Health report of package.json for CI use

.env

@@ -0,0 +1 @@
+DENO_DIR=.cache

.github/workflows/ci.yml

@@ -0,0 +1,102 @@
+name: CI
+on:
+  pull_request:
+  workflow_dispatch:
+
+
+env:
+  DENO_DIR: ./cache
+
+jobs:
+  health:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - uses: denoland/setup-deno@v1
+        with:
+          deno-version: v1.x
+
+      - name: Cache Deno dependencies 
+        uses: actions/cache@v3
+        with:
+          path: ${{ env.DENO_DIR }}
+          key: ${{ hashFiles('lock.json') }}
+
+      - name: Format
+        run: deno fmt src --check
+
+      - name: Lint
+        run: deno lint src
+
+      - name: Test
+        run: deno test src --allow-net=unpkg.com
+
+  working_package:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - uses: denoland/setup-deno@v1
+        with:
+          deno-version: v1.x
+
+      - name: Cache Deno dependencies 
+        uses: actions/cache@v3
+        with:
+          path: ${{ env.DENO_DIR }}
+          key: ${{ hashFiles('lock.json') }}
+
+      - run: |
+          deno run \
+            --allow-net=unpkg.com \
+            --allow-read=. \
+            src/main.ts \
+            fixtures/package_valid.json  \
+            --verbose --cache
+
+  failing_peer:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - uses: denoland/setup-deno@v1
+        with:
+          deno-version: v1.x
+
+      - name: Cache Deno dependencies 
+        uses: actions/cache@v3
+        with:
+          path: ${{ env.DENO_DIR }}
+          key: ${{ hashFiles('lock.json') }}
+
+      - run: |
+          deno run \
+            --allow-net=unpkg.com \
+            --allow-read=. \
+            src/main.ts \
+            fixtures/package.json  \
+            --verbose --cache --errors=7
+
+  failing_duplicates:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - uses: denoland/setup-deno@v1
+        with:
+          deno-version: v1.x
+
+      - name: Cache Deno dependencies 
+        uses: actions/cache@v3
+        with:
+          path: ${{ env.DENO_DIR }}
+          key: ${{ hashFiles('lock.json') }}
+
+      - run: |
+          deno run \
+            --allow-net=unpkg.com \
+            --allow-read=. \
+            src/main.ts \
+            fixtures/package_duplicate.json  \
+            --verbose --cache --errors=3

.gitignore

@@ -0,0 +1 @@
+.cache

.vscode/settings.json

@@ -0,0 +1,9 @@
+{
+  "deno.enable": true,
+  "deno.unstable": true,
+  "editor.defaultFormatter": "denoland.vscode-deno",
+  "[typescript]": {
+    "editor.defaultFormatter": "denoland.vscode-deno"
+  },
+  "deno.suggest.completeFunctionCalls": true
+}

README.md

@@ -1,2 +1,13 @@
 # actions-npm-dependencies
+
 Validate your NPM dependencies without installing Node (WIP)
+
+## Todo
+
+- [x] Make it functional and composable
+- [x] Handle peer dependencies
+- [ ] Handle lock files? (probably not)
+- [x] Great error messaging
+- [ ] Investigate direct dependencies of dependencies, which may have peers
+      themselves
+- [ ] Give insight into possible resolution steps, including intersects

deno.jsonc

@@ -0,0 +1,6 @@
+{
+  "compilerOptions": {
+    "noUncheckedIndexedAccess": true,
+    "lib": ["dom", "deno.ns"]
+  }
+}

fixtures/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "npm-dependencies",
+  "version": "0.0.1",
+  "dependencies": {
+    "@types/node": "~18.11",
+    "@guardian/source-foundations": "8.0.0",
+    "@guardian/core-web-vitals": "2.0.2"
+  },
+  "devDependencies": {
+    "@guardian/libs": "^12",
+    "@guardian/ab-react": "^2.0.1"
+  }
+}

fixtures/package_duplicate.json

@@ -0,0 +1,11 @@
+{
+  "name": "npm-dependencies-duplicate",
+  "version": "0.0.2",
+  "dependencies": {
+    "@guardian/source-foundations": "8.0.0",
+    "@guardian/libs": "^12"
+  },
+  "devDependencies": {
+    "@guardian/libs": "^12"
+  }
+}

fixtures/package_typescript.json

@@ -0,0 +1,12 @@
+{
+  "name": "npm-dependencies-typescript",
+  "version": "0.0.1",
+  "dependencies": {
+    "@guardian/source-foundations": "8.0.0"
+  },
+  "devDependencies": {
+    "typescript": "^4.2.4",
+    "@guardian/libs": "^12",
+    "@guardian/ab-react": "^2.0.1"
+  }
+}

fixtures/package_valid.json

@@ -0,0 +1,17 @@
+{
+  "name": "npm-dependencies",
+  "version": "0.0.1",
+  "dependencies": {
+    "@guardian/ab-core": "2.0.0",
+    "@guardian/core-web-vitals": "2.0.2",
+    "@guardian/source-foundations": "8.0.0",
+    "react": "^16.13.1",
+    "react-dom": "^16.13.1",
+    "tslib": "^2.4.1",
+    "web-vitals": "^2.0.1"
+  },
+  "devDependencies": {
+    "@guardian/libs": "^12",
+    "@guardian/ab-react": "^2.0.1"
+  }
+}