@cdxgen/cdxgen 0.0.1 → 13.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (722) hide show
  1. package/README.md +921 -87
  2. package/bin/audit.js +239 -0
  3. package/bin/cdxgen.js +2335 -0
  4. package/bin/convert.js +220 -0
  5. package/bin/evinse.js +353 -0
  6. package/bin/hbom.js +504 -0
  7. package/bin/repl.js +2224 -0
  8. package/bin/sign.js +195 -0
  9. package/bin/tracebom.js +303 -0
  10. package/bin/validate.js +268 -0
  11. package/bin/verify.js +189 -0
  12. package/data/README.md +307 -0
  13. package/data/bom-1.4.schema.json +1605 -0
  14. package/data/bom-1.5.schema.json +3660 -0
  15. package/data/bom-1.6.schema.json +5511 -0
  16. package/data/bom-1.7.schema.json +6700 -0
  17. package/data/cbomosdb-queries.json +68 -0
  18. package/data/component-tags.json +339 -0
  19. package/data/container-knowledge-index.json +125 -0
  20. package/data/cosdb-queries.json +17 -0
  21. package/data/crypto-oid.json +1998 -0
  22. package/data/cryptography-defs.json +3793 -0
  23. package/data/cryptography-defs.schema.json +576 -0
  24. package/data/cyclonedx-2.0-bundled.schema.json +7182 -0
  25. package/data/frameworks-list.json +219 -0
  26. package/data/glibc-stdlib.json +117 -0
  27. package/data/gtfobins-index.json +6296 -0
  28. package/data/helpers/init.gradle +71 -0
  29. package/data/jsf-0.82.schema.json +211 -0
  30. package/data/known-licenses.json +82 -0
  31. package/data/lic-mapping.json +338 -0
  32. package/data/license-aliases.json +6624 -0
  33. package/data/license-db.json +39059 -0
  34. package/data/license-deprecations.json +302 -0
  35. package/data/lolbas-index.json +150 -0
  36. package/data/predictive-audit-allowlist.json +11 -0
  37. package/data/pypi-pkg-aliases.json +1199 -0
  38. package/data/python-stdlib.json +308 -0
  39. package/data/queries-darwin.json +193 -0
  40. package/data/queries-win.json +257 -0
  41. package/data/queries.json +268 -0
  42. package/data/ruby-known-modules.json +281 -0
  43. package/data/rules/ai-agent-governance.yaml +323 -0
  44. package/data/rules/ai-bom.yaml +268 -0
  45. package/data/rules/ai-oversight.yaml +186 -0
  46. package/data/rules/ai-provenance.yaml +92 -0
  47. package/data/rules/asar-archives.yaml +150 -0
  48. package/data/rules/cbom-security.yaml +165 -0
  49. package/data/rules/chrome-extensions.yaml +248 -0
  50. package/data/rules/ci-permissions.yaml +802 -0
  51. package/data/rules/container-risk.yaml +353 -0
  52. package/data/rules/dependency-sources.yaml +236 -0
  53. package/data/rules/golem-go.yaml +229 -0
  54. package/data/rules/hbom-compliance.yaml +325 -0
  55. package/data/rules/hbom-performance.yaml +307 -0
  56. package/data/rules/hbom-security.yaml +248 -0
  57. package/data/rules/host-topology.yaml +165 -0
  58. package/data/rules/mcp-servers.yaml +388 -0
  59. package/data/rules/obom-runtime.yaml +1776 -0
  60. package/data/rules/package-integrity.yaml +364 -0
  61. package/data/rules/rootfs-hardening.yaml +179 -0
  62. package/data/rules/vscode-extensions.yaml +237 -0
  63. package/data/spdx-export.schema.json +6794 -0
  64. package/data/spdx-license-list.json +7449 -0
  65. package/data/spdx-licenses.json +759 -0
  66. package/data/spdx.schema.json +819 -0
  67. package/data/templates/README.md +3 -0
  68. package/data/templates/asvs-4.0.3.cdx.json +2943 -0
  69. package/data/templates/asvs-5.0.cdx.json +3046 -0
  70. package/data/templates/bsimm-v13.cdx.json +1008 -0
  71. package/data/templates/masvs-2.0.0.cdx.json +225 -0
  72. package/data/templates/nist-ssdf-1.1.cdx.json +828 -0
  73. package/data/templates/pcissc-secure-slc-1.1.cdx.json +1027 -0
  74. package/data/templates/scvs-1.0.0.cdx.json +813 -0
  75. package/data/templates/ssaf-DRAFT-2023-11.cdx.json +127 -0
  76. package/data/vendor-alias.json +41967 -0
  77. package/data/wrapdb-releases.json +4227 -0
  78. package/index.cjs +15 -0
  79. package/lib/audit/index.js +2800 -0
  80. package/lib/audit/progress.js +114 -0
  81. package/lib/audit/reporters.js +937 -0
  82. package/lib/audit/scoring.js +560 -0
  83. package/lib/audit/targets.js +798 -0
  84. package/lib/cli/bomAssembly.js +1882 -0
  85. package/lib/cli/cliOptions.js +543 -0
  86. package/lib/cli/index.js +2759 -0
  87. package/lib/cli/jsBom.js +2087 -0
  88. package/lib/cli/jvmBom.js +1858 -0
  89. package/lib/cli/managedBom.js +2083 -0
  90. package/lib/cli/nativeBom.js +2125 -0
  91. package/lib/core/activity.js +1087 -0
  92. package/lib/core/env.js +719 -0
  93. package/lib/core/fs.js +1058 -0
  94. package/lib/core/httpClient.js +730 -0
  95. package/lib/core/logger.js +280 -0
  96. package/lib/core/parallel.js +323 -0
  97. package/lib/core/paths.js +70 -0
  98. package/lib/core/projectConfig.js +122 -0
  99. package/lib/core/propertySanitizer.js +174 -0
  100. package/lib/core/spdx.js +5 -0
  101. package/lib/core/state.js +59 -0
  102. package/lib/core/text.js +207 -0
  103. package/lib/core/ui.js +920 -0
  104. package/lib/core/urls.js +84 -0
  105. package/lib/ecosystems/asarutils.js +1636 -0
  106. package/lib/ecosystems/bunutils.js +402 -0
  107. package/lib/ecosystems/caxa.js +77 -0
  108. package/lib/ecosystems/chromextutils.js +1174 -0
  109. package/lib/ecosystems/cmakeResolver.js +587 -0
  110. package/lib/ecosystems/cppEvidence.js +305 -0
  111. package/lib/ecosystems/denoutils.js +1094 -0
  112. package/lib/ecosystems/dotnetutils.js +132 -0
  113. package/lib/ecosystems/ecosystems.js +2772 -0
  114. package/lib/ecosystems/golem.js +1807 -0
  115. package/lib/ecosystems/gradleutils.js +1048 -0
  116. package/lib/ecosystems/jsEvidence.js +317 -0
  117. package/lib/ecosystems/npmutils.js +586 -0
  118. package/lib/ecosystems/parsers-bazel.js +875 -0
  119. package/lib/ecosystems/parsers-dotnet.js +1430 -0
  120. package/lib/ecosystems/parsers-gleam.js +302 -0
  121. package/lib/ecosystems/parsers-go.js +818 -0
  122. package/lib/ecosystems/parsers-js.js +4222 -0
  123. package/lib/ecosystems/parsers-jvm.js +948 -0
  124. package/lib/ecosystems/parsers-misc.js +3191 -0
  125. package/lib/ecosystems/parsers-python.js +2070 -0
  126. package/lib/ecosystems/parsers-rust.js +1294 -0
  127. package/lib/ecosystems/parsers-zig.js +861 -0
  128. package/lib/ecosystems/pep770.js +341 -0
  129. package/lib/ecosystems/pylockutils.js +427 -0
  130. package/lib/ecosystems/pythonutils.js +1281 -0
  131. package/lib/ecosystems/registryProvenance.js +1003 -0
  132. package/lib/ecosystems/remote/huggingface.js +1343 -0
  133. package/lib/ecosystems/rubyutils.js +1629 -0
  134. package/lib/ecosystems/rusi.js +820 -0
  135. package/lib/ecosystems/sbtutils.js +972 -0
  136. package/lib/ecosystems/tea.js +607 -0
  137. package/lib/ecosystems/utils.js +583 -0
  138. package/lib/ecosystems/zigResolver.js +410 -0
  139. package/lib/evinser/db.js +145 -0
  140. package/lib/evinser/evinser.js +2362 -0
  141. package/lib/evinser/scalasem.js +65 -0
  142. package/lib/evinser/swiftsem.js +767 -0
  143. package/lib/helpers/annotationFormatter.js +84 -0
  144. package/lib/helpers/bomSigner.js +312 -0
  145. package/lib/helpers/exportUtils.js +160 -0
  146. package/lib/helpers/remote/dependency-track.js +117 -0
  147. package/lib/helpers/versutils.js +202 -0
  148. package/lib/helpers/vsixutils.js +1069 -0
  149. package/lib/inventory/agentFormulationParser.js +322 -0
  150. package/lib/inventory/aiCollector.js +2140 -0
  151. package/lib/inventory/aiInventory.js +414 -0
  152. package/lib/inventory/aiModelVariants.js +121 -0
  153. package/lib/inventory/aiOversightCollector.js +661 -0
  154. package/lib/inventory/aiProvenanceCollector.js +822 -0
  155. package/lib/inventory/analyzer.js +6089 -0
  156. package/lib/inventory/analyzerScope.js +807 -0
  157. package/lib/inventory/astWorker.js +20 -0
  158. package/lib/inventory/atomUtils.js +1092 -0
  159. package/lib/inventory/auditCategories.js +192 -0
  160. package/lib/inventory/bomUtils.js +369 -0
  161. package/lib/inventory/cacheCommands.js +182 -0
  162. package/lib/inventory/cacheDir.js +104 -0
  163. package/lib/inventory/cbomutils.js +590 -0
  164. package/lib/inventory/cdxrs.js +434 -0
  165. package/lib/inventory/ciParsers/azurePipelines.js +295 -0
  166. package/lib/inventory/ciParsers/circleCi.js +286 -0
  167. package/lib/inventory/ciParsers/common.js +24 -0
  168. package/lib/inventory/ciParsers/githubActions.js +2434 -0
  169. package/lib/inventory/ciParsers/gitlabCi.js +213 -0
  170. package/lib/inventory/ciParsers/jenkins.js +180 -0
  171. package/lib/inventory/citations.js +234 -0
  172. package/lib/inventory/communityAiConfigParser.js +756 -0
  173. package/lib/inventory/containerRisk.js +204 -0
  174. package/lib/inventory/cryptoAlgorithmFamily.js +258 -0
  175. package/lib/inventory/deps.js +807 -0
  176. package/lib/inventory/depsUtils.js +588 -0
  177. package/lib/inventory/display.js +2128 -0
  178. package/lib/inventory/dosai.js +601 -0
  179. package/lib/inventory/dosaiParsers.js +154 -0
  180. package/lib/inventory/dynamic.js +145 -0
  181. package/lib/inventory/envcontext.js +1793 -0
  182. package/lib/inventory/evidenceUtils.js +774 -0
  183. package/lib/inventory/fetchBatch.js +779 -0
  184. package/lib/inventory/fetchRate.js +255 -0
  185. package/lib/inventory/forgeEnricher.js +300 -0
  186. package/lib/inventory/formulationParsers.js +422 -0
  187. package/lib/inventory/gtfobins.js +339 -0
  188. package/lib/inventory/hbom.js +719 -0
  189. package/lib/inventory/hbomAnalysis.js +310 -0
  190. package/lib/inventory/hbomLoader.js +35 -0
  191. package/lib/inventory/hostTopology.js +835 -0
  192. package/lib/inventory/inventoryStats.js +100 -0
  193. package/lib/inventory/jsonLike.js +121 -0
  194. package/lib/inventory/licenseEnhancer.js +918 -0
  195. package/lib/inventory/lolbas.js +285 -0
  196. package/lib/inventory/mcp.js +253 -0
  197. package/lib/inventory/mcpConfigParser.js +683 -0
  198. package/lib/inventory/mcpDiscovery.js +112 -0
  199. package/lib/inventory/mcpPinning.js +209 -0
  200. package/lib/inventory/osPackageResolver.js +493 -0
  201. package/lib/inventory/osinfo.js +383 -0
  202. package/lib/inventory/osqueryTransform.js +274 -0
  203. package/lib/inventory/plugins.js +466 -0
  204. package/lib/inventory/protobom.js +231 -0
  205. package/lib/inventory/protobomLoader.js +43 -0
  206. package/lib/inventory/provenanceUtils.js +224 -0
  207. package/lib/inventory/purl.js +749 -0
  208. package/lib/inventory/rustFormulationParser.js +339 -0
  209. package/lib/inventory/sbomDocument.js +340 -0
  210. package/lib/inventory/source.js +1488 -0
  211. package/lib/inventory/spdx.js +361 -0
  212. package/lib/inventory/spdxExpression.js +512 -0
  213. package/lib/inventory/spdxUtils.js +107 -0
  214. package/lib/inventory/table.js +267 -0
  215. package/lib/inventory/traceRunner.js +439 -0
  216. package/lib/inventory/unicodeScan.js +147 -0
  217. package/lib/managers/binary.js +3459 -0
  218. package/lib/managers/containerutils.js +125 -0
  219. package/lib/managers/docker.js +2145 -0
  220. package/lib/managers/dockerConnection.js +162 -0
  221. package/lib/managers/oci.js +704 -0
  222. package/lib/managers/piptree.js +267 -0
  223. package/lib/parsers/cmakeCache.js +199 -0
  224. package/lib/parsers/gguf.js +492 -0
  225. package/lib/parsers/gitAiNotes.js +233 -0
  226. package/lib/parsers/gitmodules.js +239 -0
  227. package/lib/parsers/htmlExtract.js +610 -0
  228. package/lib/parsers/huggingfaceManifest.js +551 -0
  229. package/lib/parsers/huggingfaceUtils.js +506 -0
  230. package/lib/parsers/iri.js +618 -0
  231. package/lib/parsers/npmrc.js +99 -0
  232. package/lib/parsers/ollama.js +101 -0
  233. package/lib/parsers/xml.js +841 -0
  234. package/lib/server/openapi.yaml +433 -0
  235. package/lib/server/server.js +616 -0
  236. package/lib/stages/postgen/annotator.js +977 -0
  237. package/lib/stages/postgen/auditBom.js +468 -0
  238. package/lib/stages/postgen/postgen.js +1239 -0
  239. package/lib/stages/postgen/ruleEngine.js +731 -0
  240. package/lib/stages/postgen/sortBom.js +195 -0
  241. package/lib/stages/postgen/spdxConverter.js +796 -0
  242. package/lib/stages/postgen/specVersionCompat.js +703 -0
  243. package/lib/stages/pregen/envAudit.js +388 -0
  244. package/lib/stages/pregen/pregen.js +637 -0
  245. package/lib/third-party/README.md +9 -0
  246. package/lib/third-party/arborist/CHANGELOG.md +1109 -0
  247. package/lib/third-party/arborist/LICENSE.md +20 -0
  248. package/lib/third-party/arborist/README.md +315 -0
  249. package/lib/third-party/arborist/lib/arborist/index.js +258 -0
  250. package/lib/third-party/arborist/lib/arborist/load-actual.js +605 -0
  251. package/lib/third-party/arborist/lib/arborist/load-virtual.js +300 -0
  252. package/lib/third-party/arborist/lib/bin-links.js +120 -0
  253. package/lib/third-party/arborist/lib/calc-dep-flags.js +130 -0
  254. package/lib/third-party/arborist/lib/case-insensitive-map.js +51 -0
  255. package/lib/third-party/arborist/lib/consistent-resolve.js +42 -0
  256. package/lib/third-party/arborist/lib/debug.js +50 -0
  257. package/lib/third-party/arborist/lib/dep-valid.js +190 -0
  258. package/lib/third-party/arborist/lib/edge.js +417 -0
  259. package/lib/third-party/arborist/lib/from-path.js +36 -0
  260. package/lib/third-party/arborist/lib/gather-dep-set.js +43 -0
  261. package/lib/third-party/arborist/lib/index.js +22 -0
  262. package/lib/third-party/arborist/lib/inventory.js +138 -0
  263. package/lib/third-party/arborist/lib/link.js +169 -0
  264. package/lib/third-party/arborist/lib/node.js +1673 -0
  265. package/lib/third-party/arborist/lib/npm-extension.js +45 -0
  266. package/lib/third-party/arborist/lib/override-resolves.js +11 -0
  267. package/lib/third-party/arborist/lib/override-set.js +319 -0
  268. package/lib/third-party/arborist/lib/package-extensions.js +289 -0
  269. package/lib/third-party/arborist/lib/printable.js +210 -0
  270. package/lib/third-party/arborist/lib/proc-log.js +30 -0
  271. package/lib/third-party/arborist/lib/realpath.js +100 -0
  272. package/lib/third-party/arborist/lib/relpath.js +4 -0
  273. package/lib/third-party/arborist/lib/shrinkwrap.js +1291 -0
  274. package/lib/third-party/arborist/lib/spec-from-lock.js +34 -0
  275. package/lib/third-party/arborist/lib/tree-check.js +165 -0
  276. package/lib/third-party/arborist/lib/validate-npm-package-name.js +107 -0
  277. package/lib/third-party/arborist/lib/version-from-tgz.js +51 -0
  278. package/lib/third-party/arborist/lib/yarn-lock.js +397 -0
  279. package/lib/validator/bomValidator.js +985 -0
  280. package/lib/validator/complianceEngine.js +241 -0
  281. package/lib/validator/complianceRules.js +1680 -0
  282. package/lib/validator/generated/runtime.mjs +17 -0
  283. package/lib/validator/generated/validate-1.6.mjs +21258 -0
  284. package/lib/validator/generated/validate-1.7.mjs +24803 -0
  285. package/lib/validator/generated/validate-2.0.mjs +22931 -0
  286. package/lib/validator/index.js +246 -0
  287. package/lib/validator/reporters/annotations.js +142 -0
  288. package/lib/validator/reporters/console.js +160 -0
  289. package/lib/validator/reporters/index.js +41 -0
  290. package/lib/validator/reporters/json.js +37 -0
  291. package/lib/validator/reporters/sarif.js +184 -0
  292. package/package.json +209 -26
  293. package/types/bin/audit.d.ts +3 -0
  294. package/types/bin/audit.d.ts.map +1 -0
  295. package/types/bin/cdxgen.d.ts +3 -0
  296. package/types/bin/cdxgen.d.ts.map +1 -0
  297. package/types/bin/convert.d.ts +3 -0
  298. package/types/bin/convert.d.ts.map +1 -0
  299. package/types/bin/evinse.d.ts +3 -0
  300. package/types/bin/evinse.d.ts.map +1 -0
  301. package/types/bin/hbom.d.ts +3 -0
  302. package/types/bin/hbom.d.ts.map +1 -0
  303. package/types/bin/repl.d.ts +3 -0
  304. package/types/bin/repl.d.ts.map +1 -0
  305. package/types/bin/sign.d.ts +3 -0
  306. package/types/bin/sign.d.ts.map +1 -0
  307. package/types/bin/tracebom.d.ts +3 -0
  308. package/types/bin/tracebom.d.ts.map +1 -0
  309. package/types/bin/validate.d.ts +14 -0
  310. package/types/bin/validate.d.ts.map +1 -0
  311. package/types/bin/verify.d.ts +3 -0
  312. package/types/bin/verify.d.ts.map +1 -0
  313. package/types/lib/audit/index.d.ts +153 -0
  314. package/types/lib/audit/index.d.ts.map +1 -0
  315. package/types/lib/audit/progress.d.ts +31 -0
  316. package/types/lib/audit/progress.d.ts.map +1 -0
  317. package/types/lib/audit/reporters.d.ts +62 -0
  318. package/types/lib/audit/reporters.d.ts.map +1 -0
  319. package/types/lib/audit/scoring.d.ts +36 -0
  320. package/types/lib/audit/scoring.d.ts.map +1 -0
  321. package/types/lib/audit/targets.d.ts +77 -0
  322. package/types/lib/audit/targets.d.ts.map +1 -0
  323. package/types/lib/cli/bomAssembly.d.ts +329 -0
  324. package/types/lib/cli/bomAssembly.d.ts.map +1 -0
  325. package/types/lib/cli/cliOptions.d.ts +156 -0
  326. package/types/lib/cli/cliOptions.d.ts.map +1 -0
  327. package/types/lib/cli/index.d.ts +107 -0
  328. package/types/lib/cli/index.d.ts.map +1 -0
  329. package/types/lib/cli/jsBom.d.ts +94 -0
  330. package/types/lib/cli/jsBom.d.ts.map +1 -0
  331. package/types/lib/cli/jvmBom.d.ts +54 -0
  332. package/types/lib/cli/jvmBom.d.ts.map +1 -0
  333. package/types/lib/cli/managedBom.d.ts +105 -0
  334. package/types/lib/cli/managedBom.d.ts.map +1 -0
  335. package/types/lib/cli/nativeBom.d.ts +143 -0
  336. package/types/lib/cli/nativeBom.d.ts.map +1 -0
  337. package/types/lib/core/activity.d.ts +178 -0
  338. package/types/lib/core/activity.d.ts.map +1 -0
  339. package/types/lib/core/env.d.ts +192 -0
  340. package/types/lib/core/env.d.ts.map +1 -0
  341. package/types/lib/core/fs.d.ts +158 -0
  342. package/types/lib/core/fs.d.ts.map +1 -0
  343. package/types/lib/core/httpClient.d.ts +149 -0
  344. package/types/lib/core/httpClient.d.ts.map +1 -0
  345. package/types/lib/core/logger.d.ts +50 -0
  346. package/types/lib/core/logger.d.ts.map +1 -0
  347. package/types/lib/core/parallel.d.ts +95 -0
  348. package/types/lib/core/parallel.d.ts.map +1 -0
  349. package/types/lib/core/paths.d.ts +36 -0
  350. package/types/lib/core/paths.d.ts.map +1 -0
  351. package/types/lib/core/projectConfig.d.ts +23 -0
  352. package/types/lib/core/projectConfig.d.ts.map +1 -0
  353. package/types/lib/core/propertySanitizer.d.ts +23 -0
  354. package/types/lib/core/propertySanitizer.d.ts.map +1 -0
  355. package/types/lib/core/spdx.d.ts +5 -0
  356. package/types/lib/core/spdx.d.ts.map +1 -0
  357. package/types/lib/core/state.d.ts +20 -0
  358. package/types/lib/core/state.d.ts.map +1 -0
  359. package/types/lib/core/text.d.ts +78 -0
  360. package/types/lib/core/text.d.ts.map +1 -0
  361. package/types/lib/core/ui.d.ts +87 -0
  362. package/types/lib/core/ui.d.ts.map +1 -0
  363. package/types/lib/core/urls.d.ts +43 -0
  364. package/types/lib/core/urls.d.ts.map +1 -0
  365. package/types/lib/ecosystems/asarutils.d.ts +71 -0
  366. package/types/lib/ecosystems/asarutils.d.ts.map +1 -0
  367. package/types/lib/ecosystems/bunutils.d.ts +38 -0
  368. package/types/lib/ecosystems/bunutils.d.ts.map +1 -0
  369. package/types/lib/ecosystems/caxa.d.ts +8 -0
  370. package/types/lib/ecosystems/caxa.d.ts.map +1 -0
  371. package/types/lib/ecosystems/chromextutils.d.ts +97 -0
  372. package/types/lib/ecosystems/chromextutils.d.ts.map +1 -0
  373. package/types/lib/ecosystems/cmakeResolver.d.ts +176 -0
  374. package/types/lib/ecosystems/cmakeResolver.d.ts.map +1 -0
  375. package/types/lib/ecosystems/cppEvidence.d.ts +35 -0
  376. package/types/lib/ecosystems/cppEvidence.d.ts.map +1 -0
  377. package/types/lib/ecosystems/denoutils.d.ts +76 -0
  378. package/types/lib/ecosystems/denoutils.d.ts.map +1 -0
  379. package/types/lib/ecosystems/dotnetutils.d.ts +45 -0
  380. package/types/lib/ecosystems/dotnetutils.d.ts.map +1 -0
  381. package/types/lib/ecosystems/ecosystems.d.ts +279 -0
  382. package/types/lib/ecosystems/ecosystems.d.ts.map +1 -0
  383. package/types/lib/ecosystems/golem.d.ts +60 -0
  384. package/types/lib/ecosystems/golem.d.ts.map +1 -0
  385. package/types/lib/ecosystems/gradleutils.d.ts +139 -0
  386. package/types/lib/ecosystems/gradleutils.d.ts.map +1 -0
  387. package/types/lib/ecosystems/jsEvidence.d.ts +17 -0
  388. package/types/lib/ecosystems/jsEvidence.d.ts.map +1 -0
  389. package/types/lib/ecosystems/npmutils.d.ts +183 -0
  390. package/types/lib/ecosystems/npmutils.d.ts.map +1 -0
  391. package/types/lib/ecosystems/parsers-bazel.d.ts +36 -0
  392. package/types/lib/ecosystems/parsers-bazel.d.ts.map +1 -0
  393. package/types/lib/ecosystems/parsers-dotnet.d.ts +116 -0
  394. package/types/lib/ecosystems/parsers-dotnet.d.ts.map +1 -0
  395. package/types/lib/ecosystems/parsers-gleam.d.ts +33 -0
  396. package/types/lib/ecosystems/parsers-gleam.d.ts.map +1 -0
  397. package/types/lib/ecosystems/parsers-go.d.ts +92 -0
  398. package/types/lib/ecosystems/parsers-go.d.ts.map +1 -0
  399. package/types/lib/ecosystems/parsers-js.d.ts +242 -0
  400. package/types/lib/ecosystems/parsers-js.d.ts.map +1 -0
  401. package/types/lib/ecosystems/parsers-jvm.d.ts +100 -0
  402. package/types/lib/ecosystems/parsers-jvm.d.ts.map +1 -0
  403. package/types/lib/ecosystems/parsers-misc.d.ts +450 -0
  404. package/types/lib/ecosystems/parsers-misc.d.ts.map +1 -0
  405. package/types/lib/ecosystems/parsers-python.d.ts +145 -0
  406. package/types/lib/ecosystems/parsers-python.d.ts.map +1 -0
  407. package/types/lib/ecosystems/parsers-rust.d.ts +56 -0
  408. package/types/lib/ecosystems/parsers-rust.d.ts.map +1 -0
  409. package/types/lib/ecosystems/parsers-zig.d.ts +83 -0
  410. package/types/lib/ecosystems/parsers-zig.d.ts.map +1 -0
  411. package/types/lib/ecosystems/pep770.d.ts +38 -0
  412. package/types/lib/ecosystems/pep770.d.ts.map +1 -0
  413. package/types/lib/ecosystems/pylockutils.d.ts +68 -0
  414. package/types/lib/ecosystems/pylockutils.d.ts.map +1 -0
  415. package/types/lib/ecosystems/pythonutils.d.ts +70 -0
  416. package/types/lib/ecosystems/pythonutils.d.ts.map +1 -0
  417. package/types/lib/ecosystems/registryProvenance.d.ts +26 -0
  418. package/types/lib/ecosystems/registryProvenance.d.ts.map +1 -0
  419. package/types/lib/ecosystems/remote/huggingface.d.ts +31 -0
  420. package/types/lib/ecosystems/remote/huggingface.d.ts.map +1 -0
  421. package/types/lib/ecosystems/rubyutils.d.ts +182 -0
  422. package/types/lib/ecosystems/rubyutils.d.ts.map +1 -0
  423. package/types/lib/ecosystems/rusi.d.ts +40 -0
  424. package/types/lib/ecosystems/rusi.d.ts.map +1 -0
  425. package/types/lib/ecosystems/sbtutils.d.ts +179 -0
  426. package/types/lib/ecosystems/sbtutils.d.ts.map +1 -0
  427. package/types/lib/ecosystems/tea.d.ts +180 -0
  428. package/types/lib/ecosystems/tea.d.ts.map +1 -0
  429. package/types/lib/ecosystems/utils.d.ts +41 -0
  430. package/types/lib/ecosystems/utils.d.ts.map +1 -0
  431. package/types/lib/ecosystems/zigResolver.d.ts +70 -0
  432. package/types/lib/ecosystems/zigResolver.d.ts.map +1 -0
  433. package/types/lib/evinser/db.d.ts +17 -0
  434. package/types/lib/evinser/db.d.ts.map +1 -0
  435. package/types/lib/evinser/evinser.d.ts +354 -0
  436. package/types/lib/evinser/evinser.d.ts.map +1 -0
  437. package/types/lib/evinser/scalasem.d.ts +15 -0
  438. package/types/lib/evinser/scalasem.d.ts.map +1 -0
  439. package/types/lib/evinser/swiftsem.d.ts +103 -0
  440. package/types/lib/evinser/swiftsem.d.ts.map +1 -0
  441. package/types/lib/helpers/annotationFormatter.d.ts +23 -0
  442. package/types/lib/helpers/annotationFormatter.d.ts.map +1 -0
  443. package/types/lib/helpers/bomSigner.d.ts +28 -0
  444. package/types/lib/helpers/bomSigner.d.ts.map +1 -0
  445. package/types/lib/helpers/exportUtils.d.ts +52 -0
  446. package/types/lib/helpers/exportUtils.d.ts.map +1 -0
  447. package/types/lib/helpers/remote/dependency-track.d.ts +23 -0
  448. package/types/lib/helpers/remote/dependency-track.d.ts.map +1 -0
  449. package/types/lib/helpers/versutils.d.ts +8 -0
  450. package/types/lib/helpers/versutils.d.ts.map +1 -0
  451. package/types/lib/helpers/vsixutils.d.ts +130 -0
  452. package/types/lib/helpers/vsixutils.d.ts.map +1 -0
  453. package/types/lib/inventory/agentFormulationParser.d.ts +21 -0
  454. package/types/lib/inventory/agentFormulationParser.d.ts.map +1 -0
  455. package/types/lib/inventory/aiCollector.d.ts +61 -0
  456. package/types/lib/inventory/aiCollector.d.ts.map +1 -0
  457. package/types/lib/inventory/aiInventory.d.ts +103 -0
  458. package/types/lib/inventory/aiInventory.d.ts.map +1 -0
  459. package/types/lib/inventory/aiModelVariants.d.ts +31 -0
  460. package/types/lib/inventory/aiModelVariants.d.ts.map +1 -0
  461. package/types/lib/inventory/aiOversightCollector.d.ts +28 -0
  462. package/types/lib/inventory/aiOversightCollector.d.ts.map +1 -0
  463. package/types/lib/inventory/aiProvenanceCollector.d.ts +13 -0
  464. package/types/lib/inventory/aiProvenanceCollector.d.ts.map +1 -0
  465. package/types/lib/inventory/analyzer.d.ts +157 -0
  466. package/types/lib/inventory/analyzer.d.ts.map +1 -0
  467. package/types/lib/inventory/analyzerScope.d.ts +106 -0
  468. package/types/lib/inventory/analyzerScope.d.ts.map +1 -0
  469. package/types/lib/inventory/astWorker.d.ts +9 -0
  470. package/types/lib/inventory/astWorker.d.ts.map +1 -0
  471. package/types/lib/inventory/atomUtils.d.ts +159 -0
  472. package/types/lib/inventory/atomUtils.d.ts.map +1 -0
  473. package/types/lib/inventory/auditCategories.d.ts +80 -0
  474. package/types/lib/inventory/auditCategories.d.ts.map +1 -0
  475. package/types/lib/inventory/bomUtils.d.ts +145 -0
  476. package/types/lib/inventory/bomUtils.d.ts.map +1 -0
  477. package/types/lib/inventory/cacheCommands.d.ts +28 -0
  478. package/types/lib/inventory/cacheCommands.d.ts.map +1 -0
  479. package/types/lib/inventory/cacheDir.d.ts +55 -0
  480. package/types/lib/inventory/cacheDir.d.ts.map +1 -0
  481. package/types/lib/inventory/cbomutils.d.ts +37 -0
  482. package/types/lib/inventory/cbomutils.d.ts.map +1 -0
  483. package/types/lib/inventory/cdxrs.d.ts +90 -0
  484. package/types/lib/inventory/cdxrs.d.ts.map +1 -0
  485. package/types/lib/inventory/ciParsers/azurePipelines.d.ts +27 -0
  486. package/types/lib/inventory/ciParsers/azurePipelines.d.ts.map +1 -0
  487. package/types/lib/inventory/ciParsers/circleCi.d.ts +27 -0
  488. package/types/lib/inventory/ciParsers/circleCi.d.ts.map +1 -0
  489. package/types/lib/inventory/ciParsers/common.d.ts +11 -0
  490. package/types/lib/inventory/ciParsers/common.d.ts.map +1 -0
  491. package/types/lib/inventory/ciParsers/githubActions.d.ts +38 -0
  492. package/types/lib/inventory/ciParsers/githubActions.d.ts.map +1 -0
  493. package/types/lib/inventory/ciParsers/gitlabCi.d.ts +26 -0
  494. package/types/lib/inventory/ciParsers/gitlabCi.d.ts.map +1 -0
  495. package/types/lib/inventory/ciParsers/jenkins.d.ts +26 -0
  496. package/types/lib/inventory/ciParsers/jenkins.d.ts.map +1 -0
  497. package/types/lib/inventory/citations.d.ts +90 -0
  498. package/types/lib/inventory/citations.d.ts.map +1 -0
  499. package/types/lib/inventory/communityAiConfigParser.d.ts +14 -0
  500. package/types/lib/inventory/communityAiConfigParser.d.ts.map +1 -0
  501. package/types/lib/inventory/containerRisk.d.ts +20 -0
  502. package/types/lib/inventory/containerRisk.d.ts.map +1 -0
  503. package/types/lib/inventory/cryptoAlgorithmFamily.d.ts +37 -0
  504. package/types/lib/inventory/cryptoAlgorithmFamily.d.ts.map +1 -0
  505. package/types/lib/inventory/deps.d.ts +140 -0
  506. package/types/lib/inventory/deps.d.ts.map +1 -0
  507. package/types/lib/inventory/depsUtils.d.ts +74 -0
  508. package/types/lib/inventory/depsUtils.d.ts.map +1 -0
  509. package/types/lib/inventory/display.d.ts +227 -0
  510. package/types/lib/inventory/display.d.ts.map +1 -0
  511. package/types/lib/inventory/dosai.d.ts +130 -0
  512. package/types/lib/inventory/dosai.d.ts.map +1 -0
  513. package/types/lib/inventory/dosaiParsers.d.ts +59 -0
  514. package/types/lib/inventory/dosaiParsers.d.ts.map +1 -0
  515. package/types/lib/inventory/dynamic.d.ts +25 -0
  516. package/types/lib/inventory/dynamic.d.ts.map +1 -0
  517. package/types/lib/inventory/envcontext.d.ts +377 -0
  518. package/types/lib/inventory/envcontext.d.ts.map +1 -0
  519. package/types/lib/inventory/evidenceUtils.d.ts +74 -0
  520. package/types/lib/inventory/evidenceUtils.d.ts.map +1 -0
  521. package/types/lib/inventory/fetchBatch.d.ts +127 -0
  522. package/types/lib/inventory/fetchBatch.d.ts.map +1 -0
  523. package/types/lib/inventory/fetchRate.d.ts +118 -0
  524. package/types/lib/inventory/fetchRate.d.ts.map +1 -0
  525. package/types/lib/inventory/forgeEnricher.d.ts +31 -0
  526. package/types/lib/inventory/forgeEnricher.d.ts.map +1 -0
  527. package/types/lib/inventory/formulationParsers.d.ts +50 -0
  528. package/types/lib/inventory/formulationParsers.d.ts.map +1 -0
  529. package/types/lib/inventory/gtfobins.d.ts +27 -0
  530. package/types/lib/inventory/gtfobins.d.ts.map +1 -0
  531. package/types/lib/inventory/hbom.d.ts +58 -0
  532. package/types/lib/inventory/hbom.d.ts.map +1 -0
  533. package/types/lib/inventory/hbomAnalysis.d.ts +56 -0
  534. package/types/lib/inventory/hbomAnalysis.d.ts.map +1 -0
  535. package/types/lib/inventory/hbomLoader.d.ts +7 -0
  536. package/types/lib/inventory/hbomLoader.d.ts.map +1 -0
  537. package/types/lib/inventory/hostTopology.d.ts +47 -0
  538. package/types/lib/inventory/hostTopology.d.ts.map +1 -0
  539. package/types/lib/inventory/inventoryStats.d.ts +42 -0
  540. package/types/lib/inventory/inventoryStats.d.ts.map +1 -0
  541. package/types/lib/inventory/jsonLike.d.ts +23 -0
  542. package/types/lib/inventory/jsonLike.d.ts.map +1 -0
  543. package/types/lib/inventory/licenseEnhancer.d.ts +70 -0
  544. package/types/lib/inventory/licenseEnhancer.d.ts.map +1 -0
  545. package/types/lib/inventory/lolbas.d.ts +16 -0
  546. package/types/lib/inventory/lolbas.d.ts.map +1 -0
  547. package/types/lib/inventory/mcp.d.ts +29 -0
  548. package/types/lib/inventory/mcp.d.ts.map +1 -0
  549. package/types/lib/inventory/mcpConfigParser.d.ts +20 -0
  550. package/types/lib/inventory/mcpConfigParser.d.ts.map +1 -0
  551. package/types/lib/inventory/mcpDiscovery.d.ts +33 -0
  552. package/types/lib/inventory/mcpDiscovery.d.ts.map +1 -0
  553. package/types/lib/inventory/mcpPinning.d.ts +11 -0
  554. package/types/lib/inventory/mcpPinning.d.ts.map +1 -0
  555. package/types/lib/inventory/osPackageResolver.d.ts +49 -0
  556. package/types/lib/inventory/osPackageResolver.d.ts.map +1 -0
  557. package/types/lib/inventory/osinfo.d.ts +201 -0
  558. package/types/lib/inventory/osinfo.d.ts.map +1 -0
  559. package/types/lib/inventory/osqueryTransform.d.ts +84 -0
  560. package/types/lib/inventory/osqueryTransform.d.ts.map +1 -0
  561. package/types/lib/inventory/plugins.d.ts +58 -0
  562. package/types/lib/inventory/plugins.d.ts.map +1 -0
  563. package/types/lib/inventory/protobom.d.ts +71 -0
  564. package/types/lib/inventory/protobom.d.ts.map +1 -0
  565. package/types/lib/inventory/protobomLoader.d.ts +17 -0
  566. package/types/lib/inventory/protobomLoader.d.ts.map +1 -0
  567. package/types/lib/inventory/provenanceUtils.d.ts +98 -0
  568. package/types/lib/inventory/provenanceUtils.d.ts.map +1 -0
  569. package/types/lib/inventory/purl.d.ts +313 -0
  570. package/types/lib/inventory/purl.d.ts.map +1 -0
  571. package/types/lib/inventory/rustFormulationParser.d.ts +17 -0
  572. package/types/lib/inventory/rustFormulationParser.d.ts.map +1 -0
  573. package/types/lib/inventory/sbomDocument.d.ts +59 -0
  574. package/types/lib/inventory/sbomDocument.d.ts.map +1 -0
  575. package/types/lib/inventory/source.d.ts +163 -0
  576. package/types/lib/inventory/source.d.ts.map +1 -0
  577. package/types/lib/inventory/spdx.d.ts +66 -0
  578. package/types/lib/inventory/spdx.d.ts.map +1 -0
  579. package/types/lib/inventory/spdxExpression.d.ts +58 -0
  580. package/types/lib/inventory/spdxExpression.d.ts.map +1 -0
  581. package/types/lib/inventory/spdxUtils.d.ts +12 -0
  582. package/types/lib/inventory/spdxUtils.d.ts.map +1 -0
  583. package/types/lib/inventory/table.d.ts +22 -0
  584. package/types/lib/inventory/table.d.ts.map +1 -0
  585. package/types/lib/inventory/traceRunner.d.ts +80 -0
  586. package/types/lib/inventory/traceRunner.d.ts.map +1 -0
  587. package/types/lib/inventory/unicodeScan.d.ts +46 -0
  588. package/types/lib/inventory/unicodeScan.d.ts.map +1 -0
  589. package/types/lib/managers/binary.d.ts +147 -0
  590. package/types/lib/managers/binary.d.ts.map +1 -0
  591. package/types/lib/managers/containerutils.d.ts +30 -0
  592. package/types/lib/managers/containerutils.d.ts.map +1 -0
  593. package/types/lib/managers/docker.d.ts +157 -0
  594. package/types/lib/managers/docker.d.ts.map +1 -0
  595. package/types/lib/managers/dockerConnection.d.ts +42 -0
  596. package/types/lib/managers/dockerConnection.d.ts.map +1 -0
  597. package/types/lib/managers/oci.d.ts +21 -0
  598. package/types/lib/managers/oci.d.ts.map +1 -0
  599. package/types/lib/managers/piptree.d.ts +13 -0
  600. package/types/lib/managers/piptree.d.ts.map +1 -0
  601. package/types/lib/parsers/cmakeCache.d.ts +70 -0
  602. package/types/lib/parsers/cmakeCache.d.ts.map +1 -0
  603. package/types/lib/parsers/gguf.d.ts +39 -0
  604. package/types/lib/parsers/gguf.d.ts.map +1 -0
  605. package/types/lib/parsers/gitAiNotes.d.ts +15 -0
  606. package/types/lib/parsers/gitAiNotes.d.ts.map +1 -0
  607. package/types/lib/parsers/gitmodules.d.ts +88 -0
  608. package/types/lib/parsers/gitmodules.d.ts.map +1 -0
  609. package/types/lib/parsers/htmlExtract.d.ts +34 -0
  610. package/types/lib/parsers/htmlExtract.d.ts.map +1 -0
  611. package/types/lib/parsers/huggingfaceManifest.d.ts +153 -0
  612. package/types/lib/parsers/huggingfaceManifest.d.ts.map +1 -0
  613. package/types/lib/parsers/huggingfaceUtils.d.ts +155 -0
  614. package/types/lib/parsers/huggingfaceUtils.d.ts.map +1 -0
  615. package/types/lib/parsers/iri.d.ts +68 -0
  616. package/types/lib/parsers/iri.d.ts.map +1 -0
  617. package/types/lib/parsers/npmrc.d.ts +33 -0
  618. package/types/lib/parsers/npmrc.d.ts.map +1 -0
  619. package/types/lib/parsers/ollama.d.ts +22 -0
  620. package/types/lib/parsers/ollama.d.ts.map +1 -0
  621. package/types/lib/parsers/xml.d.ts +47 -0
  622. package/types/lib/parsers/xml.d.ts.map +1 -0
  623. package/types/lib/server/server.d.ts +51 -0
  624. package/types/lib/server/server.d.ts.map +1 -0
  625. package/types/lib/stages/postgen/annotator.d.ts +36 -0
  626. package/types/lib/stages/postgen/annotator.d.ts.map +1 -0
  627. package/types/lib/stages/postgen/auditBom.d.ts +92 -0
  628. package/types/lib/stages/postgen/auditBom.d.ts.map +1 -0
  629. package/types/lib/stages/postgen/postgen.d.ts +59 -0
  630. package/types/lib/stages/postgen/postgen.d.ts.map +1 -0
  631. package/types/lib/stages/postgen/ruleEngine.d.ts +18 -0
  632. package/types/lib/stages/postgen/ruleEngine.d.ts.map +1 -0
  633. package/types/lib/stages/postgen/sortBom.d.ts +34 -0
  634. package/types/lib/stages/postgen/sortBom.d.ts.map +1 -0
  635. package/types/lib/stages/postgen/spdxConverter.d.ts +11 -0
  636. package/types/lib/stages/postgen/spdxConverter.d.ts.map +1 -0
  637. package/types/lib/stages/postgen/specVersionCompat.d.ts +71 -0
  638. package/types/lib/stages/postgen/specVersionCompat.d.ts.map +1 -0
  639. package/types/lib/stages/pregen/envAudit.d.ts +14 -0
  640. package/types/lib/stages/pregen/envAudit.d.ts.map +1 -0
  641. package/types/lib/stages/pregen/pregen.d.ts +59 -0
  642. package/types/lib/stages/pregen/pregen.d.ts.map +1 -0
  643. package/types/lib/third-party/arborist/lib/arborist/index.d.ts +47 -0
  644. package/types/lib/third-party/arborist/lib/arborist/index.d.ts.map +1 -0
  645. package/types/lib/third-party/arborist/lib/arborist/load-actual.d.ts +4 -0
  646. package/types/lib/third-party/arborist/lib/arborist/load-actual.d.ts.map +1 -0
  647. package/types/lib/third-party/arborist/lib/arborist/load-virtual.d.ts +4 -0
  648. package/types/lib/third-party/arborist/lib/arborist/load-virtual.d.ts.map +1 -0
  649. package/types/lib/third-party/arborist/lib/bin-links.d.ts +18 -0
  650. package/types/lib/third-party/arborist/lib/bin-links.d.ts.map +1 -0
  651. package/types/lib/third-party/arborist/lib/calc-dep-flags.d.ts +3 -0
  652. package/types/lib/third-party/arborist/lib/calc-dep-flags.d.ts.map +1 -0
  653. package/types/lib/third-party/arborist/lib/case-insensitive-map.d.ts +9 -0
  654. package/types/lib/third-party/arborist/lib/case-insensitive-map.d.ts.map +1 -0
  655. package/types/lib/third-party/arborist/lib/consistent-resolve.d.ts +3 -0
  656. package/types/lib/third-party/arborist/lib/consistent-resolve.d.ts.map +1 -0
  657. package/types/lib/third-party/arborist/lib/debug.d.ts +3 -0
  658. package/types/lib/third-party/arborist/lib/debug.d.ts.map +1 -0
  659. package/types/lib/third-party/arborist/lib/dep-valid.d.ts +3 -0
  660. package/types/lib/third-party/arborist/lib/dep-valid.d.ts.map +1 -0
  661. package/types/lib/third-party/arborist/lib/edge.d.ts +46 -0
  662. package/types/lib/third-party/arborist/lib/edge.d.ts.map +1 -0
  663. package/types/lib/third-party/arborist/lib/from-path.d.ts +3 -0
  664. package/types/lib/third-party/arborist/lib/from-path.d.ts.map +1 -0
  665. package/types/lib/third-party/arborist/lib/gather-dep-set.d.ts +3 -0
  666. package/types/lib/third-party/arborist/lib/gather-dep-set.d.ts.map +1 -0
  667. package/types/lib/third-party/arborist/lib/index.d.ts +3 -0
  668. package/types/lib/third-party/arborist/lib/index.d.ts.map +1 -0
  669. package/types/lib/third-party/arborist/lib/inventory.d.ts +14 -0
  670. package/types/lib/third-party/arborist/lib/inventory.d.ts.map +1 -0
  671. package/types/lib/third-party/arborist/lib/link.d.ts +18 -0
  672. package/types/lib/third-party/arborist/lib/link.d.ts.map +1 -0
  673. package/types/lib/third-party/arborist/lib/node.d.ts +112 -0
  674. package/types/lib/third-party/arborist/lib/node.d.ts.map +1 -0
  675. package/types/lib/third-party/arborist/lib/npm-extension.d.ts +18 -0
  676. package/types/lib/third-party/arborist/lib/npm-extension.d.ts.map +1 -0
  677. package/types/lib/third-party/arborist/lib/override-resolves.d.ts +3 -0
  678. package/types/lib/third-party/arborist/lib/override-resolves.d.ts.map +1 -0
  679. package/types/lib/third-party/arborist/lib/override-set.d.ts +27 -0
  680. package/types/lib/third-party/arborist/lib/override-set.d.ts.map +1 -0
  681. package/types/lib/third-party/arborist/lib/package-extensions.d.ts +36 -0
  682. package/types/lib/third-party/arborist/lib/package-extensions.d.ts.map +1 -0
  683. package/types/lib/third-party/arborist/lib/printable.d.ts +3 -0
  684. package/types/lib/third-party/arborist/lib/printable.d.ts.map +1 -0
  685. package/types/lib/third-party/arborist/lib/proc-log.d.ts +20 -0
  686. package/types/lib/third-party/arborist/lib/proc-log.d.ts.map +1 -0
  687. package/types/lib/third-party/arborist/lib/realpath.d.ts +3 -0
  688. package/types/lib/third-party/arborist/lib/realpath.d.ts.map +1 -0
  689. package/types/lib/third-party/arborist/lib/relpath.d.ts +3 -0
  690. package/types/lib/third-party/arborist/lib/relpath.d.ts.map +1 -0
  691. package/types/lib/third-party/arborist/lib/shrinkwrap.d.ts +54 -0
  692. package/types/lib/third-party/arborist/lib/shrinkwrap.d.ts.map +1 -0
  693. package/types/lib/third-party/arborist/lib/spec-from-lock.d.ts +3 -0
  694. package/types/lib/third-party/arborist/lib/spec-from-lock.d.ts.map +1 -0
  695. package/types/lib/third-party/arborist/lib/tree-check.d.ts +3 -0
  696. package/types/lib/third-party/arborist/lib/tree-check.d.ts.map +1 -0
  697. package/types/lib/third-party/arborist/lib/validate-npm-package-name.d.ts +13 -0
  698. package/types/lib/third-party/arborist/lib/validate-npm-package-name.d.ts.map +1 -0
  699. package/types/lib/third-party/arborist/lib/version-from-tgz.d.ts +6 -0
  700. package/types/lib/third-party/arborist/lib/version-from-tgz.d.ts.map +1 -0
  701. package/types/lib/third-party/arborist/lib/yarn-lock.d.ts +35 -0
  702. package/types/lib/third-party/arborist/lib/yarn-lock.d.ts.map +1 -0
  703. package/types/lib/validator/bomValidator.d.ts +40 -0
  704. package/types/lib/validator/bomValidator.d.ts.map +1 -0
  705. package/types/lib/validator/complianceEngine.d.ts +72 -0
  706. package/types/lib/validator/complianceEngine.d.ts.map +1 -0
  707. package/types/lib/validator/complianceRules.d.ts +61 -0
  708. package/types/lib/validator/complianceRules.d.ts.map +1 -0
  709. package/types/lib/validator/index.d.ts +101 -0
  710. package/types/lib/validator/index.d.ts.map +1 -0
  711. package/types/lib/validator/reporters/annotations.d.ts +37 -0
  712. package/types/lib/validator/reporters/annotations.d.ts.map +1 -0
  713. package/types/lib/validator/reporters/console.d.ts +34 -0
  714. package/types/lib/validator/reporters/console.d.ts.map +1 -0
  715. package/types/lib/validator/reporters/index.d.ts +30 -0
  716. package/types/lib/validator/reporters/index.d.ts.map +1 -0
  717. package/types/lib/validator/reporters/json.d.ts +11 -0
  718. package/types/lib/validator/reporters/json.d.ts.map +1 -0
  719. package/types/lib/validator/reporters/sarif.d.ts +22 -0
  720. package/types/lib/validator/reporters/sarif.d.ts.map +1 -0
  721. package/mod.d.ts +0 -7
  722. package/mod.js +0 -22
@@ -0,0 +1,18 @@
1
+ import Node from "./node.js";
2
+ declare const _loadDeps: unique symbol;
3
+ declare class Link extends Node {
4
+ isStoreLink: any;
5
+ constructor(options: any);
6
+ get version(): any;
7
+ get target(): any;
8
+ set target(target: any);
9
+ get resolved(): string | null;
10
+ set resolved(r: string | null);
11
+ [_loadDeps](): void;
12
+ recalculateOutEdgesOverrides(): void;
13
+ get children(): Map<any, any>;
14
+ set children(c: Map<any, any>);
15
+ get isLink(): boolean;
16
+ }
17
+ export default Link;
18
+ //# sourceMappingURL=link.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"link.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/link.js"],"names":[],"mappings":"AAEA,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,QAAA,MAAM,SAAS,eAAwC,CAAC;AAKxD,cAAM,IAAK,SAAQ,IAAI;IAsBd,WAAW;IArBlB,YAAY,OAAO,KAAA,EAoClB;IAED,IAAI,OAAO,QAEV;IAED,IAAI,MAAM,QAET;IAED,IAAI,MAAM,CAAC,MAAM,KAAA,EA4ChB;IAGD,IAAI,QAAQ,kBAMX;IAED,IAAI,QAAQ,CAAC,CAAC,eAAA,EAAI;IAIlB,CAAC,SAAS,CAAC,SAAK;IAGhB,4BAA4B,SAQ3B;IAKD,IAAI,QAAQ,kBAEX;IAED,IAAI,QAAQ,CAAC,CAAC,eAAA,EAAI;IAElB,IAAI,MAAM,YAET;CACF;eA2Bc,IAAI"}
@@ -0,0 +1,112 @@
1
+ import util from "node:util";
2
+ import CaseInsensitiveMap from "./case-insensitive-map.js";
3
+ import Inventory from "./inventory.js";
4
+ declare const _reloadNamedEdges: unique symbol;
5
+ declare const _loadDeps: unique symbol;
6
+ declare const _refreshLocation: unique symbol;
7
+ declare const _changePath: unique symbol;
8
+ declare const _delistFromMeta: unique symbol;
9
+ declare const _explain: unique symbol;
10
+ declare class Node {
11
+ #private;
12
+ [util.inspect.custom]: () => any;
13
+ queryContext: {};
14
+ errors: any[];
15
+ isInStore: any;
16
+ sourceReference: any;
17
+ name: any;
18
+ path: any;
19
+ realpath: any;
20
+ resolved: any;
21
+ integrity: any;
22
+ patched: any;
23
+ packageExtensionsApplied: any;
24
+ npmExtensionApplied: any;
25
+ installLinks: any;
26
+ legacyPeerDeps: any;
27
+ children: CaseInsensitiveMap;
28
+ fsChildren: Set<any>;
29
+ inventory: Inventory;
30
+ tops: Set<any>;
31
+ linksIn: Set<any>;
32
+ dev: any;
33
+ optional: any;
34
+ devOptional: any;
35
+ peer: any;
36
+ extraneous: any;
37
+ dummy: boolean;
38
+ inert: any;
39
+ edgesIn: Set<any>;
40
+ edgesOut: CaseInsensitiveMap;
41
+ overrides: any;
42
+ location: any;
43
+ constructor(options: any);
44
+ get meta(): any;
45
+ set meta(meta: any);
46
+ get global(): any;
47
+ get globalTop(): any;
48
+ get workspaces(): any;
49
+ set workspaces(workspaces: any);
50
+ get binPaths(): string[];
51
+ get hasInstallScript(): boolean;
52
+ get version(): any;
53
+ get packageName(): any;
54
+ get pkgid(): string;
55
+ get overridden(): boolean;
56
+ get package(): any;
57
+ set package(pkg: any);
58
+ explain(edge?: null, seen?: any[]): any;
59
+ [_explain](edge: any, seen: any): any;
60
+ isDescendantOf(node: any): boolean;
61
+ shouldOmit(omitSet: any): any;
62
+ getBundler(path?: any[]): any;
63
+ get inBundle(): boolean;
64
+ get inDepBundle(): boolean;
65
+ get isWorkspace(): any;
66
+ get isRoot(): boolean;
67
+ get isProjectRoot(): boolean;
68
+ get isRegistryDependency(): boolean;
69
+ ancestry(): Generator<this, void, unknown>;
70
+ set root(root: any);
71
+ get root(): any;
72
+ [_loadDeps](): void;
73
+ get fsParent(): any;
74
+ set fsParent(fsParent: any);
75
+ canReplaceWith(node: any, ignorePeers: any): boolean;
76
+ canReplace(node: any, ignorePeers: any): any;
77
+ canDedupe(preferDedupe?: boolean, explicitRequest?: boolean): boolean;
78
+ satisfies(requested: any): any;
79
+ matches(node: any): any;
80
+ replaceWith(node: any): void;
81
+ replace(node: any): void;
82
+ get parent(): any;
83
+ set parent(parent: any);
84
+ [_delistFromMeta](): void;
85
+ [_changePath](newPath: any): void;
86
+ [_refreshLocation](): void;
87
+ assertRootOverrides(): void;
88
+ addEdgeOut(edge: any): void;
89
+ recalculateOutEdgesOverrides(): void;
90
+ updateOverridesEdgeInRemoved(otherOverrideSet: any): boolean;
91
+ updateOverridesEdgeInAdded(otherOverrideSet: any): boolean | undefined;
92
+ deleteEdgeIn(edge: any): void;
93
+ addEdgeIn(edge: any): void;
94
+ [_reloadNamedEdges](name: any, rootLoc?: any): void;
95
+ get isLink(): boolean;
96
+ get target(): this;
97
+ set target(n: this);
98
+ get depth(): any;
99
+ get isTop(): any;
100
+ get top(): any;
101
+ get isFsTop(): boolean;
102
+ get fsTop(): any;
103
+ get resolveParent(): any;
104
+ resolve(name: any): any;
105
+ inNodeModules(): any;
106
+ querySelectorAll(query: any, opts: any): never;
107
+ toJSON(): any;
108
+ resetDepFlags(): void;
109
+ unsetDepFlags(): void;
110
+ }
111
+ export default Node;
112
+ //# sourceMappingURL=node.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/node.js"],"names":[],"mappings":"AACA,OAAO,IAAI,MAAM,WAAW,CAAC;AAS7B,OAAO,kBAAkB,MAAM,2BAA2B,CAAC;AAK3D,OAAO,SAAS,MAAM,gBAAgB,CAAC;AA8CvC,QAAA,MAAM,iBAAiB,eAA8B,CAAC;AAEtD,QAAA,MAAM,SAAS,eAAwC,CAAC;AACxD,QAAA,MAAM,gBAAgB,eAAiC,CAAC;AACxD,QAAA,MAAM,WAAW,eAA4B,CAAC;AAE9C,QAAA,MAAM,eAAe,eAAgC,CAAC;AACtD,QAAA,MAAM,QAAQ,eAAqB,CAAC;AAGpC,cAAM,IAAI;;IA4iDR,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAlgDd,YAAY;IAOZ,MAAM;IACN,SAAS;IAIT,eAAe;IAkBf,IAAI;IAOJ,IAAI;IAMJ,QAAQ;IAER,QAAQ;IAqBR,SAAS;IAET,OAAO;IAGP,wBAAwB;IAGxB,mBAAmB;IACnB,YAAY;IACZ,cAAc;IAEd,QAAQ;IACR,UAAU;IACV,SAAS;IACT,IAAI;IACJ,OAAO;IAUL,GAAG;IACH,QAAQ;IACR,WAAW;IACX,IAAI;IACJ,UAAU;IACV,KAAK;IAaP,KAAK;IAEL,OAAO;IACP,QAAQ;IAGN,SAAS;IA4pCX,QAAQ;IApzCf,YAAY,OAAO,KAAA,EAgNlB;IAED,IAAI,IAAI,QAEP;IAED,IAAI,IAAI,CAAC,IAAI,KAAA,EAKZ;IAED,IAAI,MAAM,QAKT;IAGD,IAAI,SAAS,QAEZ;IAED,IAAI,UAAU,QAEb;IAED,IAAI,UAAU,CAAC,UAAU,KAAA,EAaxB;IAED,IAAI,QAAQ,aAWX;IAED,IAAI,gBAAgB,YAInB;IAED,IAAI,OAAO,QAEV;IAED,IAAI,WAAW,QAEd;IAED,IAAI,KAAK,WASR;IAED,IAAI,UAAU,YA2Bb;IAED,IAAI,OAAO,QAEV;IAED,IAAI,OAAO,CAAC,GAAG,KAAA,EA2Bd;IAID,OAAO,CAAC,IAAI,OAAO,EAAE,IAAI,QAAK,OAM7B;IAED,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAA,EAAE,IAAI,KAAA,OAiEpB;IAED,cAAc,CAAC,IAAI,KAAA,WAOlB;IAED,UAAU,CAAC,OAAO,KAAA,OAmBjB;IAED,UAAU,CAAC,IAAI,QAAK,OAyCnB;IAED,IAAI,QAAQ,YAEX;IAKD,IAAI,WAAW,YAGd;IAED,IAAI,WAAW,QAOd;IAED,IAAI,MAAM,YAET;IAED,IAAI,aAAa,YAGhB;IAED,IAAI,oBAAoB,YAUvB;IAEA,QAAQ,mCAIR;IAED,IAAI,IAAI,CAAC,IAAI,KAAA,EA8QZ;IAED,IAAI,IAAI,QAEP;IAYD,CAAC,SAAS,CAAC,SA0CV;IAaD,IAAI,QAAQ,QAGX;IAED,IAAI,QAAQ,CAAC,QAAQ,KAAA,EAkFpB;IAWD,cAAc,CAAC,IAAI,KAAA,EAAE,WAAW,KAAA,WAmD/B;IAED,UAAU,CAAC,IAAI,KAAA,EAAE,WAAW,KAAA,OAE3B;IAKD,SAAS,CAAC,YAAY,UAAQ,EAAE,eAAe,UAAQ,WAiDtD;IAED,SAAS,CAAC,SAAS,KAAA,OAkBlB;IAED,OAAO,CAAC,IAAI,KAAA,OA0CX;IAKD,WAAW,CAAC,IAAI,KAAA,QAEf;IAED,OAAO,CAAC,IAAI,KAAA,QAkCX;IAED,IAAI,MAAM,QAGT;IAYD,IAAI,MAAM,CAAC,MAAM,KAAA,EAgDhB;IAID,CAAC,eAAe,CAAC,SAgBhB;IAGD,CAAC,WAAW,CAAC,CAAC,OAAO,KAAA,QA8BpB;IAKD,CAAC,gBAAgB,CAAC,SAUjB;IAED,mBAAmB,SAiBlB;IAED,UAAU,CAAC,IAAI,KAAA,QAMd;IAED,4BAA4B,SAQ3B;IAED,4BAA4B,CAAC,gBAAgB,KAAA,WA2B5C;IASD,0BAA0B,CAAC,gBAAgB,KAAA,uBA4B1C;IAED,YAAY,CAAC,IAAI,KAAA,QAKhB;IAED,SAAS,CAAC,IAAI,KAAA,QAYb;IAED,CAAC,iBAAiB,CAAC,CAAC,IAAI,KAAA,EAAE,OAAO,MAAgB,QAmBhD;IAED,IAAI,MAAM,YAET;IAED,IAAI,MAAM,SAET;IAED,IAAI,MAAM,CAAC,CAAC,MAAA,EAMX;IAED,IAAI,KAAK,QAKR;IAED,IAAI,KAAK,QAER;IAED,IAAI,GAAG,QAKN;IAED,IAAI,OAAO,YAEV;IAED,IAAI,KAAK,QAKR;IAED,IAAI,aAAa,QAEhB;IAED,OAAO,CAAC,IAAI,KAAA,OAiBX;IAED,aAAa,QASZ;IAID,gBAAgB,CAAC,KAAK,KAAA,EAAE,IAAI,KAAA,SAE3B;IAED,MAAM,QAEL;IAMD,aAAa,SAMZ;IAED,aAAa,SAMZ;CACF;eAEc,IAAI"}
@@ -0,0 +1,18 @@
1
+ declare class NpmExtension {
2
+ present: boolean;
3
+ root: any;
4
+ path: any;
5
+ format: any;
6
+ hash: any;
7
+ constructor();
8
+ load(): Promise<void>;
9
+ apply(): void;
10
+ }
11
+ declare namespace NpmExtension {
12
+ export { NpmExtension };
13
+ export { hasExtensionFile };
14
+ }
15
+ declare const hasExtensionFile: () => boolean;
16
+ export default NpmExtension;
17
+ export { hasExtensionFile, NpmExtension };
18
+ //# sourceMappingURL=npm-extension.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"npm-extension.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/npm-extension.js"],"names":[],"mappings":"AAoBA,cAAM,YAAY;IAET,OAAO;IACP,IAAI;IACJ,IAAI;IACJ,MAAM;IACN,IAAI;IALX,cAMC;IAEK,IAAI,kBAET;IAED,KAAK,SAEJ;CACF;kBAhBK,YAAY;;;;AAkBlB,QAAA,MAAM,gBAAgB,eAAc,CAAC;eAKtB,YAAY;AAC3B,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,CAAC"}
@@ -0,0 +1,3 @@
1
+ declare function overrideResolves(resolved: any, opts: any): any;
2
+ export { overrideResolves };
3
+ //# sourceMappingURL=override-resolves.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"override-resolves.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/override-resolves.js"],"names":[],"mappings":"AAAA,iBAAS,gBAAgB,CAAC,QAAQ,KAAA,EAAE,IAAI,KAAA,OAQvC;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAC"}
@@ -0,0 +1,27 @@
1
+ declare class OverrideSet {
2
+ parent: any;
3
+ children: Map<any, any>;
4
+ name: any;
5
+ key: any;
6
+ keySpec: any;
7
+ value: any;
8
+ constructor({ overrides, key, parent }: {
9
+ key: any;
10
+ overrides: any;
11
+ parent: any;
12
+ });
13
+ childrenAreEqual(other: any): boolean;
14
+ isEqual(other: any): any;
15
+ getEdgeRule(edge: any): any;
16
+ getNodeRule(node: any): any;
17
+ getMatchingRule(node: any): any;
18
+ ancestry(): Generator<this, void, unknown>;
19
+ get isRoot(): boolean;
20
+ get ruleset(): Map<any, any>;
21
+ static findSpecificOverrideSet(first: any, second: any): any;
22
+ static findCommonAncestor(first: any, second: any): any;
23
+ static doOverrideSetsConflict(first: any, second: any): boolean;
24
+ static haveConflictingRules(first: any, second: any): boolean;
25
+ }
26
+ export default OverrideSet;
27
+ //# sourceMappingURL=override-set.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"override-set.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/override-set.js"],"names":[],"mappings":"AAKA,cAAM,WAAW;IAER,MAAM;IACN,QAAQ;IAkBN,IAAI;IAEJ,GAAG;IACH,OAAO;IACP,KAAK;IAxBd,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE;;;;KAAA,EAwCrC;IAED,gBAAgB,CAAC,KAAK,KAAA,WAgBrB;IAED,OAAO,CAAC,KAAK,KAAA,OAiBZ;IAED,WAAW,CAAC,IAAI,KAAA,OAyCf;IAED,WAAW,CAAC,IAAI,KAAA,OAef;IAED,eAAe,CAAC,IAAI,KAAA,OAenB;IAEA,QAAQ,mCAIR;IAED,IAAI,MAAM,YAET;IAED,IAAI,OAAO,kBAgBV;IAED,MAAM,CAAC,uBAAuB,CAAC,KAAK,KAAA,EAAE,MAAM,KAAA,OA4B3C;IAED,MAAM,CAAC,kBAAkB,CAAC,KAAK,KAAA,EAAE,MAAM,KAAA,OAatC;IAED,MAAM,CAAC,sBAAsB,CAAC,KAAK,KAAA,EAAE,MAAM,KAAA,WAa1C;IAED,MAAM,CAAC,oBAAoB,CAAC,KAAK,KAAA,EAAE,MAAM,KAAA,WAiExC;CACF;eAEc,WAAW"}
@@ -0,0 +1,36 @@
1
+ declare const EXTENSION_FIELDS: string[];
2
+ declare const parseSelector: (key: any) => {
3
+ name: string;
4
+ range: string | null;
5
+ };
6
+ declare const rangeMatches: (range: any, version: any) => any;
7
+ declare const canonicalStringify: (val: any) => any;
8
+ declare const canonicalHash: (packageExtensions: any) => any;
9
+ declare class PackageExtensions {
10
+ raw: any;
11
+ present: boolean;
12
+ selectors: {
13
+ key: string;
14
+ name: string;
15
+ range: string | null;
16
+ ext: any;
17
+ }[];
18
+ hash: any;
19
+ constructor(raw: any);
20
+ wouldMatch(name: any, version: any): boolean;
21
+ match(name: any, version: any): {
22
+ key: string;
23
+ name: string;
24
+ range: string | null;
25
+ ext: any;
26
+ };
27
+ apply(pkg: any): {
28
+ pkg: any;
29
+ applied: {
30
+ selector: any;
31
+ };
32
+ } | null;
33
+ }
34
+ export default PackageExtensions;
35
+ export { canonicalHash, canonicalStringify, EXTENSION_FIELDS, PackageExtensions, parseSelector, rangeMatches, };
36
+ //# sourceMappingURL=package-extensions.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"package-extensions.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/package-extensions.js"],"names":[],"mappings":"AAWA,QAAA,MAAM,gBAAgB,UAKrB,CAAC;AAUF,QAAA,MAAM,aAAa;;;CAqClB,CAAC;AAKF,QAAA,MAAM,YAAY,mCAQjB,CAAC;AAgIF,QAAA,MAAM,kBAAkB,mBAWvB,CAAC;AAGF,QAAA,MAAM,aAAa,iCAGJ,CAAC;AAEhB,cAAM,iBAAiB;IAEd,GAAG;IACH,OAAO;IACP,SAAS;;;;;;IACT,IAAI;IAJX,YAAY,GAAG,KAAA,EAkBd;IAGD,UAAU,CAAC,IAAI,KAAA,EAAE,OAAO,KAAA,WAIvB;IAID,KAAK,CAAC,IAAI,KAAA,EAAE,OAAO,KAAA;;;;;MAalB;IAID,KAAK,CAAC,GAAG,KAAA;;;;;aAMR;CACF;eAEc,iBAAiB;AAEhC,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,YAAY,GACb,CAAC"}
@@ -0,0 +1,3 @@
1
+ declare const printableTree: (tree: any, path?: any[]) => any;
2
+ export default printableTree;
3
+ //# sourceMappingURL=printable.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"printable.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/printable.js"],"names":[],"mappings":"AA+LA,QAAA,MAAM,aAAa,kCAgBlB,CAAC;eAEa,aAAa"}
@@ -0,0 +1,20 @@
1
+ declare const noop: () => void;
2
+ declare const log: {
3
+ silly: typeof noop;
4
+ verbose: typeof noop;
5
+ info: typeof noop;
6
+ timing: typeof noop;
7
+ http: typeof noop;
8
+ notice: typeof noop;
9
+ warn: typeof noop;
10
+ error: typeof noop;
11
+ pause: typeof noop;
12
+ resume: typeof noop;
13
+ };
14
+ declare const time: {
15
+ start: () => any;
16
+ end: typeof noop;
17
+ emit: typeof noop;
18
+ };
19
+ export { log, time };
20
+ //# sourceMappingURL=proc-log.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"proc-log.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/proc-log.js"],"names":[],"mappings":"AAKA,QAAA,MAAM,IAAI,YAAW,CAAC;AAGtB,QAAA,MAAM,GAAG;IACP,KAAK;IACL,OAAO;IACP,IAAI;IACJ,MAAM;IACN,IAAI;IACJ,MAAM;IACN,IAAI;IACJ,KAAK;IACL,KAAK;IACL,MAAM;CACP,CAAC;AAIF,QAAA,MAAM,IAAI;IACR,KAAK;IACL,GAAG;IACH,IAAI;CACL,CAAC;AAEF,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC"}
@@ -0,0 +1,3 @@
1
+ declare const realpathCached: (path: any, rpcache: any, stcache: any, depth: any) => any;
2
+ export default realpathCached;
3
+ //# sourceMappingURL=realpath.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"realpath.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/realpath.js"],"names":[],"mappings":"AAUA,QAAA,MAAM,cAAc,4DA8BnB,CAAC;eA2Da,cAAc"}
@@ -0,0 +1,3 @@
1
+ declare const relpath: (from: any, to: any) => any;
2
+ export default relpath;
3
+ //# sourceMappingURL=relpath.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"relpath.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/relpath.js"],"names":[],"mappings":"AAEA,QAAA,MAAM,OAAO,6BAAuD,CAAC;eACtD,OAAO"}
@@ -0,0 +1,54 @@
1
+ import YarnLock from "./yarn-lock.js";
2
+ declare class Shrinkwrap {
3
+ #private;
4
+ lockfileVersion: number | null;
5
+ tree: any;
6
+ path: any;
7
+ filename: any;
8
+ data: any;
9
+ indent: any;
10
+ newline: any;
11
+ loadedFromDisk: boolean;
12
+ type: any;
13
+ yarnLock: YarnLock | null;
14
+ hiddenLockfile: any;
15
+ loadingError: unknown;
16
+ resolveOptions: any;
17
+ packageExtensionsHash: any;
18
+ npmExtensionHash: any;
19
+ originalLockfileVersion: any;
20
+ ancientLockfile: boolean | undefined;
21
+ static get defaultLockfileVersion(): number;
22
+ static load(options: any): Promise<Shrinkwrap>;
23
+ static get keyOrder(): string[];
24
+ static reset(options: any): Promise<Shrinkwrap>;
25
+ static metaFromNode(node: any, path: any, options?: {}): {
26
+ resolved: any;
27
+ link: boolean;
28
+ } | {
29
+ name: any;
30
+ devDependencies: any;
31
+ resolved: any;
32
+ extraneous: boolean;
33
+ peer: boolean;
34
+ dev: boolean;
35
+ optional: boolean;
36
+ devOptional: boolean;
37
+ };
38
+ constructor(options?: {});
39
+ checkYarnLock(spec: any, options?: {}): any;
40
+ reset(): void;
41
+ get loadFiles(): Promise<any>;
42
+ get resetFiles(): Promise<any>;
43
+ inferFormattingOptions(packageJSONData: any): void;
44
+ load(): Promise<this>;
45
+ delete(nodePath: any): void;
46
+ get(nodePath: any): any;
47
+ add(node: any): void;
48
+ addEdge(edge: any): void;
49
+ commit(): any;
50
+ toJSON(): any;
51
+ save(options?: {}): Promise<never[]>;
52
+ }
53
+ export default Shrinkwrap;
54
+ //# sourceMappingURL=shrinkwrap.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"shrinkwrap.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/shrinkwrap.js"],"names":[],"mappings":"AAkBA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAwMtC,cAAM,UAAU;;IAkHL,eAAe;IAOjB,IAAI;IACJ,IAAI;IACJ,QAAQ;IACR,IAAI;IACJ,MAAM;IACN,OAAO;IACP,cAAc;IACd,IAAI;IACJ,QAAQ;IACR,cAAc;IACd,YAAY;IACZ,cAAc;IA8Cd,qBAAqB;IACrB,gBAAgB;IAEhB,uBAAuB;IAmHrB,eAAe;IAvSxB,MAAM,KAAK,sBAAsB,WAEhC;IAED,MAAM,CAAC,IAAI,CAAC,OAAO,KAAA,uBAElB;IAED,MAAM,KAAK,QAAQ,aAElB;IAED,OAAa,KAAK,CAAC,OAAO,KAAA,uBAkBzB;IAED,MAAM,CAAC,YAAY,CAAC,IAAI,KAAA,EAAE,IAAI,KAAA,EAAE,OAAO,KAAK;;;;;;;;;;;;MAkE3C;IAID,YAAY,OAAO,KAAK,EA8BvB;IAOD,aAAa,CAAC,IAAI,KAAA,EAAE,OAAO,KAAK,OA+B/B;IAID,KAAK,SAcJ;IAUD,IAAI,SAAS,iBAkBZ;IAED,IAAI,UAAU,iBAoBb;IAED,sBAAsB,CAAC,eAAe,KAAA,QASrC;IAEK,IAAI,kBAwGT;IA2GD,MAAM,CAAC,QAAQ,KAAA,QAcd;IAED,GAAG,CAAC,QAAQ,KAAA,OAuBX;IA+HD,GAAG,CAAC,IAAI,KAAA,QAsDP;IAED,OAAO,CAAC,IAAI,KAAA,QA2DX;IAYD,MAAM,QAwHL;IAqKD,MAAM,QAML;IAED,IAAI,CAAC,OAAO,KAAK,oBAoBhB;CACF;eAEc,UAAU"}
@@ -0,0 +1,3 @@
1
+ declare const specFromLock: (name: any, lock: any, where: any) => any;
2
+ export default specFromLock;
3
+ //# sourceMappingURL=spec-from-lock.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"spec-from-lock.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/spec-from-lock.js"],"names":[],"mappings":"AAGA,QAAA,MAAM,YAAY,2CA4BjB,CAAC;eAEa,YAAY"}
@@ -0,0 +1,3 @@
1
+ export default _default;
2
+ declare function _default(tree: any, checkUnreachable: any): any;
3
+ //# sourceMappingURL=tree-check.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"tree-check.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/tree-check.js"],"names":[],"mappings":";0BAoKgB,IAAI,KAAA,EAAE,gBAAgB,KAAA"}
@@ -0,0 +1,13 @@
1
+ /**
2
+ * Validate a package name.
3
+ *
4
+ * @param {*} name Candidate package name
5
+ * @returns {{validForNewPackages: boolean, validForOldPackages: boolean, warnings?: string[], errors?: string[]}}
6
+ */
7
+ export default function validate(name: any): {
8
+ validForNewPackages: boolean;
9
+ validForOldPackages: boolean;
10
+ warnings?: string[];
11
+ errors?: string[];
12
+ };
13
+ //# sourceMappingURL=validate-npm-package-name.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"validate-npm-package-name.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/validate-npm-package-name.js"],"names":[],"mappings":"AA6BA;;;;;GAKG;AACH,MAAM,CAAC,OAAO,UAAU,QAAQ,CAAC,IAAI,EAH1B,GAG0B,GAFxB;IAAC,mBAAmB,EAAE,OAAO,CAAC;IAAC,mBAAmB,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAC,CAyEhH"}
@@ -0,0 +1,6 @@
1
+ export default _default;
2
+ declare function _default(name: any, tgz: any): {
3
+ name: any;
4
+ version: any;
5
+ } | null;
6
+ //# sourceMappingURL=version-from-tgz.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"version-from-tgz.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/version-from-tgz.js"],"names":[],"mappings":";0BAKgB,IAAI,KAAA,EAAE,GAAG,KAAA"}
@@ -0,0 +1,35 @@
1
+ declare class YarnLock {
2
+ entries: Map<any, any> | null;
3
+ current: YarnLockEntry | null | undefined;
4
+ subkey: string | symbol | undefined;
5
+ static parse(data: any): YarnLock;
6
+ static fromTree(tree: any): YarnLock;
7
+ constructor();
8
+ endCurrent(): void;
9
+ parse(data: any): this;
10
+ splitQuoted(str: any, delim: any): any[];
11
+ toString(): string;
12
+ fromTree(tree: any): this;
13
+ addEntryFromNode(node: any): void;
14
+ entryDataFromNode(node: any): {
15
+ dependencies: any;
16
+ optionalDependencies: any;
17
+ version: any;
18
+ resolved: any;
19
+ integrity: any;
20
+ };
21
+ static get Entry(): typeof YarnLockEntry;
22
+ }
23
+ declare class YarnLockEntry {
24
+ #private;
25
+ resolved: any;
26
+ version: any;
27
+ integrity: any;
28
+ dependencies: any;
29
+ optionalDependencies: any;
30
+ constructor(specs: any);
31
+ toString(): string;
32
+ addSpec(spec: any): void;
33
+ }
34
+ export default YarnLock;
35
+ //# sourceMappingURL=yarn-lock.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"yarn-lock.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/yarn-lock.js"],"names":[],"mappings":"AAkGA,cAAM,QAAQ;IAUL,OAAO;IAKP,OAAO;IACP,MAAM;IAfb,MAAM,CAAC,KAAK,CAAC,IAAI,KAAA,YAEhB;IAED,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAA,YAEnB;IAED,cAGC;IAED,UAAU,SAGT;IAED,KAAK,CAAC,IAAI,KAAA,QAiET;IAED,WAAW,CAAC,GAAG,KAAA,EAAE,KAAK,KAAA,SA4BrB;IAED,QAAQ,WASP;IAED,QAAQ,CAAC,IAAI,KAAA,QAYZ;IAED,gBAAgB,CAAC,IAAI,KAAA,QAyFpB;IAED,iBAAiB,CAAC,IAAI,KAAA;;;;;;MAwBrB;IAED,MAAM,KAAK,KAAK,yBAEf;CACF;AAED,cAAM,aAAa;;IAIV,QAAQ;IACR,OAAO;IACP,SAAS;IACT,YAAY;IACZ,oBAAoB;IAN3B,YAAY,KAAK,KAAA,EAOhB;IAED,QAAQ,WAiBP;IAED,OAAO,CAAC,IAAI,KAAA,QAEX;CACF;eAEc,QAAQ"}
@@ -0,0 +1,40 @@
1
+ /**
2
+ * Validate the generated bom using jsonschema
3
+ *
4
+ * @param {object} bomJson content
5
+ *
6
+ * @returns {Promise<Boolean>} true if the BOM is valid. false otherwise.
7
+ */
8
+ export declare const validateBom: (bomJson: object) => Promise<boolean>;
9
+ /**
10
+ * Validate the generated SPDX export.
11
+ *
12
+ * @param {object|string} spdxJson SPDX json object
13
+ * @returns {boolean} true if the SPDX export is valid
14
+ */
15
+ export declare const validateSpdx: (spdxJson: object | string) => boolean;
16
+ /**
17
+ * Validate the metadata object
18
+ *
19
+ * @param {object} bomJson Bom json object
20
+ */
21
+ export declare const validateMetadata: (bomJson: object) => boolean;
22
+ /**
23
+ * Validate the format of all purls
24
+ *
25
+ * @param {object} bomJson Bom json object
26
+ */
27
+ export declare const validatePurls: (bomJson: object) => boolean;
28
+ /**
29
+ * Validate the refs in dependencies block
30
+ *
31
+ * @param {object} bomJson Bom json object
32
+ */
33
+ export declare const validateRefs: (bomJson: object) => boolean;
34
+ /**
35
+ * Validate the component properties
36
+ *
37
+ * @param {object} bomJson Bom json object
38
+ */
39
+ export declare function validateProps(bomJson: object): boolean;
40
+ //# sourceMappingURL=bomValidator.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"bomValidator.d.ts","sourceRoot":"","sources":["../../../lib/validator/bomValidator.js"],"names":[],"mappings":"AAqPA;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,YAJb,MAAM,KAEJ,OAAO,SAmCnB,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,YAAY,aAHd,MAAM,GAAC,MAAM,KACX,OAyLZ,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,YAFlB,MAAM,YAmEhB,CAAC;AA4CF;;;;GAIG;AACH,eAAO,MAAM,aAAa,YAFf,MAAM,YAsHhB,CAAC;AA2CF;;;;GAIG;AACH,eAAO,MAAM,YAAY,YAFd,MAAM,YAwFhB,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAF1B,MAE0B,WAkIpC"}
@@ -0,0 +1,72 @@
1
+ /**
2
+ * Orchestrates evaluation of internal compliance rule packs (SCVS + CRA) and
3
+ * aggregates results into per-benchmark scorecards.
4
+ *
5
+ * This module is deliberately independent of the CycloneDX BOM audit engine
6
+ * (lib/stages/postgen/auditBom.js). The two engines share similar *Finding*
7
+ * output shape so reporters can consume either source uniformly.
8
+ */
9
+ import { getAllComplianceRules, getCraRules, getScvsRules } from "./complianceRules.js";
10
+ /**
11
+ * Resolve a benchmark alias (case-insensitive). Returns null when unknown.
12
+ *
13
+ * @param {string} alias
14
+ * @returns {object | null}
15
+ */
16
+ export declare function resolveBenchmark(alias: string): object | null;
17
+ /**
18
+ * List all known benchmark aliases in a stable display order.
19
+ *
20
+ * @returns {Array<object>}
21
+ */
22
+ export declare function listBenchmarks(): Array<object>;
23
+ /**
24
+ * Evaluate one rule against the BOM and return a Finding-shaped object.
25
+ *
26
+ * Rules are pure synchronous functions, but we wrap them in try/catch so one
27
+ * bad rule cannot fail the entire run.
28
+ *
29
+ * @param {object} rule
30
+ * @param {object} bomJson
31
+ * @returns {object} Finding
32
+ */
33
+ export declare function evaluateRule(rule: object, bomJson: object): object;
34
+ /**
35
+ * Evaluate every rule in the catalog, or a filtered subset.
36
+ *
37
+ * @param {object} bomJson CycloneDX BOM
38
+ * @param {object} [opts]
39
+ * @param {Array<string>} [opts.categories] Filter to these category values.
40
+ * @param {Array<string>} [opts.benchmarks] Only run rules from these benchmark aliases.
41
+ * @returns {Array<object>} Findings (one per rule)
42
+ */
43
+ export declare function evaluateAll(bomJson: object, opts?: {
44
+ categories?: Array<string>;
45
+ benchmarks?: Array<string>;
46
+ }): Array<object>;
47
+ /**
48
+ * Produce a scorecard for a single benchmark against a set of already-evaluated
49
+ * findings. Scoring rules:
50
+ * - pass counts as 1 / 1.
51
+ * - fail counts as 0 / 1.
52
+ * - manual is excluded from the percentage but counted separately.
53
+ *
54
+ * This mirrors how OWASP SCVS publishes results: automatable controls score a
55
+ * percentage, manual controls are reported so reviewers can address them.
56
+ *
57
+ * @param {object} benchmark Result of resolveBenchmark
58
+ * @param {Array<object>} findings Full set of findings from evaluateAll
59
+ * @returns {object}
60
+ */
61
+ export declare function scoreBenchmark(benchmark: object, findings: Array<object>): object;
62
+ /**
63
+ * Build scorecards for each requested benchmark. When no benchmarks are
64
+ * specified, returns scorecards for every built-in benchmark alias.
65
+ *
66
+ * @param {Array<object>} findings
67
+ * @param {Array<string>} [requestedAliases]
68
+ * @returns {Array<object>}
69
+ */
70
+ export declare function buildBenchmarkReports(findings: Array<object>, requestedAliases?: Array<string>): Array<object>;
71
+ export { getAllComplianceRules, getCraRules, getScvsRules };
72
+ //# sourceMappingURL=complianceEngine.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"complianceEngine.d.ts","sourceRoot":"","sources":["../../../lib/validator/complianceEngine.js"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,qBAAqB,EACrB,WAAW,EACX,YAAY,EACb,MAAM,sBAAsB,CAAC;AAsD9B;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAH3B,MAG2B,GAFzB,MAAM,GAAG,IAAI,CAKzB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAFjB,KAAK,CAAC,MAAM,CAAC,CAIzB;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAJtB,MAIsB,EAAE,OAAO,EAH/B,MAG+B,GAF7B,MAAM,CA6ClB;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,OAAO,EANxB,MAMwB,EAAE,IAAI,AALtC,CAGA,EAFA;IAA6B,UAAU,AAAvC,CACA,EADQ,KAAK,CAAC,MAAM,CAAC,CACrB;IAA6B,UAAU,AAAvC,CACA,EADQ,KAAK,CAAC,MAAM,CAAC,CACrB;CAE2C,GAFjC,KAAK,CAAC,MAAM,CAAC,CAqBzB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAJ7B,MAI6B,EAAE,QAAQ,EAHvC,KAAK,CAAC,MAAM,CAG2B,GAFrC,MAAM,CAuClB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAJnC,KAAK,CAAC,MAAM,CAIuB,EAAE,gBAAgB,AAH7D,CACA,EADQ,KAAK,CAAC,MAAM,CAGyC,GAFnD,KAAK,CAAC,MAAM,CAAC,CAOzB;AAED,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC"}
@@ -0,0 +1,61 @@
1
+ /**
2
+ * Internal compliance rule catalog for cdx-validate.
3
+ *
4
+ * Implements OWASP SCVS (Software Component Verification Standard) controls
5
+ * and selected EU Cyber Resilience Act (CRA) SBOM expectations as plain
6
+ * JavaScript evaluators. Controls that are not automatable from a static
7
+ * CycloneDX BOM (for example, process or organizational controls) are still
8
+ * modelled so that benchmark reports can surface them as "manual review
9
+ * required" items with a stable identifier.
10
+ *
11
+ * Each rule exports:
12
+ * id - Stable short identifier (e.g. "SCVS-1.1").
13
+ * name - Human readable short name.
14
+ * description - Long description (wording taken from the source standard).
15
+ * standard - Source standard key: "SCVS" or "CRA".
16
+ * standardRefs - Array of canonical control identifiers.
17
+ * category - Grouping used by --categories.
18
+ * severity - Severity emitted for a failing automatable rule.
19
+ * scvsLevels - For SCVS rules, the levels (L1/L2/L3) that require the
20
+ * control. Non-SCVS rules use an empty array.
21
+ * automatable - True when evaluate() returns a deterministic pass/fail
22
+ * from the BOM alone. False means the rule is emitted as
23
+ * severity "info" / status "manual" so downstream tooling
24
+ * can track coverage.
25
+ * evaluate - Function(bomJson) => RuleResult.
26
+ *
27
+ * RuleResult shape:
28
+ * {
29
+ * status: "pass" | "fail" | "manual",
30
+ * message: string, // human readable summary
31
+ * mitigation?: string,
32
+ * locations?: Array<{ bomRef?, purl?, file? }>,
33
+ * evidence?: Record<string, any>
34
+ * }
35
+ */
36
+ /**
37
+ * Returns the full catalog of compliance rules (SCVS + CRA).
38
+ *
39
+ * @returns {Array<object>}
40
+ */
41
+ export declare function getAllComplianceRules(): Array<object>;
42
+ /**
43
+ * Returns only SCVS rules.
44
+ *
45
+ * @returns {Array<object>}
46
+ */
47
+ export declare function getScvsRules(): Array<object>;
48
+ /**
49
+ * Returns only CRA rules.
50
+ *
51
+ * @returns {Array<object>}
52
+ */
53
+ export declare function getCraRules(): Array<object>;
54
+ /**
55
+ * Test-only export exposing internal helper functions for unit tests.
56
+ * Double-underscore prefixed to discourage external use.
57
+ *
58
+ * @type {Object}
59
+ */
60
+ export declare const __test: Object;
61
+ //# sourceMappingURL=complianceRules.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"complianceRules.d.ts","sourceRoot":"","sources":["../../../lib/validator/complianceRules.js"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAskDH;;;;GAIG;AACH,wBAAgB,qBAAqB,IAFxB,KAAK,CAAC,MAAM,CAAC,CAIzB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,IAFf,KAAK,CAAC,MAAM,CAAC,CAIzB;AAED;;;;GAIG;AACH,wBAAgB,WAAW,IAFd,KAAK,CAAC,MAAM,CAAC,CAIzB;AAED;;;;;GAKG;AACH,eAAO,MAAM,MAAM,EAFT,MAQT,CAAC"}