@cdxgen/cdxgen 13.3.0 → 13.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (255) hide show
  1. package/README.md +9 -6
  2. package/bin/cdxgen.js +90 -26
  3. package/bin/evinse.js +18 -1
  4. package/bin/repl.js +86 -0
  5. package/bin/sign.js +45 -15
  6. package/bin/tracebom.js +5 -1
  7. package/bin/validate.js +84 -18
  8. package/bin/verify.js +155 -86
  9. package/data/helpers/init.gradle +46 -21
  10. package/data/remediations.json +61 -0
  11. package/data/rules/dependency-sources.yaml +67 -0
  12. package/data/rules/scala-evidence.yaml +115 -0
  13. package/lib/audit/index.js +38 -6
  14. package/lib/cli/index.js +113 -54
  15. package/lib/cli/jsBom.js +50 -29
  16. package/lib/cli/jvmBom.js +665 -138
  17. package/lib/cli/managedBom.js +320 -200
  18. package/lib/cli/nativeBom.js +139 -30
  19. package/lib/core/activity.js +12 -0
  20. package/lib/core/env.js +17 -9
  21. package/lib/core/fs.js +3 -2
  22. package/lib/core/httpClient.js +159 -24
  23. package/lib/core/pluginRun.js +184 -0
  24. package/lib/core/processTree.js +100 -0
  25. package/lib/core/runState.js +39 -0
  26. package/lib/core/toml.js +72 -0
  27. package/lib/ecosystems/asarutils.js +4 -2
  28. package/lib/ecosystems/bunutils.js +5 -7
  29. package/lib/ecosystems/cargoCache.js +231 -8
  30. package/lib/ecosystems/cmakeResolver.js +10 -21
  31. package/lib/ecosystems/cppBuildContext.js +631 -0
  32. package/lib/ecosystems/cppEvidence.js +337 -22
  33. package/lib/ecosystems/cppIncludeResolver.js +294 -0
  34. package/lib/ecosystems/denoutils.js +93 -66
  35. package/lib/ecosystems/ecosystems.js +1967 -788
  36. package/lib/ecosystems/golem.js +28 -12
  37. package/lib/ecosystems/gradleutils.js +314 -30
  38. package/lib/ecosystems/jsEvidence.js +85 -24
  39. package/lib/ecosystems/kosi.js +21 -4
  40. package/lib/ecosystems/npmutils.js +64 -0
  41. package/lib/ecosystems/parsers-dotnet.js +567 -151
  42. package/lib/ecosystems/parsers-elm.js +46 -28
  43. package/lib/ecosystems/parsers-gleam.js +3 -4
  44. package/lib/ecosystems/parsers-go.js +324 -61
  45. package/lib/ecosystems/parsers-js.js +92 -26
  46. package/lib/ecosystems/parsers-julia.js +2 -3
  47. package/lib/ecosystems/parsers-jvm.js +204 -12
  48. package/lib/ecosystems/parsers-misc.js +182 -55
  49. package/lib/ecosystems/parsers-python.js +141 -10
  50. package/lib/ecosystems/parsers-rust.js +4 -4
  51. package/lib/ecosystems/parsers-terraform.js +1573 -19
  52. package/lib/ecosystems/pythonutils.js +102 -6
  53. package/lib/ecosystems/remote/huggingface.js +3 -0
  54. package/lib/ecosystems/rubyutils.js +67 -17
  55. package/lib/ecosystems/rusi.js +22 -9
  56. package/lib/ecosystems/sbtutils.js +243 -187
  57. package/lib/ecosystems/scalacliutils.js +342 -0
  58. package/lib/ecosystems/scalasem.js +2618 -0
  59. package/lib/ecosystems/terraformRegistry.js +288 -0
  60. package/lib/ecosystems/utils.js +2 -0
  61. package/lib/ecosystems/vendoredCode.js +156 -0
  62. package/lib/evinser/evinser.js +578 -69
  63. package/lib/helpers/agenticToolutils.js +2 -2
  64. package/lib/helpers/bomSigner.js +576 -128
  65. package/lib/inventory/aiCollector.js +4 -1
  66. package/lib/inventory/analyzer.js +110 -127
  67. package/lib/inventory/atomUtils.js +171 -48
  68. package/lib/inventory/auditCategories.js +7 -0
  69. package/lib/inventory/buildToolRateLimit.js +144 -0
  70. package/lib/inventory/cacheCommands.js +2 -1
  71. package/lib/inventory/cmakeBuildDirs.js +254 -0
  72. package/lib/inventory/deps.js +501 -124
  73. package/lib/inventory/dosai.js +248 -44
  74. package/lib/inventory/dosaiParsers.js +310 -15
  75. package/lib/inventory/dynamic.js +52 -6
  76. package/lib/inventory/evidenceUtils.js +154 -109
  77. package/lib/inventory/fetchBatch.js +574 -38
  78. package/lib/inventory/fetchDiskCache.js +597 -0
  79. package/lib/inventory/forgeEnricher.js +14 -5
  80. package/lib/inventory/jvmLocalRepos.js +917 -0
  81. package/lib/inventory/mcpConfigParser.js +2 -3
  82. package/lib/inventory/parentSelection.js +146 -0
  83. package/lib/inventory/rustFormulationParser.js +3 -4
  84. package/lib/inventory/scalaCoords.js +153 -0
  85. package/lib/inventory/source.js +8 -8
  86. package/lib/inventory/spdx.js +101 -0
  87. package/lib/inventory/traceRunner.js +88 -7
  88. package/lib/inventory/tracedCrypto.js +294 -0
  89. package/lib/managers/docker.js +33 -32
  90. package/lib/managers/oci.js +24 -2
  91. package/lib/parsers/cmakeCache.js +69 -0
  92. package/lib/parsers/cmakeLists.js +16 -2
  93. package/lib/parsers/cmakePresets.js +400 -0
  94. package/lib/parsers/compileCommands.js +557 -0
  95. package/lib/parsers/strictJson.js +322 -0
  96. package/lib/parsers/terraformConfig.js +1073 -0
  97. package/lib/parsers/terraformSource.js +652 -0
  98. package/lib/server/server.js +23 -0
  99. package/lib/stages/postgen/introspection/markers.js +1 -1
  100. package/lib/stages/postgen/postgen.js +15 -1
  101. package/lib/stages/postgen/specVersionCompat.js +32 -0
  102. package/lib/validator/index.js +25 -10
  103. package/lib/validator/reporters/json.js +1 -0
  104. package/package.json +21 -21
  105. package/types/lib/audit/index.d.ts.map +1 -1
  106. package/types/lib/cli/index.d.ts.map +1 -1
  107. package/types/lib/cli/jsBom.d.ts.map +1 -1
  108. package/types/lib/cli/jvmBom.d.ts +24 -1
  109. package/types/lib/cli/jvmBom.d.ts.map +1 -1
  110. package/types/lib/cli/managedBom.d.ts +7 -4
  111. package/types/lib/cli/managedBom.d.ts.map +1 -1
  112. package/types/lib/cli/nativeBom.d.ts +3 -1
  113. package/types/lib/cli/nativeBom.d.ts.map +1 -1
  114. package/types/lib/core/activity.d.ts.map +1 -1
  115. package/types/lib/core/env.d.ts +9 -0
  116. package/types/lib/core/env.d.ts.map +1 -1
  117. package/types/lib/core/fs.d.ts.map +1 -1
  118. package/types/lib/core/httpClient.d.ts +13 -8
  119. package/types/lib/core/httpClient.d.ts.map +1 -1
  120. package/types/lib/core/pluginRun.d.ts +97 -0
  121. package/types/lib/core/pluginRun.d.ts.map +1 -0
  122. package/types/lib/core/processTree.d.ts +36 -0
  123. package/types/lib/core/processTree.d.ts.map +1 -0
  124. package/types/lib/core/runState.d.ts +29 -0
  125. package/types/lib/core/runState.d.ts.map +1 -0
  126. package/types/lib/core/toml.d.ts +20 -0
  127. package/types/lib/core/toml.d.ts.map +1 -0
  128. package/types/lib/ecosystems/asarutils.d.ts.map +1 -1
  129. package/types/lib/ecosystems/bunutils.d.ts.map +1 -1
  130. package/types/lib/ecosystems/cargoCache.d.ts +12 -0
  131. package/types/lib/ecosystems/cargoCache.d.ts.map +1 -1
  132. package/types/lib/ecosystems/cmakeResolver.d.ts +5 -3
  133. package/types/lib/ecosystems/cmakeResolver.d.ts.map +1 -1
  134. package/types/lib/ecosystems/cppBuildContext.d.ts +55 -0
  135. package/types/lib/ecosystems/cppBuildContext.d.ts.map +1 -0
  136. package/types/lib/ecosystems/cppEvidence.d.ts +18 -2
  137. package/types/lib/ecosystems/cppEvidence.d.ts.map +1 -1
  138. package/types/lib/ecosystems/cppIncludeResolver.d.ts +92 -0
  139. package/types/lib/ecosystems/cppIncludeResolver.d.ts.map +1 -0
  140. package/types/lib/ecosystems/denoutils.d.ts +9 -3
  141. package/types/lib/ecosystems/denoutils.d.ts.map +1 -1
  142. package/types/lib/ecosystems/ecosystems.d.ts +62 -13
  143. package/types/lib/ecosystems/ecosystems.d.ts.map +1 -1
  144. package/types/lib/ecosystems/golem.d.ts.map +1 -1
  145. package/types/lib/ecosystems/gradleutils.d.ts +50 -0
  146. package/types/lib/ecosystems/gradleutils.d.ts.map +1 -1
  147. package/types/lib/ecosystems/jsEvidence.d.ts.map +1 -1
  148. package/types/lib/ecosystems/kosi.d.ts.map +1 -1
  149. package/types/lib/ecosystems/npmutils.d.ts +15 -0
  150. package/types/lib/ecosystems/npmutils.d.ts.map +1 -1
  151. package/types/lib/ecosystems/parsers-dotnet.d.ts +118 -4
  152. package/types/lib/ecosystems/parsers-dotnet.d.ts.map +1 -1
  153. package/types/lib/ecosystems/parsers-elm.d.ts.map +1 -1
  154. package/types/lib/ecosystems/parsers-gleam.d.ts.map +1 -1
  155. package/types/lib/ecosystems/parsers-go.d.ts +44 -2
  156. package/types/lib/ecosystems/parsers-go.d.ts.map +1 -1
  157. package/types/lib/ecosystems/parsers-js.d.ts +6 -1
  158. package/types/lib/ecosystems/parsers-js.d.ts.map +1 -1
  159. package/types/lib/ecosystems/parsers-julia.d.ts.map +1 -1
  160. package/types/lib/ecosystems/parsers-jvm.d.ts +46 -1
  161. package/types/lib/ecosystems/parsers-jvm.d.ts.map +1 -1
  162. package/types/lib/ecosystems/parsers-misc.d.ts +3 -1
  163. package/types/lib/ecosystems/parsers-misc.d.ts.map +1 -1
  164. package/types/lib/ecosystems/parsers-python.d.ts +53 -3
  165. package/types/lib/ecosystems/parsers-python.d.ts.map +1 -1
  166. package/types/lib/ecosystems/parsers-terraform.d.ts +38 -21
  167. package/types/lib/ecosystems/parsers-terraform.d.ts.map +1 -1
  168. package/types/lib/ecosystems/pythonutils.d.ts +27 -2
  169. package/types/lib/ecosystems/pythonutils.d.ts.map +1 -1
  170. package/types/lib/ecosystems/remote/huggingface.d.ts.map +1 -1
  171. package/types/lib/ecosystems/rubyutils.d.ts +21 -1
  172. package/types/lib/ecosystems/rubyutils.d.ts.map +1 -1
  173. package/types/lib/ecosystems/rusi.d.ts.map +1 -1
  174. package/types/lib/ecosystems/sbtutils.d.ts +88 -2
  175. package/types/lib/ecosystems/sbtutils.d.ts.map +1 -1
  176. package/types/lib/ecosystems/scalacliutils.d.ts +56 -0
  177. package/types/lib/ecosystems/scalacliutils.d.ts.map +1 -0
  178. package/types/lib/ecosystems/scalasem.d.ts +311 -0
  179. package/types/lib/ecosystems/scalasem.d.ts.map +1 -0
  180. package/types/lib/ecosystems/terraformRegistry.d.ts +9 -0
  181. package/types/lib/ecosystems/terraformRegistry.d.ts.map +1 -0
  182. package/types/lib/ecosystems/utils.d.ts +2 -2
  183. package/types/lib/ecosystems/utils.d.ts.map +1 -1
  184. package/types/lib/ecosystems/vendoredCode.d.ts +32 -0
  185. package/types/lib/ecosystems/vendoredCode.d.ts.map +1 -0
  186. package/types/lib/evinser/evinser.d.ts +75 -8
  187. package/types/lib/evinser/evinser.d.ts.map +1 -1
  188. package/types/lib/helpers/bomSigner.d.ts +80 -4
  189. package/types/lib/helpers/bomSigner.d.ts.map +1 -1
  190. package/types/lib/inventory/aiCollector.d.ts.map +1 -1
  191. package/types/lib/inventory/analyzer.d.ts.map +1 -1
  192. package/types/lib/inventory/atomUtils.d.ts +82 -10
  193. package/types/lib/inventory/atomUtils.d.ts.map +1 -1
  194. package/types/lib/inventory/auditCategories.d.ts +3 -0
  195. package/types/lib/inventory/auditCategories.d.ts.map +1 -1
  196. package/types/lib/inventory/buildToolRateLimit.d.ts +38 -0
  197. package/types/lib/inventory/buildToolRateLimit.d.ts.map +1 -0
  198. package/types/lib/inventory/cacheCommands.d.ts +2 -1
  199. package/types/lib/inventory/cacheCommands.d.ts.map +1 -1
  200. package/types/lib/inventory/cmakeBuildDirs.d.ts +58 -0
  201. package/types/lib/inventory/cmakeBuildDirs.d.ts.map +1 -0
  202. package/types/lib/inventory/deps.d.ts +59 -1
  203. package/types/lib/inventory/deps.d.ts.map +1 -1
  204. package/types/lib/inventory/dosai.d.ts +57 -8
  205. package/types/lib/inventory/dosai.d.ts.map +1 -1
  206. package/types/lib/inventory/dosaiParsers.d.ts +53 -7
  207. package/types/lib/inventory/dosaiParsers.d.ts.map +1 -1
  208. package/types/lib/inventory/dynamic.d.ts +10 -0
  209. package/types/lib/inventory/dynamic.d.ts.map +1 -1
  210. package/types/lib/inventory/evidenceUtils.d.ts +19 -4
  211. package/types/lib/inventory/evidenceUtils.d.ts.map +1 -1
  212. package/types/lib/inventory/fetchBatch.d.ts +83 -14
  213. package/types/lib/inventory/fetchBatch.d.ts.map +1 -1
  214. package/types/lib/inventory/fetchDiskCache.d.ts +169 -0
  215. package/types/lib/inventory/fetchDiskCache.d.ts.map +1 -0
  216. package/types/lib/inventory/forgeEnricher.d.ts.map +1 -1
  217. package/types/lib/inventory/jvmLocalRepos.d.ts +178 -0
  218. package/types/lib/inventory/jvmLocalRepos.d.ts.map +1 -0
  219. package/types/lib/inventory/mcpConfigParser.d.ts.map +1 -1
  220. package/types/lib/inventory/parentSelection.d.ts +34 -0
  221. package/types/lib/inventory/parentSelection.d.ts.map +1 -0
  222. package/types/lib/inventory/rustFormulationParser.d.ts.map +1 -1
  223. package/types/lib/inventory/scalaCoords.d.ts +80 -0
  224. package/types/lib/inventory/scalaCoords.d.ts.map +1 -0
  225. package/types/lib/inventory/source.d.ts.map +1 -1
  226. package/types/lib/inventory/spdx.d.ts +9 -0
  227. package/types/lib/inventory/spdx.d.ts.map +1 -1
  228. package/types/lib/inventory/traceRunner.d.ts +12 -0
  229. package/types/lib/inventory/traceRunner.d.ts.map +1 -1
  230. package/types/lib/inventory/tracedCrypto.d.ts +42 -0
  231. package/types/lib/inventory/tracedCrypto.d.ts.map +1 -0
  232. package/types/lib/managers/docker.d.ts.map +1 -1
  233. package/types/lib/managers/oci.d.ts +3 -1
  234. package/types/lib/managers/oci.d.ts.map +1 -1
  235. package/types/lib/parsers/cmakeCache.d.ts +16 -0
  236. package/types/lib/parsers/cmakeCache.d.ts.map +1 -1
  237. package/types/lib/parsers/cmakeLists.d.ts +2 -1
  238. package/types/lib/parsers/cmakeLists.d.ts.map +1 -1
  239. package/types/lib/parsers/cmakePresets.d.ts +78 -0
  240. package/types/lib/parsers/cmakePresets.d.ts.map +1 -0
  241. package/types/lib/parsers/compileCommands.d.ts +115 -0
  242. package/types/lib/parsers/compileCommands.d.ts.map +1 -0
  243. package/types/lib/parsers/strictJson.d.ts +46 -0
  244. package/types/lib/parsers/strictJson.d.ts.map +1 -0
  245. package/types/lib/parsers/terraformConfig.d.ts +70 -0
  246. package/types/lib/parsers/terraformConfig.d.ts.map +1 -0
  247. package/types/lib/parsers/terraformSource.d.ts +66 -0
  248. package/types/lib/parsers/terraformSource.d.ts.map +1 -0
  249. package/types/lib/server/server.d.ts.map +1 -1
  250. package/types/lib/stages/postgen/postgen.d.ts.map +1 -1
  251. package/types/lib/stages/postgen/specVersionCompat.d.ts.map +1 -1
  252. package/types/lib/validator/index.d.ts +8 -0
  253. package/types/lib/validator/index.d.ts.map +1 -1
  254. package/types/lib/validator/reporters/json.d.ts.map +1 -1
  255. package/lib/third-party/arborist/snapshots/calc-dep-flags.test.cjs +0 -462
@@ -0,0 +1,311 @@
1
+ export declare const JDK_OWNER_PREFIXES: string[];
2
+ export declare const SCALA_STDLIB_ARTIFACTS: Set<string>;
3
+ export declare function appendUniqueProperty(properties: any, name: any, value: any): void;
4
+ export declare function addPropertyValue(map: any, key: any, name: any, value: any): void;
5
+ export declare function addSetValue(map: any, key: any, value: any): void;
6
+ /**
7
+ * True for every project type the Scala path serves, matching the alias list
8
+ * the BOM generators dispatch on.
9
+ *
10
+ * @param {string} language Project language or type.
11
+ * @returns {boolean}
12
+ */
13
+ export declare function isScalasemLanguage(language: string): boolean;
14
+ /**
15
+ * True when scalasem is turned off, through CDXGEN_SCALASEM_DISABLE or the
16
+ * --no-scalasem flag, which yargs carries as `scalasem: false`. Library code never reads
17
+ * process.argv for this.
18
+ *
19
+ * @param {Object} options CLI options.
20
+ * @returns {boolean}
21
+ */
22
+ export declare function scalasemDisabled(options?: Object): boolean;
23
+ /**
24
+ * The scalasem entry point: SCALASEM_CMD wins, then the scalasem.js inside
25
+ * the installed atom-parsetools package.
26
+ *
27
+ * @returns {string|undefined}
28
+ */
29
+ export declare function resolveScalasemCommand(): string | undefined;
30
+ /**
31
+ * Where the scalasem report is persisted. An absolute --semantics-slices-file
32
+ * keeps its directory; anything else lands in the evinse output directory, the
33
+ * same rule the atom slice writer follows.
34
+ *
35
+ * @param {Object} options CLI options carrying `output` and `semanticsSlicesFile`.
36
+ * @returns {string} Absolute report path.
37
+ */
38
+ export declare function scalasemOutputFile(options?: Object): string;
39
+ /**
40
+ * A version 1 semantics slice (the shape atom's scalasem wrote before schema
41
+ * version 2): keyed by .scala files with `usedTypes`, no `_meta.schemaVersion`.
42
+ *
43
+ * @param {Object} parsed Candidate slice.
44
+ * @returns {boolean}
45
+ */
46
+ export declare function isV1SemanticsSlice(parsed: Object): boolean;
47
+ /**
48
+ * Run scalasem over a Scala project and return its report, reusing a
49
+ * persisted version 2 report that belongs to this project and is newer than
50
+ * the input BOM.
51
+ *
52
+ * Failures are visible rather than silent: the reason is printed once, the
53
+ * run's diagnostics reach the caller as `cdx:scalasem:diagnostic` properties,
54
+ * and --fail-on-error claims the exit status. A version 1 slice of this
55
+ * project, at the path the user named or at the report path, is returned
56
+ * separately and never overwritten; the fresh report then goes to a
57
+ * temporary file.
58
+ *
59
+ * @param {string} src Project directory.
60
+ * @param {Object} options CLI options.
61
+ * @returns {Object|undefined} `{ report, reportFile, v1Slice, metadataProperties }`,
62
+ * or undefined when the analyzer is disabled.
63
+ */
64
+ export declare function analyzeScalaProject(src: string, options?: Object): Object | undefined;
65
+ /**
66
+ * The `cdx:scalasem:*` metadata properties of one run: what produced the
67
+ * report, and what limited it.
68
+ *
69
+ * @param {Object|undefined} report Parsed scalasem report, when one exists.
70
+ * @param {Object[]} diagnostics Run diagnostics, from the report or the spawn.
71
+ * @returns {Object[]} Metadata properties.
72
+ */
73
+ export declare function scalasemMetadataProperties(report: Object | undefined, diagnostics?: Object[]): Object[];
74
+ export declare function sortedCsv(values: any): string | undefined;
75
+ /**
76
+ * The platform a purl's artifact name targets: `_sjs1` is Scala.js,
77
+ * `_native0.x` is Scala Native, and neither is the JVM.
78
+ *
79
+ * @param {string} purl Package URL.
80
+ * @returns {"jvm"|"js"|"native"} Platform key.
81
+ */
82
+ export declare function scalaPurlPlatform(purl: string): "jvm" | "js" | "native";
83
+ /**
84
+ * The class and package index that joins scalasem symbols to component purls.
85
+ *
86
+ * Symbols are indexed from three sources in priority order: the classpath the
87
+ * report recorded (1), the `internal:Namespaces` properties of the components
88
+ * (2), and the jar namespace map cdxgen writes beside the BOM (3). A symbol an
89
+ * earlier source already attributed is never re-attributed by a later one.
90
+ *
91
+ * A jar answers for the classes it ships and for the packages it ships classes
92
+ * in directly, never for the parents of those packages: a library with one
93
+ * class under `scala.collection.compat` owns neither `scala.collection` nor
94
+ * `scala`. The JDK has no component, and neither do the project's own classes.
95
+ */
96
+ export declare class ScalaJoinIndex {
97
+ classPurls: Map<any, any>;
98
+ packagePurls: Map<any, any>;
99
+ sourceBySymbol: Map<any, any>;
100
+ purlsBySource: Map<any, any>;
101
+ namespacesByPurl: Map<any, any>;
102
+ projectClasses: Set<any>;
103
+ projectPackages: Set<any>;
104
+ constructor();
105
+ hasNamespaces(purl: any): boolean;
106
+ /**
107
+ * Index the classes of one library: each class under its dotted name (a
108
+ * nested `Outer$Inner` also as `Outer.Inner`, an object `Foo$` as `Foo`),
109
+ * and the package each one sits in.
110
+ *
111
+ * @param {string} purl The owning component purl.
112
+ * @param {string[]} names Class names from the jar or the namespace property.
113
+ * @param {number} source The source priority, 1 to 3.
114
+ */
115
+ addNamespaces(purl: string, names: string[], source: number): void;
116
+ addSymbol(map: any, symbol: any, purl: any, source: any): void;
117
+ /**
118
+ * Record the classes the project defines, so that references to them, and
119
+ * to packages only the project fills, never join a library.
120
+ *
121
+ * @param {Object} report Parsed scalasem report.
122
+ */
123
+ addProjectDefinitions(report: Object): void;
124
+ /**
125
+ * Whether a symbol belongs to code the BOM has no component for: the JDK,
126
+ * or the project itself.
127
+ */
128
+ isUnowned(symbol: any): boolean;
129
+ /**
130
+ * The libraries that ship the class a symbol names: the longest dotted
131
+ * prefix of the symbol that is a class name, for a member or a nested type.
132
+ */
133
+ classOwners(symbol: any): any;
134
+ /**
135
+ * The libraries that ship classes directly in the package a symbol names or
136
+ * sits in. A package the project also fills is ambiguous and joins nothing,
137
+ * and `javax.` names join only through an exact class, since the JDK ships
138
+ * most of them.
139
+ */
140
+ packageOwners(symbol: any): any;
141
+ /**
142
+ * The purl owning a symbol: the class first, then the package it sits in,
143
+ * each narrowed to the module's own classpath and the file's platform, and
144
+ * kept only when a single owner remains.
145
+ *
146
+ * @param {string} symbol Fully qualified symbol from the report.
147
+ * @param {string|undefined} platform Platform of the referencing file.
148
+ * @param {Set<string>|undefined} allowedPurls Purls on the module's classpath.
149
+ * @returns {string|undefined} Component purl.
150
+ */
151
+ lookup(symbol: string, platform: string | undefined, allowedPurls: Set<string> | undefined): string | undefined;
152
+ /**
153
+ * The owners a stack is evidence for: every jar that ships the class, since
154
+ * which one served the call cannot be told from the source, or the single
155
+ * package owner when no jar lists the class.
156
+ */
157
+ lookupAll(symbol: any, platform: any, allowedPurls: any): any[];
158
+ /**
159
+ * Narrow candidate owners to what the referencing file can use. A module
160
+ * compiles against its own classpath: a library on it wins, and a library
161
+ * only other modules compile against does not qualify. A library on no
162
+ * module's classpath stays a candidate, since the report cannot list every
163
+ * jar (a locally published snapshot, say). The file's platform then picks
164
+ * among the JVM, Scala.js and Scala Native variants of one library.
165
+ */
166
+ narrow(candidates: any, platform: any, allowedPurls: any): any[];
167
+ }
168
+ /**
169
+ * Whether a report key names a source file entry. The schema keys file
170
+ * entries by their relative path, for Scala sources, scripts and the Java
171
+ * sources of a mixed module alike.
172
+ */
173
+ export declare function isReportFileKey(key: any): boolean;
174
+ /**
175
+ * Index the BOM components by their normalized Scala coordinates, both with
176
+ * and without the version, so a classpath jar, a namespace property and a map
177
+ * entry of the same library meet on one component. Each entry keeps the Scala
178
+ * binary version the component was built for, so the `_2.13` and `_3`
179
+ * artifacts of one library in a Maven build stay apart.
180
+ */
181
+ export declare function componentCoordinateIndex(components?: any[]): {
182
+ byVersion: Map<any, any>;
183
+ withoutVersion: Map<any, any>;
184
+ };
185
+ /**
186
+ * The component a report classpath entry belongs to. Coordinates are
187
+ * normalized (`upickle_sjs1_3` and the purl name `upickle_sjs1` share a key),
188
+ * the entry's version and Scala binary version win, and a versionless match
189
+ * must have a single owner. A jar the BOM does not hold matches nothing: no
190
+ * component is invented.
191
+ *
192
+ * @returns {{component: Object, exact: boolean}|undefined} The component, and
193
+ * whether its version is the one on the classpath.
194
+ */
195
+ export declare function matchClasspathEntry(entry: any, { byVersion, withoutVersion }: {
196
+ byVersion: any;
197
+ withoutVersion: any;
198
+ }, platform: any): {
199
+ component: Object;
200
+ exact: boolean;
201
+ } | undefined;
202
+ /**
203
+ * Build the symbol index from the three sources, reading each classpath jar
204
+ * once, and only for components that carry no namespaces yet.
205
+ *
206
+ * @param {Object} report Parsed scalasem report.
207
+ * @param {Object[]} components BOM components.
208
+ * @param {Object} jarNSMapping The jar namespace map cdxgen writes beside the BOM.
209
+ * @returns {Promise<ScalaJoinIndex>}
210
+ */
211
+ export declare function buildScalaJoinIndex(report: Object, components: Object[], jarNSMapping: Object): Promise<ScalaJoinIndex>;
212
+ export declare const SCALASEM_PROTOCOL_NAMES: Set<string>;
213
+ export declare const SCALASEM_KEYSTORE_NAMES: Set<string>;
214
+ export declare const SCALASEM_QUALIFIED_ALGORITHMS: Set<string>;
215
+ export declare const SCALASEM_NO_OID_ALGORITHMS: Set<string>;
216
+ /**
217
+ * The OID registry key for a canonical scalasem algorithm name, with the key
218
+ * size, mode, curve or padding when the name needs one. Names that have no
219
+ * key return undefined.
220
+ *
221
+ * @param {string} name Canonical algorithm name.
222
+ * @param {number} [keySize] Key size in bits, when the report carries one.
223
+ * @param {string} [mode] Block cipher mode, such as `GCM`.
224
+ * @param {string} [curve] Elliptic curve name.
225
+ * @param {string} [padding] JCA padding name.
226
+ * @returns {string|undefined} Registry key such as `aes256-GCM`.
227
+ */
228
+ export declare function scalasemCryptoOidKey(name: string, keySize?: number, mode?: string, curve?: string, padding?: string): string | undefined;
229
+ /**
230
+ * Project a scalasem report onto CycloneDX evidence: occurrences for the
231
+ * joined components, call stacks for the library sinks, namespaces for the
232
+ * components the classpath join read, and the run's metadata properties.
233
+ *
234
+ * @param {Object} report Parsed scalasem report.
235
+ * @param {Object[]} components BOM components.
236
+ * @param {Object} options CLI options; `scalaNamespaceMap` carries the jar
237
+ * namespace map cdxgen wrote beside the BOM.
238
+ * @returns {Promise<Object>} The evidence maps `createEvinseFile` consumes.
239
+ */
240
+ export declare function collectScalasemEvidence(report?: Object, components?: Object[], options?: Object): Promise<Object>;
241
+ /**
242
+ * The component purl of the library a crypto finding names as its provider.
243
+ * Maven coordinates match on group and base artifact; the short aliases cover
244
+ * the providers the rules emit for libraries without a coordinate.
245
+ */
246
+ export declare function scalasemProviderPurl(provider: any, components?: any[]): any;
247
+ /**
248
+ * A JDBC address without what may carry credentials: userinfo, the Oracle
249
+ * `user/password@` prefix, URL parameters and the `;key=value` properties
250
+ * some drivers take. The report is sanitized already; this keeps the BOM
251
+ * safe from a report written by anything else.
252
+ *
253
+ * @param {string} value JDBC URL.
254
+ * @returns {string} The address part.
255
+ */
256
+ export declare function sanitizeJdbcUrl(value: string): string;
257
+ /**
258
+ * The host a service URL names, or the topic and JDBC scheme equivalents, so
259
+ * every outbound service is named after where it talks to rather than the
260
+ * client library it uses.
261
+ */
262
+ export declare function scalasemServiceName(service: any): any;
263
+ /**
264
+ * The endpoint a service row carries, normalized: a URL as its scheme and
265
+ * host, a host as it is, a topic as `client:topic`, a JDBC URL with its
266
+ * credentials and parameters dropped.
267
+ */
268
+ export declare function scalasemServiceEndpoint(service: any): any;
269
+ /**
270
+ * Outbound services: HTTP and websocket clients, data stores, messaging
271
+ * topics and cloud clients. Locations ride in
272
+ * `cdx:scalasem:service:location` properties because CycloneDX services
273
+ * carry no evidence field before 2.0; spec compatibility keeps the
274
+ * occurrences below that only at 2.0.
275
+ *
276
+ * @param {Object} report Parsed scalasem report.
277
+ * @param {Object} servicesMap Map populated with service definitions.
278
+ * @returns {Object} The mutated services map.
279
+ */
280
+ export declare function collectScalasemServices(report?: Object, servicesMap?: Object): Object;
281
+ /**
282
+ * Inbound endpoints, one service per route, named the way the OpenAPI reader
283
+ * names its own so the two converge on one entry for the same route.
284
+ *
285
+ * @param {Object} report Parsed scalasem report.
286
+ * @param {Object} servicesMap Map populated with service definitions.
287
+ * @returns {Object} The mutated services map.
288
+ */
289
+ export declare function collectScalasemApiEndpoints(report?: Object, servicesMap?: Object): Object;
290
+ /**
291
+ * The npm packages a Scala.js build bundles. scalajs-bundler installs them
292
+ * with a lock file under `target`, and a bundler workspace such as a Vite
293
+ * client keeps its own manifest and lock file beside the build. Their npm
294
+ * components join the BOM so the report's JavaScript module imports can be
295
+ * attributed to them. Only lock files name the installed versions, and a
296
+ * workspace counts only when its manifest uses Scala.js, so a documentation
297
+ * site or a tool's own `package.json` adds nothing.
298
+ *
299
+ * @param {string} src Project directory.
300
+ * @param {Object[]} pkgList Components the build tools reported.
301
+ * @param {Object} [options] CLI options; `exclude` is honoured.
302
+ * @returns {Promise<{components: Object[], roots: string[], dependencies: Object[]}>}
303
+ * Npm components, the bom-refs the workspaces depend on directly, and the
304
+ * lock files' dependency edges between the npm components.
305
+ */
306
+ export declare function collectScalaJsNpmComponents(src: string, pkgList?: Object[], options?: Object): Promise<{
307
+ components: Object[];
308
+ roots: string[];
309
+ dependencies: Object[];
310
+ }>;
311
+ //# sourceMappingURL=scalasem.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"scalasem.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/scalasem.js"],"names":[],"mappings":"AA+CA,eAAO,MAAM,kBAAkB,UAA4B,CAAC;AAM5D,eAAO,MAAM,sBAAsB,aAQjC,CAAC;AAEH,wBAAgB,oBAAoB,CAAC,UAAU,KAAA,EAAE,IAAI,KAAA,EAAE,KAAK,KAAA,QAY3D;AAED,wBAAgB,gBAAgB,CAAC,GAAG,KAAA,EAAE,GAAG,KAAA,EAAE,IAAI,KAAA,EAAE,KAAK,KAAA,QAMrD;AAED,wBAAgB,WAAW,CAAC,GAAG,KAAA,EAAE,GAAG,KAAA,EAAE,KAAK,KAAA,QAM1C;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAGgC,GAF9B,OAAO,CAMnB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAH7B,MAGkC,GAFhC,OAAO,CASnB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAFzB,MAAM,GAAC,SAAS,CAM5B;AAwBD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAH/B,MAGoC,GAFlC,MAAM,CAyBlB;AAuBD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAH9B,MAG8B,GAF5B,OAAO,CAOnB;AAiBD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAL5B,MAK4B,EAAE,OAAO,GAJrC,MAI0C,GAHxC,MAAM,GAAC,SAAS,CAmD5B;AA+KD;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EALG,MAAM,GAAC,SAKV,EACN,WAAW,GALF,MAAM,EAK+B,GAJnC,MAAM,EAAE,CAyDpB;AAED,wBAAgB,SAAS,CAAC,MAAM,KAAA,sBAI/B;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAH3B,MAG2B,GAFzB,KAAK,GAAC,IAAI,GAAC,QAAQ,CAc/B;AAcD;;;;;;;;;;;;GAYG;AACH,qBAAa,cAAc;IAElB,UAAU;IACV,YAAY;IACZ,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,cAAc;IACd,eAAe;IAPtB,cAQC;IAED,aAAa,CAAC,IAAI,KAAA,WAEjB;IAED;;;;;;;;OAQG;IACH,aAAa,CAAC,IAAI,EAJP,MAIO,EAAE,KAAK,EAHd,MAAM,EAGQ,EAAE,MAAM,EAFtB,MAEsB,QAgChC;IAED,SAAS,CAAC,GAAG,KAAA,EAAE,MAAM,KAAA,EAAE,IAAI,KAAA,EAAE,MAAM,KAAA,QAelC;IAED;;;;;OAKG;IACH,qBAAqB,CAAC,MAAM,EAFjB,MAEiB,QAiB3B;IAED;;;OAGG;IACH,SAAS,CAAC,MAAM,KAAA,WAWf;IAED;;;OAGG;IACH,WAAW,CAAC,MAAM,KAAA,OASjB;IAED;;;;;OAKG;IACH,aAAa,CAAC,MAAM,KAAA,OAanB;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,MAAM,EALF,MAKE,EAAE,QAAQ,EAJZ,MAAM,GAAC,SAIK,EAAE,YAAY,EAH1B,GAAG,CAAC,MAAM,CAAC,GAAC,SAGc,GAFxB,MAAM,GAAC,SAAS,CAoB5B;IAED;;;;OAIG;IACH,SAAS,CAAC,MAAM,KAAA,EAAE,QAAQ,KAAA,EAAE,YAAY,KAAA,SAcvC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,UAAU,KAAA,EAAE,QAAQ,KAAA,EAAE,YAAY,KAAA,SA4BxC;CACF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,KAAA,WAElC;AA4BD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,QAAK;;;EA8BvD;AAsBD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,KAAA,EACL,EAAE,SAAS,EAAE,cAAc,EAAE;;;CAAA,EAC7B,QAAQ,KAAA,GANG;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAC,GAAC,SAAS,CAmCzD;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EALrC,MAKqC,EAAE,UAAU,EAJjD,MAAM,EAI2C,EAAE,YAAY,EAH/D,MAG+D,GAF7D,OAAO,CAAC,cAAc,CAAC,CAkFnC;AAsFD,eAAO,MAAM,uBAAuB,aASlC,CAAC;AACH,eAAO,MAAM,uBAAuB,aAKlC,CAAC;AAGH,eAAO,MAAM,6BAA6B,aAUxC,CAAC;AACH,eAAO,MAAM,0BAA0B,aA0CrC,CAAC;AAqEH;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAP9B,MAO8B,EAAE,OAAO,AAN/C,CACA,EADQ,MAMuC,EAAE,IAAI,AALrD,CACA,EADQ,MAK6C,EAAE,KAAK,AAJ5D,CACA,EADQ,MAIoD,EAAE,OAAO,AAHrE,CACA,EADQ,MAG6D,GAF3D,MAAM,GAAC,SAAS,CA6C5B;AAgDD;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,GAPG,MAOE,EACX,UAAU,GAPD,MAAM,EAOA,EACf,OAAO,GAPE,MAOG,GALD,OAAO,CAAC,MAAM,CAAC,CAyE3B;AA+WD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,KAAA,EAAE,UAAU,QAAK,OA+B7D;AAkTD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAH1B,MAG0B,GAFxB,MAAM,CAmClB;AAaD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,KAAA,OAmB1C;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,KAAA,OAuB9C;AASD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,GAJnC,MAIwC,EAAE,WAAW,GAHrD,MAG0D,GAFxD,MAAM,CAmDlB;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,GAJvC,MAI4C,EAAE,WAAW,GAHzD,MAG8D,GAF5D,MAAM,CA6DlB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,2BAA2B,CAC/C,GAAG,EARM,MAQN,EACH,OAAO,GARE,MAAM,EAQH,EACZ,OAAO,AARN,CACA,EADQ,MAQG,GAPD,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAC,CAAC,CAqEpF"}
@@ -0,0 +1,9 @@
1
+ /**
2
+ * Enrich Terraform components in place. Never throws; a failed lookup leaves
3
+ * the component exactly as the offline pass produced it.
4
+ *
5
+ * @param {object[]} pkgList Components to enrich
6
+ * @returns {Promise<object[]>} The same package list
7
+ */
8
+ export declare function getTerraformRegistryMetadata(pkgList: object[]): Promise<object[]>;
9
+ //# sourceMappingURL=terraformRegistry.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"terraformRegistry.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/terraformRegistry.js"],"names":[],"mappings":"AA4DA;;;;;;GAMG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAH/C,MAAM,EAGyC,GAF7C,OAAO,CAAC,MAAM,EAAE,CAAC,CAsI7B"}
@@ -30,12 +30,12 @@ import { composePomXmlUrl, extractJarArchive, extractLicenseCommentFromPomXml, f
30
30
  import { getMavenCommand, getMillCommand } from "./gradleutils.js";
31
31
  import { createNpmWorkspacePurl } from "./npmutils.js";
32
32
  import { getCentralPackageVersions, getPropertyGroupTextNodes, parseCsPkgData, parseCsPkgLockData, parseCsProjAssetsData, parseCsProjData, parseDirectoryPackagesProps, parseNupkg, parseNuspecData, parsePaketLockData } from "./parsers-dotnet.js";
33
- import { getGoPkgComponent, parseGoListDep, parseGoModData, parseGoModGraph, parseGoModulesTxt, parseGoModWhy, parseGopkgData, parseGosumData, parseGoVersionData } from "./parsers-go.js";
33
+ import { getGoPkgComponent, parseGoListDep, parseGoModData, parseGoModGraph, parseGoModulesTxt, parseGoModWhy, parseGopkgData, parseGosumData, parseGosumHashes, parseGoVersionData } from "./parsers-go.js";
34
34
  import { findPnpmPackagePath, getVersionNumPnpm, parseBowerJson, parseMinJs, parseNodeShrinkwrap, parsePackageJsonName, parsePkgJson, parsePkgLock, parsePnpmAliasRef, parsePnpmLock, parsePnpmWorkspace, parseYarnLock, parseYarnWorkspace, pnpmMetadata, splitCommandArgs, stripPnpmPeerSuffix, yarnLockToIdentMap } from "./parsers-js.js";
35
35
  import { parseBazelActionGraph, parseBazelBuild, parseBazelSkyframe, parseCljDep, parseEdnData, parseKVDep, parseLeinDep, parseLeiningenData, parseLeinMap, parseMavenTree, parseMavenTreeJson, parseMillDependency, parsePom } from "./parsers-jvm.js";
36
36
  import { buildObjectForCocoaPod, executeAlpmList, executeApkList, executeDpkgList, executeEqueryList, executePodCommand, executeRpmList, identifyFlow, parseBitbucketPipelinesFile, parseCabalData, parseCloudBuildData, parseCmakeDotFile, parseCmakeLikeFile, parseCocoaDependency, parseColliderLockData, parseComposerJson, parseComposerLock, parseConanData, parseConanLockData, parseContainerFile, parseContainerSpecData, parseCUsageSlice, parseFlakeLock, parseFlakeNix, parseGitHubWorkflowData, parseHelmYamlData, parseMakeDFile, parseMixLockData, parseOpenapiSpecData, parsePodfileLock, parsePodfileTargets, parsePrivadoFile, parsePubLockData, parsePubYamlData, parseSwiftJsonTree, parseSwiftJsonTreeObject, parseSwiftResolved, recurseImageNameLookup } from "./parsers-misc.js";
37
37
  import { derivePythonLockMetadataFileName, generatePixiLockFile, parseMojoProject, parsePiplockData, parsePixiLockFile, parsePixiTomlFile, parsePyLockData, parsePyProjectTomlFile, parsePyRequiresDist, parseReqEnvMarkers, parseReqFile, parseSetupPyFile } from "./parsers-python.js";
38
38
  import { parseCargoAuditableData, parseCargoData, parseCargoDependencyData, parseCargoManifestDependencyData, parseCargoTomlData } from "./parsers-rust.js";
39
39
  import { createUVLock, getPipFrozenTree, getPipTreeForPackages, getPyModules } from "./pythonutils.js";
40
- export { addEvidenceForDotnet, addLicenseText, adjustLicenseInformation, attachIdentityTools, BLOCKED_HOST_ERROR_CODE, buildObjectForCocoaPod, CARGO_CMD, CDXGEN_SPDX_CREATED_BY, CDXGEN_TEMP_DIR, CDXGEN_VERSION, CLJ_CMD, cdxgenAgent, checksumFile, collectExecutables, collectJarNS, collectMvnDependencies, collectSharedLibs, commandsExecuted, componentSorter, composePomXmlUrl, convertJarNSToPackages, convertOSQueryResults, createBlockedHostError, createDryRunError, createNpmWorkspacePurl, createUVLock, DEBUG_MODE, DOTNET_CMD, DRY_RUN_ERROR_CODE, derivePythonLockMetadataFileName, dirNameStr, encodeForPurl, executeAlpmList, executeApkList, executeAtom, executeDpkgList, executeEqueryList, executePodCommand, executeRpmList, extractJarArchive, extractLicenseCommentFromPomXml, extractPathEnv, extractToolRefs, FETCH_LICENSE, fetchPomXml, fetchPomXmlAsJson, findAppModules, findLicenseId, findLocalMvnArtifact, findPnpmPackagePath, frameworksList, GCC_CMD, GO_CMD, generatePixiLockFile, getAllFiles, getAllFilesWithIgnore, getAtomCommand, getCentralPackageVersions, getCratesMetadata, getDartMetadata, getDefaultBomAuditCategories, getGithubUrlParts, getGoPkgComponent, getGoPkgLicense, getJarClasses, getJavaCommand, getKnownLicense, getLicenses, getMavenCommand, getMillCommand, getMvnMetadata, getNpmMetadata, getNugetMetadata, getOSPackageForFile, getPipFrozenTree, getPipTreeForPackages, getPomPropertiesFromMavenDir, getPropertyGroupTextNodes, getPyMetadata, getPyModules, getPythonCommand, getRecordedActivities, getRepoLicense, getRuntimeInformation, getSwiftPackageMetadata, getTimestamp, getTmpDir, getVersionNumPnpm, guessLicenseId, guessPypiMatchingVersion, hasAnyProjectType, hasDangerousUnicode, identifyFlow, includeMavenTestScope, inferJarGroupFromManifest, isAllowedHttpHost, isBun, isDeno, isDryRun, isDryRunError, isFeatureEnabled, isMac, isNode, isPackageManagerAllowed, isPartialTree, isSecureMode, isSensitiveEnvironmentVariableName, isSpdxLicenseExpression, isValidDriveRoot, isValidIriReference, isWin, JAVA_CMD, LEIN_CMD, locateGenericPackage, MAX_BUFFER, mapConanPkgRefToPurlStringAndNameAndVersion, metadata_cache, multiChecksumFile, NODE_CMD, NPM_CMD, PACKAGE_MANAGER_ALIASES, PREFER_MAVEN_DEPS_TREE, PROJECT_TYPE_ALIASES, PYTHON_CMD, PYTHON_EXCLUDED_COMPONENTS, parseBazelActionGraph, parseBazelBuild, parseBazelSkyframe, parseBdistMetadata, parseBitbucketPipelinesFile, parseBowerJson, parseCabalData, parseCargoAuditableData, parseCargoData, parseCargoDependencyData, parseCargoManifestDependencyData, parseCargoTomlData, parseCljDep, parseCloudBuildData, parseCmakeDotFile, parseCmakeLikeFile, parseCocoaDependency, parseColliderLockData, parseComposerJson, parseComposerLock, parseConanData, parseConanLockData, parseContainerFile, parseContainerSpecData, parseCsPkgData, parseCsPkgLockData, parseCsProjAssetsData, parseCsProjData, parseCUsageSlice, parseDirectoryPackagesProps, parseEdnData, parseFlakeLock, parseFlakeNix, parseGitHubWorkflowData, parseGoListDep, parseGoModData, parseGoModGraph, parseGoModulesTxt, parseGoModWhy, parseGopkgData, parseGosumData, parseGoVersionData, parseHelmYamlData, parseJarManifest, parseKVDep, parseLeinDep, parseLeiningenData, parseLeinMap, parseLicenseEntryOrArrayFromPomXml, parseMakeDFile, parseMavenArgs, parseMavenTree, parseMavenTreeJson, parseMillDependency, parseMinJs, parseMixLockData, parseMojoProject, parseNodeShrinkwrap, parseNupkg, parseNuspecData, parseOpenapiSpecData, parsePackageJsonName, parsePaketLockData, parsePiplockData, parsePixiLockFile, parsePixiTomlFile, parsePkgJson, parsePkgLock, parsePnpmAliasRef, parsePnpmLock, parsePnpmWorkspace, parsePodfileLock, parsePodfileTargets, parsePom, parsePomProperties, parsePomXml, parsePrivadoFile, parsePubLockData, parsePubYamlData, parsePyLockData, parsePyProjectTomlFile, parsePyRequiresDist, parseReqEnvMarkers, parseReqFile, parseSetupPyFile, parseSwiftJsonTree, parseSwiftJsonTreeObject, parseSwiftResolved, parseYarnLock, parseYarnWorkspace, pnpmMetadata, purlFromUrlString, RUBY_CMD, RUSTC_CMD, readEnvironmentVariable, readLicenseText, readZipEntry, recomputeScope, recordActivity, recordDecisionActivity, recordDiscoveryActivity, recordEnvironmentRead, recordObservedActivity, recordPolicyActivity, recordSensitiveFileRead, recordSymlinkResolution, recurseImageNameLookup, remoteHostsAccessed, repoMetadataToGitHubApiUrl, resetActivityContext, resetRecordedActivities, retrieveCdxgenPluginVersion, retrieveCdxgenVersion, SEARCH_MAVEN_ORG, SWIFT_CMD, safeCopyFileSync, safeExistsSync, safeExtractArchive, safeMkdirSync, safeMkdtempSync, safeRmSync, safeSpawnSync, safeUnlinkSync, safeWriteSync, setActivityContext, setDryRunMode, shouldFetchLicense, shouldFetchPackageMetadata, shouldFetchVCS, shouldRunPredictiveBomAudit, splitCommandArgs, stripPnpmPeerSuffix, TABLE_BORDER_STYLE, TIMEOUT_MS, toCamel, toGitHubApiUrl, trimJarGroupSuffix, YARN_CMD, yarnLockToIdentMap, };
40
+ export { addEvidenceForDotnet, addLicenseText, adjustLicenseInformation, attachIdentityTools, BLOCKED_HOST_ERROR_CODE, buildObjectForCocoaPod, CARGO_CMD, CDXGEN_SPDX_CREATED_BY, CDXGEN_TEMP_DIR, CDXGEN_VERSION, CLJ_CMD, cdxgenAgent, checksumFile, collectExecutables, collectJarNS, collectMvnDependencies, collectSharedLibs, commandsExecuted, componentSorter, composePomXmlUrl, convertJarNSToPackages, convertOSQueryResults, createBlockedHostError, createDryRunError, createNpmWorkspacePurl, createUVLock, DEBUG_MODE, DOTNET_CMD, DRY_RUN_ERROR_CODE, derivePythonLockMetadataFileName, dirNameStr, encodeForPurl, executeAlpmList, executeApkList, executeAtom, executeDpkgList, executeEqueryList, executePodCommand, executeRpmList, extractJarArchive, extractLicenseCommentFromPomXml, extractPathEnv, extractToolRefs, FETCH_LICENSE, fetchPomXml, fetchPomXmlAsJson, findAppModules, findLicenseId, findLocalMvnArtifact, findPnpmPackagePath, frameworksList, GCC_CMD, GO_CMD, generatePixiLockFile, getAllFiles, getAllFilesWithIgnore, getAtomCommand, getCentralPackageVersions, getCratesMetadata, getDartMetadata, getDefaultBomAuditCategories, getGithubUrlParts, getGoPkgComponent, getGoPkgLicense, getJarClasses, getJavaCommand, getKnownLicense, getLicenses, getMavenCommand, getMillCommand, getMvnMetadata, getNpmMetadata, getNugetMetadata, getOSPackageForFile, getPipFrozenTree, getPipTreeForPackages, getPomPropertiesFromMavenDir, getPropertyGroupTextNodes, getPyMetadata, getPyModules, getPythonCommand, getRecordedActivities, getRepoLicense, getRuntimeInformation, getSwiftPackageMetadata, getTimestamp, getTmpDir, getVersionNumPnpm, guessLicenseId, guessPypiMatchingVersion, hasAnyProjectType, hasDangerousUnicode, identifyFlow, includeMavenTestScope, inferJarGroupFromManifest, isAllowedHttpHost, isBun, isDeno, isDryRun, isDryRunError, isFeatureEnabled, isMac, isNode, isPackageManagerAllowed, isPartialTree, isSecureMode, isSensitiveEnvironmentVariableName, isSpdxLicenseExpression, isValidDriveRoot, isValidIriReference, isWin, JAVA_CMD, LEIN_CMD, locateGenericPackage, MAX_BUFFER, mapConanPkgRefToPurlStringAndNameAndVersion, metadata_cache, multiChecksumFile, NODE_CMD, NPM_CMD, PACKAGE_MANAGER_ALIASES, PREFER_MAVEN_DEPS_TREE, PROJECT_TYPE_ALIASES, PYTHON_CMD, PYTHON_EXCLUDED_COMPONENTS, parseBazelActionGraph, parseBazelBuild, parseBazelSkyframe, parseBdistMetadata, parseBitbucketPipelinesFile, parseBowerJson, parseCabalData, parseCargoAuditableData, parseCargoData, parseCargoDependencyData, parseCargoManifestDependencyData, parseCargoTomlData, parseCljDep, parseCloudBuildData, parseCmakeDotFile, parseCmakeLikeFile, parseCocoaDependency, parseColliderLockData, parseComposerJson, parseComposerLock, parseConanData, parseConanLockData, parseContainerFile, parseContainerSpecData, parseCsPkgData, parseCsPkgLockData, parseCsProjAssetsData, parseCsProjData, parseCUsageSlice, parseDirectoryPackagesProps, parseEdnData, parseFlakeLock, parseFlakeNix, parseGitHubWorkflowData, parseGoListDep, parseGoModData, parseGoModGraph, parseGoModulesTxt, parseGoModWhy, parseGopkgData, parseGosumData, parseGosumHashes, parseGoVersionData, parseHelmYamlData, parseJarManifest, parseKVDep, parseLeinDep, parseLeiningenData, parseLeinMap, parseLicenseEntryOrArrayFromPomXml, parseMakeDFile, parseMavenArgs, parseMavenTree, parseMavenTreeJson, parseMillDependency, parseMinJs, parseMixLockData, parseMojoProject, parseNodeShrinkwrap, parseNupkg, parseNuspecData, parseOpenapiSpecData, parsePackageJsonName, parsePaketLockData, parsePiplockData, parsePixiLockFile, parsePixiTomlFile, parsePkgJson, parsePkgLock, parsePnpmAliasRef, parsePnpmLock, parsePnpmWorkspace, parsePodfileLock, parsePodfileTargets, parsePom, parsePomProperties, parsePomXml, parsePrivadoFile, parsePubLockData, parsePubYamlData, parsePyLockData, parsePyProjectTomlFile, parsePyRequiresDist, parseReqEnvMarkers, parseReqFile, parseSetupPyFile, parseSwiftJsonTree, parseSwiftJsonTreeObject, parseSwiftResolved, parseYarnLock, parseYarnWorkspace, pnpmMetadata, purlFromUrlString, RUBY_CMD, RUSTC_CMD, readEnvironmentVariable, readLicenseText, readZipEntry, recomputeScope, recordActivity, recordDecisionActivity, recordDiscoveryActivity, recordEnvironmentRead, recordObservedActivity, recordPolicyActivity, recordSensitiveFileRead, recordSymlinkResolution, recurseImageNameLookup, remoteHostsAccessed, repoMetadataToGitHubApiUrl, resetActivityContext, resetRecordedActivities, retrieveCdxgenPluginVersion, retrieveCdxgenVersion, SEARCH_MAVEN_ORG, SWIFT_CMD, safeCopyFileSync, safeExistsSync, safeExtractArchive, safeMkdirSync, safeMkdtempSync, safeRmSync, safeSpawnSync, safeUnlinkSync, safeWriteSync, setActivityContext, setDryRunMode, shouldFetchLicense, shouldFetchPackageMetadata, shouldFetchVCS, shouldRunPredictiveBomAudit, splitCommandArgs, stripPnpmPeerSuffix, TABLE_BORDER_STYLE, TIMEOUT_MS, toCamel, toGitHubApiUrl, trimJarGroupSuffix, YARN_CMD, yarnLockToIdentMap, };
41
41
  //# sourceMappingURL=utils.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/utils.js"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,sBAAsB,EACtB,iBAAiB,EACjB,UAAU,EACV,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,QAAQ,EACR,aAAa,EACb,YAAY,EACZ,kCAAkC,EAClC,uBAAuB,EACvB,cAAc,EACd,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,EAClB,aAAa,EACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,SAAS,EACT,sBAAsB,EACtB,eAAe,EACf,OAAO,EACP,UAAU,EACV,cAAc,EACd,aAAa,EACb,OAAO,EACP,MAAM,EACN,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,KAAK,EACL,MAAM,EACN,gBAAgB,EAChB,MAAM,EACN,uBAAuB,EACvB,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,UAAU,EACV,0BAA0B,EAC1B,cAAc,EACd,QAAQ,EACR,SAAS,EACT,gBAAgB,EAChB,SAAS,EACT,kBAAkB,EAClB,0BAA0B,EAC1B,cAAc,EACd,2BAA2B,EAC3B,kBAAkB,EAClB,QAAQ,EACT,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,qBAAqB,EACrB,YAAY,EACZ,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,UAAU,EACV,aAAa,EACb,cAAc,EACd,aAAa,EACb,UAAU,EACX,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,UAAU,EACV,KAAK,EACL,gBAAgB,EAChB,KAAK,EACL,OAAO,EACR,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EACL,WAAW,EACX,cAAc,EACd,cAAc,EACf,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EACL,YAAY,EACZ,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,aAAa,EACb,4BAA4B,EAC5B,yBAAyB,EACzB,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,kBAAkB,EACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,qBAAqB,EACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,2CAA2C,EAC3C,iBAAiB,EAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,aAAa,EACb,eAAe,EACf,WAAW,EACX,cAAc,EACd,uBAAuB,EACvB,eAAe,EAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,+BAA+B,EAC/B,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,uBAAuB,EACvB,wBAAwB,EACxB,cAAc,EACd,kBAAkB,EAClB,kCAAkC,EAClC,0BAA0B,EAC1B,cAAc,EACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,2BAA2B,EAC3B,UAAU,EACV,eAAe,EACf,kBAAkB,EACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,cAAc,EACd,kBAAkB,EACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,UAAU,EACV,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,QAAQ,EACT,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,2BAA2B,EAC3B,cAAc,EACd,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,uBAAuB,EACvB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,kBAAkB,EAClB,sBAAsB,EACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gCAAgC,EAChC,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,gCAAgC,EAChC,kBAAkB,EACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,YAAY,EACb,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,SAAS,EACT,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,OAAO,EACP,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,sBAAsB,EACtB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,EACtB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,gCAAgC,EAChC,UAAU,EACV,aAAa,EACb,eAAe,EACf,cAAc,EACd,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,+BAA+B,EAC/B,cAAc,EACd,eAAe,EACf,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,OAAO,EACP,MAAM,EACN,oBAAoB,EACpB,WAAW,EACX,qBAAqB,EACrB,cAAc,EACd,yBAAyB,EACzB,iBAAiB,EACjB,eAAe,EACf,4BAA4B,EAC5B,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,cAAc,EACd,eAAe,EACf,WAAW,EACX,eAAe,EACf,cAAc,EACd,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,qBAAqB,EACrB,4BAA4B,EAC5B,yBAAyB,EACzB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,YAAY,EACZ,SAAS,EACT,iBAAiB,EACjB,cAAc,EACd,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,qBAAqB,EACrB,yBAAyB,EACzB,iBAAiB,EACjB,KAAK,EACL,MAAM,EACN,QAAQ,EACR,aAAa,EACb,gBAAgB,EAChB,KAAK,EACL,MAAM,EACN,uBAAuB,EACvB,aAAa,EACb,YAAY,EACZ,kCAAkC,EAClC,uBAAuB,EACvB,gBAAgB,EAChB,mBAAmB,EACnB,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,oBAAoB,EACpB,UAAU,EACV,2CAA2C,EAC3C,cAAc,EACd,iBAAiB,EACjB,QAAQ,EACR,OAAO,EACP,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,UAAU,EACV,0BAA0B,EAC1B,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,2BAA2B,EAC3B,cAAc,EACd,cAAc,EACd,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,gCAAgC,EAChC,kBAAkB,EAClB,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,2BAA2B,EAC3B,YAAY,EACZ,cAAc,EACd,aAAa,EACb,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,kCAAkC,EAClC,cAAc,EACd,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,UAAU,EACV,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,QAAQ,EACR,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,QAAQ,EACR,SAAS,EACT,uBAAuB,EACvB,eAAe,EACf,YAAY,EACZ,cAAc,EACd,cAAc,EACd,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACnB,0BAA0B,EAC1B,oBAAoB,EACpB,uBAAuB,EACvB,2BAA2B,EAC3B,qBAAqB,EACrB,gBAAgB,EAChB,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,UAAU,EACV,aAAa,EACb,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,0BAA0B,EAC1B,cAAc,EACd,2BAA2B,EAC3B,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EACV,OAAO,EACP,cAAc,EACd,kBAAkB,EAClB,QAAQ,EACR,kBAAkB,GACnB,CAAC"}
1
+ {"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/utils.js"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,sBAAsB,EACtB,iBAAiB,EACjB,UAAU,EACV,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,QAAQ,EACR,aAAa,EACb,YAAY,EACZ,kCAAkC,EAClC,uBAAuB,EACvB,cAAc,EACd,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,EAClB,aAAa,EACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,SAAS,EACT,sBAAsB,EACtB,eAAe,EACf,OAAO,EACP,UAAU,EACV,cAAc,EACd,aAAa,EACb,OAAO,EACP,MAAM,EACN,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,KAAK,EACL,MAAM,EACN,gBAAgB,EAChB,MAAM,EACN,uBAAuB,EACvB,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,UAAU,EACV,0BAA0B,EAC1B,cAAc,EACd,QAAQ,EACR,SAAS,EACT,gBAAgB,EAChB,SAAS,EACT,kBAAkB,EAClB,0BAA0B,EAC1B,cAAc,EACd,2BAA2B,EAC3B,kBAAkB,EAClB,QAAQ,EACT,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,qBAAqB,EACrB,YAAY,EACZ,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,UAAU,EACV,aAAa,EACb,cAAc,EACd,aAAa,EACb,UAAU,EACX,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,UAAU,EACV,KAAK,EACL,gBAAgB,EAChB,KAAK,EACL,OAAO,EACR,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EACL,WAAW,EACX,cAAc,EACd,cAAc,EACf,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EACL,YAAY,EACZ,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,aAAa,EACb,4BAA4B,EAC5B,yBAAyB,EACzB,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,kBAAkB,EACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,qBAAqB,EACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,2CAA2C,EAC3C,iBAAiB,EAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,aAAa,EACb,eAAe,EACf,WAAW,EACX,cAAc,EACd,uBAAuB,EACvB,eAAe,EAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,+BAA+B,EAC/B,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,uBAAuB,EACvB,wBAAwB,EACxB,cAAc,EACd,kBAAkB,EAClB,kCAAkC,EAClC,0BAA0B,EAC1B,cAAc,EACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,2BAA2B,EAC3B,UAAU,EACV,eAAe,EACf,kBAAkB,EACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,UAAU,EACV,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,QAAQ,EACT,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,2BAA2B,EAC3B,cAAc,EACd,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,uBAAuB,EACvB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,kBAAkB,EAClB,sBAAsB,EACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gCAAgC,EAChC,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,gCAAgC,EAChC,kBAAkB,EACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,YAAY,EACb,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,SAAS,EACT,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,OAAO,EACP,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,sBAAsB,EACtB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,EACtB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,gCAAgC,EAChC,UAAU,EACV,aAAa,EACb,eAAe,EACf,cAAc,EACd,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,+BAA+B,EAC/B,cAAc,EACd,eAAe,EACf,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,OAAO,EACP,MAAM,EACN,oBAAoB,EACpB,WAAW,EACX,qBAAqB,EACrB,cAAc,EACd,yBAAyB,EACzB,iBAAiB,EACjB,eAAe,EACf,4BAA4B,EAC5B,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,cAAc,EACd,eAAe,EACf,WAAW,EACX,eAAe,EACf,cAAc,EACd,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,qBAAqB,EACrB,4BAA4B,EAC5B,yBAAyB,EACzB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,YAAY,EACZ,SAAS,EACT,iBAAiB,EACjB,cAAc,EACd,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,qBAAqB,EACrB,yBAAyB,EACzB,iBAAiB,EACjB,KAAK,EACL,MAAM,EACN,QAAQ,EACR,aAAa,EACb,gBAAgB,EAChB,KAAK,EACL,MAAM,EACN,uBAAuB,EACvB,aAAa,EACb,YAAY,EACZ,kCAAkC,EAClC,uBAAuB,EACvB,gBAAgB,EAChB,mBAAmB,EACnB,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,oBAAoB,EACpB,UAAU,EACV,2CAA2C,EAC3C,cAAc,EACd,iBAAiB,EACjB,QAAQ,EACR,OAAO,EACP,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,UAAU,EACV,0BAA0B,EAC1B,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,2BAA2B,EAC3B,cAAc,EACd,cAAc,EACd,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,gCAAgC,EAChC,kBAAkB,EAClB,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,2BAA2B,EAC3B,YAAY,EACZ,cAAc,EACd,aAAa,EACb,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,kCAAkC,EAClC,cAAc,EACd,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,UAAU,EACV,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,QAAQ,EACR,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,QAAQ,EACR,SAAS,EACT,uBAAuB,EACvB,eAAe,EACf,YAAY,EACZ,cAAc,EACd,cAAc,EACd,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACnB,0BAA0B,EAC1B,oBAAoB,EACpB,uBAAuB,EACvB,2BAA2B,EAC3B,qBAAqB,EACrB,gBAAgB,EAChB,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,UAAU,EACV,aAAa,EACb,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,0BAA0B,EAC1B,cAAc,EACd,2BAA2B,EAC3B,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EACV,OAAO,EACP,cAAc,EACd,kBAAkB,EAClB,QAAQ,EACR,kBAAkB,GACnB,CAAC"}
@@ -0,0 +1,32 @@
1
+ /**
2
+ * Code a project carries inside its own tree under a license of its own: a
3
+ * copied library, an imported test suite. Such a directory holds its own
4
+ * license file, and the license differs from the project's.
5
+ *
6
+ * Layer 3: reads license files under the scan root.
7
+ */
8
+ /**
9
+ * Whether a file name is a license file: `LICENSE`, `LICENCE` or `COPYING`,
10
+ * bare, with a text extension, or with a suffix naming the license
11
+ * (`LICENSE-MIT`).
12
+ *
13
+ * @param {string} name File name
14
+ * @returns {boolean}
15
+ */
16
+ export declare function isLicenseFileName(name: string): boolean;
17
+ /**
18
+ * Find the directories of a project that carry code under a license other
19
+ * than the project's.
20
+ *
21
+ * @param {string} root Project scan root
22
+ * @param {Object} options CLI options (exclusions)
23
+ * @param {string[]} [excludeDirs] Directories already known to hold
24
+ * dependencies (submodules, fetched sources, build trees), not searched
25
+ * @returns {{components: Object[], dirs: string[]}} A component per vendored
26
+ * directory, and the directories
27
+ */
28
+ export declare function findVendoredCode(root: string, options?: Object, excludeDirs?: string[]): {
29
+ components: Object[];
30
+ dirs: string[];
31
+ };
32
+ //# sourceMappingURL=vendoredCode.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"vendoredCode.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/vendoredCode.js"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA2BH;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAH3B,MAG2B,GAFzB,OAAO,CAkBnB;AAkBD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAP1B,MAO0B,EAAE,OAAO,GANnC,MAMwC,EAAE,WAAW,AAL7D,CAEA,EAFQ,MAAM,EAKoD,GAHxD;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAC,CAwElD"}
@@ -10,6 +10,22 @@
10
10
  * @param {Object[]} metadataProperties Properties from the analyzer run
11
11
  */
12
12
  export declare function mergeAnalyzerMetadataProperties(component: Object, metadataProperties?: Object[]): void;
13
+ /**
14
+ * The evidence language of a `cdxgen --evidence` run that names no project
15
+ * type.
16
+ *
17
+ * A directory with a Scala build takes the scalasem path. Otherwise the
18
+ * generated BOM decides: Java when it lists Maven packages, as before, and
19
+ * else the language most of its packages belong to. A BOM with no package in
20
+ * a language the evidence step analyses gives no language, so no analyzer
21
+ * runs over sources it cannot read.
22
+ *
23
+ * @param {string} dirPath Project directory
24
+ * @param {Object} [bomJson] The BOM generated for the directory
25
+ * @param {Object} [options] CLI options, for the exclude patterns
26
+ * @returns {string|undefined} Project type for the evidence phase
27
+ */
28
+ export declare function defaultEvidenceLanguage(dirPath: string, bomJson?: Object, options?: Object): string | undefined;
13
29
  /**
14
30
  * Build the options for the evinse phase (prepareDB, analyzeProject, and
15
31
  * createEvinseFile) from the cdxgen CLI options.
@@ -38,11 +54,22 @@ export declare function prepareDB(options: Object): Promise<{
38
54
  Usages: Object;
39
55
  DataFlows: Object;
40
56
  } | undefined>;
57
+ /**
58
+ * Read the jar namespace map cdxgen writes next to the BOM it generates
59
+ * (`<bom>.map`). The map for the BOM passed as `--input` is preferred; a
60
+ * `bom.json.map` in the project directory is the fallback.
61
+ *
62
+ * @param {string} dirPath Project directory scanned by evinse
63
+ * @param {Object} [options] CLI options, for `input`
64
+ * @returns {Object|undefined} The mapping, when a non-empty one exists.
65
+ */
66
+ export declare function readNamespaceMap(dirPath: string, options?: Object): Object | undefined;
41
67
  /**
42
68
  * Collect Maven jar namespace mappings for the purls found in the SBOM.
43
69
  *
44
- * If a previously generated `bom.json.map` is present in `dirPath` it is reused;
45
- * otherwise the maven command is invoked to collect the jar dependencies. Each
70
+ * If cdxgen left a namespace map next to the BOM (see {@link readNamespaceMap})
71
+ * it is reused; otherwise the maven command is invoked to collect the jar
72
+ * dependencies. Each
46
73
  * resolved purl is recorded in the `purlsJars` map and persisted in the
47
74
  * `Namespaces` model.
48
75
  *
@@ -64,7 +91,7 @@ export declare function catalogMavenDeps(dirPath: string, purlsJars: Record<stri
64
91
  * @param {Object} Namespaces Sequelize-like Namespaces model used to persist pom and namespaces
65
92
  * @returns {Promise<void>}
66
93
  */
67
- export declare function catalogGradleDeps(dirPath: string, purlsJars: Record<string, string>, Namespaces: Object): Promise<void>;
94
+ export declare function catalogGradleDeps(dirPath: string, purlsJars: Record<string, string>, Namespaces: Object, options?: {}): Promise<void>;
68
95
  /**
69
96
  * Generate a usage slice for the given purl and persist it in the Usages model.
70
97
  *
@@ -140,8 +167,8 @@ export declare function initFromSbom(components: Object[], language: string): {
140
167
  * describe the same project directory and must not predate the input SBOM:
141
168
  * `cdxgen --evidence` writes a fresh SBOM before evinse runs, so an older
142
169
  * slice was made from an earlier state of the sources and is regenerated.
143
- * Scala slices cannot be regenerated by evinse and are reused whenever their
144
- * shape matches.
170
+ * Scala reports are handled by the scalasem analyzer, which applies its own
171
+ * rules.
145
172
  *
146
173
  * @param {string} language Project language
147
174
  * @param {string} slicesFile Candidate semantics slices file
@@ -150,13 +177,23 @@ export declare function initFromSbom(components: Object[], language: string): {
150
177
  * @returns {undefined|Object} Parsed slice when it can be reused
151
178
  */
152
179
  export declare function loadReusableSemanticsSlice(language: string, slicesFile: string, bomFile: string, dirPath: string): undefined | Object;
180
+ /**
181
+ * Merge service definitions into a services map: endpoints join, and a
182
+ * property another source already carries is not added again, whatever the
183
+ * case of an HTTP method.
184
+ *
185
+ * @param {Object} target Services map that receives the definitions.
186
+ * @param {Object} source Services map to merge in.
187
+ * @returns {Object} The target map.
188
+ */
189
+ export declare function mergeServiceDefinitions(target: Object, source: Object): Object;
153
190
  /**
154
191
  * Function to analyze the project
155
192
  *
156
193
  * @param {Object} dbObjMap DB and model instances
157
194
  * @param {Object} options Command line options
158
195
  */
159
- export declare function analyzeProject(dbObjMap: Object, options: Object): Promise<{
196
+ export declare function analyzeProject(dbObjMap: Object, options: Object): Promise<Object | {
160
197
  purlLocationMap: Record<string, Set<any>>;
161
198
  servicesMap: {};
162
199
  dataFlowFrames: {};
@@ -269,7 +306,37 @@ export declare function analyzeProject(dbObjMap: Object, options: Object): Promi
269
306
  * @param {string} [openapiSpecFile=undefined] Optional path to an OpenAPI spec used for service detection
270
307
  * @returns {Promise<Object>} Map with `purlLocationMap`, `servicesMap`, and `userDefinedTypesMap`
271
308
  */
272
- export declare function parseObjectSlices(language: string, usageSlice: Object, dbObjMap: Object, servicesMap?: Object, purlLocationMap?: Record<string, Set<any>>, purlImportsMap?: Record<string, string[]>, openapiSpecFile?: string): Promise<Object>;
309
+ /**
310
+ * Attribute the include slices of a C/C++ usages report to the BOM
311
+ * components that provide the files they resolved to: each header's imported
312
+ * symbols (the functions the including file calls that it declares), and the
313
+ * include directive's location. Reports from atom releases that do not name
314
+ * the resolved file attribute nothing.
315
+ *
316
+ * @param {Object} usageSlice Parsed usages report
317
+ * @param {Object[]} components Components of the input BOM
318
+ * @param {string} dirPath Source directory
319
+ * @param {Object} options CLI options
320
+ * @returns {{symbols: Map<string, Set<string>>, locations: Map<string, Set<string>>}}
321
+ * Imported symbols and include locations (`file#line`) by purl
322
+ */
323
+ export declare function attributeCIncludes(usageSlice: Object, components: Object[], dirPath: string, options?: Object): {
324
+ symbols: Map<string, Set<string>>;
325
+ locations: Map<string, Set<string>>;
326
+ };
327
+ /**
328
+ * Seed the C/C++ imports from the include slices of a usages report (see
329
+ * `attributeCIncludes`).
330
+ *
331
+ * @param {Object} usageSlice Parsed usages report
332
+ * @param {Object[]} components Components of the input BOM
333
+ * @param {string} dirPath Source directory
334
+ * @param {Object} purlImportsMap Imports by purl, extended in place
335
+ * @param {Object} options CLI options
336
+ * @returns {Object} purlImportsMap
337
+ */
338
+ export declare function seedCImportsFromIncludes(usageSlice: Object, components: Object[], dirPath: string, purlImportsMap?: Object, options?: Object): Object;
339
+ export declare function parseObjectSlices(language: any, usageSlice: any, dbObjMap: any, servicesMap?: {}, purlLocationMap?: {}, purlImportsMap?: {}, openapiSpecFile?: undefined): Promise<{}>;
273
340
  /**
274
341
  * The implementation of this function is based on the logic proposed in the atom slices specification
275
342
  * https://github.com/AppThreat/atom/blob/main/specification/docs/slices.md#use
@@ -299,7 +366,7 @@ export declare function parseSliceUsages(language: string, userDefinedTypesMap:
299
366
  * @param {Object} semanticsSlice Semantic slice data
300
367
  * @returns {Object} Parsed metadata
301
368
  */
302
- export declare function parseSemanticSlices(language: string, components: any[], semanticsSlice: Object): Object;
369
+ export declare function parseSemanticSlices(_language: any, components: any[], semanticsSlice: Object): Object;
303
370
  /**
304
371
  * Decide whether a type name should be ignored during slice analysis.
305
372
  *
@@ -1 +1 @@
1
- {"version":3,"file":"evinser.d.ts","sourceRoot":"","sources":["../../../lib/evinser/evinser.js"],"names":[],"mappings":"AA0GA;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAC7C,SAAS,EAJA,MAIA,EACT,kBAAkB,GAJT,MAAM,EAIQ,QAkBxB;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAL/B,MAK+B,EAAE,IAAI,EAJrC,MAIqC,EAAE,KAAK,EAH5C,MAG4C,GAF1C,MAAM,CA+BlB;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAF5B,MAE4B;;;;;;;eAuDtC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAPE,MAOF,EACP,SAAS,wBAAA,EACT,UAAU,EAPD,MAOC,EACV,OAAO,GAPE,MAOG,GAND,OAAO,CAAC,IAAI,CAAC,CAmDzB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EALpC,MAKoC,EAAE,SAAS,wBAAA,EAAE,UAAU,EAH3D,MAG2D,GAFzD,OAAO,CAAC,IAAI,CAAC,CAoCzB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAPK,MAOL,EACJ,SAAS,wBAAA,EACT,MAAM,EAPG,MAOH,EACN,OAAO,GAPE,MAOG,GAND,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAuBrC;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAH9B,MAG8B,GAF5B,MAAM,CAOlB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,WAAW,CAC/B,eAAe,EAPN,MAAM,GAAC,MAAM,EAOP,EACf,QAAQ,EAPC,MAOD,EACR,SAAS,AAPR,CACA,EADQ,MAOW,EACpB,OAAO,AAPN,CACA,EADQ,MAOG,GAND,OAAO,CAAC,MAAM,CAAC,CA+N3B;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAJxB,MAIwB,EAAE,QAAQ,AAH1C,CACA,EADQ,MAGkC,GAFhC,MAAM,GAAC,SAAS,CA4B5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAJ5B,MAAM,EAIsB,EAAE,QAAQ,EAHtC,MAGsC,GAFpC;IAAE,eAAe,2BAAsB;IAAC,cAAc,2BAA0B;CAAE,CAiD9F;AAcD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAPC,MAOD,EACR,UAAU,EAPD,MAOC,EACV,OAAO,EAPE,MAOF,EACP,OAAO,EAPE,MAOF,GANI,SAAS,GAAC,MAAM,CAwC5B;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAHlC,MAGkC,EAAE,OAAO,EAF3C,MAE2C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkarD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAVC,MAUD,EACR,UAAU,EAVD,MAUC,EACV,QAAQ,EAVC,MAUD,EACR,WAAW,AAVV,CACA,EADQ,MAUO,EAChB,eAAe,AAVd,CACA,0BASmB,EACpB,cAAc,AAVb,CACA,0BASkB,EACnB,eAAe,AAVd,CACA,EADQ,MAUkB,GAThB,OAAO,CAAC,MAAM,CAAC,CAgE3B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EATC,MASD,EACR,mBAAmB,EATV,MASU,EACnB,KAAK,OAAA,EACL,QAAQ,EATC,MASD,EACR,eAAe,EATN,MASM,EACf,cAAc,EATL,MASK,iBA4Nf;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,QAAA,EAAE,UAAU,OAAA,EAAE,cAAc,EAH7D,MAG6D,GAF3D,MAAM,CA0DlB;AA2LD;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAL9B,MAK8B,EAAE,mBAAmB,yBAAA,EAAE,YAAY,EAHjE,MAGiE,GAF/D,OAAO,CA2EnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EANA,MAMA,EACT,eAAe,EANN,MAMM,EACf,WAAW,EANF,MAME,GALA,IAAI,CAqChB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAJtC,MAIsC,EAAE,KAAK,OAAA,EAAE,WAAW,GAF1D,MAE+D,uBA2DzE;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAJnC,MAImC,EAAE,gBAAgB,OAAA,EAAE,WAAW,EAFlE,MAEkE,QAgD5E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAJnC,MAImC,EAAE,KAAK,EAH1C,MAG0C,GAFxC,MAAM,CAalB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAJ9B,MAI8B,EAAE,IAAI,EAHpC,MAGoC,GAFlC,MAAM,EAAE,GAAC,SAAS,CAwF9B;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,cAAc,EAJ1C,MAI0C,EAAE,OAAO,EAHnD,MAGmD,gBA8M7D;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EARC,MAQD,EACR,mBAAmB,EARV,MAQU,EACnB,aAAa,EARJ,MAQI,EACb,QAAQ,EARC,MAQD,EACR,gBAAgB,EARP,MAQO,EAChB,cAAc,EARL,MAQK,eA4Gf;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAHrC,MAGqC,EAAE,eAAe,EAFtD,MAEsD;;;;;;;;YAgFzD,SAAS;YACT,GAAG;;;;EASV;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,QAAQ,OAAA,qBA4DnC;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAH9B,MAG8B,UAExC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAJvC,MAIuC,EAAE,YAAY,EAHrD,MAGqD,GAFnD,MAAM,GAAC,SAAS,CAmD5B"}
1
+ {"version":3,"file":"evinser.d.ts","sourceRoot":"","sources":["../../../lib/evinser/evinser.js"],"names":[],"mappings":"AAwHA;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAC7C,SAAS,EAJA,MAIA,EACT,kBAAkB,GAJT,MAAM,EAIQ,QAkBxB;AAyBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EALpC,MAKoC,EAAE,OAAO,AAJrD,CACA,EADQ,MAI6C,EAAE,OAAO,AAH9D,CACA,EADQ,MAG2D,GAFzD,MAAM,GAAC,SAAS,CAyC5B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAL/B,MAK+B,EAAE,IAAI,EAJrC,MAIqC,EAAE,KAAK,EAH5C,MAG4C,GAF1C,MAAM,CA2ClB;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAF5B,MAE4B;;;;;;;eAuDtC;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAJ7B,MAI6B,EAAE,OAAO,AAH9C,CACA,EADQ,MAG2C,GAFzC,MAAM,GAAC,SAAS,CAqB5B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAPE,MAOF,EACP,SAAS,wBAAA,EACT,UAAU,EAPD,MAOC,EACV,OAAO,GAPE,MAOG,GAND,OAAO,CAAC,IAAI,CAAC,CAuCzB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EANE,MAMF,EACP,SAAS,wBAAA,EACT,UAAU,EAND,MAMC,EACV,OAAO,KAAK,GAND,OAAO,CAAC,IAAI,CAAC,CA8CzB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAPK,MAOL,EACJ,SAAS,wBAAA,EACT,MAAM,EAPG,MAOH,EACN,OAAO,GAPE,MAOG,GAND,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAuBrC;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAH9B,MAG8B,GAF5B,MAAM,CAOlB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,WAAW,CAC/B,eAAe,EAPN,MAAM,GAAC,MAAM,EAOP,EACf,QAAQ,EAPC,MAOD,EACR,SAAS,AAPR,CACA,EADQ,MAOW,EACpB,OAAO,AAPN,CACA,EADQ,MAOG,GAND,OAAO,CAAC,MAAM,CAAC,CAkN3B;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAJxB,MAIwB,EAAE,QAAQ,AAH1C,CACA,EADQ,MAGkC,GAFhC,MAAM,GAAC,SAAS,CA4B5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAJ5B,MAAM,EAIsB,EAAE,QAAQ,EAHtC,MAGsC,GAFpC;IAAE,eAAe,2BAAsB;IAAC,cAAc,2BAA0B;CAAE,CAiD9F;AAcD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAPC,MAOD,EACR,UAAU,EAPD,MAOC,EACV,OAAO,EAPE,MAOF,EACP,OAAO,EAPE,MAOF,GANI,SAAS,GAAC,MAAM,CAqC5B;AA4KD;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAJnC,MAImC,EAAE,MAAM,EAH3C,MAG2C,GAFzC,MAAM,CAgClB;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAHlC,MAGkC,EAAE,OAAO,EAF3C,MAE2C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuerD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EARD,MAQC,EACV,UAAU,EARD,MAAM,EAQL,EACV,OAAO,EARE,MAQF,EACP,OAAO,GARE,MAQG,GAPD;IAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;CAAC,CA0EpF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EARD,MAQC,EACV,UAAU,EARD,MAAM,EAQL,EACV,OAAO,EARE,MAQF,EACP,cAAc,GARL,MAQU,EACnB,OAAO,GARE,MAQG,GAPD,MAAM,CAqBlB;AAED,wBAAsB,iBAAiB,CACrC,QAAQ,KAAA,EACR,UAAU,KAAA,EACV,QAAQ,KAAA,EACR,WAAW,KAAK,EAChB,eAAe,KAAK,EACpB,cAAc,KAAK,EACnB,eAAe,YAAY,eAuD5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EATC,MASD,EACR,mBAAmB,EATV,MASU,EACnB,KAAK,OAAA,EACL,QAAQ,EATC,MASD,EACR,eAAe,EATN,MASM,EACf,cAAc,EATL,MASK,iBA4Nf;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,KAAA,EAAE,UAAU,OAAA,EAAE,cAAc,EAH9D,MAG8D,GAF5D,MAAM,CAsDlB;AA2LD;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAL9B,MAK8B,EAAE,mBAAmB,yBAAA,EAAE,YAAY,EAHjE,MAGiE,GAF/D,OAAO,CA2EnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EANA,MAMA,EACT,eAAe,EANN,MAMM,EACf,WAAW,EANF,MAME,GALA,IAAI,CAqChB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAJtC,MAIsC,EAAE,KAAK,OAAA,EAAE,WAAW,GAF1D,MAE+D,uBA2DzE;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAJnC,MAImC,EAAE,gBAAgB,OAAA,EAAE,WAAW,EAFlE,MAEkE,QAgD5E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAJnC,MAImC,EAAE,KAAK,EAH1C,MAG0C,GAFxC,MAAM,CAalB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAJ9B,MAI8B,EAAE,IAAI,EAHpC,MAGoC,GAFlC,MAAM,EAAE,GAAC,SAAS,CAwF9B;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,cAAc,EAJ1C,MAI0C,EAAE,OAAO,EAHnD,MAGmD,gBA8M7D;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EARC,MAQD,EACR,mBAAmB,EARV,MAQU,EACnB,aAAa,EARJ,MAQI,EACb,QAAQ,EARC,MAQD,EACR,gBAAgB,EARP,MAQO,EAChB,cAAc,EARL,MAQK,eA4Gf;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAHrC,MAGqC,EAAE,eAAe,EAFtD,MAEsD;;;;;;;;YAgFzD,SAAS;YACT,GAAG;;;;EASV;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,QAAQ,OAAA,qBA4DnC;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAH9B,MAG8B,UAExC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAJvC,MAIuC,EAAE,YAAY,EAHrD,MAGqD,GAFnD,MAAM,GAAC,SAAS,CAmD5B"}