awk " function fail_json(message) { print message > \"/dev/stderr\" exit 2 } function skip_whitespace( c) { while (json_pos <= json_length) { c = substr(json_text, json_pos, 1) if (c == \" \" || c == \"\\t\" || c == \"\\r\" || c == \"\\n\") { json_pos++ } else { return } } } function parse_string( result, c, escaped, hex, code, i) { skip_whitespace() if (substr(json_text, json_pos, 1) != \"\\\"\") { fail_json(\"expected JSON string\") } json_pos++ while (json_pos <= json_length) { c = substr(json_text, json_pos, 1) json_pos++ if (c == \"\\\"\") { return result } if (c == \"\\\\\") { if (json_pos > json_length) { fail_json(\"unterminated JSON escape\") } escaped = substr(json_text, json_pos, 1) json_pos++ if (escaped == \"\\\"\" || escaped == \"\\\\\" || escaped == \"/\") { result = result escaped } else if (escaped == \"b\" || escaped == \"f\" || escaped == \"n\" || escaped == \"r\" || escaped == \"t\") { # Keep control escapes printable so extracted values cannot inject lines. result = result \"\\\\\" escaped } else if (escaped == \"u\") { hex = substr(json_text, json_pos, 4) if (length(hex) != 4 || hex ~ /[^0-9A-Fa-f]/) { fail_json(\"invalid JSON unicode escape\") } code = 0 for (i = 1; i <= 4; i++) { code = code * 16 + index(\"0123456789abcdef\", tolower(substr(hex, i, 1))) - 1 } # Decode printable ASCII once, including all SRI characters and # inspected keys. Keep other escapes printable so control characters # cannot inject lines into the extracted metadata. if (code >= 32 && code <= 126) { result = result sprintf(\"%c\", code) } else { result = result \"\\\\u\" hex } json_pos += 4 } else { fail_json(\"invalid JSON escape\") } } else { if (c ~ /[[:cntrl:]]/) { fail_json(\"unescaped control character in JSON string\") } result = result c } } fail_json(\"unterminated JSON string\") } function is_object_key(depth, key) { return path_kind[depth] == \"object-key\" && path_key[depth] == key } function remember_string(depth, value) { if (depth == 2 && is_object_key(1, \"dist\") && is_object_key(2, \"tarball\")) { if (++tarball_count != 1) fail_json(\"duplicate dist.tarball\") tarball = value } else if (depth == 2 && is_object_key(1, \"dist\") && is_object_key(2, \"integrity\")) { integrity = value } else if (depth == 4 && is_object_key(1, \"dist\") && is_object_key(2, \"attestations\") && is_object_key(3, \"provenance\") && is_object_key(4, \"predicateType\")) { if (++predicate_count != 1) fail_json(\"duplicate provenance predicateType\") predicate_type = value } else if (depth == 1 && is_object_key(1, \"error\")) { if (++error_count != 1) fail_json(\"duplicate registry error\") registry_error = value } } function parse_number( start, value, c) { start = json_pos while (json_pos <= json_length) { c = substr(json_text, json_pos, 1) if (c ~ /[-+0-9.eE]/) json_pos++ else break } value = substr(json_text, start, json_pos - start) if (value !~ /^-?(0|[1-9][0-9]*)(\\.[0-9]+)?([eE][+-]?[0-9]+)?\$/) { fail_json(\"invalid JSON number\") } } function parse_literal(literal) { if (substr(json_text, json_pos, length(literal)) != literal) { fail_json(\"invalid JSON literal\") } json_pos += length(literal) } function parse_array(depth, c, child_depth) { json_pos++ skip_whitespace() if (substr(json_text, json_pos, 1) == \"]\") { json_pos++ return } while (1) { child_depth = depth + 1 path_kind[child_depth] = \"array-item\" path_key[child_depth] = \"\" parse_value(child_depth) delete path_kind[child_depth] delete path_key[child_depth] skip_whitespace() c = substr(json_text, json_pos, 1) if (c == \"]\") { json_pos++ return } if (c != \",\") fail_json(\"expected comma in JSON array\") json_pos++ } } function parse_object(depth, key, child_depth, c, object_id) { json_pos++ object_id = ++object_count skip_whitespace() if (substr(json_text, json_pos, 1) == \"}\") { json_pos++ return } while (1) { key = parse_string() if ((object_id SUBSEP key) in object_keys) { fail_json(\"duplicate key in JSON object\") } object_keys[object_id SUBSEP key] = 1 skip_whitespace() if (substr(json_text, json_pos, 1) != \":\") { fail_json(\"expected colon in JSON object\") } json_pos++ child_depth = depth + 1 path_kind[child_depth] = \"object-key\" path_key[child_depth] = key parse_value(child_depth) delete path_kind[child_depth] delete path_key[child_depth] skip_whitespace() c = substr(json_text, json_pos, 1) if (c == \"}\") { json_pos++ return } if (c != \",\") fail_json(\"expected comma in JSON object\") json_pos++ } } function parse_value(depth, c, value) { skip_whitespace() c = substr(json_text, json_pos, 1) if (c == \"{\") { parse_object(depth) } else if (c == \"[\") { parse_array(depth) } else if (c == \"\\\"\") { value = parse_string() remember_string(depth, value) } else if (c == \"t\") { parse_literal(\"true\") } else if (c == \"f\") { parse_literal(\"false\") } else if (c == \"n\") { parse_literal(\"null\") } else if (c == \"-\" || c ~ /[0-9]/) { parse_number() } else { fail_json(\"invalid JSON value\") } } { json_text = json_text \$0 \"\\n\" } END { json_length = length(json_text) json_pos = 1 parse_value(0) skip_whitespace() if (json_pos <= json_length) fail_json(\"unexpected data after JSON value\") print tarball print predicate_type print registry_error print integrity } "

sed -n 1p

sed -n 2p

sed -n 3p

sed -n 4p

mktemp

curl -fsSL "https://registry.npmjs.org/@voidzero-dev/vite-plus-cli-linux-x64-gnu/-/vite-plus-cli-linux-x64-gnu-1.3.0.tgz" -o /tmp/tmp.bWvJvEaswy

base64 -d

tar xzf /tmp/tmp.bWvJvEaswy -C /tmp/tmp.vc3eJCyt42 "--strip-components=1"

/tmp/tmp.vc3eJCyt42/vp --help

/tmp/tmp.vc3eJCyt42/vp