Lock-down bower.json to the currently installed package versions (semi shrinkwrap)

readme.md

This script will:

• Expand the bower.json file to include all installed dependencies, including indirect ones.

• Configure the dependencies field to use exact revision hashes of the currently installed versions.

• Configure the resolutions field to the currently installed versions, too.

Requires jq (available on the Ubuntu repos via apt install jq).

bower-lock-versions.sh

cp bower.json bower.json.old
cat bower.json.old | \
  jq "$(cat bower_components/*/.bower.json | \
    jq -r '".dependencies[\"" + .name + "\"]=\"" + (._source+"#"+._resolution.commit) + "\"|.resolutions[\"" + .name + "\"]=\"" + ._resolution.commit + "\""' |paste -d'|' -s -)" \
  > bower.json

You can see the effects of running this script here:

cobit-wallet/cobit@3197cf2#diff-0a08a7565aba4405282251491979bb6b