@cdxgen/cdxgen 13.1.0 → 13.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +8 -7
- package/bin/cdxgen.js +16 -3
- package/bin/evinse.js +2 -0
- package/data/crypto-oid.json +88 -12
- package/data/remediations.json +23 -0
- package/data/rules/ai-bom.yaml +78 -0
- package/data/rules/cargo-rust.yaml +132 -0
- package/data/rules/mcp-servers.yaml +122 -0
- package/lib/audit/targets.js +6 -1
- package/lib/cli/bomAssembly.js +12 -0
- package/lib/cli/index.js +192 -1
- package/lib/cli/jsBom.js +59 -2
- package/lib/cli/jvmBom.js +22 -0
- package/lib/cli/managedBom.js +152 -0
- package/lib/cli/nativeBom.js +798 -1
- package/lib/core/activity.js +120 -2
- package/lib/core/env.js +39 -1
- package/lib/core/userAgent.js +151 -0
- package/lib/ecosystems/cargoCache.js +364 -0
- package/lib/ecosystems/caxa.js +13 -5
- package/lib/ecosystems/cppEvidence.js +40 -2
- package/lib/ecosystems/ecosystems.js +241 -91
- package/lib/ecosystems/golem.js +11 -1
- package/lib/ecosystems/gradleutils.js +143 -2
- package/lib/ecosystems/kosi.js +1256 -0
- package/lib/ecosystems/parsers-crystal.js +179 -0
- package/lib/ecosystems/parsers-dotnet.js +69 -39
- package/lib/ecosystems/parsers-elm.js +816 -0
- package/lib/ecosystems/parsers-gleam.js +1 -1
- package/lib/ecosystems/parsers-julia.js +268 -0
- package/lib/ecosystems/parsers-lua.js +218 -0
- package/lib/ecosystems/parsers-misc.js +172 -0
- package/lib/ecosystems/parsers-nim.js +221 -0
- package/lib/ecosystems/parsers-opam.js +180 -0
- package/lib/ecosystems/parsers-perl.js +277 -0
- package/lib/ecosystems/parsers-python.js +1 -1
- package/lib/ecosystems/parsers-r.js +148 -0
- package/lib/ecosystems/parsers-rebar.js +411 -0
- package/lib/ecosystems/parsers-rust.js +932 -17
- package/lib/ecosystems/parsers-spack.js +204 -0
- package/lib/ecosystems/parsers-stack.js +264 -0
- package/lib/ecosystems/parsers-terraform.js +194 -0
- package/lib/ecosystems/rusi.js +126 -6
- package/lib/evinser/evinser.js +111 -1
- package/lib/helpers/agenticToolutils.js +925 -0
- package/lib/inventory/agentFormulationParser.js +57 -4
- package/lib/inventory/aiCollector.js +504 -10
- package/lib/inventory/aiInventory.js +12 -0
- package/lib/inventory/analyzer.js +488 -30
- package/lib/inventory/astWorker.js +6 -0
- package/lib/inventory/auditCategories.js +8 -0
- package/lib/inventory/cbomutils.js +30 -0
- package/lib/inventory/cdxrs.js +7 -2
- package/lib/inventory/communityAiConfigParser.js +215 -2
- package/lib/inventory/dosai.js +77 -0
- package/lib/inventory/envcontext.js +9 -6
- package/lib/inventory/evidenceUtils.js +13 -0
- package/lib/inventory/fetchBatch.js +74 -2
- package/lib/inventory/fetchRate.js +74 -11
- package/lib/inventory/forgeEnricher.js +3 -2
- package/lib/inventory/jvmToolEnv.js +6 -5
- package/lib/inventory/mcpConfigParser.js +166 -2
- package/lib/inventory/mcpDiscovery.js +11 -0
- package/lib/inventory/mcpServerManifest.js +389 -0
- package/lib/inventory/mcpbBundle.js +419 -0
- package/lib/inventory/plugins.js +3 -0
- package/lib/inventory/protobom.js +54 -88
- package/lib/inventory/protobomLoader.js +4 -0
- package/lib/inventory/rustFormulationParser.js +1 -1
- package/lib/inventory/source.js +10 -4
- package/lib/inventory/stylePackageRefs.js +41 -0
- package/lib/inventory/svelteUtils.js +524 -0
- package/lib/parsers/huggingfaceUtils.js +15 -7
- package/lib/parsers/onnx.js +294 -0
- package/lib/parsers/safetensors.js +114 -0
- package/lib/stages/postgen/introspection/markers.js +29 -6
- package/lib/stages/postgen/postgen.js +169 -1
- package/lib/third-party/arborist/snapshots/calc-dep-flags.test.cjs +462 -0
- package/package.json +25 -25
- package/types/lib/audit/targets.d.ts.map +1 -1
- package/types/lib/cli/bomAssembly.d.ts.map +1 -1
- package/types/lib/cli/index.d.ts +2 -2
- package/types/lib/cli/index.d.ts.map +1 -1
- package/types/lib/cli/jsBom.d.ts +23 -0
- package/types/lib/cli/jsBom.d.ts.map +1 -1
- package/types/lib/cli/jvmBom.d.ts.map +1 -1
- package/types/lib/cli/managedBom.d.ts +33 -0
- package/types/lib/cli/managedBom.d.ts.map +1 -1
- package/types/lib/cli/nativeBom.d.ts +88 -8
- package/types/lib/cli/nativeBom.d.ts.map +1 -1
- package/types/lib/core/activity.d.ts.map +1 -1
- package/types/lib/core/env.d.ts +21 -0
- package/types/lib/core/env.d.ts.map +1 -1
- package/types/lib/core/userAgent.d.ts +56 -0
- package/types/lib/core/userAgent.d.ts.map +1 -0
- package/types/lib/ecosystems/cargoCache.d.ts +75 -0
- package/types/lib/ecosystems/cargoCache.d.ts.map +1 -0
- package/types/lib/ecosystems/caxa.d.ts.map +1 -1
- package/types/lib/ecosystems/cppEvidence.d.ts +1 -1
- package/types/lib/ecosystems/cppEvidence.d.ts.map +1 -1
- package/types/lib/ecosystems/ecosystems.d.ts +15 -1
- package/types/lib/ecosystems/ecosystems.d.ts.map +1 -1
- package/types/lib/ecosystems/gradleutils.d.ts +20 -0
- package/types/lib/ecosystems/gradleutils.d.ts.map +1 -1
- package/types/lib/ecosystems/kosi.d.ts +73 -0
- package/types/lib/ecosystems/kosi.d.ts.map +1 -0
- package/types/lib/ecosystems/parsers-crystal.d.ts +27 -0
- package/types/lib/ecosystems/parsers-crystal.d.ts.map +1 -0
- package/types/lib/ecosystems/parsers-dotnet.d.ts +19 -0
- package/types/lib/ecosystems/parsers-dotnet.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-elm.d.ts +79 -0
- package/types/lib/ecosystems/parsers-elm.d.ts.map +1 -0
- package/types/lib/ecosystems/parsers-julia.d.ts +57 -0
- package/types/lib/ecosystems/parsers-julia.d.ts.map +1 -0
- package/types/lib/ecosystems/parsers-lua.d.ts +50 -0
- package/types/lib/ecosystems/parsers-lua.d.ts.map +1 -0
- package/types/lib/ecosystems/parsers-misc.d.ts +23 -0
- package/types/lib/ecosystems/parsers-misc.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-nim.d.ts +43 -0
- package/types/lib/ecosystems/parsers-nim.d.ts.map +1 -0
- package/types/lib/ecosystems/parsers-opam.d.ts +31 -0
- package/types/lib/ecosystems/parsers-opam.d.ts.map +1 -0
- package/types/lib/ecosystems/parsers-perl.d.ts +36 -0
- package/types/lib/ecosystems/parsers-perl.d.ts.map +1 -0
- package/types/lib/ecosystems/parsers-r.d.ts +35 -0
- package/types/lib/ecosystems/parsers-r.d.ts.map +1 -0
- package/types/lib/ecosystems/parsers-rebar.d.ts +42 -0
- package/types/lib/ecosystems/parsers-rebar.d.ts.map +1 -0
- package/types/lib/ecosystems/parsers-rust.d.ts +199 -0
- package/types/lib/ecosystems/parsers-rust.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-spack.d.ts +33 -0
- package/types/lib/ecosystems/parsers-spack.d.ts.map +1 -0
- package/types/lib/ecosystems/parsers-stack.d.ts +35 -0
- package/types/lib/ecosystems/parsers-stack.d.ts.map +1 -0
- package/types/lib/ecosystems/parsers-terraform.d.ts +34 -0
- package/types/lib/ecosystems/parsers-terraform.d.ts.map +1 -0
- package/types/lib/ecosystems/pythonutils.d.ts +1 -1
- package/types/lib/ecosystems/rusi.d.ts.map +1 -1
- package/types/lib/evinser/evinser.d.ts +29 -0
- package/types/lib/evinser/evinser.d.ts.map +1 -1
- package/types/lib/helpers/agenticToolutils.d.ts +87 -0
- package/types/lib/helpers/agenticToolutils.d.ts.map +1 -0
- package/types/lib/inventory/agentFormulationParser.d.ts.map +1 -1
- package/types/lib/inventory/aiCollector.d.ts.map +1 -1
- package/types/lib/inventory/aiInventory.d.ts.map +1 -1
- package/types/lib/inventory/analyzer.d.ts.map +1 -1
- package/types/lib/inventory/auditCategories.d.ts +4 -0
- package/types/lib/inventory/auditCategories.d.ts.map +1 -1
- package/types/lib/inventory/cbomutils.d.ts.map +1 -1
- package/types/lib/inventory/communityAiConfigParser.d.ts.map +1 -1
- package/types/lib/inventory/dosai.d.ts +23 -0
- package/types/lib/inventory/dosai.d.ts.map +1 -1
- package/types/lib/inventory/envcontext.d.ts.map +1 -1
- package/types/lib/inventory/evidenceUtils.d.ts.map +1 -1
- package/types/lib/inventory/fetchBatch.d.ts +34 -0
- package/types/lib/inventory/fetchBatch.d.ts.map +1 -1
- package/types/lib/inventory/fetchRate.d.ts +9 -6
- package/types/lib/inventory/fetchRate.d.ts.map +1 -1
- package/types/lib/inventory/forgeEnricher.d.ts.map +1 -1
- package/types/lib/inventory/jvmToolEnv.d.ts +5 -4
- package/types/lib/inventory/jvmToolEnv.d.ts.map +1 -1
- package/types/lib/inventory/mcpConfigParser.d.ts.map +1 -1
- package/types/lib/inventory/mcpDiscovery.d.ts.map +1 -1
- package/types/lib/inventory/mcpServerManifest.d.ts +19 -0
- package/types/lib/inventory/mcpServerManifest.d.ts.map +1 -0
- package/types/lib/inventory/mcpbBundle.d.ts +19 -0
- package/types/lib/inventory/mcpbBundle.d.ts.map +1 -0
- package/types/lib/inventory/plugins.d.ts.map +1 -1
- package/types/lib/inventory/protobom.d.ts +18 -13
- package/types/lib/inventory/protobom.d.ts.map +1 -1
- package/types/lib/inventory/protobomLoader.d.ts.map +1 -1
- package/types/lib/inventory/source.d.ts.map +1 -1
- package/types/lib/inventory/stylePackageRefs.d.ts +17 -0
- package/types/lib/inventory/stylePackageRefs.d.ts.map +1 -0
- package/types/lib/inventory/svelteUtils.d.ts +124 -0
- package/types/lib/inventory/svelteUtils.d.ts.map +1 -0
- package/types/lib/parsers/huggingfaceUtils.d.ts +8 -1
- package/types/lib/parsers/huggingfaceUtils.d.ts.map +1 -1
- package/types/lib/parsers/onnx.d.ts +28 -0
- package/types/lib/parsers/onnx.d.ts.map +1 -0
- package/types/lib/parsers/safetensors.d.ts +22 -0
- package/types/lib/parsers/safetensors.d.ts.map +1 -0
- package/types/lib/stages/postgen/introspection/markers.d.ts +3 -2
- package/types/lib/stages/postgen/introspection/markers.d.ts.map +1 -1
- package/types/lib/stages/postgen/postgen.d.ts +33 -0
- package/types/lib/stages/postgen/postgen.d.ts.map +1 -1
|
@@ -102,4 +102,37 @@ export declare function createCsharpBom(path: string, options: Object): Promise<
|
|
|
102
102
|
* @returns {Promise<Object>} Promise resolving to BOM object
|
|
103
103
|
*/
|
|
104
104
|
export declare function createCryptoCertsBom(path: string, options: Object): Promise<Object>;
|
|
105
|
+
/**
|
|
106
|
+
* Function to create bom string for R projects using renv.
|
|
107
|
+
*
|
|
108
|
+
* The `renv.lock` file carries the resolved package set for the project
|
|
109
|
+
* library, including the R version it was produced under.
|
|
110
|
+
*
|
|
111
|
+
* @param {string} path to the project
|
|
112
|
+
* @param {Object} options Parse options from the cli
|
|
113
|
+
* @returns {Object} BOM object
|
|
114
|
+
*/
|
|
115
|
+
export declare function createRBom(path: string, options: Object): Object;
|
|
116
|
+
/**
|
|
117
|
+
* Function to create bom string for Perl projects using Carton.
|
|
118
|
+
*
|
|
119
|
+
* The `cpanfile.snapshot` carries the resolved install set; the declared
|
|
120
|
+
* `cpanfile` is consulted to distinguish direct dependencies.
|
|
121
|
+
*
|
|
122
|
+
* @param {string} path to the project
|
|
123
|
+
* @param {Object} options Parse options from the cli
|
|
124
|
+
* @returns {Object} BOM object
|
|
125
|
+
*/
|
|
126
|
+
export declare function createPerlBom(path: string, options: Object): Object;
|
|
127
|
+
/**
|
|
128
|
+
* Function to create bom string for Terraform and OpenTofu projects.
|
|
129
|
+
*
|
|
130
|
+
* The `.terraform.lock.hcl` file pins the providers the configuration
|
|
131
|
+
* resolves to, with content hashes suitable for the CycloneDX hashes array.
|
|
132
|
+
*
|
|
133
|
+
* @param {string} path to the project
|
|
134
|
+
* @param {Object} options Parse options from the cli
|
|
135
|
+
* @returns {Object} BOM object
|
|
136
|
+
*/
|
|
137
|
+
export declare function createTerraformBom(path: string, options: Object): Object;
|
|
105
138
|
//# sourceMappingURL=managedBom.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"managedBom.d.ts","sourceRoot":"","sources":["../../../lib/cli/managedBom.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"managedBom.d.ts","sourceRoot":"","sources":["../../../lib/cli/managedBom.js"],"names":[],"mappings":"AA4HA;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,QAJ5B,MAAM,YACN,MAAM,KACJ,OAMZ,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,QAJ1B,MAAM,YACN,MAAM,KACJ,OAeZ,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAAC,IAAI,QAAA,EAAE,OAAO,EAHhC,MAGgC,GAF9B,MAAM,GAAG,IAAI,CAsEzB;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAJ/B,MAI+B,EAAE,OAAO,EAHxC,MAGwC,GAFtC,OAAO,CAAC,MAAM,CAAC,CA2pB3B;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAJzB,MAIyB,EAAE,OAAO,EAHlC,MAGkC,GAFhC,MAAM,CAyBlB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAJ7B,MAI6B,EAAE,OAAO,EAHtC,MAGsC,GAFpC,MAAM,CAsBlB;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAJhC,MAIgC,EAAE,OAAO,EAHzC,MAGyC,GAFvC,OAAO,CAAC,MAAM,CAAC,CA2C3B;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAJvB,MAIuB,EAAE,OAAO,EAHhC,MAGgC,GAF9B,MAAM,CA0BlB;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAJtB,MAIsB,EAAE,OAAO,EAH/B,MAG+B,GAF7B,MAAM,CA+LlB;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAJ7B,MAI6B,EAAE,OAAO,EAHtC,MAGsC,GAFpC,OAAO,CAAC,MAAM,CAAC,CAkS3B;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAJ/B,MAI+B,EAAE,OAAO,EAHxC,MAGwC,GAFtC,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAsfrC;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAJpC,MAIoC,EAAE,OAAO,EAH7C,MAG6C,GAF3C,OAAO,CAAC,MAAM,CAAC,CAmF3B;AAED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAJpB,MAIoB,EAAE,OAAO,EAH7B,MAG6B,GAF3B,MAAM,CA2DlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAJvB,MAIuB,EAAE,OAAO,EAHhC,MAGgC,GAF9B,MAAM,CAmClB;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAJ5B,MAI4B,EAAE,OAAO,EAHrC,MAGqC,GAFnC,MAAM,CAyBlB"}
|
|
@@ -13,14 +13,7 @@ export declare function getCargoCacheDir(): string | undefined;
|
|
|
13
13
|
* @returns {Promise<Object | undefined>} Promise resolving to a BOM object or `undefined`
|
|
14
14
|
*/
|
|
15
15
|
export declare function createGoBom(path: string, options: Object): Promise<Object | undefined>;
|
|
16
|
-
|
|
17
|
-
* Function to create bom string for Rust projects
|
|
18
|
-
*
|
|
19
|
-
* @param {string} path to the project
|
|
20
|
-
* @param {Object} options Parse options from the cli
|
|
21
|
-
* @returns {Promise<Object|undefined>} Promise resolving to a BOM object or undefined
|
|
22
|
-
*/
|
|
23
|
-
export declare function createRustBom(path: string, options: Object): Promise<Object | undefined>;
|
|
16
|
+
export declare function createRustBom(path: any, options: any): Promise<Object | undefined>;
|
|
24
17
|
/**
|
|
25
18
|
* Parses a `.crate` file name into a CycloneDX component (name, version, purl,
|
|
26
19
|
* bom-ref, and source/cache properties). Returns undefined when the file name
|
|
@@ -73,6 +66,19 @@ export declare function createCppBom(path: string, options: Object): Object;
|
|
|
73
66
|
* @returns {Object} BOM object
|
|
74
67
|
*/
|
|
75
68
|
export declare function createClojureBom(path: string, options: Object): Object;
|
|
69
|
+
/**
|
|
70
|
+
* Locate the Stack lock files under a path.
|
|
71
|
+
*
|
|
72
|
+
* Stack names the lock after the configuration file it completes, so the
|
|
73
|
+
* default `stack.yaml` produces `stack.yaml.lock` and a project with several
|
|
74
|
+
* configurations produces one lock per configuration. `stack.lock` is also
|
|
75
|
+
* accepted because tooling and documentation examples have used that name.
|
|
76
|
+
*
|
|
77
|
+
* @param {string} path Project path
|
|
78
|
+
* @param {Object} options Parse options from the cli
|
|
79
|
+
* @returns {string[]} Lock file paths, deduplicated
|
|
80
|
+
*/
|
|
81
|
+
export declare function findStackLockFiles(path: string, options: Object): string[];
|
|
76
82
|
/**
|
|
77
83
|
* Function to create bom string for Haskell projects
|
|
78
84
|
*
|
|
@@ -140,4 +146,78 @@ export declare function createZigBom(path: string, options: Object): Promise<Obj
|
|
|
140
146
|
* @returns {Promise<Object>} Promise resolving to BOM object
|
|
141
147
|
*/
|
|
142
148
|
export declare function createGleamBom(path: string, options: Object): Promise<Object>;
|
|
149
|
+
/**
|
|
150
|
+
* Function to create bom string for Julia projects.
|
|
151
|
+
*
|
|
152
|
+
* The resolved `Manifest.toml` is preferred over the declared `Project.toml`
|
|
153
|
+
* so the BOM carries pinned versions and the package graph.
|
|
154
|
+
*
|
|
155
|
+
* @param {string} path to the project
|
|
156
|
+
* @param {Object} options Parse options from the cli
|
|
157
|
+
* @returns {Promise<Object>} BOM object
|
|
158
|
+
*/
|
|
159
|
+
export declare function createJuliaBom(path: string, options: Object): Promise<Object>;
|
|
160
|
+
/**
|
|
161
|
+
* Function to create bom string for Erlang projects using rebar3.
|
|
162
|
+
*
|
|
163
|
+
* @param {string} path to the project
|
|
164
|
+
* @param {Object} options Parse options from the cli
|
|
165
|
+
* @returns {Promise<Object>} BOM object
|
|
166
|
+
*/
|
|
167
|
+
export declare function createErlangBom(path: string, options: Object): Promise<Object>;
|
|
168
|
+
/**
|
|
169
|
+
* Function to create bom string for OCaml projects using opam.
|
|
170
|
+
*
|
|
171
|
+
* Resolved `.opam.locked` files are preferred; a plain `.opam` file is used
|
|
172
|
+
* as a declared fallback with unpinned versions.
|
|
173
|
+
*
|
|
174
|
+
* @param {string} path to the project
|
|
175
|
+
* @param {Object} options Parse options from the cli
|
|
176
|
+
* @returns {Promise<Object>} BOM object
|
|
177
|
+
*/
|
|
178
|
+
export declare function createOCamlBom(path: string, options: Object): Promise<Object>;
|
|
179
|
+
/**
|
|
180
|
+
* Function to create bom string for Elm projects.
|
|
181
|
+
*
|
|
182
|
+
* @param {string} path to the project
|
|
183
|
+
* @param {Object} options Parse options from the cli
|
|
184
|
+
* @returns {Promise<Object>} BOM object
|
|
185
|
+
*/
|
|
186
|
+
export declare function createElmBom(path: string, options: Object): Promise<Object>;
|
|
187
|
+
/**
|
|
188
|
+
* Function to create bom string for Crystal projects using shards.
|
|
189
|
+
*
|
|
190
|
+
* @param {string} path to the project
|
|
191
|
+
* @param {Object} options Parse options from the cli
|
|
192
|
+
* @returns {Promise<Object>} BOM object
|
|
193
|
+
*/
|
|
194
|
+
export declare function createCrystalBom(path: string, options: Object): Promise<Object>;
|
|
195
|
+
/**
|
|
196
|
+
* Function to create bom string for Nim projects using nimble.
|
|
197
|
+
*
|
|
198
|
+
* @param {string} path to the project
|
|
199
|
+
* @param {Object} options Parse options from the cli
|
|
200
|
+
* @returns {Promise<Object>} BOM object
|
|
201
|
+
*/
|
|
202
|
+
export declare function createNimBom(path: string, options: Object): Promise<Object>;
|
|
203
|
+
/**
|
|
204
|
+
* Function to create bom string for Lua projects using LuaRocks.
|
|
205
|
+
*
|
|
206
|
+
* When a `luarocks.lock` is present next to a rockspec it supplies the
|
|
207
|
+
* resolved versions; otherwise the rockspec's declared dependencies are
|
|
208
|
+
* inventoried without versions.
|
|
209
|
+
*
|
|
210
|
+
* @param {string} path to the project
|
|
211
|
+
* @param {Object} options Parse options from the cli
|
|
212
|
+
* @returns {Promise<Object>} BOM object
|
|
213
|
+
*/
|
|
214
|
+
export declare function createLuaBom(path: string, options: Object): Promise<Object>;
|
|
215
|
+
/**
|
|
216
|
+
* Function to create bom string for Spack environments.
|
|
217
|
+
*
|
|
218
|
+
* @param {string} path to the project
|
|
219
|
+
* @param {Object} options Parse options from the cli
|
|
220
|
+
* @returns {Promise<Object>} BOM object
|
|
221
|
+
*/
|
|
222
|
+
export declare function createSpackBom(path: string, options: Object): Promise<Object>;
|
|
143
223
|
//# sourceMappingURL=nativeBom.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"nativeBom.d.ts","sourceRoot":"","sources":["../../../lib/cli/nativeBom.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"nativeBom.d.ts","sourceRoot":"","sources":["../../../lib/cli/nativeBom.js"],"names":[],"mappings":"AA4KA;;;;;GAKG;AACH,wBAAgB,gBAAgB,IAFnB,MAAM,GAAC,SAAS,CAU5B;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAJ3B,MAI2B,EAAE,OAAO,EAHpC,MAGoC,GAFlC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAkdvC;AA2PD,wBAAsB,aAAa,CAAC,IAAI,KAAA,EAAE,OAAO,KAAA,+BAyLhD;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAHvC,MAGuC,GAFrC,MAAM,GAAC,SAAS,CAiC5B;AAED;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAAC,SAAS,EAJ9C,MAI8C,EAAE,SAAS,AAHjE,CACA,EADQ,MAGyD,GAFvD,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CA8BrC;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAJnC,MAImC,EAAE,OAAO,EAH5C,MAG4C,GAF1C,OAAO,CAAC,MAAM,CAAC,CAwB3B;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAJ7B,MAI6B,EAAE,OAAO,EAHtC,MAGsC,GAFpC,OAAO,CAAC,MAAM,CAAC,CA0E3B;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAJtB,MAIsB,EAAE,OAAO,EAH/B,MAG+B,GAF7B,MAAM,CAkZlB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAJ1B,MAI0B,EAAE,OAAO,EAHnC,MAGmC,GAFjC,MAAM,CAmJlB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAJ5B,MAI4B,EAAE,OAAO,EAHrC,MAGqC,GAFnC,MAAM,EAAE,CA0BpB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAJ1B,MAI0B,EAAE,OAAO,EAHnC,MAGmC,GAFjC,MAAM,CAiElB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAJzB,MAIyB,EAAE,OAAO,EAHlC,MAGkC,GAFhC,MAAM,CAiClB;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAJ9B,MAI8B,EAAE,OAAO,EAHvC,MAGuC,GAFrC,OAAO,CAAC,MAAM,CAAC,CAwJ3B;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAJ9B,MAI8B,EAAE,OAAO,EAHvC,MAGuC,GAFrC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAuLvC;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAJ5B,MAI4B,EAAE,OAAO,EAHrC,MAGqC,GAFnC,OAAO,CAAC,MAAM,CAAC,CAkI3B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAJ5B,MAI4B,EAAE,OAAO,EAHrC,MAGqC,GAFnC,OAAO,CAAC,MAAM,CAAC,CA4D3B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAJ9B,MAI8B,EAAE,OAAO,EAHvC,MAGuC,GAFrC,OAAO,CAAC,MAAM,CAAC,CAwD3B;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAJ9B,MAI8B,EAAE,OAAO,EAHvC,MAGuC,GAFrC,OAAO,CAAC,MAAM,CAAC,CAsE3B;AAqBD;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAJ/B,MAI+B,EAAE,OAAO,EAHxC,MAGwC,GAFtC,OAAO,CAAC,MAAM,CAAC,CAyB3B;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAJ9B,MAI8B,EAAE,OAAO,EAHvC,MAGuC,GAFrC,OAAO,CAAC,MAAM,CAAC,CA4B3B;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAJ5B,MAI4B,EAAE,OAAO,EAHrC,MAGqC,GAFnC,OAAO,CAAC,MAAM,CAAC,CAoE3B;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAJhC,MAIgC,EAAE,OAAO,EAHzC,MAGyC,GAFvC,OAAO,CAAC,MAAM,CAAC,CAuC3B;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAJ5B,MAI4B,EAAE,OAAO,EAHrC,MAGqC,GAFnC,OAAO,CAAC,MAAM,CAAC,CA0C3B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAJ5B,MAI4B,EAAE,OAAO,EAHrC,MAGqC,GAFnC,OAAO,CAAC,MAAM,CAAC,CA2D3B;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAJ9B,MAI8B,EAAE,OAAO,EAHvC,MAGuC,GAFrC,OAAO,CAAC,MAAM,CAAC,CAwD3B"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"activity.d.ts","sourceRoot":"","sources":["../../../lib/core/activity.js"],"names":[],"mappings":"AAOA,oFAAoF;AACpF,eAAO,MAAM,UAAU,SAEkB,CAAC;AAE1C,+GAA+G;AAC/G,eAAO,MAAM,YAAY,KAE4B,CAAC;AAQtD,8IAA8I;AAC9I,eAAO,IAAI,QAAQ,KACkD,CAAC;AAEtE,gGAAgG;AAChG,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;
|
|
1
|
+
{"version":3,"file":"activity.d.ts","sourceRoot":"","sources":["../../../lib/core/activity.js"],"names":[],"mappings":"AAOA,oFAAoF;AACpF,eAAO,MAAM,UAAU,SAEkB,CAAC;AAE1C,+GAA+G;AAC/G,eAAO,MAAM,YAAY,KAE4B,CAAC;AAQtD,8IAA8I;AAC9I,eAAO,IAAI,QAAQ,KACkD,CAAC;AAEtE,gGAAgG;AAChG,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;AAsWnD,gJAAgJ;AAChJ,QAAA,MAAM,oBAAoB,UADd,MAAM,KAA4D,MACA,CAAC;AAe/E;;;;;;;GAOG;AACH,iBAAS,oBAAoB,CAAC,QAAQ,EAH3B,MAG2B,GAFzB,MAAM,GAAC,SAAS,CA8D5B;AAED;;;;;GAKG;AACH,iBAAS,wBAAwB,CAAC,OAAO,EAH9B,MAAM,GAAC,MAAM,EAGiB,GAF5B;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,CAqClD;AA0BD;;;;;;GAMG;AACH,wBAAgB,kCAAkC,CAAC,OAAO,EAH/C,MAG+C,GAF7C,OAAO,CAInB;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EALhC,MAKgC,EAAE,MAAM,EAJxC,MAIwC,EAAE,OAAO,AAHzD,CACA,EADQ,MAGsD,GAFpD,MAAM,GAAC,SAAS,CA4B5B;AAED,0KAA0K;AAC1K,wBAAgB,sBAAsB,CAAC,MAAM,EADjC,MACiC,EAAE,OAAO,AADV,CAAuE,EAA/D,MACO,GADkE,MAAM,GAAC,SAAS,CAG5I;AAED,0KAA0K;AAC1K,wBAAgB,uBAAuB,CAAC,MAAM,EADlC,MACkC,EAAE,OAAO,AADX,CAAuE,EAA/D,MACQ,GADiE,MAAM,GAAC,SAAS,CAG5I;AAED,0KAA0K;AAC1K,wBAAgB,oBAAoB,CAAC,MAAM,EAD/B,MAC+B,EAAE,OAAO,AADR,CAAuE,EAA/D,MACK,GADoE,MAAM,GAAC,SAAS,CAG5I;AA2CD;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAND,MAMC,EACV,YAAY,EANH,MAMG,EACZ,OAAO,AANN,CACA,EADQ,MAMG,GALD,MAAM,GAAC,SAAS,CAuC5B;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAJlC,MAIkC,EAAE,OAAO,AAHnD,CACA,EADQ,MAGgD,GAF9C,MAAM,GAAC,SAAS,CA2B5B;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAJrC,MAIqC,EAAE,OAAO,AAHtD,CACA,EADQ,MAGmD,GAFjD,MAAM,GAAC,SAAS,CAgC5B;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAJpC,MAIoC,EAAE,OAAO,AAHrD,CACA,EADQ,MAGkD,GAFhD,MAAM,GAAC,SAAS,CAK5B;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAH1B,OAG0B,GAFxB,IAAI,CAShB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAL7B,MAK6B,EAAE,MAAM,EAJrC,MAIqC,EAAE,MAAM,AAHrD,CACA,EADQ,MAG6C,GAF3C,KAAK,CAYjB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAHxB,KAGwB,GAFtB,OAAO,CAInB;AAED,0HAA0H;AAC1H,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AAE7D;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAJlC,MAIkC,EAAE,MAAM,EAH1C,MAG0C,GAFxC,KAAK,CASjB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,AAHvC,CACA,EADQ,MAGoC,GAFlC,IAAI,CAOhB;AAED,0DAA0D;AAC1D,wBAAgB,oBAAoB,IADc,IAAI,CAGrD;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAH5B,MAG4B,GAF1B,MAAM,GAAC,SAAS,CAgB5B;AAID,wEAAwE;AACxE,wBAAgB,qBAAqB,IADvB,MAAM,EAAE,CAGrB;AAED,oEAAoE;AACpE,wBAAgB,uBAAuB,IADqB,IAAI,CAO/D;AAED;;;;;;;;;GASG;AACH,iBAAS,wBAAwB,CAC/B,IAAI,EARK,MAQL,EACJ,MAAM,EARG,MAQH,EACN,MAAM,EARG,MAQH,EACN,MAAM,AARL,CACA,EADQ,MAQS,EAClB,QAAQ,AARP,CACA,EADQ,MAQI,GAPF,MAAM,GAAC,SAAS,CAgB5B;AAED,0EAA0E;AAC1E,eAAO,MAAM,mBAAmB,UAAY,CAAC;AAE7C;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EALC,MAKD,EACR,eAAe,AALd,CACA,EADQ,MAKwD,GAJtD,OAAO,CA+BnB;AAED;;;;;GAKG;AAEH,wBAAgB,mBAAmB,CAAC,GAAG,EAJ5B,MAI4B,GAH1B,OAAO,CAmBnB;AAmED,uLAAuL;AACvL,eAAO,MAAM,WAAW,UAyItB,CAAC;AAEH,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,GACzB,CAAC"}
|
package/types/lib/core/env.d.ts
CHANGED
|
@@ -85,6 +85,15 @@ export declare let RUSTC_CMD: string;
|
|
|
85
85
|
export declare let GO_CMD: string;
|
|
86
86
|
/** Resolved Cargo executable command (CARGO_CMD env var, or "cargo"). */
|
|
87
87
|
export declare let CARGO_CMD: string;
|
|
88
|
+
/**
|
|
89
|
+
* Target triple the cargo resolve graph is filtered to, so that a
|
|
90
|
+
* cross-compiled project can be described for the triple it ships on rather
|
|
91
|
+
* than for the union of every triple its lock file covers.
|
|
92
|
+
*
|
|
93
|
+
* `CDXGEN_CARGO_TARGET` is cdxgen's own name for it; `CARGO_BUILD_TARGET` is
|
|
94
|
+
* cargo's standard variable, which a cross-compiling build already sets.
|
|
95
|
+
*/
|
|
96
|
+
export declare const CARGO_TARGET: string | undefined;
|
|
88
97
|
/** Resolved Clojure CLI executable command (CLJ_CMD env var, or "clj"). */
|
|
89
98
|
export declare let CLJ_CMD: string;
|
|
90
99
|
/** Resolved Leiningen executable command (LEIN_CMD env var, or "lein"). */
|
|
@@ -109,6 +118,7 @@ export declare const PROJECT_TYPE_ALIASES: {
|
|
|
109
118
|
js: string[];
|
|
110
119
|
mcp: string[];
|
|
111
120
|
"ai-skill": string[];
|
|
121
|
+
agentic: string[];
|
|
112
122
|
py: string[];
|
|
113
123
|
go: string[];
|
|
114
124
|
rust: string[];
|
|
@@ -118,6 +128,17 @@ export declare const PROJECT_TYPE_ALIASES: {
|
|
|
118
128
|
dart: string[];
|
|
119
129
|
haskell: string[];
|
|
120
130
|
elixir: string[];
|
|
131
|
+
erlang: string[];
|
|
132
|
+
julia: string[];
|
|
133
|
+
r: string[];
|
|
134
|
+
ocaml: string[];
|
|
135
|
+
elm: string[];
|
|
136
|
+
crystal: string[];
|
|
137
|
+
nim: string[];
|
|
138
|
+
lua: string[];
|
|
139
|
+
perl: string[];
|
|
140
|
+
spack: string[];
|
|
141
|
+
terraform: string[];
|
|
121
142
|
c: string[];
|
|
122
143
|
clojure: string[];
|
|
123
144
|
github: string[];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../lib/core/env.js"],"names":[],"mappings":"AAUA,uCAAuC;AACvC,eAAO,MAAM,MAAM,SAAmD,CAAC;AACvE,mCAAmC;AACnC,eAAO,MAAM,KAAK,SAAwC,CAAC;AAC3D,oCAAoC;AACpC,eAAO,MAAM,MAAM,SAA+C,CAAC;AAEnE,yFAAyF;AACzF,eAAO,MAAM,sBAAsB,oBAElC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,QAIrB,CAAC;AAEX,sJAAsJ;AACtJ,eAAO,MAAM,qBAAqB,SAI/B,CAAC;AAEJ,sIAAsI;AACtI,eAAO,MAAM,sBAAsB,SAElC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAH9B,MAG8B,GAF5B,MAAM,EAAE,CAiDpB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,IAFrB,OAAO,CAOnB;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,IAF7B,OAAO,CAUnB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,IAFjB,OAAO,CAOnB;AAED,mGAAmG;AACnG,eAAO,MAAM,aAAa,SAAuB,CAAC;AAElD,oJAAoJ;AACpJ,eAAO,MAAM,gBAAgB,SAEwC,CAAC;AAEtE,yFAAyF;AACzF,eAAO,MAAM,QAAQ,QAAmB,CAAC;AAEzC;;;;;GAKG;AACH,wBAAgB,cAAc,IAFjB,MAAM,CAclB;AAED,6FAA6F;AAC7F,eAAO,MAAM,UAAU,QAAqB,CAAC;AAsB7C;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,IAFnB,MAAM,CAYlB;AAED,mEAAmE;AACnE,eAAO,IAAI,UAAU,QAAW,CAAC;AAIjC,yEAAyE;AACzE,eAAO,IAAI,QAAQ,QAAS,CAAC;AAI7B,mEAAmE;AACnE,eAAO,IAAI,OAAO,QAAQ,CAAC;AAI3B,sEAAsE;AACtE,eAAO,IAAI,QAAQ,QAAS,CAAC;AAI7B,mEAAmE;AACnE,eAAO,IAAI,OAAO,QAAQ,CAAC;AAI3B,yEAAyE;AACzE,eAAO,IAAI,SAAS,QAAU,CAAC;AAI/B,gEAAgE;AAChE,eAAO,IAAI,MAAM,QAAO,CAAC;AAIzB,yEAAyE;AACzE,eAAO,IAAI,SAAS,QAAU,CAAC;AAK/B,2EAA2E;AAC3E,eAAO,IAAI,OAAO,QAAQ,CAAC;AAK3B,2EAA2E;AAC3E,eAAO,IAAI,QAAQ,QAAS,CAAC;AAK7B,mFAAmF;AACnF,eAAO,IAAI,eAAe,QAAS,CAAC;AAKpC,yEAAyE;AACzE,eAAO,MAAM,SAAS,QAAkD,CAAC;AAEzE,sEAAsE;AACtE,eAAO,MAAM,QAAQ,QAAgD,CAAC;AAEtE,6EAA6E;AAC7E,eAAO,MAAM,0BAA0B,UAWtC,CAAC;AAEF,8EAA8E;AAC9E,eAAO,MAAM,oBAAoB;IAC/B,IAAI;
|
|
1
|
+
{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../lib/core/env.js"],"names":[],"mappings":"AAUA,uCAAuC;AACvC,eAAO,MAAM,MAAM,SAAmD,CAAC;AACvE,mCAAmC;AACnC,eAAO,MAAM,KAAK,SAAwC,CAAC;AAC3D,oCAAoC;AACpC,eAAO,MAAM,MAAM,SAA+C,CAAC;AAEnE,yFAAyF;AACzF,eAAO,MAAM,sBAAsB,oBAElC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,QAIrB,CAAC;AAEX,sJAAsJ;AACtJ,eAAO,MAAM,qBAAqB,SAI/B,CAAC;AAEJ,sIAAsI;AACtI,eAAO,MAAM,sBAAsB,SAElC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAH9B,MAG8B,GAF5B,MAAM,EAAE,CAiDpB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,IAFrB,OAAO,CAOnB;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,IAF7B,OAAO,CAUnB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,IAFjB,OAAO,CAOnB;AAED,mGAAmG;AACnG,eAAO,MAAM,aAAa,SAAuB,CAAC;AAElD,oJAAoJ;AACpJ,eAAO,MAAM,gBAAgB,SAEwC,CAAC;AAEtE,yFAAyF;AACzF,eAAO,MAAM,QAAQ,QAAmB,CAAC;AAEzC;;;;;GAKG;AACH,wBAAgB,cAAc,IAFjB,MAAM,CAclB;AAED,6FAA6F;AAC7F,eAAO,MAAM,UAAU,QAAqB,CAAC;AAsB7C;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,IAFnB,MAAM,CAYlB;AAED,mEAAmE;AACnE,eAAO,IAAI,UAAU,QAAW,CAAC;AAIjC,yEAAyE;AACzE,eAAO,IAAI,QAAQ,QAAS,CAAC;AAI7B,mEAAmE;AACnE,eAAO,IAAI,OAAO,QAAQ,CAAC;AAI3B,sEAAsE;AACtE,eAAO,IAAI,QAAQ,QAAS,CAAC;AAI7B,mEAAmE;AACnE,eAAO,IAAI,OAAO,QAAQ,CAAC;AAI3B,yEAAyE;AACzE,eAAO,IAAI,SAAS,QAAU,CAAC;AAI/B,gEAAgE;AAChE,eAAO,IAAI,MAAM,QAAO,CAAC;AAIzB,yEAAyE;AACzE,eAAO,IAAI,SAAS,QAAU,CAAC;AAK/B;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,oBAGd,CAAC;AAEZ,2EAA2E;AAC3E,eAAO,IAAI,OAAO,QAAQ,CAAC;AAK3B,2EAA2E;AAC3E,eAAO,IAAI,QAAQ,QAAS,CAAC;AAK7B,mFAAmF;AACnF,eAAO,IAAI,eAAe,QAAS,CAAC;AAKpC,yEAAyE;AACzE,eAAO,MAAM,SAAS,QAAkD,CAAC;AAEzE,sEAAsE;AACtE,eAAO,MAAM,QAAQ,QAAgD,CAAC;AAEtE,6EAA6E;AAC7E,eAAO,MAAM,0BAA0B,UAWtC,CAAC;AAEF,8EAA8E;AAC9E,eAAO,MAAM,oBAAoB;IAC/B,IAAI;IAyBJ,OAAO;IACP,GAAG;IACH,cAAc;IACd,WAAW;IACX,aAAa;IACb,aAAa;IACb,EAAE;IAyCF,GAAG;IACH,UAAU;IACV,OAAO;IACP,EAAE;IAyBF,EAAE;IACF,IAAI;IACJ,GAAG;IACH,IAAI;IACJ,MAAM;IA8BN,IAAI;IACJ,OAAO;IACP,MAAM;IACN,MAAM;IACN,KAAK;IACL,CAAC;IACD,KAAK;IACL,GAAG;IACH,OAAO;IACP,GAAG;IACH,GAAG;IACH,IAAI;IACJ,KAAK;IACL,SAAS;IACT,CAAC;IACD,OAAO;IACP,MAAM;IACN,IAAI;IACJ,EAAE;IACF,OAAO;IACP,IAAI;IACJ,YAAY;IACZ,SAAS;IAcT,UAAU;IACV,KAAK;IAUL,MAAM;IACN,GAAG;IACH,KAAK;IACL,KAAK;IACL,GAAG;IACH,GAAG;IACH,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,kBAAkB;IASlB,kBAAkB;IAMlB,OAAO;IACP,eAAe;CAChB,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,uBAAuB;IAClC,KAAK;CACN,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,EAF/B,MAAM,EAQf,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,WAAW,EAH9C,MAG8C,GAF5C,OAAO,CAUnB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EALhC,MAKgC,EAAE,OAAO,QAAA,WAiBnD;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,OAAA,EAAE,OAAO,EAH5C,MAG4C,EAAE,aAAa,UAAO,OA4G5E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAJxC,MAIwC,EAAE,WAAW,AAH7D,CACA,EADQ,MAGqD,GAFnD,OAAO,CAiCnB;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,QAAA,EAAE,mBAAmB,OAAA,EAAE,OAAO,EAJ/D,MAI+D,WAezE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,SAAS,KAAA,OA8CvC"}
|
|
@@ -0,0 +1,56 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Outbound `user-agent` construction.
|
|
3
|
+
*
|
|
4
|
+
* Package registries police automated traffic through this header, and their
|
|
5
|
+
* requirements differ. GitHub rejects an absent one with a 403; crates.io
|
|
6
|
+
* rejects an absent one and additionally blocks a configurable list of exact
|
|
7
|
+
* strings and prefixes at the CDN edge; Packagist asks for a `mailto=` contact;
|
|
8
|
+
* PyPI asks for a value that uniquely identifies the consumer, with contact
|
|
9
|
+
* information; pub.dev documents a `name/version (+url)` shape. The default
|
|
10
|
+
* built here satisfies all of them at once.
|
|
11
|
+
*
|
|
12
|
+
* Two escape hatches exist for operators whose traffic a registry has taken
|
|
13
|
+
* issue with: `CDXGEN_USER_AGENT` replaces the header everywhere, and
|
|
14
|
+
* `CDXGEN_USER_AGENT_<REGISTRY>` replaces it for one destination.
|
|
15
|
+
*/
|
|
16
|
+
/**
|
|
17
|
+
* The registry key covering a host, if any.
|
|
18
|
+
*
|
|
19
|
+
* @param {String} hostname Lower-case hostname of the request
|
|
20
|
+
* @returns {String|undefined} Registry key such as `CRATES`, or undefined
|
|
21
|
+
*/
|
|
22
|
+
export declare function registryKeyForHost(hostname: string): string | undefined;
|
|
23
|
+
/**
|
|
24
|
+
* The default user-agent: `cdxgen/<version> (+<home url>; mailto=<address>)`.
|
|
25
|
+
* Setting CDXGEN_CONTACT_EMAIL substitutes a different address, which is what
|
|
26
|
+
* an operator running cdxgen at scale should do so that a registry contacts
|
|
27
|
+
* them rather than the project.
|
|
28
|
+
*
|
|
29
|
+
* The `@scope/name` npm spelling is deliberately avoided. crates.io blocks
|
|
30
|
+
* user-agents beginning `@CycloneDX/cdxgen` outright, and a leading `@` is
|
|
31
|
+
* unusual enough elsewhere to invite the same treatment.
|
|
32
|
+
*
|
|
33
|
+
* @returns {String} Default user-agent for outbound requests
|
|
34
|
+
*/
|
|
35
|
+
export declare function defaultUserAgent(): string;
|
|
36
|
+
/**
|
|
37
|
+
* The user-agent to send to a host. A `CDXGEN_USER_AGENT_<REGISTRY>` override
|
|
38
|
+
* wins for the hosts of that registry, then the global `CDXGEN_USER_AGENT`,
|
|
39
|
+
* then the default. Blank overrides are ignored: several registries reject an
|
|
40
|
+
* empty header outright, so falling back is safer than honouring it.
|
|
41
|
+
*
|
|
42
|
+
* @param {String} [hostname] Hostname the request is bound for
|
|
43
|
+
* @returns {String} User-agent header value
|
|
44
|
+
*/
|
|
45
|
+
export declare function getUserAgent(hostname?: string): string;
|
|
46
|
+
/**
|
|
47
|
+
* Whether a user-agent carries a substring that crates.io blocks. Useful for
|
|
48
|
+
* warning an operator whose override would be refused there.
|
|
49
|
+
*
|
|
50
|
+
* @param {String} userAgent User-agent value to test
|
|
51
|
+
* @returns {String|undefined} The offending substring, or undefined
|
|
52
|
+
*/
|
|
53
|
+
export declare function blockedUserAgentSubstring(userAgent: string): string | undefined;
|
|
54
|
+
/** Registry keys that `CDXGEN_USER_AGENT_<REGISTRY>` accepts. */
|
|
55
|
+
export declare const USER_AGENT_REGISTRY_KEYS: readonly string[];
|
|
56
|
+
//# sourceMappingURL=userAgent.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"userAgent.d.ts","sourceRoot":"","sources":["../../../lib/core/userAgent.js"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAwDH;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,QAAA,GAF9B,SAAO,SAAS,CAe5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,WAI/B;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,QAAQ,AAHlC,CACA,QAEkC,UAUpC;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,QAAA,GAFtC,SAAO,SAAS,CAU5B;AAED,iEAAiE;AACjE,eAAO,MAAM,wBAAwB,mBAEpC,CAAC"}
|
|
@@ -0,0 +1,75 @@
|
|
|
1
|
+
export type CargoCacheMetadata = {
|
|
2
|
+
/**
|
|
3
|
+
* Crate description.
|
|
4
|
+
*/
|
|
5
|
+
description?: string;
|
|
6
|
+
/**
|
|
7
|
+
* SPDX license expression.
|
|
8
|
+
*/
|
|
9
|
+
license?: string;
|
|
10
|
+
/**
|
|
11
|
+
* Source repository URL.
|
|
12
|
+
*/
|
|
13
|
+
repository?: string;
|
|
14
|
+
/**
|
|
15
|
+
* Homepage URL.
|
|
16
|
+
*/
|
|
17
|
+
homepage?: string;
|
|
18
|
+
/**
|
|
19
|
+
* Minimum supported Rust version.
|
|
20
|
+
*/
|
|
21
|
+
rustVersion?: string;
|
|
22
|
+
/**
|
|
23
|
+
* SHA-256 of the published `.crate` archive.
|
|
24
|
+
*/
|
|
25
|
+
checksum?: string;
|
|
26
|
+
/**
|
|
27
|
+
* Feature table.
|
|
28
|
+
*/
|
|
29
|
+
features?: Object;
|
|
30
|
+
/**
|
|
31
|
+
* Whether this version was yanked.
|
|
32
|
+
*/
|
|
33
|
+
yanked?: boolean;
|
|
34
|
+
/**
|
|
35
|
+
* RFC 3339 publish timestamp.
|
|
36
|
+
*/
|
|
37
|
+
publishTime?: string;
|
|
38
|
+
/**
|
|
39
|
+
* Newest non-yanked version in the index.
|
|
40
|
+
*/
|
|
41
|
+
latestVersion?: string;
|
|
42
|
+
/**
|
|
43
|
+
* Which local files answered, for provenance.
|
|
44
|
+
*/
|
|
45
|
+
sources: string[];
|
|
46
|
+
};
|
|
47
|
+
/**
|
|
48
|
+
* Reset memoized state. Tests that point `CARGO_HOME` at a fixture need the
|
|
49
|
+
* next call to look again rather than reuse the previous run's answer.
|
|
50
|
+
*
|
|
51
|
+
* @returns {void}
|
|
52
|
+
*/
|
|
53
|
+
export declare function resetCargoCacheState(): void;
|
|
54
|
+
/**
|
|
55
|
+
* Whether the local registry should be consulted before crates.io.
|
|
56
|
+
*
|
|
57
|
+
* @returns {boolean} false when `CARGO_METADATA_SOURCE=registry` opts out.
|
|
58
|
+
*/
|
|
59
|
+
export declare function localCargoMetadataEnabled(): boolean;
|
|
60
|
+
/**
|
|
61
|
+
* Resolve the Cargo registry root.
|
|
62
|
+
*
|
|
63
|
+
* @returns {string} Absolute path to `$CARGO_HOME/registry`.
|
|
64
|
+
*/
|
|
65
|
+
export declare function getCargoRegistryDir(): string;
|
|
66
|
+
/**
|
|
67
|
+
* Read everything the local registry knows about one crate version.
|
|
68
|
+
*
|
|
69
|
+
* @param {string} name Crate name.
|
|
70
|
+
* @param {string} version Exact version.
|
|
71
|
+
* @returns {CargoCacheMetadata|undefined} Metadata, or undefined when neither
|
|
72
|
+
* local source has this crate.
|
|
73
|
+
*/
|
|
74
|
+
export declare function readCargoCacheMetadata(name: string, version: string): CargoCacheMetadata | undefined;
|
|
75
|
+
//# sourceMappingURL=cargoCache.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"cargoCache.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/cargoCache.js"],"names":[],"mappings":"AAsCG,YAAkB,kBAAkB,GACpC;;;;IAAoB,WAAW,AAA/B,CACA,EADW,MAAM,CACjB;;;;IAAoB,OAAO,AAA3B,CACA,EADW,MAAM,CACjB;;;;IAAoB,UAAU,AAA9B,CACA,EADW,MAAM,CACjB;;;;IAAoB,QAAQ,AAA5B,CACA,EADW,MAAM,CACjB;;;;IAAoB,WAAW,AAA/B,CACA,EADW,MAAM,CACjB;;;;IAAoB,QAAQ,AAA5B,CACA,EADW,MAAM,CACjB;;;;IAAoB,QAAQ,AAA5B,CACA,EADW,MAAM,CACjB;;;;IAAqB,MAAM,AAA3B,CACA,EADW,OAAO,CAClB;;;;IAAoB,WAAW,AAA/B,CACA,EADW,MAAM,CACjB;;;;IAAoB,aAAa,AAAjC,CACA,EADW,MAAM,CACjB;;;;IAAqB,OAAO,EAAjB,MAAM,EAAE,CACrB;CAAA,CAAA;AAUD;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAFvB,IAAI,CAKhB;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,IAF5B,OAAO,CAOnB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,IAFtB,MAAM,CAOlB;AAkCD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EALhC,MAKgC,EAAE,OAAO,EAJzC,MAIyC,GAHvC,kBAAkB,GAAC,SAAS,CA0BxC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"caxa.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/caxa.js"],"names":[],"mappings":"AAMA;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAHlC,MAGkC,GAFhC,OAAO,CAAC,MAAM,CAAC,
|
|
1
|
+
{"version":3,"file":"caxa.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/caxa.js"],"names":[],"mappings":"AAMA;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAHlC,MAGkC,GAFhC,OAAO,CAAC,MAAM,CAAC,CA0E3B"}
|
|
@@ -17,9 +17,9 @@ export declare function getCppModules(src: string, options: object, osPkgsList:
|
|
|
17
17
|
"bom-ref": string;
|
|
18
18
|
group?: undefined;
|
|
19
19
|
} | {
|
|
20
|
+
purl?: undefined;
|
|
20
21
|
description?: undefined;
|
|
21
22
|
license?: undefined;
|
|
22
|
-
purl?: undefined;
|
|
23
23
|
"bom-ref"?: undefined;
|
|
24
24
|
group: any;
|
|
25
25
|
name: any;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cppEvidence.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/cppEvidence.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"cppEvidence.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/cppEvidence.js"],"names":[],"mappings":"AAgCA;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,GAAG,EALtB,MAKsB,EAAE,OAAO,EAJ/B,MAI+B,EAAE,UAAU,EAH3C,KAG2C,EAAE,QAAQ,EAFrD,KAEqD;;;;;;;;;;;;;;;;;;;;;;;;;EA8S/D"}
|
|
@@ -236,9 +236,23 @@ export declare function getGoPkgVCSUrl(group: string, name: string): Promise<any
|
|
|
236
236
|
/**
|
|
237
237
|
* Method to retrieve metadata for rust packages by querying crates
|
|
238
238
|
*
|
|
239
|
+
* The local Cargo registry is consulted first, because crates.io's crawler
|
|
240
|
+
* policy allows one request per second and a populated `~/.cargo` already
|
|
241
|
+
* holds the license, description, repository, checksum and yanked flag for
|
|
242
|
+
* every crate the build compiled.
|
|
243
|
+
*
|
|
244
|
+
* What it does not hold is publisher identity, so a caller that needs the
|
|
245
|
+
* publisher-drift and release-cadence signals — the predictive audit does —
|
|
246
|
+
* passes `preferLocalCache: false` and takes the slower registry path.
|
|
247
|
+
*
|
|
239
248
|
* @param {Array} pkgList Package list
|
|
249
|
+
* @param {Object} [options] Options
|
|
250
|
+
* @param {boolean} [options.preferLocalCache=true] Answer from the local Cargo
|
|
251
|
+
* registry where it can, and query crates.io only for the rest.
|
|
240
252
|
*/
|
|
241
|
-
export declare function getCratesMetadata(pkgList: any[]
|
|
253
|
+
export declare function getCratesMetadata(pkgList: any[], options?: {
|
|
254
|
+
preferLocalCache?: boolean;
|
|
255
|
+
}): Promise<any[]>;
|
|
242
256
|
/**
|
|
243
257
|
* Method to retrieve metadata for dart packages by querying pub.dev
|
|
244
258
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"ecosystems.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/ecosystems.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"ecosystems.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/ecosystems.js"],"names":[],"mappings":"AAmGA,eAAO,IAAI,cAAc,IAAK,CAAC;AAY/B;;;;GAIG;AACH,wBAAgB,mBAAmB,SAElC;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAAC,OAAO,EAH1C,MAAM,EAGoC,GAFxC,OAAO,CAAC,MAAM,EAAE,CAAC,CAmC7B;AAyBD;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,OAAO,OAAA,EAAE,WAAW,KAAA,kBAiGxD;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAL/B,MAK+B,EAAE,IAAI,EAJrC,MAIqC,EAAE,OAAO,EAH9C,MAG8C,GAF5C,MAAM,GAAC,IAAI,CAmIvB;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAClC,OAAO,OAAA,EACP,YAAY,GAPH,MAOQ,EACjB,KAAK,UAAQ,SA+Ed;AA4ND;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAA,UAGnE;AAED;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAA,GAF/D,MAAM,GAAC,SAAS,CA6B3B;AAgBD;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAA,GAFzD,OAAO,QAAQ,CAkB1B;AAED;;;;GAIG;AACH,wBAAgB,kCAAkC,CAAC,OAAO,EAF/C,MAAM,QAEyC,qBAUzD;AAED;;;;;;;;;GASG;AACH,wBAAsB,+BAA+B,CAAC,EACpD,SAAS,EACT,KAAK,EACL,IAAI,EACJ,OAAO,GACR,QAAA,GAPW,OAAO,QAAQ,CAc1B;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,YAAY,OAAA,EAAE,iBAAiB,EAF7D,GAE6D,OAwBvE;AA6BD;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,OAAO,OAAA,EAAE,aAAa,SAAA,kBA8PzD;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAJjC,MAIiC,EAAE,WAAW,GAH9C,MAG0D;;;;;;;;IAiIpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,SAAS,EAHzC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAGH,GAFvC,MAAM,CAQlB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAJtC,MAIsC,EAAE,UAAU,EAHlD,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAC,CAGD,GAFhD,IAAI,CAuBhB;AAiBD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,YAAY,EAH5C,MAG4C,GAF3C,SAAO,SAAS,CAqB3B;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,QAAA,GAF7B,QAAQ,CAQnB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,QAAA,EAAE,YAAY,EAHzC,MAGyC,GAFxC,SAAO,SAAS,CAc3B;AAmBD;;;;;;;;;;;;GAYG;AACH,wBAAsB,oBAAoB,CAAC,QAAQ,EAJxC,KAAK,CAAC,MAAM,GAAC,SAAS,CAIkB,GAFtC,OAAO,CAAC,IAAI,CAAC,CAqCzB;AAED;;GAEG;AACH,wBAAgB,wBAAwB,SAEvC;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAAC,OAAO,EALjC,MAKiC,EAAE,YAAY,AAJvD,CACA,EADQ,MAI+C,GAH7C,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAC,GAAC,SAAS,CAAC,CAkExE;AAYD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAJxC,KAAK,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAC,CAIG,GAFtC,OAAO,CAAC,IAAI,CAAC,CAwCzB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,SAEjC;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,YAAY,EAFvC,MAEuC,gBA2CjD;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,KAAK,QAAA,EAAE,IAAI,QAAA,gBAsB/C;AA2CD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,OAAA,EAAE,OAAO,AAJrD,CAGF,EAFE;IAA0B,gBAAgB,AAA1C,CAEF,EAFU,OAAO,CAEjB;CAC4D,kBAiJ5D;AAkFD;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,OAAO,OAAA,kBAiE5C;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAHtC,MAGsC,GAFpC,MAAM,GAAC,SAAS,CA6B5B;AAED;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EANpC,MAMoC,EAAE,OAAO,EAL7C,MAK6C,EAAE,YAAY,GAJ3D,MAIgE,kBAyY1E;AAqMD;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,OAAA,EAAE,YAAY,QAAY;;;GA2KvE"}
|
|
@@ -169,4 +169,24 @@ export declare function getMillCommand(srcPath: string): string;
|
|
|
169
169
|
* @param {string} rootPath Root directory to look for maven wrapper
|
|
170
170
|
*/
|
|
171
171
|
export declare function getMavenCommand(srcPath: string, rootPath: string): string;
|
|
172
|
+
/**
|
|
173
|
+
* Parse a Gradle version catalog (`gradle/libs.versions.toml`).
|
|
174
|
+
*
|
|
175
|
+
* A catalog declares coordinates the build scripts then reference by alias.
|
|
176
|
+
* It is a declaration, not a resolution: entries may go unused, and their
|
|
177
|
+
* versions may be references into the `[versions]` table. Because of that,
|
|
178
|
+
* catalog components are emitted only as a fallback when Gradle itself
|
|
179
|
+
* produced no dependency information, and every component carries a
|
|
180
|
+
* `cdx:gradle:catalog=true` property so consumers can tell declared catalog
|
|
181
|
+
* entries from a resolved graph.
|
|
182
|
+
*
|
|
183
|
+
* Only libraries whose version resolves to a literal (inline or via
|
|
184
|
+
* `version.ref`) are emitted; rich or unresolved versions would produce purls
|
|
185
|
+
* that identify no artifact. Plugins are skipped because they are build-time
|
|
186
|
+
* only.
|
|
187
|
+
*
|
|
188
|
+
* @param {string} catalogFile Path to `libs.versions.toml`
|
|
189
|
+
* @returns {Object[]} Package records for resolvable library entries
|
|
190
|
+
*/
|
|
191
|
+
export declare function parseGradleVersionCatalog(catalogFile: string): Object[];
|
|
172
192
|
//# sourceMappingURL=gradleutils.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"gradleutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/gradleutils.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"gradleutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/gradleutils.js"],"names":[],"mappings":"AAwCA;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAH7B,MAG6B,EAAE,QAAQ,EAFvC,MAAM,GAAC,IAEgC,UA2FjD;AAED;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CACzC,eAAe,EARN,MAAM,EAQA,EACf,iBAAiB,EARR,MAAM,EAQE,EACjB,yBAAyB,EARhB,MAAM,EAQU,EACzB,mBAAmB,EARV,GAQU,GANR,MAAM,EAAE,CA2CpB;AAcD;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAJ1C,MAI0C,EAAE,aAAa,EAHzD,MAAM,EAGmD,GAFvD,GAAG,CAqCf;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAFlC,MAEkC;;;EAsD5C;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAHpC,MAGoC,EAAE,gBAAgB,GAFtD,MAE6D;;;;;;;;EAoDvE;AAED;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAC7C,GAAG,EAPM,MAON,EACH,cAAc,EAPL,KAOK,EACd,SAAS,GAPA,KAOK,GALH,MAAM,CAuFlB;AAiBD;;;;;GAKG;AACH,wBAAgB,wBAAwB,IAF3B,IAAI,CAKhB;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,IAF7B,OAAO,CAInB;AAiGD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EANzC,MAMyC,EAAE,OAAO,GAJ1D;IAAyB,OAAO,AAAhC,CACA,EADQ,MAAM,CACd;IAAyB,aAAa,AAAtC,CACA,EADQ,MAAM,CACd;CAE+D,GAFrD,IAAI,CA+HhB;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,SAAS,EANA,MAMA,EACT,eAAe,GANN,MAMe,EACxB,aAAa,GANJ,GAMgB,EACzB,cAAc,GANL,MAMU;;;;;;;;;GAkPpB;AAED;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,EAJ1C,MAI0C,EAAE,QAAQ,EAHpD,MAGoD,GAFlD,MAAM,CAkDlB;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,gBAAgB,EAHjD,MAGiD,GAF/C,MAAM,CAkBlB;AAED;;;;;;;GAOG;AACH,wBAAgB,gCAAgC,CAAC,MAAM,EAH5C,MAG4C,GAF1C,MAAM,CAuBlB;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAHtC,MAGsC,GAFpC,MAAM,CA8ClB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,yBAAyB,CAC7C,UAAU,EAPD,MAOC,EACV,SAAS,EAPA,MAOA,EACT,QAAQ,GAPC,OAOM,EAAE,qCAAqC;AACtD,gBAAgB,GAPP,OAOe,GANb,OAAO,CAAC,MAAM,CAAC,CAgC3B;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAF3B,MAE2B,UAcrC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAH5B,MAG4B,EAAE,QAAQ,EAFtC,MAEsC,UA6JhD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,yBAAyB,CAAC,WAAW,EAH1C,MAG0C,GAFxC,MAAM,EAAE,CAoEpB"}
|
|
@@ -0,0 +1,73 @@
|
|
|
1
|
+
export declare function isKosiKotlinLanguage(language: any): boolean;
|
|
2
|
+
/**
|
|
3
|
+
* True when kosi is disabled by CDXGEN_KOSI_DISABLE (1/all/true) or --no-kosi.
|
|
4
|
+
* The check happens before any binary resolution so a disabled run never
|
|
5
|
+
* even looks for the plugin.
|
|
6
|
+
*/
|
|
7
|
+
export declare function kosiDisabled(): any;
|
|
8
|
+
/**
|
|
9
|
+
* Orchestrates the kosi runs over src and returns the parsed reports: one
|
|
10
|
+
* `all` pass (every slice kind, dependency tier) and one `reachable` pass
|
|
11
|
+
* (call-graph reachability from the roots). The analysis is read-only and
|
|
12
|
+
* offline: kosi never executes the project's build. A classpath.txt beside
|
|
13
|
+
* the sources (the documented build-tool report) is passed through when
|
|
14
|
+
* present.
|
|
15
|
+
*
|
|
16
|
+
* @param {string} src Directory to analyze.
|
|
17
|
+
* @param {Object} options Configuration options.
|
|
18
|
+
* @returns {Object|undefined} { report, reachableReport } or undefined.
|
|
19
|
+
*/
|
|
20
|
+
export declare function analyzeKosiProject(src: string, options?: Object): Object | undefined;
|
|
21
|
+
/**
|
|
22
|
+
* Merges the reachable pass's evidence into the all pass's maps, mutating
|
|
23
|
+
* the first argument.
|
|
24
|
+
*
|
|
25
|
+
* The reachable pass's slices are the all pass's INTERSECTED with call-graph
|
|
26
|
+
* reachability from the roots, so every key it produces is a key the all pass
|
|
27
|
+
* already has, and the unions below cannot add one. That made the second full
|
|
28
|
+
* `--backend resolved --deps` analysis — the most expensive thing this arm
|
|
29
|
+
* runs, and it runs it twice — contribute exactly nothing: the one fact it
|
|
30
|
+
* computes, reachability, was discarded at the merge (the P23 review's R144).
|
|
31
|
+
* It is recorded now, on the components whose evidence survived the
|
|
32
|
+
* intersection, which is the signal an SBOM consumer prioritises with. kosi's
|
|
33
|
+
* own schema deliberately stopped carrying `reachableFromRoots` per slice in
|
|
34
|
+
* P22 because there it was a mode-level fact wearing a per-slice field's
|
|
35
|
+
* clothes; here it is neither, it is the measured difference between two runs.
|
|
36
|
+
*/
|
|
37
|
+
export declare function mergeKosiEvidence(all: any, reachable: any): any;
|
|
38
|
+
/**
|
|
39
|
+
* Services evidence: kosi's outbound services[] rows are already
|
|
40
|
+
* CycloneDX-shaped.
|
|
41
|
+
*/
|
|
42
|
+
export declare function collectKosiServices(kosiReport?: {}, servicesMap?: {}): {};
|
|
43
|
+
/**
|
|
44
|
+
* INBOUND endpoints: kosi's apiEndpoints[] rows are the routes the analysed
|
|
45
|
+
* application itself serves, which `services[]` (kosi's OUTBOUND calls)
|
|
46
|
+
* does not carry. Without this the whole inbound surface — the path
|
|
47
|
+
* template, the framework that declared it, and above all whether anything
|
|
48
|
+
* authenticates it — stopped at the kosi report and never reached the
|
|
49
|
+
* SaaSBOM.
|
|
50
|
+
*
|
|
51
|
+
* One service per endpoint, named the way detectServicesFromOpenAPI names
|
|
52
|
+
* its own (`service-<path>-<method>`), so an OpenAPI spec and a kosi run
|
|
53
|
+
* over the same route converge on one entry instead of two.
|
|
54
|
+
*
|
|
55
|
+
* `authenticated` is left UNDEFINED when the endpoint declares no
|
|
56
|
+
* authentication: kosi's empty list means "nothing was declared here",
|
|
57
|
+
* which is not the same claim as "this route is unauthenticated", and
|
|
58
|
+
* cdxgen's own detectors use undefined for exactly that unknown.
|
|
59
|
+
*
|
|
60
|
+
* @param {Object} kosiReport The parsed JSON generated by kosi.
|
|
61
|
+
* @param {Object} servicesMap Map populated with detected service definitions
|
|
62
|
+
* @returns {Object} The mutated services map
|
|
63
|
+
*/
|
|
64
|
+
export declare function collectKosiApiEndpoints(kosiReport?: Object, servicesMap?: Object): Object;
|
|
65
|
+
export declare function collectKosiEvidence(kosiReport?: {}, components?: any[]): {
|
|
66
|
+
componentPropertiesMap: {};
|
|
67
|
+
cryptoComponents: any[];
|
|
68
|
+
cryptoGeneratePurls: {};
|
|
69
|
+
dataFlowFrames: {};
|
|
70
|
+
metadataProperties: any[];
|
|
71
|
+
purlLocationMap: {};
|
|
72
|
+
};
|
|
73
|
+
//# sourceMappingURL=kosi.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"kosi.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/kosi.js"],"names":[],"mappings":"AA+BA,wBAAgB,oBAAoB,CAAC,QAAQ,KAAA,WAE5C;AAED;;;;GAIG;AACH,wBAAgB,YAAY,QAQ3B;AA6DD;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAJ3B,MAI2B,EAAE,OAAO,GAHpC,MAGyC,GAFvC,MAAM,GAAC,SAAS,CAkD5B;AA0BD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,KAAA,EAAE,SAAS,KAAA,OA4B/C;AAusBD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,KAAK,EAAE,WAAW,KAAK,MAsEpE;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,GAJvC,MAI4C,EAAE,WAAW,GAHzD,MAG8D,GAF5D,MAAM,CAoFlB;AAiCD,wBAAgB,mBAAmB,CAAC,UAAU,KAAK,EAAE,UAAU,QAAK;;;;;;;EA2DnE"}
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Crystal parser for `shard.yml` and `shard.lock`.
|
|
3
|
+
*
|
|
4
|
+
* Shards resolves dependencies declared in `shard.yml` and records the
|
|
5
|
+
* resolved set in `shard.lock`, which pins each dependency's version and
|
|
6
|
+
* source repository. Both files are YAML and are read with the standard
|
|
7
|
+
* parser.
|
|
8
|
+
*
|
|
9
|
+
* No `crystal` purl type is registered, so shards are identified as generic
|
|
10
|
+
* packages carrying a `cdx:purl:proposedType=crystal` property, following
|
|
11
|
+
* the convention used for nix and zig. This keeps the BOM valid today and
|
|
12
|
+
* allows a mechanical migration if a type is registered upstream.
|
|
13
|
+
*/
|
|
14
|
+
/**
|
|
15
|
+
* Parse a Crystal project from `shard.yml` and optional `shard.lock`.
|
|
16
|
+
*
|
|
17
|
+
* @param {string} shardYmlFile Path to `shard.yml`
|
|
18
|
+
* @param {string} [shardLockFile] Path to `shard.lock`, if present
|
|
19
|
+
* @returns {{ pkgList: object[], dependencies: object[], parentComponent: object, rootInputs?: string[] }}
|
|
20
|
+
*/
|
|
21
|
+
export declare function parseShardsProject(shardYmlFile: string, shardLockFile?: string): {
|
|
22
|
+
pkgList: object[];
|
|
23
|
+
dependencies: object[];
|
|
24
|
+
parentComponent: object;
|
|
25
|
+
rootInputs?: string[];
|
|
26
|
+
};
|
|
27
|
+
//# sourceMappingURL=parsers-crystal.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"parsers-crystal.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-crystal.js"],"names":[],"mappings":"AAMA;;;;;;;;;;;;GAYG;AAEH;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAJpC,MAIoC,EAAE,aAAa,AAH3D,CACA,EADQ,MAGmD,GAFjD;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CA6FzG"}
|
|
@@ -1,3 +1,22 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Apply a version to a NuGet component so that the `version` field and the purl
|
|
3
|
+
* always agree.
|
|
4
|
+
*
|
|
5
|
+
* A .NET manifest can state a version that is not a version: an MSBuild property
|
|
6
|
+
* such as `$(JsonVersion)`, a range such as `[3.13.3,4.0)`, a wildcard such as
|
|
7
|
+
* `2.0.*`, or nothing at all. Such a declaration cannot go into a purl, so a
|
|
8
|
+
* component that kept it in `version` while its purl carried none described one
|
|
9
|
+
* package two ways. A scanner range matching on the versionless purl then reports
|
|
10
|
+
* every advisory published against the package name.
|
|
11
|
+
*
|
|
12
|
+
* The declaration is not lost: callers record it as `cdx:nuget:declared_version_range`.
|
|
13
|
+
*
|
|
14
|
+
* @param {Object} pkg Component to update in place. `name` must already be set.
|
|
15
|
+
* @param {String} [version] Version as stated or resolved, concrete or not
|
|
16
|
+
*
|
|
17
|
+
* @returns {Object} The same component
|
|
18
|
+
*/
|
|
19
|
+
export declare function applyNugetVersion(pkg: Object, version?: string): Object;
|
|
1
20
|
/**
|
|
2
21
|
* Method to parse .nupkg files
|
|
3
22
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"parsers-dotnet.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-dotnet.js"],"names":[],"mappings":"AAeA;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,SAAS,QAAA,GAF7B,MAAM,CAWlB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,SAAS,QAAA,EAAE,UAAU,QAAA,GAFxC,MAAM,
|
|
1
|
+
{"version":3,"file":"parsers-dotnet.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-dotnet.js"],"names":[],"mappings":"AAeA;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAL1B,MAK0B,EAAE,OAAO,AAJ3C,CAEA,QAE2C,GAFjC,MAAM,CAUlB;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,SAAS,QAAA,GAF7B,MAAM,CAWlB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,SAAS,QAAA,EAAE,UAAU,QAAA,GAFxC,MAAM,CAwKlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAP3B,MAO2B,EAAE,OAAO,EANpC,MAMoC,EAAE,eAAe,GALrD,MAK0D,GAFxD,MAAM,EAAE,CAiFpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,QAAA,GAHxC,MAAM,CA+ClB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,QAAA,EAAE,KAAK,GAN9C,MAMmD,GAHjD,MAAM,CAsBlB;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,QAAA,GAFvC,MAAM,CA2ClB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAC7B,UAAU,QAAA,EACV,QAAQ,QAAA,EACR,eAAe,GAXN,MAWW,EACpB,gBAAgB,UAAQ,EACxB,yBAAyB,GAXhB,MAWqB,EAC9B,eAAe,GAXN,MAWW,GART,MAAM,CAudlB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAJrC,MAIqC,EAAE,cAAc,EAHrD,MAGqD,GAFnD;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAAE,CAuP7D;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAJlC,MAIkC,EAAE,WAAW,EAH/C,MAG+C,GAF7C;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAkHjF;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,aAAa,EAJrC,MAIqC,EAAE,WAAW,EAHlD,MAGkD,GAFhD;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAAE,CAyH7D"}
|