@cdxgen/cdxgen 13.3.0 → 13.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +12 -9
- package/bin/cdxgen-secure.js +15 -0
- package/bin/cdxgen.js +115 -31
- package/bin/evinse.js +23 -1
- package/bin/hbom.js +15 -7
- package/bin/repl.js +115 -0
- package/bin/sign.js +45 -15
- package/bin/tracebom.js +5 -1
- package/bin/validate.js +84 -18
- package/bin/verify.js +155 -86
- package/data/cbomosdb-queries.json +13 -1
- package/data/component-tags.json +8 -0
- package/data/helpers/init.gradle +46 -21
- package/data/queries-darwin.json +25 -1
- package/data/queries-win.json +19 -1
- package/data/queries.json +41 -0
- package/data/remediations.json +344 -1
- package/data/rules/cbom-security.yaml +235 -4
- package/data/rules/dependency-sources.yaml +67 -0
- package/data/rules/go-binaries.yaml +46 -0
- package/data/rules/golem-go.yaml +80 -0
- package/data/rules/hbom-compliance.yaml +40 -22
- package/data/rules/hbom-performance.yaml +7 -1
- package/data/rules/host-topology.yaml +1 -1
- package/data/rules/obom-runtime.yaml +31 -2
- package/data/rules/php-runtime.yaml +143 -0
- package/data/rules/scala-evidence.yaml +115 -0
- package/lib/audit/index.js +52 -6
- package/lib/cli/bomAssembly.js +28 -3
- package/lib/cli/cliOptions.js +110 -3
- package/lib/cli/index.js +186 -58
- package/lib/cli/jsBom.js +50 -29
- package/lib/cli/jvmBom.js +779 -146
- package/lib/cli/managedBom.js +1021 -261
- package/lib/cli/nativeBom.js +364 -58
- package/lib/core/activity.js +12 -0
- package/lib/core/env.js +47 -17
- package/lib/core/fs.js +31 -21
- package/lib/core/httpClient.js +233 -69
- package/lib/core/pluginRun.js +184 -0
- package/lib/core/processTree.js +100 -0
- package/lib/core/projectConfig.js +1 -0
- package/lib/core/projectTooling.js +97 -0
- package/lib/core/propertySanitizer.js +72 -0
- package/lib/core/runState.js +39 -0
- package/lib/core/toml.js +72 -0
- package/lib/ecosystems/asarutils.js +4 -2
- package/lib/ecosystems/bunutils.js +5 -7
- package/lib/ecosystems/cargoCache.js +231 -8
- package/lib/ecosystems/cmakeResolver.js +10 -21
- package/lib/ecosystems/cppBuildContext.js +631 -0
- package/lib/ecosystems/cppEvidence.js +337 -22
- package/lib/ecosystems/cppIncludeResolver.js +294 -0
- package/lib/ecosystems/denoutils.js +93 -66
- package/lib/ecosystems/ecosystems.js +1967 -788
- package/lib/ecosystems/golem.js +578 -18
- package/lib/ecosystems/gradleutils.js +340 -46
- package/lib/ecosystems/jsEvidence.js +85 -24
- package/lib/ecosystems/kosi.js +21 -4
- package/lib/ecosystems/npmutils.js +64 -0
- package/lib/ecosystems/parsers-dotnet.js +668 -153
- package/lib/ecosystems/parsers-elm.js +46 -28
- package/lib/ecosystems/parsers-gleam.js +3 -4
- package/lib/ecosystems/parsers-go.js +1283 -297
- package/lib/ecosystems/parsers-js.js +92 -26
- package/lib/ecosystems/parsers-julia.js +2 -3
- package/lib/ecosystems/parsers-jvm.js +463 -29
- package/lib/ecosystems/parsers-misc.js +405 -93
- package/lib/ecosystems/parsers-python.js +152 -20
- package/lib/ecosystems/parsers-rust.js +4 -4
- package/lib/ecosystems/parsers-terraform.js +1573 -19
- package/lib/ecosystems/pythonutils.js +102 -6
- package/lib/ecosystems/remote/huggingface.js +3 -0
- package/lib/ecosystems/rubyutils.js +73 -20
- package/lib/ecosystems/rusi.js +32 -9
- package/lib/ecosystems/sbtutils.js +243 -187
- package/lib/ecosystems/scalacliutils.js +343 -0
- package/lib/ecosystems/scalasem.js +2620 -0
- package/lib/ecosystems/terraformRegistry.js +288 -0
- package/lib/ecosystems/utils.js +2 -0
- package/lib/ecosystems/vendoredCode.js +156 -0
- package/lib/evinser/evinser.js +695 -78
- package/lib/evinser/swiftsem.js +68 -5
- package/lib/helpers/agenticToolutils.js +2 -2
- package/lib/helpers/bomSigner.js +576 -128
- package/lib/inventory/agentSkillSpec.js +17 -0
- package/lib/inventory/aiCollector.js +4 -1
- package/lib/inventory/analyzer.js +110 -127
- package/lib/inventory/apkInstalledDb.js +243 -0
- package/lib/inventory/atomUtils.js +204 -48
- package/lib/inventory/auditCategories.js +10 -3
- package/lib/inventory/buildToolRateLimit.js +144 -0
- package/lib/inventory/cacheCommands.js +2 -1
- package/lib/inventory/cacheDir.js +52 -9
- package/lib/inventory/certificates.js +2371 -0
- package/lib/inventory/cmakeBuildDirs.js +254 -0
- package/lib/inventory/communityAiConfigParser.js +4 -9
- package/lib/inventory/deps.js +507 -128
- package/lib/inventory/display.js +200 -3
- package/lib/inventory/dosai.js +747 -101
- package/lib/inventory/dosaiParsers.js +310 -15
- package/lib/inventory/dynamic.js +96 -8
- package/lib/inventory/envcontext.js +168 -5
- package/lib/inventory/evidenceUtils.js +590 -132
- package/lib/inventory/fetchBatch.js +574 -38
- package/lib/inventory/fetchDiskCache.js +597 -0
- package/lib/inventory/forgeEnricher.js +14 -5
- package/lib/inventory/formulationParsers.js +3 -2
- package/lib/inventory/goBuildInfo.js +140 -0
- package/lib/inventory/hbom.js +67 -7
- package/lib/inventory/hbomAnalysis.js +16 -0
- package/lib/inventory/hostTopology.js +21 -0
- package/lib/inventory/jvmLocalRepos.js +917 -0
- package/lib/inventory/mcpConfigParser.js +2 -3
- package/lib/inventory/osPackagePurl.js +244 -0
- package/lib/inventory/osPackageResolver.js +89 -87
- package/lib/inventory/osinfo.js +79 -31
- package/lib/inventory/osqueryTransform.js +114 -5
- package/lib/inventory/parentSelection.js +146 -0
- package/lib/inventory/phpBuildInfo.js +487 -0
- package/lib/inventory/phpHostProbe.js +641 -0
- package/lib/inventory/rootfsCerts.js +426 -0
- package/lib/inventory/rustFormulationParser.js +3 -4
- package/lib/inventory/scalaCoords.js +153 -0
- package/lib/inventory/source.js +215 -11
- package/lib/inventory/spdx.js +245 -0
- package/lib/inventory/traceRunner.js +93 -8
- package/lib/inventory/tracedCrypto.js +423 -0
- package/lib/managers/binary.js +529 -183
- package/lib/managers/docker.js +199 -44
- package/lib/managers/oci.js +24 -2
- package/lib/parsers/cmakeCache.js +69 -0
- package/lib/parsers/cmakeLists.js +16 -2
- package/lib/parsers/cmakePresets.js +400 -0
- package/lib/parsers/compileCommands.js +557 -0
- package/lib/parsers/email.js +277 -0
- package/lib/parsers/largeJson.js +34 -2
- package/lib/parsers/strictJson.js +322 -0
- package/lib/parsers/terraformConfig.js +1073 -0
- package/lib/parsers/terraformSource.js +652 -0
- package/lib/server/server.js +209 -1
- package/lib/stages/postgen/annotator.js +17 -1
- package/lib/stages/postgen/introspection/markers.js +1 -1
- package/lib/stages/postgen/introspection/reflect.js +4 -1
- package/lib/stages/postgen/postgen.js +20 -6
- package/lib/stages/postgen/ruleEngine.js +58 -1
- package/lib/stages/postgen/specVersionCompat.js +62 -0
- package/lib/stages/pregen/pregen.js +117 -5
- package/lib/validator/bomValidator.js +26 -5
- package/lib/validator/generated/runtime.mjs +13 -0
- package/lib/validator/generated/validate-1.6.mjs +26 -7
- package/lib/validator/generated/validate-1.7.mjs +31 -12
- package/lib/validator/generated/validate-2.0.mjs +30 -11
- package/lib/validator/index.js +25 -10
- package/lib/validator/reporters/json.js +1 -0
- package/package.json +23 -23
- package/types/bin/cdxgen-secure.d.ts +3 -0
- package/types/bin/cdxgen-secure.d.ts.map +1 -0
- package/types/bin/repl.d.ts.map +1 -1
- package/types/lib/audit/index.d.ts.map +1 -1
- package/types/lib/cli/bomAssembly.d.ts +9 -2
- package/types/lib/cli/bomAssembly.d.ts.map +1 -1
- package/types/lib/cli/cliOptions.d.ts +43 -0
- package/types/lib/cli/cliOptions.d.ts.map +1 -1
- package/types/lib/cli/index.d.ts.map +1 -1
- package/types/lib/cli/jsBom.d.ts.map +1 -1
- package/types/lib/cli/jvmBom.d.ts +44 -1
- package/types/lib/cli/jvmBom.d.ts.map +1 -1
- package/types/lib/cli/managedBom.d.ts +7 -4
- package/types/lib/cli/managedBom.d.ts.map +1 -1
- package/types/lib/cli/nativeBom.d.ts +3 -1
- package/types/lib/cli/nativeBom.d.ts.map +1 -1
- package/types/lib/core/activity.d.ts.map +1 -1
- package/types/lib/core/env.d.ts +27 -2
- package/types/lib/core/env.d.ts.map +1 -1
- package/types/lib/core/fs.d.ts.map +1 -1
- package/types/lib/core/httpClient.d.ts +13 -8
- package/types/lib/core/httpClient.d.ts.map +1 -1
- package/types/lib/core/pluginRun.d.ts +97 -0
- package/types/lib/core/pluginRun.d.ts.map +1 -0
- package/types/lib/core/processTree.d.ts +36 -0
- package/types/lib/core/processTree.d.ts.map +1 -0
- package/types/lib/core/projectConfig.d.ts.map +1 -1
- package/types/lib/core/projectTooling.d.ts +41 -0
- package/types/lib/core/projectTooling.d.ts.map +1 -0
- package/types/lib/core/propertySanitizer.d.ts +26 -0
- package/types/lib/core/propertySanitizer.d.ts.map +1 -1
- package/types/lib/core/runState.d.ts +29 -0
- package/types/lib/core/runState.d.ts.map +1 -0
- package/types/lib/core/toml.d.ts +20 -0
- package/types/lib/core/toml.d.ts.map +1 -0
- package/types/lib/ecosystems/asarutils.d.ts.map +1 -1
- package/types/lib/ecosystems/bunutils.d.ts.map +1 -1
- package/types/lib/ecosystems/cargoCache.d.ts +12 -0
- package/types/lib/ecosystems/cargoCache.d.ts.map +1 -1
- package/types/lib/ecosystems/cmakeResolver.d.ts +5 -3
- package/types/lib/ecosystems/cmakeResolver.d.ts.map +1 -1
- package/types/lib/ecosystems/cppBuildContext.d.ts +55 -0
- package/types/lib/ecosystems/cppBuildContext.d.ts.map +1 -0
- package/types/lib/ecosystems/cppEvidence.d.ts +19 -3
- package/types/lib/ecosystems/cppEvidence.d.ts.map +1 -1
- package/types/lib/ecosystems/cppIncludeResolver.d.ts +92 -0
- package/types/lib/ecosystems/cppIncludeResolver.d.ts.map +1 -0
- package/types/lib/ecosystems/denoutils.d.ts +9 -3
- package/types/lib/ecosystems/denoutils.d.ts.map +1 -1
- package/types/lib/ecosystems/ecosystems.d.ts +62 -13
- package/types/lib/ecosystems/ecosystems.d.ts.map +1 -1
- package/types/lib/ecosystems/golem.d.ts +81 -1
- package/types/lib/ecosystems/golem.d.ts.map +1 -1
- package/types/lib/ecosystems/gradleutils.d.ts +59 -7
- package/types/lib/ecosystems/gradleutils.d.ts.map +1 -1
- package/types/lib/ecosystems/jsEvidence.d.ts.map +1 -1
- package/types/lib/ecosystems/kosi.d.ts.map +1 -1
- package/types/lib/ecosystems/npmutils.d.ts +15 -0
- package/types/lib/ecosystems/npmutils.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-dotnet.d.ts +155 -5
- package/types/lib/ecosystems/parsers-dotnet.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-elm.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-gleam.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-go.d.ts +119 -5
- package/types/lib/ecosystems/parsers-go.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-js.d.ts +6 -1
- package/types/lib/ecosystems/parsers-js.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-julia.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-jvm.d.ts +74 -3
- package/types/lib/ecosystems/parsers-jvm.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-misc.d.ts +21 -59
- package/types/lib/ecosystems/parsers-misc.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-python.d.ts +57 -6
- package/types/lib/ecosystems/parsers-python.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-terraform.d.ts +38 -21
- package/types/lib/ecosystems/parsers-terraform.d.ts.map +1 -1
- package/types/lib/ecosystems/pythonutils.d.ts +26 -1
- package/types/lib/ecosystems/pythonutils.d.ts.map +1 -1
- package/types/lib/ecosystems/remote/huggingface.d.ts.map +1 -1
- package/types/lib/ecosystems/rubyutils.d.ts +21 -1
- package/types/lib/ecosystems/rubyutils.d.ts.map +1 -1
- package/types/lib/ecosystems/rusi.d.ts.map +1 -1
- package/types/lib/ecosystems/sbtutils.d.ts +88 -2
- package/types/lib/ecosystems/sbtutils.d.ts.map +1 -1
- package/types/lib/ecosystems/scalacliutils.d.ts +56 -0
- package/types/lib/ecosystems/scalacliutils.d.ts.map +1 -0
- package/types/lib/ecosystems/scalasem.d.ts +311 -0
- package/types/lib/ecosystems/scalasem.d.ts.map +1 -0
- package/types/lib/ecosystems/terraformRegistry.d.ts +9 -0
- package/types/lib/ecosystems/terraformRegistry.d.ts.map +1 -0
- package/types/lib/ecosystems/utils.d.ts +2 -2
- package/types/lib/ecosystems/utils.d.ts.map +1 -1
- package/types/lib/ecosystems/vendoredCode.d.ts +32 -0
- package/types/lib/ecosystems/vendoredCode.d.ts.map +1 -0
- package/types/lib/evinser/evinser.d.ts +100 -8
- package/types/lib/evinser/evinser.d.ts.map +1 -1
- package/types/lib/evinser/swiftsem.d.ts +10 -0
- package/types/lib/evinser/swiftsem.d.ts.map +1 -1
- package/types/lib/helpers/bomSigner.d.ts +80 -4
- package/types/lib/helpers/bomSigner.d.ts.map +1 -1
- package/types/lib/inventory/agentSkillSpec.d.ts +13 -0
- package/types/lib/inventory/agentSkillSpec.d.ts.map +1 -0
- package/types/lib/inventory/aiCollector.d.ts.map +1 -1
- package/types/lib/inventory/analyzer.d.ts.map +1 -1
- package/types/lib/inventory/apkInstalledDb.d.ts +42 -0
- package/types/lib/inventory/apkInstalledDb.d.ts.map +1 -0
- package/types/lib/inventory/atomUtils.d.ts +96 -10
- package/types/lib/inventory/atomUtils.d.ts.map +1 -1
- package/types/lib/inventory/auditCategories.d.ts +3 -0
- package/types/lib/inventory/auditCategories.d.ts.map +1 -1
- package/types/lib/inventory/buildToolRateLimit.d.ts +38 -0
- package/types/lib/inventory/buildToolRateLimit.d.ts.map +1 -0
- package/types/lib/inventory/cacheCommands.d.ts +2 -1
- package/types/lib/inventory/cacheCommands.d.ts.map +1 -1
- package/types/lib/inventory/cacheDir.d.ts +12 -4
- package/types/lib/inventory/cacheDir.d.ts.map +1 -1
- package/types/lib/inventory/certificates.d.ts +205 -0
- package/types/lib/inventory/certificates.d.ts.map +1 -0
- package/types/lib/inventory/cmakeBuildDirs.d.ts +58 -0
- package/types/lib/inventory/cmakeBuildDirs.d.ts.map +1 -0
- package/types/lib/inventory/communityAiConfigParser.d.ts.map +1 -1
- package/types/lib/inventory/deps.d.ts +61 -2
- package/types/lib/inventory/deps.d.ts.map +1 -1
- package/types/lib/inventory/display.d.ts +18 -0
- package/types/lib/inventory/display.d.ts.map +1 -1
- package/types/lib/inventory/dosai.d.ts +202 -14
- package/types/lib/inventory/dosai.d.ts.map +1 -1
- package/types/lib/inventory/dosaiParsers.d.ts +53 -7
- package/types/lib/inventory/dosaiParsers.d.ts.map +1 -1
- package/types/lib/inventory/dynamic.d.ts +16 -1
- package/types/lib/inventory/dynamic.d.ts.map +1 -1
- package/types/lib/inventory/envcontext.d.ts +40 -2
- package/types/lib/inventory/envcontext.d.ts.map +1 -1
- package/types/lib/inventory/evidenceUtils.d.ts +48 -14
- package/types/lib/inventory/evidenceUtils.d.ts.map +1 -1
- package/types/lib/inventory/fetchBatch.d.ts +83 -14
- package/types/lib/inventory/fetchBatch.d.ts.map +1 -1
- package/types/lib/inventory/fetchDiskCache.d.ts +169 -0
- package/types/lib/inventory/fetchDiskCache.d.ts.map +1 -0
- package/types/lib/inventory/forgeEnricher.d.ts.map +1 -1
- package/types/lib/inventory/formulationParsers.d.ts.map +1 -1
- package/types/lib/inventory/goBuildInfo.d.ts +10 -0
- package/types/lib/inventory/goBuildInfo.d.ts.map +1 -0
- package/types/lib/inventory/hbom.d.ts.map +1 -1
- package/types/lib/inventory/hbomAnalysis.d.ts +10 -0
- package/types/lib/inventory/hbomAnalysis.d.ts.map +1 -1
- package/types/lib/inventory/hostTopology.d.ts.map +1 -1
- package/types/lib/inventory/jvmLocalRepos.d.ts +178 -0
- package/types/lib/inventory/jvmLocalRepos.d.ts.map +1 -0
- package/types/lib/inventory/mcpConfigParser.d.ts.map +1 -1
- package/types/lib/inventory/osPackagePurl.d.ts +99 -0
- package/types/lib/inventory/osPackagePurl.d.ts.map +1 -0
- package/types/lib/inventory/osPackageResolver.d.ts +6 -2
- package/types/lib/inventory/osPackageResolver.d.ts.map +1 -1
- package/types/lib/inventory/osinfo.d.ts +31 -6
- package/types/lib/inventory/osinfo.d.ts.map +1 -1
- package/types/lib/inventory/osqueryTransform.d.ts +51 -0
- package/types/lib/inventory/osqueryTransform.d.ts.map +1 -1
- package/types/lib/inventory/parentSelection.d.ts +34 -0
- package/types/lib/inventory/parentSelection.d.ts.map +1 -0
- package/types/lib/inventory/phpBuildInfo.d.ts +142 -0
- package/types/lib/inventory/phpBuildInfo.d.ts.map +1 -0
- package/types/lib/inventory/phpHostProbe.d.ts +35 -0
- package/types/lib/inventory/phpHostProbe.d.ts.map +1 -0
- package/types/lib/inventory/rootfsCerts.d.ts +27 -0
- package/types/lib/inventory/rootfsCerts.d.ts.map +1 -0
- package/types/lib/inventory/rustFormulationParser.d.ts.map +1 -1
- package/types/lib/inventory/scalaCoords.d.ts +80 -0
- package/types/lib/inventory/scalaCoords.d.ts.map +1 -0
- package/types/lib/inventory/source.d.ts +28 -0
- package/types/lib/inventory/source.d.ts.map +1 -1
- package/types/lib/inventory/spdx.d.ts +24 -0
- package/types/lib/inventory/spdx.d.ts.map +1 -1
- package/types/lib/inventory/traceRunner.d.ts +16 -1
- package/types/lib/inventory/traceRunner.d.ts.map +1 -1
- package/types/lib/inventory/tracedCrypto.d.ts +64 -0
- package/types/lib/inventory/tracedCrypto.d.ts.map +1 -0
- package/types/lib/managers/binary.d.ts +10 -0
- package/types/lib/managers/binary.d.ts.map +1 -1
- package/types/lib/managers/docker.d.ts +12 -0
- package/types/lib/managers/docker.d.ts.map +1 -1
- package/types/lib/managers/oci.d.ts +3 -1
- package/types/lib/managers/oci.d.ts.map +1 -1
- package/types/lib/parsers/cmakeCache.d.ts +16 -0
- package/types/lib/parsers/cmakeCache.d.ts.map +1 -1
- package/types/lib/parsers/cmakeLists.d.ts +2 -1
- package/types/lib/parsers/cmakeLists.d.ts.map +1 -1
- package/types/lib/parsers/cmakePresets.d.ts +78 -0
- package/types/lib/parsers/cmakePresets.d.ts.map +1 -0
- package/types/lib/parsers/compileCommands.d.ts +115 -0
- package/types/lib/parsers/compileCommands.d.ts.map +1 -0
- package/types/lib/parsers/email.d.ts +19 -0
- package/types/lib/parsers/email.d.ts.map +1 -0
- package/types/lib/parsers/largeJson.d.ts +13 -0
- package/types/lib/parsers/largeJson.d.ts.map +1 -1
- package/types/lib/parsers/strictJson.d.ts +46 -0
- package/types/lib/parsers/strictJson.d.ts.map +1 -0
- package/types/lib/parsers/terraformConfig.d.ts +70 -0
- package/types/lib/parsers/terraformConfig.d.ts.map +1 -0
- package/types/lib/parsers/terraformSource.d.ts +66 -0
- package/types/lib/parsers/terraformSource.d.ts.map +1 -0
- package/types/lib/server/server.d.ts +8 -0
- package/types/lib/server/server.d.ts.map +1 -1
- package/types/lib/stages/postgen/annotator.d.ts.map +1 -1
- package/types/lib/stages/postgen/introspection/reflect.d.ts.map +1 -1
- package/types/lib/stages/postgen/postgen.d.ts.map +1 -1
- package/types/lib/stages/postgen/ruleEngine.d.ts +7 -4
- package/types/lib/stages/postgen/ruleEngine.d.ts.map +1 -1
- package/types/lib/stages/postgen/specVersionCompat.d.ts.map +1 -1
- package/types/lib/stages/pregen/pregen.d.ts +14 -1
- package/types/lib/stages/pregen/pregen.d.ts.map +1 -1
- package/types/lib/validator/bomValidator.d.ts.map +1 -1
- package/types/lib/validator/index.d.ts +8 -0
- package/types/lib/validator/index.d.ts.map +1 -1
- package/types/lib/validator/reporters/json.d.ts.map +1 -1
- package/lib/third-party/arborist/snapshots/calc-dep-flags.test.cjs +0 -462
|
@@ -1,10 +1,74 @@
|
|
|
1
1
|
/**
|
|
2
2
|
* Parse pom file
|
|
3
3
|
*
|
|
4
|
+
* Versions resolve from the pom's own properties and dependencyManagement.
|
|
5
|
+
* A caller that has read the pom's parents passes what they define in
|
|
6
|
+
* `inherited`, so versions the parents manage resolve too. Imported BOMs and
|
|
7
|
+
* parents outside the scanned directory are not read.
|
|
8
|
+
*
|
|
4
9
|
* @param {string} pomFile pom file to parse
|
|
5
|
-
* @
|
|
10
|
+
* @param {Object} [inherited] Properties and managed versions from parent poms
|
|
11
|
+
* @param {Object} [inherited.properties] Property name to raw value
|
|
12
|
+
* @param {Object} [inherited.managedVersions] `groupId:artifactId` to version
|
|
13
|
+
* @returns {Object} Object containing pom properties, modules, the parent
|
|
14
|
+
* reference, the user properties and managed versions this pom defines, and
|
|
15
|
+
* array of dependencies
|
|
16
|
+
*/
|
|
17
|
+
export declare function parsePom(pomFile: string, inherited?: {
|
|
18
|
+
properties?: Object;
|
|
19
|
+
managedVersions?: Object;
|
|
20
|
+
}): Object;
|
|
21
|
+
/**
|
|
22
|
+
* Parse a pom file together with the parent poms it names that are present
|
|
23
|
+
* inside the scanned directory, without running Maven. Properties and
|
|
24
|
+
* dependencyManagement versions from those parents resolve the versions the
|
|
25
|
+
* pom leaves to them. Parents outside the directory and imported BOMs are not
|
|
26
|
+
* read, so the versions they manage stay empty.
|
|
27
|
+
*
|
|
28
|
+
* @param {string} pomFile Pom file to parse
|
|
29
|
+
* @param {string} rootDir Scanned directory; parents outside it are ignored
|
|
30
|
+
* @param {Map} [cache] Reused across the poms of one scan
|
|
31
|
+
* @returns {Object} Same shape as parsePom
|
|
32
|
+
*/
|
|
33
|
+
export declare function parsePomWithLocalParents(pomFile: string, rootDir: string, cache?: Map<any, any>): Object;
|
|
34
|
+
/**
|
|
35
|
+
* Every pom file of the reactor an aggregator pom builds: its own modules,
|
|
36
|
+
* recursively through nested aggregators. A recursive dependency:tree run
|
|
37
|
+
* from the aggregator resolves all of them, so their own runs repeat it.
|
|
38
|
+
*
|
|
39
|
+
* A module entry names a directory relative to its pom, sometimes a direct
|
|
40
|
+
* path to a pom file. Entries that are absolute, or that climb out of the
|
|
41
|
+
* aggregator's directory, are ignored: the scan never listed them, and the
|
|
42
|
+
* walk must not follow a pom's pointers outside its own tree.
|
|
43
|
+
*
|
|
44
|
+
* @param {string} rootPom Path of the aggregator pom.
|
|
45
|
+
* @returns {Set<string>} Pom files of the reactor, excluding the aggregator.
|
|
6
46
|
*/
|
|
7
|
-
export declare function
|
|
47
|
+
export declare function resolveReactorPomFiles(rootPom: string): Set<string>;
|
|
48
|
+
/**
|
|
49
|
+
* File name stem for the trees of one recursive dependency:tree run. Maven
|
|
50
|
+
* expands the project expressions for each reactor module, so every module
|
|
51
|
+
* writes its own file; a fixed name would hold only the last module's tree.
|
|
52
|
+
*/
|
|
53
|
+
export declare const MAVEN_MODULE_TREE_STEM = "${project.groupId}-${project.artifactId}";
|
|
54
|
+
/**
|
|
55
|
+
* Read the trees one dependency:tree run wrote, one file per reactor module
|
|
56
|
+
* (see MAVEN_MODULE_TREE_STEM), and tell which of the reactor's pom files
|
|
57
|
+
* they cover. The pom the run started from comes first, then its modules in
|
|
58
|
+
* reactor order. A module pom counts as covered only when its own tree is
|
|
59
|
+
* among the files, so a module the run left out still runs on its own.
|
|
60
|
+
*
|
|
61
|
+
* @param {string} treeDir Directory the run wrote its trees into.
|
|
62
|
+
* @param {string} rootPom The pom file the run started from.
|
|
63
|
+
* @returns {{trees: Array<{pomFile: string, text: string}>, covered: Set<string>}}
|
|
64
|
+
*/
|
|
65
|
+
export declare function readMavenModuleTrees(treeDir: string, rootPom: string): {
|
|
66
|
+
trees: Array<{
|
|
67
|
+
pomFile: string;
|
|
68
|
+
text: string;
|
|
69
|
+
}>;
|
|
70
|
+
covered: Set<string>;
|
|
71
|
+
};
|
|
8
72
|
/**
|
|
9
73
|
* Parse maven dependency:tree json output
|
|
10
74
|
*
|
|
@@ -34,14 +98,21 @@ export declare function parseMavenTree(rawOutput: string, pomFile: string): Obje
|
|
|
34
98
|
/**
|
|
35
99
|
* Parse mill dependencies from file
|
|
36
100
|
*
|
|
101
|
+
* Scala artifacts are emitted in the sbt purl form: the Scala binary suffix
|
|
102
|
+
* is stripped from the artifact name and the version it carried is recorded
|
|
103
|
+
* in the cdx:scala:compilerVersion property, so one library keeps a single
|
|
104
|
+
* purl whichever build tool reported it.
|
|
105
|
+
*
|
|
37
106
|
* @param {string} module name of the module
|
|
38
107
|
* @param {map} dependencies the parsed dependencies
|
|
39
108
|
* @param {map} relations a map containing all relations
|
|
40
109
|
* @param {string} millRootPath root of the project
|
|
110
|
+
* @param {string} logFileName name of the tree log the module wrote
|
|
41
111
|
*
|
|
42
112
|
* @returns the bom-ref of the module
|
|
43
113
|
*/
|
|
44
|
-
export declare function parseMillDependency(module: string, dependencies: map, relations: map, millRootPath: string): any;
|
|
114
|
+
export declare function parseMillDependency(module: string, dependencies: map, relations: map, millRootPath: string, logFileName?: string): any;
|
|
115
|
+
export declare function completeComponent(component: any): any;
|
|
45
116
|
/**
|
|
46
117
|
* Parse clojure cli dependencies output
|
|
47
118
|
* @param {string} rawOutput Raw string output
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"parsers-jvm.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-jvm.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"parsers-jvm.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-jvm.js"],"names":[],"mappings":"AAsDA;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EARrB,MAQqB,EAAE,SAAS,AAPxC,CAGA,EAFA;IAA2B,UAAU,AAArC,CACA,EADQ,MAAM,CACd;IAA2B,eAAe,AAA1C,CACA,EADQ,MAAM,CACd;CAI6C,GAJnC,MAAM,CA8PlB;AAiFD;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EALrC,MAKqC,EAAE,OAAO,EAJ9C,MAI8C,EAAE,KAAK,AAH7D,CACA,eAEyE,GAF/D,MAAM,CAalB;AAMD;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAHnC,MAGmC,GAFjC,GAAG,CAAC,MAAM,CAAC,CAsDvB;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,6CAES,CAAC;AAiB7C;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAJjC,MAIiC,EAAE,OAAO,EAH1C,MAG0C,GAFxC;IAAC,KAAK,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC;IAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAAC,CA8CjF;AA2HD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,KAAA,EAAE,OAAO,KAAA,GAFxC;IAAC,eAAe,EAAE,EAAE,CAAC;IAAC,OAAO,EAAE,GAAC,EAAE,CAAC;IAAC,gBAAgB,EAAE,GAAC,EAAE,CAAA;CAAC,GAAC,EAAE,GAAC,EAAE,GAAC,GAAC,GAAC;IAAC,eAAe,EAAE;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,GAAC,CAAA;KAAC,GAAC,EAAE,CAAC;IAAC,OAAO,EAAE,EAAE,CAAC;IAAC,gBAAgB,EAAE,EAAE,CAAA;CAAC,CAkExJ;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAL7B,MAK6B,EAAE,OAAO,EAJtC,MAIsC,GAFpC,MAAM,CA8FlB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EATG,MASH,EACN,YAAY,EATH,GASG,EACZ,SAAS,EATA,GASA,EACT,YAAY,EATH,MASG,EACZ,WAAW,GATF,MASsB,OA+HhC;AAED,wBAAgB,iBAAiB,CAAC,SAAS,KAAA,OAe1C;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAF1B,MAE0B,SAkCpC;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAF3B,MAE2B,YAWrC;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,IAAI,EALtB,MAKsB,EAAE,UAAU,EAJlC,MAIkC,EAAE,IAAI,EAHxC,MAAM,EAGkC,GAFtC,MAAM,EAAE,CA0BpB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAFpC,MAEoC,SAkC9C;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAFjC,MAEiC,SAqD3C;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAF9B,MAE8B,SAexC;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,SAAS,KAAA,SAmCnC;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAGgC,GAF9B,MAAM,EAAE,CAkCpB;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAH5B,MAG4B,GAF1B,MAAM,EAAE,CAoDpB"}
|
|
@@ -186,65 +186,25 @@ export declare function parseComposerJson(composerJsonFile: string): Object;
|
|
|
186
186
|
*
|
|
187
187
|
* @param {string} pkgLockFile composer.lock file
|
|
188
188
|
* @param {array} rootRequires require section from composer.json
|
|
189
|
-
|
|
190
|
-
|
|
191
|
-
|
|
192
|
-
|
|
193
|
-
|
|
194
|
-
|
|
195
|
-
|
|
196
|
-
|
|
197
|
-
|
|
198
|
-
|
|
199
|
-
|
|
200
|
-
|
|
201
|
-
|
|
202
|
-
|
|
203
|
-
|
|
204
|
-
|
|
205
|
-
|
|
206
|
-
identity: {
|
|
207
|
-
field: string;
|
|
208
|
-
confidence: number;
|
|
209
|
-
methods: {
|
|
210
|
-
technique: string;
|
|
211
|
-
confidence: number;
|
|
212
|
-
value: string;
|
|
213
|
-
}[];
|
|
214
|
-
};
|
|
215
|
-
};
|
|
216
|
-
}[];
|
|
217
|
-
dependenciesList: {
|
|
218
|
-
ref: string;
|
|
219
|
-
dependsOn: any[];
|
|
220
|
-
}[];
|
|
221
|
-
rootList: {
|
|
222
|
-
group: any;
|
|
223
|
-
name: any;
|
|
224
|
-
purl: any;
|
|
225
|
-
"bom-ref": string;
|
|
226
|
-
version: any;
|
|
227
|
-
repository: any;
|
|
228
|
-
license: any;
|
|
229
|
-
description: any;
|
|
230
|
-
scope: string;
|
|
231
|
-
properties: {
|
|
232
|
-
name: string;
|
|
233
|
-
value: string;
|
|
234
|
-
}[];
|
|
235
|
-
evidence: {
|
|
236
|
-
identity: {
|
|
237
|
-
field: string;
|
|
238
|
-
confidence: number;
|
|
239
|
-
methods: {
|
|
240
|
-
technique: string;
|
|
241
|
-
confidence: number;
|
|
242
|
-
value: string;
|
|
243
|
-
}[];
|
|
244
|
-
};
|
|
245
|
-
};
|
|
189
|
+
* @returns {{pkgList: Object[], dependenciesList: Object[], rootList: Object[], platformProperties: {name: string, value: string}[]}|Array}
|
|
190
|
+
* The locked packages, the dependency edges between them, the packages the
|
|
191
|
+
* root requires, and the lock's `platform`, `platform-dev` and
|
|
192
|
+
* `platform-overrides` entries as `cdx:composer:*` properties. The platform
|
|
193
|
+
* entries are constraints and assumed versions, not the PHP that runs; the
|
|
194
|
+
* caller puts them on the module component. Every locked package carries its
|
|
195
|
+
* own `php`, `hhvm`, `ext-*` and `lib-*` requirements as
|
|
196
|
+
* `cdx:composer:require:<name>` properties. A lock that is not valid JSON
|
|
197
|
+
* gives an empty array.
|
|
198
|
+
*/
|
|
199
|
+
export declare function parseComposerLock(pkgLockFile: string, rootRequires: array): {
|
|
200
|
+
pkgList: Object[];
|
|
201
|
+
dependenciesList: Object[];
|
|
202
|
+
rootList: Object[];
|
|
203
|
+
platformProperties: {
|
|
204
|
+
name: string;
|
|
205
|
+
value: string;
|
|
246
206
|
}[];
|
|
247
|
-
};
|
|
207
|
+
} | any[];
|
|
248
208
|
/**
|
|
249
209
|
* Method to execute dpkg --listfiles to determine the files provided by a given package
|
|
250
210
|
*
|
|
@@ -453,9 +413,11 @@ export declare function parseMakeDFile(dfile: string): Object;
|
|
|
453
413
|
*
|
|
454
414
|
* @param {Object} podfileLock The content of the podfile.lock as an Object
|
|
455
415
|
* @param {String} projectPath The path to the project root
|
|
416
|
+
* @param {String} [scanRoot] Directory the scan was asked for. Local `:path`
|
|
417
|
+
* and `:podspec` sources outside it are not read. Defaults to projectPath.
|
|
456
418
|
* @returns {Map} Map of all dependencies with their direct dependencies
|
|
457
419
|
*/
|
|
458
|
-
export declare function parsePodfileLock(podfileLock: Object, projectPath: string): Map<any, any>;
|
|
420
|
+
export declare function parsePodfileLock(podfileLock: Object, projectPath: string, scanRoot?: string): Map<any, any>;
|
|
459
421
|
/**
|
|
460
422
|
* Parse all targets and their direct dependencies from the 'Podfile'
|
|
461
423
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"parsers-misc.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-misc.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"parsers-misc.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-misc.js"],"names":[],"mappings":"AAsFA;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,KAAA,EAAE,QAAQ,KAAA,GAF/C,MAAM,CA8ElB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAHjC,MAGiC,GAF/B,MAAM,EAAE,CA+BpB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAH/B,MAG+B,GAF7B,MAAM,EAAE,CAiEpB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EALvC,MAAM,WAAO,MAK0B,EAAE,OAAO,EAJhD,MAAM,EAI0C,EAAE,OAAO,EAHzD,MAAM,EAGmD,GAFvD,MAAM,EAAE,CAoEpB;AAmBD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAHpC,MAGoC,GAFlC,MAAM,EAAE,CAmEpB;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,YAAY,EAH7C,MAG6C,GAF3C,MAAM,EAAE,CA6DpB;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAHlC,MAGkC,GAFhC,MAAM,EAAE,CAmEpB;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,aAAa,EAH/B,MAG+B,GAF7B,MAAM,CAelB;AAaD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAHvB,MAGuB,GAFrB,MAAM,EAAE,CAiFpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAHhC,MAGgC,GAF9B,MAAM,EAAE,CAoDpB;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAH7B,MAG6B,GAF3B,MAAM,EAAE,CA4BpB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAH7B,MAG6B,GAF3B,MAAM,EAAE,CA2BpB;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,CAAC,EAH9B,MAG8B,GAF5B,MAAM,EAAE,CAapB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAHhC,MAGgC,GAF9B,MAAM,EAAE,CAqCpB;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,aAAa,EAHrC,MAGqC,GAFnC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,2BAA2B,EAAE,MAAM,EAAE,CAAA;CAAE,CAmF9F;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAH7B,MAG6B,GAF3B,MAAM,EAAE,CAmCpB;AA2HD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,gBAAgB,EAJ3C,MAI2C,EAAE,QAAQ,EAHrD,MAGqD,GAFnD;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,2BAA2B,EAAE,MAAM,EAAE,CAAA;CAAE,CAmD9F;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,YAAY,QAAA,GAF7B,MAAM,CA2GlB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,aAAa,QAAA,GAF/B,MAAM,CAqIlB;AA2CD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,gBAAgB,EAJvC,MAIuC,GAFrC,MAAM,CAqClB;AAgID;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAZlC,MAYkC,EAAE,YAAY,EAXhD,KAWgD,GAV9C;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,kBAAkB,EAAE;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAC,EAAE,CAAA;CAAC,QAAM,CA0L1I;AAmBD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAH5B,MAG4B,OAGtC;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAH3B,MAG2B,OAOrC;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAH3B,MAG2B,OAGrC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAH5B,MAG4B,OAGtC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAH9B,MAG8B,OAGxC;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,OAAA,EACP,gBAAgB,OAAA,EAChB,UAAU,EAND,MAMC,EACV,OAAO,EANE,MAMF,OA4ER;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAHjC,MAGiC,EAAE,OAAO,EAF1C,MAE0C;;;;;;;;EAqBpD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAFpC,MAEoC;;;;;;;;;;;;;;;;;;;IA+D9C;AAsCD;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAH3C,MAG2C,GAFzC,GAAG,CAAC,MAAM,CAAC,CA0CvB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAN3C,MAAM,SAMqC,EAAE,QAAQ,AAL7D,CACA,EADQ,MAAM,SAK+C,GAJnD,MAAM,CAqJlB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAH9B,MAG8B,GAF5B,OAAO,CAInB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAL9B,MAK8B,EAAE,OAAO,EAJvC,MAIuC,EAAE,OAAO,GAHhD,MAGqD,GAFnD;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAAE,CA2GtF;AAmKD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAJtC,MAIsC,EAAE,OAAO,EAH/C,MAG+C,GAF7C,MAAM,CAmElB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,aAAa,EALrC,MAKqC,EAAE,OAAO,EAJ9C,MAI8C,EAAE,OAAO,GAHvD,MAG4D,GAF1D;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAmS1D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAJ/B,MAI+B,GAH7B,8BAA4B,SAAS,CAoDjD;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,QAAA,GAFvB,MAAM,CAoBlB;AAqDD;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,EANvC,MAMuC,EAAE,WAAW,QAAA,EAAE,QAAQ,AAJtE,CAEA,QAEsE,iBA0LxE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EALG,MAKH,EACN,eAAe,eAAA,EACf,MAAM,AALL,CACF,QAImB,QA0BnB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,cAAc,QAAA,EAAE,YAAY,AAH9D,CACA,EADQ,OAG6D,GAF3D,MAAM,CAYlB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EALjC,QAKiC,EAAE,IAAI,QAAA,EAAE,OAAO,EAHhD,MAGgD,GAF9C,MAAM,CAyDlB;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAND,MAMC,EACV,OAAO,EANE,MAMF,EACP,IAAI,AANH,CACA,QAKe,GALL,MAAM,CA0FlB;AA+BD;;GAEG;AACH,wBAAgB,yBAAyB,SAExC;AAID;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,qBAAqB,CAAC,YAAY,EAJ7C,KAAK,CAAC,MAAM,CAIiC,GAF3C,OAAO,CAAC,IAAI,CAAC,CA4CzB;AAwWD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAHpC,MAGoC,GAFlC,MAAM,EAAE,CAoHpB"}
|
|
@@ -11,8 +11,11 @@ export declare function parsePyRequiresDist(dist_string: string): {
|
|
|
11
11
|
* Method to parse pipfile.lock data
|
|
12
12
|
*
|
|
13
13
|
* @param {Object} lockData JSON data from Pipfile.lock
|
|
14
|
+
* @param {Object[]} [installedMetadata] Components parsed from the installed
|
|
15
|
+
* `*.dist-info/METADATA` files of this machine, which answer before PyPI
|
|
16
|
+
* is asked
|
|
14
17
|
*/
|
|
15
|
-
export declare function parsePiplockData(lockData: Object): Promise<any[]>;
|
|
18
|
+
export declare function parsePiplockData(lockData: Object, installedMetadata?: Object[]): Promise<any[]>;
|
|
16
19
|
/**
|
|
17
20
|
* Append a deduplicated name/value property to a component's properties array.
|
|
18
21
|
*
|
|
@@ -41,14 +44,58 @@ export declare function parsePyProjectTomlFile(tomlFile: string): Object;
|
|
|
41
44
|
* @returns {string | undefined} The derived file name, or undefined when none can be derived.
|
|
42
45
|
*/
|
|
43
46
|
export declare function derivePythonLockMetadataFileName(fileEntry: object): string | undefined;
|
|
47
|
+
/**
|
|
48
|
+
* Normalise a Python distribution name the way PEP 503 does, so an installed
|
|
49
|
+
* distribution and the lockfile entry it belongs to compare equal whatever
|
|
50
|
+
* separator and case each of them used.
|
|
51
|
+
*
|
|
52
|
+
* @param {string} value Distribution name
|
|
53
|
+
* @returns {string|undefined} The normalised name, or undefined for no name
|
|
54
|
+
*/
|
|
55
|
+
export declare function normalizePep503Name(value: string): string | undefined;
|
|
56
|
+
/**
|
|
57
|
+
* The key an installed distribution and a lockfile entry are matched by: the
|
|
58
|
+
* PEP 503 normalised name and the version.
|
|
59
|
+
*
|
|
60
|
+
* @param {Object} p Component with `name` and `version`
|
|
61
|
+
* @returns {string|undefined} The key, or undefined without a name or version
|
|
62
|
+
*/
|
|
63
|
+
export declare function installedMetadataKey(p: Object): string | undefined;
|
|
64
|
+
/**
|
|
65
|
+
* Enrich lockfile entries from the installed distributions on this machine,
|
|
66
|
+
* before PyPI is asked.
|
|
67
|
+
*
|
|
68
|
+
* Each entry of `installedMetadata` is a component as
|
|
69
|
+
* {@link parseBdistMetadata} builds it from an installed `*.dist-info/METADATA`
|
|
70
|
+
* file. An entry is matched to the lockfile component with the same PEP 503
|
|
71
|
+
* normalised name and the same version, and fills the fields it lacks, so the
|
|
72
|
+
* registry is left only what the installed distributions do not answer. An
|
|
73
|
+
* installed release of another version describes a different release, so it
|
|
74
|
+
* enriches nothing. The distributions enrich the entries in place; no new
|
|
75
|
+
* components are created.
|
|
76
|
+
*
|
|
77
|
+
* @param {Object[]} pkgList Lockfile components, enriched in place
|
|
78
|
+
* @param {Object[]} installedMetadata Components parsed from installed
|
|
79
|
+
* `*.dist-info/METADATA` files
|
|
80
|
+
* @returns {Set<string>} The keys of the installations that enriched an entry,
|
|
81
|
+
* as {@link installedMetadataKey} builds them, so a caller that also walks
|
|
82
|
+
* the METADATA files can skip those as components
|
|
83
|
+
*/
|
|
84
|
+
export declare function enrichFromInstalledMetadata(pkgList: Object[], installedMetadata: Object[]): Set<string>;
|
|
44
85
|
/**
|
|
45
86
|
* Method to parse python lock files such as poetry.lock, pdm.lock, uv.lock, and pylock.toml.
|
|
46
87
|
*
|
|
47
88
|
* @param {string} lockData Raw TOML text from poetry.lock, pdm.lock, uv.lock, or pylock.toml
|
|
48
89
|
* @param {string} lockFile Lock file name for evidence
|
|
49
90
|
* @param {string} pyProjectFile pyproject.toml file
|
|
91
|
+
* @param {Object} [options] Options
|
|
92
|
+
* @param {Object[]} [options.installedMetadata] Components parsed from the
|
|
93
|
+
* installed `*.dist-info/METADATA` files of this machine, which answer
|
|
94
|
+
* before PyPI is asked
|
|
50
95
|
*/
|
|
51
|
-
export declare function parsePyLockData(lockData: string, lockFile: string, pyProjectFile: string
|
|
96
|
+
export declare function parsePyLockData(lockData: string, lockFile: string, pyProjectFile: string, options?: {
|
|
97
|
+
installedMetadata?: Object[];
|
|
98
|
+
}): Promise<{
|
|
52
99
|
pkgList: any[];
|
|
53
100
|
dependenciesList: any[];
|
|
54
101
|
parentComponent?: undefined;
|
|
@@ -76,10 +123,13 @@ export declare function parsePyLockData(lockData: string, lockFile: string, pyPr
|
|
|
76
123
|
*
|
|
77
124
|
* @param {String} reqFile Requirements.txt file
|
|
78
125
|
* @param {Boolean} fetchDepsInfo Fetch dependencies info from pypi
|
|
126
|
+
* @param {Object[]} [installedMetadata] Components parsed from the installed
|
|
127
|
+
* `*.dist-info/METADATA` files of this machine, which answer before PyPI
|
|
128
|
+
* is asked
|
|
79
129
|
*
|
|
80
130
|
* @returns {Promise[Array<Object>]} List of direct dependencies from the requirements file
|
|
81
131
|
*/
|
|
82
|
-
export declare function parseReqFile(reqFile: string, fetchDepsInfo?: boolean): any;
|
|
132
|
+
export declare function parseReqFile(reqFile: string, fetchDepsInfo?: boolean, installedMetadata?: Object[]): any;
|
|
83
133
|
/**
|
|
84
134
|
* Parse environment markers into structured format
|
|
85
135
|
*
|
|
@@ -116,11 +166,12 @@ export declare function parsePixiLockFile(pixiLockFileName: string, path: string
|
|
|
116
166
|
*/
|
|
117
167
|
export declare function parsePixiTomlFile(pixiToml: string): {};
|
|
118
168
|
/**
|
|
119
|
-
* Method to run cli command `pixi install`
|
|
120
|
-
*
|
|
169
|
+
* Method to run cli command `pixi install` in the project directory.
|
|
121
170
|
*
|
|
171
|
+
* @param {string} projectPath Directory containing pixi.toml
|
|
172
|
+
* @returns {boolean} true when pixi install succeeded
|
|
122
173
|
*/
|
|
123
|
-
export declare function generatePixiLockFile(
|
|
174
|
+
export declare function generatePixiLockFile(projectPath: string): boolean;
|
|
124
175
|
/**
|
|
125
176
|
* Parse a Mojo `mojoproject.toml` manifest.
|
|
126
177
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"parsers-python.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-python.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"parsers-python.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-python.js"],"names":[],"mappings":"AAgEA;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,QAAA;;;cAqB9C;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,QAAQ,EALpC,MAKoC,EAAE,iBAAiB,AAJ/D,CAGF,EAHU,MAAM,EAIiD,kBAoBjE;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EALnC,MAKmC,EAAE,IAAI,EAJzC,MAIyC,EAAE,KAAK,EAHhD,MAGgD,GAF9C,IAAI,CAkBhB;AAuMD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAHpC,MAGoC,GAFlC,MAAM,CAwSlB;AAqFD;;;;;;;;;;GAUG;AACH,wBAAgB,gCAAgC,CAAC,SAAS,EAH/C,MAG+C,GAF7C,MAAM,GAAG,SAAS,CA2C9B;AAiBD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAH9B,MAG8B,GAF5B,MAAM,GAAC,SAAS,CAU5B;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAH3B,MAG2B,GAFzB,MAAM,GAAC,SAAS,CAM5B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAPxC,MAAM,EAOkC,EAAE,iBAAiB,EAN3D,MAAM,EAMqD,GAJzD,GAAG,CAAC,MAAM,CAAC,CA0CvB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EATC,MASD,EACR,QAAQ,EATC,MASD,EACR,aAAa,EATJ,MASI,EACb,OAAO,AATN,CAIF,EAHE;IAA2B,iBAAiB,AAA5C,CAGF,EAHU,MAAM,EAAE,CAGlB;CAKa;;;;;;;;;;;;;;;;;;;;;;GA4nBb;AAYD;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAChC,OAAO,QAAA,EACP,aAAa,UAAQ,EACrB,iBAAiB,AAThB,CAIA,EAJQ,MAAM,EASc,OAG9B;AAySD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,QAAA,GAFhC,KAAK,CAAC,MAAM,CAAC,CAmCzB;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,EAFvC,MAEuC,qBAqBjD;AA6CD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,gBAAgB,QAAA,EAAE,IAAI,QAAA;;;;;;;;;EAkLvD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,QAAA,MAiCzC;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAHrC,MAGqC,GAFnC,OAAO,CAqBnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,eAAe,EAHrC,MAGqC,GAFnC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CA8C1D"}
|
|
@@ -1,27 +1,12 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Terraform
|
|
2
|
+
* Whether a path holds any Terraform or OpenTofu configuration or lock file
|
|
3
|
+
* the workspace assembly would consider; used by project-type autodetection.
|
|
3
4
|
*
|
|
4
|
-
*
|
|
5
|
-
*
|
|
6
|
-
*
|
|
7
|
-
* `version` and `constraints` attributes, and a `hashes` list of prefixed
|
|
8
|
-
* digests. A line scanner is sufficient and avoids a general HCL parser.
|
|
9
|
-
*
|
|
10
|
-
* Provider addresses look like `registry.terraform.io/hashicorp/aws`; the
|
|
11
|
-
* registry host and namespace identify the provider upstream, so they are
|
|
12
|
-
* kept in the component group and a generic purl
|
|
13
|
-
* (`pkg:generic/<host>/<namespace>/<type>@<version>`), with the intended type
|
|
14
|
-
* recorded as a `cdx:purl:proposedType` property because no `terraform`
|
|
15
|
-
* purl type is registered.
|
|
16
|
-
*
|
|
17
|
-
* The two hash schemes in the `hashes` list mean different things. A `zh:`
|
|
18
|
-
* digest is a SHA-256 of the official `.zip` package as the registry indexes
|
|
19
|
-
* it, so it is the one a consumer can check an artifact against and the one
|
|
20
|
-
* emitted in the CycloneDX `hashes` array. An `h1:` digest is base64 over a
|
|
21
|
-
* hash of the package's *contents* rather than the archive, which lets
|
|
22
|
-
* Terraform verify an unpacked directory but makes it useless as an artifact
|
|
23
|
-
* checksum; it is kept as a property instead of being mislabelled SHA-256.
|
|
5
|
+
* @param {string} scanPath Directory to scan
|
|
6
|
+
* @param {Object} [options] CLI options
|
|
7
|
+
* @returns {boolean}
|
|
24
8
|
*/
|
|
9
|
+
export declare function hasTerraformConfiguration(scanPath: string, options?: Object): boolean;
|
|
25
10
|
/**
|
|
26
11
|
* Parse a `.terraform.lock.hcl` file.
|
|
27
12
|
*
|
|
@@ -31,4 +16,36 @@
|
|
|
31
16
|
export declare function parseTerraformLockFile(lockFile: string): {
|
|
32
17
|
pkgList: object[];
|
|
33
18
|
};
|
|
19
|
+
/**
|
|
20
|
+
* Locate the Terraform roots under `scanPath`: directories that own a
|
|
21
|
+
* configuration — those with a lock file or module manifest, plus config
|
|
22
|
+
* directories no other config directory references through a local module
|
|
23
|
+
* call.
|
|
24
|
+
*
|
|
25
|
+
* @param {string} scanPath Directory to scan
|
|
26
|
+
* @param {Object} options CLI options
|
|
27
|
+
* @returns {{ dir: string, lockFile?: string, manifestFile?: string }[]} Roots sorted by relative POSIX path
|
|
28
|
+
*/
|
|
29
|
+
export declare function findTerraformRoots(scanPath: string, options?: Object): {
|
|
30
|
+
dir: string;
|
|
31
|
+
lockFile?: string;
|
|
32
|
+
manifestFile?: string;
|
|
33
|
+
}[];
|
|
34
|
+
/**
|
|
35
|
+
* Inventory a Terraform workspace: providers from the lock file and
|
|
36
|
+
* `required_providers`, modules from the manifest or the configuration, the
|
|
37
|
+
* dependency graph between them, and offline licenses from the installed
|
|
38
|
+
* packages.
|
|
39
|
+
*
|
|
40
|
+
* @param {string} scanPath Directory to scan
|
|
41
|
+
* @param {Object} options CLI options
|
|
42
|
+
* @param {string} parentRef `bom-ref` of the parent component the CLI built
|
|
43
|
+
* @returns {{ pkgList: object[], dependencies: object[], parentProperties: object[], srcFiles: string[] }}
|
|
44
|
+
*/
|
|
45
|
+
export declare function parseTerraformWorkspace(scanPath: string, options: Object, parentRef: string): {
|
|
46
|
+
pkgList: object[];
|
|
47
|
+
dependencies: object[];
|
|
48
|
+
parentProperties: object[];
|
|
49
|
+
srcFiles: string[];
|
|
50
|
+
};
|
|
34
51
|
//# sourceMappingURL=parsers-terraform.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"parsers-terraform.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-terraform.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"parsers-terraform.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-terraform.js"],"names":[],"mappings":"AAuHA;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAJvC,MAIuC,EAAE,OAAO,AAHxD,CACA,EADQ,MAGqD,GAFnD,OAAO,CAInB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAHpC,MAGoC,GAFlC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAkEjC;AAuLD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAJhC,MAIgC,EAAE,OAAO,GAHzC,MAG8C,GAF5C;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,CA+DvE;AAiGD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EALrC,MAKqC,EAAE,OAAO,EAJ9C,MAI8C,EAAE,SAAS,EAHzD,MAGyD,GAFvD;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAoDzG"}
|
|
@@ -15,6 +15,17 @@ export declare function getVenvMetadata(env?: Object, explicitPath?: string): Ob
|
|
|
15
15
|
* @returns {string} Path to the Python executable or the fallback command name
|
|
16
16
|
*/
|
|
17
17
|
export declare function get_python_command_from_env(env: string): string;
|
|
18
|
+
/**
|
|
19
|
+
* The top-level packages and modules a project provides, wherever they sit
|
|
20
|
+
* in its tree: each outermost package directory (one with an `__init__.py`
|
|
21
|
+
* whose parent has none), and the module files beside such packages, since
|
|
22
|
+
* their directory is a source root. Directories of installed packages
|
|
23
|
+
* (virtual environments, `site-packages`) are not the project's.
|
|
24
|
+
*
|
|
25
|
+
* @param {string} src Path to the project being analysed
|
|
26
|
+
* @returns {Set<string>} Module names
|
|
27
|
+
*/
|
|
28
|
+
export declare function projectModuleNames(src: string): Set<string>;
|
|
18
29
|
/**
|
|
19
30
|
* Is this import satisfied by a module that lives in the project itself?
|
|
20
31
|
*
|
|
@@ -28,13 +39,27 @@ export declare function get_python_command_from_env(env: string): string;
|
|
|
28
39
|
* filesystem whether the module is ours answers it exactly.
|
|
29
40
|
*
|
|
30
41
|
* Checks the project root and a `src/` layout for a module file, a package directory,
|
|
31
|
-
* and a PEP 420 namespace package directory
|
|
42
|
+
* and a PEP 420 namespace package directory, then the top-level packages found
|
|
43
|
+
* anywhere in the project and the modules beside them (tool-heavy repositories
|
|
44
|
+
* keep their Python libraries in places such as `dev_tools/pylibs/`).
|
|
32
45
|
*
|
|
33
46
|
* @param {string} src Path to the project being analysed
|
|
34
47
|
* @param {string} name Imported top-level module name
|
|
35
48
|
* @returns {boolean} `true` if the project supplies this module itself
|
|
36
49
|
*/
|
|
37
50
|
export declare function isFirstPartyModule(src: string, name: string): boolean;
|
|
51
|
+
/**
|
|
52
|
+
* Whether a directory holds Python sources for atom to parse.
|
|
53
|
+
*
|
|
54
|
+
* The search skips the directories the manifest searches skip, such as
|
|
55
|
+
* node_modules and dot directories, and honours the exclude patterns, so a
|
|
56
|
+
* Python file shipped inside an npm package does not count.
|
|
57
|
+
*
|
|
58
|
+
* @param {string} src directory
|
|
59
|
+
* @param {Object} options CLI options
|
|
60
|
+
* @returns {boolean} true when the directory holds at least one Python file
|
|
61
|
+
*/
|
|
62
|
+
export declare function hasPythonSources(src: string, options?: Object): boolean;
|
|
38
63
|
/**
|
|
39
64
|
* Method to find python modules by parsing the imports and then checking with PyPI to obtain the latest version
|
|
40
65
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"pythonutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/pythonutils.js"],"names":[],"mappings":"AAiCA;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,GAJxB,MAIsC,EAAE,YAAY,AAH5D,CACA,EADQ,MAG2D,GAFzD,MAAM,CAyLlB;AAyED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAHpC,MAGoC,GAFlC,MAAM,CA6BlB;AAED
|
|
1
|
+
{"version":3,"file":"pythonutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/pythonutils.js"],"names":[],"mappings":"AAiCA;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,GAJxB,MAIsC,EAAE,YAAY,AAH5D,CACA,EADQ,MAG2D,GAFzD,MAAM,CAyLlB;AAyED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAHpC,MAGoC,GAFlC,MAAM,CA6BlB;AAgBD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAH3B,MAG2B,GAFzB,GAAG,CAAC,MAAM,CAAC,CAwCvB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAJ3B,MAI2B,EAAE,IAAI,EAHjC,MAGiC,GAF/B,OAAO,CA+BnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAJzB,MAIyB,EAAE,OAAO,GAHlC,MAGuC,GAFrC,OAAO,CAInB;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAL3B,MAK2B,EAAE,QAAQ,OAAA,EAAE,OAAO,EAH9C,MAG8C;;;;;;;;GAoFxD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAH1B,MAG0B,EAAE,OAAO,EAFnC,MAEmC,QAgD7C;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EARC,MAQD,EACR,cAAc,EARL,MAQK,EACd,WAAW,EARF,MAQE,EACX,eAAe,EARN,MAQM,EACf,WAAW,KAAA,EACX,mBAAmB,KAAA,GARR,MAAM,CAmkBlB;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,KAAA,EACR,OAAO,KAAA,EACP,WAAW,KAAA,EACX,eAAe,KAAA,EACf,mBAAmB,KAAA;;;;;;;;;;;;;;;;EAwNpB"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"huggingface.d.ts","sourceRoot":"","sources":["../../../../lib/ecosystems/remote/huggingface.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"huggingface.d.ts","sourceRoot":"","sources":["../../../../lib/ecosystems/remote/huggingface.js"],"names":[],"mappings":"AA6JA,OAAO,EACL,6BAA6B,EAC7B,iBAAiB,GAClB,MAAM,mCAAmC,CAAC;AAE3C;;GAEG;AACH,wBAAgB,4BAA4B,SAG3C;AAu6BD;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,aAH5B,MAAM,KACJ,OAOV,CAAC;AAEJ;;;;;;;GAOG;AACH,wBAAsB,8BAA8B,CAClD,SAAS,EANA,MAMA,EACT,MAAM,EANG,MAMH,EACN,OAAO,AANN,CACA,EADQ,MAMG,GALD,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CA0MrC;AAED;;;;;;;GAOG;AACH,wBAAsB,6BAA6B,CACjD,SAAS,EANA,MAMA,EACT,MAAM,EANG,MAMH,EACN,OAAO,AANN,CACA,EADQ,MAMG,GALD,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAarC"}
|
|
@@ -209,9 +209,17 @@ export declare function collectGemModuleNames(rubyCommand: string, bundleCommand
|
|
|
209
209
|
* @param {Object} [options] Parse options
|
|
210
210
|
* @param {Object<string, string>} [options.lockedVersions] Locked versions of
|
|
211
211
|
* the gems the project directory serves, by gem name
|
|
212
|
+
* @param {boolean} [options.projectGemspec] The gemspec describes the project
|
|
213
|
+
* being scanned. No registry holds the project, so its gem is never looked
|
|
214
|
+
* up and keeps what the gemspec says.
|
|
215
|
+
* @param {boolean} [options.noFetch] Read the gemspec for the fields it holds
|
|
216
|
+
* without asking the registry about the gem. The local cache enricher uses
|
|
217
|
+
* this, since the caller is responsible for the registry round.
|
|
212
218
|
*/
|
|
213
219
|
export declare function parseGemspecData(gemspecData: string, gemspecFile: string, options?: {
|
|
214
220
|
lockedVersions?: Record<string, string>;
|
|
221
|
+
projectGemspec?: boolean;
|
|
222
|
+
noFetch?: boolean;
|
|
215
223
|
}): Promise<any[]>;
|
|
216
224
|
/**
|
|
217
225
|
* Method to parse Gemfile.lock
|
|
@@ -221,10 +229,22 @@ export declare function parseGemspecData(gemspecData: string, gemspecFile: strin
|
|
|
221
229
|
* directory (`PATH` with `remote: .`), which is how Bundler records the gem a
|
|
222
230
|
* project builds when its Gemfile uses the `gemspec` directive.
|
|
223
231
|
*
|
|
232
|
+
* Gems the lockfile serves from a git remote or from a path outside the
|
|
233
|
+
* project are never sent to rubygems.org: no public registry holds the release
|
|
234
|
+
* they pinned. Before the registry round, the caches on this machine are read
|
|
235
|
+
* first, so a gem whose installed gemspec or compact index entry is present
|
|
236
|
+
* keeps those answers.
|
|
237
|
+
*
|
|
224
238
|
* @param {object} gemLockData Gemfile.lock data
|
|
225
239
|
* @param {string} lockFile Lock file
|
|
240
|
+
* @param {object} [options] Options
|
|
241
|
+
* @param {string} [options.gemHome] GEM_HOME to read installed gemspecs from
|
|
242
|
+
* @param {string} [options.compactIndexCacheDir] Bundler compact index cache
|
|
226
243
|
*/
|
|
227
|
-
export declare function parseGemfileLockData(gemLockData: object, lockFile: string
|
|
244
|
+
export declare function parseGemfileLockData(gemLockData: object, lockFile: string, options?: {
|
|
245
|
+
gemHome?: string;
|
|
246
|
+
compactIndexCacheDir?: string;
|
|
247
|
+
}): Promise<any[] | {
|
|
228
248
|
pkgList: any[];
|
|
229
249
|
dependenciesList: {
|
|
230
250
|
ref: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"rubyutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/rubyutils.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"rubyutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/rubyutils.js"],"names":[],"mappings":"AAoEA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAHzB,MAGyB,GAFvB,OAAO,CAOnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAHlC,MAAM,GAAG,SAGyB,GAFhC,MAAM,GAAG,SAAS,CAO9B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAHrC,MAAM,GAAG,SAG4B,GAFnC;IAAC,OAAO,EAAE,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAAC,QAAQ,EAAE,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;CAAC,CAe3E;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAHhC,MAGgC,GAF9B,MAAM,CAIlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,IAAI,EALnB,MAKmB,EAAE,OAAO,EAJ5B,MAAM,GAAG,SAImB,EAAE,QAAQ,EAHtC,MAAM,GAAG,SAG6B,GAFpC,MAAM,CAclB;AA4FD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAN/B,MAM+B,GAL7B;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAC,GAAG,SAAS,CAqE/F;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAL5B,MAK4B,GAJ1B;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAC,GAAG,SAAS,CAsE7D;AAuPD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAH9B,MAG8B,GAF5B;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;CAAC,GAAG,SAAS,CAqBjE;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,IAF1B,MAAM,CAWlB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAHnC,MAGmC,GAFjC,MAAM,CAiClB;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAHjC,MAGiC,GAF/B,MAAM,CAgClB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,wBAAwB,CAAC,OAAO,OAAA,EAAE,OAAO,GAJ5D;IAAwB,OAAO,EAAvB,MAAM,CACd;IAAwB,oBAAoB,EAApC,MAAM,CACd;CAEiE,GAFvD,OAAO,OAAO,CAuJ1B;AAsJD;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,OAAA,kBAiJhD;AA8CD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,KAAA,YAsBpC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,QAAA,EACX,aAAa,QAAA,EACb,OAAO,QAAA,EACP,OAAO,QAAA,EACP,QAAQ,QAAA,GAPG,KAAK,CAAC,MAAM,CAAC,CA4IzB;AAuED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,EAZvC,MAYuC,EAAE,WAAW,EAXpD,MAWoD,EAAE,OAAO,AAVrE,CASF,EARE;IAAyC,cAAc,AAAvD,CAEA,yBAAA;IAA0B,cAAc,AAAxC,CAGA,EAHQ,OAAO,CAGf;IAA0B,OAAO,AAAjC,CAGF,EAHU,OAAO,CAGjB;CAC4E,kBAua5E;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,oBAAoB,CACxC,WAAW,EAPF,MAOE,EACX,QAAQ,EAPC,MAOD,EACR,OAAO,AAPN,CAGF,EAFE;IAAyB,OAAO,AAAhC,CACA,EADQ,MAAM,CACd;IAAyB,oBAAoB,AAA7C,CACF,EADU,MAAM,CAChB;CAIa;;;;;;;;GAqYb;AAUD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,kBAAkB,CAChC,eAAe,EAXN,MAWM,EACf,UAAU,EAXD,MAWC,EACV,OAAO,EAXE,MAAM,EAWR,EACP,YAAY,EAXH,MAAM,EAWH,EACZ,QAAQ,EAXC,MAAM,EAWP,EACR,cAAc,EAXL,MAAM,EAWD,EACd,OAAO,GAXE,MAWG,GAVD;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAC,CAkH3E;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,OAAA,SAmClD;AA8GD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EALvC,MAAM,EAKiC,GAHrC,MAAM,GAAC,IAAI,GAAC,SAAS,CAoHjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,OAAA,EACP,eAAe,EARN,MAQM,EACf,YAAY,OAAA,GAND;IAAC,OAAO,QAAQ;IAAC,YAAY,QAAO;CAAC,CAmEjD"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"rusi.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/rusi.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"rusi.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/rusi.js"],"names":[],"mappings":"AAqWA;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,GAHpC,MAGyC,GAFvC,MAAM,GAAC,SAAS,CAW5B;AAsZD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAGgC,GAF9B,OAAO,CAInB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAH9B,MAG8B,GAF5B,MAAM,GAAC,SAAS,CAW5B;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,GAAG,EALxB,MAKwB,EAAE,UAAU,EAJpC,MAIoC,EAAE,OAAO,GAH7C,MAGkD,GAFhD,OAAO,CAyEnB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAJ3B,MAI2B,EAAE,OAAO,GAHpC,MAGyC,GAFvC,MAAM,GAAC,SAAS,CA2B5B;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,GAJnC,MAIwC,EAAE,UAAU,QAAK,GAFvD,MAAM,CA8DlB"}
|