@cdxgen/cdxgen 0.0.1 → 13.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (722) hide show
  1. package/README.md +921 -87
  2. package/bin/audit.js +239 -0
  3. package/bin/cdxgen.js +2335 -0
  4. package/bin/convert.js +220 -0
  5. package/bin/evinse.js +353 -0
  6. package/bin/hbom.js +504 -0
  7. package/bin/repl.js +2224 -0
  8. package/bin/sign.js +195 -0
  9. package/bin/tracebom.js +303 -0
  10. package/bin/validate.js +268 -0
  11. package/bin/verify.js +189 -0
  12. package/data/README.md +307 -0
  13. package/data/bom-1.4.schema.json +1605 -0
  14. package/data/bom-1.5.schema.json +3660 -0
  15. package/data/bom-1.6.schema.json +5511 -0
  16. package/data/bom-1.7.schema.json +6700 -0
  17. package/data/cbomosdb-queries.json +68 -0
  18. package/data/component-tags.json +339 -0
  19. package/data/container-knowledge-index.json +125 -0
  20. package/data/cosdb-queries.json +17 -0
  21. package/data/crypto-oid.json +1998 -0
  22. package/data/cryptography-defs.json +3793 -0
  23. package/data/cryptography-defs.schema.json +576 -0
  24. package/data/cyclonedx-2.0-bundled.schema.json +7182 -0
  25. package/data/frameworks-list.json +219 -0
  26. package/data/glibc-stdlib.json +117 -0
  27. package/data/gtfobins-index.json +6296 -0
  28. package/data/helpers/init.gradle +71 -0
  29. package/data/jsf-0.82.schema.json +211 -0
  30. package/data/known-licenses.json +82 -0
  31. package/data/lic-mapping.json +338 -0
  32. package/data/license-aliases.json +6624 -0
  33. package/data/license-db.json +39059 -0
  34. package/data/license-deprecations.json +302 -0
  35. package/data/lolbas-index.json +150 -0
  36. package/data/predictive-audit-allowlist.json +11 -0
  37. package/data/pypi-pkg-aliases.json +1199 -0
  38. package/data/python-stdlib.json +308 -0
  39. package/data/queries-darwin.json +193 -0
  40. package/data/queries-win.json +257 -0
  41. package/data/queries.json +268 -0
  42. package/data/ruby-known-modules.json +281 -0
  43. package/data/rules/ai-agent-governance.yaml +323 -0
  44. package/data/rules/ai-bom.yaml +268 -0
  45. package/data/rules/ai-oversight.yaml +186 -0
  46. package/data/rules/ai-provenance.yaml +92 -0
  47. package/data/rules/asar-archives.yaml +150 -0
  48. package/data/rules/cbom-security.yaml +165 -0
  49. package/data/rules/chrome-extensions.yaml +248 -0
  50. package/data/rules/ci-permissions.yaml +802 -0
  51. package/data/rules/container-risk.yaml +353 -0
  52. package/data/rules/dependency-sources.yaml +236 -0
  53. package/data/rules/golem-go.yaml +229 -0
  54. package/data/rules/hbom-compliance.yaml +325 -0
  55. package/data/rules/hbom-performance.yaml +307 -0
  56. package/data/rules/hbom-security.yaml +248 -0
  57. package/data/rules/host-topology.yaml +165 -0
  58. package/data/rules/mcp-servers.yaml +388 -0
  59. package/data/rules/obom-runtime.yaml +1776 -0
  60. package/data/rules/package-integrity.yaml +364 -0
  61. package/data/rules/rootfs-hardening.yaml +179 -0
  62. package/data/rules/vscode-extensions.yaml +237 -0
  63. package/data/spdx-export.schema.json +6794 -0
  64. package/data/spdx-license-list.json +7449 -0
  65. package/data/spdx-licenses.json +759 -0
  66. package/data/spdx.schema.json +819 -0
  67. package/data/templates/README.md +3 -0
  68. package/data/templates/asvs-4.0.3.cdx.json +2943 -0
  69. package/data/templates/asvs-5.0.cdx.json +3046 -0
  70. package/data/templates/bsimm-v13.cdx.json +1008 -0
  71. package/data/templates/masvs-2.0.0.cdx.json +225 -0
  72. package/data/templates/nist-ssdf-1.1.cdx.json +828 -0
  73. package/data/templates/pcissc-secure-slc-1.1.cdx.json +1027 -0
  74. package/data/templates/scvs-1.0.0.cdx.json +813 -0
  75. package/data/templates/ssaf-DRAFT-2023-11.cdx.json +127 -0
  76. package/data/vendor-alias.json +41967 -0
  77. package/data/wrapdb-releases.json +4227 -0
  78. package/index.cjs +15 -0
  79. package/lib/audit/index.js +2800 -0
  80. package/lib/audit/progress.js +114 -0
  81. package/lib/audit/reporters.js +937 -0
  82. package/lib/audit/scoring.js +560 -0
  83. package/lib/audit/targets.js +798 -0
  84. package/lib/cli/bomAssembly.js +1882 -0
  85. package/lib/cli/cliOptions.js +543 -0
  86. package/lib/cli/index.js +2759 -0
  87. package/lib/cli/jsBom.js +2087 -0
  88. package/lib/cli/jvmBom.js +1858 -0
  89. package/lib/cli/managedBom.js +2083 -0
  90. package/lib/cli/nativeBom.js +2125 -0
  91. package/lib/core/activity.js +1087 -0
  92. package/lib/core/env.js +719 -0
  93. package/lib/core/fs.js +1058 -0
  94. package/lib/core/httpClient.js +730 -0
  95. package/lib/core/logger.js +280 -0
  96. package/lib/core/parallel.js +323 -0
  97. package/lib/core/paths.js +70 -0
  98. package/lib/core/projectConfig.js +122 -0
  99. package/lib/core/propertySanitizer.js +174 -0
  100. package/lib/core/spdx.js +5 -0
  101. package/lib/core/state.js +59 -0
  102. package/lib/core/text.js +207 -0
  103. package/lib/core/ui.js +920 -0
  104. package/lib/core/urls.js +84 -0
  105. package/lib/ecosystems/asarutils.js +1636 -0
  106. package/lib/ecosystems/bunutils.js +402 -0
  107. package/lib/ecosystems/caxa.js +77 -0
  108. package/lib/ecosystems/chromextutils.js +1174 -0
  109. package/lib/ecosystems/cmakeResolver.js +587 -0
  110. package/lib/ecosystems/cppEvidence.js +305 -0
  111. package/lib/ecosystems/denoutils.js +1094 -0
  112. package/lib/ecosystems/dotnetutils.js +132 -0
  113. package/lib/ecosystems/ecosystems.js +2772 -0
  114. package/lib/ecosystems/golem.js +1807 -0
  115. package/lib/ecosystems/gradleutils.js +1048 -0
  116. package/lib/ecosystems/jsEvidence.js +317 -0
  117. package/lib/ecosystems/npmutils.js +586 -0
  118. package/lib/ecosystems/parsers-bazel.js +875 -0
  119. package/lib/ecosystems/parsers-dotnet.js +1430 -0
  120. package/lib/ecosystems/parsers-gleam.js +302 -0
  121. package/lib/ecosystems/parsers-go.js +818 -0
  122. package/lib/ecosystems/parsers-js.js +4222 -0
  123. package/lib/ecosystems/parsers-jvm.js +948 -0
  124. package/lib/ecosystems/parsers-misc.js +3191 -0
  125. package/lib/ecosystems/parsers-python.js +2070 -0
  126. package/lib/ecosystems/parsers-rust.js +1294 -0
  127. package/lib/ecosystems/parsers-zig.js +861 -0
  128. package/lib/ecosystems/pep770.js +341 -0
  129. package/lib/ecosystems/pylockutils.js +427 -0
  130. package/lib/ecosystems/pythonutils.js +1281 -0
  131. package/lib/ecosystems/registryProvenance.js +1003 -0
  132. package/lib/ecosystems/remote/huggingface.js +1343 -0
  133. package/lib/ecosystems/rubyutils.js +1629 -0
  134. package/lib/ecosystems/rusi.js +820 -0
  135. package/lib/ecosystems/sbtutils.js +972 -0
  136. package/lib/ecosystems/tea.js +607 -0
  137. package/lib/ecosystems/utils.js +583 -0
  138. package/lib/ecosystems/zigResolver.js +410 -0
  139. package/lib/evinser/db.js +145 -0
  140. package/lib/evinser/evinser.js +2362 -0
  141. package/lib/evinser/scalasem.js +65 -0
  142. package/lib/evinser/swiftsem.js +767 -0
  143. package/lib/helpers/annotationFormatter.js +84 -0
  144. package/lib/helpers/bomSigner.js +312 -0
  145. package/lib/helpers/exportUtils.js +160 -0
  146. package/lib/helpers/remote/dependency-track.js +117 -0
  147. package/lib/helpers/versutils.js +202 -0
  148. package/lib/helpers/vsixutils.js +1069 -0
  149. package/lib/inventory/agentFormulationParser.js +322 -0
  150. package/lib/inventory/aiCollector.js +2140 -0
  151. package/lib/inventory/aiInventory.js +414 -0
  152. package/lib/inventory/aiModelVariants.js +121 -0
  153. package/lib/inventory/aiOversightCollector.js +661 -0
  154. package/lib/inventory/aiProvenanceCollector.js +822 -0
  155. package/lib/inventory/analyzer.js +6089 -0
  156. package/lib/inventory/analyzerScope.js +807 -0
  157. package/lib/inventory/astWorker.js +20 -0
  158. package/lib/inventory/atomUtils.js +1092 -0
  159. package/lib/inventory/auditCategories.js +192 -0
  160. package/lib/inventory/bomUtils.js +369 -0
  161. package/lib/inventory/cacheCommands.js +182 -0
  162. package/lib/inventory/cacheDir.js +104 -0
  163. package/lib/inventory/cbomutils.js +590 -0
  164. package/lib/inventory/cdxrs.js +434 -0
  165. package/lib/inventory/ciParsers/azurePipelines.js +295 -0
  166. package/lib/inventory/ciParsers/circleCi.js +286 -0
  167. package/lib/inventory/ciParsers/common.js +24 -0
  168. package/lib/inventory/ciParsers/githubActions.js +2434 -0
  169. package/lib/inventory/ciParsers/gitlabCi.js +213 -0
  170. package/lib/inventory/ciParsers/jenkins.js +180 -0
  171. package/lib/inventory/citations.js +234 -0
  172. package/lib/inventory/communityAiConfigParser.js +756 -0
  173. package/lib/inventory/containerRisk.js +204 -0
  174. package/lib/inventory/cryptoAlgorithmFamily.js +258 -0
  175. package/lib/inventory/deps.js +807 -0
  176. package/lib/inventory/depsUtils.js +588 -0
  177. package/lib/inventory/display.js +2128 -0
  178. package/lib/inventory/dosai.js +601 -0
  179. package/lib/inventory/dosaiParsers.js +154 -0
  180. package/lib/inventory/dynamic.js +145 -0
  181. package/lib/inventory/envcontext.js +1793 -0
  182. package/lib/inventory/evidenceUtils.js +774 -0
  183. package/lib/inventory/fetchBatch.js +779 -0
  184. package/lib/inventory/fetchRate.js +255 -0
  185. package/lib/inventory/forgeEnricher.js +300 -0
  186. package/lib/inventory/formulationParsers.js +422 -0
  187. package/lib/inventory/gtfobins.js +339 -0
  188. package/lib/inventory/hbom.js +719 -0
  189. package/lib/inventory/hbomAnalysis.js +310 -0
  190. package/lib/inventory/hbomLoader.js +35 -0
  191. package/lib/inventory/hostTopology.js +835 -0
  192. package/lib/inventory/inventoryStats.js +100 -0
  193. package/lib/inventory/jsonLike.js +121 -0
  194. package/lib/inventory/licenseEnhancer.js +918 -0
  195. package/lib/inventory/lolbas.js +285 -0
  196. package/lib/inventory/mcp.js +253 -0
  197. package/lib/inventory/mcpConfigParser.js +683 -0
  198. package/lib/inventory/mcpDiscovery.js +112 -0
  199. package/lib/inventory/mcpPinning.js +209 -0
  200. package/lib/inventory/osPackageResolver.js +493 -0
  201. package/lib/inventory/osinfo.js +383 -0
  202. package/lib/inventory/osqueryTransform.js +274 -0
  203. package/lib/inventory/plugins.js +466 -0
  204. package/lib/inventory/protobom.js +231 -0
  205. package/lib/inventory/protobomLoader.js +43 -0
  206. package/lib/inventory/provenanceUtils.js +224 -0
  207. package/lib/inventory/purl.js +749 -0
  208. package/lib/inventory/rustFormulationParser.js +339 -0
  209. package/lib/inventory/sbomDocument.js +340 -0
  210. package/lib/inventory/source.js +1488 -0
  211. package/lib/inventory/spdx.js +361 -0
  212. package/lib/inventory/spdxExpression.js +512 -0
  213. package/lib/inventory/spdxUtils.js +107 -0
  214. package/lib/inventory/table.js +267 -0
  215. package/lib/inventory/traceRunner.js +439 -0
  216. package/lib/inventory/unicodeScan.js +147 -0
  217. package/lib/managers/binary.js +3459 -0
  218. package/lib/managers/containerutils.js +125 -0
  219. package/lib/managers/docker.js +2145 -0
  220. package/lib/managers/dockerConnection.js +162 -0
  221. package/lib/managers/oci.js +704 -0
  222. package/lib/managers/piptree.js +267 -0
  223. package/lib/parsers/cmakeCache.js +199 -0
  224. package/lib/parsers/gguf.js +492 -0
  225. package/lib/parsers/gitAiNotes.js +233 -0
  226. package/lib/parsers/gitmodules.js +239 -0
  227. package/lib/parsers/htmlExtract.js +610 -0
  228. package/lib/parsers/huggingfaceManifest.js +551 -0
  229. package/lib/parsers/huggingfaceUtils.js +506 -0
  230. package/lib/parsers/iri.js +618 -0
  231. package/lib/parsers/npmrc.js +99 -0
  232. package/lib/parsers/ollama.js +101 -0
  233. package/lib/parsers/xml.js +841 -0
  234. package/lib/server/openapi.yaml +433 -0
  235. package/lib/server/server.js +616 -0
  236. package/lib/stages/postgen/annotator.js +977 -0
  237. package/lib/stages/postgen/auditBom.js +468 -0
  238. package/lib/stages/postgen/postgen.js +1239 -0
  239. package/lib/stages/postgen/ruleEngine.js +731 -0
  240. package/lib/stages/postgen/sortBom.js +195 -0
  241. package/lib/stages/postgen/spdxConverter.js +796 -0
  242. package/lib/stages/postgen/specVersionCompat.js +703 -0
  243. package/lib/stages/pregen/envAudit.js +388 -0
  244. package/lib/stages/pregen/pregen.js +637 -0
  245. package/lib/third-party/README.md +9 -0
  246. package/lib/third-party/arborist/CHANGELOG.md +1109 -0
  247. package/lib/third-party/arborist/LICENSE.md +20 -0
  248. package/lib/third-party/arborist/README.md +315 -0
  249. package/lib/third-party/arborist/lib/arborist/index.js +258 -0
  250. package/lib/third-party/arborist/lib/arborist/load-actual.js +605 -0
  251. package/lib/third-party/arborist/lib/arborist/load-virtual.js +300 -0
  252. package/lib/third-party/arborist/lib/bin-links.js +120 -0
  253. package/lib/third-party/arborist/lib/calc-dep-flags.js +130 -0
  254. package/lib/third-party/arborist/lib/case-insensitive-map.js +51 -0
  255. package/lib/third-party/arborist/lib/consistent-resolve.js +42 -0
  256. package/lib/third-party/arborist/lib/debug.js +50 -0
  257. package/lib/third-party/arborist/lib/dep-valid.js +190 -0
  258. package/lib/third-party/arborist/lib/edge.js +417 -0
  259. package/lib/third-party/arborist/lib/from-path.js +36 -0
  260. package/lib/third-party/arborist/lib/gather-dep-set.js +43 -0
  261. package/lib/third-party/arborist/lib/index.js +22 -0
  262. package/lib/third-party/arborist/lib/inventory.js +138 -0
  263. package/lib/third-party/arborist/lib/link.js +169 -0
  264. package/lib/third-party/arborist/lib/node.js +1673 -0
  265. package/lib/third-party/arborist/lib/npm-extension.js +45 -0
  266. package/lib/third-party/arborist/lib/override-resolves.js +11 -0
  267. package/lib/third-party/arborist/lib/override-set.js +319 -0
  268. package/lib/third-party/arborist/lib/package-extensions.js +289 -0
  269. package/lib/third-party/arborist/lib/printable.js +210 -0
  270. package/lib/third-party/arborist/lib/proc-log.js +30 -0
  271. package/lib/third-party/arborist/lib/realpath.js +100 -0
  272. package/lib/third-party/arborist/lib/relpath.js +4 -0
  273. package/lib/third-party/arborist/lib/shrinkwrap.js +1291 -0
  274. package/lib/third-party/arborist/lib/spec-from-lock.js +34 -0
  275. package/lib/third-party/arborist/lib/tree-check.js +165 -0
  276. package/lib/third-party/arborist/lib/validate-npm-package-name.js +107 -0
  277. package/lib/third-party/arborist/lib/version-from-tgz.js +51 -0
  278. package/lib/third-party/arborist/lib/yarn-lock.js +397 -0
  279. package/lib/validator/bomValidator.js +985 -0
  280. package/lib/validator/complianceEngine.js +241 -0
  281. package/lib/validator/complianceRules.js +1680 -0
  282. package/lib/validator/generated/runtime.mjs +17 -0
  283. package/lib/validator/generated/validate-1.6.mjs +21258 -0
  284. package/lib/validator/generated/validate-1.7.mjs +24803 -0
  285. package/lib/validator/generated/validate-2.0.mjs +22931 -0
  286. package/lib/validator/index.js +246 -0
  287. package/lib/validator/reporters/annotations.js +142 -0
  288. package/lib/validator/reporters/console.js +160 -0
  289. package/lib/validator/reporters/index.js +41 -0
  290. package/lib/validator/reporters/json.js +37 -0
  291. package/lib/validator/reporters/sarif.js +184 -0
  292. package/package.json +209 -26
  293. package/types/bin/audit.d.ts +3 -0
  294. package/types/bin/audit.d.ts.map +1 -0
  295. package/types/bin/cdxgen.d.ts +3 -0
  296. package/types/bin/cdxgen.d.ts.map +1 -0
  297. package/types/bin/convert.d.ts +3 -0
  298. package/types/bin/convert.d.ts.map +1 -0
  299. package/types/bin/evinse.d.ts +3 -0
  300. package/types/bin/evinse.d.ts.map +1 -0
  301. package/types/bin/hbom.d.ts +3 -0
  302. package/types/bin/hbom.d.ts.map +1 -0
  303. package/types/bin/repl.d.ts +3 -0
  304. package/types/bin/repl.d.ts.map +1 -0
  305. package/types/bin/sign.d.ts +3 -0
  306. package/types/bin/sign.d.ts.map +1 -0
  307. package/types/bin/tracebom.d.ts +3 -0
  308. package/types/bin/tracebom.d.ts.map +1 -0
  309. package/types/bin/validate.d.ts +14 -0
  310. package/types/bin/validate.d.ts.map +1 -0
  311. package/types/bin/verify.d.ts +3 -0
  312. package/types/bin/verify.d.ts.map +1 -0
  313. package/types/lib/audit/index.d.ts +153 -0
  314. package/types/lib/audit/index.d.ts.map +1 -0
  315. package/types/lib/audit/progress.d.ts +31 -0
  316. package/types/lib/audit/progress.d.ts.map +1 -0
  317. package/types/lib/audit/reporters.d.ts +62 -0
  318. package/types/lib/audit/reporters.d.ts.map +1 -0
  319. package/types/lib/audit/scoring.d.ts +36 -0
  320. package/types/lib/audit/scoring.d.ts.map +1 -0
  321. package/types/lib/audit/targets.d.ts +77 -0
  322. package/types/lib/audit/targets.d.ts.map +1 -0
  323. package/types/lib/cli/bomAssembly.d.ts +329 -0
  324. package/types/lib/cli/bomAssembly.d.ts.map +1 -0
  325. package/types/lib/cli/cliOptions.d.ts +156 -0
  326. package/types/lib/cli/cliOptions.d.ts.map +1 -0
  327. package/types/lib/cli/index.d.ts +107 -0
  328. package/types/lib/cli/index.d.ts.map +1 -0
  329. package/types/lib/cli/jsBom.d.ts +94 -0
  330. package/types/lib/cli/jsBom.d.ts.map +1 -0
  331. package/types/lib/cli/jvmBom.d.ts +54 -0
  332. package/types/lib/cli/jvmBom.d.ts.map +1 -0
  333. package/types/lib/cli/managedBom.d.ts +105 -0
  334. package/types/lib/cli/managedBom.d.ts.map +1 -0
  335. package/types/lib/cli/nativeBom.d.ts +143 -0
  336. package/types/lib/cli/nativeBom.d.ts.map +1 -0
  337. package/types/lib/core/activity.d.ts +178 -0
  338. package/types/lib/core/activity.d.ts.map +1 -0
  339. package/types/lib/core/env.d.ts +192 -0
  340. package/types/lib/core/env.d.ts.map +1 -0
  341. package/types/lib/core/fs.d.ts +158 -0
  342. package/types/lib/core/fs.d.ts.map +1 -0
  343. package/types/lib/core/httpClient.d.ts +149 -0
  344. package/types/lib/core/httpClient.d.ts.map +1 -0
  345. package/types/lib/core/logger.d.ts +50 -0
  346. package/types/lib/core/logger.d.ts.map +1 -0
  347. package/types/lib/core/parallel.d.ts +95 -0
  348. package/types/lib/core/parallel.d.ts.map +1 -0
  349. package/types/lib/core/paths.d.ts +36 -0
  350. package/types/lib/core/paths.d.ts.map +1 -0
  351. package/types/lib/core/projectConfig.d.ts +23 -0
  352. package/types/lib/core/projectConfig.d.ts.map +1 -0
  353. package/types/lib/core/propertySanitizer.d.ts +23 -0
  354. package/types/lib/core/propertySanitizer.d.ts.map +1 -0
  355. package/types/lib/core/spdx.d.ts +5 -0
  356. package/types/lib/core/spdx.d.ts.map +1 -0
  357. package/types/lib/core/state.d.ts +20 -0
  358. package/types/lib/core/state.d.ts.map +1 -0
  359. package/types/lib/core/text.d.ts +78 -0
  360. package/types/lib/core/text.d.ts.map +1 -0
  361. package/types/lib/core/ui.d.ts +87 -0
  362. package/types/lib/core/ui.d.ts.map +1 -0
  363. package/types/lib/core/urls.d.ts +43 -0
  364. package/types/lib/core/urls.d.ts.map +1 -0
  365. package/types/lib/ecosystems/asarutils.d.ts +71 -0
  366. package/types/lib/ecosystems/asarutils.d.ts.map +1 -0
  367. package/types/lib/ecosystems/bunutils.d.ts +38 -0
  368. package/types/lib/ecosystems/bunutils.d.ts.map +1 -0
  369. package/types/lib/ecosystems/caxa.d.ts +8 -0
  370. package/types/lib/ecosystems/caxa.d.ts.map +1 -0
  371. package/types/lib/ecosystems/chromextutils.d.ts +97 -0
  372. package/types/lib/ecosystems/chromextutils.d.ts.map +1 -0
  373. package/types/lib/ecosystems/cmakeResolver.d.ts +176 -0
  374. package/types/lib/ecosystems/cmakeResolver.d.ts.map +1 -0
  375. package/types/lib/ecosystems/cppEvidence.d.ts +35 -0
  376. package/types/lib/ecosystems/cppEvidence.d.ts.map +1 -0
  377. package/types/lib/ecosystems/denoutils.d.ts +76 -0
  378. package/types/lib/ecosystems/denoutils.d.ts.map +1 -0
  379. package/types/lib/ecosystems/dotnetutils.d.ts +45 -0
  380. package/types/lib/ecosystems/dotnetutils.d.ts.map +1 -0
  381. package/types/lib/ecosystems/ecosystems.d.ts +279 -0
  382. package/types/lib/ecosystems/ecosystems.d.ts.map +1 -0
  383. package/types/lib/ecosystems/golem.d.ts +60 -0
  384. package/types/lib/ecosystems/golem.d.ts.map +1 -0
  385. package/types/lib/ecosystems/gradleutils.d.ts +139 -0
  386. package/types/lib/ecosystems/gradleutils.d.ts.map +1 -0
  387. package/types/lib/ecosystems/jsEvidence.d.ts +17 -0
  388. package/types/lib/ecosystems/jsEvidence.d.ts.map +1 -0
  389. package/types/lib/ecosystems/npmutils.d.ts +183 -0
  390. package/types/lib/ecosystems/npmutils.d.ts.map +1 -0
  391. package/types/lib/ecosystems/parsers-bazel.d.ts +36 -0
  392. package/types/lib/ecosystems/parsers-bazel.d.ts.map +1 -0
  393. package/types/lib/ecosystems/parsers-dotnet.d.ts +116 -0
  394. package/types/lib/ecosystems/parsers-dotnet.d.ts.map +1 -0
  395. package/types/lib/ecosystems/parsers-gleam.d.ts +33 -0
  396. package/types/lib/ecosystems/parsers-gleam.d.ts.map +1 -0
  397. package/types/lib/ecosystems/parsers-go.d.ts +92 -0
  398. package/types/lib/ecosystems/parsers-go.d.ts.map +1 -0
  399. package/types/lib/ecosystems/parsers-js.d.ts +242 -0
  400. package/types/lib/ecosystems/parsers-js.d.ts.map +1 -0
  401. package/types/lib/ecosystems/parsers-jvm.d.ts +100 -0
  402. package/types/lib/ecosystems/parsers-jvm.d.ts.map +1 -0
  403. package/types/lib/ecosystems/parsers-misc.d.ts +450 -0
  404. package/types/lib/ecosystems/parsers-misc.d.ts.map +1 -0
  405. package/types/lib/ecosystems/parsers-python.d.ts +145 -0
  406. package/types/lib/ecosystems/parsers-python.d.ts.map +1 -0
  407. package/types/lib/ecosystems/parsers-rust.d.ts +56 -0
  408. package/types/lib/ecosystems/parsers-rust.d.ts.map +1 -0
  409. package/types/lib/ecosystems/parsers-zig.d.ts +83 -0
  410. package/types/lib/ecosystems/parsers-zig.d.ts.map +1 -0
  411. package/types/lib/ecosystems/pep770.d.ts +38 -0
  412. package/types/lib/ecosystems/pep770.d.ts.map +1 -0
  413. package/types/lib/ecosystems/pylockutils.d.ts +68 -0
  414. package/types/lib/ecosystems/pylockutils.d.ts.map +1 -0
  415. package/types/lib/ecosystems/pythonutils.d.ts +70 -0
  416. package/types/lib/ecosystems/pythonutils.d.ts.map +1 -0
  417. package/types/lib/ecosystems/registryProvenance.d.ts +26 -0
  418. package/types/lib/ecosystems/registryProvenance.d.ts.map +1 -0
  419. package/types/lib/ecosystems/remote/huggingface.d.ts +31 -0
  420. package/types/lib/ecosystems/remote/huggingface.d.ts.map +1 -0
  421. package/types/lib/ecosystems/rubyutils.d.ts +182 -0
  422. package/types/lib/ecosystems/rubyutils.d.ts.map +1 -0
  423. package/types/lib/ecosystems/rusi.d.ts +40 -0
  424. package/types/lib/ecosystems/rusi.d.ts.map +1 -0
  425. package/types/lib/ecosystems/sbtutils.d.ts +179 -0
  426. package/types/lib/ecosystems/sbtutils.d.ts.map +1 -0
  427. package/types/lib/ecosystems/tea.d.ts +180 -0
  428. package/types/lib/ecosystems/tea.d.ts.map +1 -0
  429. package/types/lib/ecosystems/utils.d.ts +41 -0
  430. package/types/lib/ecosystems/utils.d.ts.map +1 -0
  431. package/types/lib/ecosystems/zigResolver.d.ts +70 -0
  432. package/types/lib/ecosystems/zigResolver.d.ts.map +1 -0
  433. package/types/lib/evinser/db.d.ts +17 -0
  434. package/types/lib/evinser/db.d.ts.map +1 -0
  435. package/types/lib/evinser/evinser.d.ts +354 -0
  436. package/types/lib/evinser/evinser.d.ts.map +1 -0
  437. package/types/lib/evinser/scalasem.d.ts +15 -0
  438. package/types/lib/evinser/scalasem.d.ts.map +1 -0
  439. package/types/lib/evinser/swiftsem.d.ts +103 -0
  440. package/types/lib/evinser/swiftsem.d.ts.map +1 -0
  441. package/types/lib/helpers/annotationFormatter.d.ts +23 -0
  442. package/types/lib/helpers/annotationFormatter.d.ts.map +1 -0
  443. package/types/lib/helpers/bomSigner.d.ts +28 -0
  444. package/types/lib/helpers/bomSigner.d.ts.map +1 -0
  445. package/types/lib/helpers/exportUtils.d.ts +52 -0
  446. package/types/lib/helpers/exportUtils.d.ts.map +1 -0
  447. package/types/lib/helpers/remote/dependency-track.d.ts +23 -0
  448. package/types/lib/helpers/remote/dependency-track.d.ts.map +1 -0
  449. package/types/lib/helpers/versutils.d.ts +8 -0
  450. package/types/lib/helpers/versutils.d.ts.map +1 -0
  451. package/types/lib/helpers/vsixutils.d.ts +130 -0
  452. package/types/lib/helpers/vsixutils.d.ts.map +1 -0
  453. package/types/lib/inventory/agentFormulationParser.d.ts +21 -0
  454. package/types/lib/inventory/agentFormulationParser.d.ts.map +1 -0
  455. package/types/lib/inventory/aiCollector.d.ts +61 -0
  456. package/types/lib/inventory/aiCollector.d.ts.map +1 -0
  457. package/types/lib/inventory/aiInventory.d.ts +103 -0
  458. package/types/lib/inventory/aiInventory.d.ts.map +1 -0
  459. package/types/lib/inventory/aiModelVariants.d.ts +31 -0
  460. package/types/lib/inventory/aiModelVariants.d.ts.map +1 -0
  461. package/types/lib/inventory/aiOversightCollector.d.ts +28 -0
  462. package/types/lib/inventory/aiOversightCollector.d.ts.map +1 -0
  463. package/types/lib/inventory/aiProvenanceCollector.d.ts +13 -0
  464. package/types/lib/inventory/aiProvenanceCollector.d.ts.map +1 -0
  465. package/types/lib/inventory/analyzer.d.ts +157 -0
  466. package/types/lib/inventory/analyzer.d.ts.map +1 -0
  467. package/types/lib/inventory/analyzerScope.d.ts +106 -0
  468. package/types/lib/inventory/analyzerScope.d.ts.map +1 -0
  469. package/types/lib/inventory/astWorker.d.ts +9 -0
  470. package/types/lib/inventory/astWorker.d.ts.map +1 -0
  471. package/types/lib/inventory/atomUtils.d.ts +159 -0
  472. package/types/lib/inventory/atomUtils.d.ts.map +1 -0
  473. package/types/lib/inventory/auditCategories.d.ts +80 -0
  474. package/types/lib/inventory/auditCategories.d.ts.map +1 -0
  475. package/types/lib/inventory/bomUtils.d.ts +145 -0
  476. package/types/lib/inventory/bomUtils.d.ts.map +1 -0
  477. package/types/lib/inventory/cacheCommands.d.ts +28 -0
  478. package/types/lib/inventory/cacheCommands.d.ts.map +1 -0
  479. package/types/lib/inventory/cacheDir.d.ts +55 -0
  480. package/types/lib/inventory/cacheDir.d.ts.map +1 -0
  481. package/types/lib/inventory/cbomutils.d.ts +37 -0
  482. package/types/lib/inventory/cbomutils.d.ts.map +1 -0
  483. package/types/lib/inventory/cdxrs.d.ts +90 -0
  484. package/types/lib/inventory/cdxrs.d.ts.map +1 -0
  485. package/types/lib/inventory/ciParsers/azurePipelines.d.ts +27 -0
  486. package/types/lib/inventory/ciParsers/azurePipelines.d.ts.map +1 -0
  487. package/types/lib/inventory/ciParsers/circleCi.d.ts +27 -0
  488. package/types/lib/inventory/ciParsers/circleCi.d.ts.map +1 -0
  489. package/types/lib/inventory/ciParsers/common.d.ts +11 -0
  490. package/types/lib/inventory/ciParsers/common.d.ts.map +1 -0
  491. package/types/lib/inventory/ciParsers/githubActions.d.ts +38 -0
  492. package/types/lib/inventory/ciParsers/githubActions.d.ts.map +1 -0
  493. package/types/lib/inventory/ciParsers/gitlabCi.d.ts +26 -0
  494. package/types/lib/inventory/ciParsers/gitlabCi.d.ts.map +1 -0
  495. package/types/lib/inventory/ciParsers/jenkins.d.ts +26 -0
  496. package/types/lib/inventory/ciParsers/jenkins.d.ts.map +1 -0
  497. package/types/lib/inventory/citations.d.ts +90 -0
  498. package/types/lib/inventory/citations.d.ts.map +1 -0
  499. package/types/lib/inventory/communityAiConfigParser.d.ts +14 -0
  500. package/types/lib/inventory/communityAiConfigParser.d.ts.map +1 -0
  501. package/types/lib/inventory/containerRisk.d.ts +20 -0
  502. package/types/lib/inventory/containerRisk.d.ts.map +1 -0
  503. package/types/lib/inventory/cryptoAlgorithmFamily.d.ts +37 -0
  504. package/types/lib/inventory/cryptoAlgorithmFamily.d.ts.map +1 -0
  505. package/types/lib/inventory/deps.d.ts +140 -0
  506. package/types/lib/inventory/deps.d.ts.map +1 -0
  507. package/types/lib/inventory/depsUtils.d.ts +74 -0
  508. package/types/lib/inventory/depsUtils.d.ts.map +1 -0
  509. package/types/lib/inventory/display.d.ts +227 -0
  510. package/types/lib/inventory/display.d.ts.map +1 -0
  511. package/types/lib/inventory/dosai.d.ts +130 -0
  512. package/types/lib/inventory/dosai.d.ts.map +1 -0
  513. package/types/lib/inventory/dosaiParsers.d.ts +59 -0
  514. package/types/lib/inventory/dosaiParsers.d.ts.map +1 -0
  515. package/types/lib/inventory/dynamic.d.ts +25 -0
  516. package/types/lib/inventory/dynamic.d.ts.map +1 -0
  517. package/types/lib/inventory/envcontext.d.ts +377 -0
  518. package/types/lib/inventory/envcontext.d.ts.map +1 -0
  519. package/types/lib/inventory/evidenceUtils.d.ts +74 -0
  520. package/types/lib/inventory/evidenceUtils.d.ts.map +1 -0
  521. package/types/lib/inventory/fetchBatch.d.ts +127 -0
  522. package/types/lib/inventory/fetchBatch.d.ts.map +1 -0
  523. package/types/lib/inventory/fetchRate.d.ts +118 -0
  524. package/types/lib/inventory/fetchRate.d.ts.map +1 -0
  525. package/types/lib/inventory/forgeEnricher.d.ts +31 -0
  526. package/types/lib/inventory/forgeEnricher.d.ts.map +1 -0
  527. package/types/lib/inventory/formulationParsers.d.ts +50 -0
  528. package/types/lib/inventory/formulationParsers.d.ts.map +1 -0
  529. package/types/lib/inventory/gtfobins.d.ts +27 -0
  530. package/types/lib/inventory/gtfobins.d.ts.map +1 -0
  531. package/types/lib/inventory/hbom.d.ts +58 -0
  532. package/types/lib/inventory/hbom.d.ts.map +1 -0
  533. package/types/lib/inventory/hbomAnalysis.d.ts +56 -0
  534. package/types/lib/inventory/hbomAnalysis.d.ts.map +1 -0
  535. package/types/lib/inventory/hbomLoader.d.ts +7 -0
  536. package/types/lib/inventory/hbomLoader.d.ts.map +1 -0
  537. package/types/lib/inventory/hostTopology.d.ts +47 -0
  538. package/types/lib/inventory/hostTopology.d.ts.map +1 -0
  539. package/types/lib/inventory/inventoryStats.d.ts +42 -0
  540. package/types/lib/inventory/inventoryStats.d.ts.map +1 -0
  541. package/types/lib/inventory/jsonLike.d.ts +23 -0
  542. package/types/lib/inventory/jsonLike.d.ts.map +1 -0
  543. package/types/lib/inventory/licenseEnhancer.d.ts +70 -0
  544. package/types/lib/inventory/licenseEnhancer.d.ts.map +1 -0
  545. package/types/lib/inventory/lolbas.d.ts +16 -0
  546. package/types/lib/inventory/lolbas.d.ts.map +1 -0
  547. package/types/lib/inventory/mcp.d.ts +29 -0
  548. package/types/lib/inventory/mcp.d.ts.map +1 -0
  549. package/types/lib/inventory/mcpConfigParser.d.ts +20 -0
  550. package/types/lib/inventory/mcpConfigParser.d.ts.map +1 -0
  551. package/types/lib/inventory/mcpDiscovery.d.ts +33 -0
  552. package/types/lib/inventory/mcpDiscovery.d.ts.map +1 -0
  553. package/types/lib/inventory/mcpPinning.d.ts +11 -0
  554. package/types/lib/inventory/mcpPinning.d.ts.map +1 -0
  555. package/types/lib/inventory/osPackageResolver.d.ts +49 -0
  556. package/types/lib/inventory/osPackageResolver.d.ts.map +1 -0
  557. package/types/lib/inventory/osinfo.d.ts +201 -0
  558. package/types/lib/inventory/osinfo.d.ts.map +1 -0
  559. package/types/lib/inventory/osqueryTransform.d.ts +84 -0
  560. package/types/lib/inventory/osqueryTransform.d.ts.map +1 -0
  561. package/types/lib/inventory/plugins.d.ts +58 -0
  562. package/types/lib/inventory/plugins.d.ts.map +1 -0
  563. package/types/lib/inventory/protobom.d.ts +71 -0
  564. package/types/lib/inventory/protobom.d.ts.map +1 -0
  565. package/types/lib/inventory/protobomLoader.d.ts +17 -0
  566. package/types/lib/inventory/protobomLoader.d.ts.map +1 -0
  567. package/types/lib/inventory/provenanceUtils.d.ts +98 -0
  568. package/types/lib/inventory/provenanceUtils.d.ts.map +1 -0
  569. package/types/lib/inventory/purl.d.ts +313 -0
  570. package/types/lib/inventory/purl.d.ts.map +1 -0
  571. package/types/lib/inventory/rustFormulationParser.d.ts +17 -0
  572. package/types/lib/inventory/rustFormulationParser.d.ts.map +1 -0
  573. package/types/lib/inventory/sbomDocument.d.ts +59 -0
  574. package/types/lib/inventory/sbomDocument.d.ts.map +1 -0
  575. package/types/lib/inventory/source.d.ts +163 -0
  576. package/types/lib/inventory/source.d.ts.map +1 -0
  577. package/types/lib/inventory/spdx.d.ts +66 -0
  578. package/types/lib/inventory/spdx.d.ts.map +1 -0
  579. package/types/lib/inventory/spdxExpression.d.ts +58 -0
  580. package/types/lib/inventory/spdxExpression.d.ts.map +1 -0
  581. package/types/lib/inventory/spdxUtils.d.ts +12 -0
  582. package/types/lib/inventory/spdxUtils.d.ts.map +1 -0
  583. package/types/lib/inventory/table.d.ts +22 -0
  584. package/types/lib/inventory/table.d.ts.map +1 -0
  585. package/types/lib/inventory/traceRunner.d.ts +80 -0
  586. package/types/lib/inventory/traceRunner.d.ts.map +1 -0
  587. package/types/lib/inventory/unicodeScan.d.ts +46 -0
  588. package/types/lib/inventory/unicodeScan.d.ts.map +1 -0
  589. package/types/lib/managers/binary.d.ts +147 -0
  590. package/types/lib/managers/binary.d.ts.map +1 -0
  591. package/types/lib/managers/containerutils.d.ts +30 -0
  592. package/types/lib/managers/containerutils.d.ts.map +1 -0
  593. package/types/lib/managers/docker.d.ts +157 -0
  594. package/types/lib/managers/docker.d.ts.map +1 -0
  595. package/types/lib/managers/dockerConnection.d.ts +42 -0
  596. package/types/lib/managers/dockerConnection.d.ts.map +1 -0
  597. package/types/lib/managers/oci.d.ts +21 -0
  598. package/types/lib/managers/oci.d.ts.map +1 -0
  599. package/types/lib/managers/piptree.d.ts +13 -0
  600. package/types/lib/managers/piptree.d.ts.map +1 -0
  601. package/types/lib/parsers/cmakeCache.d.ts +70 -0
  602. package/types/lib/parsers/cmakeCache.d.ts.map +1 -0
  603. package/types/lib/parsers/gguf.d.ts +39 -0
  604. package/types/lib/parsers/gguf.d.ts.map +1 -0
  605. package/types/lib/parsers/gitAiNotes.d.ts +15 -0
  606. package/types/lib/parsers/gitAiNotes.d.ts.map +1 -0
  607. package/types/lib/parsers/gitmodules.d.ts +88 -0
  608. package/types/lib/parsers/gitmodules.d.ts.map +1 -0
  609. package/types/lib/parsers/htmlExtract.d.ts +34 -0
  610. package/types/lib/parsers/htmlExtract.d.ts.map +1 -0
  611. package/types/lib/parsers/huggingfaceManifest.d.ts +153 -0
  612. package/types/lib/parsers/huggingfaceManifest.d.ts.map +1 -0
  613. package/types/lib/parsers/huggingfaceUtils.d.ts +155 -0
  614. package/types/lib/parsers/huggingfaceUtils.d.ts.map +1 -0
  615. package/types/lib/parsers/iri.d.ts +68 -0
  616. package/types/lib/parsers/iri.d.ts.map +1 -0
  617. package/types/lib/parsers/npmrc.d.ts +33 -0
  618. package/types/lib/parsers/npmrc.d.ts.map +1 -0
  619. package/types/lib/parsers/ollama.d.ts +22 -0
  620. package/types/lib/parsers/ollama.d.ts.map +1 -0
  621. package/types/lib/parsers/xml.d.ts +47 -0
  622. package/types/lib/parsers/xml.d.ts.map +1 -0
  623. package/types/lib/server/server.d.ts +51 -0
  624. package/types/lib/server/server.d.ts.map +1 -0
  625. package/types/lib/stages/postgen/annotator.d.ts +36 -0
  626. package/types/lib/stages/postgen/annotator.d.ts.map +1 -0
  627. package/types/lib/stages/postgen/auditBom.d.ts +92 -0
  628. package/types/lib/stages/postgen/auditBom.d.ts.map +1 -0
  629. package/types/lib/stages/postgen/postgen.d.ts +59 -0
  630. package/types/lib/stages/postgen/postgen.d.ts.map +1 -0
  631. package/types/lib/stages/postgen/ruleEngine.d.ts +18 -0
  632. package/types/lib/stages/postgen/ruleEngine.d.ts.map +1 -0
  633. package/types/lib/stages/postgen/sortBom.d.ts +34 -0
  634. package/types/lib/stages/postgen/sortBom.d.ts.map +1 -0
  635. package/types/lib/stages/postgen/spdxConverter.d.ts +11 -0
  636. package/types/lib/stages/postgen/spdxConverter.d.ts.map +1 -0
  637. package/types/lib/stages/postgen/specVersionCompat.d.ts +71 -0
  638. package/types/lib/stages/postgen/specVersionCompat.d.ts.map +1 -0
  639. package/types/lib/stages/pregen/envAudit.d.ts +14 -0
  640. package/types/lib/stages/pregen/envAudit.d.ts.map +1 -0
  641. package/types/lib/stages/pregen/pregen.d.ts +59 -0
  642. package/types/lib/stages/pregen/pregen.d.ts.map +1 -0
  643. package/types/lib/third-party/arborist/lib/arborist/index.d.ts +47 -0
  644. package/types/lib/third-party/arborist/lib/arborist/index.d.ts.map +1 -0
  645. package/types/lib/third-party/arborist/lib/arborist/load-actual.d.ts +4 -0
  646. package/types/lib/third-party/arborist/lib/arborist/load-actual.d.ts.map +1 -0
  647. package/types/lib/third-party/arborist/lib/arborist/load-virtual.d.ts +4 -0
  648. package/types/lib/third-party/arborist/lib/arborist/load-virtual.d.ts.map +1 -0
  649. package/types/lib/third-party/arborist/lib/bin-links.d.ts +18 -0
  650. package/types/lib/third-party/arborist/lib/bin-links.d.ts.map +1 -0
  651. package/types/lib/third-party/arborist/lib/calc-dep-flags.d.ts +3 -0
  652. package/types/lib/third-party/arborist/lib/calc-dep-flags.d.ts.map +1 -0
  653. package/types/lib/third-party/arborist/lib/case-insensitive-map.d.ts +9 -0
  654. package/types/lib/third-party/arborist/lib/case-insensitive-map.d.ts.map +1 -0
  655. package/types/lib/third-party/arborist/lib/consistent-resolve.d.ts +3 -0
  656. package/types/lib/third-party/arborist/lib/consistent-resolve.d.ts.map +1 -0
  657. package/types/lib/third-party/arborist/lib/debug.d.ts +3 -0
  658. package/types/lib/third-party/arborist/lib/debug.d.ts.map +1 -0
  659. package/types/lib/third-party/arborist/lib/dep-valid.d.ts +3 -0
  660. package/types/lib/third-party/arborist/lib/dep-valid.d.ts.map +1 -0
  661. package/types/lib/third-party/arborist/lib/edge.d.ts +46 -0
  662. package/types/lib/third-party/arborist/lib/edge.d.ts.map +1 -0
  663. package/types/lib/third-party/arborist/lib/from-path.d.ts +3 -0
  664. package/types/lib/third-party/arborist/lib/from-path.d.ts.map +1 -0
  665. package/types/lib/third-party/arborist/lib/gather-dep-set.d.ts +3 -0
  666. package/types/lib/third-party/arborist/lib/gather-dep-set.d.ts.map +1 -0
  667. package/types/lib/third-party/arborist/lib/index.d.ts +3 -0
  668. package/types/lib/third-party/arborist/lib/index.d.ts.map +1 -0
  669. package/types/lib/third-party/arborist/lib/inventory.d.ts +14 -0
  670. package/types/lib/third-party/arborist/lib/inventory.d.ts.map +1 -0
  671. package/types/lib/third-party/arborist/lib/link.d.ts +18 -0
  672. package/types/lib/third-party/arborist/lib/link.d.ts.map +1 -0
  673. package/types/lib/third-party/arborist/lib/node.d.ts +112 -0
  674. package/types/lib/third-party/arborist/lib/node.d.ts.map +1 -0
  675. package/types/lib/third-party/arborist/lib/npm-extension.d.ts +18 -0
  676. package/types/lib/third-party/arborist/lib/npm-extension.d.ts.map +1 -0
  677. package/types/lib/third-party/arborist/lib/override-resolves.d.ts +3 -0
  678. package/types/lib/third-party/arborist/lib/override-resolves.d.ts.map +1 -0
  679. package/types/lib/third-party/arborist/lib/override-set.d.ts +27 -0
  680. package/types/lib/third-party/arborist/lib/override-set.d.ts.map +1 -0
  681. package/types/lib/third-party/arborist/lib/package-extensions.d.ts +36 -0
  682. package/types/lib/third-party/arborist/lib/package-extensions.d.ts.map +1 -0
  683. package/types/lib/third-party/arborist/lib/printable.d.ts +3 -0
  684. package/types/lib/third-party/arborist/lib/printable.d.ts.map +1 -0
  685. package/types/lib/third-party/arborist/lib/proc-log.d.ts +20 -0
  686. package/types/lib/third-party/arborist/lib/proc-log.d.ts.map +1 -0
  687. package/types/lib/third-party/arborist/lib/realpath.d.ts +3 -0
  688. package/types/lib/third-party/arborist/lib/realpath.d.ts.map +1 -0
  689. package/types/lib/third-party/arborist/lib/relpath.d.ts +3 -0
  690. package/types/lib/third-party/arborist/lib/relpath.d.ts.map +1 -0
  691. package/types/lib/third-party/arborist/lib/shrinkwrap.d.ts +54 -0
  692. package/types/lib/third-party/arborist/lib/shrinkwrap.d.ts.map +1 -0
  693. package/types/lib/third-party/arborist/lib/spec-from-lock.d.ts +3 -0
  694. package/types/lib/third-party/arborist/lib/spec-from-lock.d.ts.map +1 -0
  695. package/types/lib/third-party/arborist/lib/tree-check.d.ts +3 -0
  696. package/types/lib/third-party/arborist/lib/tree-check.d.ts.map +1 -0
  697. package/types/lib/third-party/arborist/lib/validate-npm-package-name.d.ts +13 -0
  698. package/types/lib/third-party/arborist/lib/validate-npm-package-name.d.ts.map +1 -0
  699. package/types/lib/third-party/arborist/lib/version-from-tgz.d.ts +6 -0
  700. package/types/lib/third-party/arborist/lib/version-from-tgz.d.ts.map +1 -0
  701. package/types/lib/third-party/arborist/lib/yarn-lock.d.ts +35 -0
  702. package/types/lib/third-party/arborist/lib/yarn-lock.d.ts.map +1 -0
  703. package/types/lib/validator/bomValidator.d.ts +40 -0
  704. package/types/lib/validator/bomValidator.d.ts.map +1 -0
  705. package/types/lib/validator/complianceEngine.d.ts +72 -0
  706. package/types/lib/validator/complianceEngine.d.ts.map +1 -0
  707. package/types/lib/validator/complianceRules.d.ts +61 -0
  708. package/types/lib/validator/complianceRules.d.ts.map +1 -0
  709. package/types/lib/validator/index.d.ts +101 -0
  710. package/types/lib/validator/index.d.ts.map +1 -0
  711. package/types/lib/validator/reporters/annotations.d.ts +37 -0
  712. package/types/lib/validator/reporters/annotations.d.ts.map +1 -0
  713. package/types/lib/validator/reporters/console.d.ts +34 -0
  714. package/types/lib/validator/reporters/console.d.ts.map +1 -0
  715. package/types/lib/validator/reporters/index.d.ts +30 -0
  716. package/types/lib/validator/reporters/index.d.ts.map +1 -0
  717. package/types/lib/validator/reporters/json.d.ts +11 -0
  718. package/types/lib/validator/reporters/json.d.ts.map +1 -0
  719. package/types/lib/validator/reporters/sarif.d.ts +22 -0
  720. package/types/lib/validator/reporters/sarif.d.ts.map +1 -0
  721. package/mod.d.ts +0 -7
  722. package/mod.js +0 -22
package/data/license-deprecations.json ADDED
@@ -0,0 +1,302 @@
1
+ {
2
+ "GPL-1.0": "GPL-1.0-only",
3
+ "GPL-1.0+": "GPL-1.0-or-later",
4
+ "GPL-2.0": "GPL-2.0-only",
5
+ "GPL-2.0+": "GPL-2.0-or-later",
6
+ "GPL-3.0": "GPL-3.0-only",
7
+ "GPL-3.0+": "GPL-3.0-or-later",
8
+ "LGPL-2.0": "LGPL-2.0-only",
9
+ "LGPL-2.0+": "LGPL-2.0-or-later",
10
+ "LGPL-2.1": "LGPL-2.1-only",
11
+ "LGPL-2.1+": "LGPL-2.1-or-later",
12
+ "LGPL-3.0": "LGPL-3.0-only",
13
+ "LGPL-3.0+": "LGPL-3.0-or-later",
14
+ "AGPL-1.0": "AGPL-1.0-only",
15
+ "AGPL-1.0+": "AGPL-1.0-or-later",
16
+ "AGPL-3.0": "AGPL-3.0-only",
17
+ "AGPL-3.0+": "AGPL-3.0-or-later",
18
+ "GFDL-1.1": "GFDL-1.1-only",
19
+ "GFDL-1.1+": "GFDL-1.1-or-later",
20
+ "GFDL-1.2": "GFDL-1.2-only",
21
+ "GFDL-1.2+": "GFDL-1.2-or-later",
22
+ "GFDL-1.3": "GFDL-1.3-only",
23
+ "GFDL-1.3+": "GFDL-1.3-or-later",
24
+ "LicenseRef-scancode-aladdin-md5": "Zlib",
25
+ "aladdin-md5": "Zlib",
26
+ "LicenseRef-scancode-classworlds": "Plexus",
27
+ "classworlds": "Plexus",
28
+ "GPL-2.0-with-classpath-exception": "GPL-2.0-or-later OR Classpath-exception-2.0",
29
+ "gpl-2.0-classpath": "GPL-2.0-or-later OR Classpath-exception-2.0",
30
+ "LicenseRef-scancode-dr-john-maddock": "Advanced-Cryptics-Dictionary",
31
+ "dr-john-maddock": "Advanced-Cryptics-Dictionary",
32
+ "LicenseRef-scancode-gpl-2.0-plus-subcommander": "gpl-2.0-plus WITH subcommander-exception-2.0-plus",
33
+ "gpl-2.0-plus-subcommander": "gpl-2.0-plus WITH subcommander-exception-2.0-plus",
34
+ "LicenseRef-scancode-gpl-2.0-freertos": "gpl-2.0-plus WITH freertos-exception-2.0",
35
+ "gpl-2.0-freertos": "gpl-2.0-plus WITH freertos-exception-2.0",
36
+ "LicenseRef-scancode-osetpl-2.1": "OSET-PL-2.1",
37
+ "osetpl-2.1": "OSET-PL-2.1",
38
+ "LicenseRef-scancode-apache-2.0-runtime-library-exception": "Swift-exception",
39
+ "apache-2.0-runtime-library-exception": "Swift-exception",
40
+ "LicenseRef-scancode-hot-potato": "LicenseRef-scancode-proprietary-license",
41
+ "hot-potato": "LicenseRef-scancode-proprietary-license",
42
+ "LicenseRef-scancode-aop-pd": "CC-PDDC",
43
+ "aop-pd": "CC-PDDC",
44
+ "LicenseRef-scancode-gpl-2.0-plus-nant": "gpl-2.0-plus WITH nant-exception-2.0-plus",
45
+ "gpl-2.0-plus-nant": "gpl-2.0-plus WITH nant-exception-2.0-plus",
46
+ "LicenseRef-scancode-etalab-2.0-fr": "etalab-2.0",
47
+ "etalab-2.0-fr": "etalab-2.0",
48
+ "LicenseRef-scancode-lgpl-2.1-nokia-qt-1.0": "Digia-Qt-LGPL-exception-1.1",
49
+ "lgpl-2.1-nokia-qt-1.0": "Digia-Qt-LGPL-exception-1.1",
50
+ "LicenseRef-scancode-gpl-2.0-rrdtool-floss": "gpl-2.0-plus AND rrdtool-floss-exception-2.0",
51
+ "gpl-2.0-rrdtool-floss": "gpl-2.0-plus AND rrdtool-floss-exception-2.0",
52
+ "LicenseRef-scancode-doug-lea": "LicenseRef-scancode-public-domain OR LicenseRef-scancode-public-domain OR LicenseRef-scancode-public-domain OR LicenseRef-scancode-public-domain",
53
+ "doug-lea": "LicenseRef-scancode-public-domain OR LicenseRef-scancode-public-domain OR LicenseRef-scancode-public-domain OR LicenseRef-scancode-public-domain",
54
+ "LicenseRef-scancode-qwt-1.0": "lgpl-2.1 WITH qwt-exception-1.0",
55
+ "qwt-1.0": "lgpl-2.1 WITH qwt-exception-1.0",
56
+ "LicenseRef-scancode-lgpl-3.0-plus-openssl": "lgpl-3.0-plus WITH OpenSSL-standalone-exception-lgpl-3.0-plus OR ZPL-2.1 OR Zlib",
57
+ "lgpl-3.0-plus-openssl": "lgpl-3.0-plus WITH OpenSSL-standalone-exception-lgpl-3.0-plus OR ZPL-2.1 OR Zlib",
58
+ "LicenseRef-scancode-lgpl-2.1-nokia-qt-1.1": "Qt-LGPL-exception-1.1",
59
+ "lgpl-2.1-nokia-qt-1.1": "Qt-LGPL-exception-1.1",
60
+ "LicenseRef-scancode-gpl-2.0-mysql-floss": "gpl-2.0-plus WITH mysql-floss-exception-2.0",
61
+ "gpl-2.0-mysql-floss": "gpl-2.0-plus WITH mysql-floss-exception-2.0",
62
+ "LicenseRef-scancode-bsd-2-clause-freebsd": "BSD-2-Clause-Views",
63
+ "bsd-2-clause-freebsd": "BSD-2-Clause-Views",
64
+ "LicenseRef-scancode-commercial-option": "LicenseRef-scancode-commercial-license",
65
+ "commercial-option": "LicenseRef-scancode-commercial-license",
66
+ "LicenseRef-scancode-lgpl-2.0-plus-gcc": "lgpl-2.0-plus WITH gcc-linking-exception-2.0",
67
+ "lgpl-2.0-plus-gcc": "lgpl-2.0-plus WITH gcc-linking-exception-2.0",
68
+ "LicenseRef-scancode-ms-refl": "LicenseRef-scancode-ms-rsl",
69
+ "ms-refl": "LicenseRef-scancode-ms-rsl",
70
+ "LicenseRef-scancode-cmr-no": "Advanced-Cryptics-Dictionary",
71
+ "cmr-no": "Advanced-Cryptics-Dictionary",
72
+ "GPL-2.0-with-GCC-exception": "gpl-2.0-plus WITH gcc-linking-exception-2.0",
73
+ "gpl-2.0-gcc": "gpl-2.0-plus WITH gcc-linking-exception-2.0",
74
+ "LicenseRef-scancode-gpl-2.0-plus-openssl": "LicenseRef-scancode-openssl-exception-gpl-2.0-plus",
75
+ "gpl-2.0-plus-openssl": "LicenseRef-scancode-openssl-exception-gpl-2.0-plus",
76
+ "LicenseRef-scancode-gpl-2.0-javascript": "gpl-2.0-plus WITH javascript-exception-2.0",
77
+ "gpl-2.0-javascript": "gpl-2.0-plus WITH javascript-exception-2.0",
78
+ "LicenseRef-scancode-lgpl-2.1-rxtx": "lgpl-2.1-plus WITH rxtx-exception-lgpl-2.1",
79
+ "lgpl-2.1-rxtx": "lgpl-2.1-plus WITH rxtx-exception-lgpl-2.1",
80
+ "LicenseRef-scancode-gpl-2.0-plus-sane": "SANE-exception",
81
+ "gpl-2.0-plus-sane": "SANE-exception",
82
+ "LicenseRef-scancode-ttf2pt1": "LicenseRef-scancode-bsd-2-clause-plus-advertizing OR LicenseRef-scancode-other-permissive",
83
+ "ttf2pt1": "LicenseRef-scancode-bsd-2-clause-plus-advertizing OR LicenseRef-scancode-other-permissive",
84
+ "LicenseRef-scancode-libcap": "bsd-new OR gpl-2.0-plus",
85
+ "libcap": "bsd-new OR gpl-2.0-plus",
86
+ "LicenseRef-scancode-gpl-2.0-plus-upx": "gpl-2.0-plus WITH upx-exception-2.0-plus",
87
+ "gpl-2.0-plus-upx": "gpl-2.0-plus WITH upx-exception-2.0-plus",
88
+ "LicenseRef-scancode-apache-patent-provision-exception": "mxml-exception",
89
+ "apache-patent-provision-exception": "mxml-exception",
90
+ "LicenseRef-scancode-gpl-3.0-font": "gpl-3.0-plus WITH font-exception-gpl",
91
+ "gpl-3.0-font": "gpl-3.0-plus WITH font-exception-gpl",
92
+ "LicenseRef-scancode-broadcom-unpublished-source": "LicenseRef-scancode-unpublished-source",
93
+ "broadcom-unpublished-source": "LicenseRef-scancode-unpublished-source",
94
+ "LicenseRef-scancode-gpl-2.0-autoopts": "gpl-2.0-plus WITH autoopts-exception-2.0",
95
+ "gpl-2.0-autoopts": "gpl-2.0-plus WITH autoopts-exception-2.0",
96
+ "LicenseRef-scancode-gpl-3.0-plus-openssl": "gpl-3.0-plus WITH OpenSSL-standalone-exception-gpl-3.0-plus",
97
+ "gpl-3.0-plus-openssl": "gpl-3.0-plus WITH OpenSSL-standalone-exception-gpl-3.0-plus",
98
+ "LicenseRef-scancode-gpl-2.0-ice": "gpl-2.0 WITH ice-exception-2.0",
99
+ "gpl-2.0-ice": "gpl-2.0 WITH ice-exception-2.0",
100
+ "LicenseRef-scancode-gpl-2.0-iolib": "gpl-2.0-plus WITH iolib-exception-2.0",
101
+ "gpl-2.0-iolib": "gpl-2.0-plus WITH iolib-exception-2.0",
102
+ "LicenseRef-scancode-gpl-2.0-plus-openmotif": "gpl-2.0-plus WITH openmotif-exception-2.0-plus",
103
+ "gpl-2.0-plus-openmotif": "gpl-2.0-plus WITH openmotif-exception-2.0-plus",
104
+ "LicenseRef-scancode-slf4j-2005": "ICU",
105
+ "slf4j-2005": "ICU",
106
+ "LicenseRef-scancode-odc-1.0": "PPL",
107
+ "odc-1.0": "PPL",
108
+ "LicenseRef-scancode-bsd-original-uc-1990": "BSD-4.3TAHOE",
109
+ "bsd-original-uc-1990": "BSD-4.3TAHOE",
110
+ "LicenseRef-scancode-gpl-3.0-aptana": "gpl-3.0 WITH aptana-exception-3.0 AND LicenseRef-scancode-unknown",
111
+ "gpl-3.0-aptana": "gpl-3.0 WITH aptana-exception-3.0 AND LicenseRef-scancode-unknown",
112
+ "LicenseRef-scancode-digia-qt-exception-lgpl-2.1": "Qt-LGPL-exception-1.1",
113
+ "digia-qt-exception-lgpl-2.1": "Qt-LGPL-exception-1.1",
114
+ "LicenseRef-scancode-ccrc-1.0": "GPL-CC-1.0",
115
+ "ccrc-1.0": "GPL-CC-1.0",
116
+ "LicenseRef-scancode-unlimited-binary-linking": "LicenseRef-scancode-unlimited-binary-use-exception",
117
+ "unlimited-binary-linking": "LicenseRef-scancode-unlimited-binary-use-exception",
118
+ "LicenseRef-scancode-gpl-2.0-oracle-mysql-foss": "gpl-2.0 WITH oracle-mysql-foss-exception-2.0",
119
+ "gpl-2.0-oracle-mysql-foss": "gpl-2.0 WITH oracle-mysql-foss-exception-2.0",
120
+ "LicenseRef-scancode-hs-regexp-orig": "Spencer-86",
121
+ "hs-regexp-orig": "Spencer-86",
122
+ "LicenseRef-scancode-broadcom-dual": "gpl-2.0 OR commercial-license",
123
+ "broadcom-dual": "gpl-2.0 OR commercial-license",
124
+ "LicenseRef-scancode-nokia-qt-exception-1.1": "Qt-LGPL-exception-1.1",
125
+ "nokia-qt-exception-1.1": "Qt-LGPL-exception-1.1",
126
+ "LicenseRef-scancode-linum": "LicenseRef-scancode-philippe-de-muyter",
127
+ "linum": "LicenseRef-scancode-philippe-de-muyter",
128
+ "LicenseRef-scancode-sun-proprietary-jdk": "LicenseRef-scancode-proprietary-license",
129
+ "sun-proprietary-jdk": "LicenseRef-scancode-proprietary-license",
130
+ "LicenseRef-scancode-lgpl-2.1-digia-qt": "Qt-LGPL-exception-1.1",
131
+ "lgpl-2.1-digia-qt": "Qt-LGPL-exception-1.1",
132
+ "LicenseRef-scancode-agpl-3.0-openssl": "LicenseRef-scancode-openssl-exception-agpl-3.0",
133
+ "agpl-3.0-openssl": "LicenseRef-scancode-openssl-exception-agpl-3.0",
134
+ "GPL-2.0-with-autoconf-exception": "gpl-2.0-plus WITH autoconf-simple-exception-2.0",
135
+ "gpl-2.0-autoconf": "gpl-2.0-plus WITH autoconf-simple-exception-2.0",
136
+ "LicenseRef-scancode-agpl-3.0-linking-exception": "romic-exception",
137
+ "agpl-3.0-linking-exception": "romic-exception",
138
+ "LicenseRef-scancode-lgpl-3-plus-linking": "lgpl-3.0-plus WITH lgpl-3.0-linking-exception",
139
+ "lgpl-3-plus-linking": "lgpl-3.0-plus WITH lgpl-3.0-linking-exception",
140
+ "LicenseRef-scancode-gpl-2.0-broadcom-linking": "gpl-2.0 WITH broadcom-linking-exception-2.0 OR commercial-license",
141
+ "gpl-2.0-broadcom-linking": "gpl-2.0 WITH broadcom-linking-exception-2.0 OR commercial-license",
142
+ "LicenseRef-scancode-apache-due-credit": "Plexus",
143
+ "apache-due-credit": "Plexus",
144
+ "LicenseRef-scancode-gpl-2.0-iso-cpp": "gpl-2.0-plus WITH mif-exception",
145
+ "gpl-2.0-iso-cpp": "gpl-2.0-plus WITH mif-exception",
146
+ "LicenseRef-scancode-lgpl-2.1-qt-company-2017": "Qt-LGPL-exception-1.1",
147
+ "lgpl-2.1-qt-company-2017": "Qt-LGPL-exception-1.1",
148
+ "LicenseRef-scancode-gpl-2.0-library": "gpl-2.0 WITH classpath-exception-2.0",
149
+ "gpl-2.0-library": "gpl-2.0 WITH classpath-exception-2.0",
150
+ "wxWindows": "lgpl-2.0-plus WITH wxWindows-exception-3.1",
151
+ "wxwindows": "lgpl-2.0-plus WITH wxWindows-exception-3.1",
152
+ "LicenseRef-scancode-ekioh": "MIT-0",
153
+ "ekioh": "MIT-0",
154
+ "LicenseRef-scancode-nunit-v2": "zlib-acknowledgement",
155
+ "nunit-v2": "zlib-acknowledgement",
156
+ "GPL-2.0-with-font-exception": "gpl-2.0-plus WITH font-exception-gpl",
157
+ "gpl-2.0-font": "gpl-2.0-plus WITH font-exception-gpl",
158
+ "LicenseRef-scancode-bsd-axis": "BSD-Source-Code",
159
+ "bsd-axis": "BSD-Source-Code",
160
+ "LicenseRef-scancode-bsd-intel": "BSD-3-Clause",
161
+ "bsd-intel": "BSD-3-Clause",
162
+ "LicenseRef-scancode-gpl-2.0-glibc": "gpl-2.0-plus WITH mif-exception",
163
+ "gpl-2.0-glibc": "gpl-2.0-plus WITH mif-exception",
164
+ "LicenseRef-scancode-madwifi-dual": "LicenseRef-scancode-intel-bsd OR gpl-2.0",
165
+ "madwifi-dual": "LicenseRef-scancode-intel-bsd OR gpl-2.0",
166
+ "GPL-3.0-with-autoconf-exception": "gpl-3.0-plus WITH autoconf-exception-3.0",
167
+ "gpl-3.0-autoconf": "gpl-3.0-plus WITH autoconf-exception-3.0",
168
+ "LicenseRef-scancode-gpl-2.0-plus-ekiga": "GPL-2.0-or-later OR LicenseRef-scancode-ekiga-exception-2.0-plus",
169
+ "gpl-2.0-plus-ekiga": "GPL-2.0-or-later OR LicenseRef-scancode-ekiga-exception-2.0-plus",
170
+ "LicenseRef-scancode-apache-2.0-linking-exception": "LicenseRef-scancode-compuphase-linking-exception",
171
+ "apache-2.0-linking-exception": "LicenseRef-scancode-compuphase-linking-exception",
172
+ "LicenseRef-scancode-lgpl-2.1-plus-linking": "LicenseRef-scancode-linking-exception-2.1-plus",
173
+ "lgpl-2.1-plus-linking": "LicenseRef-scancode-linking-exception-2.1-plus",
174
+ "LicenseRef-scancode-bzip2-libbzip-1.0.5": "bzip2-1.0.6",
175
+ "bzip2-libbzip-1.0.5": "bzip2-1.0.6",
176
+ "LicenseRef-scancode-gpl-2.0-mysql-connector-odbc": "gpl-2.0-plus WITH mysql-connector-odbc-exception-2.0",
177
+ "gpl-2.0-mysql-connector-odbc": "gpl-2.0-plus WITH mysql-connector-odbc-exception-2.0",
178
+ "LicenseRef-scancode-ntpl": "NTP",
179
+ "ntpl": "NTP",
180
+ "LicenseRef-scancode-apache-exception-llvm": "LLVM-exception",
181
+ "apache-exception-llvm": "LLVM-exception",
182
+ "LicenseRef-scancode-gpl-2.0-kernel": "gpl-2.0 WITH linux-syscall-exception-gpl",
183
+ "gpl-2.0-kernel": "gpl-2.0 WITH linux-syscall-exception-gpl",
184
+ "LicenseRef-scancode-lgpl-2.0-fltk": "FLTK-exception",
185
+ "lgpl-2.0-fltk": "FLTK-exception",
186
+ "LicenseRef-scancode-slf4j-2008": "MIT OR MIT",
187
+ "slf4j-2008": "MIT OR MIT",
188
+ "LicenseRef-scancode-gpl-2.0-lmbench": "gpl-1.0-plus WITH lmbench-exception-2.0",
189
+ "gpl-2.0-lmbench": "gpl-1.0-plus WITH lmbench-exception-2.0",
190
+ "LicenseRef-scancode-gpl-2.0-plus-gcc": "gpl-2.0-plus WITH gcc-linking-exception-2.0",
191
+ "gpl-2.0-plus-gcc": "gpl-2.0-plus WITH gcc-linking-exception-2.0",
192
+ "LicenseRef-scancode-lgpl-2.1-nokia-qt": "LGPL-2.1-or-later OR Qt-LGPL-exception-1.1",
193
+ "lgpl-2.1-nokia-qt": "LGPL-2.1-or-later OR Qt-LGPL-exception-1.1",
194
+ "LicenseRef-scancode-dejavu-font": "Bitstream-Vera AND public-domain OR Bitstream-Vera OR Bitstream-Vera OR Bitstream-Vera",
195
+ "dejavu-font": "Bitstream-Vera AND public-domain OR Bitstream-Vera OR Bitstream-Vera OR Bitstream-Vera",
196
+ "LicenseRef-scancode-polyform-defensive-1.0.0": "LicenseRef-scancode-polyform-shield-1.0.0",
197
+ "polyform-defensive-1.0.0": "LicenseRef-scancode-polyform-shield-1.0.0",
198
+ "LicenseRef-scancode-gpl-2.0-guile": "gpl-2.0-plus WITH guile-exception-2.0",
199
+ "gpl-2.0-guile": "gpl-2.0-plus WITH guile-exception-2.0",
200
+ "LicenseRef-scancode-gpl-2.0-plus-syntext": "LicenseRef-scancode-syntext-serna-exception-1.0",
201
+ "gpl-2.0-plus-syntext": "LicenseRef-scancode-syntext-serna-exception-1.0",
202
+ "LicenseRef-scancode-bsd-new-far-manager": "bsd-new WITH far-manager-exception",
203
+ "bsd-new-far-manager": "bsd-new WITH far-manager-exception",
204
+ "LicenseRef-scancode-gpl-2.0-libgit2": "gpl-2.0 WITH gcc-linking-exception-2.0",
205
+ "gpl-2.0-libgit2": "gpl-2.0 WITH gcc-linking-exception-2.0",
206
+ "LicenseRef-scancode-lgpl-3.0-cygwin": "lgpl-3.0-plus WITH cygwin-exception-lgpl-3.0-plus",
207
+ "lgpl-3.0-cygwin": "lgpl-3.0-plus WITH cygwin-exception-lgpl-3.0-plus",
208
+ "LicenseRef-scancode-lgpl-3.0-zeromq": "LicenseRef-scancode-zeromq-exception-lgpl-3.0",
209
+ "lgpl-3.0-zeromq": "LicenseRef-scancode-zeromq-exception-lgpl-3.0",
210
+ "LicenseRef-scancode-gpl-2.0-redhat": "gpl-2.0-plus WITH 389-exception",
211
+ "gpl-2.0-redhat": "gpl-2.0-plus WITH 389-exception",
212
+ "LicenseRef-scancode-x11-r75": "MIT",
213
+ "x11-r75": "MIT",
214
+ "LicenseRef-scancode-w3c-software-20021231": "W3C",
215
+ "w3c-software-20021231": "W3C",
216
+ "LicenseRef-scancode-gpl-2.0-openssl": "x11vnc-openssl-exception",
217
+ "gpl-2.0-openssl": "x11vnc-openssl-exception",
218
+ "LicenseRef-scancode-gpl-2.0-plus-geoserver": "gpl-2.0-plus WITH geoserver-exception-2.0-plus",
219
+ "gpl-2.0-plus-geoserver": "gpl-2.0-plus WITH geoserver-exception-2.0-plus",
220
+ "LicenseRef-scancode-gpl-2.0-independent-module-linking": "gpl-2.0-plus WITH classpath-exception-2.0",
221
+ "gpl-2.0-independent-module-linking": "gpl-2.0-plus WITH classpath-exception-2.0",
222
+ "LicenseRef-scancode-gpl-2.0-proguard": "LicenseRef-scancode-proguard-exception-2.0",
223
+ "gpl-2.0-proguard": "LicenseRef-scancode-proguard-exception-2.0",
224
+ "LicenseRef-scancode-linking-exception-lgpl-3.0": "LGPL-3.0-linking-exception",
225
+ "linking-exception-lgpl-3.0": "LGPL-3.0-linking-exception",
226
+ "LicenseRef-scancode-ms-limited-public": "MS-LPL",
227
+ "ms-limited-public": "MS-LPL",
228
+ "LicenseRef-scancode-gpl-2.0-plus-ada": "gpl-2.0-plus WITH ada-linking-exception",
229
+ "gpl-2.0-plus-ada": "gpl-2.0-plus WITH ada-linking-exception",
230
+ "LicenseRef-scancode-gpl-3.0-openbd": "GPL-3.0-only OR LicenseRef-scancode-openbd-exception-3.0 OR gpl-3.0 WITH gpl-generic-additional-terms OR GPL-1.0-or-later",
231
+ "gpl-3.0-openbd": "GPL-3.0-only OR LicenseRef-scancode-openbd-exception-3.0 OR gpl-3.0 WITH gpl-generic-additional-terms OR GPL-1.0-or-later",
232
+ "LicenseRef-scancode-gpl-2.0-plus-linking": "gpl-2.0-plus WITH linking-exception-2.0-plus",
233
+ "gpl-2.0-plus-linking": "gpl-2.0-plus WITH linking-exception-2.0-plus",
234
+ "eCos-2.0": "gpl-2.0-plus WITH eCos-2.0-exception-2.0",
235
+ "ecos": "gpl-2.0-plus WITH eCos-2.0-exception-2.0",
236
+ "LicenseRef-scancode-ms-permissive-1.1": "MS-PL",
237
+ "ms-permissive-1.1": "MS-PL",
238
+ "LicenseRef-scancode-gpl-3.0-cygwin": "(gpl-3.0-plus AND cygwin-exception-3.0) OR commercial-license",
239
+ "gpl-3.0-cygwin": "(gpl-3.0-plus AND cygwin-exception-3.0) OR commercial-license",
240
+ "LicenseRef-scancode-gpl-2.0-bison": "gpl-2.0-plus WITH bison-exception-2.0",
241
+ "gpl-2.0-bison": "gpl-2.0-plus WITH bison-exception-2.0",
242
+ "LicenseRef-scancode-network-time-protocol": "NTP OR NTP",
243
+ "network-time-protocol": "NTP OR NTP",
244
+ "LicenseRef-scancode-ogc-2006": "OGC-1.0",
245
+ "ogc-2006": "OGC-1.0",
246
+ "LicenseRef-scancode-x11r5-authors": "SMLNJ",
247
+ "x11r5-authors": "SMLNJ",
248
+ "LicenseRef-scancode-libzip": "BSD-3-Clause",
249
+ "libzip": "BSD-3-Clause",
250
+ "LicenseRef-scancode-lgpl-2.1-plus-unlimited-linking": "lgpl-2.1-plus WITH unlimited-linking-exception-lgpl",
251
+ "lgpl-2.1-plus-unlimited-linking": "lgpl-2.1-plus WITH unlimited-linking-exception-lgpl",
252
+ "LicenseRef-scancode-qt-company-exception-2017-lgpl-2.1": "Qt-LGPL-exception-1.1",
253
+ "qt-company-exception-2017-lgpl-2.1": "Qt-LGPL-exception-1.1",
254
+ "LicenseRef-scancode-ralf-corsepius": "LicenseRef-scancode-red-hat-attribution",
255
+ "ralf-corsepius": "LicenseRef-scancode-red-hat-attribution",
256
+ "LicenseRef-scancode-mini-xml": "LGPL-2.0-or-later OR LicenseRef-scancode-mini-xml-exception-lgpl-2.0",
257
+ "mini-xml": "LGPL-2.0-or-later OR LicenseRef-scancode-mini-xml-exception-lgpl-2.0",
258
+ "LicenseRef-scancode-gpl-2.0-bison-2.2": "gpl-2.0-plus WITH bison-exception-2.2",
259
+ "gpl-2.0-bison-2.2": "gpl-2.0-plus WITH bison-exception-2.2",
260
+ "LicenseRef-scancode-mentalis": "BSD-Source-Code",
261
+ "mentalis": "BSD-Source-Code",
262
+ "LicenseRef-scancode-agpl-3.0-bacula": "LicenseRef-scancode-bacula-exception OR BSD-2-Clause OR BSD-2-Clause OR BSD-2-Clause OR AGPL-3.0-or-later OR AGPL-3.0-or-later OR AGPL-3.0-only",
263
+ "agpl-3.0-bacula": "LicenseRef-scancode-bacula-exception OR BSD-2-Clause OR BSD-2-Clause OR BSD-2-Clause OR AGPL-3.0-or-later OR AGPL-3.0-or-later OR AGPL-3.0-only",
264
+ "LicenseRef-scancode-google-patent-license-fuschia": "LicenseRef-scancode-google-patent-license-fuchsia",
265
+ "google-patent-license-fuschia": "LicenseRef-scancode-google-patent-license-fuchsia",
266
+ "GPL-3.0-with-GCC-exception": "gpl-3.0-plus WITH gcc-exception-3.1",
267
+ "gpl-3.0-gcc": "gpl-3.0-plus WITH gcc-exception-3.1",
268
+ "LicenseRef-scancode-gpl-2.0-uboot": "gpl-2.0-plus WITH u-boot-exception-2.0",
269
+ "gpl-2.0-uboot": "gpl-2.0-plus WITH u-boot-exception-2.0",
270
+ "LicenseRef-scancode-bsd-2-clause-netbsd": "BSD-2-Clause",
271
+ "bsd-2-clause-netbsd": "BSD-2-Clause",
272
+ "LicenseRef-scancode-gpl-3.0-bison": "gpl-3.0-plus WITH bison-exception-2.2",
273
+ "gpl-3.0-bison": "gpl-3.0-plus WITH bison-exception-2.2",
274
+ "LicenseRef-scancode-historical-sell-variant": "HPND-sell-variant",
275
+ "historical-sell-variant": "HPND-sell-variant",
276
+ "LicenseRef-scancode-unicode-data-software": "LicenseRef-scancode-unicode",
277
+ "unicode-data-software": "LicenseRef-scancode-unicode",
278
+ "LicenseRef-scancode-gpl-2.0-gcc-compiler-exception": "gpl-2.0-plus WITH gcc-compiler-exception-2.0",
279
+ "gpl-2.0-gcc-compiler-exception": "gpl-2.0-plus WITH gcc-compiler-exception-2.0",
280
+ "LicenseRef-scancode-broadcom-linking-unmodified": "LicenseRef-scancode-broadcom-unmodified-exception",
281
+ "broadcom-linking-unmodified": "LicenseRef-scancode-broadcom-unmodified-exception",
282
+ "LicenseRef-scancode-gpl-2.0-qt-qca": "gpl-2.0 WITH qt-qca-exception-2.0",
283
+ "gpl-2.0-qt-qca": "gpl-2.0 WITH qt-qca-exception-2.0",
284
+ "LicenseRef-scancode-dual-bsd-gpl": "bsd-new OR gpl-2.0",
285
+ "dual-bsd-gpl": "bsd-new OR gpl-2.0",
286
+ "LicenseRef-scancode-lgpl-2.1-spell-checker": "LicenseRef-scancode-spell-checker-exception-lgpl-2.1-plus",
287
+ "lgpl-2.1-spell-checker": "LicenseRef-scancode-spell-checker-exception-lgpl-2.1-plus",
288
+ "LicenseRef-scancode-lgpl-2.1-qt-company": "lgpl-2.1-plus WITH qt-company-exception-lgpl-2.1",
289
+ "lgpl-2.1-qt-company": "lgpl-2.1-plus WITH qt-company-exception-lgpl-2.1",
290
+ "LicenseRef-scancode-libtool-exception": "Libtool-exception",
291
+ "libtool-exception": "Libtool-exception",
292
+ "LicenseRef-scancode-gpl-2.0-cygwin": "gpl-2.0 WITH cygwin-exception-2.0 OR commercial-license",
293
+ "gpl-2.0-cygwin": "gpl-2.0 WITH cygwin-exception-2.0 OR commercial-license",
294
+ "LicenseRef-scancode-gpl-2.0-openjdk": "gpl-2.0-plus WITH openjdk-exception",
295
+ "gpl-2.0-openjdk": "gpl-2.0-plus WITH openjdk-exception",
296
+ "LicenseRef-scancode-gpl-2.0-oracle-openjdk": "gpl-2.0-plus WITH classpath-exception-2.0",
297
+ "gpl-2.0-oracle-openjdk": "gpl-2.0-plus WITH classpath-exception-2.0",
298
+ "LicenseRef-scancode-gpl-2.0-libtool": "gpl-2.0-plus WITH libtool-exception-2.0",
299
+ "gpl-2.0-libtool": "gpl-2.0-plus WITH libtool-exception-2.0",
300
+ "LicenseRef-scancode-x11-xconsortium_veillard": "LicenseRef-scancode-x11-xconsortium-veillard",
301
+ "x11-xconsortium_veillard": "LicenseRef-scancode-x11-xconsortium-veillard"
302
+ }
package/data/lolbas-index.json ADDED
@@ -0,0 +1,150 @@
1
+ {
2
+ "entries": {
3
+ "bitsadmin.exe": {
4
+ "attackTactics": ["TA0002", "TA0011"],
5
+ "attackTechniques": ["T1105", "T1197"],
6
+ "contexts": ["admin", "user"],
7
+ "functions": ["download", "upload", "command"],
8
+ "reference": "https://lolbas-project.github.io/lolbas/Binaries/Bitsadmin/",
9
+ "riskTags": ["network-transfer", "persistence"]
10
+ },
11
+ "certutil.exe": {
12
+ "attackTactics": ["TA0005", "TA0011"],
13
+ "attackTechniques": ["T1105", "T1140"],
14
+ "contexts": ["admin", "user"],
15
+ "functions": ["download", "decode", "file-read", "file-write"],
16
+ "reference": "https://lolbas-project.github.io/lolbas/Binaries/Certutil/",
17
+ "riskTags": ["defense-evasion", "network-transfer"]
18
+ },
19
+ "cmd.exe": {
20
+ "attackTactics": ["TA0002"],
21
+ "attackTechniques": ["T1059.003"],
22
+ "contexts": ["admin", "user"],
23
+ "functions": ["command", "shell"],
24
+ "reference": "https://lolbas-project.github.io/lolbas/Binaries/Cmd/",
25
+ "riskTags": ["execution"]
26
+ },
27
+ "cmdkey.exe": {
28
+ "attackTactics": ["TA0006"],
29
+ "attackTechniques": ["T1555"],
30
+ "contexts": ["admin", "user"],
31
+ "functions": ["credential-access"],
32
+ "reference": "https://lolbas-project.github.io/lolbas/Binaries/Cmdkey/",
33
+ "riskTags": ["credential-access"]
34
+ },
35
+ "cmstp.exe": {
36
+ "attackTactics": ["TA0003", "TA0005"],
37
+ "attackTechniques": ["T1218.003", "T1548.002"],
38
+ "contexts": ["admin", "uac-bypass", "user"],
39
+ "functions": ["proxy-execution", "uac-bypass"],
40
+ "reference": "https://lolbas-project.github.io/lolbas/Binaries/Cmstp/",
41
+ "riskTags": ["defense-evasion", "persistence", "uac-bypass"]
42
+ },
43
+ "cscript.exe": {
44
+ "attackTactics": ["TA0002", "TA0005"],
45
+ "attackTechniques": ["T1059.005", "T1216"],
46
+ "contexts": ["admin", "user"],
47
+ "functions": ["proxy-execution", "script-execution"],
48
+ "reference": "https://lolbas-project.github.io/lolbas/Binaries/Cscript/",
49
+ "riskTags": ["defense-evasion", "execution"]
50
+ },
51
+ "ftp.exe": {
52
+ "attackTactics": ["TA0011"],
53
+ "attackTechniques": ["T1041", "T1105"],
54
+ "contexts": ["admin", "user"],
55
+ "functions": ["download", "upload"],
56
+ "reference": "https://lolbas-project.github.io/lolbas/Binaries/Ftp/",
57
+ "riskTags": ["network-transfer"]
58
+ },
59
+ "installutil.exe": {
60
+ "attackTactics": ["TA0002", "TA0005"],
61
+ "attackTechniques": ["T1218.004"],
62
+ "contexts": ["admin", "user"],
63
+ "functions": ["library-load", "proxy-execution"],
64
+ "reference": "https://lolbas-project.github.io/lolbas/Binaries/Installutil/",
65
+ "riskTags": ["defense-evasion", "execution"]
66
+ },
67
+ "msbuild.exe": {
68
+ "attackTactics": ["TA0002", "TA0005"],
69
+ "attackTechniques": ["T1127.001"],
70
+ "contexts": ["admin", "user"],
71
+ "functions": ["compile", "proxy-execution", "script-execution"],
72
+ "reference": "https://lolbas-project.github.io/lolbas/Binaries/Msbuild/",
73
+ "riskTags": ["defense-evasion", "execution"]
74
+ },
75
+ "mshta.exe": {
76
+ "attackTactics": ["TA0002", "TA0005"],
77
+ "attackTechniques": ["T1218.005"],
78
+ "contexts": ["admin", "user"],
79
+ "functions": ["proxy-execution", "script-execution"],
80
+ "reference": "https://lolbas-project.github.io/lolbas/Binaries/Mshta/",
81
+ "riskTags": ["defense-evasion", "execution"]
82
+ },
83
+ "msiexec.exe": {
84
+ "attackTactics": ["TA0002", "TA0005", "TA0011"],
85
+ "attackTechniques": ["T1105", "T1218.007"],
86
+ "contexts": ["admin", "user"],
87
+ "functions": ["download", "proxy-execution"],
88
+ "reference": "https://lolbas-project.github.io/lolbas/Binaries/Msiexec/",
89
+ "riskTags": ["defense-evasion", "network-transfer"]
90
+ },
91
+ "odbcconf.exe": {
92
+ "attackTactics": ["TA0002", "TA0005"],
93
+ "attackTechniques": ["T1218.008"],
94
+ "contexts": ["admin", "user"],
95
+ "functions": ["library-load", "proxy-execution"],
96
+ "reference": "https://lolbas-project.github.io/lolbas/Binaries/Odbcconf/",
97
+ "riskTags": ["defense-evasion", "execution"]
98
+ },
99
+ "powershell.exe": {
100
+ "attackTactics": ["TA0002", "TA0005", "TA0011"],
101
+ "attackTechniques": ["T1041", "T1059.001", "T1105"],
102
+ "contexts": ["admin", "user"],
103
+ "functions": ["command", "download", "script-execution", "shell", "upload"],
104
+ "reference": "https://lolbas-project.github.io/lolbas/Binaries/Powershell/",
105
+ "riskTags": ["execution", "network-transfer", "persistence"]
106
+ },
107
+ "pwsh.exe": {
108
+ "attackTactics": ["TA0002", "TA0005", "TA0011"],
109
+ "attackTechniques": ["T1041", "T1059.001", "T1105"],
110
+ "contexts": ["admin", "user"],
111
+ "functions": ["command", "download", "script-execution", "shell", "upload"],
112
+ "reference": "https://lolbas-project.github.io/lolbas/Binaries/Powershell/",
113
+ "riskTags": ["execution", "network-transfer", "persistence"]
114
+ },
115
+ "regsvr32.exe": {
116
+ "attackTactics": ["TA0002", "TA0005"],
117
+ "attackTechniques": ["T1218.010"],
118
+ "contexts": ["admin", "user"],
119
+ "functions": ["library-load", "proxy-execution", "script-execution"],
120
+ "reference": "https://lolbas-project.github.io/lolbas/Binaries/Regsvr32/",
121
+ "riskTags": ["defense-evasion", "execution"]
122
+ },
123
+ "rundll32.exe": {
124
+ "attackTactics": ["TA0002", "TA0005"],
125
+ "attackTechniques": ["T1218.011"],
126
+ "contexts": ["admin", "user"],
127
+ "functions": ["library-load", "proxy-execution"],
128
+ "reference": "https://lolbas-project.github.io/lolbas/Binaries/Rundll32/",
129
+ "riskTags": ["defense-evasion", "execution"]
130
+ },
131
+ "wmic.exe": {
132
+ "attackTactics": ["TA0002", "TA0005", "TA0011"],
133
+ "attackTechniques": ["T1047", "T1105"],
134
+ "contexts": ["admin", "user"],
135
+ "functions": ["command", "download", "process-create"],
136
+ "reference": "https://lolbas-project.github.io/lolbas/Binaries/Wmic/",
137
+ "riskTags": ["execution", "network-transfer", "reconnaissance"]
138
+ },
139
+ "wscript.exe": {
140
+ "attackTactics": ["TA0002", "TA0005"],
141
+ "attackTechniques": ["T1059.005", "T1216"],
142
+ "contexts": ["admin", "user"],
143
+ "functions": ["proxy-execution", "script-execution"],
144
+ "reference": "https://lolbas-project.github.io/lolbas/Binaries/Wscript/",
145
+ "riskTags": ["defense-evasion", "execution"]
146
+ }
147
+ },
148
+ "source": "https://github.com/LOLBAS-Project/LOLBAS",
149
+ "sourceRef": "https://lolbas-project.github.io/"
150
+ }
package/data/predictive-audit-allowlist.json ADDED
@@ -0,0 +1,11 @@
1
+ [
2
+ "pkg:npm/%40babel",
3
+ "pkg:npm/%40eslint",
4
+ "pkg:npm/%40istanbuljs",
5
+ "pkg:npm/%40jest",
6
+ "pkg:npm/%40npmcli",
7
+ "pkg:npm/%40rollup",
8
+ "pkg:npm/%40types",
9
+ "pkg:npm/%40typescript-eslint",
10
+ "pkg:npm/npm"
11
+ ]