@cdxgen/cdxgen 13.0.1 → 13.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (286) hide show
  1. package/README.md +30 -16
  2. package/bin/audit.js +6 -0
  3. package/bin/cdxgen.js +141 -7
  4. package/bin/evinse.js +3 -1
  5. package/data/component-tags.json +8 -1
  6. package/data/crypto-oid.json +88 -12
  7. package/data/frameworks-list.json +86 -1
  8. package/data/remediations.json +1167 -0
  9. package/data/rules/ai-bom.yaml +78 -0
  10. package/data/rules/asar-archives.yaml +1 -1
  11. package/data/rules/build-fidelity.yaml +782 -0
  12. package/data/rules/cargo-rust.yaml +132 -0
  13. package/data/rules/mcp-servers.yaml +122 -0
  14. package/data/rules/package-integrity.yaml +13 -13
  15. package/lib/audit/index.js +48 -4
  16. package/lib/audit/scoring.js +2 -8
  17. package/lib/audit/targets.js +6 -1
  18. package/lib/cli/bomAssembly.js +32 -1
  19. package/lib/cli/cliOptions.js +94 -7
  20. package/lib/cli/index.js +268 -49
  21. package/lib/cli/jsBom.js +91 -5
  22. package/lib/cli/jvmBom.js +1515 -1314
  23. package/lib/cli/managedBom.js +249 -28
  24. package/lib/cli/nativeBom.js +986 -10
  25. package/lib/core/activity.js +120 -2
  26. package/lib/core/buildLedger.js +799 -0
  27. package/lib/core/deferredExit.js +141 -0
  28. package/lib/core/env.js +108 -2
  29. package/lib/core/fs.js +60 -0
  30. package/lib/core/logger.js +12 -99
  31. package/lib/core/severity.js +16 -0
  32. package/lib/core/syncFileWriter.js +106 -0
  33. package/lib/core/userAgent.js +151 -0
  34. package/lib/ecosystems/cargoCache.js +364 -0
  35. package/lib/ecosystems/caxa.js +13 -5
  36. package/lib/ecosystems/cppEvidence.js +40 -2
  37. package/lib/ecosystems/ecosystems.js +250 -91
  38. package/lib/ecosystems/golem.js +11 -1
  39. package/lib/ecosystems/gradleutils.js +498 -17
  40. package/lib/ecosystems/kosi.js +1256 -0
  41. package/lib/ecosystems/parsers-crystal.js +179 -0
  42. package/lib/ecosystems/parsers-dotnet.js +69 -39
  43. package/lib/ecosystems/parsers-elm.js +816 -0
  44. package/lib/ecosystems/parsers-gleam.js +1 -1
  45. package/lib/ecosystems/parsers-js.js +26 -0
  46. package/lib/ecosystems/parsers-julia.js +268 -0
  47. package/lib/ecosystems/parsers-jvm.js +9 -0
  48. package/lib/ecosystems/parsers-lua.js +218 -0
  49. package/lib/ecosystems/parsers-misc.js +188 -2
  50. package/lib/ecosystems/parsers-nim.js +221 -0
  51. package/lib/ecosystems/parsers-opam.js +180 -0
  52. package/lib/ecosystems/parsers-perl.js +277 -0
  53. package/lib/ecosystems/parsers-python.js +172 -36
  54. package/lib/ecosystems/parsers-r.js +148 -0
  55. package/lib/ecosystems/parsers-rebar.js +411 -0
  56. package/lib/ecosystems/parsers-rust.js +944 -19
  57. package/lib/ecosystems/parsers-spack.js +204 -0
  58. package/lib/ecosystems/parsers-stack.js +264 -0
  59. package/lib/ecosystems/parsers-terraform.js +194 -0
  60. package/lib/ecosystems/pypiClassifiers.js +326 -0
  61. package/lib/ecosystems/pythonutils.js +49 -1
  62. package/lib/ecosystems/rubyutils.js +13 -0
  63. package/lib/ecosystems/rusi.js +126 -6
  64. package/lib/evinser/evinser.js +141 -13
  65. package/lib/helpers/agenticToolutils.js +925 -0
  66. package/lib/helpers/remote/dependency-track.js +81 -14
  67. package/lib/inventory/agentFormulationParser.js +57 -4
  68. package/lib/inventory/aiCollector.js +504 -10
  69. package/lib/inventory/aiInventory.js +12 -0
  70. package/lib/inventory/analyzer.js +488 -30
  71. package/lib/inventory/astWorker.js +6 -0
  72. package/lib/inventory/auditCategories.js +17 -0
  73. package/lib/inventory/cbomutils.js +30 -0
  74. package/lib/inventory/cdxrs.js +7 -2
  75. package/lib/inventory/communityAiConfigParser.js +215 -2
  76. package/lib/inventory/depsUtils.js +72 -0
  77. package/lib/inventory/dosai.js +508 -22
  78. package/lib/inventory/envcontext.js +215 -24
  79. package/lib/inventory/evidenceUtils.js +13 -0
  80. package/lib/inventory/fetchBatch.js +131 -2
  81. package/lib/inventory/fetchRate.js +74 -11
  82. package/lib/inventory/forgeEnricher.js +3 -2
  83. package/lib/inventory/jvmToolEnv.js +594 -0
  84. package/lib/inventory/mcpConfigParser.js +166 -2
  85. package/lib/inventory/mcpDiscovery.js +11 -0
  86. package/lib/inventory/mcpServerManifest.js +389 -0
  87. package/lib/inventory/mcpbBundle.js +419 -0
  88. package/lib/inventory/osinfo.js +1 -0
  89. package/lib/inventory/plugins.js +3 -0
  90. package/lib/inventory/protobom.js +54 -88
  91. package/lib/inventory/protobomLoader.js +4 -0
  92. package/lib/inventory/rustFormulationParser.js +1 -1
  93. package/lib/inventory/source.js +10 -4
  94. package/lib/inventory/stylePackageRefs.js +41 -0
  95. package/lib/inventory/svelteUtils.js +524 -0
  96. package/lib/inventory/toolRequirements.js +903 -0
  97. package/lib/managers/binary.js +24 -0
  98. package/lib/managers/docker.js +26 -5
  99. package/lib/parsers/huggingfaceUtils.js +15 -7
  100. package/lib/parsers/onnx.js +294 -0
  101. package/lib/parsers/safetensors.js +114 -0
  102. package/lib/server/server.js +1 -1
  103. package/lib/stages/postgen/annotationBuilder.js +97 -0
  104. package/lib/stages/postgen/auditBom.js +76 -79
  105. package/lib/stages/postgen/introspection/annotate.js +320 -0
  106. package/lib/stages/postgen/introspection/commandFacts.js +293 -0
  107. package/lib/stages/postgen/introspection/emit.js +192 -0
  108. package/lib/stages/postgen/introspection/formulationEvidence.js +427 -0
  109. package/lib/stages/postgen/introspection/markers.js +250 -0
  110. package/lib/stages/postgen/introspection/reflect.js +1214 -0
  111. package/lib/stages/postgen/introspection/report.js +1208 -0
  112. package/lib/stages/postgen/introspection/score.js +1067 -0
  113. package/lib/stages/postgen/introspection/shapeCommand.js +304 -0
  114. package/lib/stages/postgen/parentEdge.js +156 -0
  115. package/lib/stages/postgen/postgen.js +284 -3
  116. package/lib/stages/postgen/ruleEngine.js +17 -0
  117. package/lib/stages/pregen/envAudit.js +42 -2
  118. package/lib/stages/pregen/pregen.js +1171 -6
  119. package/lib/third-party/arborist/snapshots/calc-dep-flags.test.cjs +462 -0
  120. package/lib/validator/bomValidator.js +11 -2
  121. package/package.json +26 -26
  122. package/types/lib/audit/index.d.ts.map +1 -1
  123. package/types/lib/audit/scoring.d.ts +2 -8
  124. package/types/lib/audit/scoring.d.ts.map +1 -1
  125. package/types/lib/audit/targets.d.ts.map +1 -1
  126. package/types/lib/cli/bomAssembly.d.ts.map +1 -1
  127. package/types/lib/cli/cliOptions.d.ts +2 -1
  128. package/types/lib/cli/cliOptions.d.ts.map +1 -1
  129. package/types/lib/cli/index.d.ts +10 -2
  130. package/types/lib/cli/index.d.ts.map +1 -1
  131. package/types/lib/cli/jsBom.d.ts +23 -0
  132. package/types/lib/cli/jsBom.d.ts.map +1 -1
  133. package/types/lib/cli/jvmBom.d.ts.map +1 -1
  134. package/types/lib/cli/managedBom.d.ts +33 -0
  135. package/types/lib/cli/managedBom.d.ts.map +1 -1
  136. package/types/lib/cli/nativeBom.d.ts +88 -8
  137. package/types/lib/cli/nativeBom.d.ts.map +1 -1
  138. package/types/lib/core/activity.d.ts.map +1 -1
  139. package/types/lib/core/buildLedger.d.ts +272 -0
  140. package/types/lib/core/buildLedger.d.ts.map +1 -0
  141. package/types/lib/core/deferredExit.d.ts +84 -0
  142. package/types/lib/core/deferredExit.d.ts.map +1 -0
  143. package/types/lib/core/env.d.ts +43 -1
  144. package/types/lib/core/env.d.ts.map +1 -1
  145. package/types/lib/core/fs.d.ts +21 -0
  146. package/types/lib/core/fs.d.ts.map +1 -1
  147. package/types/lib/core/logger.d.ts +2 -11
  148. package/types/lib/core/logger.d.ts.map +1 -1
  149. package/types/lib/core/severity.d.ts +11 -0
  150. package/types/lib/core/severity.d.ts.map +1 -0
  151. package/types/lib/core/syncFileWriter.d.ts +33 -0
  152. package/types/lib/core/syncFileWriter.d.ts.map +1 -0
  153. package/types/lib/core/userAgent.d.ts +56 -0
  154. package/types/lib/core/userAgent.d.ts.map +1 -0
  155. package/types/lib/ecosystems/cargoCache.d.ts +75 -0
  156. package/types/lib/ecosystems/cargoCache.d.ts.map +1 -0
  157. package/types/lib/ecosystems/caxa.d.ts.map +1 -1
  158. package/types/lib/ecosystems/cppEvidence.d.ts +1 -1
  159. package/types/lib/ecosystems/cppEvidence.d.ts.map +1 -1
  160. package/types/lib/ecosystems/ecosystems.d.ts +15 -1
  161. package/types/lib/ecosystems/ecosystems.d.ts.map +1 -1
  162. package/types/lib/ecosystems/gradleutils.d.ts +53 -0
  163. package/types/lib/ecosystems/gradleutils.d.ts.map +1 -1
  164. package/types/lib/ecosystems/kosi.d.ts +73 -0
  165. package/types/lib/ecosystems/kosi.d.ts.map +1 -0
  166. package/types/lib/ecosystems/parsers-crystal.d.ts +27 -0
  167. package/types/lib/ecosystems/parsers-crystal.d.ts.map +1 -0
  168. package/types/lib/ecosystems/parsers-dotnet.d.ts +19 -0
  169. package/types/lib/ecosystems/parsers-dotnet.d.ts.map +1 -1
  170. package/types/lib/ecosystems/parsers-elm.d.ts +79 -0
  171. package/types/lib/ecosystems/parsers-elm.d.ts.map +1 -0
  172. package/types/lib/ecosystems/parsers-js.d.ts.map +1 -1
  173. package/types/lib/ecosystems/parsers-julia.d.ts +57 -0
  174. package/types/lib/ecosystems/parsers-julia.d.ts.map +1 -0
  175. package/types/lib/ecosystems/parsers-jvm.d.ts.map +1 -1
  176. package/types/lib/ecosystems/parsers-lua.d.ts +50 -0
  177. package/types/lib/ecosystems/parsers-lua.d.ts.map +1 -0
  178. package/types/lib/ecosystems/parsers-misc.d.ts +23 -0
  179. package/types/lib/ecosystems/parsers-misc.d.ts.map +1 -1
  180. package/types/lib/ecosystems/parsers-nim.d.ts +43 -0
  181. package/types/lib/ecosystems/parsers-nim.d.ts.map +1 -0
  182. package/types/lib/ecosystems/parsers-opam.d.ts +31 -0
  183. package/types/lib/ecosystems/parsers-opam.d.ts.map +1 -0
  184. package/types/lib/ecosystems/parsers-perl.d.ts +36 -0
  185. package/types/lib/ecosystems/parsers-perl.d.ts.map +1 -0
  186. package/types/lib/ecosystems/parsers-python.d.ts.map +1 -1
  187. package/types/lib/ecosystems/parsers-r.d.ts +35 -0
  188. package/types/lib/ecosystems/parsers-r.d.ts.map +1 -0
  189. package/types/lib/ecosystems/parsers-rebar.d.ts +42 -0
  190. package/types/lib/ecosystems/parsers-rebar.d.ts.map +1 -0
  191. package/types/lib/ecosystems/parsers-rust.d.ts +199 -0
  192. package/types/lib/ecosystems/parsers-rust.d.ts.map +1 -1
  193. package/types/lib/ecosystems/parsers-spack.d.ts +33 -0
  194. package/types/lib/ecosystems/parsers-spack.d.ts.map +1 -0
  195. package/types/lib/ecosystems/parsers-stack.d.ts +35 -0
  196. package/types/lib/ecosystems/parsers-stack.d.ts.map +1 -0
  197. package/types/lib/ecosystems/parsers-terraform.d.ts +34 -0
  198. package/types/lib/ecosystems/parsers-terraform.d.ts.map +1 -0
  199. package/types/lib/ecosystems/pypiClassifiers.d.ts +80 -0
  200. package/types/lib/ecosystems/pypiClassifiers.d.ts.map +1 -0
  201. package/types/lib/ecosystems/pythonutils.d.ts +21 -1
  202. package/types/lib/ecosystems/pythonutils.d.ts.map +1 -1
  203. package/types/lib/ecosystems/rubyutils.d.ts.map +1 -1
  204. package/types/lib/ecosystems/rusi.d.ts.map +1 -1
  205. package/types/lib/evinser/evinser.d.ts +34 -1
  206. package/types/lib/evinser/evinser.d.ts.map +1 -1
  207. package/types/lib/helpers/agenticToolutils.d.ts +87 -0
  208. package/types/lib/helpers/agenticToolutils.d.ts.map +1 -0
  209. package/types/lib/helpers/remote/dependency-track.d.ts +45 -4
  210. package/types/lib/helpers/remote/dependency-track.d.ts.map +1 -1
  211. package/types/lib/inventory/agentFormulationParser.d.ts.map +1 -1
  212. package/types/lib/inventory/aiCollector.d.ts.map +1 -1
  213. package/types/lib/inventory/aiInventory.d.ts.map +1 -1
  214. package/types/lib/inventory/analyzer.d.ts.map +1 -1
  215. package/types/lib/inventory/auditCategories.d.ts +12 -0
  216. package/types/lib/inventory/auditCategories.d.ts.map +1 -1
  217. package/types/lib/inventory/cbomutils.d.ts.map +1 -1
  218. package/types/lib/inventory/communityAiConfigParser.d.ts.map +1 -1
  219. package/types/lib/inventory/depsUtils.d.ts.map +1 -1
  220. package/types/lib/inventory/dosai.d.ts +43 -0
  221. package/types/lib/inventory/dosai.d.ts.map +1 -1
  222. package/types/lib/inventory/envcontext.d.ts.map +1 -1
  223. package/types/lib/inventory/evidenceUtils.d.ts.map +1 -1
  224. package/types/lib/inventory/fetchBatch.d.ts +43 -0
  225. package/types/lib/inventory/fetchBatch.d.ts.map +1 -1
  226. package/types/lib/inventory/fetchRate.d.ts +9 -6
  227. package/types/lib/inventory/fetchRate.d.ts.map +1 -1
  228. package/types/lib/inventory/forgeEnricher.d.ts.map +1 -1
  229. package/types/lib/inventory/jvmToolEnv.d.ts +190 -0
  230. package/types/lib/inventory/jvmToolEnv.d.ts.map +1 -0
  231. package/types/lib/inventory/mcpConfigParser.d.ts.map +1 -1
  232. package/types/lib/inventory/mcpDiscovery.d.ts.map +1 -1
  233. package/types/lib/inventory/mcpServerManifest.d.ts +19 -0
  234. package/types/lib/inventory/mcpServerManifest.d.ts.map +1 -0
  235. package/types/lib/inventory/mcpbBundle.d.ts +19 -0
  236. package/types/lib/inventory/mcpbBundle.d.ts.map +1 -0
  237. package/types/lib/inventory/osinfo.d.ts.map +1 -1
  238. package/types/lib/inventory/plugins.d.ts.map +1 -1
  239. package/types/lib/inventory/protobom.d.ts +18 -13
  240. package/types/lib/inventory/protobom.d.ts.map +1 -1
  241. package/types/lib/inventory/protobomLoader.d.ts.map +1 -1
  242. package/types/lib/inventory/source.d.ts.map +1 -1
  243. package/types/lib/inventory/stylePackageRefs.d.ts +17 -0
  244. package/types/lib/inventory/stylePackageRefs.d.ts.map +1 -0
  245. package/types/lib/inventory/svelteUtils.d.ts +124 -0
  246. package/types/lib/inventory/svelteUtils.d.ts.map +1 -0
  247. package/types/lib/inventory/toolRequirements.d.ts +216 -0
  248. package/types/lib/inventory/toolRequirements.d.ts.map +1 -0
  249. package/types/lib/managers/binary.d.ts.map +1 -1
  250. package/types/lib/managers/docker.d.ts.map +1 -1
  251. package/types/lib/parsers/huggingfaceUtils.d.ts +8 -1
  252. package/types/lib/parsers/huggingfaceUtils.d.ts.map +1 -1
  253. package/types/lib/parsers/onnx.d.ts +28 -0
  254. package/types/lib/parsers/onnx.d.ts.map +1 -0
  255. package/types/lib/parsers/safetensors.d.ts +22 -0
  256. package/types/lib/parsers/safetensors.d.ts.map +1 -0
  257. package/types/lib/stages/postgen/annotationBuilder.d.ts +53 -0
  258. package/types/lib/stages/postgen/annotationBuilder.d.ts.map +1 -0
  259. package/types/lib/stages/postgen/auditBom.d.ts.map +1 -1
  260. package/types/lib/stages/postgen/introspection/annotate.d.ts +81 -0
  261. package/types/lib/stages/postgen/introspection/annotate.d.ts.map +1 -0
  262. package/types/lib/stages/postgen/introspection/commandFacts.d.ts +32 -0
  263. package/types/lib/stages/postgen/introspection/commandFacts.d.ts.map +1 -0
  264. package/types/lib/stages/postgen/introspection/emit.d.ts +71 -0
  265. package/types/lib/stages/postgen/introspection/emit.d.ts.map +1 -0
  266. package/types/lib/stages/postgen/introspection/formulationEvidence.d.ts +154 -0
  267. package/types/lib/stages/postgen/introspection/formulationEvidence.d.ts.map +1 -0
  268. package/types/lib/stages/postgen/introspection/markers.d.ts +58 -0
  269. package/types/lib/stages/postgen/introspection/markers.d.ts.map +1 -0
  270. package/types/lib/stages/postgen/introspection/reflect.d.ts +77 -0
  271. package/types/lib/stages/postgen/introspection/reflect.d.ts.map +1 -0
  272. package/types/lib/stages/postgen/introspection/report.d.ts +85 -0
  273. package/types/lib/stages/postgen/introspection/report.d.ts.map +1 -0
  274. package/types/lib/stages/postgen/introspection/score.d.ts +149 -0
  275. package/types/lib/stages/postgen/introspection/score.d.ts.map +1 -0
  276. package/types/lib/stages/postgen/introspection/shapeCommand.d.ts +79 -0
  277. package/types/lib/stages/postgen/introspection/shapeCommand.d.ts.map +1 -0
  278. package/types/lib/stages/postgen/parentEdge.d.ts +35 -0
  279. package/types/lib/stages/postgen/parentEdge.d.ts.map +1 -0
  280. package/types/lib/stages/postgen/postgen.d.ts +35 -2
  281. package/types/lib/stages/postgen/postgen.d.ts.map +1 -1
  282. package/types/lib/stages/postgen/ruleEngine.d.ts.map +1 -1
  283. package/types/lib/stages/pregen/envAudit.d.ts.map +1 -1
  284. package/types/lib/stages/pregen/pregen.d.ts +131 -0
  285. package/types/lib/stages/pregen/pregen.d.ts.map +1 -1
  286. package/types/lib/validator/bomValidator.d.ts.map +1 -1
@@ -0,0 +1,462 @@
1
+ /* IMPORTANT
2
+ * This snapshot file is auto-generated, but designed for humans.
3
+ * It should be checked into source control and tracked carefully.
4
+ * Re-generate by setting TAP_SNAPSHOT=1 and running tests.
5
+ * Make sure to inspect the output below. Do not ignore changes!
6
+ */
7
+ 'use strict'
8
+ exports[`test/calc-dep-flags.js TAP flag stuff > after 1`] = `
9
+ ArboristNode {
10
+ "children": Map {
11
+ "dev" => ArboristNode {
12
+ "dev": true,
13
+ "edgesIn": Set {
14
+ EdgeIn {
15
+ "from": "",
16
+ "name": "dev",
17
+ "spec": "*",
18
+ "type": "dev",
19
+ },
20
+ },
21
+ "edgesOut": Map {
22
+ "devdep" => EdgeOut {
23
+ "name": "devdep",
24
+ "spec": "*",
25
+ "to": "node_modules/devdep",
26
+ "type": "prod",
27
+ },
28
+ },
29
+ "location": "node_modules/dev",
30
+ "name": "dev",
31
+ "path": "/x/node_modules/dev",
32
+ "version": "1.2.3",
33
+ },
34
+ "devandoptional" => ArboristNode {
35
+ "dev": true,
36
+ "edgesIn": Set {
37
+ EdgeIn {
38
+ "from": "node_modules/devdep",
39
+ "name": "devandoptional",
40
+ "spec": "*",
41
+ "type": "optional",
42
+ },
43
+ },
44
+ "location": "node_modules/devandoptional",
45
+ "name": "devandoptional",
46
+ "optional": true,
47
+ "path": "/x/node_modules/devandoptional",
48
+ "version": "1.2.3",
49
+ },
50
+ "devdep" => ArboristNode {
51
+ "children": Map {
52
+ "linky" => ArboristLink {
53
+ "dev": true,
54
+ "edgesIn": Set {
55
+ EdgeIn {
56
+ "from": "node_modules/devdep",
57
+ "name": "linky",
58
+ "spec": "*",
59
+ "type": "prod",
60
+ },
61
+ },
62
+ "location": "node_modules/devdep/node_modules/linky",
63
+ "name": "linky",
64
+ "path": "/x/node_modules/devdep/node_modules/linky",
65
+ "realpath": "/x/y/z",
66
+ "resolved": "file:../../../y/z",
67
+ "target": ArboristNode {
68
+ "location": "y/z",
69
+ },
70
+ "version": "1.2.3",
71
+ },
72
+ },
73
+ "dev": true,
74
+ "edgesIn": Set {
75
+ EdgeIn {
76
+ "from": "node_modules/dev",
77
+ "name": "devdep",
78
+ "spec": "*",
79
+ "type": "prod",
80
+ },
81
+ },
82
+ "edgesOut": Map {
83
+ "devandoptional" => EdgeOut {
84
+ "name": "devandoptional",
85
+ "spec": "*",
86
+ "to": "node_modules/devandoptional",
87
+ "type": "optional",
88
+ },
89
+ "devoptional" => EdgeOut {
90
+ "name": "devoptional",
91
+ "spec": "*",
92
+ "to": "node_modules/devoptional",
93
+ "type": "prod",
94
+ },
95
+ "linky" => EdgeOut {
96
+ "name": "linky",
97
+ "spec": "*",
98
+ "to": "node_modules/devdep/node_modules/linky",
99
+ "type": "prod",
100
+ },
101
+ "proddep" => EdgeOut {
102
+ "name": "proddep",
103
+ "spec": "*",
104
+ "to": "node_modules/proddep",
105
+ "type": "prod",
106
+ },
107
+ },
108
+ "location": "node_modules/devdep",
109
+ "name": "devdep",
110
+ "path": "/x/node_modules/devdep",
111
+ "version": "1.2.3",
112
+ },
113
+ "devoptional" => ArboristNode {
114
+ "devOptional": true,
115
+ "edgesIn": Set {
116
+ EdgeIn {
117
+ "from": "node_modules/devdep",
118
+ "name": "devoptional",
119
+ "spec": "*",
120
+ "type": "prod",
121
+ },
122
+ EdgeIn {
123
+ "from": "node_modules/optional",
124
+ "name": "devoptional",
125
+ "spec": "*",
126
+ "type": "prod",
127
+ },
128
+ },
129
+ "location": "node_modules/devoptional",
130
+ "name": "devoptional",
131
+ "path": "/x/node_modules/devoptional",
132
+ "version": "1.2.3",
133
+ },
134
+ "extraneous" => ArboristNode {
135
+ "dev": true,
136
+ "extraneous": true,
137
+ "location": "node_modules/extraneous",
138
+ "name": "extraneous",
139
+ "optional": true,
140
+ "path": "/x/node_modules/extraneous",
141
+ "peer": true,
142
+ },
143
+ "metapeer" => ArboristNode {
144
+ "edgesIn": Set {
145
+ EdgeIn {
146
+ "from": "node_modules/prod",
147
+ "name": "metapeer",
148
+ "spec": "*",
149
+ "type": "peer",
150
+ },
151
+ },
152
+ "edgesOut": Map {
153
+ "metapeerdep" => EdgeOut {
154
+ "name": "metapeerdep",
155
+ "spec": "*",
156
+ "to": "node_modules/metapeerdep",
157
+ "type": "prod",
158
+ },
159
+ },
160
+ "location": "node_modules/metapeer",
161
+ "name": "metapeer",
162
+ "path": "/x/node_modules/metapeer",
163
+ "peer": true,
164
+ "version": "1.2.3",
165
+ },
166
+ "metapeerdep" => ArboristNode {
167
+ "edgesIn": Set {
168
+ EdgeIn {
169
+ "from": "node_modules/metapeer",
170
+ "name": "metapeerdep",
171
+ "spec": "*",
172
+ "type": "prod",
173
+ },
174
+ },
175
+ "location": "node_modules/metapeerdep",
176
+ "name": "metapeerdep",
177
+ "path": "/x/node_modules/metapeerdep",
178
+ "peer": true,
179
+ "version": "1.2.3",
180
+ },
181
+ "optional" => ArboristNode {
182
+ "edgesIn": Set {
183
+ EdgeIn {
184
+ "from": "",
185
+ "name": "optional",
186
+ "spec": "*",
187
+ "type": "optional",
188
+ },
189
+ EdgeIn {
190
+ "from": "node_modules/peeroptional",
191
+ "name": "optional",
192
+ "spec": "*",
193
+ "type": "prod",
194
+ },
195
+ },
196
+ "edgesOut": Map {
197
+ "devoptional" => EdgeOut {
198
+ "name": "devoptional",
199
+ "spec": "*",
200
+ "to": "node_modules/devoptional",
201
+ "type": "prod",
202
+ },
203
+ "missing" => EdgeOut {
204
+ "error": "MISSING",
205
+ "name": "missing",
206
+ "spec": "*",
207
+ "to": null,
208
+ "type": "prod",
209
+ },
210
+ },
211
+ "location": "node_modules/optional",
212
+ "name": "optional",
213
+ "optional": true,
214
+ "path": "/x/node_modules/optional",
215
+ "version": "1.2.3",
216
+ },
217
+ "peer" => ArboristNode {
218
+ "edgesIn": Set {
219
+ EdgeIn {
220
+ "from": "",
221
+ "name": "peer",
222
+ "spec": "*",
223
+ "type": "peer",
224
+ },
225
+ },
226
+ "edgesOut": Map {
227
+ "peerdep" => EdgeOut {
228
+ "name": "peerdep",
229
+ "spec": "*",
230
+ "to": "node_modules/peerdep",
231
+ "type": "prod",
232
+ },
233
+ },
234
+ "location": "node_modules/peer",
235
+ "name": "peer",
236
+ "path": "/x/node_modules/peer",
237
+ "peer": true,
238
+ "version": "1.2.3",
239
+ },
240
+ "peerdep" => ArboristNode {
241
+ "edgesIn": Set {
242
+ EdgeIn {
243
+ "from": "node_modules/peer",
244
+ "name": "peerdep",
245
+ "spec": "*",
246
+ "type": "prod",
247
+ },
248
+ },
249
+ "location": "node_modules/peerdep",
250
+ "name": "peerdep",
251
+ "path": "/x/node_modules/peerdep",
252
+ "peer": true,
253
+ "version": "1.2.3",
254
+ },
255
+ "peeroptional" => ArboristNode {
256
+ "edgesIn": Set {
257
+ EdgeIn {
258
+ "from": "",
259
+ "name": "peeroptional",
260
+ "spec": "*",
261
+ "type": "peerOptional",
262
+ },
263
+ },
264
+ "edgesOut": Map {
265
+ "optional" => EdgeOut {
266
+ "name": "optional",
267
+ "spec": "*",
268
+ "to": "node_modules/optional",
269
+ "type": "prod",
270
+ },
271
+ },
272
+ "extraneous": true,
273
+ "location": "node_modules/peeroptional",
274
+ "name": "peeroptional",
275
+ "optional": true,
276
+ "path": "/x/node_modules/peeroptional",
277
+ "peer": true,
278
+ "version": "1.2.3",
279
+ },
280
+ "prod" => ArboristNode {
281
+ "edgesIn": Set {
282
+ EdgeIn {
283
+ "from": "",
284
+ "name": "prod",
285
+ "spec": "*",
286
+ "type": "prod",
287
+ },
288
+ },
289
+ "edgesOut": Map {
290
+ "metapeer" => EdgeOut {
291
+ "name": "metapeer",
292
+ "spec": "*",
293
+ "to": "node_modules/metapeer",
294
+ "type": "peer",
295
+ },
296
+ "proddep" => EdgeOut {
297
+ "name": "proddep",
298
+ "spec": "*",
299
+ "to": "node_modules/proddep",
300
+ "type": "prod",
301
+ },
302
+ },
303
+ "location": "node_modules/prod",
304
+ "name": "prod",
305
+ "path": "/x/node_modules/prod",
306
+ "version": "1.2.3",
307
+ },
308
+ "proddep" => ArboristNode {
309
+ "edgesIn": Set {
310
+ EdgeIn {
311
+ "from": "node_modules/devdep",
312
+ "name": "proddep",
313
+ "spec": "*",
314
+ "type": "prod",
315
+ },
316
+ EdgeIn {
317
+ "from": "node_modules/prod",
318
+ "name": "proddep",
319
+ "spec": "*",
320
+ "type": "prod",
321
+ },
322
+ EdgeIn {
323
+ "from": "node_modules/proddep",
324
+ "name": "proddep",
325
+ "spec": "*",
326
+ "type": "prod",
327
+ },
328
+ },
329
+ "edgesOut": Map {
330
+ "proddep" => EdgeOut {
331
+ "name": "proddep",
332
+ "spec": "*",
333
+ "to": "node_modules/proddep",
334
+ "type": "prod",
335
+ },
336
+ },
337
+ "location": "node_modules/proddep",
338
+ "name": "proddep",
339
+ "path": "/x/node_modules/proddep",
340
+ "version": "1.2.3",
341
+ },
342
+ },
343
+ "edgesOut": Map {
344
+ "dev" => EdgeOut {
345
+ "name": "dev",
346
+ "spec": "*",
347
+ "to": "node_modules/dev",
348
+ "type": "dev",
349
+ },
350
+ "optional" => EdgeOut {
351
+ "name": "optional",
352
+ "spec": "*",
353
+ "to": "node_modules/optional",
354
+ "type": "optional",
355
+ },
356
+ "peer" => EdgeOut {
357
+ "name": "peer",
358
+ "spec": "*",
359
+ "to": "node_modules/peer",
360
+ "type": "peer",
361
+ },
362
+ "peeroptional" => EdgeOut {
363
+ "name": "peeroptional",
364
+ "spec": "*",
365
+ "to": "node_modules/peeroptional",
366
+ "type": "peerOptional",
367
+ },
368
+ "prod" => EdgeOut {
369
+ "name": "prod",
370
+ "spec": "*",
371
+ "to": "node_modules/prod",
372
+ "type": "prod",
373
+ },
374
+ },
375
+ "fsChildren": Set {
376
+ ArboristNode {
377
+ "children": Map {
378
+ "linklink" => ArboristLink {
379
+ "dev": true,
380
+ "edgesIn": Set {
381
+ EdgeIn {
382
+ "from": "y/z",
383
+ "name": "linklink",
384
+ "spec": "*",
385
+ "type": "prod",
386
+ },
387
+ },
388
+ "location": "y/z/node_modules/linklink",
389
+ "name": "linklink",
390
+ "path": "/x/y/z/node_modules/linklink",
391
+ "realpath": "/l/i/n/k/link",
392
+ "resolved": "file:../../../../l/i/n/k/link",
393
+ "target": ArboristNode {
394
+ "dev": true,
395
+ "location": "../l/i/n/k/link",
396
+ "name": "link",
397
+ "packageName": "linklink",
398
+ "path": "/l/i/n/k/link",
399
+ "version": "1.2.3",
400
+ },
401
+ "version": "1.2.3",
402
+ },
403
+ },
404
+ "dev": true,
405
+ "edgesOut": Map {
406
+ "linklink" => EdgeOut {
407
+ "name": "linklink",
408
+ "spec": "*",
409
+ "to": "y/z/node_modules/linklink",
410
+ "type": "prod",
411
+ },
412
+ },
413
+ "location": "y/z",
414
+ "name": "z",
415
+ "packageName": "linky",
416
+ "path": "/x/y/z",
417
+ "version": "1.2.3",
418
+ },
419
+ },
420
+ "isProjectRoot": true,
421
+ "location": "",
422
+ "name": "x",
423
+ "path": "/x",
424
+ }
425
+ `
426
+
427
+ exports[`test/calc-dep-flags.js TAP no reset > after 1`] = `
428
+ ArboristNode {
429
+ "children": Map {
430
+ "foo" => ArboristNode {
431
+ "dev": true,
432
+ "edgesIn": Set {
433
+ EdgeIn {
434
+ "from": "",
435
+ "name": "foo",
436
+ "spec": "*",
437
+ "type": "prod",
438
+ },
439
+ },
440
+ "location": "node_modules/foo",
441
+ "name": "foo",
442
+ "path": "/some/path/node_modules/foo",
443
+ "peer": true,
444
+ "version": "1.2.3",
445
+ },
446
+ },
447
+ "dev": true,
448
+ "edgesOut": Map {
449
+ "foo" => EdgeOut {
450
+ "name": "foo",
451
+ "spec": "*",
452
+ "to": "node_modules/foo",
453
+ "type": "prod",
454
+ },
455
+ },
456
+ "isProjectRoot": true,
457
+ "location": "",
458
+ "name": "path",
459
+ "path": "/some/path",
460
+ "peer": true,
461
+ }
462
+ `
@@ -694,9 +694,18 @@ export const validatePurls = (bomJson) => {
694
694
  errorList.push(`Invalid purl ${purl} at ${where}`);
695
695
  }
696
696
  }
697
- if (frameworksCount > 20) {
697
+ // A flat cap of 20 was a proxy for "the framework heuristic has over-fired", but it
698
+ // scales with the size of the dependency tree rather than with any defect: a modern
699
+ // Python or JavaScript application legitimately depends on dozens of components that
700
+ // `data/frameworks-list.json` and the PyPI `Framework ::` classifiers correctly
701
+ // identify as frameworks. Comparing against a share of the tree keeps the check
702
+ // meaningful for small BOMs, where a high framework count really is suspicious, and
703
+ // stops it firing on large ones purely for being large.
704
+ const componentsCount = bomJson?.components?.length || 0;
705
+ const frameworksLimit = Math.max(20, Math.ceil(componentsCount * 0.25));
706
+ if (frameworksCount > frameworksLimit) {
698
707
  warningsList.push(
699
- `BOM likey has too many framework components. Count: ${frameworksCount}`,
708
+ `BOM likely has too many framework components. Count: ${frameworksCount} of ${componentsCount} components.`,
700
709
  );
701
710
  }
702
711
  if (DEBUG_MODE && warningsList.length !== 0) {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@cdxgen/cdxgen",
3
- "version": "13.0.1",
3
+ "version": "13.2.0",
4
4
  "description": "Creates CycloneDX Software Bill of Materials (SBOM) from source or container image",
5
5
  "keywords": [
6
6
  "sbom",
@@ -123,10 +123,9 @@
123
123
  "index.cjs"
124
124
  ],
125
125
  "dependencies": {
126
- "@babel/parser": "8.0.4",
127
- "@babel/traverse": "8.0.4",
126
+ "@babel/parser": "8.0.5",
127
+ "@babel/traverse": "8.0.5",
128
128
  "@cdxgen/cdx-purl": "0.0.5",
129
- "@iarna/toml": "2.2.5",
130
129
  "@isaacs/string-locale-compare": "1.1.0",
131
130
  "@npmcli/fs": "6.0.0",
132
131
  "@npmcli/map-workspaces": "6.0.0",
@@ -141,16 +140,17 @@
141
140
  "npm-package-arg": "14.0.0",
142
141
  "parse-conflict-json": "6.0.0",
143
142
  "semver": "7.8.5",
143
+ "smol-toml": "^1.8.0",
144
144
  "ssri": "14.0.0",
145
145
  "tar": "7.5.22",
146
146
  "treeverse": "3.0.0",
147
- "undici": "8.10.0",
147
+ "undici": "8.10.2",
148
148
  "walk-up-path": "4.0.0",
149
- "yaml": "2.9.0",
149
+ "yaml": "2.9.1",
150
150
  "yargs": "18.1.0"
151
151
  },
152
152
  "devDependencies": {
153
- "@biomejs/biome": "2.5.7",
153
+ "@biomejs/biome": "2.5.14",
154
154
  "esmock": "2.7.6",
155
155
  "poku": "4.5.0",
156
156
  "sinon": "22.1.0",
@@ -158,30 +158,30 @@
158
158
  },
159
159
  "optionalDependencies": {
160
160
  "@appthreat/atom": "3.1.1",
161
- "@appthreat/atom-parsetools": "1.3.0",
162
- "@bufbuild/protobuf": "2.13.0",
161
+ "@appthreat/atom-parsetools": "1.7.0",
162
+ "@bufbuild/protobuf": "2.15.0",
163
163
  "@cdxgen/cdx-hbom": "0.5.1",
164
- "@cdxgen/cdx-proto": "2.2.0",
165
- "@cdxgen/cdxgen-plugins-bin": "3.0.4",
166
- "@cdxgen/cdxgen-plugins-bin-darwin-amd64": "3.0.4",
167
- "@cdxgen/cdxgen-plugins-bin-darwin-arm64": "3.0.4",
168
- "@cdxgen/cdxgen-plugins-bin-linux-amd64": "3.0.4",
169
- "@cdxgen/cdxgen-plugins-bin-linux-arm": "3.0.4",
170
- "@cdxgen/cdxgen-plugins-bin-linux-arm64": "3.0.4",
171
- "@cdxgen/cdxgen-plugins-bin-linux-ppc64": "3.0.4",
172
- "@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64": "3.0.4",
173
- "@cdxgen/cdxgen-plugins-bin-linuxmusl-arm64": "3.0.4",
174
- "@cdxgen/cdxgen-plugins-bin-windows-amd64": "3.0.4",
175
- "@cdxgen/cdxgen-plugins-bin-windows-arm64": "3.0.4",
176
- "@cdxgen/safer-exec": "0.15.0",
164
+ "@cdxgen/cdx-proto": "2.3.0",
165
+ "@cdxgen/cdxgen-plugins-bin": "4.0.0",
166
+ "@cdxgen/cdxgen-plugins-bin-darwin-amd64": "4.0.0",
167
+ "@cdxgen/cdxgen-plugins-bin-darwin-arm64": "4.0.0",
168
+ "@cdxgen/cdxgen-plugins-bin-linux-amd64": "4.0.0",
169
+ "@cdxgen/cdxgen-plugins-bin-linux-arm": "4.0.0",
170
+ "@cdxgen/cdxgen-plugins-bin-linux-arm64": "4.0.0",
171
+ "@cdxgen/cdxgen-plugins-bin-linux-ppc64": "4.0.0",
172
+ "@cdxgen/cdxgen-plugins-bin-linuxmusl-amd64": "4.0.0",
173
+ "@cdxgen/cdxgen-plugins-bin-linuxmusl-arm64": "4.0.0",
174
+ "@cdxgen/cdxgen-plugins-bin-windows-amd64": "4.0.0",
175
+ "@cdxgen/cdxgen-plugins-bin-windows-arm64": "4.0.0",
176
+ "@cdxgen/safer-exec": "0.16.0",
177
177
  "body-parser": "2.3.0",
178
- "compression": "1.8.1",
178
+ "compression": "1.8.2",
179
179
  "connect": "3.7.0",
180
180
  "jsonata": "2.2.2"
181
181
  },
182
182
  "engines": {
183
183
  "node": ">=24",
184
- "pnpm": ">=11"
184
+ "pnpm": ">=12"
185
185
  },
186
186
  "devEngines": {
187
187
  "runtime": [
@@ -192,12 +192,12 @@
192
192
  },
193
193
  {
194
194
  "name": "bun",
195
- "version": "1.3.14",
195
+ "version": "1.4.2",
196
196
  "onFail": "ignore"
197
197
  },
198
198
  {
199
199
  "name": "deno",
200
- "version": "2.8.3",
200
+ "version": "2.9.6",
201
201
  "onFail": "ignore"
202
202
  }
203
203
  ]
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/audit/index.js"],"names":[],"mappings":"AAqEA,yFAAyF;AACzF,eAAO,MAAM,wBAAwB,UAKpC,CAAC;AAuCF;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAHxB,MAGwB,GAFtB,MAAM,CAclB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAHxB,MAGwB,GAFtB,MAAM,EAAE,CAoBpB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAH1B,MAG0B,GAFxB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,CA0BjD;AA+CD;;;;;;;;;GASG;AACH,wBAAsB,yBAAyB,CAAC,SAAS,EAJ9C;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAIW,EAAE,OAAO,AAH/D,CACA,EADQ,MAG4D,GAF1D,OAAO,CAAC,MAAM,CAAC,CAmE3B;AA4bD;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAHtC,MAGsC,GAFpC,MAAM,EAAE,CAqdpB;AA0JD;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EAJ1C,MAI0C,EAAE,MAAM,EAHlD,MAGkD,GAFhD;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA0CnD;AAoCD;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EAL1C,MAK0C,EAAE,MAAM,EAJlD,MAIkD,EAAE,UAAU,EAH9D,MAG8D,GAF5D;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CASnD;AAmGD;;;;;;;;;GASG;AACH,wBAAgB,kCAAkC,CAAC,OAAO,EAJ/C,MAI+C,EAAE,MAAM,EAHvD,MAGuD,GAFrD,MAAM,EAAE,CAkEpB;AAgKD;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAJ7B,MAI6B,EAAE,OAAO,EAHtC,MAGsC,GAFpC,OAAO,CAAC,MAAM,CAAC,CAwQ3B;AAoVD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAH9B,MAAM,EAGwB,GAF5B,MAAM,EAAE,CAgDpB;AAoBD;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,SAAS,EAJrC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAIE,EAAE,OAAO,EAH9C,MAG8C,GAF5C,OAAO,CAAC,MAAM,CAAC,CAiJ3B;AAED;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAH3B,MAG2B,GAFzB,OAAO,CAAC,MAAM,CAAC,CA0B3B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EALnC,MAKmC,EAAE,SAAS,EAJ9C,MAAM,EAIwC,EAAE,MAAM,EAHtD,MAAM,GAAC,IAG+C,GAFpD,IAAI,CAwChB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAJ/B,MAI+B,EAAE,OAAO,EAHxC,MAGwC,GAFtC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAwChD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAH9B,MAG8B,GAF5B,MAAM,GAAG,SAAS,CAU9B"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/audit/index.js"],"names":[],"mappings":"AA6EA,yFAAyF;AACzF,eAAO,MAAM,wBAAwB,UAKpC,CAAC;AAuCF;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAHxB,MAGwB,GAFtB,MAAM,CAclB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAHxB,MAGwB,GAFtB,MAAM,EAAE,CAoBpB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAH1B,MAG0B,GAFxB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,CA0BjD;AA+CD;;;;;;;;;GASG;AACH,wBAAsB,yBAAyB,CAAC,SAAS,EAJ9C;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAIW,EAAE,OAAO,AAH/D,CACA,EADQ,MAG4D,GAF1D,OAAO,CAAC,MAAM,CAAC,CAuG3B;AA4bD;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAHtC,MAGsC,GAFpC,MAAM,EAAE,CAqdpB;AA0JD;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EAJ1C,MAI0C,EAAE,MAAM,EAHlD,MAGkD,GAFhD;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA0CnD;AAoCD;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EAL1C,MAK0C,EAAE,MAAM,EAJlD,MAIkD,EAAE,UAAU,EAH9D,MAG8D,GAF5D;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CASnD;AAmGD;;;;;;;;;GASG;AACH,wBAAgB,kCAAkC,CAAC,OAAO,EAJ/C,MAI+C,EAAE,MAAM,EAHvD,MAGuD,GAFrD,MAAM,EAAE,CAkEpB;AAgKD;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAJ7B,MAI6B,EAAE,OAAO,EAHtC,MAGsC,GAFpC,OAAO,CAAC,MAAM,CAAC,CAwQ3B;AAoVD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAH9B,MAAM,EAGwB,GAF5B,MAAM,EAAE,CAgDpB;AAoBD;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,SAAS,EAJrC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAIE,EAAE,OAAO,EAH9C,MAG8C,GAF5C,OAAO,CAAC,MAAM,CAAC,CAiJ3B;AAED;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAH3B,MAG2B,GAFzB,OAAO,CAAC,MAAM,CAAC,CA0B3B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EALnC,MAKmC,EAAE,SAAS,EAJ9C,MAAM,EAIwC,EAAE,MAAM,EAHtD,MAAM,GAAC,IAG+C,GAFpD,IAAI,CAwChB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAJ/B,MAI+B,EAAE,OAAO,EAHxC,MAGwC,GAFtC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAwChD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAH9B,MAG8B,GAF5B,MAAM,GAAG,SAAS,CAU9B"}
@@ -1,11 +1,5 @@
1
- /** Map of severity names to numeric ordering used for threshold comparisons. */
2
- export declare const SEVERITY_ORDER: {
3
- none: number;
4
- low: number;
5
- medium: number;
6
- high: number;
7
- critical: number;
8
- };
1
+ import { SEVERITY_ORDER } from "../core/severity.js";
2
+ export { SEVERITY_ORDER };
9
3
  /**
10
4
  * Convert a numeric confidence score into a human readable label.
11
5
  *
@@ -1 +1 @@
1
- {"version":3,"file":"scoring.d.ts","sourceRoot":"","sources":["../../../lib/audit/scoring.js"],"names":[],"mappings":"AAMA,gFAAgF;AAChF,eAAO,MAAM,cAAc;IACzB,IAAI;IACJ,GAAG;IACH,MAAM;IACN,IAAI;IACJ,QAAQ;CACT,CAAC;AAwKF;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAH/B,MAG+B,GAF7B,MAAM,CAUlB;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAJpC,MAIoC,EAAE,SAAS,EAH/C,MAG+C,GAF7C,OAAO,CAMnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAL7B,MAAM,EAKuB,EAAE,MAAM,EAJrC,MAIqC,EAAE,OAAO,GAH9C,MAGmD,GAFjD,MAAM,CAoVlB"}
1
+ {"version":3,"file":"scoring.d.ts","sourceRoot":"","sources":["../../../lib/audit/scoring.js"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAMrD,OAAO,EAAE,cAAc,EAAE,CAAC;AAwK1B;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAH/B,MAG+B,GAF7B,MAAM,CAUlB;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAJpC,MAIoC,EAAE,SAAS,EAH/C,MAG+C,GAF7C,OAAO,CAMnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAL7B,MAAM,EAKuB,EAAE,MAAM,EAJrC,MAIqC,EAAE,OAAO,GAH9C,MAGmD,GAFjD,MAAM,CAoVlB"}
@@ -1 +1 @@
1
- {"version":3,"file":"targets.d.ts","sourceRoot":"","sources":["../../../lib/audit/targets.js"],"names":[],"mappings":"AAcA,8EAA8E;AAC9E,QAAA,MAAM,oBAAoB,aAAoC,CAAC;AAsJ/D;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAHnC,MAAM,GAAG,SAG0B,GAFjC,OAAO,CAOnB;AAuOD;;;;;;;GAOG;AACH,wBAAsB,mCAAmC,CAAC,SAAS,EAHxD;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAGqB,GAFtD,OAAO,CAAC,IAAI,CAAC,CA+EzB;AAkBD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAHrC,MAAM,GAAG,SAG4B,GAFnC,MAAM,CAOlB;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EALtC,MAKsC,EAAE,UAAU,EAJlD,MAIkD,EAAE,OAAO,AAHnE,CACA,EADQ,MAAM,GAAG,MAAM,GAAG,SAGyC,GAFzD;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAmGpD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAflC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAeD,EAAE,OAAO,AAdnD,CACA,EADQ,MAAM,GAAG,MAAM,GAAG,SAcyB,GAbzC;IACR,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE;QACL,gBAAgB,EAAE,MAAM,CAAC;QACzB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,eAAe,EAAE,MAAM,CAAC;QACxB,cAAc,EAAE,MAAM,CAAC;QACvB,sBAAsB,EAAE,MAAM,CAAC;QAC/B,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAmJH;AAED,OAAO,EAAE,oBAAoB,EAAE,CAAC"}
1
+ {"version":3,"file":"targets.d.ts","sourceRoot":"","sources":["../../../lib/audit/targets.js"],"names":[],"mappings":"AAcA,8EAA8E;AAC9E,QAAA,MAAM,oBAAoB,aAAoC,CAAC;AAsJ/D;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAHnC,MAAM,GAAG,SAG0B,GAFjC,OAAO,CAOnB;AAuOD;;;;;;;GAOG;AACH,wBAAsB,mCAAmC,CAAC,SAAS,EAHxD;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAGqB,GAFtD,OAAO,CAAC,IAAI,CAAC,CAoFzB;AAkBD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAHrC,MAAM,GAAG,SAG4B,GAFnC,MAAM,CAOlB;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EALtC,MAKsC,EAAE,UAAU,EAJlD,MAIkD,EAAE,OAAO,AAHnE,CACA,EADQ,MAAM,GAAG,MAAM,GAAG,SAGyC,GAFzD;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAmGpD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAflC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAeD,EAAE,OAAO,AAdnD,CACA,EADQ,MAAM,GAAG,MAAM,GAAG,SAcyB,GAbzC;IACR,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE;QACL,gBAAgB,EAAE,MAAM,CAAC;QACzB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,eAAe,EAAE,MAAM,CAAC;QACxB,cAAc,EAAE,MAAM,CAAC;QACvB,sBAAsB,EAAE,MAAM,CAAC;QAC/B,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAmJH;AAED,OAAO,EAAE,oBAAoB,EAAE,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"bomAssembly.d.ts","sourceRoot":"","sources":["../../../lib/cli/bomAssembly.js"],"names":[],"mappings":"AA8DA;;;;;;;;;GASG;AACH,eAAO,MAAM,2BAA2B,aAJ7B,MAAM,qBACN,MAAM,EAAE,KACN,OAsBZ,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,YAAY,EAFf,MAG8E,CAAC;AAEzF;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,0CAH9B,MAAM;;;;;CAwChB,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,wBAAwB,YAJ1B,MAAM,KACJ,MAAM,GAAC,SAyBnB,CAAC;AAoEF;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe,YALjB,MAAM,YACN,MAAM,KACJ;IAAE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CA+CrD,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,SAH3B,MAAM,KACJ,MAQZ,CAAC;AAEF;;;;;;;GAOG;AAGH,eAAO,MAAM,oBAAoB,SALtB,MAAM,KACJ,MAwBZ,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,YAHnB,MAAM,KACJ,MAAM,EAgBlB,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,YAHtB,MAAM,UAwBhB,CAAC;AAEF;;;GAGG;AACH,wBAAgB,WAAW,CAAC,eAAe,KAAK,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;;;qBAzJhD,MAAM,EAAE;gBAAU,MAAM,EAAE;;;;EA0gBrD;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAH/B,QAAQ,MAGuB,SAyCzC;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAN3B,MAM2B,EAAE,UAAU,EALvC,MAKuC,EAAE,GAAG,EAJ5C,MAI4C,EAAE,KAAK,GAHnD,MAG2D,GAFzD,MAAM,EAAE,CAcpB;AAED;;;;GAIG;AAEH,eAAO,MAAM,cAAc,EAHjB,MAAM,EAGqD,CAAC;AAEtE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAFxB,MAEyC,CAAC;AAEpD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAJjC,MAIiC,EAAE,YAAY,EAH/C,MAG+C,GAF7C,MAAM,EAAE,CASpB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAHnC,MAGmC,GAFjC,MAAM,EAAE,CAOpB;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAHlC,MAGkC,GAFhC,GAAG,CAAC,MAAM,CAAC,CA6BvB;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAJxC,MAIwC,EAAE,GAAG,EAH7C,MAG6C,GAF3C,OAAO,CAiBnB;AAED;;GAEG;AACH,wBAAgB,YAAY,CAC1B,OAAO,KAAA,EACP,UAAU,KAAA,EACV,GAAG,KAAA,EACH,KAAK,KAAA,EACL,OAAO,KAAA,EACP,SAAS,UAAQ,QAiPlB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,KAAA,OA+EvC;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,KAAA,EAAE,SAAS,KAAA,QA6B3C;AAuBD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,KAAA,EAAE,MAAM,KAAA,EAAE,SAAS,KAAA,QAMtD;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAJ7B,MAI6B,EAAE,MAAM,EAHrC,MAGqC,GAFnC,MAAM,GAAC,SAAS,CAoB5B;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,cAAc,YAPhB,MAAM,WACN,MAAM,SACN,MAAM,WACN,MAAM,KAEJ,MA6FZ,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAJ1B,MAI0B,EAAE,OAAO,EAHnC,MAGmC,GAFjC,MAAM,GAAC,SAAS,CAI5B;AAiDD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAJzB,MAIyB,EAAE,OAAO,EAHlC,MAGkC,GAFhC,MAAM,GAAC,SAAS,CAyB5B;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAHzC,MAGyC,GAFvC,MAAM,EAAE,CAMpB;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAHxC,MAGwC,GAFtC,MAAM,EAAE,CAMpB;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,wBAAwB,EALf,MAAM,EAKS,EACxB,wBAAwB,EALf,MAAM,EAKS,GAJb,MAAM,EAAE,CASpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAHxC,MAGwC,GAFtC,MAAM,EAAE,CAyBpB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAHpC,MAGoC,GAFlC,MAAM,GAAC,SAAS,CAS5B;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,wBAAwB,EAHtD,MAAM,EAGgD,GAFpD,OAAO,CAInB;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EALvC,MAAM,EAKiC,EAAE,aAAa,EAJtD,MAIsD,EAAE,OAAO,EAH/D,GAAG,CAAC,MAAM,CAGqD,GAF7D,MAAM,EAAE,CAgBpB;AAED;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAAC,QAAQ,EAH9C,MAAM,EAGwC,GAF5C,MAAM,EAAE,CAQpB;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EALvC,MAKuC,EAAE,KAAK,EAJ9C,MAI8C,EAAE,QAAQ,EAHxD,MAAM,EAGkD,GAFtD,MAAM,CAIlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAJvC,MAIuC,EAAE,aAAa,EAHtD,MAGsD,GAFpD,IAAI,CAyDhB;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAPtB,MAOsB,EAAE,UAAU,OAAA,EAAE,eAAe,EALnD,MAKmD,EAAE,YAAY,OAAA,GAF/D,MAAM,CA8ClB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,YAJjC,MAAM,mBACN,MAAM,KACJ,OAYZ,CAAC"}
1
+ {"version":3,"file":"bomAssembly.d.ts","sourceRoot":"","sources":["../../../lib/cli/bomAssembly.js"],"names":[],"mappings":"AA8DA;;;;;;;;;GASG;AACH,eAAO,MAAM,2BAA2B,aAJ7B,MAAM,qBACN,MAAM,EAAE,KACN,OAsBZ,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,YAAY,EAFf,MAG8E,CAAC;AAEzF;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,0CAH9B,MAAM;;;;;CAwChB,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,wBAAwB,YAJ1B,MAAM,KACJ,MAAM,GAAC,SAyBnB,CAAC;AAqFF;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe,YALjB,MAAM,YACN,MAAM,KACJ;IAAE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CA+CrD,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,SAH3B,MAAM,KACJ,MAQZ,CAAC;AAEF;;;;;;;GAOG;AAGH,eAAO,MAAM,oBAAoB,SALtB,MAAM,KACJ,MAwBZ,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,YAHnB,MAAM,KACJ,MAAM,EAgBlB,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,YAHtB,MAAM,UAwBhB,CAAC;AAEF;;;GAGG;AACH,wBAAgB,WAAW,CAAC,eAAe,KAAK,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;;;qBAzJhD,MAAM,EAAE;gBAAU,MAAM,EAAE;;;;EA0gBrD;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAH/B,QAAQ,MAGuB,SAyCzC;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAN3B,MAM2B,EAAE,UAAU,EALvC,MAKuC,EAAE,GAAG,EAJ5C,MAI4C,EAAE,KAAK,GAHnD,MAG2D,GAFzD,MAAM,EAAE,CAcpB;AAED;;;;GAIG;AAEH,eAAO,MAAM,cAAc,EAHjB,MAAM,EAGqD,CAAC;AAEtE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAFxB,MAEyC,CAAC;AAEpD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAJjC,MAIiC,EAAE,YAAY,EAH/C,MAG+C,GAF7C,MAAM,EAAE,CASpB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAHnC,MAGmC,GAFjC,MAAM,EAAE,CAOpB;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAHlC,MAGkC,GAFhC,GAAG,CAAC,MAAM,CAAC,CA6BvB;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAJxC,MAIwC,EAAE,GAAG,EAH7C,MAG6C,GAF3C,OAAO,CAiBnB;AAED;;GAEG;AACH,wBAAgB,YAAY,CAC1B,OAAO,KAAA,EACP,UAAU,KAAA,EACV,GAAG,KAAA,EACH,KAAK,KAAA,EACL,OAAO,KAAA,EACP,SAAS,UAAQ,QA6PlB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,KAAA,OA+EvC;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,KAAA,EAAE,SAAS,KAAA,QA6B3C;AAuBD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,KAAA,EAAE,MAAM,KAAA,EAAE,SAAS,KAAA,QAMtD;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAJ7B,MAI6B,EAAE,MAAM,EAHrC,MAGqC,GAFnC,MAAM,GAAC,SAAS,CAoB5B;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,cAAc,YAPhB,MAAM,WACN,MAAM,SACN,MAAM,WACN,MAAM,KAEJ,MA+FZ,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAJ1B,MAI0B,EAAE,OAAO,EAHnC,MAGmC,GAFjC,MAAM,GAAC,SAAS,CAI5B;AAiDD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAJzB,MAIyB,EAAE,OAAO,EAHlC,MAGkC,GAFhC,MAAM,GAAC,SAAS,CAyB5B;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAHzC,MAGyC,GAFvC,MAAM,EAAE,CAMpB;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAHxC,MAGwC,GAFtC,MAAM,EAAE,CAMpB;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,wBAAwB,EALf,MAAM,EAKS,EACxB,wBAAwB,EALf,MAAM,EAKS,GAJb,MAAM,EAAE,CASpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAHxC,MAGwC,GAFtC,MAAM,EAAE,CAyBpB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAHpC,MAGoC,GAFlC,MAAM,GAAC,SAAS,CAS5B;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,wBAAwB,EAHtD,MAAM,EAGgD,GAFpD,OAAO,CAInB;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EALvC,MAAM,EAKiC,EAAE,aAAa,EAJtD,MAIsD,EAAE,OAAO,EAH/D,GAAG,CAAC,MAAM,CAGqD,GAF7D,MAAM,EAAE,CAgBpB;AAED;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAAC,QAAQ,EAH9C,MAAM,EAGwC,GAF5C,MAAM,EAAE,CAQpB;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EALvC,MAKuC,EAAE,KAAK,EAJ9C,MAI8C,EAAE,QAAQ,EAHxD,MAAM,EAGkD,GAFtD,MAAM,CAIlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAJvC,MAIuC,EAAE,aAAa,EAHtD,MAGsD,GAFpD,IAAI,CAyDhB;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAPtB,MAOsB,EAAE,UAAU,OAAA,EAAE,eAAe,EALnD,MAKmD,EAAE,YAAY,OAAA,GAF/D,MAAM,CA8ClB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,YAJjC,MAAM,mBACN,MAAM,KACJ,OAYZ,CAAC"}
@@ -50,7 +50,8 @@ export declare function isUserProvided(value: any, yaDefault: any): boolean;
50
50
  * @returns {object} A shallow copy of args with alias-based defaults applied
51
51
  */
52
52
  export declare function applyCommandNameDefaults(args: object, invokedCommandName: string): object;
53
- export declare function buildInitialOptions(args: any, { filePath, isRemoteOrPurl }: {
53
+ export declare function buildInitialOptions(args: any, { filePath, isRemoteOrPurl, argv }: {
54
+ argv?: any;
54
55
  filePath: any;
55
56
  isRemoteOrPurl: any;
56
57
  }): any;
@@ -1 +1 @@
1
- {"version":3,"file":"cliOptions.d.ts","sourceRoot":"","sources":["../../../lib/cli/cliOptions.js"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAoBH;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAJpC,MAIoC,EAAE,WAAW,AAHzD,CACA,EADQ,MAG4D,GAF1D,MAAM,GAAC,IAAI,CAoBvB;AA6BD;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAJzB,GAIyB,EAAE,SAAS,EAHpC,GAGoC,GAFlC,OAAO,CAInB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAJlC,MAIkC,EAAE,kBAAkB,EAHtD,MAGsD,GAFpD,MAAM,CAoBlB;AAwCD,wBAAgB,mBAAmB,CAAC,IAAI,KAAA,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE;;;CAAA,OAyCrE;AAqBE,YAAkB,cAAc,GAChC;;;;IAAkC,KAAK,EAA5B,MAAM,GAAC,MAAM,GAAC,OAAO,CAChC;;;;IAAkC,OAAO,EAA9B,MAAM,CACnB;CAAA,CAAA;AAJD;;;;GAIG;AAEH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAR3C,MAQ2C,EAAE,OAAO,EAN5D;IAAwB,kBAAkB,EAAlC,MAAM,CACd;IAAyB,kBAAkB,EAAnC,OAAO,CAEf;IAA0B,QAAQ,AAAlC,CACA,EADQ,OAAO,CACf;CAE4D,GAFlD,cAAc,EAAE,CA+F5B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EALjC,MAKiC,EAAE,OAAO,AAJlD,CAEA,EADA;IAA0B,YAAY,AAAtC,CACA,EADQ,OAAO,CACf;CAEuD,GAF7C,cAAc,EAAE,CA+G5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAX9B,MAW8B,EAAE,OAAO,EAT/C;IAAwB,kBAAkB,EAAlC,MAAM,CACd;IAAwB,QAAQ,EAAxB,MAAM,CACd;IAAyB,cAAc,EAA/B,OAAO,CACf;IAAyB,kBAAkB,EAAnC,OAAO,CAEf;IAA0B,QAAQ,AAAlC,CACA,EADQ,OAAO,CACf;IAA0B,YAAY,AAAtC,CACA,EADQ,OAAO,CACf;CAE+C,GAFrC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,cAAc,EAAE,CAAA;CAAE,CA6B3D"}
1
+ {"version":3,"file":"cliOptions.d.ts","sourceRoot":"","sources":["../../../lib/cli/cliOptions.js"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAoBH;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAJpC,MAIoC,EAAE,WAAW,AAHzD,CACA,EADQ,MAG4D,GAF1D,MAAM,GAAC,IAAI,CAoBvB;AA4CD;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAJzB,GAIyB,EAAE,SAAS,EAHpC,GAGoC,GAFlC,OAAO,CAInB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAJlC,MAIkC,EAAE,kBAAkB,EAHtD,MAGsD,GAFpD,MAAM,CAoBlB;AAqED,wBAAgB,mBAAmB,CACjC,IAAI,KAAA,EACJ,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAmB,EAAE;;;;CAAA,OA8ClD;AAqBE,YAAkB,cAAc,GAChC;;;;IAAkC,KAAK,EAA5B,MAAM,GAAC,MAAM,GAAC,OAAO,CAChC;;;;IAAkC,OAAO,EAA9B,MAAM,CACnB;CAAA,CAAA;AAJD;;;;GAIG;AAEH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAR3C,MAQ2C,EAAE,OAAO,EAN5D;IAAwB,kBAAkB,EAAlC,MAAM,CACd;IAAyB,kBAAkB,EAAnC,OAAO,CAEf;IAA0B,QAAQ,AAAlC,CACA,EADQ,OAAO,CACf;CAE4D,GAFlD,cAAc,EAAE,CA6G5B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EALjC,MAKiC,EAAE,OAAO,AAJlD,CAEA,EADA;IAA0B,YAAY,AAAtC,CACA,EADQ,OAAO,CACf;CAEuD,GAF7C,cAAc,EAAE,CAqI5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAX9B,MAW8B,EAAE,OAAO,EAT/C;IAAwB,kBAAkB,EAAlC,MAAM,CACd;IAAwB,QAAQ,EAAxB,MAAM,CACd;IAAyB,cAAc,EAA/B,OAAO,CACf;IAAyB,kBAAkB,EAAnC,OAAO,CAEf;IAA0B,QAAQ,AAAlC,CACA,EADQ,OAAO,CACf;IAA0B,YAAY,AAAtC,CACA,EADQ,OAAO,CACf;CAE+C,GAFrC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,cAAc,EAAE,CAAA;CAAE,CA6B3D"}