@cdxgen/cdxgen 13.3.0 → 13.4.0

package/types/lib/ecosystems/parsers-terraform.d.ts

@@ -1,27 +1,12 @@
 /**
- * Terraform and OpenTofu parser for `.terraform.lock.hcl`.
+ * Whether a path holds any Terraform or OpenTofu configuration or lock file
+ * the workspace assembly would consider; used by project-type autodetection.
  *
- * The lock file pins every provider the configuration resolves to, with its
- * exact version, the version constraints that produced it, and content
- * hashes. It is written in a small, regular subset of HCL: provider blocks,
- * `version` and `constraints` attributes, and a `hashes` list of prefixed
- * digests. A line scanner is sufficient and avoids a general HCL parser.
- *
- * Provider addresses look like `registry.terraform.io/hashicorp/aws`; the
- * registry host and namespace identify the provider upstream, so they are
- * kept in the component group and a generic purl
- * (`pkg:generic/<host>/<namespace>/<type>@<version>`), with the intended type
- * recorded as a `cdx:purl:proposedType` property because no `terraform`
- * purl type is registered.
- *
- * The two hash schemes in the `hashes` list mean different things. A `zh:`
- * digest is a SHA-256 of the official `.zip` package as the registry indexes
- * it, so it is the one a consumer can check an artifact against and the one
- * emitted in the CycloneDX `hashes` array. An `h1:` digest is base64 over a
- * hash of the package's *contents* rather than the archive, which lets
- * Terraform verify an unpacked directory but makes it useless as an artifact
- * checksum; it is kept as a property instead of being mislabelled SHA-256.
+ * @param {string} scanPath Directory to scan
+ * @param {Object} [options] CLI options
+ * @returns {boolean}
  */
+export declare function hasTerraformConfiguration(scanPath: string, options?: Object): boolean;
 /**
  * Parse a `.terraform.lock.hcl` file.
  *
@@ -31,4 +16,36 @@
 export declare function parseTerraformLockFile(lockFile: string): {
     pkgList: object[];
 };
+/**
+ * Locate the Terraform roots under `scanPath`: directories that own a
+ * configuration — those with a lock file or module manifest, plus config
+ * directories no other config directory references through a local module
+ * call.
+ *
+ * @param {string} scanPath Directory to scan
+ * @param {Object} options CLI options
+ * @returns {{ dir: string, lockFile?: string, manifestFile?: string }[]} Roots sorted by relative POSIX path
+ */
+export declare function findTerraformRoots(scanPath: string, options?: Object): {
+    dir: string;
+    lockFile?: string;
+    manifestFile?: string;
+}[];
+/**
+ * Inventory a Terraform workspace: providers from the lock file and
+ * `required_providers`, modules from the manifest or the configuration, the
+ * dependency graph between them, and offline licenses from the installed
+ * packages.
+ *
+ * @param {string} scanPath Directory to scan
+ * @param {Object} options CLI options
+ * @param {string} parentRef `bom-ref` of the parent component the CLI built
+ * @returns {{ pkgList: object[], dependencies: object[], parentProperties: object[], srcFiles: string[] }}
+ */
+export declare function parseTerraformWorkspace(scanPath: string, options: Object, parentRef: string): {
+    pkgList: object[];
+    dependencies: object[];
+    parentProperties: object[];
+    srcFiles: string[];
+};
 //# sourceMappingURL=parsers-terraform.d.ts.map

package/types/lib/ecosystems/parsers-terraform.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parsers-terraform.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-terraform.js"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAHpC,MAGoC,GAFlC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAkEjC"}
+{"version":3,"file":"parsers-terraform.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-terraform.js"],"names":[],"mappings":"AAuHA;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAJvC,MAIuC,EAAE,OAAO,AAHxD,CACA,EADQ,MAGqD,GAFnD,OAAO,CAInB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAHpC,MAGoC,GAFlC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAkEjC;AAuLD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAJhC,MAIgC,EAAE,OAAO,GAHzC,MAG8C,GAF5C;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,CA+DvE;AAiGD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EALrC,MAKqC,EAAE,OAAO,EAJ9C,MAI8C,EAAE,SAAS,EAHzD,MAGyD,GAFvD;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAoDzG"}

package/types/lib/ecosystems/pythonutils.d.ts

@@ -15,6 +15,17 @@ export declare function getVenvMetadata(env?: Object, explicitPath?: string): Ob
  * @returns {string} Path to the Python executable or the fallback command name
  */
 export declare function get_python_command_from_env(env: string): string;
+/**
+ * The top-level packages and modules a project provides, wherever they sit
+ * in its tree: each outermost package directory (one with an `__init__.py`
+ * whose parent has none), and the module files beside such packages, since
+ * their directory is a source root. Directories of installed packages
+ * (virtual environments, `site-packages`) are not the project's.
+ *
+ * @param {string} src Path to the project being analysed
+ * @returns {Set<string>} Module names
+ */
+export declare function projectModuleNames(src: string): Set<string>;
 /**
  * Is this import satisfied by a module that lives in the project itself?
  *
@@ -28,13 +39,27 @@ export declare function get_python_command_from_env(env: string): string;
  * filesystem whether the module is ours answers it exactly.
  *
  * Checks the project root and a `src/` layout for a module file, a package directory,
- * and a PEP 420 namespace package directory.
+ * and a PEP 420 namespace package directory, then the top-level packages found
+ * anywhere in the project and the modules beside them (tool-heavy repositories
+ * keep their Python libraries in places such as `dev_tools/pylibs/`).
  *
  * @param {string} src Path to the project being analysed
  * @param {string} name Imported top-level module name
  * @returns {boolean} `true` if the project supplies this module itself
  */
 export declare function isFirstPartyModule(src: string, name: string): boolean;
+/**
+ * Whether a directory holds Python sources for atom to parse.
+ *
+ * The search skips the directories the manifest searches skip, such as
+ * node_modules and dot directories, and honours the exclude patterns, so a
+ * Python file shipped inside an npm package does not count.
+ *
+ * @param {string} src directory
+ * @param {Object} options CLI options
+ * @returns {boolean} true when the directory holds at least one Python file
+ */
+export declare function hasPythonSources(src: string, options?: Object): boolean;
 /**
  * Method to find python modules by parsing the imports and then checking with PyPI to obtain the latest version
  *
@@ -71,9 +96,9 @@ export declare function createUVLock(basePath: string, options: Object): void;
  */
 export declare function getPipFrozenTree(basePath: string, reqOrSetupFile: string, tempVenvDir: string, parentComponent: Object, projectRoot: any, getTreeWithPluginFn: any): Object;
 export declare function getPipTreeForPackages(basePath: any, pkgList: any, tempVenvDir: any, parentComponent: any, getTreeWithPluginFn: any): {
+    rootList?: undefined;
     dependenciesList?: undefined;
     failedPkgList?: undefined;
-    rootList?: undefined;
 } | {
     failedPkgList: any[];
     rootList: {

package/types/lib/ecosystems/pythonutils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pythonutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/pythonutils.js"],"names":[],"mappings":"AAiCA;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,GAJxB,MAIsC,EAAE,YAAY,AAH5D,CACA,EADQ,MAG2D,GAFzD,MAAM,CAyLlB;AAyED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAHpC,MAGoC,GAFlC,MAAM,CA6BlB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAJ3B,MAI2B,EAAE,IAAI,EAHjC,MAGiC,GAF/B,OAAO,CA4BnB;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAL3B,MAK2B,EAAE,QAAQ,OAAA,EAAE,OAAO,EAH9C,MAG8C;;;;;;;;GAwExD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAH1B,MAG0B,EAAE,OAAO,EAFnC,MAEmC,QAgD7C;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EARC,MAQD,EACR,cAAc,EARL,MAQK,EACd,WAAW,EARF,MAQE,EACX,eAAe,EARN,MAQM,EACf,WAAW,KAAA,EACX,mBAAmB,KAAA,GARR,MAAM,CAmkBlB;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,KAAA,EACR,OAAO,KAAA,EACP,WAAW,KAAA,EACX,eAAe,KAAA,EACf,mBAAmB,KAAA;;;;;;;;;;;;;;;;EAwNpB"}
+{"version":3,"file":"pythonutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/pythonutils.js"],"names":[],"mappings":"AAiCA;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,GAJxB,MAIsC,EAAE,YAAY,AAH5D,CACA,EADQ,MAG2D,GAFzD,MAAM,CAyLlB;AAyED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAHpC,MAGoC,GAFlC,MAAM,CA6BlB;AAgBD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAH3B,MAG2B,GAFzB,GAAG,CAAC,MAAM,CAAC,CAwCvB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAJ3B,MAI2B,EAAE,IAAI,EAHjC,MAGiC,GAF/B,OAAO,CA+BnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAJzB,MAIyB,EAAE,OAAO,GAHlC,MAGuC,GAFrC,OAAO,CAInB;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAL3B,MAK2B,EAAE,QAAQ,OAAA,EAAE,OAAO,EAH9C,MAG8C;;;;;;;;GAoFxD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAH1B,MAG0B,EAAE,OAAO,EAFnC,MAEmC,QAgD7C;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EARC,MAQD,EACR,cAAc,EARL,MAQK,EACd,WAAW,EARF,MAQE,EACX,eAAe,EARN,MAQM,EACf,WAAW,KAAA,EACX,mBAAmB,KAAA,GARR,MAAM,CAmkBlB;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,KAAA,EACR,OAAO,KAAA,EACP,WAAW,KAAA,EACX,eAAe,KAAA,EACf,mBAAmB,KAAA;;;;;;;;;;;;;;;;EAwNpB"}

package/types/lib/ecosystems/remote/huggingface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"huggingface.d.ts","sourceRoot":"","sources":["../../../../lib/ecosystems/remote/huggingface.js"],"names":[],"mappings":"AA4JA,OAAO,EACL,6BAA6B,EAC7B,iBAAiB,GAClB,MAAM,mCAAmC,CAAC;AAE3C;;GAEG;AACH,wBAAgB,4BAA4B,SAG3C;AAq6BD;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,aAH5B,MAAM,KACJ,OAOV,CAAC;AAEJ;;;;;;;GAOG;AACH,wBAAsB,8BAA8B,CAClD,SAAS,EANA,MAMA,EACT,MAAM,EANG,MAMH,EACN,OAAO,AANN,CACA,EADQ,MAMG,GALD,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CA0MrC;AAED;;;;;;;GAOG;AACH,wBAAsB,6BAA6B,CACjD,SAAS,EANA,MAMA,EACT,MAAM,EANG,MAMH,EACN,OAAO,AANN,CACA,EADQ,MAMG,GALD,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAarC"}
+{"version":3,"file":"huggingface.d.ts","sourceRoot":"","sources":["../../../../lib/ecosystems/remote/huggingface.js"],"names":[],"mappings":"AA6JA,OAAO,EACL,6BAA6B,EAC7B,iBAAiB,GAClB,MAAM,mCAAmC,CAAC;AAE3C;;GAEG;AACH,wBAAgB,4BAA4B,SAG3C;AAu6BD;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,aAH5B,MAAM,KACJ,OAOV,CAAC;AAEJ;;;;;;;GAOG;AACH,wBAAsB,8BAA8B,CAClD,SAAS,EANA,MAMA,EACT,MAAM,EANG,MAMH,EACN,OAAO,AANN,CACA,EADQ,MAMG,GALD,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CA0MrC;AAED;;;;;;;GAOG;AACH,wBAAsB,6BAA6B,CACjD,SAAS,EANA,MAMA,EACT,MAAM,EANG,MAMH,EACN,OAAO,AANN,CACA,EADQ,MAMG,GALD,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAarC"}

package/types/lib/ecosystems/rubyutils.d.ts

@@ -209,9 +209,17 @@ export declare function collectGemModuleNames(rubyCommand: string, bundleCommand
  * @param {Object} [options] Parse options
  * @param {Object<string, string>} [options.lockedVersions] Locked versions of
  *   the gems the project directory serves, by gem name
+ * @param {boolean} [options.projectGemspec] The gemspec describes the project
+ *   being scanned. No registry holds the project, so its gem is never looked
+ *   up and keeps what the gemspec says.
+ * @param {boolean} [options.noFetch] Read the gemspec for the fields it holds
+ *   without asking the registry about the gem. The local cache enricher uses
+ *   this, since the caller is responsible for the registry round.
  */
 export declare function parseGemspecData(gemspecData: string, gemspecFile: string, options?: {
     lockedVersions?: Record<string, string>;
+    projectGemspec?: boolean;
+    noFetch?: boolean;
 }): Promise<any[]>;
 /**
  * Method to parse Gemfile.lock
@@ -221,10 +229,22 @@ export declare function parseGemspecData(gemspecData: string, gemspecFile: strin
  * directory (`PATH` with `remote: .`), which is how Bundler records the gem a
  * project builds when its Gemfile uses the `gemspec` directive.
  *
+ * Gems the lockfile serves from a git remote or from a path outside the
+ * project are never sent to rubygems.org: no public registry holds the release
+ * they pinned. Before the registry round, the caches on this machine are read
+ * first, so a gem whose installed gemspec or compact index entry is present
+ * keeps those answers.
+ *
  * @param {object} gemLockData Gemfile.lock data
  * @param {string} lockFile Lock file
+ * @param {object} [options] Options
+ * @param {string} [options.gemHome] GEM_HOME to read installed gemspecs from
+ * @param {string} [options.compactIndexCacheDir] Bundler compact index cache
  */
-export declare function parseGemfileLockData(gemLockData: object, lockFile: string): Promise<any[] | {
+export declare function parseGemfileLockData(gemLockData: object, lockFile: string, options?: {
+    gemHome?: string;
+    compactIndexCacheDir?: string;
+}): Promise<any[] | {
     pkgList: any[];
     dependenciesList: {
         ref: string;

package/types/lib/ecosystems/rubyutils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rubyutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/rubyutils.js"],"names":[],"mappings":"AAsEA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAHzB,MAGyB,GAFvB,OAAO,CAOnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAHlC,MAAM,GAAG,SAGyB,GAFhC,MAAM,GAAG,SAAS,CAO9B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAHrC,MAAM,GAAG,SAG4B,GAFnC;IAAC,OAAO,EAAE,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAAC,QAAQ,EAAE,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;CAAC,CAe3E;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAHhC,MAGgC,GAF9B,MAAM,CAIlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,IAAI,EALnB,MAKmB,EAAE,OAAO,EAJ5B,MAAM,GAAG,SAImB,EAAE,QAAQ,EAHtC,MAAM,GAAG,SAG6B,GAFpC,MAAM,CAclB;AA4FD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAN/B,MAM+B,GAL7B;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAC,GAAG,SAAS,CAqE/F;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAL5B,MAK4B,GAJ1B;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAC,GAAG,SAAS,CAsE7D;AAuPD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAH9B,MAG8B,GAF5B;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;CAAC,GAAG,SAAS,CAqBjE;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,IAF1B,MAAM,CAWlB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAHnC,MAGmC,GAFjC,MAAM,CAiClB;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAHjC,MAGiC,GAF/B,MAAM,CAgClB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,wBAAwB,CAAC,OAAO,OAAA,EAAE,OAAO,GAJ5D;IAAwB,OAAO,EAAvB,MAAM,CACd;IAAwB,oBAAoB,EAApC,MAAM,CACd;CAEiE,GAFvD,OAAO,OAAO,CAoJ1B;AAiJD;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,OAAA,kBAuIhD;AA8CD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,KAAA,YAsBpC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,QAAA,EACX,aAAa,QAAA,EACb,OAAO,QAAA,EACP,OAAO,QAAA,EACP,QAAQ,QAAA,GAPG,KAAK,CAAC,MAAM,CAAC,CA4IzB;AAuED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,EANvC,MAMuC,EAAE,WAAW,EALpD,MAKoD,EAAE,OAAO,AAJrE,CAGF,EAFE;IAAyC,cAAc,AAAvD,CAEF,yBAAA;CAC4E,kBAqa5E;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CAAC,WAAW,EAH3C,MAG2C,EAAE,QAAQ,EAFrD,MAEqD;;;;;;;;GAoX/D;AAUD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,kBAAkB,CAChC,eAAe,EAXN,MAWM,EACf,UAAU,EAXD,MAWC,EACV,OAAO,EAXE,MAAM,EAWR,EACP,YAAY,EAXH,MAAM,EAWH,EACZ,QAAQ,EAXC,MAAM,EAWP,EACR,cAAc,EAXL,MAAM,EAWD,EACd,OAAO,GAXE,MAWG,GAVD;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAC,CAkH3E;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,OAAA,SAmClD;AA8GD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EALvC,MAAM,EAKiC,GAHrC,MAAM,GAAC,IAAI,GAAC,SAAS,CAoHjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,OAAA,EACP,eAAe,EARN,MAQM,EACf,YAAY,OAAA,GAND;IAAC,OAAO,QAAQ;IAAC,YAAY,QAAO;CAAC,CAmEjD"}
+{"version":3,"file":"rubyutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/rubyutils.js"],"names":[],"mappings":"AAmEA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAHzB,MAGyB,GAFvB,OAAO,CAOnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAHlC,MAAM,GAAG,SAGyB,GAFhC,MAAM,GAAG,SAAS,CAO9B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAHrC,MAAM,GAAG,SAG4B,GAFnC;IAAC,OAAO,EAAE,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAAC,QAAQ,EAAE,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;CAAC,CAe3E;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAHhC,MAGgC,GAF9B,MAAM,CAIlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,IAAI,EALnB,MAKmB,EAAE,OAAO,EAJ5B,MAAM,GAAG,SAImB,EAAE,QAAQ,EAHtC,MAAM,GAAG,SAG6B,GAFpC,MAAM,CAclB;AA4FD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAN/B,MAM+B,GAL7B;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAC,GAAG,SAAS,CAqE/F;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAL5B,MAK4B,GAJ1B;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAC,GAAG,SAAS,CAsE7D;AAuPD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAH9B,MAG8B,GAF5B;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;CAAC,GAAG,SAAS,CAqBjE;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,IAF1B,MAAM,CAWlB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAHnC,MAGmC,GAFjC,MAAM,CAiClB;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAHjC,MAGiC,GAF/B,MAAM,CAgClB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,wBAAwB,CAAC,OAAO,OAAA,EAAE,OAAO,GAJ5D;IAAwB,OAAO,EAAvB,MAAM,CACd;IAAwB,oBAAoB,EAApC,MAAM,CACd;CAEiE,GAFvD,OAAO,OAAO,CAuJ1B;AAsJD;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,OAAA,kBAiJhD;AA8CD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,KAAA,YAsBpC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,QAAA,EACX,aAAa,QAAA,EACb,OAAO,QAAA,EACP,OAAO,QAAA,EACP,QAAQ,QAAA,GAPG,KAAK,CAAC,MAAM,CAAC,CA4IzB;AAuED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,EAZvC,MAYuC,EAAE,WAAW,EAXpD,MAWoD,EAAE,OAAO,AAVrE,CASF,EARE;IAAyC,cAAc,AAAvD,CAEA,yBAAA;IAA0B,cAAc,AAAxC,CAGA,EAHQ,OAAO,CAGf;IAA0B,OAAO,AAAjC,CAGF,EAHU,OAAO,CAGjB;CAC4E,kBAqa5E;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,oBAAoB,CACxC,WAAW,EAPF,MAOE,EACX,QAAQ,EAPC,MAOD,EACR,OAAO,AAPN,CAGF,EAFE;IAAyB,OAAO,AAAhC,CACA,EADQ,MAAM,CACd;IAAyB,oBAAoB,AAA7C,CACF,EADU,MAAM,CAChB;CAIa;;;;;;;;GAqYb;AAUD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,kBAAkB,CAChC,eAAe,EAXN,MAWM,EACf,UAAU,EAXD,MAWC,EACV,OAAO,EAXE,MAAM,EAWR,EACP,YAAY,EAXH,MAAM,EAWH,EACZ,QAAQ,EAXC,MAAM,EAWP,EACR,cAAc,EAXL,MAAM,EAWD,EACd,OAAO,GAXE,MAWG,GAVD;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAC,CAkH3E;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,OAAA,SAmClD;AA8GD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EALvC,MAAM,EAKiC,GAHrC,MAAM,GAAC,IAAI,GAAC,SAAS,CAoHjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,OAAA,EACP,eAAe,EARN,MAQM,EACf,YAAY,OAAA,GAND;IAAC,OAAO,QAAQ;IAAC,YAAY,QAAO;CAAC,CAmEjD"}

package/types/lib/ecosystems/rusi.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rusi.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/rusi.js"],"names":[],"mappings":"AAgWA;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,GAHpC,MAGyC,GAFvC,MAAM,GAAC,SAAS,CAW5B;AAsZD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAGgC,GAF9B,OAAO,CAInB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAH9B,MAG8B,GAF5B,MAAM,GAAC,SAAS,CAW5B;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,GAAG,EALxB,MAKwB,EAAE,UAAU,EAJpC,MAIoC,EAAE,OAAO,GAH7C,MAGkD,GAFhD,OAAO,CAuDnB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAJ3B,MAI2B,EAAE,OAAO,GAHpC,MAGyC,GAFvC,MAAM,GAAC,SAAS,CA2B5B;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,GAJnC,MAIwC,EAAE,UAAU,QAAK,GAFvD,MAAM,CA8DlB"}
+{"version":3,"file":"rusi.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/rusi.js"],"names":[],"mappings":"AAoWA;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,GAHpC,MAGyC,GAFvC,MAAM,GAAC,SAAS,CAW5B;AAsZD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAGgC,GAF9B,OAAO,CAInB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAH9B,MAG8B,GAF5B,MAAM,GAAC,SAAS,CAW5B;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,GAAG,EALxB,MAKwB,EAAE,UAAU,EAJpC,MAIoC,EAAE,OAAO,GAH7C,MAGkD,GAFhD,OAAO,CAgEnB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAJ3B,MAI2B,EAAE,OAAO,GAHpC,MAGyC,GAFvC,MAAM,GAAC,SAAS,CA2B5B;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,GAJnC,MAIwC,EAAE,UAAU,QAAK,GAFvD,MAAM,CA8DlB"}

package/types/lib/ecosystems/sbtutils.d.ts

@@ -59,6 +59,14 @@ export declare function testUrlExists(url: string): Promise<boolean>;
  * @returns {string|null} local jar path or null
  */
 export declare function findLocalJarPath(group: string, name: string, version: string): string | null;
+/**
+ * Forget every memoised Coursier lookup, including misses. A long-lived
+ * process calls this per scan so that artifacts downloaded since the previous
+ * scan are found.
+ *
+ * @returns {void}
+ */
+export declare function resetSbtResolutionCaches(): void;
 /**
  * Resolve the repo/jar download URLs and optional hashes for a Maven coordinate.
  *
@@ -87,9 +95,12 @@ export declare function resolveJarDistribution(group: string, name: string, vers
  * coordinates, building a hierarchical dependency graph. Evicted packages and ranges are ignored.
  *
  * @param {string} sbtTreeFile Path to the sbt dependency tree output file
+ * @param {string} [srcFile] Build definition the tree was resolved from, named as the
+ *   identity source of every component. The tree file itself is a temporary file cdxgen
+ *   deletes after the scan, and naming it would make the BOM differ between two runs.
  * @returns {{ pkgList: Object[], dependenciesList: Object[] }}
  */
-export declare function parseSbtTree(sbtTreeFile: string): {
+export declare function parseSbtTree(sbtTreeFile: string, srcFile?: string): {
     pkgList: Object[];
     dependenciesList: Object[];
 };
@@ -100,7 +111,7 @@ export declare function parseSbtTree(sbtTreeFile: string): {
  */
 export declare function parseSbtLock(pkgLockFile: string): Promise<{
     group: any;
-    name: any;
+    name: string;
     version: any;
     _integrity: string;
     scope: string | undefined;
@@ -169,6 +180,34 @@ export declare function parseSbtProjects(stdout: string): {
     projects: string[];
     root: string | undefined;
 };
+/**
+ * Whether an sbt version is sbt 2 or later, the release candidates of sbt 2
+ * included: `2.0.0-RC12` is below `2.0.0` in semver order.
+ *
+ * @param {string|null|undefined} sbtVersion Version from project/build.properties
+ * @returns {boolean} True for sbt 2.x and later
+ */
+export declare function isSbt2Version(sbtVersion: string | null | undefined): boolean;
+/**
+ * Build the single command line an sbt 2 dependency tree session runs.
+ *
+ * sbt 2 joins separate command-line arguments into one command line, so the
+ * commands are joined with `;` and passed as one argument. sbt 2 ships the
+ * dependency tree tasks itself, and `dependencyTree / toFile` became
+ * `dependencyTree --out`, so every tree is written to its own file, the
+ * extra roots a tree may list included. The trees are not aggregated: the
+ * tree of an aggregating root would otherwise be overwritten by the trees of
+ * the projects it aggregates. Each tree is scoped to its project, so one
+ * unresolvable subproject cannot fail the others.
+ *
+ * @param {{project?: string, file: string}[]} trees The project id of each
+ *   tree, none for the current project, and the file it is written to
+ * @returns {string} The `;`-joined command line
+ */
+export declare function sbt2DependencyTreeCommand(trees: {
+    project?: string;
+    file: string;
+}[]): string;
 /**
  * Parse plugins.sbt files to extract sbt plugins as development dependencies.
  *
@@ -176,4 +215,51 @@ export declare function parseSbtProjects(stdout: string): {
  * @returns {Object[]} List of parsed dependency components
  */
 export declare function parseSbtPlugins(projectPath: string): Object[];
+/**
+ * The sbt launcher jar beside the `sbt.bat` on PATH, or under `SBT_HOME`.
+ * `SBT_LAUNCH_JAR` names one directly.
+ *
+ * @returns {string|undefined} Path of `sbt-launch.jar`
+ */
+export declare function sbtLaunchJar(): string | undefined;
+/**
+ * Split sbt arguments written for a POSIX shell into the arguments the shell
+ * would pass: whitespace separates them outside quotes, and single or double
+ * quotes group words without escapes, so a Windows path keeps its
+ * backslashes.
+ *
+ * @param {string[]} args Shell-quoted argument fragments
+ * @returns {string[]} The arguments
+ */
+export declare function splitSbtShellArgs(args: string[]): string[];
+/**
+ * The command line that starts sbt from its launcher jar. The options
+ * `sbt.bat` handles itself become what it makes of them: `-no-colors` and
+ * `-D` properties are JVM options, `-addPluginSbtFile` is sbt's own
+ * `--addPluginSbtFile`, and `-batch` and the thin client switches have no
+ * meaning there. The JVM options of `SBT_OPTS`, `JAVA_OPTS` and the build's
+ * `.jvmopts` are kept.
+ *
+ * @param {string[]} args Arguments as given to `sbt`
+ * @param {string} jar The sbt launcher jar
+ * @param {string} [dir] Build directory
+ * @returns {{ command: string, args: string[] }}
+ */
+export declare function sbtLauncherCommand(args: string[], jar: string, dir?: string): {
+    command: string;
+    args: string[];
+};
+/**
+ * Run sbt. On Windows, `sbt.bat` parses its arguments as batch syntax, which
+ * keeps the POSIX quoting of the commands and mangles quotes inside them, so
+ * sbt starts there from its launcher jar with each command one argument.
+ * Elsewhere, or without a launcher jar, sbt runs as given.
+ *
+ * @param {string} sbtCmd sbt executable
+ * @param {string[]} args sbt arguments
+ * @param {Object} options Spawn options, as for safeSpawnSync
+ * @param {boolean} [shellQuoted] Whether the arguments carry POSIX shell quoting
+ * @returns {Object} The spawn result
+ */
+export declare function sbtSpawnSync(sbtCmd: string, args: string[], options: Object, shellQuoted?: boolean): Object;
 //# sourceMappingURL=sbtutils.d.ts.map

package/types/lib/ecosystems/sbtutils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sbtutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/sbtutils.js"],"names":[],"mappings":"AAmEA;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAF/B,MAE+B,OAEzC;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAFpC,MAEoC,iBAa9C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CAAC,WAAW,EAH1B,MAG0B,EAAE,MAAM,EAFlC,MAEkC,iBAc5C;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAH9B,MAG8B,EAAE,mBAAmB,EAFnD,MAEmD,WAkB7D;AA0KD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EALlC,MAKkC,EAAE,IAAI,EAJxC,MAIwC,EAAE,OAAO,EAHjD,MAGiD,GAF/C,MAAM,GAAC,IAAI,CAIvB;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAH5B,MAG4B,GAF1B,OAAO,CAAC,OAAO,CAAC,CAuB5B;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAL3B,MAK2B,EAAE,IAAI,EAJjC,MAIiC,EAAE,OAAO,EAH1C,MAG0C,GAFxC,MAAM,GAAC,IAAI,CA+BvB;AAWD;;;;;;;;;;;;GAYG;AACH,wBAAsB,sBAAsB,CAAC,KAAK,EANvC,MAMuC,EAAE,IAAI,EAL7C,MAK6C,EAAE,OAAO,EAJtD,MAIsD,GAHpD,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,KAAK,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAC,CAAC,CAAA;CAAC,GAAC,IAAI,CAAC,CAmC3G;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAAC,WAAW,EAHnC,MAGmC,GAFjC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAAE,CA2M7D;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,WAAW,EAFnC,MAEmC;;;;;;;;;;;;;;;;;;;;;;;;KAoG7C;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAHpC,MAGoC,GAFlC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAC,IAAI,CA2BjE;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAHpC,MAGoC,GAFlC,MAAM,EAAE,CA2BpB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAJ5B,MAI4B,GAH1B;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAA;CAAC,CA6C1D;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAHhC,MAGgC,GAF9B,MAAM,EAAE,CAwDpB"}
+{"version":3,"file":"sbtutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/sbtutils.js"],"names":[],"mappings":"AA4EA;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAF/B,MAE+B,OAEzC;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAFpC,MAEoC,iBAa9C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CAAC,WAAW,EAH1B,MAG0B,EAAE,MAAM,EAFlC,MAEkC,iBAc5C;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAH9B,MAG8B,EAAE,mBAAmB,EAFnD,MAEmD,WAkB7D;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EALlC,MAKkC,EAAE,IAAI,EAJxC,MAIwC,EAAE,OAAO,EAHjD,MAGiD,GAF/C,MAAM,GAAC,IAAI,CAIvB;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAH5B,MAG4B,GAF1B,OAAO,CAAC,OAAO,CAAC,CAuB5B;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAL3B,MAK2B,EAAE,IAAI,EAJjC,MAIiC,EAAE,OAAO,EAH1C,MAG0C,GAFxC,MAAM,GAAC,IAAI,CA+BvB;AAYD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,IAF3B,IAAI,CAKhB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,sBAAsB,CAAC,KAAK,EANvC,MAMuC,EAAE,IAAI,EAL7C,MAK6C,EAAE,OAAO,EAJtD,MAIsD,GAHpD,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,KAAK,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAC,CAAC,CAAA;CAAC,GAAC,IAAI,CAAC,CAmC3G;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,YAAY,CAAC,WAAW,EANnC,MAMmC,EAAE,OAAO,AALpD,CAGA,EAHQ,MAK0D,GAFxD;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAAE,CAyM7D;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,WAAW,EAFnC,MAEmC;;;;;;;;;;;;;;;;;;;;;;;;KA+F7C;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAHpC,MAGoC,GAFlC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAC,IAAI,CA2BjE;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAHpC,MAGoC,GAFlC,MAAM,EAAE,CA2BpB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAJ5B,MAI4B,GAH1B;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAA;CAAC,CA6C1D;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAH7B,MAAM,GAAC,IAAI,GAAC,SAGiB,GAF3B,OAAO,CAInB;AAcD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAJpC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAC,EAII,GAFlC,MAAM,CAalB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAHhC,MAGgC,GAF9B,MAAM,EAAE,CAwDpB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,IAFf,MAAM,GAAC,SAAS,CAwB5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAH3B,MAAM,EAGqB,GAFzB,MAAM,EAAE,CAkCpB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAL5B,MAAM,EAKsB,EAAE,GAAG,EAJjC,MAIiC,EAAE,GAAG,AAH9C,CACA,EADQ,MAGsC,GAFpC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAoC/C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,MAAM,EANxB,MAMwB,EAAE,IAAI,EAL9B,MAAM,EAKwB,EAAE,OAAO,EAJvC,MAIuC,EAAE,WAAW,AAH5D,CACA,EADQ,OAG4D,GAF1D,MAAM,CAoBlB"}

package/types/lib/ecosystems/scalacliutils.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Parse the `//> using` directives of a scala-cli source file.
+ *
+ * @param {string} sourceFile Path of the source file
+ * @returns {{ scalaVersion: string|null, platform: string|null, nativeVersion: string|null, deps: Object[] }}
+ *   The declared scala version and platform, and the declared dependencies as
+ *   `{ group, artifact, version, cross, test }` entries, where `cross` is
+ *   `::`, `:::` or `none`
+ */
+export declare function parseScalaCliDirectives(sourceFile: string): {
+    scalaVersion: string | null;
+    platform: string | null;
+    nativeVersion: string | null;
+    deps: Object[];
+};
+/**
+ * Build a component for a scala-cli dependency in the sbt purl form: the
+ * Scala binary suffix is not part of the name, the platform suffix of the
+ * declared platform is, and the Scala binary version is recorded as
+ * cdx:scala:compilerVersion.
+ *
+ * @param {Object} dep Parsed dependency declaration
+ * @param {Object} project Directives of the file the dependency was declared in
+ * @param {string} sourceFile File the dependency was declared in
+ * @returns {Object|null} The component, or null for malformed declarations
+ */
+export declare function scalaCliComponent(dep: Object, project: Object, sourceFile: string): Object | null;
+/**
+ * Map a jar path of the Coursier cache to its Maven coordinates.
+ *
+ * Only the https cache layout with a well-known repository path segment is
+ * parsed; anything else returns null rather than guessing a group id.
+ *
+ * @param {string} jarPath Path of a jar in the Coursier cache
+ * @returns {{ group: string, name: string, version: string }|null} The coordinates
+ */
+export declare function coordinatesFromCoursierPath(jarPath: string): {
+    group: string;
+    name: string;
+    version: string;
+} | null;
+/**
+ * Collect the components a scala-cli project declares through its
+ * `//> using` directives.
+ *
+ * Transitive dependencies are added from the class path of
+ * `scala-cli compile --print-class-path` when dependency installation is
+ * allowed, by mapping the Coursier cache paths back to coordinates.
+ *
+ * @param {string} dirPath Directory of the scala-cli project
+ * @param {Object} options CLI options
+ * @returns {Object[]} Component list, empty when the project declares no
+ *   scala-cli directives
+ */
+export declare function collectScalaCliComponents(dirPath: string, options?: Object): Object[];
+//# sourceMappingURL=scalacliutils.d.ts.map

package/types/lib/ecosystems/scalacliutils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scalacliutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/scalacliutils.js"],"names":[],"mappings":"AAwCA;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EANvC,MAMuC,GALrC;IAAE,YAAY,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,aAAa,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAyD5G;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAL1B,MAK0B,EAAE,OAAO,EAJnC,MAImC,EAAE,UAAU,EAH/C,MAG+C,GAF7C,MAAM,GAAC,IAAI,CAuDvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAHxC,MAGwC,GAFtC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAC,IAAI,CAkCjE;AAsBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EALtC,MAKsC,EAAE,OAAO,GAJ/C,MAIoD,GAHlD,MAAM,EAAE,CAmGpB"}