@cdxgen/cdxgen 13.2.0 → 13.4.0

package/types/lib/ecosystems/sbtutils.d.ts

@@ -59,6 +59,14 @@ export declare function testUrlExists(url: string): Promise<boolean>;
  * @returns {string|null} local jar path or null
  */
 export declare function findLocalJarPath(group: string, name: string, version: string): string | null;
+/**
+ * Forget every memoised Coursier lookup, including misses. A long-lived
+ * process calls this per scan so that artifacts downloaded since the previous
+ * scan are found.
+ *
+ * @returns {void}
+ */
+export declare function resetSbtResolutionCaches(): void;
 /**
  * Resolve the repo/jar download URLs and optional hashes for a Maven coordinate.
  *
@@ -87,9 +95,12 @@ export declare function resolveJarDistribution(group: string, name: string, vers
  * coordinates, building a hierarchical dependency graph. Evicted packages and ranges are ignored.
  *
  * @param {string} sbtTreeFile Path to the sbt dependency tree output file
+ * @param {string} [srcFile] Build definition the tree was resolved from, named as the
+ *   identity source of every component. The tree file itself is a temporary file cdxgen
+ *   deletes after the scan, and naming it would make the BOM differ between two runs.
  * @returns {{ pkgList: Object[], dependenciesList: Object[] }}
  */
-export declare function parseSbtTree(sbtTreeFile: string): {
+export declare function parseSbtTree(sbtTreeFile: string, srcFile?: string): {
     pkgList: Object[];
     dependenciesList: Object[];
 };
@@ -100,7 +111,7 @@ export declare function parseSbtTree(sbtTreeFile: string): {
  */
 export declare function parseSbtLock(pkgLockFile: string): Promise<{
     group: any;
-    name: any;
+    name: string;
     version: any;
     _integrity: string;
     scope: string | undefined;
@@ -169,6 +180,34 @@ export declare function parseSbtProjects(stdout: string): {
     projects: string[];
     root: string | undefined;
 };
+/**
+ * Whether an sbt version is sbt 2 or later, the release candidates of sbt 2
+ * included: `2.0.0-RC12` is below `2.0.0` in semver order.
+ *
+ * @param {string|null|undefined} sbtVersion Version from project/build.properties
+ * @returns {boolean} True for sbt 2.x and later
+ */
+export declare function isSbt2Version(sbtVersion: string | null | undefined): boolean;
+/**
+ * Build the single command line an sbt 2 dependency tree session runs.
+ *
+ * sbt 2 joins separate command-line arguments into one command line, so the
+ * commands are joined with `;` and passed as one argument. sbt 2 ships the
+ * dependency tree tasks itself, and `dependencyTree / toFile` became
+ * `dependencyTree --out`, so every tree is written to its own file, the
+ * extra roots a tree may list included. The trees are not aggregated: the
+ * tree of an aggregating root would otherwise be overwritten by the trees of
+ * the projects it aggregates. Each tree is scoped to its project, so one
+ * unresolvable subproject cannot fail the others.
+ *
+ * @param {{project?: string, file: string}[]} trees The project id of each
+ *   tree, none for the current project, and the file it is written to
+ * @returns {string} The `;`-joined command line
+ */
+export declare function sbt2DependencyTreeCommand(trees: {
+    project?: string;
+    file: string;
+}[]): string;
 /**
  * Parse plugins.sbt files to extract sbt plugins as development dependencies.
  *
@@ -176,4 +215,51 @@ export declare function parseSbtProjects(stdout: string): {
  * @returns {Object[]} List of parsed dependency components
  */
 export declare function parseSbtPlugins(projectPath: string): Object[];
+/**
+ * The sbt launcher jar beside the `sbt.bat` on PATH, or under `SBT_HOME`.
+ * `SBT_LAUNCH_JAR` names one directly.
+ *
+ * @returns {string|undefined} Path of `sbt-launch.jar`
+ */
+export declare function sbtLaunchJar(): string | undefined;
+/**
+ * Split sbt arguments written for a POSIX shell into the arguments the shell
+ * would pass: whitespace separates them outside quotes, and single or double
+ * quotes group words without escapes, so a Windows path keeps its
+ * backslashes.
+ *
+ * @param {string[]} args Shell-quoted argument fragments
+ * @returns {string[]} The arguments
+ */
+export declare function splitSbtShellArgs(args: string[]): string[];
+/**
+ * The command line that starts sbt from its launcher jar. The options
+ * `sbt.bat` handles itself become what it makes of them: `-no-colors` and
+ * `-D` properties are JVM options, `-addPluginSbtFile` is sbt's own
+ * `--addPluginSbtFile`, and `-batch` and the thin client switches have no
+ * meaning there. The JVM options of `SBT_OPTS`, `JAVA_OPTS` and the build's
+ * `.jvmopts` are kept.
+ *
+ * @param {string[]} args Arguments as given to `sbt`
+ * @param {string} jar The sbt launcher jar
+ * @param {string} [dir] Build directory
+ * @returns {{ command: string, args: string[] }}
+ */
+export declare function sbtLauncherCommand(args: string[], jar: string, dir?: string): {
+    command: string;
+    args: string[];
+};
+/**
+ * Run sbt. On Windows, `sbt.bat` parses its arguments as batch syntax, which
+ * keeps the POSIX quoting of the commands and mangles quotes inside them, so
+ * sbt starts there from its launcher jar with each command one argument.
+ * Elsewhere, or without a launcher jar, sbt runs as given.
+ *
+ * @param {string} sbtCmd sbt executable
+ * @param {string[]} args sbt arguments
+ * @param {Object} options Spawn options, as for safeSpawnSync
+ * @param {boolean} [shellQuoted] Whether the arguments carry POSIX shell quoting
+ * @returns {Object} The spawn result
+ */
+export declare function sbtSpawnSync(sbtCmd: string, args: string[], options: Object, shellQuoted?: boolean): Object;
 //# sourceMappingURL=sbtutils.d.ts.map

package/types/lib/ecosystems/sbtutils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sbtutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/sbtutils.js"],"names":[],"mappings":"AAmEA;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAF/B,MAE+B,OAEzC;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAFpC,MAEoC,iBAa9C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CAAC,WAAW,EAH1B,MAG0B,EAAE,MAAM,EAFlC,MAEkC,iBAc5C;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAH9B,MAG8B,EAAE,mBAAmB,EAFnD,MAEmD,WAkB7D;AA0KD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EALlC,MAKkC,EAAE,IAAI,EAJxC,MAIwC,EAAE,OAAO,EAHjD,MAGiD,GAF/C,MAAM,GAAC,IAAI,CAIvB;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAH5B,MAG4B,GAF1B,OAAO,CAAC,OAAO,CAAC,CAuB5B;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAL3B,MAK2B,EAAE,IAAI,EAJjC,MAIiC,EAAE,OAAO,EAH1C,MAG0C,GAFxC,MAAM,GAAC,IAAI,CA+BvB;AAWD;;;;;;;;;;;;GAYG;AACH,wBAAsB,sBAAsB,CAAC,KAAK,EANvC,MAMuC,EAAE,IAAI,EAL7C,MAK6C,EAAE,OAAO,EAJtD,MAIsD,GAHpD,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,KAAK,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAC,CAAC,CAAA;CAAC,GAAC,IAAI,CAAC,CAmC3G;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAAC,WAAW,EAHnC,MAGmC,GAFjC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAAE,CA2M7D;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,WAAW,EAFnC,MAEmC;;;;;;;;;;;;;;;;;;;;;;;;KAoG7C;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAHpC,MAGoC,GAFlC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAC,IAAI,CA2BjE;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAHpC,MAGoC,GAFlC,MAAM,EAAE,CA2BpB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAJ5B,MAI4B,GAH1B;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAA;CAAC,CA6C1D;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAHhC,MAGgC,GAF9B,MAAM,EAAE,CAwDpB"}
+{"version":3,"file":"sbtutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/sbtutils.js"],"names":[],"mappings":"AA4EA;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAF/B,MAE+B,OAEzC;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAFpC,MAEoC,iBAa9C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CAAC,WAAW,EAH1B,MAG0B,EAAE,MAAM,EAFlC,MAEkC,iBAc5C;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAH9B,MAG8B,EAAE,mBAAmB,EAFnD,MAEmD,WAkB7D;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EALlC,MAKkC,EAAE,IAAI,EAJxC,MAIwC,EAAE,OAAO,EAHjD,MAGiD,GAF/C,MAAM,GAAC,IAAI,CAIvB;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAH5B,MAG4B,GAF1B,OAAO,CAAC,OAAO,CAAC,CAuB5B;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAL3B,MAK2B,EAAE,IAAI,EAJjC,MAIiC,EAAE,OAAO,EAH1C,MAG0C,GAFxC,MAAM,GAAC,IAAI,CA+BvB;AAYD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,IAF3B,IAAI,CAKhB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,sBAAsB,CAAC,KAAK,EANvC,MAMuC,EAAE,IAAI,EAL7C,MAK6C,EAAE,OAAO,EAJtD,MAIsD,GAHpD,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,KAAK,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAC,CAAC,CAAA;CAAC,GAAC,IAAI,CAAC,CAmC3G;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,YAAY,CAAC,WAAW,EANnC,MAMmC,EAAE,OAAO,AALpD,CAGA,EAHQ,MAK0D,GAFxD;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAAE,CAyM7D;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,WAAW,EAFnC,MAEmC;;;;;;;;;;;;;;;;;;;;;;;;KA+F7C;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAHpC,MAGoC,GAFlC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAC,IAAI,CA2BjE;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAHpC,MAGoC,GAFlC,MAAM,EAAE,CA2BpB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAJ5B,MAI4B,GAH1B;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAA;CAAC,CA6C1D;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAH7B,MAAM,GAAC,IAAI,GAAC,SAGiB,GAF3B,OAAO,CAInB;AAcD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAJpC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAC,EAII,GAFlC,MAAM,CAalB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAHhC,MAGgC,GAF9B,MAAM,EAAE,CAwDpB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,IAFf,MAAM,GAAC,SAAS,CAwB5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAH3B,MAAM,EAGqB,GAFzB,MAAM,EAAE,CAkCpB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAL5B,MAAM,EAKsB,EAAE,GAAG,EAJjC,MAIiC,EAAE,GAAG,AAH9C,CACA,EADQ,MAGsC,GAFpC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAoC/C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,MAAM,EANxB,MAMwB,EAAE,IAAI,EAL9B,MAAM,EAKwB,EAAE,OAAO,EAJvC,MAIuC,EAAE,WAAW,AAH5D,CACA,EADQ,OAG4D,GAF1D,MAAM,CAoBlB"}

package/types/lib/ecosystems/scalacliutils.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Parse the `//> using` directives of a scala-cli source file.
+ *
+ * @param {string} sourceFile Path of the source file
+ * @returns {{ scalaVersion: string|null, platform: string|null, nativeVersion: string|null, deps: Object[] }}
+ *   The declared scala version and platform, and the declared dependencies as
+ *   `{ group, artifact, version, cross, test }` entries, where `cross` is
+ *   `::`, `:::` or `none`
+ */
+export declare function parseScalaCliDirectives(sourceFile: string): {
+    scalaVersion: string | null;
+    platform: string | null;
+    nativeVersion: string | null;
+    deps: Object[];
+};
+/**
+ * Build a component for a scala-cli dependency in the sbt purl form: the
+ * Scala binary suffix is not part of the name, the platform suffix of the
+ * declared platform is, and the Scala binary version is recorded as
+ * cdx:scala:compilerVersion.
+ *
+ * @param {Object} dep Parsed dependency declaration
+ * @param {Object} project Directives of the file the dependency was declared in
+ * @param {string} sourceFile File the dependency was declared in
+ * @returns {Object|null} The component, or null for malformed declarations
+ */
+export declare function scalaCliComponent(dep: Object, project: Object, sourceFile: string): Object | null;
+/**
+ * Map a jar path of the Coursier cache to its Maven coordinates.
+ *
+ * Only the https cache layout with a well-known repository path segment is
+ * parsed; anything else returns null rather than guessing a group id.
+ *
+ * @param {string} jarPath Path of a jar in the Coursier cache
+ * @returns {{ group: string, name: string, version: string }|null} The coordinates
+ */
+export declare function coordinatesFromCoursierPath(jarPath: string): {
+    group: string;
+    name: string;
+    version: string;
+} | null;
+/**
+ * Collect the components a scala-cli project declares through its
+ * `//> using` directives.
+ *
+ * Transitive dependencies are added from the class path of
+ * `scala-cli compile --print-class-path` when dependency installation is
+ * allowed, by mapping the Coursier cache paths back to coordinates.
+ *
+ * @param {string} dirPath Directory of the scala-cli project
+ * @param {Object} options CLI options
+ * @returns {Object[]} Component list, empty when the project declares no
+ *   scala-cli directives
+ */
+export declare function collectScalaCliComponents(dirPath: string, options?: Object): Object[];
+//# sourceMappingURL=scalacliutils.d.ts.map

package/types/lib/ecosystems/scalacliutils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scalacliutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/scalacliutils.js"],"names":[],"mappings":"AAwCA;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EANvC,MAMuC,GALrC;IAAE,YAAY,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,aAAa,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAyD5G;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAL1B,MAK0B,EAAE,OAAO,EAJnC,MAImC,EAAE,UAAU,EAH/C,MAG+C,GAF7C,MAAM,GAAC,IAAI,CAuDvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAHxC,MAGwC,GAFtC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAC,IAAI,CAkCjE;AAsBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EALtC,MAKsC,EAAE,OAAO,GAJ/C,MAIoD,GAHlD,MAAM,EAAE,CAmGpB"}

package/types/lib/ecosystems/scalasem.d.ts

@@ -0,0 +1,311 @@
+export declare const JDK_OWNER_PREFIXES: string[];
+export declare const SCALA_STDLIB_ARTIFACTS: Set<string>;
+export declare function appendUniqueProperty(properties: any, name: any, value: any): void;
+export declare function addPropertyValue(map: any, key: any, name: any, value: any): void;
+export declare function addSetValue(map: any, key: any, value: any): void;
+/**
+ * True for every project type the Scala path serves, matching the alias list
+ * the BOM generators dispatch on.
+ *
+ * @param {string} language Project language or type.
+ * @returns {boolean}
+ */
+export declare function isScalasemLanguage(language: string): boolean;
+/**
+ * True when scalasem is turned off, through CDXGEN_SCALASEM_DISABLE or the
+ * --no-scalasem flag, which yargs carries as `scalasem: false`. Library code never reads
+ * process.argv for this.
+ *
+ * @param {Object} options CLI options.
+ * @returns {boolean}
+ */
+export declare function scalasemDisabled(options?: Object): boolean;
+/**
+ * The scalasem entry point: SCALASEM_CMD wins, then the scalasem.js inside
+ * the installed atom-parsetools package.
+ *
+ * @returns {string|undefined}
+ */
+export declare function resolveScalasemCommand(): string | undefined;
+/**
+ * Where the scalasem report is persisted. An absolute --semantics-slices-file
+ * keeps its directory; anything else lands in the evinse output directory, the
+ * same rule the atom slice writer follows.
+ *
+ * @param {Object} options CLI options carrying `output` and `semanticsSlicesFile`.
+ * @returns {string} Absolute report path.
+ */
+export declare function scalasemOutputFile(options?: Object): string;
+/**
+ * A version 1 semantics slice (the shape atom's scalasem wrote before schema
+ * version 2): keyed by .scala files with `usedTypes`, no `_meta.schemaVersion`.
+ *
+ * @param {Object} parsed Candidate slice.
+ * @returns {boolean}
+ */
+export declare function isV1SemanticsSlice(parsed: Object): boolean;
+/**
+ * Run scalasem over a Scala project and return its report, reusing a
+ * persisted version 2 report that belongs to this project and is newer than
+ * the input BOM.
+ *
+ * Failures are visible rather than silent: the reason is printed once, the
+ * run's diagnostics reach the caller as `cdx:scalasem:diagnostic` properties,
+ * and --fail-on-error claims the exit status. A version 1 slice of this
+ * project, at the path the user named or at the report path, is returned
+ * separately and never overwritten; the fresh report then goes to a
+ * temporary file.
+ *
+ * @param {string} src Project directory.
+ * @param {Object} options CLI options.
+ * @returns {Object|undefined} `{ report, reportFile, v1Slice, metadataProperties }`,
+ *   or undefined when the analyzer is disabled.
+ */
+export declare function analyzeScalaProject(src: string, options?: Object): Object | undefined;
+/**
+ * The `cdx:scalasem:*` metadata properties of one run: what produced the
+ * report, and what limited it.
+ *
+ * @param {Object|undefined} report Parsed scalasem report, when one exists.
+ * @param {Object[]} diagnostics Run diagnostics, from the report or the spawn.
+ * @returns {Object[]} Metadata properties.
+ */
+export declare function scalasemMetadataProperties(report: Object | undefined, diagnostics?: Object[]): Object[];
+export declare function sortedCsv(values: any): string | undefined;
+/**
+ * The platform a purl's artifact name targets: `_sjs1` is Scala.js,
+ * `_native0.x` is Scala Native, and neither is the JVM.
+ *
+ * @param {string} purl Package URL.
+ * @returns {"jvm"|"js"|"native"} Platform key.
+ */
+export declare function scalaPurlPlatform(purl: string): "jvm" | "js" | "native";
+/**
+ * The class and package index that joins scalasem symbols to component purls.
+ *
+ * Symbols are indexed from three sources in priority order: the classpath the
+ * report recorded (1), the `internal:Namespaces` properties of the components
+ * (2), and the jar namespace map cdxgen writes beside the BOM (3). A symbol an
+ * earlier source already attributed is never re-attributed by a later one.
+ *
+ * A jar answers for the classes it ships and for the packages it ships classes
+ * in directly, never for the parents of those packages: a library with one
+ * class under `scala.collection.compat` owns neither `scala.collection` nor
+ * `scala`. The JDK has no component, and neither do the project's own classes.
+ */
+export declare class ScalaJoinIndex {
+    classPurls: Map<any, any>;
+    packagePurls: Map<any, any>;
+    sourceBySymbol: Map<any, any>;
+    purlsBySource: Map<any, any>;
+    namespacesByPurl: Map<any, any>;
+    projectClasses: Set<any>;
+    projectPackages: Set<any>;
+    constructor();
+    hasNamespaces(purl: any): boolean;
+    /**
+     * Index the classes of one library: each class under its dotted name (a
+     * nested `Outer$Inner` also as `Outer.Inner`, an object `Foo$` as `Foo`),
+     * and the package each one sits in.
+     *
+     * @param {string} purl The owning component purl.
+     * @param {string[]} names Class names from the jar or the namespace property.
+     * @param {number} source The source priority, 1 to 3.
+     */
+    addNamespaces(purl: string, names: string[], source: number): void;
+    addSymbol(map: any, symbol: any, purl: any, source: any): void;
+    /**
+     * Record the classes the project defines, so that references to them, and
+     * to packages only the project fills, never join a library.
+     *
+     * @param {Object} report Parsed scalasem report.
+     */
+    addProjectDefinitions(report: Object): void;
+    /**
+     * Whether a symbol belongs to code the BOM has no component for: the JDK,
+     * or the project itself.
+     */
+    isUnowned(symbol: any): boolean;
+    /**
+     * The libraries that ship the class a symbol names: the longest dotted
+     * prefix of the symbol that is a class name, for a member or a nested type.
+     */
+    classOwners(symbol: any): any;
+    /**
+     * The libraries that ship classes directly in the package a symbol names or
+     * sits in. A package the project also fills is ambiguous and joins nothing,
+     * and `javax.` names join only through an exact class, since the JDK ships
+     * most of them.
+     */
+    packageOwners(symbol: any): any;
+    /**
+     * The purl owning a symbol: the class first, then the package it sits in,
+     * each narrowed to the module's own classpath and the file's platform, and
+     * kept only when a single owner remains.
+     *
+     * @param {string} symbol Fully qualified symbol from the report.
+     * @param {string|undefined} platform Platform of the referencing file.
+     * @param {Set<string>|undefined} allowedPurls Purls on the module's classpath.
+     * @returns {string|undefined} Component purl.
+     */
+    lookup(symbol: string, platform: string | undefined, allowedPurls: Set<string> | undefined): string | undefined;
+    /**
+     * The owners a stack is evidence for: every jar that ships the class, since
+     * which one served the call cannot be told from the source, or the single
+     * package owner when no jar lists the class.
+     */
+    lookupAll(symbol: any, platform: any, allowedPurls: any): any[];
+    /**
+     * Narrow candidate owners to what the referencing file can use. A module
+     * compiles against its own classpath: a library on it wins, and a library
+     * only other modules compile against does not qualify. A library on no
+     * module's classpath stays a candidate, since the report cannot list every
+     * jar (a locally published snapshot, say). The file's platform then picks
+     * among the JVM, Scala.js and Scala Native variants of one library.
+     */
+    narrow(candidates: any, platform: any, allowedPurls: any): any[];
+}
+/**
+ * Whether a report key names a source file entry. The schema keys file
+ * entries by their relative path, for Scala sources, scripts and the Java
+ * sources of a mixed module alike.
+ */
+export declare function isReportFileKey(key: any): boolean;
+/**
+ * Index the BOM components by their normalized Scala coordinates, both with
+ * and without the version, so a classpath jar, a namespace property and a map
+ * entry of the same library meet on one component. Each entry keeps the Scala
+ * binary version the component was built for, so the `_2.13` and `_3`
+ * artifacts of one library in a Maven build stay apart.
+ */
+export declare function componentCoordinateIndex(components?: any[]): {
+    byVersion: Map<any, any>;
+    withoutVersion: Map<any, any>;
+};
+/**
+ * The component a report classpath entry belongs to. Coordinates are
+ * normalized (`upickle_sjs1_3` and the purl name `upickle_sjs1` share a key),
+ * the entry's version and Scala binary version win, and a versionless match
+ * must have a single owner. A jar the BOM does not hold matches nothing: no
+ * component is invented.
+ *
+ * @returns {{component: Object, exact: boolean}|undefined} The component, and
+ *   whether its version is the one on the classpath.
+ */
+export declare function matchClasspathEntry(entry: any, { byVersion, withoutVersion }: {
+    byVersion: any;
+    withoutVersion: any;
+}, platform: any): {
+    component: Object;
+    exact: boolean;
+} | undefined;
+/**
+ * Build the symbol index from the three sources, reading each classpath jar
+ * once, and only for components that carry no namespaces yet.
+ *
+ * @param {Object} report Parsed scalasem report.
+ * @param {Object[]} components BOM components.
+ * @param {Object} jarNSMapping The jar namespace map cdxgen writes beside the BOM.
+ * @returns {Promise<ScalaJoinIndex>}
+ */
+export declare function buildScalaJoinIndex(report: Object, components: Object[], jarNSMapping: Object): Promise<ScalaJoinIndex>;
+export declare const SCALASEM_PROTOCOL_NAMES: Set<string>;
+export declare const SCALASEM_KEYSTORE_NAMES: Set<string>;
+export declare const SCALASEM_QUALIFIED_ALGORITHMS: Set<string>;
+export declare const SCALASEM_NO_OID_ALGORITHMS: Set<string>;
+/**
+ * The OID registry key for a canonical scalasem algorithm name, with the key
+ * size, mode, curve or padding when the name needs one. Names that have no
+ * key return undefined.
+ *
+ * @param {string} name Canonical algorithm name.
+ * @param {number} [keySize] Key size in bits, when the report carries one.
+ * @param {string} [mode] Block cipher mode, such as `GCM`.
+ * @param {string} [curve] Elliptic curve name.
+ * @param {string} [padding] JCA padding name.
+ * @returns {string|undefined} Registry key such as `aes256-GCM`.
+ */
+export declare function scalasemCryptoOidKey(name: string, keySize?: number, mode?: string, curve?: string, padding?: string): string | undefined;
+/**
+ * Project a scalasem report onto CycloneDX evidence: occurrences for the
+ * joined components, call stacks for the library sinks, namespaces for the
+ * components the classpath join read, and the run's metadata properties.
+ *
+ * @param {Object} report Parsed scalasem report.
+ * @param {Object[]} components BOM components.
+ * @param {Object} options CLI options; `scalaNamespaceMap` carries the jar
+ *   namespace map cdxgen wrote beside the BOM.
+ * @returns {Promise<Object>} The evidence maps `createEvinseFile` consumes.
+ */
+export declare function collectScalasemEvidence(report?: Object, components?: Object[], options?: Object): Promise<Object>;
+/**
+ * The component purl of the library a crypto finding names as its provider.
+ * Maven coordinates match on group and base artifact; the short aliases cover
+ * the providers the rules emit for libraries without a coordinate.
+ */
+export declare function scalasemProviderPurl(provider: any, components?: any[]): any;
+/**
+ * A JDBC address without what may carry credentials: userinfo, the Oracle
+ * `user/password@` prefix, URL parameters and the `;key=value` properties
+ * some drivers take. The report is sanitized already; this keeps the BOM
+ * safe from a report written by anything else.
+ *
+ * @param {string} value JDBC URL.
+ * @returns {string} The address part.
+ */
+export declare function sanitizeJdbcUrl(value: string): string;
+/**
+ * The host a service URL names, or the topic and JDBC scheme equivalents, so
+ * every outbound service is named after where it talks to rather than the
+ * client library it uses.
+ */
+export declare function scalasemServiceName(service: any): any;
+/**
+ * The endpoint a service row carries, normalized: a URL as its scheme and
+ * host, a host as it is, a topic as `client:topic`, a JDBC URL with its
+ * credentials and parameters dropped.
+ */
+export declare function scalasemServiceEndpoint(service: any): any;
+/**
+ * Outbound services: HTTP and websocket clients, data stores, messaging
+ * topics and cloud clients. Locations ride in
+ * `cdx:scalasem:service:location` properties because CycloneDX services
+ * carry no evidence field before 2.0; spec compatibility keeps the
+ * occurrences below that only at 2.0.
+ *
+ * @param {Object} report Parsed scalasem report.
+ * @param {Object} servicesMap Map populated with service definitions.
+ * @returns {Object} The mutated services map.
+ */
+export declare function collectScalasemServices(report?: Object, servicesMap?: Object): Object;
+/**
+ * Inbound endpoints, one service per route, named the way the OpenAPI reader
+ * names its own so the two converge on one entry for the same route.
+ *
+ * @param {Object} report Parsed scalasem report.
+ * @param {Object} servicesMap Map populated with service definitions.
+ * @returns {Object} The mutated services map.
+ */
+export declare function collectScalasemApiEndpoints(report?: Object, servicesMap?: Object): Object;
+/**
+ * The npm packages a Scala.js build bundles. scalajs-bundler installs them
+ * with a lock file under `target`, and a bundler workspace such as a Vite
+ * client keeps its own manifest and lock file beside the build. Their npm
+ * components join the BOM so the report's JavaScript module imports can be
+ * attributed to them. Only lock files name the installed versions, and a
+ * workspace counts only when its manifest uses Scala.js, so a documentation
+ * site or a tool's own `package.json` adds nothing.
+ *
+ * @param {string} src Project directory.
+ * @param {Object[]} pkgList Components the build tools reported.
+ * @param {Object} [options] CLI options; `exclude` is honoured.
+ * @returns {Promise<{components: Object[], roots: string[], dependencies: Object[]}>}
+ *   Npm components, the bom-refs the workspaces depend on directly, and the
+ *   lock files' dependency edges between the npm components.
+ */
+export declare function collectScalaJsNpmComponents(src: string, pkgList?: Object[], options?: Object): Promise<{
+    components: Object[];
+    roots: string[];
+    dependencies: Object[];
+}>;
+//# sourceMappingURL=scalasem.d.ts.map

package/types/lib/ecosystems/scalasem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scalasem.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/scalasem.js"],"names":[],"mappings":"AA+CA,eAAO,MAAM,kBAAkB,UAA4B,CAAC;AAM5D,eAAO,MAAM,sBAAsB,aAQjC,CAAC;AAEH,wBAAgB,oBAAoB,CAAC,UAAU,KAAA,EAAE,IAAI,KAAA,EAAE,KAAK,KAAA,QAY3D;AAED,wBAAgB,gBAAgB,CAAC,GAAG,KAAA,EAAE,GAAG,KAAA,EAAE,IAAI,KAAA,EAAE,KAAK,KAAA,QAMrD;AAED,wBAAgB,WAAW,CAAC,GAAG,KAAA,EAAE,GAAG,KAAA,EAAE,KAAK,KAAA,QAM1C;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAGgC,GAF9B,OAAO,CAMnB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAH7B,MAGkC,GAFhC,OAAO,CASnB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAFzB,MAAM,GAAC,SAAS,CAM5B;AAwBD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAH/B,MAGoC,GAFlC,MAAM,CAyBlB;AAuBD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAH9B,MAG8B,GAF5B,OAAO,CAOnB;AAiBD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAL5B,MAK4B,EAAE,OAAO,GAJrC,MAI0C,GAHxC,MAAM,GAAC,SAAS,CAmD5B;AA+KD;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EALG,MAAM,GAAC,SAKV,EACN,WAAW,GALF,MAAM,EAK+B,GAJnC,MAAM,EAAE,CAyDpB;AAED,wBAAgB,SAAS,CAAC,MAAM,KAAA,sBAI/B;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAH3B,MAG2B,GAFzB,KAAK,GAAC,IAAI,GAAC,QAAQ,CAc/B;AAcD;;;;;;;;;;;;GAYG;AACH,qBAAa,cAAc;IAElB,UAAU;IACV,YAAY;IACZ,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,cAAc;IACd,eAAe;IAPtB,cAQC;IAED,aAAa,CAAC,IAAI,KAAA,WAEjB;IAED;;;;;;;;OAQG;IACH,aAAa,CAAC,IAAI,EAJP,MAIO,EAAE,KAAK,EAHd,MAAM,EAGQ,EAAE,MAAM,EAFtB,MAEsB,QAgChC;IAED,SAAS,CAAC,GAAG,KAAA,EAAE,MAAM,KAAA,EAAE,IAAI,KAAA,EAAE,MAAM,KAAA,QAelC;IAED;;;;;OAKG;IACH,qBAAqB,CAAC,MAAM,EAFjB,MAEiB,QAiB3B;IAED;;;OAGG;IACH,SAAS,CAAC,MAAM,KAAA,WAWf;IAED;;;OAGG;IACH,WAAW,CAAC,MAAM,KAAA,OASjB;IAED;;;;;OAKG;IACH,aAAa,CAAC,MAAM,KAAA,OAanB;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,MAAM,EALF,MAKE,EAAE,QAAQ,EAJZ,MAAM,GAAC,SAIK,EAAE,YAAY,EAH1B,GAAG,CAAC,MAAM,CAAC,GAAC,SAGc,GAFxB,MAAM,GAAC,SAAS,CAoB5B;IAED;;;;OAIG;IACH,SAAS,CAAC,MAAM,KAAA,EAAE,QAAQ,KAAA,EAAE,YAAY,KAAA,SAcvC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,UAAU,KAAA,EAAE,QAAQ,KAAA,EAAE,YAAY,KAAA,SA4BxC;CACF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,KAAA,WAElC;AA4BD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,QAAK;;;EA8BvD;AAsBD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,KAAA,EACL,EAAE,SAAS,EAAE,cAAc,EAAE;;;CAAA,EAC7B,QAAQ,KAAA,GANG;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAC,GAAC,SAAS,CAmCzD;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EALrC,MAKqC,EAAE,UAAU,EAJjD,MAAM,EAI2C,EAAE,YAAY,EAH/D,MAG+D,GAF7D,OAAO,CAAC,cAAc,CAAC,CAkFnC;AAsFD,eAAO,MAAM,uBAAuB,aASlC,CAAC;AACH,eAAO,MAAM,uBAAuB,aAKlC,CAAC;AAGH,eAAO,MAAM,6BAA6B,aAUxC,CAAC;AACH,eAAO,MAAM,0BAA0B,aA0CrC,CAAC;AAqEH;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAP9B,MAO8B,EAAE,OAAO,AAN/C,CACA,EADQ,MAMuC,EAAE,IAAI,AALrD,CACA,EADQ,MAK6C,EAAE,KAAK,AAJ5D,CACA,EADQ,MAIoD,EAAE,OAAO,AAHrE,CACA,EADQ,MAG6D,GAF3D,MAAM,GAAC,SAAS,CA6C5B;AAgDD;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,GAPG,MAOE,EACX,UAAU,GAPD,MAAM,EAOA,EACf,OAAO,GAPE,MAOG,GALD,OAAO,CAAC,MAAM,CAAC,CAyE3B;AA+WD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,KAAA,EAAE,UAAU,QAAK,OA+B7D;AAkTD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAH1B,MAG0B,GAFxB,MAAM,CAmClB;AAaD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,KAAA,OAmB1C;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,KAAA,OAuB9C;AASD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,GAJnC,MAIwC,EAAE,WAAW,GAHrD,MAG0D,GAFxD,MAAM,CAmDlB;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,GAJvC,MAI4C,EAAE,WAAW,GAHzD,MAG8D,GAF5D,MAAM,CA6DlB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,2BAA2B,CAC/C,GAAG,EARM,MAQN,EACH,OAAO,GARE,MAAM,EAQH,EACZ,OAAO,AARN,CACA,EADQ,MAQG,GAPD,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAC,CAAC,CAqEpF"}

package/types/lib/ecosystems/terraformRegistry.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Enrich Terraform components in place. Never throws; a failed lookup leaves
+ * the component exactly as the offline pass produced it.
+ *
+ * @param {object[]} pkgList Components to enrich
+ * @returns {Promise<object[]>} The same package list
+ */
+export declare function getTerraformRegistryMetadata(pkgList: object[]): Promise<object[]>;
+//# sourceMappingURL=terraformRegistry.d.ts.map

package/types/lib/ecosystems/terraformRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terraformRegistry.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/terraformRegistry.js"],"names":[],"mappings":"AA4DA;;;;;;GAMG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAH/C,MAAM,EAGyC,GAF7C,OAAO,CAAC,MAAM,EAAE,CAAC,CAsI7B"}

package/types/lib/ecosystems/utils.d.ts

@@ -30,12 +30,12 @@ import { composePomXmlUrl, extractJarArchive, extractLicenseCommentFromPomXml, f
 import { getMavenCommand, getMillCommand } from "./gradleutils.js";
 import { createNpmWorkspacePurl } from "./npmutils.js";
 import { getCentralPackageVersions, getPropertyGroupTextNodes, parseCsPkgData, parseCsPkgLockData, parseCsProjAssetsData, parseCsProjData, parseDirectoryPackagesProps, parseNupkg, parseNuspecData, parsePaketLockData } from "./parsers-dotnet.js";
-import { getGoPkgComponent, parseGoListDep, parseGoModData, parseGoModGraph, parseGoModulesTxt, parseGoModWhy, parseGopkgData, parseGosumData, parseGoVersionData } from "./parsers-go.js";
+import { getGoPkgComponent, parseGoListDep, parseGoModData, parseGoModGraph, parseGoModulesTxt, parseGoModWhy, parseGopkgData, parseGosumData, parseGosumHashes, parseGoVersionData } from "./parsers-go.js";
 import { findPnpmPackagePath, getVersionNumPnpm, parseBowerJson, parseMinJs, parseNodeShrinkwrap, parsePackageJsonName, parsePkgJson, parsePkgLock, parsePnpmAliasRef, parsePnpmLock, parsePnpmWorkspace, parseYarnLock, parseYarnWorkspace, pnpmMetadata, splitCommandArgs, stripPnpmPeerSuffix, yarnLockToIdentMap } from "./parsers-js.js";
 import { parseBazelActionGraph, parseBazelBuild, parseBazelSkyframe, parseCljDep, parseEdnData, parseKVDep, parseLeinDep, parseLeiningenData, parseLeinMap, parseMavenTree, parseMavenTreeJson, parseMillDependency, parsePom } from "./parsers-jvm.js";
 import { buildObjectForCocoaPod, executeAlpmList, executeApkList, executeDpkgList, executeEqueryList, executePodCommand, executeRpmList, identifyFlow, parseBitbucketPipelinesFile, parseCabalData, parseCloudBuildData, parseCmakeDotFile, parseCmakeLikeFile, parseCocoaDependency, parseColliderLockData, parseComposerJson, parseComposerLock, parseConanData, parseConanLockData, parseContainerFile, parseContainerSpecData, parseCUsageSlice, parseFlakeLock, parseFlakeNix, parseGitHubWorkflowData, parseHelmYamlData, parseMakeDFile, parseMixLockData, parseOpenapiSpecData, parsePodfileLock, parsePodfileTargets, parsePrivadoFile, parsePubLockData, parsePubYamlData, parseSwiftJsonTree, parseSwiftJsonTreeObject, parseSwiftResolved, recurseImageNameLookup } from "./parsers-misc.js";
 import { derivePythonLockMetadataFileName, generatePixiLockFile, parseMojoProject, parsePiplockData, parsePixiLockFile, parsePixiTomlFile, parsePyLockData, parsePyProjectTomlFile, parsePyRequiresDist, parseReqEnvMarkers, parseReqFile, parseSetupPyFile } from "./parsers-python.js";
 import { parseCargoAuditableData, parseCargoData, parseCargoDependencyData, parseCargoManifestDependencyData, parseCargoTomlData } from "./parsers-rust.js";
 import { createUVLock, getPipFrozenTree, getPipTreeForPackages, getPyModules } from "./pythonutils.js";
-export { addEvidenceForDotnet, addLicenseText, adjustLicenseInformation, attachIdentityTools, BLOCKED_HOST_ERROR_CODE, buildObjectForCocoaPod, CARGO_CMD, CDXGEN_SPDX_CREATED_BY, CDXGEN_TEMP_DIR, CDXGEN_VERSION, CLJ_CMD, cdxgenAgent, checksumFile, collectExecutables, collectJarNS, collectMvnDependencies, collectSharedLibs, commandsExecuted, componentSorter, composePomXmlUrl, convertJarNSToPackages, convertOSQueryResults, createBlockedHostError, createDryRunError, createNpmWorkspacePurl, createUVLock, DEBUG_MODE, DOTNET_CMD, DRY_RUN_ERROR_CODE, derivePythonLockMetadataFileName, dirNameStr, encodeForPurl, executeAlpmList, executeApkList, executeAtom, executeDpkgList, executeEqueryList, executePodCommand, executeRpmList, extractJarArchive, extractLicenseCommentFromPomXml, extractPathEnv, extractToolRefs, FETCH_LICENSE, fetchPomXml, fetchPomXmlAsJson, findAppModules, findLicenseId, findLocalMvnArtifact, findPnpmPackagePath, frameworksList, GCC_CMD, GO_CMD, generatePixiLockFile, getAllFiles, getAllFilesWithIgnore, getAtomCommand, getCentralPackageVersions, getCratesMetadata, getDartMetadata, getDefaultBomAuditCategories, getGithubUrlParts, getGoPkgComponent, getGoPkgLicense, getJarClasses, getJavaCommand, getKnownLicense, getLicenses, getMavenCommand, getMillCommand, getMvnMetadata, getNpmMetadata, getNugetMetadata, getOSPackageForFile, getPipFrozenTree, getPipTreeForPackages, getPomPropertiesFromMavenDir, getPropertyGroupTextNodes, getPyMetadata, getPyModules, getPythonCommand, getRecordedActivities, getRepoLicense, getRuntimeInformation, getSwiftPackageMetadata, getTimestamp, getTmpDir, getVersionNumPnpm, guessLicenseId, guessPypiMatchingVersion, hasAnyProjectType, hasDangerousUnicode, identifyFlow, includeMavenTestScope, inferJarGroupFromManifest, isAllowedHttpHost, isBun, isDeno, isDryRun, isDryRunError, isFeatureEnabled, isMac, isNode, isPackageManagerAllowed, isPartialTree, isSecureMode, isSensitiveEnvironmentVariableName, isSpdxLicenseExpression, isValidDriveRoot, isValidIriReference, isWin, JAVA_CMD, LEIN_CMD, locateGenericPackage, MAX_BUFFER, mapConanPkgRefToPurlStringAndNameAndVersion, metadata_cache, multiChecksumFile, NODE_CMD, NPM_CMD, PACKAGE_MANAGER_ALIASES, PREFER_MAVEN_DEPS_TREE, PROJECT_TYPE_ALIASES, PYTHON_CMD, PYTHON_EXCLUDED_COMPONENTS, parseBazelActionGraph, parseBazelBuild, parseBazelSkyframe, parseBdistMetadata, parseBitbucketPipelinesFile, parseBowerJson, parseCabalData, parseCargoAuditableData, parseCargoData, parseCargoDependencyData, parseCargoManifestDependencyData, parseCargoTomlData, parseCljDep, parseCloudBuildData, parseCmakeDotFile, parseCmakeLikeFile, parseCocoaDependency, parseColliderLockData, parseComposerJson, parseComposerLock, parseConanData, parseConanLockData, parseContainerFile, parseContainerSpecData, parseCsPkgData, parseCsPkgLockData, parseCsProjAssetsData, parseCsProjData, parseCUsageSlice, parseDirectoryPackagesProps, parseEdnData, parseFlakeLock, parseFlakeNix, parseGitHubWorkflowData, parseGoListDep, parseGoModData, parseGoModGraph, parseGoModulesTxt, parseGoModWhy, parseGopkgData, parseGosumData, parseGoVersionData, parseHelmYamlData, parseJarManifest, parseKVDep, parseLeinDep, parseLeiningenData, parseLeinMap, parseLicenseEntryOrArrayFromPomXml, parseMakeDFile, parseMavenArgs, parseMavenTree, parseMavenTreeJson, parseMillDependency, parseMinJs, parseMixLockData, parseMojoProject, parseNodeShrinkwrap, parseNupkg, parseNuspecData, parseOpenapiSpecData, parsePackageJsonName, parsePaketLockData, parsePiplockData, parsePixiLockFile, parsePixiTomlFile, parsePkgJson, parsePkgLock, parsePnpmAliasRef, parsePnpmLock, parsePnpmWorkspace, parsePodfileLock, parsePodfileTargets, parsePom, parsePomProperties, parsePomXml, parsePrivadoFile, parsePubLockData, parsePubYamlData, parsePyLockData, parsePyProjectTomlFile, parsePyRequiresDist, parseReqEnvMarkers, parseReqFile, parseSetupPyFile, parseSwiftJsonTree, parseSwiftJsonTreeObject, parseSwiftResolved, parseYarnLock, parseYarnWorkspace, pnpmMetadata, purlFromUrlString, RUBY_CMD, RUSTC_CMD, readEnvironmentVariable, readLicenseText, readZipEntry, recomputeScope, recordActivity, recordDecisionActivity, recordDiscoveryActivity, recordEnvironmentRead, recordObservedActivity, recordPolicyActivity, recordSensitiveFileRead, recordSymlinkResolution, recurseImageNameLookup, remoteHostsAccessed, repoMetadataToGitHubApiUrl, resetActivityContext, resetRecordedActivities, retrieveCdxgenPluginVersion, retrieveCdxgenVersion, SEARCH_MAVEN_ORG, SWIFT_CMD, safeCopyFileSync, safeExistsSync, safeExtractArchive, safeMkdirSync, safeMkdtempSync, safeRmSync, safeSpawnSync, safeUnlinkSync, safeWriteSync, setActivityContext, setDryRunMode, shouldFetchLicense, shouldFetchPackageMetadata, shouldFetchVCS, shouldRunPredictiveBomAudit, splitCommandArgs, stripPnpmPeerSuffix, TABLE_BORDER_STYLE, TIMEOUT_MS, toCamel, toGitHubApiUrl, trimJarGroupSuffix, YARN_CMD, yarnLockToIdentMap, };
+export { addEvidenceForDotnet, addLicenseText, adjustLicenseInformation, attachIdentityTools, BLOCKED_HOST_ERROR_CODE, buildObjectForCocoaPod, CARGO_CMD, CDXGEN_SPDX_CREATED_BY, CDXGEN_TEMP_DIR, CDXGEN_VERSION, CLJ_CMD, cdxgenAgent, checksumFile, collectExecutables, collectJarNS, collectMvnDependencies, collectSharedLibs, commandsExecuted, componentSorter, composePomXmlUrl, convertJarNSToPackages, convertOSQueryResults, createBlockedHostError, createDryRunError, createNpmWorkspacePurl, createUVLock, DEBUG_MODE, DOTNET_CMD, DRY_RUN_ERROR_CODE, derivePythonLockMetadataFileName, dirNameStr, encodeForPurl, executeAlpmList, executeApkList, executeAtom, executeDpkgList, executeEqueryList, executePodCommand, executeRpmList, extractJarArchive, extractLicenseCommentFromPomXml, extractPathEnv, extractToolRefs, FETCH_LICENSE, fetchPomXml, fetchPomXmlAsJson, findAppModules, findLicenseId, findLocalMvnArtifact, findPnpmPackagePath, frameworksList, GCC_CMD, GO_CMD, generatePixiLockFile, getAllFiles, getAllFilesWithIgnore, getAtomCommand, getCentralPackageVersions, getCratesMetadata, getDartMetadata, getDefaultBomAuditCategories, getGithubUrlParts, getGoPkgComponent, getGoPkgLicense, getJarClasses, getJavaCommand, getKnownLicense, getLicenses, getMavenCommand, getMillCommand, getMvnMetadata, getNpmMetadata, getNugetMetadata, getOSPackageForFile, getPipFrozenTree, getPipTreeForPackages, getPomPropertiesFromMavenDir, getPropertyGroupTextNodes, getPyMetadata, getPyModules, getPythonCommand, getRecordedActivities, getRepoLicense, getRuntimeInformation, getSwiftPackageMetadata, getTimestamp, getTmpDir, getVersionNumPnpm, guessLicenseId, guessPypiMatchingVersion, hasAnyProjectType, hasDangerousUnicode, identifyFlow, includeMavenTestScope, inferJarGroupFromManifest, isAllowedHttpHost, isBun, isDeno, isDryRun, isDryRunError, isFeatureEnabled, isMac, isNode, isPackageManagerAllowed, isPartialTree, isSecureMode, isSensitiveEnvironmentVariableName, isSpdxLicenseExpression, isValidDriveRoot, isValidIriReference, isWin, JAVA_CMD, LEIN_CMD, locateGenericPackage, MAX_BUFFER, mapConanPkgRefToPurlStringAndNameAndVersion, metadata_cache, multiChecksumFile, NODE_CMD, NPM_CMD, PACKAGE_MANAGER_ALIASES, PREFER_MAVEN_DEPS_TREE, PROJECT_TYPE_ALIASES, PYTHON_CMD, PYTHON_EXCLUDED_COMPONENTS, parseBazelActionGraph, parseBazelBuild, parseBazelSkyframe, parseBdistMetadata, parseBitbucketPipelinesFile, parseBowerJson, parseCabalData, parseCargoAuditableData, parseCargoData, parseCargoDependencyData, parseCargoManifestDependencyData, parseCargoTomlData, parseCljDep, parseCloudBuildData, parseCmakeDotFile, parseCmakeLikeFile, parseCocoaDependency, parseColliderLockData, parseComposerJson, parseComposerLock, parseConanData, parseConanLockData, parseContainerFile, parseContainerSpecData, parseCsPkgData, parseCsPkgLockData, parseCsProjAssetsData, parseCsProjData, parseCUsageSlice, parseDirectoryPackagesProps, parseEdnData, parseFlakeLock, parseFlakeNix, parseGitHubWorkflowData, parseGoListDep, parseGoModData, parseGoModGraph, parseGoModulesTxt, parseGoModWhy, parseGopkgData, parseGosumData, parseGosumHashes, parseGoVersionData, parseHelmYamlData, parseJarManifest, parseKVDep, parseLeinDep, parseLeiningenData, parseLeinMap, parseLicenseEntryOrArrayFromPomXml, parseMakeDFile, parseMavenArgs, parseMavenTree, parseMavenTreeJson, parseMillDependency, parseMinJs, parseMixLockData, parseMojoProject, parseNodeShrinkwrap, parseNupkg, parseNuspecData, parseOpenapiSpecData, parsePackageJsonName, parsePaketLockData, parsePiplockData, parsePixiLockFile, parsePixiTomlFile, parsePkgJson, parsePkgLock, parsePnpmAliasRef, parsePnpmLock, parsePnpmWorkspace, parsePodfileLock, parsePodfileTargets, parsePom, parsePomProperties, parsePomXml, parsePrivadoFile, parsePubLockData, parsePubYamlData, parsePyLockData, parsePyProjectTomlFile, parsePyRequiresDist, parseReqEnvMarkers, parseReqFile, parseSetupPyFile, parseSwiftJsonTree, parseSwiftJsonTreeObject, parseSwiftResolved, parseYarnLock, parseYarnWorkspace, pnpmMetadata, purlFromUrlString, RUBY_CMD, RUSTC_CMD, readEnvironmentVariable, readLicenseText, readZipEntry, recomputeScope, recordActivity, recordDecisionActivity, recordDiscoveryActivity, recordEnvironmentRead, recordObservedActivity, recordPolicyActivity, recordSensitiveFileRead, recordSymlinkResolution, recurseImageNameLookup, remoteHostsAccessed, repoMetadataToGitHubApiUrl, resetActivityContext, resetRecordedActivities, retrieveCdxgenPluginVersion, retrieveCdxgenVersion, SEARCH_MAVEN_ORG, SWIFT_CMD, safeCopyFileSync, safeExistsSync, safeExtractArchive, safeMkdirSync, safeMkdtempSync, safeRmSync, safeSpawnSync, safeUnlinkSync, safeWriteSync, setActivityContext, setDryRunMode, shouldFetchLicense, shouldFetchPackageMetadata, shouldFetchVCS, shouldRunPredictiveBomAudit, splitCommandArgs, stripPnpmPeerSuffix, TABLE_BORDER_STYLE, TIMEOUT_MS, toCamel, toGitHubApiUrl, trimJarGroupSuffix, YARN_CMD, yarnLockToIdentMap, };
 //# sourceMappingURL=utils.d.ts.map

package/types/lib/ecosystems/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/utils.js"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,sBAAsB,EACtB,iBAAiB,EACjB,UAAU,EACV,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,QAAQ,EACR,aAAa,EACb,YAAY,EACZ,kCAAkC,EAClC,uBAAuB,EACvB,cAAc,EACd,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,EAClB,aAAa,EACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,SAAS,EACT,sBAAsB,EACtB,eAAe,EACf,OAAO,EACP,UAAU,EACV,cAAc,EACd,aAAa,EACb,OAAO,EACP,MAAM,EACN,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,KAAK,EACL,MAAM,EACN,gBAAgB,EAChB,MAAM,EACN,uBAAuB,EACvB,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,UAAU,EACV,0BAA0B,EAC1B,cAAc,EACd,QAAQ,EACR,SAAS,EACT,gBAAgB,EAChB,SAAS,EACT,kBAAkB,EAClB,0BAA0B,EAC1B,cAAc,EACd,2BAA2B,EAC3B,kBAAkB,EAClB,QAAQ,EACT,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,qBAAqB,EACrB,YAAY,EACZ,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,UAAU,EACV,aAAa,EACb,cAAc,EACd,aAAa,EACb,UAAU,EACX,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,UAAU,EACV,KAAK,EACL,gBAAgB,EAChB,KAAK,EACL,OAAO,EACR,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EACL,WAAW,EACX,cAAc,EACd,cAAc,EACf,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EACL,YAAY,EACZ,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,aAAa,EACb,4BAA4B,EAC5B,yBAAyB,EACzB,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,kBAAkB,EACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,qBAAqB,EACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,2CAA2C,EAC3C,iBAAiB,EAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,aAAa,EACb,eAAe,EACf,WAAW,EACX,cAAc,EACd,uBAAuB,EACvB,eAAe,EAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,+BAA+B,EAC/B,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,uBAAuB,EACvB,wBAAwB,EACxB,cAAc,EACd,kBAAkB,EAClB,kCAAkC,EAClC,0BAA0B,EAC1B,cAAc,EACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,2BAA2B,EAC3B,UAAU,EACV,eAAe,EACf,kBAAkB,EACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,cAAc,EACd,kBAAkB,EACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,UAAU,EACV,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,QAAQ,EACT,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,2BAA2B,EAC3B,cAAc,EACd,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,uBAAuB,EACvB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,kBAAkB,EAClB,sBAAsB,EACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gCAAgC,EAChC,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,gCAAgC,EAChC,kBAAkB,EACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,YAAY,EACb,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,SAAS,EACT,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,OAAO,EACP,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,sBAAsB,EACtB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,EACtB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,gCAAgC,EAChC,UAAU,EACV,aAAa,EACb,eAAe,EACf,cAAc,EACd,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,+BAA+B,EAC/B,cAAc,EACd,eAAe,EACf,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,OAAO,EACP,MAAM,EACN,oBAAoB,EACpB,WAAW,EACX,qBAAqB,EACrB,cAAc,EACd,yBAAyB,EACzB,iBAAiB,EACjB,eAAe,EACf,4BAA4B,EAC5B,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,cAAc,EACd,eAAe,EACf,WAAW,EACX,eAAe,EACf,cAAc,EACd,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,qBAAqB,EACrB,4BAA4B,EAC5B,yBAAyB,EACzB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,YAAY,EACZ,SAAS,EACT,iBAAiB,EACjB,cAAc,EACd,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,qBAAqB,EACrB,yBAAyB,EACzB,iBAAiB,EACjB,KAAK,EACL,MAAM,EACN,QAAQ,EACR,aAAa,EACb,gBAAgB,EAChB,KAAK,EACL,MAAM,EACN,uBAAuB,EACvB,aAAa,EACb,YAAY,EACZ,kCAAkC,EAClC,uBAAuB,EACvB,gBAAgB,EAChB,mBAAmB,EACnB,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,oBAAoB,EACpB,UAAU,EACV,2CAA2C,EAC3C,cAAc,EACd,iBAAiB,EACjB,QAAQ,EACR,OAAO,EACP,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,UAAU,EACV,0BAA0B,EAC1B,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,2BAA2B,EAC3B,cAAc,EACd,cAAc,EACd,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,gCAAgC,EAChC,kBAAkB,EAClB,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,2BAA2B,EAC3B,YAAY,EACZ,cAAc,EACd,aAAa,EACb,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,kCAAkC,EAClC,cAAc,EACd,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,UAAU,EACV,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,QAAQ,EACR,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,QAAQ,EACR,SAAS,EACT,uBAAuB,EACvB,eAAe,EACf,YAAY,EACZ,cAAc,EACd,cAAc,EACd,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACnB,0BAA0B,EAC1B,oBAAoB,EACpB,uBAAuB,EACvB,2BAA2B,EAC3B,qBAAqB,EACrB,gBAAgB,EAChB,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,UAAU,EACV,aAAa,EACb,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,0BAA0B,EAC1B,cAAc,EACd,2BAA2B,EAC3B,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EACV,OAAO,EACP,cAAc,EACd,kBAAkB,EAClB,QAAQ,EACR,kBAAkB,GACnB,CAAC"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/utils.js"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,sBAAsB,EACtB,iBAAiB,EACjB,UAAU,EACV,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,QAAQ,EACR,aAAa,EACb,YAAY,EACZ,kCAAkC,EAClC,uBAAuB,EACvB,cAAc,EACd,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,EAClB,aAAa,EACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,SAAS,EACT,sBAAsB,EACtB,eAAe,EACf,OAAO,EACP,UAAU,EACV,cAAc,EACd,aAAa,EACb,OAAO,EACP,MAAM,EACN,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,KAAK,EACL,MAAM,EACN,gBAAgB,EAChB,MAAM,EACN,uBAAuB,EACvB,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,UAAU,EACV,0BAA0B,EAC1B,cAAc,EACd,QAAQ,EACR,SAAS,EACT,gBAAgB,EAChB,SAAS,EACT,kBAAkB,EAClB,0BAA0B,EAC1B,cAAc,EACd,2BAA2B,EAC3B,kBAAkB,EAClB,QAAQ,EACT,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,qBAAqB,EACrB,YAAY,EACZ,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,UAAU,EACV,aAAa,EACb,cAAc,EACd,aAAa,EACb,UAAU,EACX,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,UAAU,EACV,KAAK,EACL,gBAAgB,EAChB,KAAK,EACL,OAAO,EACR,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EACL,WAAW,EACX,cAAc,EACd,cAAc,EACf,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EACL,YAAY,EACZ,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,aAAa,EACb,4BAA4B,EAC5B,yBAAyB,EACzB,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,kBAAkB,EACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,qBAAqB,EACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,2CAA2C,EAC3C,iBAAiB,EAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,aAAa,EACb,eAAe,EACf,WAAW,EACX,cAAc,EACd,uBAAuB,EACvB,eAAe,EAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,+BAA+B,EAC/B,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,uBAAuB,EACvB,wBAAwB,EACxB,cAAc,EACd,kBAAkB,EAClB,kCAAkC,EAClC,0BAA0B,EAC1B,cAAc,EACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,2BAA2B,EAC3B,UAAU,EACV,eAAe,EACf,kBAAkB,EACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,UAAU,EACV,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,QAAQ,EACT,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,2BAA2B,EAC3B,cAAc,EACd,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,uBAAuB,EACvB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,kBAAkB,EAClB,sBAAsB,EACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gCAAgC,EAChC,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,gCAAgC,EAChC,kBAAkB,EACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,YAAY,EACb,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,SAAS,EACT,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,OAAO,EACP,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,sBAAsB,EACtB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,EACtB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,gCAAgC,EAChC,UAAU,EACV,aAAa,EACb,eAAe,EACf,cAAc,EACd,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,+BAA+B,EAC/B,cAAc,EACd,eAAe,EACf,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,OAAO,EACP,MAAM,EACN,oBAAoB,EACpB,WAAW,EACX,qBAAqB,EACrB,cAAc,EACd,yBAAyB,EACzB,iBAAiB,EACjB,eAAe,EACf,4BAA4B,EAC5B,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,cAAc,EACd,eAAe,EACf,WAAW,EACX,eAAe,EACf,cAAc,EACd,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,qBAAqB,EACrB,4BAA4B,EAC5B,yBAAyB,EACzB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,YAAY,EACZ,SAAS,EACT,iBAAiB,EACjB,cAAc,EACd,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,qBAAqB,EACrB,yBAAyB,EACzB,iBAAiB,EACjB,KAAK,EACL,MAAM,EACN,QAAQ,EACR,aAAa,EACb,gBAAgB,EAChB,KAAK,EACL,MAAM,EACN,uBAAuB,EACvB,aAAa,EACb,YAAY,EACZ,kCAAkC,EAClC,uBAAuB,EACvB,gBAAgB,EAChB,mBAAmB,EACnB,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,oBAAoB,EACpB,UAAU,EACV,2CAA2C,EAC3C,cAAc,EACd,iBAAiB,EACjB,QAAQ,EACR,OAAO,EACP,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,UAAU,EACV,0BAA0B,EAC1B,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,2BAA2B,EAC3B,cAAc,EACd,cAAc,EACd,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,gCAAgC,EAChC,kBAAkB,EAClB,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,2BAA2B,EAC3B,YAAY,EACZ,cAAc,EACd,aAAa,EACb,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,kCAAkC,EAClC,cAAc,EACd,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,UAAU,EACV,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,QAAQ,EACR,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,QAAQ,EACR,SAAS,EACT,uBAAuB,EACvB,eAAe,EACf,YAAY,EACZ,cAAc,EACd,cAAc,EACd,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACnB,0BAA0B,EAC1B,oBAAoB,EACpB,uBAAuB,EACvB,2BAA2B,EAC3B,qBAAqB,EACrB,gBAAgB,EAChB,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,UAAU,EACV,aAAa,EACb,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,0BAA0B,EAC1B,cAAc,EACd,2BAA2B,EAC3B,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EACV,OAAO,EACP,cAAc,EACd,kBAAkB,EAClB,QAAQ,EACR,kBAAkB,GACnB,CAAC"}

package/types/lib/ecosystems/vendoredCode.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Code a project carries inside its own tree under a license of its own: a
+ * copied library, an imported test suite. Such a directory holds its own
+ * license file, and the license differs from the project's.
+ *
+ * Layer 3: reads license files under the scan root.
+ */
+/**
+ * Whether a file name is a license file: `LICENSE`, `LICENCE` or `COPYING`,
+ * bare, with a text extension, or with a suffix naming the license
+ * (`LICENSE-MIT`).
+ *
+ * @param {string} name File name
+ * @returns {boolean}
+ */
+export declare function isLicenseFileName(name: string): boolean;
+/**
+ * Find the directories of a project that carry code under a license other
+ * than the project's.
+ *
+ * @param {string} root Project scan root
+ * @param {Object} options CLI options (exclusions)
+ * @param {string[]} [excludeDirs] Directories already known to hold
+ *   dependencies (submodules, fetched sources, build trees), not searched
+ * @returns {{components: Object[], dirs: string[]}} A component per vendored
+ *   directory, and the directories
+ */
+export declare function findVendoredCode(root: string, options?: Object, excludeDirs?: string[]): {
+    components: Object[];
+    dirs: string[];
+};
+//# sourceMappingURL=vendoredCode.d.ts.map

package/types/lib/ecosystems/vendoredCode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vendoredCode.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/vendoredCode.js"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA2BH;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAH3B,MAG2B,GAFzB,OAAO,CAkBnB;AAkBD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAP1B,MAO0B,EAAE,OAAO,GANnC,MAMwC,EAAE,WAAW,AAL7D,CAEA,EAFQ,MAAM,EAKoD,GAHxD;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAC,CAwElD"}