@4da/mcp-server 4.2.1 → 4.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (78) hide show
  1. package/dist/http-transport.d.ts.map +1 -1
  2. package/dist/http-transport.js +5 -1
  3. package/dist/http-transport.js.map +1 -1
  4. package/dist/index.d.ts +3 -3
  5. package/dist/index.js +9 -8
  6. package/dist/index.js.map +1 -1
  7. package/dist/live/crates-registry.d.ts +18 -0
  8. package/dist/live/crates-registry.d.ts.map +1 -0
  9. package/dist/live/crates-registry.js +133 -0
  10. package/dist/live/crates-registry.js.map +1 -0
  11. package/dist/live/go-registry.d.ts +19 -0
  12. package/dist/live/go-registry.d.ts.map +1 -0
  13. package/dist/live/go-registry.js +127 -0
  14. package/dist/live/go-registry.js.map +1 -0
  15. package/dist/live/http-utils.d.ts +3 -0
  16. package/dist/live/http-utils.d.ts.map +1 -0
  17. package/dist/live/http-utils.js +20 -0
  18. package/dist/live/http-utils.js.map +1 -0
  19. package/dist/live/index.d.ts +7 -2
  20. package/dist/live/index.d.ts.map +1 -1
  21. package/dist/live/index.js +71 -0
  22. package/dist/live/index.js.map +1 -1
  23. package/dist/live/npm-registry.d.ts +19 -0
  24. package/dist/live/npm-registry.d.ts.map +1 -0
  25. package/dist/live/npm-registry.js +132 -0
  26. package/dist/live/npm-registry.js.map +1 -0
  27. package/dist/live/osv-scanner.d.ts.map +1 -1
  28. package/dist/live/osv-scanner.js +1 -10
  29. package/dist/live/osv-scanner.js.map +1 -1
  30. package/dist/live/pypi-registry.d.ts +18 -0
  31. package/dist/live/pypi-registry.d.ts.map +1 -0
  32. package/dist/live/pypi-registry.js +142 -0
  33. package/dist/live/pypi-registry.js.map +1 -0
  34. package/dist/live/rate-limiter.d.ts +12 -0
  35. package/dist/live/rate-limiter.d.ts.map +1 -1
  36. package/dist/live/rate-limiter.js +4 -0
  37. package/dist/live/rate-limiter.js.map +1 -1
  38. package/dist/live/semver-utils.d.ts +5 -0
  39. package/dist/live/semver-utils.d.ts.map +1 -0
  40. package/dist/live/semver-utils.js +28 -0
  41. package/dist/live/semver-utils.js.map +1 -0
  42. package/dist/live/types.d.ts +41 -0
  43. package/dist/live/types.d.ts.map +1 -1
  44. package/dist/schema-registry.d.ts +2 -1
  45. package/dist/schema-registry.d.ts.map +1 -1
  46. package/dist/schema-registry.js +61 -2
  47. package/dist/schema-registry.js.map +1 -1
  48. package/dist/schemas/dependency-health.json +27 -0
  49. package/dist/schemas/ecosystem-pulse.json +17 -0
  50. package/dist/schemas/upgrade-planner.json +22 -0
  51. package/dist/tool-dispatch.d.ts.map +1 -1
  52. package/dist/tool-dispatch.js +4 -1
  53. package/dist/tool-dispatch.js.map +1 -1
  54. package/dist/tools/dependency-health.d.ts +45 -0
  55. package/dist/tools/dependency-health.d.ts.map +1 -0
  56. package/dist/tools/dependency-health.js +152 -0
  57. package/dist/tools/dependency-health.js.map +1 -0
  58. package/dist/tools/ecosystem-pulse.d.ts +48 -0
  59. package/dist/tools/ecosystem-pulse.d.ts.map +1 -0
  60. package/dist/tools/ecosystem-pulse.js +60 -0
  61. package/dist/tools/ecosystem-pulse.js.map +1 -0
  62. package/dist/tools/get-context.d.ts +8 -1
  63. package/dist/tools/get-context.d.ts.map +1 -1
  64. package/dist/tools/get-context.js +18 -1
  65. package/dist/tools/get-context.js.map +1 -1
  66. package/dist/tools/index.d.ts +3 -0
  67. package/dist/tools/index.d.ts.map +1 -1
  68. package/dist/tools/index.js +3 -0
  69. package/dist/tools/index.js.map +1 -1
  70. package/dist/tools/upgrade-planner.d.ts +59 -0
  71. package/dist/tools/upgrade-planner.d.ts.map +1 -0
  72. package/dist/tools/upgrade-planner.js +167 -0
  73. package/dist/tools/upgrade-planner.js.map +1 -0
  74. package/dist/tools/what-should-i-know.d.ts +7 -0
  75. package/dist/tools/what-should-i-know.d.ts.map +1 -1
  76. package/dist/tools/what-should-i-know.js +24 -0
  77. package/dist/tools/what-should-i-know.js.map +1 -1
  78. package/package.json +2 -2
@@ -13,11 +13,19 @@ import { RateLimiter, DEFAULT_RATE_LIMITS } from "./rate-limiter.js";
13
13
  import { OsvScanner } from "./osv-scanner.js";
14
14
  import { HNFetcher } from "./hn-fetcher.js";
15
15
  import { resolveVersions } from "./version-resolver.js";
16
+ import { NpmRegistry } from "./npm-registry.js";
17
+ import { CratesRegistry } from "./crates-registry.js";
18
+ import { PyPIRegistry } from "./pypi-registry.js";
19
+ import { GoRegistry } from "./go-registry.js";
16
20
  export class LiveIntelligence {
17
21
  cache;
18
22
  rateLimiter;
19
23
  osvScanner;
20
24
  hnFetcher;
25
+ npmRegistry;
26
+ cratesRegistry;
27
+ pypiRegistry;
28
+ goRegistry;
21
29
  enabled;
22
30
  lastVulnScan = null;
23
31
  lastHeadlines = [];
@@ -29,6 +37,10 @@ export class LiveIntelligence {
29
37
  this.rateLimiter = new RateLimiter(DEFAULT_RATE_LIMITS);
30
38
  this.osvScanner = new OsvScanner(this.cache, this.rateLimiter);
31
39
  this.hnFetcher = new HNFetcher(this.cache, this.rateLimiter);
40
+ this.npmRegistry = new NpmRegistry(this.cache, this.rateLimiter);
41
+ this.cratesRegistry = new CratesRegistry(this.cache, this.rateLimiter);
42
+ this.pypiRegistry = new PyPIRegistry(this.cache, this.rateLimiter);
43
+ this.goRegistry = new GoRegistry(this.cache, this.rateLimiter);
32
44
  }
33
45
  /**
34
46
  * Initialize with project data. Call once after project scan.
@@ -102,6 +114,65 @@ export class LiveIntelligence {
102
114
  isInitialized() {
103
115
  return this.initialized;
104
116
  }
117
+ async fetchRegistryHealth(deps) {
118
+ if (!this.enabled) {
119
+ return deps.map((d) => ({
120
+ name: d.name, ecosystem: d.ecosystem, currentVersion: d.version,
121
+ latestVersion: null, latestStableVersion: null, versionsBehind: null,
122
+ deprecated: false, deprecationMessage: null, lastPublished: null,
123
+ license: null, weeklyDownloads: null, isDev: d.isDev, fetchError: "Offline mode",
124
+ }));
125
+ }
126
+ const registryForEcosystem = (eco) => {
127
+ switch (eco) {
128
+ case "npm": return this.npmRegistry;
129
+ case "crates.io": return this.cratesRegistry;
130
+ case "PyPI": return this.pypiRegistry;
131
+ case "Go": return this.goRegistry;
132
+ default: return null;
133
+ }
134
+ };
135
+ const results = await Promise.all(deps.map(async (dep) => {
136
+ const registry = registryForEcosystem(dep.ecosystem);
137
+ if (!registry) {
138
+ return {
139
+ name: dep.name, ecosystem: dep.ecosystem, currentVersion: dep.version,
140
+ latestVersion: null, latestStableVersion: null, versionsBehind: null,
141
+ deprecated: false, deprecationMessage: null, lastPublished: null,
142
+ license: null, weeklyDownloads: null, isDev: dep.isDev,
143
+ fetchError: `No registry fetcher for ${dep.ecosystem}`,
144
+ };
145
+ }
146
+ try {
147
+ return await registry.getPackageInfo(dep.name, dep.version, dep.isDev);
148
+ }
149
+ catch {
150
+ return {
151
+ name: dep.name, ecosystem: dep.ecosystem, currentVersion: dep.version,
152
+ latestVersion: null, latestStableVersion: null, versionsBehind: null,
153
+ deprecated: false, deprecationMessage: null, lastPublished: null,
154
+ license: null, weeklyDownloads: null, isDev: dep.isDev,
155
+ fetchError: "Registry fetch failed",
156
+ };
157
+ }
158
+ }));
159
+ // Bulk fetch npm downloads for npm deps
160
+ const npmDeps = deps.filter((d) => d.ecosystem === "npm");
161
+ if (npmDeps.length > 0) {
162
+ try {
163
+ const downloads = await this.npmRegistry.getBulkDownloads(npmDeps.map((d) => d.name));
164
+ for (const result of results) {
165
+ if (result.ecosystem === "npm" && downloads.has(result.name)) {
166
+ result.weeklyDownloads = downloads.get(result.name) || null;
167
+ }
168
+ }
169
+ }
170
+ catch {
171
+ // Downloads are nice-to-have, not critical
172
+ }
173
+ }
174
+ return results;
175
+ }
105
176
  getStatus() {
106
177
  return {
107
178
  enabled: this.enabled,
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/live/index.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C;;;;;;;;GAQG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAgB,MAAM,uBAAuB,CAAC;AAUtE,MAAM,OAAO,gBAAgB;IACnB,KAAK,CAAY;IACjB,WAAW,CAAc;IACzB,UAAU,CAAa;IACvB,SAAS,CAAY;IACrB,OAAO,CAAU;IAEjB,YAAY,GAAmC,IAAI,CAAC;IACpD,aAAa,GAAmB,EAAE,CAAC;IACnC,YAAY,GAAyB,EAAE,CAAC;IACxC,WAAW,GAAG,KAAK,CAAC;IAE5B,YAAY,EAAqB;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,MAAM,CAAC;QACrD,IAAI,CAAC,KAAK,GAAG,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,mBAAmB,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,eAAe,CACb,WAAmB,EACnB,IAAc,EACd,OAAiB,EACjB,QAAgB;QAEhB,IAAI,CAAC,YAAY,GAAG,eAAe,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,WAAmB,EACnB,OAA0D;QAE1D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,EAAE,UAAU;YAC9B,CAAC,CAAC,IAAI,CAAC,YAAY;YACnB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAE9C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;YAC1B,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;YAC/C,IAAI,IAAI,CAAC,YAAY;gBAAE,OAAO,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACpF,OAAO,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,SAAmB;QACtC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAE7B,IAAI,CAAC;YACH,IAAI,CAAC,aAAa,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC,aAAa,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,oBAAoB;QACjD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,SAAS;QACP,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO;YACtB,cAAc,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,IAAI,IAAI;YACpD,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;YAC9E,eAAe,EAAE,IAAI,CAAC,YAAY,EAAE,eAAe,IAAI,CAAC;YACxD,mBAAmB,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM;SAC/C,CAAC;IACJ,CAAC;CACF;AAED,SAAS,eAAe,CAAC,WAAmB,EAAE,OAAgB;IAC5D,OAAO;QACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,WAAW;QACX,iBAAiB,EAAE,EAAE;QACrB,YAAY,EAAE,CAAC;QACf,eAAe,EAAE,CAAC;QAClB,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;QACnE,eAAe,EAAE,EAAE;QACnB,UAAU,EAAE,CAAC;QACb,cAAc,EAAE,CAAC;QACjB,MAAM,EAAE,KAAK;QACb,OAAO;KACR,CAAC;AACJ,CAAC"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/live/index.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C;;;;;;;;GAQG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAgB,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAW9C,MAAM,OAAO,gBAAgB;IACnB,KAAK,CAAY;IACjB,WAAW,CAAc;IACzB,UAAU,CAAa;IACvB,SAAS,CAAY;IACrB,WAAW,CAAc;IACzB,cAAc,CAAiB;IAC/B,YAAY,CAAe;IAC3B,UAAU,CAAa;IACvB,OAAO,CAAU;IAEjB,YAAY,GAAmC,IAAI,CAAC;IACpD,aAAa,GAAmB,EAAE,CAAC;IACnC,YAAY,GAAyB,EAAE,CAAC;IACxC,WAAW,GAAG,KAAK,CAAC;IAE5B,YAAY,EAAqB;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,MAAM,CAAC;QACrD,IAAI,CAAC,KAAK,GAAG,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,mBAAmB,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7D,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACjE,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACvE,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACnE,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,eAAe,CACb,WAAmB,EACnB,IAAc,EACd,OAAiB,EACjB,QAAgB;QAEhB,IAAI,CAAC,YAAY,GAAG,eAAe,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,WAAmB,EACnB,OAA0D;QAE1D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,EAAE,UAAU;YAC9B,CAAC,CAAC,IAAI,CAAC,YAAY;YACnB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAE9C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;YAC1B,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;YAC/C,IAAI,IAAI,CAAC,YAAY;gBAAE,OAAO,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACpF,OAAO,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,SAAmB;QACtC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAE7B,IAAI,CAAC;YACH,IAAI,CAAC,aAAa,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC,aAAa,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,oBAAoB;QACjD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,IAA0B;QAClD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO;gBAC/D,aAAa,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI;gBACpE,UAAU,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI;gBAChE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,cAAc;aACjF,CAAC,CAAC,CAAC;QACN,CAAC;QAED,MAAM,oBAAoB,GAAG,CAAC,GAAW,EAAE,EAAE;YAC3C,QAAQ,GAAG,EAAE,CAAC;gBACZ,KAAK,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC;gBACpC,KAAK,WAAW,CAAC,CAAC,OAAO,IAAI,CAAC,cAAc,CAAC;gBAC7C,KAAK,MAAM,CAAC,CAAC,OAAO,IAAI,CAAC,YAAY,CAAC;gBACtC,KAAK,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC;gBAClC,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC;YACvB,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACrB,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;oBACL,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,cAAc,EAAE,GAAG,CAAC,OAAO;oBACrE,aAAa,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI;oBACpE,UAAU,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI;oBAChE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK;oBACtD,UAAU,EAAE,2BAA2B,GAAG,CAAC,SAAS,EAAE;iBAChC,CAAC;YAC3B,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YACzE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;oBACL,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,cAAc,EAAE,GAAG,CAAC,OAAO;oBACrE,aAAa,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI;oBACpE,UAAU,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI;oBAChE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK;oBACtD,UAAU,EAAE,uBAAuB;iBACb,CAAC;YAC3B,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QAEF,wCAAwC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBACtF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC7B,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC7D,MAAM,CAAC,eAAe,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;oBAC9D,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,2CAA2C;YAC7C,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,SAAS;QACP,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO;YACtB,cAAc,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,IAAI,IAAI;YACpD,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;YAC9E,eAAe,EAAE,IAAI,CAAC,YAAY,EAAE,eAAe,IAAI,CAAC;YACxD,mBAAmB,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM;SAC/C,CAAC;IACJ,CAAC;CACF;AAED,SAAS,eAAe,CAAC,WAAmB,EAAE,OAAgB;IAC5D,OAAO;QACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,WAAW;QACX,iBAAiB,EAAE,EAAE;QACrB,YAAY,EAAE,CAAC;QACf,eAAe,EAAE,CAAC;QAClB,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;QACnE,eAAe,EAAE,EAAE;QACnB,UAAU,EAAE,CAAC;QACb,cAAc,EAAE,CAAC;QACjB,MAAM,EAAE,KAAK;QACb,OAAO;KACR,CAAC;AACJ,CAAC"}
@@ -0,0 +1,19 @@
1
+ /**
2
+ * npm Registry Fetcher
3
+ *
4
+ * Queries the npm registry for package metadata (latest version, deprecation
5
+ * status, semver distance) and the npm downloads API for weekly download counts.
6
+ *
7
+ * Privacy: sends only package names — public manifest data.
8
+ */
9
+ import type { LiveCache } from "./cache.js";
10
+ import type { RateLimiter } from "./rate-limiter.js";
11
+ import type { RegistryPackageInfo } from "./types.js";
12
+ export declare class NpmRegistry {
13
+ private cache;
14
+ private rateLimiter;
15
+ constructor(cache: LiveCache, rateLimiter: RateLimiter);
16
+ getPackageInfo(name: string, currentVersion: string | null, isDev: boolean): Promise<RegistryPackageInfo>;
17
+ getBulkDownloads(names: string[]): Promise<Map<string, number>>;
18
+ }
19
+ //# sourceMappingURL=npm-registry.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"npm-registry.d.ts","sourceRoot":"","sources":["../../src/live/npm-registry.ts"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,KAAK,EAAE,mBAAmB,EAAkB,MAAM,YAAY,CAAC;AAmBtE,qBAAa,WAAW;IACtB,OAAO,CAAC,KAAK,CAAY;IACzB,OAAO,CAAC,WAAW,CAAc;gBAErB,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW;IAKhD,cAAc,CAClB,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,mBAAmB,CAAC;IA+DzB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAiCtE"}
@@ -0,0 +1,132 @@
1
+ // SPDX-License-Identifier: FSL-1.1-Apache-2.0
2
+ /**
3
+ * npm Registry Fetcher
4
+ *
5
+ * Queries the npm registry for package metadata (latest version, deprecation
6
+ * status, semver distance) and the npm downloads API for weekly download counts.
7
+ *
8
+ * Privacy: sends only package names — public manifest data.
9
+ */
10
+ import { fetchJson, fetchWithTimeout } from "./http-utils.js";
11
+ import { computeSemverDistance, isPreRelease } from "./semver-utils.js";
12
+ const NPM_REGISTRY_URL = "https://registry.npmjs.org";
13
+ const NPM_DOWNLOADS_URL = "https://api.npmjs.org/downloads/point/last-week";
14
+ const NPM_TIMEOUT_MS = 8_000;
15
+ const NPM_CACHE_TTL = 86_400; // 24 hours
16
+ const DOWNLOADS_BATCH_SIZE = 128;
17
+ export class NpmRegistry {
18
+ cache;
19
+ rateLimiter;
20
+ constructor(cache, rateLimiter) {
21
+ this.cache = cache;
22
+ this.rateLimiter = rateLimiter;
23
+ }
24
+ async getPackageInfo(name, currentVersion, isDev) {
25
+ const cacheKey = `npm-reg:${name}`;
26
+ const cached = this.cache.get(cacheKey);
27
+ if (cached !== null)
28
+ return cached;
29
+ if (!this.rateLimiter.canProceed("npm")) {
30
+ const stale = this.cache.getStale(cacheKey);
31
+ if (stale)
32
+ return stale.data;
33
+ return errorResult(name, currentVersion, isDev, "Rate limited");
34
+ }
35
+ try {
36
+ this.rateLimiter.consume("npm");
37
+ const meta = await fetchJson(`${NPM_REGISTRY_URL}/${encodeURIComponent(name)}`, { headers: { Accept: "application/vnd.npm.install-v1+json" } }, NPM_TIMEOUT_MS);
38
+ const latestTag = meta["dist-tags"]?.latest ?? null;
39
+ const versions = Object.keys(meta.versions || {});
40
+ // Latest stable = last version that is not a prerelease
41
+ const latestStable = findLatestStable(versions);
42
+ // Check deprecation on the latest version entry
43
+ const latestVersionEntry = latestTag ? meta.versions[latestTag] : null;
44
+ const deprecated = !!latestVersionEntry?.deprecated;
45
+ const deprecationMessage = latestVersionEntry?.deprecated ?? null;
46
+ // Semver distance between current and latest stable (or latest tag)
47
+ let versionsBehind = null;
48
+ if (currentVersion && (latestStable || latestTag)) {
49
+ versionsBehind = computeSemverDistance(currentVersion, latestStable || latestTag);
50
+ }
51
+ const result = {
52
+ name,
53
+ ecosystem: "npm",
54
+ currentVersion,
55
+ latestVersion: latestTag,
56
+ latestStableVersion: latestStable,
57
+ versionsBehind,
58
+ deprecated,
59
+ deprecationMessage,
60
+ lastPublished: meta.modified ?? null,
61
+ license: null, // abbreviated metadata does not include license
62
+ weeklyDownloads: null, // fetched separately via getBulkDownloads
63
+ isDev,
64
+ fetchError: null,
65
+ };
66
+ this.cache.set(cacheKey, result, "npm", NPM_CACHE_TTL);
67
+ return result;
68
+ }
69
+ catch (err) {
70
+ const stale = this.cache.getStale(cacheKey);
71
+ if (stale)
72
+ return stale.data;
73
+ const message = err instanceof Error ? err.message : String(err);
74
+ return errorResult(name, currentVersion, isDev, message);
75
+ }
76
+ }
77
+ async getBulkDownloads(names) {
78
+ const result = new Map();
79
+ if (names.length === 0)
80
+ return result;
81
+ // Batch into groups of DOWNLOADS_BATCH_SIZE
82
+ for (let i = 0; i < names.length; i += DOWNLOADS_BATCH_SIZE) {
83
+ const batch = names.slice(i, i + DOWNLOADS_BATCH_SIZE);
84
+ if (!this.rateLimiter.canProceed("npm"))
85
+ break;
86
+ try {
87
+ this.rateLimiter.consume("npm");
88
+ const scopedNames = batch.map((n) => encodeURIComponent(n));
89
+ const url = `${NPM_DOWNLOADS_URL}/${scopedNames.join(",")}`;
90
+ const response = await fetchWithTimeout(url, {}, NPM_TIMEOUT_MS);
91
+ if (!response.ok)
92
+ continue;
93
+ const data = (await response.json());
94
+ for (const [pkg, info] of Object.entries(data)) {
95
+ if (info && typeof info.downloads === "number") {
96
+ result.set(pkg, info.downloads);
97
+ }
98
+ }
99
+ }
100
+ catch {
101
+ // Batch failure — continue with remaining batches
102
+ }
103
+ }
104
+ return result;
105
+ }
106
+ }
107
+ function findLatestStable(versions) {
108
+ for (let i = versions.length - 1; i >= 0; i--) {
109
+ if (!isPreRelease(versions[i])) {
110
+ return versions[i];
111
+ }
112
+ }
113
+ return null;
114
+ }
115
+ function errorResult(name, currentVersion, isDev, fetchError) {
116
+ return {
117
+ name,
118
+ ecosystem: "npm",
119
+ currentVersion,
120
+ latestVersion: null,
121
+ latestStableVersion: null,
122
+ versionsBehind: null,
123
+ deprecated: false,
124
+ deprecationMessage: null,
125
+ lastPublished: null,
126
+ license: null,
127
+ weeklyDownloads: null,
128
+ isDev,
129
+ fetchError,
130
+ };
131
+ }
132
+ //# sourceMappingURL=npm-registry.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"npm-registry.js","sourceRoot":"","sources":["../../src/live/npm-registry.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C;;;;;;;GAOG;AAIH,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAE9D,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAExE,MAAM,gBAAgB,GAAG,4BAA4B,CAAC;AACtD,MAAM,iBAAiB,GAAG,iDAAiD,CAAC;AAC5E,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,WAAW;AACzC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAYjC,MAAM,OAAO,WAAW;IACd,KAAK,CAAY;IACjB,WAAW,CAAc;IAEjC,YAAY,KAAgB,EAAE,WAAwB;QACpD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,IAAY,EACZ,cAA6B,EAC7B,KAAc;QAEd,MAAM,QAAQ,GAAG,WAAW,IAAI,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,QAAQ,CAAC,CAAC;QAC7D,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;QAEnC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAsB,QAAQ,CAAC,CAAC;YACjE,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC,IAAI,CAAC;YAC7B,OAAO,WAAW,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAEhC,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,GAAG,gBAAgB,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,EACjD,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,qCAAqC,EAAE,EAAE,EAC9D,cAAc,CACf,CAAC;YAEF,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,IAAI,IAAI,CAAC;YACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;YAElD,wDAAwD;YACxD,MAAM,YAAY,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAEhD,gDAAgD;YAChD,MAAM,kBAAkB,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACvE,MAAM,UAAU,GAAG,CAAC,CAAC,kBAAkB,EAAE,UAAU,CAAC;YACpD,MAAM,kBAAkB,GAAG,kBAAkB,EAAE,UAAU,IAAI,IAAI,CAAC;YAElE,oEAAoE;YACpE,IAAI,cAAc,GAA0B,IAAI,CAAC;YACjD,IAAI,cAAc,IAAI,CAAC,YAAY,IAAI,SAAS,CAAC,EAAE,CAAC;gBAClD,cAAc,GAAG,qBAAqB,CAAC,cAAc,EAAE,YAAY,IAAI,SAAU,CAAC,CAAC;YACrF,CAAC;YAED,MAAM,MAAM,GAAwB;gBAClC,IAAI;gBACJ,SAAS,EAAE,KAAK;gBAChB,cAAc;gBACd,aAAa,EAAE,SAAS;gBACxB,mBAAmB,EAAE,YAAY;gBACjC,cAAc;gBACd,UAAU;gBACV,kBAAkB;gBAClB,aAAa,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;gBACpC,OAAO,EAAE,IAAI,EAAE,gDAAgD;gBAC/D,eAAe,EAAE,IAAI,EAAE,0CAA0C;gBACjE,KAAK;gBACL,UAAU,EAAE,IAAI;aACjB,CAAC;YAEF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;YACvD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAsB,QAAQ,CAAC,CAAC;YACjE,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC,IAAI,CAAC;YAC7B,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,WAAW,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAe;QACpC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QAEtC,4CAA4C;QAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,oBAAoB,EAAE,CAAC;YAC5D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,oBAAoB,CAAC,CAAC;YAEvD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC;gBAAE,MAAM;YAE/C,IAAI,CAAC;gBACH,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAEhC,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5D,MAAM,GAAG,GAAG,GAAG,iBAAiB,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAE5D,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,EAAE,EAAE,cAAc,CAAC,CAAC;gBACjE,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAAE,SAAS;gBAE3B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;gBAE7D,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/C,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;wBAC/C,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;oBAClC,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,kDAAkD;YACpD,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,QAAkB;IAC1C,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAClB,IAAY,EACZ,cAA6B,EAC7B,KAAc,EACd,UAAkB;IAElB,OAAO;QACL,IAAI;QACJ,SAAS,EAAE,KAAK;QAChB,cAAc;QACd,aAAa,EAAE,IAAI;QACnB,mBAAmB,EAAE,IAAI;QACzB,cAAc,EAAE,IAAI;QACpB,UAAU,EAAE,KAAK;QACjB,kBAAkB,EAAE,IAAI;QACxB,aAAa,EAAE,IAAI;QACnB,OAAO,EAAE,IAAI;QACb,eAAe,EAAE,IAAI;QACrB,KAAK;QACL,UAAU;KACX,CAAC;AACJ,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"osv-scanner.d.ts","sourceRoot":"","sources":["../../src/live/osv-scanner.ts"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EACV,kBAAkB,EAGlB,uBAAuB,EACxB,MAAM,YAAY,CAAC;AAgBpB,qBAAa,UAAU;IACrB,OAAO,CAAC,KAAK,CAAY;IACzB,OAAO,CAAC,WAAW,CAAc;gBAErB,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW;IAKhD,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC;YAiE/E,UAAU;CAuCzB"}
1
+ {"version":3,"file":"osv-scanner.d.ts","sourceRoot":"","sources":["../../src/live/osv-scanner.ts"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,KAAK,EACV,kBAAkB,EAGlB,uBAAuB,EACxB,MAAM,YAAY,CAAC;AAgBpB,qBAAa,UAAU;IACrB,OAAO,CAAC,KAAK,CAAY;IACzB,OAAO,CAAC,WAAW,CAAc;gBAErB,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW;IAKhD,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC;YAiE/E,UAAU;CAuCzB"}
@@ -7,6 +7,7 @@
7
7
  *
8
8
  * Privacy: sends only package names + versions (public manifest data).
9
9
  */
10
+ import { fetchWithTimeout } from "./http-utils.js";
10
11
  const OSV_BATCH_URL = "https://api.osv.dev/v1/querybatch";
11
12
  const OSV_TIMEOUT_MS = 15_000;
12
13
  const OSV_CACHE_TTL = 3600; // 1 hour
@@ -184,14 +185,4 @@ function extractFixedVersion(affected, packageName, ecosystem) {
184
185
  }
185
186
  return null;
186
187
  }
187
- async function fetchWithTimeout(url, options, timeoutMs) {
188
- const controller = new AbortController();
189
- const timeout = setTimeout(() => controller.abort(), timeoutMs);
190
- try {
191
- return await fetch(url, { ...options, signal: controller.signal });
192
- }
193
- finally {
194
- clearTimeout(timeout);
195
- }
196
- }
197
188
  //# sourceMappingURL=osv-scanner.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"osv-scanner.js","sourceRoot":"","sources":["../../src/live/osv-scanner.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C;;;;;;;GAOG;AAWH,MAAM,aAAa,GAAG,mCAAmC,CAAC;AAC1D,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,SAAS;AACrC,MAAM,cAAc,GAAG,GAAG,CAAC;AAW3B,MAAM,OAAO,UAAU;IACb,KAAK,CAAY;IACjB,WAAW,CAAc;IAEjC,YAAY,KAAgB,EAAE,WAAwB;QACpD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAA0B,EAAE,WAAmB;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;QAClF,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAEnE,wCAAwC;QACxC,MAAM,QAAQ,GAAyB,EAAE,CAAC;QAC1C,MAAM,WAAW,GAAyB,EAAE,CAAC;QAE7C,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YACnE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,QAAQ,CAAC,CAAC;YAC9D,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,YAAY,GAAyB,EAAE,CAAC;QAC5C,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBAC/C,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAClC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,GAAG,IAAI,CAAC;oBACf,oCAAoC;oBACpC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;wBAC3B,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;wBACnE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAuB,QAAQ,CAAC,CAAC;wBAClE,IAAI,KAAK;4BAAE,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC7C,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,CAAC,GAAG,WAAW,EAAE,GAAG,YAAY,CAAC,CAAC;QACnD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAEnE,MAAM,UAAU,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAC3E,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,CAAC;QAED,OAAO;YACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW;YACX,iBAAiB,EAAE,UAAU;YAC7B,YAAY,EAAE,SAAS,CAAC,MAAM;YAC9B,eAAe,EAAE,kBAAkB,CAAC,IAAI;YACxC,UAAU;YACV,eAAe,EAAE,QAAQ;YACzB,UAAU,EAAE,SAAS,CAAC,MAAM,GAAG,kBAAkB,CAAC,IAAI;YACtD,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAClC,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;YAC7B,OAAO;SACR,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,IAA0B;QACjD,MAAM,OAAO,GAAoB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChD,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE;YACjD,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7C,CAAC,CAAC,CAAC;QAEJ,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,aAAa,EAAE;YACrD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;SAClC,EAAE,cAAc,CAAC,CAAC;QAEnB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,kBAAkB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqB,CAAC;QACzD,MAAM,OAAO,GAAyB,EAAE,CAAC;QAEzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAyB,EAAE,CAAC;YAE1C,IAAI,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClD,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;oBACnC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;YAED,qEAAqE;YACrE,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YACnE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;YAEzD,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,IAAsB,EAAE,GAAuB;IACvE,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/F,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAEjF,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,IAAI;QACjB,cAAc,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS;QACxC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;QAC3B,QAAQ;QACR,SAAS;QACT,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE;QAC/D,YAAY;QACZ,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE;QAChD,UAAU,EAAE,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;aAChC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC;aACxD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;aACjB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;KACf,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,QAA4D;IACpF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACjD,oEAAoE;YACpE,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAChD,IAAI,UAAU;gBAAE,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,yCAAyC;IACzC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,EAAE;YAAE,OAAO,GAAG,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,UAAU,CAAC;IACpC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,MAAM,CAAC;IAChC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,QAAQ,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,EAAU;IACrC,qDAAqD;IACrD,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,QAAQ,CAAC,CAAC,uBAAuB;IACpE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAAkD,EAClD,WAAmB,EACnB,SAAiB;IAEjB,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACxE,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACnC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;oBACvC,IAAI,KAAK,CAAC,KAAK;wBAAE,OAAO,KAAK,CAAC,KAAK,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,GAAW,EACX,OAAoB,EACpB,SAAiB;IAEjB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC"}
1
+ {"version":3,"file":"osv-scanner.js","sourceRoot":"","sources":["../../src/live/osv-scanner.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C;;;;;;;GAOG;AAIH,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAQnD,MAAM,aAAa,GAAG,mCAAmC,CAAC;AAC1D,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,SAAS;AACrC,MAAM,cAAc,GAAG,GAAG,CAAC;AAW3B,MAAM,OAAO,UAAU;IACb,KAAK,CAAY;IACjB,WAAW,CAAc;IAEjC,YAAY,KAAgB,EAAE,WAAwB;QACpD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAA0B,EAAE,WAAmB;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;QAClF,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAEnE,wCAAwC;QACxC,MAAM,QAAQ,GAAyB,EAAE,CAAC;QAC1C,MAAM,WAAW,GAAyB,EAAE,CAAC;QAE7C,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YACnE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,QAAQ,CAAC,CAAC;YAC9D,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,YAAY,GAAyB,EAAE,CAAC;QAC5C,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBAC/C,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAClC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,GAAG,IAAI,CAAC;oBACf,oCAAoC;oBACpC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;wBAC3B,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;wBACnE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAuB,QAAQ,CAAC,CAAC;wBAClE,IAAI,KAAK;4BAAE,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC7C,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,CAAC,GAAG,WAAW,EAAE,GAAG,YAAY,CAAC,CAAC;QACnD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAEnE,MAAM,UAAU,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAC3E,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,CAAC;QAED,OAAO;YACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW;YACX,iBAAiB,EAAE,UAAU;YAC7B,YAAY,EAAE,SAAS,CAAC,MAAM;YAC9B,eAAe,EAAE,kBAAkB,CAAC,IAAI;YACxC,UAAU;YACV,eAAe,EAAE,QAAQ;YACzB,UAAU,EAAE,SAAS,CAAC,MAAM,GAAG,kBAAkB,CAAC,IAAI;YACtD,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAClC,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;YAC7B,OAAO;SACR,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,IAA0B;QACjD,MAAM,OAAO,GAAoB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChD,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE;YACjD,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7C,CAAC,CAAC,CAAC;QAEJ,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,aAAa,EAAE;YACrD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;SAClC,EAAE,cAAc,CAAC,CAAC;QAEnB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,kBAAkB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqB,CAAC;QACzD,MAAM,OAAO,GAAyB,EAAE,CAAC;QAEzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAyB,EAAE,CAAC;YAE1C,IAAI,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClD,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;oBACnC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;YAED,qEAAqE;YACrE,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YACnE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;YAEzD,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,IAAsB,EAAE,GAAuB;IACvE,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/F,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAEjF,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,IAAI;QACjB,cAAc,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS;QACxC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;QAC3B,QAAQ;QACR,SAAS;QACT,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE;QAC/D,YAAY;QACZ,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE;QAChD,UAAU,EAAE,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;aAChC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC;aACxD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;aACjB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;KACf,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,QAA4D;IACpF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACjD,oEAAoE;YACpE,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAChD,IAAI,UAAU;gBAAE,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,yCAAyC;IACzC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,EAAE;YAAE,OAAO,GAAG,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,UAAU,CAAC;IACpC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,MAAM,CAAC;IAChC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,QAAQ,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,EAAU;IACrC,qDAAqD;IACrD,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,QAAQ,CAAC,CAAC,uBAAuB;IACpE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAAkD,EAClD,WAAmB,EACnB,SAAiB;IAEjB,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACxE,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACnC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;oBACvC,IAAI,KAAK,CAAC,KAAK;wBAAE,OAAO,KAAK,CAAC,KAAK,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
@@ -0,0 +1,18 @@
1
+ /**
2
+ * PyPI Registry Fetcher
3
+ *
4
+ * Queries the PyPI JSON API for package metadata (latest version, deprecation
5
+ * status, semver distance, license, last published date).
6
+ *
7
+ * Privacy: sends only package names -- public manifest data.
8
+ */
9
+ import type { LiveCache } from "./cache.js";
10
+ import type { RateLimiter } from "./rate-limiter.js";
11
+ import type { RegistryPackageInfo } from "./types.js";
12
+ export declare class PyPIRegistry {
13
+ private cache;
14
+ private rateLimiter;
15
+ constructor(cache: LiveCache, rateLimiter: RateLimiter);
16
+ getPackageInfo(name: string, currentVersion: string | null, isDev: boolean): Promise<RegistryPackageInfo>;
17
+ }
18
+ //# sourceMappingURL=pypi-registry.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"pypi-registry.d.ts","sourceRoot":"","sources":["../../src/live/pypi-registry.ts"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAwBtD,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAAY;IACzB,OAAO,CAAC,WAAW,CAAc;gBAErB,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW;IAKhD,cAAc,CAClB,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,mBAAmB,CAAC;CA4EhC"}
@@ -0,0 +1,142 @@
1
+ // SPDX-License-Identifier: FSL-1.1-Apache-2.0
2
+ /**
3
+ * PyPI Registry Fetcher
4
+ *
5
+ * Queries the PyPI JSON API for package metadata (latest version, deprecation
6
+ * status, semver distance, license, last published date).
7
+ *
8
+ * Privacy: sends only package names -- public manifest data.
9
+ */
10
+ import { fetchJson } from "./http-utils.js";
11
+ import { computeSemverDistance, isPreRelease } from "./semver-utils.js";
12
+ const PYPI_BASE_URL = "https://pypi.org/pypi";
13
+ const PYPI_TIMEOUT_MS = 8_000;
14
+ const PYPI_CACHE_TTL = 86_400; // 24 hours
15
+ export class PyPIRegistry {
16
+ cache;
17
+ rateLimiter;
18
+ constructor(cache, rateLimiter) {
19
+ this.cache = cache;
20
+ this.rateLimiter = rateLimiter;
21
+ }
22
+ async getPackageInfo(name, currentVersion, isDev) {
23
+ const normalizedName = name.toLowerCase().replace(/_/g, "-");
24
+ const cacheKey = `pypi-reg:${name.toLowerCase()}`;
25
+ const cached = this.cache.get(cacheKey);
26
+ if (cached !== null)
27
+ return cached;
28
+ if (!this.rateLimiter.canProceed("pypi")) {
29
+ const stale = this.cache.getStale(cacheKey);
30
+ if (stale)
31
+ return stale.data;
32
+ return errorResult(name, currentVersion, isDev, "Rate limited");
33
+ }
34
+ try {
35
+ this.rateLimiter.consume("pypi");
36
+ const data = await fetchJson(`${PYPI_BASE_URL}/${encodeURIComponent(normalizedName)}/json`, {}, PYPI_TIMEOUT_MS);
37
+ const latestVersion = data.info.version ?? null;
38
+ // Find latest stable: iterate release keys in reverse, skip yanked and prerelease
39
+ const releaseVersions = Object.keys(data.releases);
40
+ const latestStable = findLatestStable(releaseVersions, data.releases);
41
+ // License: prefer classifiers over free-text info.license
42
+ const license = extractLicenseFromClassifiers(data.info.classifiers)
43
+ ?? truncateLicense(data.info.license);
44
+ // Last published: max upload_time_iso_8601 across files of the latest version
45
+ const lastPublished = latestVersion
46
+ ? getLastPublished(data.releases[latestVersion])
47
+ : null;
48
+ // Deprecation: yanked at the package info level
49
+ const deprecated = !!data.info.yanked;
50
+ const deprecationMessage = deprecated
51
+ ? (data.info.yanked_reason || "Package has been yanked")
52
+ : null;
53
+ // Semver distance
54
+ let versionsBehind = null;
55
+ if (currentVersion && (latestStable || latestVersion)) {
56
+ versionsBehind = computeSemverDistance(currentVersion, latestStable || latestVersion);
57
+ }
58
+ const result = {
59
+ name,
60
+ ecosystem: "PyPI",
61
+ currentVersion,
62
+ latestVersion,
63
+ latestStableVersion: latestStable,
64
+ versionsBehind,
65
+ deprecated,
66
+ deprecationMessage,
67
+ lastPublished,
68
+ license,
69
+ weeklyDownloads: null, // PyPI JSON API does not include download counts
70
+ isDev,
71
+ fetchError: null,
72
+ };
73
+ this.cache.set(cacheKey, result, "pypi", PYPI_CACHE_TTL);
74
+ return result;
75
+ }
76
+ catch (err) {
77
+ const stale = this.cache.getStale(cacheKey);
78
+ if (stale)
79
+ return stale.data;
80
+ const message = err instanceof Error ? err.message : String(err);
81
+ return errorResult(name, currentVersion, isDev, message);
82
+ }
83
+ }
84
+ }
85
+ function findLatestStable(versions, releases) {
86
+ for (let i = versions.length - 1; i >= 0; i--) {
87
+ const v = versions[i];
88
+ if (isPreRelease(v))
89
+ continue;
90
+ // Skip if all files for this version are yanked
91
+ const files = releases[v];
92
+ if (files && files.length > 0 && files.every((f) => f.yanked))
93
+ continue;
94
+ return v;
95
+ }
96
+ return null;
97
+ }
98
+ function getLastPublished(files) {
99
+ if (!files || files.length === 0)
100
+ return null;
101
+ let latest = "";
102
+ for (const f of files) {
103
+ if (f.upload_time_iso_8601 > latest) {
104
+ latest = f.upload_time_iso_8601;
105
+ }
106
+ }
107
+ return latest || null;
108
+ }
109
+ function extractLicenseFromClassifiers(classifiers) {
110
+ for (const c of classifiers) {
111
+ if (c.startsWith("License :: OSI Approved :: ")) {
112
+ return c.replace("License :: OSI Approved :: ", "").replace(" License", "");
113
+ }
114
+ }
115
+ return null;
116
+ }
117
+ function truncateLicense(license) {
118
+ if (!license || license.trim().length === 0)
119
+ return null;
120
+ const trimmed = license.trim();
121
+ if (trimmed.length <= 50)
122
+ return trimmed;
123
+ return trimmed.slice(0, 47) + "...";
124
+ }
125
+ function errorResult(name, currentVersion, isDev, fetchError) {
126
+ return {
127
+ name,
128
+ ecosystem: "PyPI",
129
+ currentVersion,
130
+ latestVersion: null,
131
+ latestStableVersion: null,
132
+ versionsBehind: null,
133
+ deprecated: false,
134
+ deprecationMessage: null,
135
+ lastPublished: null,
136
+ license: null,
137
+ weeklyDownloads: null,
138
+ isDev,
139
+ fetchError,
140
+ };
141
+ }
142
+ //# sourceMappingURL=pypi-registry.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"pypi-registry.js","sourceRoot":"","sources":["../../src/live/pypi-registry.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C;;;;;;;GAOG;AAIH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGxE,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAC9C,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,cAAc,GAAG,MAAM,CAAC,CAAC,WAAW;AAoB1C,MAAM,OAAO,YAAY;IACf,KAAK,CAAY;IACjB,WAAW,CAAc;IAEjC,YAAY,KAAgB,EAAE,WAAwB;QACpD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,IAAY,EACZ,cAA6B,EAC7B,KAAc;QAEd,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,YAAY,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,QAAQ,CAAC,CAAC;QAC7D,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;QAEnC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAsB,QAAQ,CAAC,CAAC;YACjE,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC,IAAI,CAAC;YAC7B,OAAO,WAAW,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAEjC,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,GAAG,aAAa,IAAI,kBAAkB,CAAC,cAAc,CAAC,OAAO,EAC7D,EAAE,EACF,eAAe,CAChB,CAAC;YAEF,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;YAEhD,kFAAkF;YAClF,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnD,MAAM,YAAY,GAAG,gBAAgB,CAAC,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAEtE,0DAA0D;YAC1D,MAAM,OAAO,GAAG,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;mBAC/D,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAExC,8EAA8E;YAC9E,MAAM,aAAa,GAAG,aAAa;gBACjC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;gBAChD,CAAC,CAAC,IAAI,CAAC;YAET,gDAAgD;YAChD,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YACtC,MAAM,kBAAkB,GAAG,UAAU;gBACnC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,yBAAyB,CAAC;gBACxD,CAAC,CAAC,IAAI,CAAC;YAET,kBAAkB;YAClB,IAAI,cAAc,GAAG,IAAI,CAAC;YAC1B,IAAI,cAAc,IAAI,CAAC,YAAY,IAAI,aAAa,CAAC,EAAE,CAAC;gBACtD,cAAc,GAAG,qBAAqB,CACpC,cAAc,EACd,YAAY,IAAI,aAAc,CAC/B,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAwB;gBAClC,IAAI;gBACJ,SAAS,EAAE,MAAM;gBACjB,cAAc;gBACd,aAAa;gBACb,mBAAmB,EAAE,YAAY;gBACjC,cAAc;gBACd,UAAU;gBACV,kBAAkB;gBAClB,aAAa;gBACb,OAAO;gBACP,eAAe,EAAE,IAAI,EAAE,iDAAiD;gBACxE,KAAK;gBACL,UAAU,EAAE,IAAI;aACjB,CAAC;YAEF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;YACzD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAsB,QAAQ,CAAC,CAAC;YACjE,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC,IAAI,CAAC;YAC7B,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,WAAW,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;CACF;AAED,SAAS,gBAAgB,CACvB,QAAkB,EAClB,QAA2C;IAE3C,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,YAAY,CAAC,CAAC,CAAC;YAAE,SAAS;QAE9B,gDAAgD;QAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,SAAS;QAExE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAoC;IAC5D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,oBAAoB,GAAG,MAAM,EAAE,CAAC;YACpC,MAAM,GAAG,CAAC,CAAC,oBAAoB,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,IAAI,IAAI,CAAC;AACxB,CAAC;AAED,SAAS,6BAA6B,CAAC,WAAqB;IAC1D,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,UAAU,CAAC,6BAA6B,CAAC,EAAE,CAAC;YAChD,OAAO,CAAC,CAAC,OAAO,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,OAAkC;IACzD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,OAAO,CAAC;IACzC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC;AACtC,CAAC;AAED,SAAS,WAAW,CAClB,IAAY,EACZ,cAA6B,EAC7B,KAAc,EACd,UAAkB;IAElB,OAAO;QACL,IAAI;QACJ,SAAS,EAAE,MAAM;QACjB,cAAc;QACd,aAAa,EAAE,IAAI;QACnB,mBAAmB,EAAE,IAAI;QACzB,cAAc,EAAE,IAAI;QACpB,UAAU,EAAE,KAAK;QACjB,kBAAkB,EAAE,IAAI;QACxB,aAAa,EAAE,IAAI;QACnB,OAAO,EAAE,IAAI;QACb,eAAe,EAAE,IAAI;QACrB,KAAK;QACL,UAAU;KACX,CAAC;AACJ,CAAC"}
@@ -15,5 +15,17 @@ export declare const DEFAULT_RATE_LIMITS: {
15
15
  hn: {
16
16
  maxPerMinute: number;
17
17
  };
18
+ npm: {
19
+ maxPerMinute: number;
20
+ };
21
+ crates: {
22
+ maxPerMinute: number;
23
+ };
24
+ pypi: {
25
+ maxPerMinute: number;
26
+ };
27
+ go: {
28
+ maxPerMinute: number;
29
+ };
18
30
  };
19
31
  //# sourceMappingURL=rate-limiter.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../src/live/rate-limiter.ts"],"names":[],"mappings":"AASA,qBAAa,WAAW;IACtB,OAAO,CAAC,OAAO,CAAkC;gBAErC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAW5D,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAOnC,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAShC,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IASlC,OAAO,CAAC,MAAM;CAMf;AAED,eAAO,MAAM,mBAAmB;;;;;;;CAG/B,CAAC"}
1
+ {"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../src/live/rate-limiter.ts"],"names":[],"mappings":"AASA,qBAAa,WAAW;IACtB,OAAO,CAAC,OAAO,CAAkC;gBAErC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAW5D,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAOnC,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAShC,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IASlC,OAAO,CAAC,MAAM;CAMf;AAED,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;CAO/B,CAAC"}
@@ -48,5 +48,9 @@ export class RateLimiter {
48
48
  export const DEFAULT_RATE_LIMITS = {
49
49
  osv: { maxPerMinute: 10 },
50
50
  hn: { maxPerMinute: 30 },
51
+ npm: { maxPerMinute: 120 },
52
+ crates: { maxPerMinute: 50 },
53
+ pypi: { maxPerMinute: 60 },
54
+ go: { maxPerMinute: 60 },
51
55
  };
52
56
  //# sourceMappingURL=rate-limiter.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../src/live/rate-limiter.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAS9C,MAAM,OAAO,WAAW;IACd,OAAO,GAAwB,IAAI,GAAG,EAAE,CAAC;IAEjD,YAAY,MAAgD;QAC1D,KAAK,MAAM,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;gBACvB,MAAM,EAAE,YAAY;gBACpB,SAAS,EAAE,YAAY;gBACvB,UAAU,EAAE,YAAY,GAAG,EAAE;gBAC7B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;IACzD,CAAC;IAEO,MAAM,CAAC,MAAc;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;QACjD,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QACxF,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,GAAG,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;IACzB,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;CACzB,CAAC"}
1
+ {"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../src/live/rate-limiter.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAS9C,MAAM,OAAO,WAAW;IACd,OAAO,GAAwB,IAAI,GAAG,EAAE,CAAC;IAEjD,YAAY,MAAgD;QAC1D,KAAK,MAAM,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;gBACvB,MAAM,EAAE,YAAY;gBACpB,SAAS,EAAE,YAAY;gBACvB,UAAU,EAAE,YAAY,GAAG,EAAE;gBAC7B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;IACzD,CAAC;IAEO,MAAM,CAAC,MAAc;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;QACjD,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QACxF,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,GAAG,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;IACzB,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;IACxB,GAAG,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE;IAC1B,MAAM,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;IAC5B,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;IAC1B,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;CACzB,CAAC"}
@@ -0,0 +1,5 @@
1
+ import type { SemverDistance } from "./types.js";
2
+ export declare function parseSemver(version: string): [number, number, number] | null;
3
+ export declare function computeSemverDistance(current: string, latest: string): SemverDistance | null;
4
+ export declare function isPreRelease(version: string): boolean;
5
+ //# sourceMappingURL=semver-utils.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"semver-utils.d.ts","sourceRoot":"","sources":["../../src/live/semver-utils.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAI5E;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAe5F;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAErD"}
@@ -0,0 +1,28 @@
1
+ // SPDX-License-Identifier: FSL-1.1-Apache-2.0
2
+ export function parseSemver(version) {
3
+ const match = version.replace(/^v/, "").match(/^(\d+)\.(\d+)\.(\d+)/);
4
+ if (!match)
5
+ return null;
6
+ return [parseInt(match[1]), parseInt(match[2]), parseInt(match[3])];
7
+ }
8
+ export function computeSemverDistance(current, latest) {
9
+ const c = parseSemver(current);
10
+ const l = parseSemver(latest);
11
+ if (!c || !l)
12
+ return null;
13
+ const major = l[0] - c[0];
14
+ const minor = major === 0 ? l[1] - c[1] : 0;
15
+ const patch = major === 0 && minor === 0 ? l[2] - c[2] : 0;
16
+ let label = "up-to-date";
17
+ if (major > 0)
18
+ label = "major";
19
+ else if (minor > 0)
20
+ label = "minor";
21
+ else if (patch > 0)
22
+ label = "patch";
23
+ return { major: Math.max(0, major), minor: Math.max(0, minor), patch: Math.max(0, patch), label };
24
+ }
25
+ export function isPreRelease(version) {
26
+ return /[-+]/.test(version.replace(/^v/, "").replace(/^\d+\.\d+\.\d+/, "").slice(0, 1));
27
+ }
28
+ //# sourceMappingURL=semver-utils.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"semver-utils.js","sourceRoot":"","sources":["../../src/live/semver-utils.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAI9C,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACtE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,MAAc;IACnE,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE3D,IAAI,KAAK,GAA4B,YAAY,CAAC;IAClD,IAAI,KAAK,GAAG,CAAC;QAAE,KAAK,GAAG,OAAO,CAAC;SAC1B,IAAI,KAAK,GAAG,CAAC;QAAE,KAAK,GAAG,OAAO,CAAC;SAC/B,IAAI,KAAK,GAAG,CAAC;QAAE,KAAK,GAAG,OAAO,CAAC;IAEpC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;AACpG,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1F,CAAC"}