Mimic npm 6 --parseable with npm 8 json output

formatJson.js

// npm audit --json | node formatJson.js
const fs = require('fs');

function findDependencyPath(json, moduleName) {
  if (!json.vulnerabilities[moduleName].isDirect
    && json.vulnerabilities[moduleName].effects.length) {
    return `${findDependencyPath(json, json.vulnerabilities[moduleName].effects[0])}>${moduleName}`
  }
  return moduleName;
}

function main() {
  const jsonData = fs.readFileSync(0);
  const json = JSON.parse(jsonData);

  for (const vulnerabilityName of Object.keys(json.vulnerabilities)) {
    const vulnerability = json.vulnerabilities[vulnerabilityName];

    for (const via of vulnerability.via) {
      if (typeof via === 'object') {
        const dependencyPath = findDependencyPath(json, vulnerabilityName);
        console.log(
          `review\t${vulnerabilityName}\t${via.severity}\t${via.range}\t${via.title}\t${via.url}\t${dependencyPath}`
        );
      }
    }
  }
}

main();