Creates a fake package.json for sending to NSP (adds ability to exclude packages using `exclusions: []` in .nsprc)

fake_nsp_package.js

#!/usr/bin/env node

const
  resolve = require('path').resolve,

  loadJSON = function (file) {
    return JSON.parse(require('fs').readFileSync(file).toString());
  },

  dependencySources = ['dependencies', 'devDependencies', 'optionalDependencies', 'peerDependencies',
    'bundledDependencies'];

var p = '',
  packageData,
  nsprc,
  fakePackage = {
    name: 'nsp-fake'
  };

// extract the current source path
process.argv[2] && (p = process.argv[2].replace(/\/?package\.json$/, ''));
!p && (p = '.');

// extract data from package and nsprc
packageData = loadJSON(resolve(p + '/package.json'));
try {
  nsprc = loadJSON(resolve(p + '/.nsprc'));
}
catch (e) {
  nsprc = {};
}

!Array.isArray(nsprc.exclusions) && (nsprc.exclusions = []);

// copy all dependencies to fake data and exclude exceptions
dependencySources.forEach(function (src) {
  packageData[src] && (fakePackage[src] = {}) && Object.keys(packageData[src]).forEach(function (dep) {
    nsprc.exclusions.indexOf(dep) === -1 && (fakePackage[src][dep] = packageData[src][dep]);
  });
});

// stdout
process.stdout.write(JSON.stringify(fakePackage, 0, 2) + '\n');

The script simply makes a temporary package.json for use with nsp. Usage in any script is simple:

FAKE_NSP_PATH=".tmp/nsp";

[ -d "$FAKE_NSP_PATH" ] && rm -rf "$FAKE_NSP_PATH";
mkdir -p "$FAKE_NSP_PATH";
./scripts/test/fake_nsp_package.js > "$FAKE_NSP_PATH/package.json";

pushd "$FAKE_NSP_PATH" &>/dev/null
nsp check;
popd &>/dev/null

The .nsprc can contain exceptions and exclusions.

{
  "exclusions": ["my-package-to-ignore"]
}

As a bonus, it also masks privacy by not sending additional details of package.json