fix(query-selector): don't look up private packages on :outdated

npm · Feb 27, 2024 · ed17276 · ed17276
1 parent 686a622
commit ed17276
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/workspaces/arborist/lib/query-selector-all.js b/workspaces/arborist/lib/query-selector-all.js
@@ -445,6 +445,11 @@ class Results {
         return false
       }
 
+      // private packages can't be published, skip them
+      if (node.package.private) {
+        return false
+      }
+
       // we cache the promise representing the full versions list, this helps reduce the
       // number of requests we send by keeping population of the cache in a single tick
       // making it less likely that multiple requests for the same package will be inflight