@cdxgen/cdxgen 13.3.0 → 13.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +9 -6
- package/bin/cdxgen.js +90 -26
- package/bin/evinse.js +18 -1
- package/bin/repl.js +86 -0
- package/bin/sign.js +45 -15
- package/bin/tracebom.js +5 -1
- package/bin/validate.js +84 -18
- package/bin/verify.js +155 -86
- package/data/helpers/init.gradle +46 -21
- package/data/remediations.json +61 -0
- package/data/rules/dependency-sources.yaml +67 -0
- package/data/rules/scala-evidence.yaml +115 -0
- package/lib/audit/index.js +38 -6
- package/lib/cli/index.js +113 -54
- package/lib/cli/jsBom.js +50 -29
- package/lib/cli/jvmBom.js +665 -138
- package/lib/cli/managedBom.js +320 -200
- package/lib/cli/nativeBom.js +139 -30
- package/lib/core/activity.js +12 -0
- package/lib/core/env.js +17 -9
- package/lib/core/fs.js +3 -2
- package/lib/core/httpClient.js +159 -24
- package/lib/core/pluginRun.js +184 -0
- package/lib/core/processTree.js +100 -0
- package/lib/core/runState.js +39 -0
- package/lib/core/toml.js +72 -0
- package/lib/ecosystems/asarutils.js +4 -2
- package/lib/ecosystems/bunutils.js +5 -7
- package/lib/ecosystems/cargoCache.js +231 -8
- package/lib/ecosystems/cmakeResolver.js +10 -21
- package/lib/ecosystems/cppBuildContext.js +631 -0
- package/lib/ecosystems/cppEvidence.js +337 -22
- package/lib/ecosystems/cppIncludeResolver.js +294 -0
- package/lib/ecosystems/denoutils.js +93 -66
- package/lib/ecosystems/ecosystems.js +1967 -788
- package/lib/ecosystems/golem.js +28 -12
- package/lib/ecosystems/gradleutils.js +314 -30
- package/lib/ecosystems/jsEvidence.js +85 -24
- package/lib/ecosystems/kosi.js +21 -4
- package/lib/ecosystems/npmutils.js +64 -0
- package/lib/ecosystems/parsers-dotnet.js +567 -151
- package/lib/ecosystems/parsers-elm.js +46 -28
- package/lib/ecosystems/parsers-gleam.js +3 -4
- package/lib/ecosystems/parsers-go.js +324 -61
- package/lib/ecosystems/parsers-js.js +92 -26
- package/lib/ecosystems/parsers-julia.js +2 -3
- package/lib/ecosystems/parsers-jvm.js +204 -12
- package/lib/ecosystems/parsers-misc.js +182 -55
- package/lib/ecosystems/parsers-python.js +141 -10
- package/lib/ecosystems/parsers-rust.js +4 -4
- package/lib/ecosystems/parsers-terraform.js +1573 -19
- package/lib/ecosystems/pythonutils.js +102 -6
- package/lib/ecosystems/remote/huggingface.js +3 -0
- package/lib/ecosystems/rubyutils.js +67 -17
- package/lib/ecosystems/rusi.js +22 -9
- package/lib/ecosystems/sbtutils.js +243 -187
- package/lib/ecosystems/scalacliutils.js +342 -0
- package/lib/ecosystems/scalasem.js +2618 -0
- package/lib/ecosystems/terraformRegistry.js +288 -0
- package/lib/ecosystems/utils.js +2 -0
- package/lib/ecosystems/vendoredCode.js +156 -0
- package/lib/evinser/evinser.js +578 -69
- package/lib/helpers/agenticToolutils.js +2 -2
- package/lib/helpers/bomSigner.js +576 -128
- package/lib/inventory/aiCollector.js +4 -1
- package/lib/inventory/analyzer.js +110 -127
- package/lib/inventory/atomUtils.js +171 -48
- package/lib/inventory/auditCategories.js +7 -0
- package/lib/inventory/buildToolRateLimit.js +144 -0
- package/lib/inventory/cacheCommands.js +2 -1
- package/lib/inventory/cmakeBuildDirs.js +254 -0
- package/lib/inventory/deps.js +501 -124
- package/lib/inventory/dosai.js +248 -44
- package/lib/inventory/dosaiParsers.js +310 -15
- package/lib/inventory/dynamic.js +52 -6
- package/lib/inventory/evidenceUtils.js +154 -109
- package/lib/inventory/fetchBatch.js +574 -38
- package/lib/inventory/fetchDiskCache.js +597 -0
- package/lib/inventory/forgeEnricher.js +14 -5
- package/lib/inventory/jvmLocalRepos.js +917 -0
- package/lib/inventory/mcpConfigParser.js +2 -3
- package/lib/inventory/parentSelection.js +146 -0
- package/lib/inventory/rustFormulationParser.js +3 -4
- package/lib/inventory/scalaCoords.js +153 -0
- package/lib/inventory/source.js +8 -8
- package/lib/inventory/spdx.js +101 -0
- package/lib/inventory/traceRunner.js +88 -7
- package/lib/inventory/tracedCrypto.js +294 -0
- package/lib/managers/docker.js +33 -32
- package/lib/managers/oci.js +24 -2
- package/lib/parsers/cmakeCache.js +69 -0
- package/lib/parsers/cmakeLists.js +16 -2
- package/lib/parsers/cmakePresets.js +400 -0
- package/lib/parsers/compileCommands.js +557 -0
- package/lib/parsers/strictJson.js +322 -0
- package/lib/parsers/terraformConfig.js +1073 -0
- package/lib/parsers/terraformSource.js +652 -0
- package/lib/server/server.js +23 -0
- package/lib/stages/postgen/introspection/markers.js +1 -1
- package/lib/stages/postgen/postgen.js +15 -1
- package/lib/stages/postgen/specVersionCompat.js +32 -0
- package/lib/validator/index.js +25 -10
- package/lib/validator/reporters/json.js +1 -0
- package/package.json +21 -21
- package/types/lib/audit/index.d.ts.map +1 -1
- package/types/lib/cli/index.d.ts.map +1 -1
- package/types/lib/cli/jsBom.d.ts.map +1 -1
- package/types/lib/cli/jvmBom.d.ts +24 -1
- package/types/lib/cli/jvmBom.d.ts.map +1 -1
- package/types/lib/cli/managedBom.d.ts +7 -4
- package/types/lib/cli/managedBom.d.ts.map +1 -1
- package/types/lib/cli/nativeBom.d.ts +3 -1
- package/types/lib/cli/nativeBom.d.ts.map +1 -1
- package/types/lib/core/activity.d.ts.map +1 -1
- package/types/lib/core/env.d.ts +9 -0
- package/types/lib/core/env.d.ts.map +1 -1
- package/types/lib/core/fs.d.ts.map +1 -1
- package/types/lib/core/httpClient.d.ts +13 -8
- package/types/lib/core/httpClient.d.ts.map +1 -1
- package/types/lib/core/pluginRun.d.ts +97 -0
- package/types/lib/core/pluginRun.d.ts.map +1 -0
- package/types/lib/core/processTree.d.ts +36 -0
- package/types/lib/core/processTree.d.ts.map +1 -0
- package/types/lib/core/runState.d.ts +29 -0
- package/types/lib/core/runState.d.ts.map +1 -0
- package/types/lib/core/toml.d.ts +20 -0
- package/types/lib/core/toml.d.ts.map +1 -0
- package/types/lib/ecosystems/asarutils.d.ts.map +1 -1
- package/types/lib/ecosystems/bunutils.d.ts.map +1 -1
- package/types/lib/ecosystems/cargoCache.d.ts +12 -0
- package/types/lib/ecosystems/cargoCache.d.ts.map +1 -1
- package/types/lib/ecosystems/cmakeResolver.d.ts +5 -3
- package/types/lib/ecosystems/cmakeResolver.d.ts.map +1 -1
- package/types/lib/ecosystems/cppBuildContext.d.ts +55 -0
- package/types/lib/ecosystems/cppBuildContext.d.ts.map +1 -0
- package/types/lib/ecosystems/cppEvidence.d.ts +18 -2
- package/types/lib/ecosystems/cppEvidence.d.ts.map +1 -1
- package/types/lib/ecosystems/cppIncludeResolver.d.ts +92 -0
- package/types/lib/ecosystems/cppIncludeResolver.d.ts.map +1 -0
- package/types/lib/ecosystems/denoutils.d.ts +9 -3
- package/types/lib/ecosystems/denoutils.d.ts.map +1 -1
- package/types/lib/ecosystems/ecosystems.d.ts +62 -13
- package/types/lib/ecosystems/ecosystems.d.ts.map +1 -1
- package/types/lib/ecosystems/golem.d.ts.map +1 -1
- package/types/lib/ecosystems/gradleutils.d.ts +50 -0
- package/types/lib/ecosystems/gradleutils.d.ts.map +1 -1
- package/types/lib/ecosystems/jsEvidence.d.ts.map +1 -1
- package/types/lib/ecosystems/kosi.d.ts.map +1 -1
- package/types/lib/ecosystems/npmutils.d.ts +15 -0
- package/types/lib/ecosystems/npmutils.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-dotnet.d.ts +118 -4
- package/types/lib/ecosystems/parsers-dotnet.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-elm.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-gleam.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-go.d.ts +44 -2
- package/types/lib/ecosystems/parsers-go.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-js.d.ts +6 -1
- package/types/lib/ecosystems/parsers-js.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-julia.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-jvm.d.ts +46 -1
- package/types/lib/ecosystems/parsers-jvm.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-misc.d.ts +3 -1
- package/types/lib/ecosystems/parsers-misc.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-python.d.ts +53 -3
- package/types/lib/ecosystems/parsers-python.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-terraform.d.ts +38 -21
- package/types/lib/ecosystems/parsers-terraform.d.ts.map +1 -1
- package/types/lib/ecosystems/pythonutils.d.ts +27 -2
- package/types/lib/ecosystems/pythonutils.d.ts.map +1 -1
- package/types/lib/ecosystems/remote/huggingface.d.ts.map +1 -1
- package/types/lib/ecosystems/rubyutils.d.ts +21 -1
- package/types/lib/ecosystems/rubyutils.d.ts.map +1 -1
- package/types/lib/ecosystems/rusi.d.ts.map +1 -1
- package/types/lib/ecosystems/sbtutils.d.ts +88 -2
- package/types/lib/ecosystems/sbtutils.d.ts.map +1 -1
- package/types/lib/ecosystems/scalacliutils.d.ts +56 -0
- package/types/lib/ecosystems/scalacliutils.d.ts.map +1 -0
- package/types/lib/ecosystems/scalasem.d.ts +311 -0
- package/types/lib/ecosystems/scalasem.d.ts.map +1 -0
- package/types/lib/ecosystems/terraformRegistry.d.ts +9 -0
- package/types/lib/ecosystems/terraformRegistry.d.ts.map +1 -0
- package/types/lib/ecosystems/utils.d.ts +2 -2
- package/types/lib/ecosystems/utils.d.ts.map +1 -1
- package/types/lib/ecosystems/vendoredCode.d.ts +32 -0
- package/types/lib/ecosystems/vendoredCode.d.ts.map +1 -0
- package/types/lib/evinser/evinser.d.ts +75 -8
- package/types/lib/evinser/evinser.d.ts.map +1 -1
- package/types/lib/helpers/bomSigner.d.ts +80 -4
- package/types/lib/helpers/bomSigner.d.ts.map +1 -1
- package/types/lib/inventory/aiCollector.d.ts.map +1 -1
- package/types/lib/inventory/analyzer.d.ts.map +1 -1
- package/types/lib/inventory/atomUtils.d.ts +82 -10
- package/types/lib/inventory/atomUtils.d.ts.map +1 -1
- package/types/lib/inventory/auditCategories.d.ts +3 -0
- package/types/lib/inventory/auditCategories.d.ts.map +1 -1
- package/types/lib/inventory/buildToolRateLimit.d.ts +38 -0
- package/types/lib/inventory/buildToolRateLimit.d.ts.map +1 -0
- package/types/lib/inventory/cacheCommands.d.ts +2 -1
- package/types/lib/inventory/cacheCommands.d.ts.map +1 -1
- package/types/lib/inventory/cmakeBuildDirs.d.ts +58 -0
- package/types/lib/inventory/cmakeBuildDirs.d.ts.map +1 -0
- package/types/lib/inventory/deps.d.ts +59 -1
- package/types/lib/inventory/deps.d.ts.map +1 -1
- package/types/lib/inventory/dosai.d.ts +57 -8
- package/types/lib/inventory/dosai.d.ts.map +1 -1
- package/types/lib/inventory/dosaiParsers.d.ts +53 -7
- package/types/lib/inventory/dosaiParsers.d.ts.map +1 -1
- package/types/lib/inventory/dynamic.d.ts +10 -0
- package/types/lib/inventory/dynamic.d.ts.map +1 -1
- package/types/lib/inventory/evidenceUtils.d.ts +19 -4
- package/types/lib/inventory/evidenceUtils.d.ts.map +1 -1
- package/types/lib/inventory/fetchBatch.d.ts +83 -14
- package/types/lib/inventory/fetchBatch.d.ts.map +1 -1
- package/types/lib/inventory/fetchDiskCache.d.ts +169 -0
- package/types/lib/inventory/fetchDiskCache.d.ts.map +1 -0
- package/types/lib/inventory/forgeEnricher.d.ts.map +1 -1
- package/types/lib/inventory/jvmLocalRepos.d.ts +178 -0
- package/types/lib/inventory/jvmLocalRepos.d.ts.map +1 -0
- package/types/lib/inventory/mcpConfigParser.d.ts.map +1 -1
- package/types/lib/inventory/parentSelection.d.ts +34 -0
- package/types/lib/inventory/parentSelection.d.ts.map +1 -0
- package/types/lib/inventory/rustFormulationParser.d.ts.map +1 -1
- package/types/lib/inventory/scalaCoords.d.ts +80 -0
- package/types/lib/inventory/scalaCoords.d.ts.map +1 -0
- package/types/lib/inventory/source.d.ts.map +1 -1
- package/types/lib/inventory/spdx.d.ts +9 -0
- package/types/lib/inventory/spdx.d.ts.map +1 -1
- package/types/lib/inventory/traceRunner.d.ts +12 -0
- package/types/lib/inventory/traceRunner.d.ts.map +1 -1
- package/types/lib/inventory/tracedCrypto.d.ts +42 -0
- package/types/lib/inventory/tracedCrypto.d.ts.map +1 -0
- package/types/lib/managers/docker.d.ts.map +1 -1
- package/types/lib/managers/oci.d.ts +3 -1
- package/types/lib/managers/oci.d.ts.map +1 -1
- package/types/lib/parsers/cmakeCache.d.ts +16 -0
- package/types/lib/parsers/cmakeCache.d.ts.map +1 -1
- package/types/lib/parsers/cmakeLists.d.ts +2 -1
- package/types/lib/parsers/cmakeLists.d.ts.map +1 -1
- package/types/lib/parsers/cmakePresets.d.ts +78 -0
- package/types/lib/parsers/cmakePresets.d.ts.map +1 -0
- package/types/lib/parsers/compileCommands.d.ts +115 -0
- package/types/lib/parsers/compileCommands.d.ts.map +1 -0
- package/types/lib/parsers/strictJson.d.ts +46 -0
- package/types/lib/parsers/strictJson.d.ts.map +1 -0
- package/types/lib/parsers/terraformConfig.d.ts +70 -0
- package/types/lib/parsers/terraformConfig.d.ts.map +1 -0
- package/types/lib/parsers/terraformSource.d.ts +66 -0
- package/types/lib/parsers/terraformSource.d.ts.map +1 -0
- package/types/lib/server/server.d.ts.map +1 -1
- package/types/lib/stages/postgen/postgen.d.ts.map +1 -1
- package/types/lib/stages/postgen/specVersionCompat.d.ts.map +1 -1
- package/types/lib/validator/index.d.ts +8 -0
- package/types/lib/validator/index.d.ts.map +1 -1
- package/types/lib/validator/reporters/json.d.ts.map +1 -1
- package/lib/third-party/arborist/snapshots/calc-dep-flags.test.cjs +0 -462
|
@@ -0,0 +1,311 @@
|
|
|
1
|
+
export declare const JDK_OWNER_PREFIXES: string[];
|
|
2
|
+
export declare const SCALA_STDLIB_ARTIFACTS: Set<string>;
|
|
3
|
+
export declare function appendUniqueProperty(properties: any, name: any, value: any): void;
|
|
4
|
+
export declare function addPropertyValue(map: any, key: any, name: any, value: any): void;
|
|
5
|
+
export declare function addSetValue(map: any, key: any, value: any): void;
|
|
6
|
+
/**
|
|
7
|
+
* True for every project type the Scala path serves, matching the alias list
|
|
8
|
+
* the BOM generators dispatch on.
|
|
9
|
+
*
|
|
10
|
+
* @param {string} language Project language or type.
|
|
11
|
+
* @returns {boolean}
|
|
12
|
+
*/
|
|
13
|
+
export declare function isScalasemLanguage(language: string): boolean;
|
|
14
|
+
/**
|
|
15
|
+
* True when scalasem is turned off, through CDXGEN_SCALASEM_DISABLE or the
|
|
16
|
+
* --no-scalasem flag, which yargs carries as `scalasem: false`. Library code never reads
|
|
17
|
+
* process.argv for this.
|
|
18
|
+
*
|
|
19
|
+
* @param {Object} options CLI options.
|
|
20
|
+
* @returns {boolean}
|
|
21
|
+
*/
|
|
22
|
+
export declare function scalasemDisabled(options?: Object): boolean;
|
|
23
|
+
/**
|
|
24
|
+
* The scalasem entry point: SCALASEM_CMD wins, then the scalasem.js inside
|
|
25
|
+
* the installed atom-parsetools package.
|
|
26
|
+
*
|
|
27
|
+
* @returns {string|undefined}
|
|
28
|
+
*/
|
|
29
|
+
export declare function resolveScalasemCommand(): string | undefined;
|
|
30
|
+
/**
|
|
31
|
+
* Where the scalasem report is persisted. An absolute --semantics-slices-file
|
|
32
|
+
* keeps its directory; anything else lands in the evinse output directory, the
|
|
33
|
+
* same rule the atom slice writer follows.
|
|
34
|
+
*
|
|
35
|
+
* @param {Object} options CLI options carrying `output` and `semanticsSlicesFile`.
|
|
36
|
+
* @returns {string} Absolute report path.
|
|
37
|
+
*/
|
|
38
|
+
export declare function scalasemOutputFile(options?: Object): string;
|
|
39
|
+
/**
|
|
40
|
+
* A version 1 semantics slice (the shape atom's scalasem wrote before schema
|
|
41
|
+
* version 2): keyed by .scala files with `usedTypes`, no `_meta.schemaVersion`.
|
|
42
|
+
*
|
|
43
|
+
* @param {Object} parsed Candidate slice.
|
|
44
|
+
* @returns {boolean}
|
|
45
|
+
*/
|
|
46
|
+
export declare function isV1SemanticsSlice(parsed: Object): boolean;
|
|
47
|
+
/**
|
|
48
|
+
* Run scalasem over a Scala project and return its report, reusing a
|
|
49
|
+
* persisted version 2 report that belongs to this project and is newer than
|
|
50
|
+
* the input BOM.
|
|
51
|
+
*
|
|
52
|
+
* Failures are visible rather than silent: the reason is printed once, the
|
|
53
|
+
* run's diagnostics reach the caller as `cdx:scalasem:diagnostic` properties,
|
|
54
|
+
* and --fail-on-error claims the exit status. A version 1 slice of this
|
|
55
|
+
* project, at the path the user named or at the report path, is returned
|
|
56
|
+
* separately and never overwritten; the fresh report then goes to a
|
|
57
|
+
* temporary file.
|
|
58
|
+
*
|
|
59
|
+
* @param {string} src Project directory.
|
|
60
|
+
* @param {Object} options CLI options.
|
|
61
|
+
* @returns {Object|undefined} `{ report, reportFile, v1Slice, metadataProperties }`,
|
|
62
|
+
* or undefined when the analyzer is disabled.
|
|
63
|
+
*/
|
|
64
|
+
export declare function analyzeScalaProject(src: string, options?: Object): Object | undefined;
|
|
65
|
+
/**
|
|
66
|
+
* The `cdx:scalasem:*` metadata properties of one run: what produced the
|
|
67
|
+
* report, and what limited it.
|
|
68
|
+
*
|
|
69
|
+
* @param {Object|undefined} report Parsed scalasem report, when one exists.
|
|
70
|
+
* @param {Object[]} diagnostics Run diagnostics, from the report or the spawn.
|
|
71
|
+
* @returns {Object[]} Metadata properties.
|
|
72
|
+
*/
|
|
73
|
+
export declare function scalasemMetadataProperties(report: Object | undefined, diagnostics?: Object[]): Object[];
|
|
74
|
+
export declare function sortedCsv(values: any): string | undefined;
|
|
75
|
+
/**
|
|
76
|
+
* The platform a purl's artifact name targets: `_sjs1` is Scala.js,
|
|
77
|
+
* `_native0.x` is Scala Native, and neither is the JVM.
|
|
78
|
+
*
|
|
79
|
+
* @param {string} purl Package URL.
|
|
80
|
+
* @returns {"jvm"|"js"|"native"} Platform key.
|
|
81
|
+
*/
|
|
82
|
+
export declare function scalaPurlPlatform(purl: string): "jvm" | "js" | "native";
|
|
83
|
+
/**
|
|
84
|
+
* The class and package index that joins scalasem symbols to component purls.
|
|
85
|
+
*
|
|
86
|
+
* Symbols are indexed from three sources in priority order: the classpath the
|
|
87
|
+
* report recorded (1), the `internal:Namespaces` properties of the components
|
|
88
|
+
* (2), and the jar namespace map cdxgen writes beside the BOM (3). A symbol an
|
|
89
|
+
* earlier source already attributed is never re-attributed by a later one.
|
|
90
|
+
*
|
|
91
|
+
* A jar answers for the classes it ships and for the packages it ships classes
|
|
92
|
+
* in directly, never for the parents of those packages: a library with one
|
|
93
|
+
* class under `scala.collection.compat` owns neither `scala.collection` nor
|
|
94
|
+
* `scala`. The JDK has no component, and neither do the project's own classes.
|
|
95
|
+
*/
|
|
96
|
+
export declare class ScalaJoinIndex {
|
|
97
|
+
classPurls: Map<any, any>;
|
|
98
|
+
packagePurls: Map<any, any>;
|
|
99
|
+
sourceBySymbol: Map<any, any>;
|
|
100
|
+
purlsBySource: Map<any, any>;
|
|
101
|
+
namespacesByPurl: Map<any, any>;
|
|
102
|
+
projectClasses: Set<any>;
|
|
103
|
+
projectPackages: Set<any>;
|
|
104
|
+
constructor();
|
|
105
|
+
hasNamespaces(purl: any): boolean;
|
|
106
|
+
/**
|
|
107
|
+
* Index the classes of one library: each class under its dotted name (a
|
|
108
|
+
* nested `Outer$Inner` also as `Outer.Inner`, an object `Foo$` as `Foo`),
|
|
109
|
+
* and the package each one sits in.
|
|
110
|
+
*
|
|
111
|
+
* @param {string} purl The owning component purl.
|
|
112
|
+
* @param {string[]} names Class names from the jar or the namespace property.
|
|
113
|
+
* @param {number} source The source priority, 1 to 3.
|
|
114
|
+
*/
|
|
115
|
+
addNamespaces(purl: string, names: string[], source: number): void;
|
|
116
|
+
addSymbol(map: any, symbol: any, purl: any, source: any): void;
|
|
117
|
+
/**
|
|
118
|
+
* Record the classes the project defines, so that references to them, and
|
|
119
|
+
* to packages only the project fills, never join a library.
|
|
120
|
+
*
|
|
121
|
+
* @param {Object} report Parsed scalasem report.
|
|
122
|
+
*/
|
|
123
|
+
addProjectDefinitions(report: Object): void;
|
|
124
|
+
/**
|
|
125
|
+
* Whether a symbol belongs to code the BOM has no component for: the JDK,
|
|
126
|
+
* or the project itself.
|
|
127
|
+
*/
|
|
128
|
+
isUnowned(symbol: any): boolean;
|
|
129
|
+
/**
|
|
130
|
+
* The libraries that ship the class a symbol names: the longest dotted
|
|
131
|
+
* prefix of the symbol that is a class name, for a member or a nested type.
|
|
132
|
+
*/
|
|
133
|
+
classOwners(symbol: any): any;
|
|
134
|
+
/**
|
|
135
|
+
* The libraries that ship classes directly in the package a symbol names or
|
|
136
|
+
* sits in. A package the project also fills is ambiguous and joins nothing,
|
|
137
|
+
* and `javax.` names join only through an exact class, since the JDK ships
|
|
138
|
+
* most of them.
|
|
139
|
+
*/
|
|
140
|
+
packageOwners(symbol: any): any;
|
|
141
|
+
/**
|
|
142
|
+
* The purl owning a symbol: the class first, then the package it sits in,
|
|
143
|
+
* each narrowed to the module's own classpath and the file's platform, and
|
|
144
|
+
* kept only when a single owner remains.
|
|
145
|
+
*
|
|
146
|
+
* @param {string} symbol Fully qualified symbol from the report.
|
|
147
|
+
* @param {string|undefined} platform Platform of the referencing file.
|
|
148
|
+
* @param {Set<string>|undefined} allowedPurls Purls on the module's classpath.
|
|
149
|
+
* @returns {string|undefined} Component purl.
|
|
150
|
+
*/
|
|
151
|
+
lookup(symbol: string, platform: string | undefined, allowedPurls: Set<string> | undefined): string | undefined;
|
|
152
|
+
/**
|
|
153
|
+
* The owners a stack is evidence for: every jar that ships the class, since
|
|
154
|
+
* which one served the call cannot be told from the source, or the single
|
|
155
|
+
* package owner when no jar lists the class.
|
|
156
|
+
*/
|
|
157
|
+
lookupAll(symbol: any, platform: any, allowedPurls: any): any[];
|
|
158
|
+
/**
|
|
159
|
+
* Narrow candidate owners to what the referencing file can use. A module
|
|
160
|
+
* compiles against its own classpath: a library on it wins, and a library
|
|
161
|
+
* only other modules compile against does not qualify. A library on no
|
|
162
|
+
* module's classpath stays a candidate, since the report cannot list every
|
|
163
|
+
* jar (a locally published snapshot, say). The file's platform then picks
|
|
164
|
+
* among the JVM, Scala.js and Scala Native variants of one library.
|
|
165
|
+
*/
|
|
166
|
+
narrow(candidates: any, platform: any, allowedPurls: any): any[];
|
|
167
|
+
}
|
|
168
|
+
/**
|
|
169
|
+
* Whether a report key names a source file entry. The schema keys file
|
|
170
|
+
* entries by their relative path, for Scala sources, scripts and the Java
|
|
171
|
+
* sources of a mixed module alike.
|
|
172
|
+
*/
|
|
173
|
+
export declare function isReportFileKey(key: any): boolean;
|
|
174
|
+
/**
|
|
175
|
+
* Index the BOM components by their normalized Scala coordinates, both with
|
|
176
|
+
* and without the version, so a classpath jar, a namespace property and a map
|
|
177
|
+
* entry of the same library meet on one component. Each entry keeps the Scala
|
|
178
|
+
* binary version the component was built for, so the `_2.13` and `_3`
|
|
179
|
+
* artifacts of one library in a Maven build stay apart.
|
|
180
|
+
*/
|
|
181
|
+
export declare function componentCoordinateIndex(components?: any[]): {
|
|
182
|
+
byVersion: Map<any, any>;
|
|
183
|
+
withoutVersion: Map<any, any>;
|
|
184
|
+
};
|
|
185
|
+
/**
|
|
186
|
+
* The component a report classpath entry belongs to. Coordinates are
|
|
187
|
+
* normalized (`upickle_sjs1_3` and the purl name `upickle_sjs1` share a key),
|
|
188
|
+
* the entry's version and Scala binary version win, and a versionless match
|
|
189
|
+
* must have a single owner. A jar the BOM does not hold matches nothing: no
|
|
190
|
+
* component is invented.
|
|
191
|
+
*
|
|
192
|
+
* @returns {{component: Object, exact: boolean}|undefined} The component, and
|
|
193
|
+
* whether its version is the one on the classpath.
|
|
194
|
+
*/
|
|
195
|
+
export declare function matchClasspathEntry(entry: any, { byVersion, withoutVersion }: {
|
|
196
|
+
byVersion: any;
|
|
197
|
+
withoutVersion: any;
|
|
198
|
+
}, platform: any): {
|
|
199
|
+
component: Object;
|
|
200
|
+
exact: boolean;
|
|
201
|
+
} | undefined;
|
|
202
|
+
/**
|
|
203
|
+
* Build the symbol index from the three sources, reading each classpath jar
|
|
204
|
+
* once, and only for components that carry no namespaces yet.
|
|
205
|
+
*
|
|
206
|
+
* @param {Object} report Parsed scalasem report.
|
|
207
|
+
* @param {Object[]} components BOM components.
|
|
208
|
+
* @param {Object} jarNSMapping The jar namespace map cdxgen writes beside the BOM.
|
|
209
|
+
* @returns {Promise<ScalaJoinIndex>}
|
|
210
|
+
*/
|
|
211
|
+
export declare function buildScalaJoinIndex(report: Object, components: Object[], jarNSMapping: Object): Promise<ScalaJoinIndex>;
|
|
212
|
+
export declare const SCALASEM_PROTOCOL_NAMES: Set<string>;
|
|
213
|
+
export declare const SCALASEM_KEYSTORE_NAMES: Set<string>;
|
|
214
|
+
export declare const SCALASEM_QUALIFIED_ALGORITHMS: Set<string>;
|
|
215
|
+
export declare const SCALASEM_NO_OID_ALGORITHMS: Set<string>;
|
|
216
|
+
/**
|
|
217
|
+
* The OID registry key for a canonical scalasem algorithm name, with the key
|
|
218
|
+
* size, mode, curve or padding when the name needs one. Names that have no
|
|
219
|
+
* key return undefined.
|
|
220
|
+
*
|
|
221
|
+
* @param {string} name Canonical algorithm name.
|
|
222
|
+
* @param {number} [keySize] Key size in bits, when the report carries one.
|
|
223
|
+
* @param {string} [mode] Block cipher mode, such as `GCM`.
|
|
224
|
+
* @param {string} [curve] Elliptic curve name.
|
|
225
|
+
* @param {string} [padding] JCA padding name.
|
|
226
|
+
* @returns {string|undefined} Registry key such as `aes256-GCM`.
|
|
227
|
+
*/
|
|
228
|
+
export declare function scalasemCryptoOidKey(name: string, keySize?: number, mode?: string, curve?: string, padding?: string): string | undefined;
|
|
229
|
+
/**
|
|
230
|
+
* Project a scalasem report onto CycloneDX evidence: occurrences for the
|
|
231
|
+
* joined components, call stacks for the library sinks, namespaces for the
|
|
232
|
+
* components the classpath join read, and the run's metadata properties.
|
|
233
|
+
*
|
|
234
|
+
* @param {Object} report Parsed scalasem report.
|
|
235
|
+
* @param {Object[]} components BOM components.
|
|
236
|
+
* @param {Object} options CLI options; `scalaNamespaceMap` carries the jar
|
|
237
|
+
* namespace map cdxgen wrote beside the BOM.
|
|
238
|
+
* @returns {Promise<Object>} The evidence maps `createEvinseFile` consumes.
|
|
239
|
+
*/
|
|
240
|
+
export declare function collectScalasemEvidence(report?: Object, components?: Object[], options?: Object): Promise<Object>;
|
|
241
|
+
/**
|
|
242
|
+
* The component purl of the library a crypto finding names as its provider.
|
|
243
|
+
* Maven coordinates match on group and base artifact; the short aliases cover
|
|
244
|
+
* the providers the rules emit for libraries without a coordinate.
|
|
245
|
+
*/
|
|
246
|
+
export declare function scalasemProviderPurl(provider: any, components?: any[]): any;
|
|
247
|
+
/**
|
|
248
|
+
* A JDBC address without what may carry credentials: userinfo, the Oracle
|
|
249
|
+
* `user/password@` prefix, URL parameters and the `;key=value` properties
|
|
250
|
+
* some drivers take. The report is sanitized already; this keeps the BOM
|
|
251
|
+
* safe from a report written by anything else.
|
|
252
|
+
*
|
|
253
|
+
* @param {string} value JDBC URL.
|
|
254
|
+
* @returns {string} The address part.
|
|
255
|
+
*/
|
|
256
|
+
export declare function sanitizeJdbcUrl(value: string): string;
|
|
257
|
+
/**
|
|
258
|
+
* The host a service URL names, or the topic and JDBC scheme equivalents, so
|
|
259
|
+
* every outbound service is named after where it talks to rather than the
|
|
260
|
+
* client library it uses.
|
|
261
|
+
*/
|
|
262
|
+
export declare function scalasemServiceName(service: any): any;
|
|
263
|
+
/**
|
|
264
|
+
* The endpoint a service row carries, normalized: a URL as its scheme and
|
|
265
|
+
* host, a host as it is, a topic as `client:topic`, a JDBC URL with its
|
|
266
|
+
* credentials and parameters dropped.
|
|
267
|
+
*/
|
|
268
|
+
export declare function scalasemServiceEndpoint(service: any): any;
|
|
269
|
+
/**
|
|
270
|
+
* Outbound services: HTTP and websocket clients, data stores, messaging
|
|
271
|
+
* topics and cloud clients. Locations ride in
|
|
272
|
+
* `cdx:scalasem:service:location` properties because CycloneDX services
|
|
273
|
+
* carry no evidence field before 2.0; spec compatibility keeps the
|
|
274
|
+
* occurrences below that only at 2.0.
|
|
275
|
+
*
|
|
276
|
+
* @param {Object} report Parsed scalasem report.
|
|
277
|
+
* @param {Object} servicesMap Map populated with service definitions.
|
|
278
|
+
* @returns {Object} The mutated services map.
|
|
279
|
+
*/
|
|
280
|
+
export declare function collectScalasemServices(report?: Object, servicesMap?: Object): Object;
|
|
281
|
+
/**
|
|
282
|
+
* Inbound endpoints, one service per route, named the way the OpenAPI reader
|
|
283
|
+
* names its own so the two converge on one entry for the same route.
|
|
284
|
+
*
|
|
285
|
+
* @param {Object} report Parsed scalasem report.
|
|
286
|
+
* @param {Object} servicesMap Map populated with service definitions.
|
|
287
|
+
* @returns {Object} The mutated services map.
|
|
288
|
+
*/
|
|
289
|
+
export declare function collectScalasemApiEndpoints(report?: Object, servicesMap?: Object): Object;
|
|
290
|
+
/**
|
|
291
|
+
* The npm packages a Scala.js build bundles. scalajs-bundler installs them
|
|
292
|
+
* with a lock file under `target`, and a bundler workspace such as a Vite
|
|
293
|
+
* client keeps its own manifest and lock file beside the build. Their npm
|
|
294
|
+
* components join the BOM so the report's JavaScript module imports can be
|
|
295
|
+
* attributed to them. Only lock files name the installed versions, and a
|
|
296
|
+
* workspace counts only when its manifest uses Scala.js, so a documentation
|
|
297
|
+
* site or a tool's own `package.json` adds nothing.
|
|
298
|
+
*
|
|
299
|
+
* @param {string} src Project directory.
|
|
300
|
+
* @param {Object[]} pkgList Components the build tools reported.
|
|
301
|
+
* @param {Object} [options] CLI options; `exclude` is honoured.
|
|
302
|
+
* @returns {Promise<{components: Object[], roots: string[], dependencies: Object[]}>}
|
|
303
|
+
* Npm components, the bom-refs the workspaces depend on directly, and the
|
|
304
|
+
* lock files' dependency edges between the npm components.
|
|
305
|
+
*/
|
|
306
|
+
export declare function collectScalaJsNpmComponents(src: string, pkgList?: Object[], options?: Object): Promise<{
|
|
307
|
+
components: Object[];
|
|
308
|
+
roots: string[];
|
|
309
|
+
dependencies: Object[];
|
|
310
|
+
}>;
|
|
311
|
+
//# sourceMappingURL=scalasem.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"scalasem.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/scalasem.js"],"names":[],"mappings":"AA+CA,eAAO,MAAM,kBAAkB,UAA4B,CAAC;AAM5D,eAAO,MAAM,sBAAsB,aAQjC,CAAC;AAEH,wBAAgB,oBAAoB,CAAC,UAAU,KAAA,EAAE,IAAI,KAAA,EAAE,KAAK,KAAA,QAY3D;AAED,wBAAgB,gBAAgB,CAAC,GAAG,KAAA,EAAE,GAAG,KAAA,EAAE,IAAI,KAAA,EAAE,KAAK,KAAA,QAMrD;AAED,wBAAgB,WAAW,CAAC,GAAG,KAAA,EAAE,GAAG,KAAA,EAAE,KAAK,KAAA,QAM1C;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAGgC,GAF9B,OAAO,CAMnB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAH7B,MAGkC,GAFhC,OAAO,CASnB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAFzB,MAAM,GAAC,SAAS,CAM5B;AAwBD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAH/B,MAGoC,GAFlC,MAAM,CAyBlB;AAuBD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAH9B,MAG8B,GAF5B,OAAO,CAOnB;AAiBD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAL5B,MAK4B,EAAE,OAAO,GAJrC,MAI0C,GAHxC,MAAM,GAAC,SAAS,CAmD5B;AA+KD;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EALG,MAAM,GAAC,SAKV,EACN,WAAW,GALF,MAAM,EAK+B,GAJnC,MAAM,EAAE,CAyDpB;AAED,wBAAgB,SAAS,CAAC,MAAM,KAAA,sBAI/B;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAH3B,MAG2B,GAFzB,KAAK,GAAC,IAAI,GAAC,QAAQ,CAc/B;AAcD;;;;;;;;;;;;GAYG;AACH,qBAAa,cAAc;IAElB,UAAU;IACV,YAAY;IACZ,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,cAAc;IACd,eAAe;IAPtB,cAQC;IAED,aAAa,CAAC,IAAI,KAAA,WAEjB;IAED;;;;;;;;OAQG;IACH,aAAa,CAAC,IAAI,EAJP,MAIO,EAAE,KAAK,EAHd,MAAM,EAGQ,EAAE,MAAM,EAFtB,MAEsB,QAgChC;IAED,SAAS,CAAC,GAAG,KAAA,EAAE,MAAM,KAAA,EAAE,IAAI,KAAA,EAAE,MAAM,KAAA,QAelC;IAED;;;;;OAKG;IACH,qBAAqB,CAAC,MAAM,EAFjB,MAEiB,QAiB3B;IAED;;;OAGG;IACH,SAAS,CAAC,MAAM,KAAA,WAWf;IAED;;;OAGG;IACH,WAAW,CAAC,MAAM,KAAA,OASjB;IAED;;;;;OAKG;IACH,aAAa,CAAC,MAAM,KAAA,OAanB;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,MAAM,EALF,MAKE,EAAE,QAAQ,EAJZ,MAAM,GAAC,SAIK,EAAE,YAAY,EAH1B,GAAG,CAAC,MAAM,CAAC,GAAC,SAGc,GAFxB,MAAM,GAAC,SAAS,CAoB5B;IAED;;;;OAIG;IACH,SAAS,CAAC,MAAM,KAAA,EAAE,QAAQ,KAAA,EAAE,YAAY,KAAA,SAcvC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,UAAU,KAAA,EAAE,QAAQ,KAAA,EAAE,YAAY,KAAA,SA4BxC;CACF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,KAAA,WAElC;AA4BD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,QAAK;;;EA8BvD;AAsBD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,KAAA,EACL,EAAE,SAAS,EAAE,cAAc,EAAE;;;CAAA,EAC7B,QAAQ,KAAA,GANG;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAC,GAAC,SAAS,CAmCzD;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EALrC,MAKqC,EAAE,UAAU,EAJjD,MAAM,EAI2C,EAAE,YAAY,EAH/D,MAG+D,GAF7D,OAAO,CAAC,cAAc,CAAC,CAkFnC;AAsFD,eAAO,MAAM,uBAAuB,aASlC,CAAC;AACH,eAAO,MAAM,uBAAuB,aAKlC,CAAC;AAGH,eAAO,MAAM,6BAA6B,aAUxC,CAAC;AACH,eAAO,MAAM,0BAA0B,aA0CrC,CAAC;AAqEH;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAP9B,MAO8B,EAAE,OAAO,AAN/C,CACA,EADQ,MAMuC,EAAE,IAAI,AALrD,CACA,EADQ,MAK6C,EAAE,KAAK,AAJ5D,CACA,EADQ,MAIoD,EAAE,OAAO,AAHrE,CACA,EADQ,MAG6D,GAF3D,MAAM,GAAC,SAAS,CA6C5B;AAgDD;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,GAPG,MAOE,EACX,UAAU,GAPD,MAAM,EAOA,EACf,OAAO,GAPE,MAOG,GALD,OAAO,CAAC,MAAM,CAAC,CAyE3B;AA+WD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,KAAA,EAAE,UAAU,QAAK,OA+B7D;AAkTD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAH1B,MAG0B,GAFxB,MAAM,CAmClB;AAaD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,KAAA,OAmB1C;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,KAAA,OAuB9C;AASD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,GAJnC,MAIwC,EAAE,WAAW,GAHrD,MAG0D,GAFxD,MAAM,CAmDlB;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,GAJvC,MAI4C,EAAE,WAAW,GAHzD,MAG8D,GAF5D,MAAM,CA6DlB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,2BAA2B,CAC/C,GAAG,EARM,MAQN,EACH,OAAO,GARE,MAAM,EAQH,EACZ,OAAO,AARN,CACA,EADQ,MAQG,GAPD,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAC,CAAC,CAqEpF"}
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Enrich Terraform components in place. Never throws; a failed lookup leaves
|
|
3
|
+
* the component exactly as the offline pass produced it.
|
|
4
|
+
*
|
|
5
|
+
* @param {object[]} pkgList Components to enrich
|
|
6
|
+
* @returns {Promise<object[]>} The same package list
|
|
7
|
+
*/
|
|
8
|
+
export declare function getTerraformRegistryMetadata(pkgList: object[]): Promise<object[]>;
|
|
9
|
+
//# sourceMappingURL=terraformRegistry.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"terraformRegistry.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/terraformRegistry.js"],"names":[],"mappings":"AA4DA;;;;;;GAMG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAH/C,MAAM,EAGyC,GAF7C,OAAO,CAAC,MAAM,EAAE,CAAC,CAsI7B"}
|
|
@@ -30,12 +30,12 @@ import { composePomXmlUrl, extractJarArchive, extractLicenseCommentFromPomXml, f
|
|
|
30
30
|
import { getMavenCommand, getMillCommand } from "./gradleutils.js";
|
|
31
31
|
import { createNpmWorkspacePurl } from "./npmutils.js";
|
|
32
32
|
import { getCentralPackageVersions, getPropertyGroupTextNodes, parseCsPkgData, parseCsPkgLockData, parseCsProjAssetsData, parseCsProjData, parseDirectoryPackagesProps, parseNupkg, parseNuspecData, parsePaketLockData } from "./parsers-dotnet.js";
|
|
33
|
-
import { getGoPkgComponent, parseGoListDep, parseGoModData, parseGoModGraph, parseGoModulesTxt, parseGoModWhy, parseGopkgData, parseGosumData, parseGoVersionData } from "./parsers-go.js";
|
|
33
|
+
import { getGoPkgComponent, parseGoListDep, parseGoModData, parseGoModGraph, parseGoModulesTxt, parseGoModWhy, parseGopkgData, parseGosumData, parseGosumHashes, parseGoVersionData } from "./parsers-go.js";
|
|
34
34
|
import { findPnpmPackagePath, getVersionNumPnpm, parseBowerJson, parseMinJs, parseNodeShrinkwrap, parsePackageJsonName, parsePkgJson, parsePkgLock, parsePnpmAliasRef, parsePnpmLock, parsePnpmWorkspace, parseYarnLock, parseYarnWorkspace, pnpmMetadata, splitCommandArgs, stripPnpmPeerSuffix, yarnLockToIdentMap } from "./parsers-js.js";
|
|
35
35
|
import { parseBazelActionGraph, parseBazelBuild, parseBazelSkyframe, parseCljDep, parseEdnData, parseKVDep, parseLeinDep, parseLeiningenData, parseLeinMap, parseMavenTree, parseMavenTreeJson, parseMillDependency, parsePom } from "./parsers-jvm.js";
|
|
36
36
|
import { buildObjectForCocoaPod, executeAlpmList, executeApkList, executeDpkgList, executeEqueryList, executePodCommand, executeRpmList, identifyFlow, parseBitbucketPipelinesFile, parseCabalData, parseCloudBuildData, parseCmakeDotFile, parseCmakeLikeFile, parseCocoaDependency, parseColliderLockData, parseComposerJson, parseComposerLock, parseConanData, parseConanLockData, parseContainerFile, parseContainerSpecData, parseCUsageSlice, parseFlakeLock, parseFlakeNix, parseGitHubWorkflowData, parseHelmYamlData, parseMakeDFile, parseMixLockData, parseOpenapiSpecData, parsePodfileLock, parsePodfileTargets, parsePrivadoFile, parsePubLockData, parsePubYamlData, parseSwiftJsonTree, parseSwiftJsonTreeObject, parseSwiftResolved, recurseImageNameLookup } from "./parsers-misc.js";
|
|
37
37
|
import { derivePythonLockMetadataFileName, generatePixiLockFile, parseMojoProject, parsePiplockData, parsePixiLockFile, parsePixiTomlFile, parsePyLockData, parsePyProjectTomlFile, parsePyRequiresDist, parseReqEnvMarkers, parseReqFile, parseSetupPyFile } from "./parsers-python.js";
|
|
38
38
|
import { parseCargoAuditableData, parseCargoData, parseCargoDependencyData, parseCargoManifestDependencyData, parseCargoTomlData } from "./parsers-rust.js";
|
|
39
39
|
import { createUVLock, getPipFrozenTree, getPipTreeForPackages, getPyModules } from "./pythonutils.js";
|
|
40
|
-
export { addEvidenceForDotnet, addLicenseText, adjustLicenseInformation, attachIdentityTools, BLOCKED_HOST_ERROR_CODE, buildObjectForCocoaPod, CARGO_CMD, CDXGEN_SPDX_CREATED_BY, CDXGEN_TEMP_DIR, CDXGEN_VERSION, CLJ_CMD, cdxgenAgent, checksumFile, collectExecutables, collectJarNS, collectMvnDependencies, collectSharedLibs, commandsExecuted, componentSorter, composePomXmlUrl, convertJarNSToPackages, convertOSQueryResults, createBlockedHostError, createDryRunError, createNpmWorkspacePurl, createUVLock, DEBUG_MODE, DOTNET_CMD, DRY_RUN_ERROR_CODE, derivePythonLockMetadataFileName, dirNameStr, encodeForPurl, executeAlpmList, executeApkList, executeAtom, executeDpkgList, executeEqueryList, executePodCommand, executeRpmList, extractJarArchive, extractLicenseCommentFromPomXml, extractPathEnv, extractToolRefs, FETCH_LICENSE, fetchPomXml, fetchPomXmlAsJson, findAppModules, findLicenseId, findLocalMvnArtifact, findPnpmPackagePath, frameworksList, GCC_CMD, GO_CMD, generatePixiLockFile, getAllFiles, getAllFilesWithIgnore, getAtomCommand, getCentralPackageVersions, getCratesMetadata, getDartMetadata, getDefaultBomAuditCategories, getGithubUrlParts, getGoPkgComponent, getGoPkgLicense, getJarClasses, getJavaCommand, getKnownLicense, getLicenses, getMavenCommand, getMillCommand, getMvnMetadata, getNpmMetadata, getNugetMetadata, getOSPackageForFile, getPipFrozenTree, getPipTreeForPackages, getPomPropertiesFromMavenDir, getPropertyGroupTextNodes, getPyMetadata, getPyModules, getPythonCommand, getRecordedActivities, getRepoLicense, getRuntimeInformation, getSwiftPackageMetadata, getTimestamp, getTmpDir, getVersionNumPnpm, guessLicenseId, guessPypiMatchingVersion, hasAnyProjectType, hasDangerousUnicode, identifyFlow, includeMavenTestScope, inferJarGroupFromManifest, isAllowedHttpHost, isBun, isDeno, isDryRun, isDryRunError, isFeatureEnabled, isMac, isNode, isPackageManagerAllowed, isPartialTree, isSecureMode, isSensitiveEnvironmentVariableName, isSpdxLicenseExpression, isValidDriveRoot, isValidIriReference, isWin, JAVA_CMD, LEIN_CMD, locateGenericPackage, MAX_BUFFER, mapConanPkgRefToPurlStringAndNameAndVersion, metadata_cache, multiChecksumFile, NODE_CMD, NPM_CMD, PACKAGE_MANAGER_ALIASES, PREFER_MAVEN_DEPS_TREE, PROJECT_TYPE_ALIASES, PYTHON_CMD, PYTHON_EXCLUDED_COMPONENTS, parseBazelActionGraph, parseBazelBuild, parseBazelSkyframe, parseBdistMetadata, parseBitbucketPipelinesFile, parseBowerJson, parseCabalData, parseCargoAuditableData, parseCargoData, parseCargoDependencyData, parseCargoManifestDependencyData, parseCargoTomlData, parseCljDep, parseCloudBuildData, parseCmakeDotFile, parseCmakeLikeFile, parseCocoaDependency, parseColliderLockData, parseComposerJson, parseComposerLock, parseConanData, parseConanLockData, parseContainerFile, parseContainerSpecData, parseCsPkgData, parseCsPkgLockData, parseCsProjAssetsData, parseCsProjData, parseCUsageSlice, parseDirectoryPackagesProps, parseEdnData, parseFlakeLock, parseFlakeNix, parseGitHubWorkflowData, parseGoListDep, parseGoModData, parseGoModGraph, parseGoModulesTxt, parseGoModWhy, parseGopkgData, parseGosumData, parseGoVersionData, parseHelmYamlData, parseJarManifest, parseKVDep, parseLeinDep, parseLeiningenData, parseLeinMap, parseLicenseEntryOrArrayFromPomXml, parseMakeDFile, parseMavenArgs, parseMavenTree, parseMavenTreeJson, parseMillDependency, parseMinJs, parseMixLockData, parseMojoProject, parseNodeShrinkwrap, parseNupkg, parseNuspecData, parseOpenapiSpecData, parsePackageJsonName, parsePaketLockData, parsePiplockData, parsePixiLockFile, parsePixiTomlFile, parsePkgJson, parsePkgLock, parsePnpmAliasRef, parsePnpmLock, parsePnpmWorkspace, parsePodfileLock, parsePodfileTargets, parsePom, parsePomProperties, parsePomXml, parsePrivadoFile, parsePubLockData, parsePubYamlData, parsePyLockData, parsePyProjectTomlFile, parsePyRequiresDist, parseReqEnvMarkers, parseReqFile, parseSetupPyFile, parseSwiftJsonTree, parseSwiftJsonTreeObject, parseSwiftResolved, parseYarnLock, parseYarnWorkspace, pnpmMetadata, purlFromUrlString, RUBY_CMD, RUSTC_CMD, readEnvironmentVariable, readLicenseText, readZipEntry, recomputeScope, recordActivity, recordDecisionActivity, recordDiscoveryActivity, recordEnvironmentRead, recordObservedActivity, recordPolicyActivity, recordSensitiveFileRead, recordSymlinkResolution, recurseImageNameLookup, remoteHostsAccessed, repoMetadataToGitHubApiUrl, resetActivityContext, resetRecordedActivities, retrieveCdxgenPluginVersion, retrieveCdxgenVersion, SEARCH_MAVEN_ORG, SWIFT_CMD, safeCopyFileSync, safeExistsSync, safeExtractArchive, safeMkdirSync, safeMkdtempSync, safeRmSync, safeSpawnSync, safeUnlinkSync, safeWriteSync, setActivityContext, setDryRunMode, shouldFetchLicense, shouldFetchPackageMetadata, shouldFetchVCS, shouldRunPredictiveBomAudit, splitCommandArgs, stripPnpmPeerSuffix, TABLE_BORDER_STYLE, TIMEOUT_MS, toCamel, toGitHubApiUrl, trimJarGroupSuffix, YARN_CMD, yarnLockToIdentMap, };
|
|
40
|
+
export { addEvidenceForDotnet, addLicenseText, adjustLicenseInformation, attachIdentityTools, BLOCKED_HOST_ERROR_CODE, buildObjectForCocoaPod, CARGO_CMD, CDXGEN_SPDX_CREATED_BY, CDXGEN_TEMP_DIR, CDXGEN_VERSION, CLJ_CMD, cdxgenAgent, checksumFile, collectExecutables, collectJarNS, collectMvnDependencies, collectSharedLibs, commandsExecuted, componentSorter, composePomXmlUrl, convertJarNSToPackages, convertOSQueryResults, createBlockedHostError, createDryRunError, createNpmWorkspacePurl, createUVLock, DEBUG_MODE, DOTNET_CMD, DRY_RUN_ERROR_CODE, derivePythonLockMetadataFileName, dirNameStr, encodeForPurl, executeAlpmList, executeApkList, executeAtom, executeDpkgList, executeEqueryList, executePodCommand, executeRpmList, extractJarArchive, extractLicenseCommentFromPomXml, extractPathEnv, extractToolRefs, FETCH_LICENSE, fetchPomXml, fetchPomXmlAsJson, findAppModules, findLicenseId, findLocalMvnArtifact, findPnpmPackagePath, frameworksList, GCC_CMD, GO_CMD, generatePixiLockFile, getAllFiles, getAllFilesWithIgnore, getAtomCommand, getCentralPackageVersions, getCratesMetadata, getDartMetadata, getDefaultBomAuditCategories, getGithubUrlParts, getGoPkgComponent, getGoPkgLicense, getJarClasses, getJavaCommand, getKnownLicense, getLicenses, getMavenCommand, getMillCommand, getMvnMetadata, getNpmMetadata, getNugetMetadata, getOSPackageForFile, getPipFrozenTree, getPipTreeForPackages, getPomPropertiesFromMavenDir, getPropertyGroupTextNodes, getPyMetadata, getPyModules, getPythonCommand, getRecordedActivities, getRepoLicense, getRuntimeInformation, getSwiftPackageMetadata, getTimestamp, getTmpDir, getVersionNumPnpm, guessLicenseId, guessPypiMatchingVersion, hasAnyProjectType, hasDangerousUnicode, identifyFlow, includeMavenTestScope, inferJarGroupFromManifest, isAllowedHttpHost, isBun, isDeno, isDryRun, isDryRunError, isFeatureEnabled, isMac, isNode, isPackageManagerAllowed, isPartialTree, isSecureMode, isSensitiveEnvironmentVariableName, isSpdxLicenseExpression, isValidDriveRoot, isValidIriReference, isWin, JAVA_CMD, LEIN_CMD, locateGenericPackage, MAX_BUFFER, mapConanPkgRefToPurlStringAndNameAndVersion, metadata_cache, multiChecksumFile, NODE_CMD, NPM_CMD, PACKAGE_MANAGER_ALIASES, PREFER_MAVEN_DEPS_TREE, PROJECT_TYPE_ALIASES, PYTHON_CMD, PYTHON_EXCLUDED_COMPONENTS, parseBazelActionGraph, parseBazelBuild, parseBazelSkyframe, parseBdistMetadata, parseBitbucketPipelinesFile, parseBowerJson, parseCabalData, parseCargoAuditableData, parseCargoData, parseCargoDependencyData, parseCargoManifestDependencyData, parseCargoTomlData, parseCljDep, parseCloudBuildData, parseCmakeDotFile, parseCmakeLikeFile, parseCocoaDependency, parseColliderLockData, parseComposerJson, parseComposerLock, parseConanData, parseConanLockData, parseContainerFile, parseContainerSpecData, parseCsPkgData, parseCsPkgLockData, parseCsProjAssetsData, parseCsProjData, parseCUsageSlice, parseDirectoryPackagesProps, parseEdnData, parseFlakeLock, parseFlakeNix, parseGitHubWorkflowData, parseGoListDep, parseGoModData, parseGoModGraph, parseGoModulesTxt, parseGoModWhy, parseGopkgData, parseGosumData, parseGosumHashes, parseGoVersionData, parseHelmYamlData, parseJarManifest, parseKVDep, parseLeinDep, parseLeiningenData, parseLeinMap, parseLicenseEntryOrArrayFromPomXml, parseMakeDFile, parseMavenArgs, parseMavenTree, parseMavenTreeJson, parseMillDependency, parseMinJs, parseMixLockData, parseMojoProject, parseNodeShrinkwrap, parseNupkg, parseNuspecData, parseOpenapiSpecData, parsePackageJsonName, parsePaketLockData, parsePiplockData, parsePixiLockFile, parsePixiTomlFile, parsePkgJson, parsePkgLock, parsePnpmAliasRef, parsePnpmLock, parsePnpmWorkspace, parsePodfileLock, parsePodfileTargets, parsePom, parsePomProperties, parsePomXml, parsePrivadoFile, parsePubLockData, parsePubYamlData, parsePyLockData, parsePyProjectTomlFile, parsePyRequiresDist, parseReqEnvMarkers, parseReqFile, parseSetupPyFile, parseSwiftJsonTree, parseSwiftJsonTreeObject, parseSwiftResolved, parseYarnLock, parseYarnWorkspace, pnpmMetadata, purlFromUrlString, RUBY_CMD, RUSTC_CMD, readEnvironmentVariable, readLicenseText, readZipEntry, recomputeScope, recordActivity, recordDecisionActivity, recordDiscoveryActivity, recordEnvironmentRead, recordObservedActivity, recordPolicyActivity, recordSensitiveFileRead, recordSymlinkResolution, recurseImageNameLookup, remoteHostsAccessed, repoMetadataToGitHubApiUrl, resetActivityContext, resetRecordedActivities, retrieveCdxgenPluginVersion, retrieveCdxgenVersion, SEARCH_MAVEN_ORG, SWIFT_CMD, safeCopyFileSync, safeExistsSync, safeExtractArchive, safeMkdirSync, safeMkdtempSync, safeRmSync, safeSpawnSync, safeUnlinkSync, safeWriteSync, setActivityContext, setDryRunMode, shouldFetchLicense, shouldFetchPackageMetadata, shouldFetchVCS, shouldRunPredictiveBomAudit, splitCommandArgs, stripPnpmPeerSuffix, TABLE_BORDER_STYLE, TIMEOUT_MS, toCamel, toGitHubApiUrl, trimJarGroupSuffix, YARN_CMD, yarnLockToIdentMap, };
|
|
41
41
|
//# sourceMappingURL=utils.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/utils.js"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,sBAAsB,EACtB,iBAAiB,EACjB,UAAU,EACV,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,QAAQ,EACR,aAAa,EACb,YAAY,EACZ,kCAAkC,EAClC,uBAAuB,EACvB,cAAc,EACd,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,EAClB,aAAa,EACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,SAAS,EACT,sBAAsB,EACtB,eAAe,EACf,OAAO,EACP,UAAU,EACV,cAAc,EACd,aAAa,EACb,OAAO,EACP,MAAM,EACN,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,KAAK,EACL,MAAM,EACN,gBAAgB,EAChB,MAAM,EACN,uBAAuB,EACvB,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,UAAU,EACV,0BAA0B,EAC1B,cAAc,EACd,QAAQ,EACR,SAAS,EACT,gBAAgB,EAChB,SAAS,EACT,kBAAkB,EAClB,0BAA0B,EAC1B,cAAc,EACd,2BAA2B,EAC3B,kBAAkB,EAClB,QAAQ,EACT,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,qBAAqB,EACrB,YAAY,EACZ,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,UAAU,EACV,aAAa,EACb,cAAc,EACd,aAAa,EACb,UAAU,EACX,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,UAAU,EACV,KAAK,EACL,gBAAgB,EAChB,KAAK,EACL,OAAO,EACR,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EACL,WAAW,EACX,cAAc,EACd,cAAc,EACf,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EACL,YAAY,EACZ,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,aAAa,EACb,4BAA4B,EAC5B,yBAAyB,EACzB,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,kBAAkB,EACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,qBAAqB,EACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,2CAA2C,EAC3C,iBAAiB,EAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,aAAa,EACb,eAAe,EACf,WAAW,EACX,cAAc,EACd,uBAAuB,EACvB,eAAe,EAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,+BAA+B,EAC/B,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,uBAAuB,EACvB,wBAAwB,EACxB,cAAc,EACd,kBAAkB,EAClB,kCAAkC,EAClC,0BAA0B,EAC1B,cAAc,EACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,2BAA2B,EAC3B,UAAU,EACV,eAAe,EACf,kBAAkB,EACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,cAAc,EACd,kBAAkB,EACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,UAAU,EACV,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,QAAQ,EACT,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,2BAA2B,EAC3B,cAAc,EACd,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,uBAAuB,EACvB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,kBAAkB,EAClB,sBAAsB,EACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gCAAgC,EAChC,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,gCAAgC,EAChC,kBAAkB,EACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,YAAY,EACb,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,SAAS,EACT,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,OAAO,EACP,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,sBAAsB,EACtB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,EACtB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,gCAAgC,EAChC,UAAU,EACV,aAAa,EACb,eAAe,EACf,cAAc,EACd,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,+BAA+B,EAC/B,cAAc,EACd,eAAe,EACf,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,OAAO,EACP,MAAM,EACN,oBAAoB,EACpB,WAAW,EACX,qBAAqB,EACrB,cAAc,EACd,yBAAyB,EACzB,iBAAiB,EACjB,eAAe,EACf,4BAA4B,EAC5B,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,cAAc,EACd,eAAe,EACf,WAAW,EACX,eAAe,EACf,cAAc,EACd,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,qBAAqB,EACrB,4BAA4B,EAC5B,yBAAyB,EACzB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,YAAY,EACZ,SAAS,EACT,iBAAiB,EACjB,cAAc,EACd,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,qBAAqB,EACrB,yBAAyB,EACzB,iBAAiB,EACjB,KAAK,EACL,MAAM,EACN,QAAQ,EACR,aAAa,EACb,gBAAgB,EAChB,KAAK,EACL,MAAM,EACN,uBAAuB,EACvB,aAAa,EACb,YAAY,EACZ,kCAAkC,EAClC,uBAAuB,EACvB,gBAAgB,EAChB,mBAAmB,EACnB,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,oBAAoB,EACpB,UAAU,EACV,2CAA2C,EAC3C,cAAc,EACd,iBAAiB,EACjB,QAAQ,EACR,OAAO,EACP,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,UAAU,EACV,0BAA0B,EAC1B,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,2BAA2B,EAC3B,cAAc,EACd,cAAc,EACd,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,gCAAgC,EAChC,kBAAkB,EAClB,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,2BAA2B,EAC3B,YAAY,EACZ,cAAc,EACd,aAAa,EACb,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,kCAAkC,EAClC,cAAc,EACd,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,UAAU,EACV,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,QAAQ,EACR,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,QAAQ,EACR,SAAS,EACT,uBAAuB,EACvB,eAAe,EACf,YAAY,EACZ,cAAc,EACd,cAAc,EACd,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACnB,0BAA0B,EAC1B,oBAAoB,EACpB,uBAAuB,EACvB,2BAA2B,EAC3B,qBAAqB,EACrB,gBAAgB,EAChB,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,UAAU,EACV,aAAa,EACb,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,0BAA0B,EAC1B,cAAc,EACd,2BAA2B,EAC3B,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EACV,OAAO,EACP,cAAc,EACd,kBAAkB,EAClB,QAAQ,EACR,kBAAkB,GACnB,CAAC"}
|
|
1
|
+
{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/utils.js"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,sBAAsB,EACtB,iBAAiB,EACjB,UAAU,EACV,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,QAAQ,EACR,aAAa,EACb,YAAY,EACZ,kCAAkC,EAClC,uBAAuB,EACvB,cAAc,EACd,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,EAClB,aAAa,EACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,SAAS,EACT,sBAAsB,EACtB,eAAe,EACf,OAAO,EACP,UAAU,EACV,cAAc,EACd,aAAa,EACb,OAAO,EACP,MAAM,EACN,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,KAAK,EACL,MAAM,EACN,gBAAgB,EAChB,MAAM,EACN,uBAAuB,EACvB,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,UAAU,EACV,0BAA0B,EAC1B,cAAc,EACd,QAAQ,EACR,SAAS,EACT,gBAAgB,EAChB,SAAS,EACT,kBAAkB,EAClB,0BAA0B,EAC1B,cAAc,EACd,2BAA2B,EAC3B,kBAAkB,EAClB,QAAQ,EACT,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,qBAAqB,EACrB,YAAY,EACZ,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,UAAU,EACV,aAAa,EACb,cAAc,EACd,aAAa,EACb,UAAU,EACX,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,UAAU,EACV,KAAK,EACL,gBAAgB,EAChB,KAAK,EACL,OAAO,EACR,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EACL,WAAW,EACX,cAAc,EACd,cAAc,EACf,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EACL,YAAY,EACZ,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,aAAa,EACb,4BAA4B,EAC5B,yBAAyB,EACzB,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,kBAAkB,EACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,qBAAqB,EACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,2CAA2C,EAC3C,iBAAiB,EAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,aAAa,EACb,eAAe,EACf,WAAW,EACX,cAAc,EACd,uBAAuB,EACvB,eAAe,EAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,+BAA+B,EAC/B,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,uBAAuB,EACvB,wBAAwB,EACxB,cAAc,EACd,kBAAkB,EAClB,kCAAkC,EAClC,0BAA0B,EAC1B,cAAc,EACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,2BAA2B,EAC3B,UAAU,EACV,eAAe,EACf,kBAAkB,EACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,UAAU,EACV,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,QAAQ,EACT,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,2BAA2B,EAC3B,cAAc,EACd,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,uBAAuB,EACvB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,kBAAkB,EAClB,sBAAsB,EACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gCAAgC,EAChC,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,gCAAgC,EAChC,kBAAkB,EACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,YAAY,EACb,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,SAAS,EACT,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,OAAO,EACP,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,sBAAsB,EACtB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,EACtB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,gCAAgC,EAChC,UAAU,EACV,aAAa,EACb,eAAe,EACf,cAAc,EACd,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,+BAA+B,EAC/B,cAAc,EACd,eAAe,EACf,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,OAAO,EACP,MAAM,EACN,oBAAoB,EACpB,WAAW,EACX,qBAAqB,EACrB,cAAc,EACd,yBAAyB,EACzB,iBAAiB,EACjB,eAAe,EACf,4BAA4B,EAC5B,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,cAAc,EACd,eAAe,EACf,WAAW,EACX,eAAe,EACf,cAAc,EACd,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,qBAAqB,EACrB,4BAA4B,EAC5B,yBAAyB,EACzB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,YAAY,EACZ,SAAS,EACT,iBAAiB,EACjB,cAAc,EACd,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,qBAAqB,EACrB,yBAAyB,EACzB,iBAAiB,EACjB,KAAK,EACL,MAAM,EACN,QAAQ,EACR,aAAa,EACb,gBAAgB,EAChB,KAAK,EACL,MAAM,EACN,uBAAuB,EACvB,aAAa,EACb,YAAY,EACZ,kCAAkC,EAClC,uBAAuB,EACvB,gBAAgB,EAChB,mBAAmB,EACnB,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,oBAAoB,EACpB,UAAU,EACV,2CAA2C,EAC3C,cAAc,EACd,iBAAiB,EACjB,QAAQ,EACR,OAAO,EACP,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,UAAU,EACV,0BAA0B,EAC1B,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,2BAA2B,EAC3B,cAAc,EACd,cAAc,EACd,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,gCAAgC,EAChC,kBAAkB,EAClB,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,2BAA2B,EAC3B,YAAY,EACZ,cAAc,EACd,aAAa,EACb,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,kCAAkC,EAClC,cAAc,EACd,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,UAAU,EACV,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,QAAQ,EACR,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,QAAQ,EACR,SAAS,EACT,uBAAuB,EACvB,eAAe,EACf,YAAY,EACZ,cAAc,EACd,cAAc,EACd,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACnB,0BAA0B,EAC1B,oBAAoB,EACpB,uBAAuB,EACvB,2BAA2B,EAC3B,qBAAqB,EACrB,gBAAgB,EAChB,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,UAAU,EACV,aAAa,EACb,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,0BAA0B,EAC1B,cAAc,EACd,2BAA2B,EAC3B,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EACV,OAAO,EACP,cAAc,EACd,kBAAkB,EAClB,QAAQ,EACR,kBAAkB,GACnB,CAAC"}
|
|
@@ -0,0 +1,32 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Code a project carries inside its own tree under a license of its own: a
|
|
3
|
+
* copied library, an imported test suite. Such a directory holds its own
|
|
4
|
+
* license file, and the license differs from the project's.
|
|
5
|
+
*
|
|
6
|
+
* Layer 3: reads license files under the scan root.
|
|
7
|
+
*/
|
|
8
|
+
/**
|
|
9
|
+
* Whether a file name is a license file: `LICENSE`, `LICENCE` or `COPYING`,
|
|
10
|
+
* bare, with a text extension, or with a suffix naming the license
|
|
11
|
+
* (`LICENSE-MIT`).
|
|
12
|
+
*
|
|
13
|
+
* @param {string} name File name
|
|
14
|
+
* @returns {boolean}
|
|
15
|
+
*/
|
|
16
|
+
export declare function isLicenseFileName(name: string): boolean;
|
|
17
|
+
/**
|
|
18
|
+
* Find the directories of a project that carry code under a license other
|
|
19
|
+
* than the project's.
|
|
20
|
+
*
|
|
21
|
+
* @param {string} root Project scan root
|
|
22
|
+
* @param {Object} options CLI options (exclusions)
|
|
23
|
+
* @param {string[]} [excludeDirs] Directories already known to hold
|
|
24
|
+
* dependencies (submodules, fetched sources, build trees), not searched
|
|
25
|
+
* @returns {{components: Object[], dirs: string[]}} A component per vendored
|
|
26
|
+
* directory, and the directories
|
|
27
|
+
*/
|
|
28
|
+
export declare function findVendoredCode(root: string, options?: Object, excludeDirs?: string[]): {
|
|
29
|
+
components: Object[];
|
|
30
|
+
dirs: string[];
|
|
31
|
+
};
|
|
32
|
+
//# sourceMappingURL=vendoredCode.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"vendoredCode.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/vendoredCode.js"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA2BH;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAH3B,MAG2B,GAFzB,OAAO,CAkBnB;AAkBD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAP1B,MAO0B,EAAE,OAAO,GANnC,MAMwC,EAAE,WAAW,AAL7D,CAEA,EAFQ,MAAM,EAKoD,GAHxD;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAC,CAwElD"}
|
|
@@ -10,6 +10,22 @@
|
|
|
10
10
|
* @param {Object[]} metadataProperties Properties from the analyzer run
|
|
11
11
|
*/
|
|
12
12
|
export declare function mergeAnalyzerMetadataProperties(component: Object, metadataProperties?: Object[]): void;
|
|
13
|
+
/**
|
|
14
|
+
* The evidence language of a `cdxgen --evidence` run that names no project
|
|
15
|
+
* type.
|
|
16
|
+
*
|
|
17
|
+
* A directory with a Scala build takes the scalasem path. Otherwise the
|
|
18
|
+
* generated BOM decides: Java when it lists Maven packages, as before, and
|
|
19
|
+
* else the language most of its packages belong to. A BOM with no package in
|
|
20
|
+
* a language the evidence step analyses gives no language, so no analyzer
|
|
21
|
+
* runs over sources it cannot read.
|
|
22
|
+
*
|
|
23
|
+
* @param {string} dirPath Project directory
|
|
24
|
+
* @param {Object} [bomJson] The BOM generated for the directory
|
|
25
|
+
* @param {Object} [options] CLI options, for the exclude patterns
|
|
26
|
+
* @returns {string|undefined} Project type for the evidence phase
|
|
27
|
+
*/
|
|
28
|
+
export declare function defaultEvidenceLanguage(dirPath: string, bomJson?: Object, options?: Object): string | undefined;
|
|
13
29
|
/**
|
|
14
30
|
* Build the options for the evinse phase (prepareDB, analyzeProject, and
|
|
15
31
|
* createEvinseFile) from the cdxgen CLI options.
|
|
@@ -38,11 +54,22 @@ export declare function prepareDB(options: Object): Promise<{
|
|
|
38
54
|
Usages: Object;
|
|
39
55
|
DataFlows: Object;
|
|
40
56
|
} | undefined>;
|
|
57
|
+
/**
|
|
58
|
+
* Read the jar namespace map cdxgen writes next to the BOM it generates
|
|
59
|
+
* (`<bom>.map`). The map for the BOM passed as `--input` is preferred; a
|
|
60
|
+
* `bom.json.map` in the project directory is the fallback.
|
|
61
|
+
*
|
|
62
|
+
* @param {string} dirPath Project directory scanned by evinse
|
|
63
|
+
* @param {Object} [options] CLI options, for `input`
|
|
64
|
+
* @returns {Object|undefined} The mapping, when a non-empty one exists.
|
|
65
|
+
*/
|
|
66
|
+
export declare function readNamespaceMap(dirPath: string, options?: Object): Object | undefined;
|
|
41
67
|
/**
|
|
42
68
|
* Collect Maven jar namespace mappings for the purls found in the SBOM.
|
|
43
69
|
*
|
|
44
|
-
* If a
|
|
45
|
-
* otherwise the maven command is invoked to collect the jar
|
|
70
|
+
* If cdxgen left a namespace map next to the BOM (see {@link readNamespaceMap})
|
|
71
|
+
* it is reused; otherwise the maven command is invoked to collect the jar
|
|
72
|
+
* dependencies. Each
|
|
46
73
|
* resolved purl is recorded in the `purlsJars` map and persisted in the
|
|
47
74
|
* `Namespaces` model.
|
|
48
75
|
*
|
|
@@ -64,7 +91,7 @@ export declare function catalogMavenDeps(dirPath: string, purlsJars: Record<stri
|
|
|
64
91
|
* @param {Object} Namespaces Sequelize-like Namespaces model used to persist pom and namespaces
|
|
65
92
|
* @returns {Promise<void>}
|
|
66
93
|
*/
|
|
67
|
-
export declare function catalogGradleDeps(dirPath: string, purlsJars: Record<string, string>, Namespaces: Object): Promise<void>;
|
|
94
|
+
export declare function catalogGradleDeps(dirPath: string, purlsJars: Record<string, string>, Namespaces: Object, options?: {}): Promise<void>;
|
|
68
95
|
/**
|
|
69
96
|
* Generate a usage slice for the given purl and persist it in the Usages model.
|
|
70
97
|
*
|
|
@@ -140,8 +167,8 @@ export declare function initFromSbom(components: Object[], language: string): {
|
|
|
140
167
|
* describe the same project directory and must not predate the input SBOM:
|
|
141
168
|
* `cdxgen --evidence` writes a fresh SBOM before evinse runs, so an older
|
|
142
169
|
* slice was made from an earlier state of the sources and is regenerated.
|
|
143
|
-
* Scala
|
|
144
|
-
*
|
|
170
|
+
* Scala reports are handled by the scalasem analyzer, which applies its own
|
|
171
|
+
* rules.
|
|
145
172
|
*
|
|
146
173
|
* @param {string} language Project language
|
|
147
174
|
* @param {string} slicesFile Candidate semantics slices file
|
|
@@ -150,13 +177,23 @@ export declare function initFromSbom(components: Object[], language: string): {
|
|
|
150
177
|
* @returns {undefined|Object} Parsed slice when it can be reused
|
|
151
178
|
*/
|
|
152
179
|
export declare function loadReusableSemanticsSlice(language: string, slicesFile: string, bomFile: string, dirPath: string): undefined | Object;
|
|
180
|
+
/**
|
|
181
|
+
* Merge service definitions into a services map: endpoints join, and a
|
|
182
|
+
* property another source already carries is not added again, whatever the
|
|
183
|
+
* case of an HTTP method.
|
|
184
|
+
*
|
|
185
|
+
* @param {Object} target Services map that receives the definitions.
|
|
186
|
+
* @param {Object} source Services map to merge in.
|
|
187
|
+
* @returns {Object} The target map.
|
|
188
|
+
*/
|
|
189
|
+
export declare function mergeServiceDefinitions(target: Object, source: Object): Object;
|
|
153
190
|
/**
|
|
154
191
|
* Function to analyze the project
|
|
155
192
|
*
|
|
156
193
|
* @param {Object} dbObjMap DB and model instances
|
|
157
194
|
* @param {Object} options Command line options
|
|
158
195
|
*/
|
|
159
|
-
export declare function analyzeProject(dbObjMap: Object, options: Object): Promise<{
|
|
196
|
+
export declare function analyzeProject(dbObjMap: Object, options: Object): Promise<Object | {
|
|
160
197
|
purlLocationMap: Record<string, Set<any>>;
|
|
161
198
|
servicesMap: {};
|
|
162
199
|
dataFlowFrames: {};
|
|
@@ -269,7 +306,37 @@ export declare function analyzeProject(dbObjMap: Object, options: Object): Promi
|
|
|
269
306
|
* @param {string} [openapiSpecFile=undefined] Optional path to an OpenAPI spec used for service detection
|
|
270
307
|
* @returns {Promise<Object>} Map with `purlLocationMap`, `servicesMap`, and `userDefinedTypesMap`
|
|
271
308
|
*/
|
|
272
|
-
|
|
309
|
+
/**
|
|
310
|
+
* Attribute the include slices of a C/C++ usages report to the BOM
|
|
311
|
+
* components that provide the files they resolved to: each header's imported
|
|
312
|
+
* symbols (the functions the including file calls that it declares), and the
|
|
313
|
+
* include directive's location. Reports from atom releases that do not name
|
|
314
|
+
* the resolved file attribute nothing.
|
|
315
|
+
*
|
|
316
|
+
* @param {Object} usageSlice Parsed usages report
|
|
317
|
+
* @param {Object[]} components Components of the input BOM
|
|
318
|
+
* @param {string} dirPath Source directory
|
|
319
|
+
* @param {Object} options CLI options
|
|
320
|
+
* @returns {{symbols: Map<string, Set<string>>, locations: Map<string, Set<string>>}}
|
|
321
|
+
* Imported symbols and include locations (`file#line`) by purl
|
|
322
|
+
*/
|
|
323
|
+
export declare function attributeCIncludes(usageSlice: Object, components: Object[], dirPath: string, options?: Object): {
|
|
324
|
+
symbols: Map<string, Set<string>>;
|
|
325
|
+
locations: Map<string, Set<string>>;
|
|
326
|
+
};
|
|
327
|
+
/**
|
|
328
|
+
* Seed the C/C++ imports from the include slices of a usages report (see
|
|
329
|
+
* `attributeCIncludes`).
|
|
330
|
+
*
|
|
331
|
+
* @param {Object} usageSlice Parsed usages report
|
|
332
|
+
* @param {Object[]} components Components of the input BOM
|
|
333
|
+
* @param {string} dirPath Source directory
|
|
334
|
+
* @param {Object} purlImportsMap Imports by purl, extended in place
|
|
335
|
+
* @param {Object} options CLI options
|
|
336
|
+
* @returns {Object} purlImportsMap
|
|
337
|
+
*/
|
|
338
|
+
export declare function seedCImportsFromIncludes(usageSlice: Object, components: Object[], dirPath: string, purlImportsMap?: Object, options?: Object): Object;
|
|
339
|
+
export declare function parseObjectSlices(language: any, usageSlice: any, dbObjMap: any, servicesMap?: {}, purlLocationMap?: {}, purlImportsMap?: {}, openapiSpecFile?: undefined): Promise<{}>;
|
|
273
340
|
/**
|
|
274
341
|
* The implementation of this function is based on the logic proposed in the atom slices specification
|
|
275
342
|
* https://github.com/AppThreat/atom/blob/main/specification/docs/slices.md#use
|
|
@@ -299,7 +366,7 @@ export declare function parseSliceUsages(language: string, userDefinedTypesMap:
|
|
|
299
366
|
* @param {Object} semanticsSlice Semantic slice data
|
|
300
367
|
* @returns {Object} Parsed metadata
|
|
301
368
|
*/
|
|
302
|
-
export declare function parseSemanticSlices(
|
|
369
|
+
export declare function parseSemanticSlices(_language: any, components: any[], semanticsSlice: Object): Object;
|
|
303
370
|
/**
|
|
304
371
|
* Decide whether a type name should be ignored during slice analysis.
|
|
305
372
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"evinser.d.ts","sourceRoot":"","sources":["../../../lib/evinser/evinser.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"evinser.d.ts","sourceRoot":"","sources":["../../../lib/evinser/evinser.js"],"names":[],"mappings":"AAwHA;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAC7C,SAAS,EAJA,MAIA,EACT,kBAAkB,GAJT,MAAM,EAIQ,QAkBxB;AAyBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EALpC,MAKoC,EAAE,OAAO,AAJrD,CACA,EADQ,MAI6C,EAAE,OAAO,AAH9D,CACA,EADQ,MAG2D,GAFzD,MAAM,GAAC,SAAS,CAyC5B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAL/B,MAK+B,EAAE,IAAI,EAJrC,MAIqC,EAAE,KAAK,EAH5C,MAG4C,GAF1C,MAAM,CA2ClB;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAF5B,MAE4B;;;;;;;eAuDtC;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAJ7B,MAI6B,EAAE,OAAO,AAH9C,CACA,EADQ,MAG2C,GAFzC,MAAM,GAAC,SAAS,CAqB5B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAPE,MAOF,EACP,SAAS,wBAAA,EACT,UAAU,EAPD,MAOC,EACV,OAAO,GAPE,MAOG,GAND,OAAO,CAAC,IAAI,CAAC,CAuCzB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EANE,MAMF,EACP,SAAS,wBAAA,EACT,UAAU,EAND,MAMC,EACV,OAAO,KAAK,GAND,OAAO,CAAC,IAAI,CAAC,CA8CzB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAPK,MAOL,EACJ,SAAS,wBAAA,EACT,MAAM,EAPG,MAOH,EACN,OAAO,GAPE,MAOG,GAND,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAuBrC;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAH9B,MAG8B,GAF5B,MAAM,CAOlB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,WAAW,CAC/B,eAAe,EAPN,MAAM,GAAC,MAAM,EAOP,EACf,QAAQ,EAPC,MAOD,EACR,SAAS,AAPR,CACA,EADQ,MAOW,EACpB,OAAO,AAPN,CACA,EADQ,MAOG,GAND,OAAO,CAAC,MAAM,CAAC,CAkN3B;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAJxB,MAIwB,EAAE,QAAQ,AAH1C,CACA,EADQ,MAGkC,GAFhC,MAAM,GAAC,SAAS,CA4B5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAJ5B,MAAM,EAIsB,EAAE,QAAQ,EAHtC,MAGsC,GAFpC;IAAE,eAAe,2BAAsB;IAAC,cAAc,2BAA0B;CAAE,CAiD9F;AAcD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAPC,MAOD,EACR,UAAU,EAPD,MAOC,EACV,OAAO,EAPE,MAOF,EACP,OAAO,EAPE,MAOF,GANI,SAAS,GAAC,MAAM,CAqC5B;AA4KD;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAJnC,MAImC,EAAE,MAAM,EAH3C,MAG2C,GAFzC,MAAM,CAgClB;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAHlC,MAGkC,EAAE,OAAO,EAF3C,MAE2C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuerD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EARD,MAQC,EACV,UAAU,EARD,MAAM,EAQL,EACV,OAAO,EARE,MAQF,EACP,OAAO,GARE,MAQG,GAPD;IAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;CAAC,CA0EpF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EARD,MAQC,EACV,UAAU,EARD,MAAM,EAQL,EACV,OAAO,EARE,MAQF,EACP,cAAc,GARL,MAQU,EACnB,OAAO,GARE,MAQG,GAPD,MAAM,CAqBlB;AAED,wBAAsB,iBAAiB,CACrC,QAAQ,KAAA,EACR,UAAU,KAAA,EACV,QAAQ,KAAA,EACR,WAAW,KAAK,EAChB,eAAe,KAAK,EACpB,cAAc,KAAK,EACnB,eAAe,YAAY,eAuD5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EATC,MASD,EACR,mBAAmB,EATV,MASU,EACnB,KAAK,OAAA,EACL,QAAQ,EATC,MASD,EACR,eAAe,EATN,MASM,EACf,cAAc,EATL,MASK,iBA4Nf;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,KAAA,EAAE,UAAU,OAAA,EAAE,cAAc,EAH9D,MAG8D,GAF5D,MAAM,CAsDlB;AA2LD;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAL9B,MAK8B,EAAE,mBAAmB,yBAAA,EAAE,YAAY,EAHjE,MAGiE,GAF/D,OAAO,CA2EnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EANA,MAMA,EACT,eAAe,EANN,MAMM,EACf,WAAW,EANF,MAME,GALA,IAAI,CAqChB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAJtC,MAIsC,EAAE,KAAK,OAAA,EAAE,WAAW,GAF1D,MAE+D,uBA2DzE;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAJnC,MAImC,EAAE,gBAAgB,OAAA,EAAE,WAAW,EAFlE,MAEkE,QAgD5E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAJnC,MAImC,EAAE,KAAK,EAH1C,MAG0C,GAFxC,MAAM,CAalB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAJ9B,MAI8B,EAAE,IAAI,EAHpC,MAGoC,GAFlC,MAAM,EAAE,GAAC,SAAS,CAwF9B;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,cAAc,EAJ1C,MAI0C,EAAE,OAAO,EAHnD,MAGmD,gBA8M7D;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EARC,MAQD,EACR,mBAAmB,EARV,MAQU,EACnB,aAAa,EARJ,MAQI,EACb,QAAQ,EARC,MAQD,EACR,gBAAgB,EARP,MAQO,EAChB,cAAc,EARL,MAQK,eA4Gf;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAHrC,MAGqC,EAAE,eAAe,EAFtD,MAEsD;;;;;;;;YAgFzD,SAAS;YACT,GAAG;;;;EASV;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,QAAQ,OAAA,qBA4DnC;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAH9B,MAG8B,UAExC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAJvC,MAIuC,EAAE,YAAY,EAHrD,MAGqD,GAFnD,MAAM,GAAC,SAAS,CAmD5B"}
|