パッケージマネージャを作ってみたい

$ npm install -g tiny-package-manager
$ which tiny-pm
/usr/local/bin/tiny-pm

{
  "name": "tiny-pm-test",
  "version": "1.0.0"
}

$ tiny-pm
[1/2] Finished resolving.

{}

$ tiny-pm --help
tiny-pm <command> [args]

コマンド:
  tiny-pm install  Install the dependencies.
  tiny-pm          Install the dependencies.                        [デフォルト]

オプション:
  --production   Install production dependencies only.                    [真偽]
  -v, --version  バージョンを表示                                         [真偽]
  -h, --help     ヘルプを表示                                             [真偽]

{
  "name": "tiny-pm-test",
  "version": "1.0.0",
  "dependencies": {
    "axios": "^0.27.2"
  }
}

$ tiny-pm
[1/2] Finished resolving.
[2/2] Installing [########]

asynckit@^0.4.0:
  version: 0.4.0
  url: 'https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz'
  shasum: c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79
  dependencies: {}
axios@^0.27.2:
  version: 0.27.2
  url: 'https://registry.npmjs.org/axios/-/axios-0.27.2.tgz'
  shasum: 207658cc8621606e586c85db4b41a750e756d972
  dependencies:
    follow-redirects: ^1.14.9
    form-data: ^4.0.0
combined-stream@^1.0.8:
  version: 1.0.8
  url: 'https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz'
  shasum: c3d45a8b34fd730631a110a8a2520682b31d5a7f
  dependencies:
    delayed-stream: ~1.0.0
delayed-stream@~1.0.0:
  version: 1.0.0
  url: 'https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz'
  shasum: df3ae199acadfb7d440aaae0b29e2272b24ec619
  dependencies: {}
follow-redirects@^1.14.9:
  version: 1.15.1
  url: 'https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.1.tgz'
  shasum: 0ca6a452306c9b276e4d3127483e29575e207ad5
  dependencies: null
form-data@^4.0.0:
  version: 4.0.0
  url: 'https://registry.npmjs.org/form-data/-/form-data-4.0.0.tgz'
  shasum: 93919daeaf361ee529584b9b31664dc12c9fa452
  dependencies:
    asynckit: ^0.4.0
    combined-stream: ^1.0.8
    mime-types: ^2.1.12
mime-db@1.52.0:
  version: 1.52.0
  url: 'https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz'
  shasum: bbabcdc02859f4987301c856e3387ce5ec43bf70
  dependencies: null
mime-types@^2.1.12:
  version: 2.1.35
  url: 'https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz'
  shasum: 381a871b62a734450660ae3deee44813f70d959a
  dependencies:
    mime-db: 1.52.0

$ ls node_modules/
asynckit         axios            combined-stream  delayed-stream   follow-redirects form-data        mime-db          mime-types

const axios = require('axios').default
axios.get('https://jsonplaceholder.typicode.com/todos/').then(res => {
  console.log(res.data.length)
})

$ node main.js 
200

$ npm install --save-dev @typescript-eslint/parser @typescript-eslint/eslint-plugin eslint typescript prettier

{
  "name": "@s-sasaki-0529/tiny-package-manager",
  "version": "0.0.1",
  "devDependencies": {
    "@typescript-eslint/eslint-plugin": "^5.35.1",
    "@typescript-eslint/parser": "^5.35.1",
    "eslint": "^8.23.0",
    "prettier": "^2.7.1",
    "typescript": "^4.8.2"
  },
  "eslintConfig": {
    "extends": ["eslint:recommended", "plugin:@typescript-eslint/recommended"],
    "parser": "@typescript-eslint/parser",
    "plugins": ["@typescript-eslint"],
    "root": true
  },
  "prettier": {
    "semi": false,
    "singleQuote": true,
    "trailingComma": "none",
    "printWidth": 120,
    "arrowParens": "avoid"
  }
}

$ npm install commander

import { Command } from 'commander'

const program = new Command()

program
  .command('install')
  .argument('[packageNames...]')
  .action(packageNames => {
    const options = program.opts()
    console.log({ command: 'install', packageNames, options })
  })

program
  .option('--production', 'devDependencies のインストールを省略する')
  .option('--save-dev', 'パッケージを devDependencies に追加する')
  .parse()

$ ts-node src/cli.ts install axios vue --save-dev --production
{
  command: 'install',
  packageNames: [ 'axios', 'vue' ],
  options: { saveDev: true, production: true }
}

$ ts-node src/cli.ts --help
Usage: cli [options] [command]

Options:
  --production               devDependencies のインストールを省略する
  --save-dev                 パッケージを devDependencies に追加する
  -h, --help                 display help for command

Commands:
  install [packageNames...]
  help [command]             display help for command

type PackageName = string
type Version = string

type DependenciesMap = {
  [name: PackageName]: Version
}

type PackageJson = {
  dependencies: DependenciesMap
  devDependencies: DependenciesMap
}

type LockFile = {
  [dependency: `${PackageName}@${Version}`]: {
    version: Version
    url: string
    shasum: string
    dependencies: {
      [name: PackageName]: Version
    }
  }
}

$ npm install find-up

import { findUp } from 'find-up'

export async function findPackageJsonPath() {
  return findUp('package.json')
}

findPackageJsonPath().then(path => {
  console.log(path)
})

{
  "name": "dev",
  "version": "1.0.0",
  "dependencies": {
    "axios": "^0.18.0",
    "dayjs": "^1.0.0"
  },
  "devDependencies": {
    "chalk": "^5.0.0"
  }
}

$ node ../dist/src/packageJson.js 
/Users/shingo.sasaki/tiny-package-manager/dev/package.json

export async function parsePackageJson(path: string): Promise<PackageJson> {
  return new Promise(resolve => {
    readFile(path)
      .then(data => {
        const json = JSON.parse(data.toString())
        resolve({
          dependencies: json.dependencies,
          devDependencies: json.devDependencies
        })
      })
      .catch(() => {
        resolve({
          dependencies: {},
          devDependencies: {}
        })
      })
  })
}

$ node dist/src/packageJson.js 
{
  dependencies: { commander: '^9.4.0', 'find-up': '^6.3.0' },
  devDependencies: {
    '@types/node': '^18.7.13',
    '@typescript-eslint/eslint-plugin': '^5.35.1',
    '@typescript-eslint/parser': '^5.35.1',
    eslint: '^8.23.0',
    prettier: '^2.7.1',
    typescript: '^4.8.2'
  }
}

type NpmManifest = {
  name: PackageName
  'dist-tags': {
    latest: Version
  }
  versions: {
    [version: Version]: {
      dist: {
        tarball: string
        shasum: string
      }
      dependencies: DependenciesMap
    }
  }
}

export async function fetchPackageManifest(name: PackageName): Promise<NpmManifest> {
  const manifestUrl = `${REPOSITORY_URL}/${name}`
  const manifest = (await fetch(manifestUrl).then(res => res.json())) as NpmManifest
  return manifest
}

const DEFAULT_DOWNLOAD_DIR = `${process.cwd()}/node_modules`

export async function savePackageTarball(manifest: NpmManifest, version: Version, dir = DEFAULT_DOWNLOAD_DIR) {
  const tarballUrl = manifest.versions[version].dist.tarball
  const path = `${dir}/${manifest.name}`
  mkdir(path, { recursive: true })

  const tarResponse = await fetch(tarballUrl)
  return tarResponse.body?.pipe(tar.extract({ cwd: path, strip: 1 }))
}

type InstallOption = {
  saveDev?: boolean
  production?: boolean
}

export async function install(packageNames: PackageName[], option: InstallOption = {}) {
  // インストール対象パッケージ一覧を初期化
  const dependencyMap: PackageDependencyMap = {
    dependencies: {},
    devDependencies: {}
  }

  // package.json を探索し、存在する場合はパッケージ依存関係を読み込む
  const packageJsonPath = await findPackageJsonPath()
  if (packageJsonPath) {
    const packageJson = await parsePackageJson(packageJsonPath)
    dependencyMap.dependencies = packageJson.dependencies
    dependencyMap.devDependencies = packageJson.devDependencies
  }

  // 追加インストールするパッケージを dependencies または devDependencies に追加する
  packageNames.forEach(packageName => {
    if (option.saveDev) {
      dependencyMap.devDependencies[packageName] = ''
    } else {
      dependencyMap.dependencies[packageName] = ''
    }
  })

  // production の指定がある場合は devDependencies のインストールを省略する
  if (option.production) {
    dependencyMap.devDependencies = {}
  }

  // npm リポジトリから各パッケージのインストールを行う
  // devDependencies については production オプションがある場合は省略
  const installPromises = []
  installPromises.push(
    Object.keys(dependencyMap.dependencies).map(packageName => {
      return savePackageTarball(packageName, '') // TODO: latest でなく指定されたバージョンを使う
    })
  )
  if (!option.production) {
    installPromises.push(
      Object.keys(dependencyMap.devDependencies).map(packageName => {
        return savePackageTarball(packageName, '') // TODO: latest でなく指定されたバージョンを使う
      })
    )
  }
  return Promise.all(installPromises)
}

export async function savePackageTarball(name: PackageName, vc?: VersionConstraint, dir = DEFAULT_DOWNLOAD_DIR) {
  const manifest = await fetchPackageManifest(name)
  const versions = Object.keys(manifest.versions)
  const version: Version = vc ? semver.maxSatisfying(versions, vc) : manifest['dist-tags'].latest

  const path = `${dir}/${manifest.name}`
  mkdir(path, { recursive: true })

  const tarballUrl = manifest.versions[version].dist.tarball
  const tarResponse = await fetch(tarballUrl)
  return tarResponse.body?.pipe(tar.extract({ cwd: path, strip: 1 }))
}

{
  "name": "dev",
  "version": "1.0.0",
  "dependencies": {
    "axios": "0.2.0",
    "dayjs": "^1.0.0"
  },
  "devDependencies": {
    "chalk": "^4.0.0"
  }
}

axios@0.2.0 resolve to 0.2.0
dayjs@^1.0.0 resolve to 1.11.5
chalk@^4.0.0 resolve to 4.1.2

export function resolveLog(name: PackageName, vc: VersionConstraint, version: Version) {
  console.log(`${name}@${vc} resolve to ${version}`)
}

$ node ../dist/src/cli.js install vue
dayjs@^1.0.0 resolve to 1.11.5
chalk@^4.0.0 resolve to 4.1.2
axios@0.2.0 resolve to 0.2.0
vue@* resolve to 3.2.37

export async function collectDepsPackageList(
  packageName: PackageName,
  vc: VersionConstraint,
  packageList: Readonly<DependenciesMap>
) {
  // 破壊的変更を避けるために新しいパッケージ一覧を複製しておく
  let newPackageList = { ...packageList }

  // パッケージのマニフェストを取得する
  const manifest = await fetchPackageManifest(packageName)

  // バージョン制約から最新のバージョンを抜き出す
  const version = semver.maxSatisfying(Object.keys(manifest.versions), vc)
  if (!manifest.versions[version]) return packageList

  // インストールリストに自身を追加する
  newPackageList[packageName] = version
  resolveLog(packageName, vc, version)

  // 依存するパッケージに対して再帰的に同様の操作を行う
  if (manifest.versions[version].dependencies) {
    for (const [depName, depVersion] of Object.entries(manifest.versions[version].dependencies)) {
      newPackageList = await collectDepsPackageList(depName, depVersion, packageList)
    }
  }

  return newPackageList
}

$ node ../dist/src/cli.js install vue
vue@* resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-dom@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/runtime-dom@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/runtime-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/reactivity@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
csstype@^2.6.8 resolve to 2.6.20
@vue/compiler-sfc@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/compiler-dom@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/compiler-ssr@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-dom@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/reactivity-transform@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/shared@3.2.37 resolve to 3.2.37
estree-walker@^2.0.2 resolve to 2.0.2
magic-string@^0.25.7 resolve to 0.25.9
sourcemap-codec@^1.4.8 resolve to 1.4.8
@vue/shared@3.2.37 resolve to 3.2.37
estree-walker@^2.0.2 resolve to 2.0.2
magic-string@^0.25.7 resolve to 0.25.9
sourcemap-codec@^1.4.8 resolve to 1.4.8
source-map@^0.6.1 resolve to 0.6.1
postcss@^8.1.10 resolve to 8.4.16
nanoid@^3.3.4 resolve to 3.3.4
picocolors@^1.0.0 resolve to 1.0.0
source-map-js@^1.0.2 resolve to 1.0.2
@vue/server-renderer@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-ssr@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-dom@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1

const MANIFEST_CACHE: Record<PackageName, NpmManifest> = {}

export async function fetchPackageManifest(name: PackageName): Promise<NpmManifest> {
  if (!MANIFEST_CACHE[name]) {
    const manifestUrl = `${REPOSITORY_URL}/${name}`
    const manifest = (await fetch(manifestUrl).then(res => res.json())) as NpmManifest
    MANIFEST_CACHE[name] = manifest
  }
  return MANIFEST_CACHE[name]
}

{
  "name": "dev",
  "version": "1.0.0",
  "dependencies": {
    "vue": "^3.2.37"
  },
  "devDependencies": {
    "@vitejs/plugin-vue": "^3.0.1",
    "@vue/tsconfig": "^0.1.3",
    "typescript": "~4.7.4",
    "vite": "^3.0.4",
    "vue-tsc": "^0.39.5"
  }
}

<script setup lang="ts">
import { ref } from 'vue'

const inputValue = ref<string>('')
</script>

<template>
  <div>
    <input v-model="inputValue" />
    <p>{{ inputValue }}</p>
  </div>
</template>

$ npm install
$ node_modules/vite/bin/vite.js 

export function installLog(name: PackageName, version: Version) {
  console.log(`${name}@${version} installed`)
}

  // npm リポジトリから各パッケージのインストールを行う
  const installPromises = []
  installPromises.push(
    Object.keys(fullDependenciesMap).map(packageName => {
      return savePackageTarball(packageName, fullDependenciesMap[packageName])
    })
  )
  return Promise.all(installPromises)

$ node ../dist/cli.js install
vue@^3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-dom@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/runtime-dom@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/runtime-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/reactivity@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
csstype@^2.6.8 resolve to 2.6.20
@vue/compiler-sfc@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/compiler-dom@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/compiler-ssr@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-dom@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/reactivity-transform@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/shared@3.2.37 resolve to 3.2.37
estree-walker@^2.0.2 resolve to 2.0.2
magic-string@^0.25.7 resolve to 0.25.9
sourcemap-codec@^1.4.8 resolve to 1.4.8
@vue/shared@3.2.37 resolve to 3.2.37
estree-walker@^2.0.2 resolve to 2.0.2
magic-string@^0.25.7 resolve to 0.25.9
sourcemap-codec@^1.4.8 resolve to 1.4.8
source-map@^0.6.1 resolve to 0.6.1
postcss@^8.1.10 resolve to 8.4.16
nanoid@^3.3.4 resolve to 3.3.4
picocolors@^1.0.0 resolve to 1.0.0
source-map-js@^1.0.2 resolve to 1.0.2
@vue/server-renderer@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-ssr@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-dom@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vitejs/plugin-vue@^3.0.1 resolve to 3.0.3
@vue/tsconfig@^0.1.3 resolve to 0.1.3
typescript@~4.7.4 resolve to 4.7.4
vite@^3.0.4 resolve to 3.0.9
esbuild@^0.14.47 resolve to 0.14.54
@esbuild/linux-loong64@0.14.54 resolve to 0.14.54
esbuild-android-64@0.14.54 resolve to 0.14.54
esbuild-android-arm64@0.14.54 resolve to 0.14.54
esbuild-darwin-64@0.14.54 resolve to 0.14.54
esbuild-darwin-arm64@0.14.54 resolve to 0.14.54
esbuild-freebsd-64@0.14.54 resolve to 0.14.54
esbuild-freebsd-arm64@0.14.54 resolve to 0.14.54
esbuild-linux-32@0.14.54 resolve to 0.14.54
esbuild-linux-64@0.14.54 resolve to 0.14.54
esbuild-linux-arm@0.14.54 resolve to 0.14.54
esbuild-linux-arm64@0.14.54 resolve to 0.14.54
esbuild-linux-mips64le@0.14.54 resolve to 0.14.54
esbuild-linux-ppc64le@0.14.54 resolve to 0.14.54
esbuild-linux-riscv64@0.14.54 resolve to 0.14.54
esbuild-linux-s390x@0.14.54 resolve to 0.14.54
esbuild-netbsd-64@0.14.54 resolve to 0.14.54
esbuild-openbsd-64@0.14.54 resolve to 0.14.54
esbuild-sunos-64@0.14.54 resolve to 0.14.54
esbuild-windows-32@0.14.54 resolve to 0.14.54
esbuild-windows-64@0.14.54 resolve to 0.14.54
esbuild-windows-arm64@0.14.54 resolve to 0.14.54
postcss@^8.4.16 resolve to 8.4.16
nanoid@^3.3.4 resolve to 3.3.4
picocolors@^1.0.0 resolve to 1.0.0
source-map-js@^1.0.2 resolve to 1.0.2
resolve@^1.22.1 resolve to 1.22.1
is-core-module@^2.9.0 resolve to 2.10.0
has@^1.0.3 resolve to 1.0.3
function-bind@^1.1.1 resolve to 1.1.1
path-parse@^1.0.7 resolve to 1.0.7
supports-preserve-symlinks-flag@^1.0.0 resolve to 1.0.0
rollup@>=2.75.6 <2.77.0 || ~2.77.0 resolve to 2.77.3
fsevents@~2.3.2 resolve to 2.3.2
fsevents@~2.3.2 resolve to 2.3.2
vue-tsc@^0.39.5 resolve to 0.39.5
@volar/vue-language-core@0.39.5 resolve to 0.39.5
@volar/code-gen@0.39.5 resolve to 0.39.5
@volar/source-map@0.39.5 resolve to 0.39.5
@volar/source-map@0.39.5 resolve to 0.39.5
@volar/vue-code-gen@0.39.5 resolve to 0.39.5
@volar/code-gen@0.39.5 resolve to 0.39.5
@volar/source-map@0.39.5 resolve to 0.39.5
@volar/source-map@0.39.5 resolve to 0.39.5
@vue/compiler-core@^3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/compiler-dom@^3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/shared@^3.2.37 resolve to 3.2.37
@vue/compiler-sfc@^3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/compiler-dom@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/compiler-ssr@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-dom@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/reactivity-transform@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/shared@3.2.37 resolve to 3.2.37
estree-walker@^2.0.2 resolve to 2.0.2
magic-string@^0.25.7 resolve to 0.25.9
sourcemap-codec@^1.4.8 resolve to 1.4.8
@vue/shared@3.2.37 resolve to 3.2.37
estree-walker@^2.0.2 resolve to 2.0.2
magic-string@^0.25.7 resolve to 0.25.9
sourcemap-codec@^1.4.8 resolve to 1.4.8
source-map@^0.6.1 resolve to 0.6.1
postcss@^8.1.10 resolve to 8.4.16
nanoid@^3.3.4 resolve to 3.3.4
picocolors@^1.0.0 resolve to 1.0.0
source-map-js@^1.0.2 resolve to 1.0.2
@vue/reactivity@^3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@volar/vue-typescript@0.39.5 resolve to 0.39.5
@volar/code-gen@0.39.5 resolve to 0.39.5
@volar/source-map@0.39.5 resolve to 0.39.5
@volar/typescript-faster@0.39.5 resolve to 0.39.5
semver@^7.3.7 resolve to 7.3.7
lru-cache@^6.0.0 resolve to 6.0.0
yallist@^4.0.0 resolve to 4.0.0
@volar/vue-language-core@0.39.5 resolve to 0.39.5
@volar/code-gen@0.39.5 resolve to 0.39.5
@volar/source-map@0.39.5 resolve to 0.39.5
@volar/source-map@0.39.5 resolve to 0.39.5
@volar/vue-code-gen@0.39.5 resolve to 0.39.5
@volar/code-gen@0.39.5 resolve to 0.39.5
@volar/source-map@0.39.5 resolve to 0.39.5
@volar/source-map@0.39.5 resolve to 0.39.5
@vue/compiler-core@^3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/compiler-dom@^3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/shared@^3.2.37 resolve to 3.2.37
@vue/compiler-sfc@^3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/compiler-dom@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/compiler-ssr@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-dom@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/reactivity-transform@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
@vue/compiler-core@3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
@babel/parser@^7.16.4 resolve to 7.18.13
estree-walker@^2.0.2 resolve to 2.0.2
source-map@^0.6.1 resolve to 0.6.1
@vue/shared@3.2.37 resolve to 3.2.37
estree-walker@^2.0.2 resolve to 2.0.2
magic-string@^0.25.7 resolve to 0.25.9
sourcemap-codec@^1.4.8 resolve to 1.4.8
@vue/shared@3.2.37 resolve to 3.2.37
estree-walker@^2.0.2 resolve to 2.0.2
magic-string@^0.25.7 resolve to 0.25.9
sourcemap-codec@^1.4.8 resolve to 1.4.8
source-map@^0.6.1 resolve to 0.6.1
postcss@^8.1.10 resolve to 8.4.16
nanoid@^3.3.4 resolve to 3.3.4
picocolors@^1.0.0 resolve to 1.0.0
source-map-js@^1.0.2 resolve to 1.0.2
@vue/reactivity@^3.2.37 resolve to 3.2.37
@vue/shared@3.2.37 resolve to 3.2.37
typescript@4.7.4 installed
vite@3.0.9 installed
source-map@0.6.1 installed
vue@3.2.37 installed
estree-walker@2.0.2 installed
vue-tsc@0.39.5 installed
esbuild-freebsd-64@0.14.54 installed
sourcemap-codec@1.4.8 installed
magic-string@0.25.9 installed
esbuild-linux-mips64le@0.14.54 installed
esbuild@0.14.54 installed
esbuild-linux-ppc64le@0.14.54 installed
csstype@2.6.20 installed
picocolors@1.0.0 installed
esbuild-android-64@0.14.54 installed
nanoid@3.3.4 installed
esbuild-linux-32@0.14.54 installed
esbuild-windows-32@0.14.54 installed
esbuild-sunos-64@0.14.54 installed
@vue/compiler-sfc@3.2.37 installed
esbuild-darwin-arm64@0.14.54 installed
@vue/compiler-ssr@3.2.37 installed
@vue/shared@3.2.37 installed
@vue/compiler-core@3.2.37 installed
esbuild-linux-riscv64@0.14.54 installed
postcss@8.4.16 installed
esbuild-darwin-64@0.14.54 installed
@vue/runtime-core@3.2.37 installed
@babel/parser@7.18.13 installed
esbuild-freebsd-arm64@0.14.54 installed
has@1.0.3 installed
is-core-module@2.10.0 installed
path-parse@1.0.7 installed
yallist@4.0.0 installed
semver@7.3.7 installed
resolve@1.22.1 installed
esbuild-windows-64@0.14.54 installed
esbuild-netbsd-64@0.14.54 installed
esbuild-linux-s390x@0.14.54 installed
esbuild-linux-arm@0.14.54 installed
@volar/code-gen@0.39.5 installed
@volar/vue-language-core@0.39.5 installed
@vue/tsconfig@0.1.3 installed
@esbuild/linux-loong64@0.14.54 installed
@vue/server-renderer@3.2.37 installed
@vitejs/plugin-vue@3.0.3 installed
@volar/vue-code-gen@0.39.5 installed
@volar/vue-typescript@0.39.5 installed
@volar/source-map@0.39.5 installed
@vue/runtime-dom@3.2.37 installed
@vue/compiler-dom@3.2.37 installed
@volar/typescript-faster@0.39.5 installed
function-bind@1.1.1 installed
supports-preserve-symlinks-flag@1.0.0 installed
lru-cache@6.0.0 installed
source-map-js@1.0.2 installed
fsevents@2.3.2 installed
@vue/reactivity@3.2.37 installed
@vue/reactivity-transform@3.2.37 installed
esbuild-openbsd-64@0.14.54 installed
esbuild-android-arm64@0.14.54 installed
esbuild-windows-arm64@0.14.54 installed
esbuild-linux-arm64@0.14.54 installed
rollup@2.77.3 installed
esbuild-linux-64@0.14.54 installed

/**
 * 更新用の lock ファイルの内容で書き込み用
 */
const newLockFile: LockFile = {}

export async function addLockFile(packageName: PackageName, vc: VersionConstraint, version: Version) {
  const manifest = await fetchPackageManifest(packageName)
  const info = manifest.versions[version]
  newLockFile[`${packageName}@${vc}`] = {
    version,
    url: info.dist.tarball,
    shasum: info.dist.shasum,
    dependencies: info.dependencies || {}
  }
}

export async function savePackageTarball(name: PackageName, vc: VersionConstraint = '*') {
  const manifest = await fetchPackageManifest(name)
  const versions = Object.keys(manifest.versions)
  const version = semver.maxSatisfying(versions, vc)

  const path = `${DEFAULT_DOWNLOAD_DIR}/${manifest.name}`
  mkdir(path, { recursive: true })

  const tarballUrl = manifest.versions[version].dist.tarball
  const tarResponse = await fetch(tarballUrl)
  tarResponse.body?.pipe(tar.extract({ cwd: path, strip: 1 }))

  addLockFile(name, vc, version) // 追加
  installLog(name, version)
}

export async function writeLockFile() {
  const lockFileJson = JSON.stringify(newLockFile, null, 2)
  return writeFile(LOCK_FILE_PATH, lockFileJson)
}

{
  "estree-walker@2.0.2": {
    "version": "2.0.2",
    "url": "https://registry.npmjs.org/estree-walker/-/estree-walker-2.0.2.tgz",
    "shasum": "52f010178c2a4c117a7757cfe942adb7d2da4cac",
    "dependencies": {}
  },
  "sourcemap-codec@1.4.8": {
    "version": "1.4.8",
    "url": "https://registry.npmjs.org/sourcemap-codec/-/sourcemap-codec-1.4.8.tgz",
    "shasum": "ea804bd94857402e6992d05a38ef1ae35a9ab4c4",
    "dependencies": {}
  },
  "csstype@2.6.20": {
    "version": "2.6.20",
    "url": "https://registry.npmjs.org/csstype/-/csstype-2.6.20.tgz",
    "shasum": "9229c65ea0b260cf4d3d997cb06288e36a8d6dda",
    "dependencies": {}
  },
  "postcss@8.4.16": {
    "version": "8.4.16",
    "url": "https://registry.npmjs.org/postcss/-/postcss-8.4.16.tgz",
    "shasum": "33a1d675fac39941f5f445db0de4db2b6e01d43c",
    "dependencies": {
      "nanoid": "^3.3.4",
      "picocolors": "^1.0.0",
      "source-map-js": "^1.0.2"
    }
  },
  // 以下略
}

export async function readLockFile() {
  const buffer = await readFile(LOCK_FILE_PATH, 'utf8').catch(e => {
    if (e.code === 'ENOENT') return '{}'
    throw e
  })
  const lockFile = JSON.parse(buffer) as LockFile
  Object.assign(currentLockFile, lockFile)
  return lockFile
}

// 解決済みのパッケージ情報
type LockedPackageInfo = {
  version: Version
  url: string
  shasum: string
  dependencies: DependenciesMap
}

// 解決済みパッケージ情報一覧(≒ tiny-pm.lock)
type LockFile = {
  [dependency: `${PackageName}@${VersionConstraint}`]: LockedPackageInfo
}

export function readLockedPackageInfo(name: PackageName, vc: VersionConstraint): LockedPackageInfo | null {
  const packageInfo = currentLockFile[`${name}@${vc}`]
  if (packageInfo) {
    return {
      version: packageInfo.version,
      url: packageInfo.url,
      shasum: packageInfo.shasum,
      dependencies: packageInfo.dependencies
    }
  } else {
    return null
  }
}

async function resolvePackage(packageName: PackageName, vc: VersionConstraint): Promise<LockedPackageInfo | null> {
  // Lock ファイルに既に情報があればそれを利用する
  const lockedPackageInfo = readLockedPackageInfo(packageName, vc)
  if (lockedPackageInfo) return lockedPackageInfo

  // Lock ファイルに情報がなければ、パッケージマニフェストから取得する
  // TODO: ここで Lock ファイルの更新も必要？
  const manifest = await fetchPackageManifest(packageName)
  const version = semver.maxSatisfying(Object.keys(manifest.versions), vc)
  if (!manifest.versions[version]) return null

  resolveLog(packageName, vc, version)
  return {
    version,
    url: manifest.versions[version].dist.tarball,
    shasum: manifest.versions[version].dist.shasum,
    dependencies: manifest.versions[version].dependencies || {}
  }
}

$ node ../dist/cli.js install
[Resolve by manifest] axios@^0.27.0 to 0.27.2
[Resolve by manifest] follow-redirects@^1.14.9 to 1.15.1
[Resolve by manifest] form-data@^4.0.0 to 4.0.0
[Resolve by manifest] asynckit@^0.4.0 to 0.4.0
[Resolve by manifest] combined-stream@^1.0.8 to 1.0.8
[Resolve by manifest] delayed-stream@~1.0.0 to 1.0.0
[Resolve by manifest] mime-types@^2.1.12 to 2.1.35
[Resolve by manifest] mime-db@1.52.0 to 1.52.0
[Installed] axios@0.27.2
[Installed] follow-redirects@1.15.1
[Installed] form-data@4.0.0
[Installed] asynckit@0.4.0
[Installed] combined-stream@1.0.8
[Installed] delayed-stream@1.0.0
[Installed] mime-types@2.1.35
[Installed] mime-db@1.52.0

$ node ../dist/cli.js install
[Resolve by lockfile] axios@^0.27.0 to 0.27.2
[Resolve by lockfile] follow-redirects@^1.14.9 to 1.15.1
[Resolve by lockfile] form-data@^4.0.0 to 4.0.0
[Resolve by lockfile] asynckit@^0.4.0 to 0.4.0
[Resolve by lockfile] combined-stream@^1.0.8 to 1.0.8
[Resolve by lockfile] delayed-stream@~1.0.0 to 1.0.0
[Resolve by lockfile] mime-types@^2.1.12 to 2.1.35
[Resolve by lockfile] mime-db@1.52.0 to 1.52.0
[Installed] axios@0.27.2
[Installed] follow-redirects@1.15.1
[Installed] form-data@4.0.0
[Installed] asynckit@0.4.0
[Installed] combined-stream@1.0.8
[Installed] delayed-stream@1.0.0
[Installed] mime-types@2.1.35
[Installed] mime-db@1.52.0

/**
 * package.json を依存関係オブジェクトを用いて書き換える
 */
export async function writePackageJson(path: string, dependencyMap: PackageDependencyMap) {
  const data = await readFile(path)
  const currentJson = JSON.parse(data.toString())
  const newJson = {
    ...currentJson,
    dependencies: dependencyMap.dependencies,
    devDependencies: dependencyMap.devDependencies
  }
  if (Object.keys(newJson.dependencies).length === 0) delete newJson.dependencies
  if (Object.keys(newJson.devDependencies).length === 0) delete newJson.devDependencies
  return writeFile(path, JSON.stringify(newJson, null, 2))
}

/**
 * package.json を探索し、そのパスを返す
 */
export async function findPackageJsonPath() {
  const path = await findUp('package.json')
  if (!path) throw new Error('package.json not found')
  return path
}

 node ../dist/cli.js install axios

 node ../dist/cli.js install typescript --save-dev

{
  "name": "dev",
  "version": "1.0.0",
  "dependencies": {
    "axios": "*"
  },
  "devDependencies": {
    "typescript": "*"
  }
}

  // 追加インストールするパッケージを dependencies または devDependencies に追加する
  // バージョン指定がない場合は、最新バージョンを確認してそれを使用する
  // TODO: バージョン指定がある場合の対応
  for (const packageName of packageNames) {
    const latestPackageInfo = await resolvePackage(packageName, '*')
    const latestVersion = latestPackageInfo?.version
    if (!latestVersion) throw new Error(`Package not found: ${packageName}`)

    if (option.saveDev) {
      dependencyMap.devDependencies[packageName] = `^${latestVersion}`
    } else {
      dependencyMap.dependencies[packageName] = `^${latestVersion}`
    }
  }

{
  "name": "dev",
  "version": "1.0.0",
  "dependencies": {
    "axios": "^0.27.2"
  },
  "devDependencies": {
    "typescript": "^4.8.2"
  }
}

install axios

install axios@0.26.0

/**
 * パッケージの最新バージョンを返す
 */
export async function resolvePackageLatestVersion(packageName: string) {
  const latestPackageInfo = await resolvePackage(packageName, '*')
  if (!latestPackageInfo) throw new Error(`Package not found: ${packageName}`)
  return latestPackageInfo.version
}

  // 追加インストールするパッケージを dependencies または devDependencies に追加する
  // バージョン指定がない場合は、最新バージョンを確認してそれを使用する
  for (const packageName of packageNames) {
    const hasConstraint = packageName.includes('@')
    const name = hasConstraint ? packageName.split('@')[0] : packageName
    const constraint = hasConstraint ? packageName.split('@')[1] : `^${await resolvePackageLatestVersion(name)}`

    if (option.saveDev) {
      dependencyMap.devDependencies[name] = constraint
    } else {
      dependencyMap.dependencies[name] = constraint
    }
  }

$ node ../dist/cli.js install axios@0.26.0

{
  "name": "dev",
  "version": "1.0.0",
  "dependencies": {
    "axios": "0.26.0"
  }
}

{
  "name": "dev",
  "version": "1.0.0",
  "dependencies": {
    "webpack": "^5.74.0",
    "estraverse": "^3.0.0"
  }
}

$ find node_modules -name estraverse
node_modules/eslint-scope/node_modules/estraverse
node_modules/esrecurse/node_modules/estraverse
node_modules/estraverse

$ find node_modules -name estraverse
node_modules/estraverse

{
  "name": "dev",
  "version": "1.0.0",
  "dependencies": {
    "eslint-scope": "^5.0.0",
    "estraverse": "^3.0.0"
  }
}

$ node ../dist/cli.js install
[Resolve by manifest] eslint-scope@^5.0.0 to 5.1.1
[Resolve by manifest] esrecurse@^4.3.0 to 4.3.0
[Resolve by manifest] estraverse@^5.2.0 to 5.3.0
[Resolve by manifest] estraverse@^4.1.1 to 4.3.0
[Resolve by manifest] estraverse@^3.0.0 to 3.1.0
[Installed] eslint-scope@5.1.1
[Installed] estraverse@3.1.0
[Installed] esrecurse@4.3.0

{
  "eslint-scope@^5.0.0": {
    "version": "5.1.1",
    "url": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-5.1.1.tgz",
    "shasum": "e786e59a66cb92b3f6c1fb0d508aab174848f48c",
    "dependencies": {
      "esrecurse": "^4.3.0",
      "estraverse": "^4.1.1"
    }
  },
  "esrecurse@^4.3.0": {
    "version": "4.3.0",
    "url": "https://registry.npmjs.org/esrecurse/-/esrecurse-4.3.0.tgz",
    "shasum": "7ad7964d679abb28bee72cec63758b1c5d2c9921",
    "dependencies": {
      "estraverse": "^5.2.0"
    }
  },
  "estraverse@^5.2.0": {
    "version": "5.3.0",
    "url": "https://registry.npmjs.org/estraverse/-/estraverse-5.3.0.tgz",
    "shasum": "2eea5290702f26ab8fe5370370ff86c965d21123",
    "dependencies": {}
  },
  "estraverse@^4.1.1": {
    "version": "4.3.0",
    "url": "https://registry.npmjs.org/estraverse/-/estraverse-4.3.0.tgz",
    "shasum": "398ad3f3c5a24948be7725e83d11a7de28cdbd1d",
    "dependencies": {}
  },
  "estraverse@^3.0.0": {
    "version": "3.1.0",
    "url": "https://registry.npmjs.org/estraverse/-/estraverse-3.1.0.tgz",
    "shasum": "15e28a446b8b82bc700ccc8b96c78af4da0d6cba",
    "dependencies": {}
  }
}

  // 解決結果を Lock ファイルに書き出す
  addLockFile(packageName, vc, packageInfo.version)

  // インストールリストに自身を追加する
  packageList[packageName] = packageInfo.version

/**
 * パッケージのバージョン解決を再帰的に行い、依存パッケージの依存パッケージまで深さ優先で解決していく
 * @argument topLevelList node_modules 直下にインストール可能なパッケージリスト
 * @argument conflictedList バージョン衝突のため、直下でなく各パッケージ以下の node_modules にインストールするパッケージリスト
 * @argument dependencyStack 現在解決中のパッケージに依存するパッケージ名のスタック
 */
export async function collectDepsPackageList(
  name: PackageName,
  vc: VersionConstraint,
  rootDependenciesMap: Readonly<DependenciesMap>,
  topLevelList: DependenciesMap,
  conflictedList: ConflictedPackageInfo[],
  dependencyStack: PackageName[]
) {
  // 自身のパッケージ名を依存スタックに積み上げる
  dependencyStack.push(name)

  // 解決後のパッケージ情報を取得する
  const packageInfo = await resolvePackage(name, vc)

  // 解決結果を Lock ファイルに書き出す
  addLockFile(name, vc, packageInfo.version)

  // どこにインストールするかのヒント
  const topLevelExists = !!topLevelList[name]
  const isCompatibleToTopLevel = topLevelExists && semver.satisfies(topLevelList[name], vc)
  const isRootDependency = dependencyStack.length === 1

  // 1. 初出パッケージで、自身がルートからの依存であればトップレベルに追加
  if (!topLevelExists && isRootDependency) {
    topLevelList[name] = packageInfo.version
  }
  // 2. 初出パッケージで、ルートからの依存が存在しなければ自身をトップレベルに追加
  else if (!topLevelExists && !rootDependenciesMap[name]) {
    topLevelList[name] = packageInfo.version
  }
  // 3. 初出パッケージで、ルートからの依存が存在するが
  else if (!topLevelExists && rootDependenciesMap[name]) {
    const rootDependencyVersion = (await resolvePackage(name, rootDependenciesMap[name])).version
    // 3-1. 自身と互換性のあるバージョンであればスルー
    if (semver.satisfies(rootDependencyVersion, vc)) {
      // 何もしない
    }
    // 3-2. 自身と互換性がないバージョンであれば、衝突リストに追加
    else {
      conflictLog(name, vc, rootDependenciesMap[name])
      conflictedList.push({ name, version: packageInfo.version, parent: dependencyStack[dependencyStack.length - 2] })
    }
  }
  // 4. 既出パッケージで、自身と互換性のあるバージョンであればスルー
  else if (topLevelExists && isCompatibleToTopLevel) {
    // 何もしない
  }
  // 5. 既出パッケージで、自身と互換性がないバージョンであれば、衝突リストに追加
  else {
    conflictLog(name, vc, rootDependenciesMap[name])
    conflictedList.push({ name, version: packageInfo.version, parent: dependencyStack[dependencyStack.length - 2] })
  }

  // 自身が依存するパッケージに対して再帰的に同様の操作を行う
  for (const [depName, depVersion] of Object.entries(packageInfo.dependencies)) {
    await collectDepsPackageList(
      depName,
      depVersion,
      rootDependenciesMap,
      topLevelList,
      conflictedList,
      dependencyStack
    )
  }

  // 自身の解決は全て完了したのでスタックから取り除く
  dependencyStack.pop()
}

$ node ../dist/cli.js install
[Resolve by manifest] eslint-scope@^5.0.0 to 5.1.1
[Resolve by manifest] esrecurse@^4.3.0 to 4.3.0
[Resolve by manifest] estraverse@^5.2.0 to 5.3.0
[Resolve by manifest] estraverse@^3.0.0 to 3.1.0
[Conflict with root] estraverse@^5.2.0 is conflicted with ^3.0.0
[Resolve by manifest] estraverse@^4.1.1 to 4.3.0
[Resolve by manifest] estraverse@^3.0.0 to 3.1.0
[Conflict with root] estraverse@^4.1.1 is conflicted with ^3.0.0
[Resolve by manifest] estraverse@^3.0.0 to 3.1.0
[Installed] eslint-scope@5.1.1 > node_modules/eslint-scope
[Installed] esrecurse@4.3.0 > node_modules/esrecurse
[Installed] estraverse@3.1.0 > node_modules/estraverse
[Installed] estraverse@5.3.0 > node_modules/esrecurse/node_modules/estraverse
[Installed] estraverse@4.3.0 > node_modules/eslint-scope/node_modules/estraverse

$ find node_modules -name estraverse
node_modules/eslint-scope/node_modules/estraverse
node_modules/esrecurse/node_modules/estraverse
node_modules/estraverse

$ sudo npm install --global sasaki-package-manager

$ which sasaki-pm
/usr/local/bin/sasaki-pm

$ sasaki-pm
Usage: sasaki-pm [options] [command]

Options:
  --production               install only dependencies (not devDependencies)
  --save-dev                 Package will appear in your devDependencies
  -h, --help                 display help for command

Commands:
  install [packageNames...]
  help [command]             display help for command

$ sasaki-pm install axios
[Resolve by manifest] axios@* to 0.27.2
[Resolve by manifest] axios@^0.27.2 to 0.27.2
[Resolve by manifest] follow-redirects@^1.14.9 to 1.15.1
[Resolve by manifest] form-data@^4.0.0 to 4.0.0
[Resolve by manifest] asynckit@^0.4.0 to 0.4.0
[Resolve by manifest] combined-stream@^1.0.8 to 1.0.8
[Resolve by manifest] delayed-stream@~1.0.0 to 1.0.0
[Resolve by manifest] mime-types@^2.1.12 to 2.1.35
[Resolve by manifest] mime-db@1.52.0 to 1.52.0
[Installed] axios@0.27.2 > node_modules/axios
[Installed] follow-redirects@1.15.1 > node_modules/follow-redirects
[Installed] form-data@4.0.0 > node_modules/form-data
[Installed] asynckit@0.4.0 > node_modules/asynckit
[Installed] combined-stream@1.0.8 > node_modules/combined-stream
[Installed] delayed-stream@1.0.0 > node_modules/delayed-stream
[Installed] mime-types@2.1.35 > node_modules/mime-types
[Installed] mime-db@1.52.0 > node_modules/mime-db

$ cat sasaki-pm.lock.json 
{
  "asynckit@^0.4.0": {
    "version": "0.4.0",
    "url": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz",
    "shasum": "c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79",
    "dependencies": {}
  },
  "axios@^0.27.2": {
    "version": "0.27.2",
    "url": "https://registry.npmjs.org/axios/-/axios-0.27.2.tgz",
    "shasum": "207658cc8621606e586c85db4b41a750e756d972",
    "dependencies": {
      "follow-redirects": "^1.14.9",
      "form-data": "^4.0.0"
    }
  },
  "combined-stream@^1.0.8": {
    "version": "1.0.8",
    "url": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz",
    "shasum": "c3d45a8b34fd730631a110a8a2520682b31d5a7f",
    "dependencies": {
      "delayed-stream": "~1.0.0"
    }
  },
  "delayed-stream@~1.0.0": {
    "version": "1.0.0",
    "url": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz",
    "shasum": "df3ae199acadfb7d440aaae0b29e2272b24ec619",
    "dependencies": {}
  },
  "follow-redirects@^1.14.9": {
    "version": "1.15.1",
    "url": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.1.tgz",
    "shasum": "0ca6a452306c9b276e4d3127483e29575e207ad5",
    "dependencies": {}
  },
  "form-data@^4.0.0": {
    "version": "4.0.0",
    "url": "https://registry.npmjs.org/form-data/-/form-data-4.0.0.tgz",
    "shasum": "93919daeaf361ee529584b9b31664dc12c9fa452",
    "dependencies": {
      "asynckit": "^0.4.0",
      "combined-stream": "^1.0.8",
      "mime-types": "^2.1.12"
    }
  },
  "mime-db@1.52.0": {
    "version": "1.52.0",
    "url": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
    "shasum": "bbabcdc02859f4987301c856e3387ce5ec43bf70",
    "dependencies": {}
  },
  "mime-types@^2.1.12": {
    "version": "2.1.35",
    "url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
    "shasum": "381a871b62a734450660ae3deee44813f70d959a",
    "dependencies": {
      "mime-db": "1.52.0"
    }
  }
}