/* eslint-disable standard/no-callback-literal */
module.exports = unpublish
const BB = require('bluebird')
const figgyPudding = require('figgy-pudding')
const libaccess = require('libnpm/access')
const libunpub = require('libnpm/unpublish')
const log = require('npmlog')
const npa = require('npm-package-arg')
const npm = require('./npm.js')
const npmConfig = require('./config/figgy-config.js')
const npmFetch = require('npm-registry-fetch')
const otplease = require('./utils/otplease.js')
const output = require('./utils/output.js')
const path = require('path')
const readJson = BB.promisify(require('read-package-json'))
const usage = require('./utils/usage.js')
const whoami = BB.promisify(require('./whoami.js'))
'\nnpm unpublish [<@scope>/]<pkg>@<version>' +
'\nnpm unpublish [<@scope>/]<pkg> --force'
throw Object.assign(new Error(`Usage: ${unpublish.usage}`), {
const UnpublishConfig = figgyPudding({
unpublish.completion = function (cliOpts, cb) {
if (cliOpts.conf.argv.remain.length >= 3) return cb()
whoami([], true).then(username => {
if (!username) { return [] }
const opts = UnpublishConfig(npmConfig())
return libaccess.lsPackages(username, opts).then(access => {
// do a bit of filtering at this point, so that we don't need
// to fetch versions for more than one thing, but also don't
// accidentally a whole project.
let pkgs = Object.keys(access)
if (!cliOpts.partialWord || !pkgs.length) { return pkgs }
const pp = npa(cliOpts.partialWord).name
pkgs = pkgs.filter(p => !p.indexOf(pp))
if (pkgs.length > 1) return pkgs
return npmFetch.json(npa(pkgs[0]).escapedName, opts).then(doc => {
const vers = Object.keys(doc.versions)
return vers.map(v => `${pkgs[0]}@${v}`)
function unpublish (args, cb) {
if (args.length > 1) return cb(unpublish.usage)
const spec = args.length && npa(args[0])
const opts = UnpublishConfig(npmConfig())
const version = spec.rawSpec
log.silly('unpublish', 'args[0]', args[0])
log.silly('unpublish', 'spec', spec)
if (!version && !opts.force) {
throw Object.assign(new Error(
'Refusing to delete entire project.\n' +
'Run with --force to do this.\n' +
if (!spec || path.resolve(spec.name) === npm.localPrefix) {
// if there's a package.json in the current folder, then
// read the package name and version out of that.
const cwdJson = path.join(npm.localPrefix, 'package.json')
return readJson(cwdJson).then(data => {
log.verbose('unpublish', data)
return otplease(opts, opts => {
return libunpub(npa.resolve(data.name, data.version), opts.concat(data.publishConfig))
if (err && err.code !== 'ENOENT' && err.code !== 'ENOTDIR') {
return otplease(opts, opts => libunpub(spec, opts))
if (!opts.silent && opts.loglevel !== 'silent') {
spec.type === 'version' ? `@${spec.rawSpec}` : ''
err => err.code === 'EUSAGE' ? cb(err.message) : cb(err)