": {},
    ...,
    "[email protected]": {
        "[email protected]": {}
    },
    "[email protected]": {
        "[email protected]": {},
        "[email protected]": {}
    },
    ...
}

The dep tree and dir tree are both in JSON format.

The log will be "Ok" if parsing is successful.

When it's not "Ok", the parsing target has an install-time error.

• Conflict means there is dependency conflict.

• QueueLoop or "QueueLoopReplacementDetected" means a loop problem is resolved.

• LoadLoop means there is a loading loop problem.

• NpmError means there is a nullptr problem.

• Empty, PlaceLoop and UnknownError should not appear in theory.

Note, QueueLoop, LoadLoop and PlaceLoop means the loop exceeds the limit, while "QueueLoopReplacementDetected" means we detected the resolving loop problem.

📖 Citation

@INPROCEEDINGS {,
author = { Wang, Xingyu and Wang, Mingsen and Shen, Wenbo and Chang, Rui },
booktitle = { 2025 IEEE/ACM 47th International Conference on Software Engineering (ICSE) },
title = {{ Understanding and Detecting Peer Dependency Resolving Loop in npm Ecosystem }},
year = {2025},
volume = {},
ISSN = {1558-1225},
pages = {591-591},
keywords = {},
doi = {10.1109/ICSE55347.2025.00054},
url = {https://doi.ieeecomputersociety.org/10.1109/ICSE55347.2025.00054},
publisher = {IEEE Computer Society},
address = {Los Alamitos, CA, USA},
month =May}