rubion 0.3.0 → 0.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f3dc20ad2e0d8a10c9819577c5370327e860d1406b866fa02504e472dbb1e673
-  data.tar.gz: b7954923cc22c872f7a20520db5bf2496af0615886978d2701188357b1e3cdf2
+  metadata.gz: c51023aed1ba275593e8bc5c783d0ee512724b48128ed96d68e433ac7df16f85
+  data.tar.gz: e31637a3c2be1e60c7e426049d37e6173e5f8a36093a81f53391807538099b4d
 SHA512:
-  metadata.gz: c8997bc21f73e51e7e904e8372fd779d85f5b162ff0d7b7187ce4136571343913d6362d61a2cb2839d3c8333f91b3af8724192a6b7bff9ae361c357975d8dce6
-  data.tar.gz: 8e18d1257ef3cc883c7dba88355c3c7928c60f31bb17d20135b19954ad4ac055b2aeb21338d9453156959330ad3432aa36ab2e7772c315ec9bc8bb81a9946ab2
+  metadata.gz: 4ff1d29b61cac762f306b46751f67c88236575d99323e801021d776fd3b8770685e8821a001bae1c5148d53c4b1884f5dc0952ebbbfef1589b2213ef9f3cad96
+  data.tar.gz: 23b22a540c176ed00439654959e56f414ebb25fb5c2f8ec0487fad4182d63c4d07ed57be5dda1ffae786f642f277ae86fe604d741b7e7c58fbeee3cbf13bf9a7

data/Gemfile

@@ -9,3 +9,5 @@ gem "rake", "~> 13.0"
 gem "rspec", "~> 3.0"
 gem "rubocop", "~> 1.21"
 
+
+

data/LICENSE

@@ -20,3 +20,5 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
+
+

data/README.md

@@ -1,13 +1,13 @@
 # 🔒 Rubion
 
-**Rubion** is a security and version scanner for Ruby and JavaScript projects. It helps you identify vulnerabilities and outdated dependencies in your Ruby gems and NPM packages.
+**Rubion** is a security and version scanner for Ruby and JavaScript projects. It helps you identify vulnerabilities and outdated dependencies in your Ruby gems and NPM/JavaScript packages.
 
 ## Features
 
 - 📛 **Gem Vulnerabilities**: Scans for known security vulnerabilities in Ruby gems using `bundle-audit`
 - 📦 **Gem Versions**: Identifies outdated Ruby gems with release dates and version counts
-- 📛 **Package Vulnerabilities**: Scans for known security vulnerabilities in NPM packages using `npm audit`
-- 📦 **Package Versions**: Identifies outdated NPM packages with release dates and version counts
+- 📛 **Package Vulnerabilities**: Scans for known security vulnerabilities in NPM/JavaScript packages using `npm audit` or `yarn audit`
+- 📦 **Package Versions**: Identifies outdated NPM/JavaScript packages with release dates and version counts
 - 📊 **Beautiful Reports**: Organized table output with severity icons (🔴 Critical, 🟠 High, 🟡 Medium, 🟢 Low, ⚪ Unknown)
 - 🚀 **Fast & Efficient**: Parallel API processing (10 concurrent threads) for quick results
 - ⚡ **Incremental Output**: Shows gem results immediately, then scans packages
@@ -44,8 +44,8 @@ rubion scan
 This will scan your project for:
 - Ruby gem vulnerabilities (if `Gemfile.lock` exists)
 - Outdated Ruby gems with release dates
-- NPM package vulnerabilities (if `package.json` exists)
-- Outdated NPM packages with release dates
+- NPM/JavaScript package vulnerabilities (if `package.json` exists)
+- Outdated NPM/JavaScript packages with release dates
 
 ### Scan options
 
@@ -126,9 +126,11 @@ Package Versions:
 
 - Ruby 2.6 or higher
 - Bundler (for Ruby gem scanning)
-- NPM (optional, for NPM package scanning)
+- NPM or Yarn (optional, for JavaScript package scanning)
 - `bundler-audit` (optional, for enhanced gem vulnerability detection)
 
+**Note:** If both npm and yarn are available, Rubion will prompt you to choose which one to use.
+
 ### Installing bundler-audit (recommended)
 
 ```bash
@@ -172,10 +174,11 @@ Rubion uses a modular architecture:
 1. **Scanner** (`lib/rubion/scanner.rb`): Executes various commands to scan for vulnerabilities and outdated versions
    - `bundle-audit check` for gem vulnerabilities
    - `bundle outdated --parseable` for gem versions
-   - `npm audit --json` for package vulnerabilities
-   - `npm outdated --json` for package versions
+   - `npm audit --json` or `yarn audit --json` for package vulnerabilities (auto-detects which is available)
+   - `npm outdated --json` or `yarn outdated --json` for package versions (auto-detects which is available)
    - Fetches release dates and version data from RubyGems.org and NPM registry APIs
    - Uses parallel processing (10 concurrent threads) for fast API calls
+   - Prompts user to choose between npm and yarn if both are available
 
 2. **Reporter** (`lib/rubion/reporter.rb`): Formats scan results into beautiful terminal tables using `terminal-table`
    - Adds severity icons (🔴 🟠 🟡 🟢 ⚪)

data/bin/rubion

@@ -5,3 +5,5 @@ require_relative '../lib/rubion'
 
 Rubion::CLI.start(ARGV)
 
+
+

data/lib/rubion/scanner.rb

@@ -21,9 +21,11 @@ module Rubion
       end
     end
 
-    def initialize(project_path: Dir.pwd)
+    def initialize(project_path: Dir.pwd, package_manager: nil)
       @project_path = project_path
       @result = ScanResult.new
+      @package_manager = package_manager
+      @package_manager_detected = false
     end
 
     def scan
@@ -74,10 +76,21 @@ module Rubion
       package_json = File.join(@project_path, 'package.json')
       return unless File.exist?(package_json)
       
-      # Check for vulnerabilities using npm audit
+      # Detect package manager if not already set
+      unless @package_manager_detected
+        @package_manager = @package_manager || detect_package_manager
+        @package_manager_detected = true
+      end
+      
+      unless @package_manager
+        puts "  ⚠️  Neither npm nor yarn is available. Skipping package scanning."
+        return
+      end
+      
+      # Check for vulnerabilities using package manager audit
       check_npm_vulnerabilities
       
-      # Check for outdated versions using npm outdated (will show progress)
+      # Check for outdated versions using package manager outdated (will show progress)
       check_npm_versions
     end
 
@@ -113,7 +126,10 @@ module Rubion
     end
 
     def check_npm_vulnerabilities
-      stdout, stderr, status = Open3.capture3("npm audit --json 2>&1", chdir: @project_path)
+      return unless @package_manager
+      
+      command = "#{@package_manager} audit --json 2>&1"
+      stdout, stderr, status = Open3.capture3(command, chdir: @project_path)
       
       begin
         data = JSON.parse(stdout)
@@ -122,12 +138,15 @@ module Rubion
         @result.package_vulnerabilities = []
       end
     rescue => e
-      puts "  ⚠️  Could not run npm audit (#{e.message}). Skipping package vulnerability check."
+      puts "  ⚠️  Could not run #{@package_manager} audit (#{e.message}). Skipping package vulnerability check."
       @result.package_vulnerabilities = []
     end
 
     def check_npm_versions
-      stdout, stderr, status = Open3.capture3("npm outdated --json 2>&1", chdir: @project_path)
+      return unless @package_manager
+      
+      command = "#{@package_manager} outdated --json 2>&1"
+      stdout, stderr, status = Open3.capture3(command, chdir: @project_path)
       
       begin
         data = JSON.parse(stdout) unless stdout.empty?
@@ -136,7 +155,7 @@ module Rubion
         @result.package_versions = []
       end
     rescue => e
-      puts "  ⚠️  Could not run npm outdated (#{e.message}). Skipping package version check."
+      puts "  ⚠️  Could not run #{@package_manager} outdated (#{e.message}). Skipping package version check."
       @result.package_versions = []
     end
 
@@ -532,6 +551,48 @@ module Rubion
       end
     end
 
+    # Detect which package manager is available (npm or yarn)
+    def detect_package_manager
+      npm_available = check_command_available('npm')
+      yarn_available = check_command_available('yarn')
+      
+      if npm_available && yarn_available
+        # Both available - prompt user
+        prompt_package_manager_choice
+      elsif npm_available
+        'npm'
+      elsif yarn_available
+        'yarn'
+      else
+        nil
+      end
+    end
+    
+    # Check if a command is available in the system
+    def check_command_available(command)
+      _, _, status = Open3.capture3("which #{command} 2>&1")
+      status.success?
+    rescue
+      false
+    end
+    
+    # Prompt user to choose between npm and yarn when both are available
+    def prompt_package_manager_choice
+      puts "\n  Both npm and yarn are available. Which would you like to use?"
+      print "  Enter 'npm' or 'yarn' (default: npm): "
+      
+      choice = $stdin.gets.chomp.strip.downcase
+      
+      if choice.empty? || choice == 'npm'
+        'npm'
+      elsif choice == 'yarn'
+        'yarn'
+      else
+        puts "  ⚠️  Invalid choice. Using npm as default."
+        'npm'
+      end
+    end
+
     # Fetch all NPM package version info (dates and version list) from NPM registry in one call
     def fetch_npm_all_versions(package_name)
       return { versions: {}, version_list: [] } if package_name.nil?

data/lib/rubion/version.rb

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
 module Rubion
-  VERSION = "0.3.0"
+  VERSION = "0.3.1"
 end
 

data/lib/rubion.rb

@@ -81,8 +81,8 @@ module Rubion
           Rubion scans your project for:
             - Ruby gem vulnerabilities (using bundler-audit)
             - Outdated Ruby gems (using bundle outdated)
-            - NPM package vulnerabilities (using npm audit)
-            - Outdated NPM packages (using npm outdated)
+            - NPM/JavaScript package vulnerabilities (using npm audit or yarn audit)
+            - Outdated NPM/JavaScript packages (using npm outdated or yarn outdated)
         
         OUTPUT:
           Results are displayed in organized tables with:
@@ -107,8 +107,11 @@ module Rubion
         REQUIREMENTS:
           - Ruby 2.6+
           - Bundler (for gem scanning)
-          - NPM (for package scanning, optional)
+          - NPM or Yarn (for package scanning, optional)
           - bundler-audit (optional, install with: gem install bundler-audit)
+          
+        NOTE:
+          If both npm and yarn are available, you will be prompted to choose which one to use.
         
       HELP
     end

metadata

@@ -1,13 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rubion
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.3.1
 platform: ruby
 authors:
 - bipashant
+autorequire:
 bindir: bin
 cert_chain: []
-date: 1980-01-02 00:00:00.000000000 Z
+date: 2025-11-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: terminal-table
@@ -92,6 +93,7 @@ metadata:
   source_code_uri: https://github.com/bipashant/rubion
   changelog_uri: https://github.com/bipashant/rubion/blob/main/CHANGELOG.md
   bug_tracker_uri: https://github.com/bipashant/rubion/issues
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -106,7 +108,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.7.2
+rubygems_version: 3.4.10
+signing_key:
 specification_version: 4
 summary: Security and version scanner for Ruby and JavaScript projects
 test_files: []