Check npm pkg version existence in registry (#286)

Signed-off-by: 석지영/책임연구원/SW공학(연)Open Source TP <jiyeong.seok@lge.com>

Author: dd-jy

src/fosslight_dependency/package_manager/Npm.py

@@ -195,8 +195,7 @@ def parse_oss_information(self, f_name):
             else:
                 npm_url_exists = False
                 if self._network_available is True:
-                    npm_url_exists = self._npm_url_exists(oss_init_name)
-
+                    npm_url_exists = self._npm_url_exists(oss_init_name, oss_item.version)
                 if self._network_available and not npm_url_exists:
                     oss_item.homepage = repo_url or ""
                     oss_item.download_location = oss_item.homepage
@@ -242,8 +241,11 @@ def _check_network_available(self) -> bool:
             self._network_available = False
         return self._network_available
 
-    def _npm_url_exists(self, package_name: str) -> bool:
-        url = f"https://registry.npmjs.org/{package_name}"
+    def _npm_url_exists(self, package_name: str, oss_version="") -> bool:
+        if oss_version:
+            url = f"https://registry.npmjs.org/{package_name}/{oss_version}"
+        else:
+            url = f"https://registry.npmjs.org/{package_name}"
         try:
             resp = requests.head(url, timeout=3, allow_redirects=True)
             if resp.status_code == 405:

src/fosslight_dependency/package_manager/Yarn.py

@@ -139,7 +139,7 @@ def parse_oss_information(self, f_name):
             else:
                 npm_url_exists = False
                 if self._network_available is True:
-                    npm_url_exists = self._npm_url_exists(oss_init_name)
+                    npm_url_exists = self._npm_url_exists(oss_init_name, oss_item.version)
 
                 if self._network_available and not npm_url_exists:
                     oss_item.homepage = repo_url or ""