Clobber .package-lock.json files

.gitignore

@@ -0,0 +1 @@
+**/.package-lock.json

index.js

@@ -1,12 +1,14 @@
 module.exports = licensee
 
-var blueOakList = require('@blueoak/list')
 var Arborist = require('@npmcli/arborist')
+var blueOakList = require('@blueoak/list')
 var correctLicenseMetadata = require('correct-license-metadata')
+var fs = require('fs')
 var has = require('has')
 var npmLicenseCorrections = require('npm-license-corrections')
 var osi = require('spdx-osi')
 var parse = require('spdx-expression-parse')
+var joinPath = require('path').join
 var satisfies = require('semver').satisfies
 var spdxAllowed = require('spdx-whitelisted')
 
@@ -33,18 +35,29 @@ function licensee (configuration, path, callback) {
   ) {
     callback(new Error('No licenses or packages allowed.'))
   } else {
-    var arborist = new Arborist({ path })
-    arborist.loadActual()
-      .catch(function (error) {
-        return callback(error)
-      })
-      .then(function (tree) {
-        var children = Array.from(tree.children.values())
-        if (configuration.filterPackages) {
-          children = configuration.filterPackages(children)
-        }
-        callback(null, findIssues(configuration, children, []))
-      })
+    // Delete node_modules/.package-lock.json, Arborist/npm's
+    // on-disk cache of the resolved package tree, if
+    // present. When this is present, it may or may
+    // not include license metadata for packages. See
+    // https://github.com/jslicense/licensee.js/issues/64#issuecomment-1145256328=
+    fs.rm(
+      joinPath(path, 'node_modules', '.package-lock.json'),
+      { force: true },
+      function (/* ignore errors */) {
+        var arborist = new Arborist({ path })
+        arborist.loadActual()
+          .catch(function (error) {
+            return callback(error)
+          })
+          .then(function (tree) {
+            var children = Array.from(tree.children.values())
+            if (configuration.filterPackages) {
+              children = configuration.filterPackages(children)
+            }
+            callback(null, findIssues(configuration, children, []))
+          })
+      }
+    )
   }
 }
 

tests/out-of-allowed-range/test.js

@@ -10,8 +10,8 @@ tap.equal(
     'mit-licensed@1.0.0',
     '  NOT APPROVED',
     '  Terms: MIT',
-    '  Repository: git+https://github.com/jslicense/mit-licensed.js.git',
-    '  Homepage: https://github.com/jslicense/mit-licensed.js#readme',
+    '  Repository: jslicense/mit-licensed.js',
+    '  Homepage: None listed',
     '  Author: Kyle E. Mitchell <kyle@kemitchell.com> (https://kemitchell.com/)',
     '  Contributors: None listed'
   ].join('\n')

tests/unlicensed-subdependency/test.js

@@ -10,16 +10,16 @@ tap.equal(
     'mit-licensed-depends-on-not-licensed@1.0.1',
     '  NOT APPROVED',
     '  Terms: MIT',
-    '  Repository: git+https://github.com/jslicense/mit-licensed-depends-on-not-licensed.js.git',
-    '  Homepage: https://github.com/jslicense/mit-licensed-depends-on-not-licensed.js#readme',
+    '  Repository: jslicense/mit-licensed-depends-on-not-licensed.js',
+    '  Homepage: None listed',
     '  Author: Kyle E. Mitchell <kyle@kemitchell.com> (https://kemitchell.com/)',
     '  Contributors: None listed',
     '',
     'not-licensed@1.0.0',
     '  NOT APPROVED',
     '  Terms: Invalid license metadata',
-    '  Repository: git+https://github.com/jslicense/not-licensed.js.git',
-    '  Homepage: https://github.com/jslicense/not-licensed.js#readme',
+    '  Repository: jslicense/not-licensed.js',
+    '  Homepage: None listed',
     '  Author: Kyle E. Mitchell <kyle@kemitchell.com> (https://kemitchell.com/)',
     '  Contributors: None listed'
   ].join('\n')