From 02779dbd9a9a728dbea5c770155be897924a3963 Mon Sep 17 00:00:00 2001
From: chee <chee@snoot.club>
Date: Tue, 28 May 2019 20:22:10 +0100
Subject: [PATCH] Add a warning if the user is trying to use lockspot in
 postinstall

---
 index.js | 27 ++++++++++++++++++++++++---
 1 file changed, 24 insertions(+), 3 deletions(-)

diff --git a/index.js b/index.js
index 1f6edfb..d77c160 100755
--- a/index.js
+++ b/index.js
@@ -2,17 +2,38 @@
 import path from "path"
 import yargs from "yargs"
 
+let lifecycleWarningMessage = `
+Hey! it looks like you're running lockspot in the "postinstall" or "install"
+hook! this can create some confusion, because the package-lock may not have been
+generated yet!
+
+to prevent this, you can use the "postshrinkwrap" lifecycle hook instead, like
+this:
+
+"scripts": {
+	"postshrinkwrap": "lockspot ${process.argv.slice(2).join(' ')}"
+}
+
+See this issue for further info: https://github.com/npm/npm/issues/18798
+`
+
+switch (process.env.npm_lifecycle_event) {
+	case "postinstall":
+	case "install": {
+		process.stderr.write(lifecycleWarningMessage)
+	}
+}
+
 let commandDir = path.resolve(__dirname, "commands")
 
 yargs
 	.option("file", {
 		describe: "the package-lock.json to operate on",
-		type: "string"
+		type: "string",
 	})
 	.commandDir(commandDir)
 	.demandCommand()
 	.help()
 	.epilogue("💖 🐕")
 	.showHelpOnFail(false)
-	.strict()
-	.argv
+	.strict().argv