@cdxgen/cdxgen 0.0.1 → 13.0.0

package/types/lib/ecosystems/parsers-go.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Builds a Go package component object containing purl, bom-ref, integrity hash,
+ * and optionally license and VCS external reference information.
+ *
+ * @param {string} group Package group (module path prefix, may be empty)
+ * @param {string} name Package name (full module path when group is empty)
+ * @param {string} version Package version string
+ * @param {string} hash Integrity hash (e.g. "sha256-…"), used as _integrity
+ * @returns {Promise<Object>} Component object ready for inclusion in a BOM package list
+ */
+export declare function getGoPkgComponent(group: string, name: string, version: string, hash: string): Promise<Object>;
+/**
+ * Method to parse go.mod files
+ *
+ * @param {String} goModData Contents of go.mod file
+ * @param {Object} gosumMap Data from go.sum files
+ *
+ * @returns {Object} Object containing parent component, rootList and packages list
+ */
+export declare function parseGoModData(goModData: string, gosumMap: Object): Object;
+/**
+ * Parses a Go modules text file (e.g. vendor/modules.txt) and returns a list of
+ * Go package components. Cross-references the go.sum map for integrity hashes and
+ * sets scope and confidence based on hash availability.
+ *
+ * @param {string} txtFile Path to the modules.txt file
+ * @param {Object} gosumMap Map of "module@version" keys to sha256 hash values from go.sum
+ * @returns {Promise<Object[]>} List of Go package component objects with evidence
+ */
+export declare function parseGoModulesTxt(txtFile: string, gosumMap: Object): Promise<Object[]>;
+/**
+ * Parse go list output
+ *
+ * @param {string} rawOutput Output from go list invocation
+ * @param {Object} gosumMap go.sum data
+ * @returns Object with parent component and List of packages
+ */
+export declare function parseGoListDep(rawOutput: string, gosumMap: Object): Promise<{
+    parentComponent: {};
+    pkgList: Object[];
+}>;
+/**
+ * Parse go mod graph
+ *
+ * @param {string} rawOutput Output from go mod graph invocation
+ * @param {string} goModFile go.mod file
+ * @param {Object} gosumMap Hashes from gosum for lookups
+ * @param {Array} epkgList Existing package list
+ * @param {Object} parentComponent Current parent component
+ *
+ * @returns Object containing List of packages and dependencies
+ */
+export declare function parseGoModGraph(rawOutput: string, goModFile: string, gosumMap: Object, epkgList?: any[], parentComponent?: Object): Promise<{
+    pkgList: any[];
+    dependenciesList: {
+        ref: string;
+        dependsOn: any[];
+    }[];
+    parentComponent: any;
+    rootList: any;
+}>;
+/**
+ * Parse go mod why output.
+ *
+ * @param {string} rawOutput Output from go mod why
+ * @returns {string|undefined} package name or none
+ */
+export declare function parseGoModWhy(rawOutput: string): string | undefined;
+/**
+ * Parse go sum data
+ * @param {string} gosumData Content of go.sum
+ * @returns package list
+ */
+export declare function parseGosumData(gosumData: string): Promise<any[]>;
+/**
+ * Parses the contents of a Gopkg.lock or Gopkg.toml file (dep tool format) and
+ * returns a list of Go package components. Optionally fetches license information
+ * for each package when FETCH_LICENSE is enabled.
+ *
+ * @param {string} gopkgData Raw string contents of the Gopkg lock/toml file
+ * @returns {Promise<Object[]>} List of Go package component objects
+ */
+export declare function parseGopkgData(gopkgData: string): Promise<Object[]>;
+/**
+ * Parses the output of `go version -m` (build info) and returns a list of Go
+ * package components for each "dep" line, including name, version, and integrity hash.
+ *
+ * @param {string} buildInfoData Raw string output from `go version -m`
+ * @returns {Promise<Object[]>} List of Go package component objects
+ */
+export declare function parseGoVersionData(buildInfoData: string): Promise<Object[]>;
+//# sourceMappingURL=parsers-go.d.ts.map

package/types/lib/ecosystems/parsers-go.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parsers-go.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-go.js"],"names":[],"mappings":"AA2BA;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EANlC,MAMkC,EAAE,IAAI,EALxC,MAKwC,EAAE,OAAO,EAJjD,MAIiD,EAAE,IAAI,EAHvD,MAGuD,GAFrD,OAAO,CAAC,MAAM,CAAC,CAqD3B;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,SAAS,QAAA,EAAE,QAAQ,EAJ7C,MAI6C,GAF3C,MAAM,CA2ClB;AAkHD;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAJpC,MAIoC,EAAE,QAAQ,EAH9C,MAG8C,GAF5C,OAAO,CAAC,MAAM,EAAE,CAAC,CA6B7B;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,SAAS,EAJnC,MAImC,EAAE,QAAQ,EAH7C,MAG6C;;;GAuHvD;AA4BD;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACnC,SAAS,EATA,MASA,EACT,SAAS,EATA,MASA,EACT,QAAQ,EATC,MASD,EACR,QAAQ,QAAK,EACb,eAAe,GATN,MASW;;;;;;;;GA0MrB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAH5B,MAG4B,GAF1B,MAAM,GAAC,SAAS,CAc5B;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,SAAS,EAHnC,MAGmC,kBA6B7C;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,SAAS,EAHnC,MAGmC,GAFjC,OAAO,CAAC,MAAM,EAAE,CAAC,CAiD7B;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,aAAa,EAH3C,MAG2C,GAFzC,OAAO,CAAC,MAAM,EAAE,CAAC,CAkC7B"}

package/types/lib/ecosystems/parsers-js.d.ts

@@ -0,0 +1,242 @@
+import { Buffer } from "node:buffer";
+/**
+ * Parse a package.json file into CycloneDX component objects.
+ *
+ * @param {string} pkgJsonFile Path to the package.json file.
+ * @param {boolean} [simple=false] When true, omit component properties and
+ *   identity evidence and skip npm registry metadata fetching.
+ * @param {boolean} [securityProps=false] When true, append npm security-relevant
+ *   properties such as lifecycle scripts, binaries, native addons, and deprecation notices.
+ * @returns {Promise<Array<object>>} Parsed component list, enriched with npm
+ *   registry metadata when available and not in simple mode.
+ */
+export declare function parsePkgJson(pkgJsonFile: string, simple?: boolean, securityProps?: boolean): Promise<Array<object>>;
+/**
+ * Hash a root `.npm-extension` file exactly as npm does: ssri sha512 over
+ * `npm-extension:v1:<format>\n` followed by the raw file bytes. Mirrors
+ * `hashFile` in the vendored arborist's upstream npm-extension.js so the value
+ * is comparable to what npm writes into the lockfile as `npmExtensionHash`.
+ *
+ * @param {string} format Either "mjs" or "cjs"
+ * @param {Buffer} bytes Raw file contents
+ * @returns {string} ssri integrity string
+ */
+export declare function hashNpmExtensionFile(format: string, bytes: Buffer): string;
+/**
+ * Detect a root-owned `.npm-extension.mjs` or `.npm-extension.cjs` file and
+ * return its format, path, and npm-comparable hash. Returns null when no file
+ * is present. A non-root workspace file is never consulted, matching upstream.
+ *
+ * @param {string} rootPath Real path of the project root (tree.realpath)
+ * @returns {{format: string, path: string, hash: string, duplicate: boolean}|null}
+ */
+export declare function detectRootNpmExtension(rootPath: string): {
+    format: string;
+    path: string;
+    hash: string;
+    duplicate: boolean;
+} | null;
+/**
+ * Parse nodejs package lock file
+ *
+ * @param {string} pkgLockFile package-lock.json file
+ * @param {object} options Command line options
+ */
+export declare function parsePkgLock(pkgLockFile: string, options?: object): Promise<{
+    pkgList: any;
+    dependenciesList: any;
+}>;
+/**
+ * Given a lock file this method would return an Object with the identity as the key and parsed name and value
+ * eg: "@actions/core@^1.2.6", "@actions/core@^1.6.0":
+ *        version "1.6.0"
+ * would result in two entries
+ *
+ * @param {string} lockData Yarn Lockfile data
+ */
+export declare function yarnLockToIdentMap(lockData: string): {};
+/**
+ * Parse nodejs yarn lock file
+ *
+ * @param {string} yarnLockFile yarn.lock file
+ * @param {Object} parentComponent parent component
+ * @param {Array[String]} workspacePackages Workspace packages
+ * @param {Object} workspaceSrcFiles Workspace package.json files
+ * @param {Object} _workspaceDirectDeps Direct dependencies of each workspace
+ * @param {Object} depsWorkspaceRefs Workspace references for each dependency
+ */
+export declare function parseYarnLock(yarnLockFile: string, parentComponent?: Object, workspacePackages?: any, workspaceSrcFiles?: Object, _workspaceDirectDeps?: Object, depsWorkspaceRefs?: Object): Promise<{
+    pkgList: any[];
+    dependenciesList: any[];
+}>;
+/**
+ * Parse nodejs shrinkwrap deps file
+ *
+ * @param {string} swFile shrinkwrap-deps.json file
+ */
+export declare function parseNodeShrinkwrap(swFile: string): Promise<any[]>;
+/**
+ * Strip the peer-dependency resolution that pnpm encodes into a version string.
+ *
+ * pnpm 5 and below append it after an underscore, either as a peer spec or as a hash
+ * of one, while 6 and above wrap it in parentheses:
+ *
+ *   7.26.0_typescript@6.0.2
+ *   2.3.3_5b3b7d3a75edb27abc53579646941536
+ *   3.0.1(ajv@8.14.0)
+ *
+ * An npm version can contain neither an underscore nor a parenthesis, so both are
+ * unambiguous separators. The suffix must not survive into a version or a purl: no
+ * SCA tool can match `2.3.3_5b3b7d...` against an advisory, so a component carrying
+ * one is effectively invisible to vulnerability lookups.
+ *
+ * @param {String} version Version string from a pnpm lock file
+ *
+ * @returns {String} The published version, without the peer-resolution suffix
+ */
+export declare function stripPnpmPeerSuffix(version: string): string;
+/**
+ * Resolve a concrete version for a pnpm dependency.
+ *
+ * Link/file references are resolved by reading the target package.json, while
+ * registry versions have their pnpm peer-dependency suffix stripped via
+ * {@link stripPnpmPeerSuffix}.
+ *
+ * @param {string|object} depPkg Dependency version string or package object.
+ * @param {string} relativePath Base path for resolving link/file references.
+ * @returns {Promise<string|undefined>} The resolved published version.
+ */
+export declare function getVersionNumPnpm(depPkg: string | object, relativePath: string): Promise<string | undefined>;
+/**
+ * Resolve a pnpm dependency to its PURL string.
+ *
+ * Moved here from npmutils.js to break the npmutils ↔ parsers-js cycle.
+ * Only callers are in this file.
+ *
+ * @param {string|object} depPkg Dependency package version or object
+ * @param {string} packageName Package name
+ * @param {object} gitPkgRefs Git package refs map
+ * @param {string} relativePath Relative path for resolution
+ * @param {string} githubServerHost GitHub server host
+ * @param {object} [npmrcConfig={}] npmrc configuration
+ * @returns {Promise<string>} Decoded PURL string
+ */
+export declare function getPnpmDepPurl(depPkg: string | object, packageName: string, gitPkgRefs: object, relativePath: string, githubServerHost: string, npmrcConfig?: object): Promise<string>;
+/**
+ * Parse pnpm workspace file
+ *
+ * @param {string} workspaceFile pnpm-workspace.yaml
+ * @returns {object} Object containing packages and catalogs
+ */
+export declare function parsePnpmWorkspace(workspaceFile: string): object;
+/**
+ * Parses the workspaces field from a package.json file and returns the list of
+ * workspace glob patterns. Handles both array and object (with packages key) formats.
+ *
+ * @param {string} packageJsonFile Path to the package.json file to parse
+ * @returns {Object} Object with a packages array of workspace glob patterns, or an empty object on error
+ */
+export declare function parseYarnWorkspace(packageJsonFile: string): Object;
+/**
+ * Helper function to find a package path in pnpm node_modules structure
+ *
+ * @param {string} baseDir Base directory containing node_modules
+ * @param {string} packageName Package name (with or without scope)
+ * @param {string} version Package version
+ * @returns {string|null} Path to the package directory or null if not found
+ */
+export declare function findPnpmPackagePath(baseDir: string, packageName: string, version: string): string | null;
+/**
+ * pnpm packages with metadata from local node_modules
+ *
+ * @param {Array} pkgList Package list to enhance
+ * @param {string} lockFilePath Path to the pnpm-lock.yaml file
+ * @returns {Array} Enhanced package list
+ */
+export declare function pnpmMetadata(pkgList: any[], lockFilePath: string): any[];
+/**
+ * Resolve a pnpm dependency value that is an alias pointing at another lock entry
+ * rather than a plain version.
+ *
+ * pnpm writes such a value in the same shape as its package keys, and that shape
+ * changed between lockfile versions:
+ *
+ *   v5 and below: /@wdio/utils/7.26.0_typescript@6.0.2, /string-width/4.2.3
+ *   v6 and above: /@wdio/utils@7.26.0, string-width@4.2.3
+ *
+ * The version is returned verbatim, peer-dependency suffix included, because that
+ * is how the aliased package's own lock key is turned into a version elsewhere in
+ * parsePnpmLock - stripping it here would leave the dependency ref pointing at a
+ * component that does not exist.
+ *
+ * @param {String} value Raw dependency value from the lock file
+ *
+ * @returns {Object|undefined} `{name, version}`, or undefined when the value is a
+ *          plain version and not an alias
+ */
+export declare function parsePnpmAliasRef(value: string): Object | undefined;
+/**
+ * Parse nodejs pnpm lock file
+ *
+ * @param {string} pnpmLock pnpm-lock.yaml file
+ * @param {Object} parentComponent parent component
+ * @param {Array[String]} workspacePackages Workspace packages
+ * @param {Object} workspaceSrcFiles Workspace package.json files
+ * @param {Object} _workspaceCatalogs Workspace catalogs
+ * @param {Object} _workspaceDirectDeps Direct dependencies of each workspace
+ * @param {Object} depsWorkspaceRefs Workspace references for each dependency
+ * @param {string} projectRoot Root path used to relativize pnpm-lock evidence paths
+ */
+export declare function parsePnpmLock(pnpmLock: string, parentComponent?: Object, workspacePackages?: any, workspaceSrcFiles?: Object, _workspaceCatalogs?: Object, _workspaceDirectDeps?: Object, depsWorkspaceRefs?: Object, projectRoot?: string): Promise<{
+    pkgList?: undefined;
+    dependenciesList?: undefined;
+    parentSubComponents?: undefined;
+} | {
+    pkgList: any[];
+    dependenciesList: {
+        ref: string;
+        dependsOn: any[];
+    }[];
+    parentSubComponents: {
+        group: any;
+        name: any;
+        version: any;
+        type: string;
+        purl: any;
+        "bom-ref": string;
+    }[];
+}>;
+/**
+ * Parse bower json file
+ *
+ * @param {string} bowerJsonFile bower.json file
+ */
+export declare function parseBowerJson(bowerJsonFile: string): Promise<any[]>;
+/**
+ * Parse minified js file
+ *
+ * @param {string} minJsFile min.js file
+ */
+export declare function parseMinJs(minJsFile: string): Promise<any[]>;
+/**
+ * Parse a package.json `name` field (or a plain string) and extract its scope,
+ * full name, project name, and module name components.
+ *
+ * @param {string|Object} name The package name string or an object with a `name` property
+ * @returns {{ scope: string|null, fullName: string, projectName: string|null, moduleName: string|null }}
+ */
+export declare function parsePackageJsonName(name: string | Object): {
+    scope: string | null;
+    fullName: string;
+    projectName: string | null;
+    moduleName: string | null;
+};
+/**
+ * Helper to split a command line string into an array of arguments,
+ * respecting single and double quotes.
+ *
+ * @param {String} commandString The full command line string
+ * @returns {Array<String>} Array of tokens
+ */
+export declare function splitCommandArgs(commandString: string): Array<string>;
+//# sourceMappingURL=parsers-js.d.ts.map

package/types/lib/ecosystems/parsers-js.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parsers-js.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-js.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAyarC;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAChC,WAAW,EATF,MASE,EACX,MAAM,AATL,CAEA,EAFQ,OASK,EACd,aAAa,AARZ,CAEA,EAFQ,OAQY,GANV,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CA+OlC;AA0CD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAJhC,MAIgC,EAAE,KAAK,EAHvC,MAGuC,GAFrC,MAAM,CASlB;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAHpC,MAGoC,GAFlC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAC,GAAC,IAAI,CA6BjF;AA+ED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,WAAW,EAHnC,MAGmC,EAAE,OAAO,GAF5C,MAEiD;;;GAouB3D;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAFhC,MAEgC,MA2E1C;AA0ND;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,YAAY,EARH,MAQG,EACZ,eAAe,GARN,MAQa,EACtB,iBAAiB,MAAK,EACtB,iBAAiB,GARR,MAQa,EACtB,oBAAoB,GARX,MAQgB,EACzB,iBAAiB,GARR,MAQa;;;GAsfvB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAFrC,MAEqC,kBA+D/C;AA6GD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,QAAA,UAQ1C;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAJnC,MAAM,GAAC,MAI4B,EAAE,YAAY,EAHjD,MAGiD,GAF/C,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAoCrC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAClC,MAAM,EATG,MAAM,GAAC,MASV,EACN,WAAW,EATF,MASE,EACX,UAAU,EATD,MASC,EACV,YAAY,EATH,MASG,EACZ,gBAAgB,EATP,MASO,EAChB,WAAW,AATV,CACA,EADQ,MASO,GARL,OAAO,CAAC,MAAM,CAAC,CAyD3B;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,aAAa,EAHrC,MAGqC,GAFnC,MAAM,CAoClB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,eAAe,EAHvC,MAGuC,GAFrC,MAAM,CA2BlB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EALhC,MAKgC,EAAE,WAAW,EAJ7C,MAI6C,EAAE,OAAO,EAHtD,MAGsD,GAFpD,MAAM,GAAC,IAAI,CA4DvB;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,OAAO,OAAA,EAAE,YAAY,EAH7C,MAG6C,SAqFvD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,QAAA,GAH1B,MAAM,GAAC,SAAS,CAkC5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAVC,MAUD,EACR,eAAe,GAVN,MAUa,EACtB,iBAAiB,MAAK,EACtB,iBAAiB,GAVR,MAUa,EACtB,kBAAkB,GAVT,MAUc,EACvB,oBAAoB,GAVX,MAUgB,EACzB,iBAAiB,GAVR,MAUa,EACtB,WAAW,GAVF,MAUc;;;;;;;;;;;;;;;;;;GA66BxB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,aAAa,EAFvC,MAEuC,kBA6CjD;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,SAAS,EAF/B,MAE+B,kBA2FzC;AAGD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAH9B,MAAM,GAAC,MAGuB,GAF5B;IAAE,KAAK,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,GAAC,IAAI,CAAA;CAAE,CAoBvG;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,aAAa,QAAA,GAFjC,KAAK,QAAQ,CA4CzB"}

package/types/lib/ecosystems/parsers-jvm.d.ts

@@ -0,0 +1,100 @@
+/**
+ * Parse pom file
+ *
+ * @param {string} pomFile pom file to parse
+ * @returns {Object} Object containing pom properties, modules, and array of dependencies
+ */
+export declare function parsePom(pomFile: string): Object;
+/**
+ * Parse maven dependency:tree json output
+ *
+ * @param rawOutput
+ * @param pomFile
+ * @returns {{parentComponent: {}, pkgList: *[], dependenciesList: *[]}|{}|{}|*|{parentComponent: {[p: string]: *}|{}, pkgList: [], dependenciesList: []}}
+ */
+export declare function parseMavenTreeJson(rawOutput: any, pomFile: any): {
+    parentComponent: {};
+    pkgList: any[];
+    dependenciesList: any[];
+} | {} | {} | any | {
+    parentComponent: {
+        [p: string]: any;
+    } | {};
+    pkgList: [];
+    dependenciesList: [];
+};
+/**
+ * Parse maven tree output
+ * @param {string} rawOutput Raw string output
+ * @param {string} pomFile .pom file for evidence
+ *
+ * @returns {Object} Object containing packages and dependencies
+ */
+export declare function parseMavenTree(rawOutput: string, pomFile: string): Object;
+/**
+ * Parse mill dependencies from file
+ *
+ * @param {string} module name of the module
+ * @param {map} dependencies the parsed dependencies
+ * @param {map} relations a map containing all relations
+ * @param {string} millRootPath root of the project
+ *
+ * @returns the bom-ref of the module
+ */
+export declare function parseMillDependency(module: string, dependencies: map, relations: map, millRootPath: string): any;
+/**
+ * Parse clojure cli dependencies output
+ * @param {string} rawOutput Raw string output
+ */
+export declare function parseCljDep(rawOutput: string): any[];
+/**
+ * Parse lein dependency tree output
+ * @param {string} rawOutput Raw string output
+ */
+export declare function parseLeinDep(rawOutput: string): Object[];
+/**
+ * Recursively walks a parsed EDN map node produced by the Leiningen dependency
+ * tree and collects unique dependency entries into the deps array.
+ *
+ * @param {Object} node Parsed EDN node (expected to have a "map" property)
+ * @param {Object} keys_cache Cache object used to deduplicate entries by group-name-version key
+ * @param {Object[]} deps Accumulator array of dependency objects with group, name, and version fields
+ * @returns {Object[]} The populated deps array
+ */
+export declare function parseLeinMap(node: Object, keys_cache: Object, deps: Object[]): Object[];
+/**
+ * Parse bazel action graph output
+ * @param {string} rawOutput Raw string output
+ */
+export declare function parseBazelActionGraph(rawOutput: string): any[];
+/**
+ * Parse bazel skyframe state output
+ * @param {string} rawOutput Raw string output
+ */
+export declare function parseBazelSkyframe(rawOutput: string): any[];
+/**
+ * Parse bazel BUILD file
+ * @param {string} rawOutput Raw string output
+ */
+export declare function parseBazelBuild(rawOutput: string): any[];
+/**
+ * Parse dependencies in Key:Value format
+ */
+export declare function parseKVDep(rawOutput: any): any[];
+/**
+ * Parse Leiningen project.clj data and extract dependency packages.
+ *
+ * @param {string} leinData Raw text contents of a Leiningen project.clj file
+ * @returns {Object[]} Array of package objects with group, name, and version
+ */
+export declare function parseLeiningenData(leinData: string): Object[];
+/**
+ * Parse EDN (Extensible Data Notation) deps.edn data and extract dependency packages.
+ *
+ * Handles Clojure deps.edn files, extracting packages listed under the `:deps` key.
+ *
+ * @param {string} rawEdnData Raw EDN text contents of a deps.edn file
+ * @returns {Object[]} Array of package objects with group, name, and version
+ */
+export declare function parseEdnData(rawEdnData: string): Object[];
+//# sourceMappingURL=parsers-jvm.d.ts.map

package/types/lib/ecosystems/parsers-jvm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parsers-jvm.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-jvm.js"],"names":[],"mappings":"AAYA;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAHrB,MAGqB,GAFnB,MAAM,CA4JlB;AA2HD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,KAAA,EAAE,OAAO,KAAA,GAFxC;IAAC,eAAe,EAAE,EAAE,CAAC;IAAC,OAAO,EAAE,GAAC,EAAE,CAAC;IAAC,gBAAgB,EAAE,GAAC,EAAE,CAAA;CAAC,GAAC,EAAE,GAAC,EAAE,GAAC,GAAC,GAAC;IAAC,eAAe,EAAE;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,GAAC,CAAA;KAAC,GAAC,EAAE,CAAC;IAAC,OAAO,EAAE,EAAE,CAAC;IAAC,gBAAgB,EAAE,EAAE,CAAA;CAAC,CA0DxJ;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAL7B,MAK6B,EAAE,OAAO,EAJtC,MAIsC,GAFpC,MAAM,CA8FlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EARG,MAQH,EACN,YAAY,EARH,GAQG,EACZ,SAAS,EARA,GAQA,EACT,YAAY,EARH,MAQG,OAuGb;AAmBD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAF1B,MAE0B,SAkCpC;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAF3B,MAE2B,YAWrC;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,IAAI,EALtB,MAKsB,EAAE,UAAU,EAJlC,MAIkC,EAAE,IAAI,EAHxC,MAAM,EAGkC,GAFtC,MAAM,EAAE,CA0BpB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAFpC,MAEoC,SAkC9C;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAFjC,MAEiC,SAqD3C;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAF9B,MAE8B,SAexC;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,SAAS,KAAA,SAmCnC;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAGgC,GAF9B,MAAM,EAAE,CAkCpB;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAH5B,MAG4B,GAF1B,MAAM,EAAE,CAoDpB"}