@cdxgen/cdxgen 13.4.0 → 13.6.0

package/types/lib/ecosystems/parsers-go.d.ts

@@ -1,25 +1,57 @@
 /**
- * The licence or copying notice of a module that is already on this machine,
- * from the directory `go list` reported, from the project's `vendor/` tree, or
- * from the module cache. Reading it costs no network round trip, so it answers
- * before pkg.go.dev is asked.
+ * The licence notices of a module that is already on this machine, from the
+ * directory `go list` reported, from the project's `vendor/` tree, or from the
+ * module cache. Reading them costs no network round trip, so they answer
+ * before pkg.go.dev is asked. Every notice of the first directory holding
+ * one is returned, as pkg.go.dev reads every notice of a module.
  *
  * The directory `go list` reported is always read. The vendor tree and the
  * module cache stand in for pkg.go.dev, so they are read only when licences
- * are being fetched.
+ * are being fetched. Their directories are built from a module path and
+ * version read from modules.txt or go.sum, so a path or version the Go
+ * toolchain would reject, such as one with a `..` element, is not looked up:
+ * Go never writes such a directory, and joining it could leave the tree.
  *
  * @param {string} name Full module path
  * @param {string} [version] Module version, for the module cache layout
  * @param {Object} [options] Options
  * @param {string} [options.dir] The module's directory, as `go list` reports it
  * @param {string} [options.projectRoot] Project root holding a `vendor/` tree
- * @returns {string|undefined} The notice text, or undefined when none is held
- *   locally
+ * @param {string} [options.vendorPath] The path the module is vendored under,
+ *   when it differs from `name`: Go vendors a replaced module under the path
+ *   it replaces
+ * @returns {{fileName: string, text: string}[]} The notices, in file name
+ *   order; empty when none is held locally
  */
-export declare function readLocalGoLicense(name: string, version?: string, options?: {
+export declare function readLocalGoLicenses(name: string, version?: string, options?: {
     dir?: string;
     projectRoot?: string;
-}): string | undefined;
+    vendorPath?: string;
+}): {
+    fileName: string;
+    text: string;
+}[];
+/**
+ * The text of the first licence notice {@link readLocalGoLicenses} finds.
+ *
+ * @param {string} name Full module path
+ * @param {string} [version] Module version, for the module cache layout
+ * @param {Object} [options] The options {@link readLocalGoLicenses} takes
+ * @returns {string|undefined} The notice text, or undefined when none is held
+ *   locally
+ */
+export declare function readLocalGoLicense(name: string, version?: string, options?: Object): string | undefined;
+/**
+ * Order two Go module versions by semantic version precedence, as Go's semver
+ * package does: a pre-release, pseudo-versions included, sorts before its
+ * release, and build metadata such as `+incompatible` does not count.
+ *
+ * @param {string} a A module version
+ * @param {string} b Another module version
+ * @returns {number} Negative, zero or positive as `a` sorts before, with or
+ *   after `b`
+ */
+export declare function compareGoVersions(a: string, b: string): number;
 /**
  * Builds a Go package component object containing purl, bom-ref, integrity hash,
  * and optionally license and VCS external reference information.
@@ -36,12 +68,15 @@ export declare function readLocalGoLicense(name: string, version?: string, optio
  *   it, where a local licence notice is read first
  * @param {string} [options.projectRoot] Project root holding a `vendor/` tree
  *   the module may be vendored in
+ * @param {string} [options.vendorPath] The path the module is vendored under,
+ *   when it differs from `name`
  * @returns {Promise<Object>} Component object ready for inclusion in a BOM package list
  */
 export declare function getGoPkgComponent(group: string, name: string, version: string, hash: string, options?: {
     skipRegistryLookups?: boolean;
     dir?: string;
     projectRoot?: string;
+    vendorPath?: string;
 }): Promise<Object>;
 /**
  * Method to parse go.mod files
@@ -49,7 +84,8 @@ export declare function getGoPkgComponent(group: string, name: string, version:
  * @param {String} goModData Contents of go.mod file
  * @param {Object} gosumMap Data from go.sum files
  *
- * @returns {Object} Object containing parent component, rootList and packages list
+ * @returns {Object} Object containing parent component, rootList, packages
+ *   list, and the replace directives as `replacements`
  */
 export declare function parseGoModData(goModData: string, gosumMap: Object): Object;
 /**
@@ -57,6 +93,12 @@ export declare function parseGoModData(goModData: string, gosumMap: Object): Obj
  * Go package components. Cross-references the go.sum map for integrity hashes and
  * sets scope and confidence based on hash availability.
  *
+ * Only the modules the vendor tree holds become components: a module line
+ * followed by its `##` annotations or its packages. `go mod vendor` also
+ * records every replace directive of go.mod at the end of the file, as a
+ * module line with nothing after it, so the consumer can tell that the
+ * replacement had no effect; those lines name no vendored module.
+ *
  * @param {string} txtFile Path to the modules.txt file
  * @param {Object} gosumMap Map of "module@version" keys to sha256 hash values from go.sum
  * @returns {Promise<Object[]>} List of Go package component objects with evidence
@@ -65,17 +107,40 @@ export declare function parseGoModulesTxt(txtFile: string, gosumMap: Object): Pr
 /**
  * Parse go list output
  *
+ * Each row is printed by the template in createGoBom:
+ * `Path|Version|Indirect|GoMod|GoVersion|Main|Time|Deprecated|GoModSum|Dir|Sum|
+ * Replace.Path|Replace.Version|Replace.Sum`. Rows from older templates end
+ * after `Dir`.
+ *
+ * A replaced module is reported as the module Go builds (see
+ * {@link goReplacement}), with the checksum of the replacement. A go.work
+ * workspace makes every member a main module, so the parent is the main
+ * module in `options.mainModuleDir`, and the other members are returned as
+ * `workspaceModules`.
+ *
  * @param {string} rawOutput Output from go list invocation
  * @param {Object} gosumMap go.sum data
- * @returns Object with parent component and List of packages
+ * @param {Object} [options] Options
+ * @param {string} [options.mainModuleDir] Directory `go list` ran in, whose
+ *   main module is the parent component
+ * @returns Object with parent component, list of packages, and the other main
+ *   modules of a workspace
  */
-export declare function parseGoListDep(rawOutput: string, gosumMap: Object): Promise<{
+export declare function parseGoListDep(rawOutput: string, gosumMap: Object, options?: {
+    mainModuleDir?: string;
+}): Promise<{
     parentComponent: {};
     pkgList: Object[];
+    workspaceModules: Object[];
 }>;
 /**
  * Parse go mod graph
  *
+ * `go mod graph` names every module by the path and version its requirement
+ * names, whatever replaces it. A replaced module is mapped to the module Go
+ * builds: from the components `go list` reported, which record what they
+ * replace, or else from the replace directives of go.mod.
+ *
  * @param {string} rawOutput Output from go mod graph invocation
  * @param {string} goModFile go.mod file
  * @param {Object} gosumMap Hashes from gosum for lookups
@@ -115,7 +180,8 @@ export declare function isGoModWhyNotNeeded(rawOutput: string): boolean;
  * building components or touching the network.
  *
  * @param {string} gosumData Content of go.sum
- * @returns {Object} Map of `module@version` keys to `sha256-…` values
+ * @returns {Object} Map of `module@version` keys to the `sha256-…` checksum of
+ *   the module content, for every version go.sum holds one for
  */
 export declare function parseGosumHashes(gosumData: string): Object;
 /**
@@ -137,6 +203,12 @@ export declare function parseGopkgData(gopkgData: string): Promise<Object[]>;
  * Parses the output of `go version -m` (build info) and returns a list of Go
  * package components for each "dep" line, including name, version, and integrity hash.
  *
+ * A dependency that a replace directive swapped out is printed as its `dep`
+ * line followed by a `=>` line naming the replacement (runtime/debug
+ * BuildInfo.String). The replacement is what the binary holds, so it is
+ * reported as {@link goReplacement} describes, with the replacement's
+ * checksum.
+ *
  * @param {string} buildInfoData Raw string output from `go version -m`
  * @returns {Promise<Object[]>} List of Go package component objects
  */

package/types/lib/ecosystems/parsers-go.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parsers-go.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-go.js"],"names":[],"mappings":"AAmFA;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAR5B,MAQ4B,EAAE,OAAO,AAP7C,CACA,EADQ,MAOqC,EAAE,OAAO,AANtD,CAGA,EAFA;IAAyB,GAAG,AAA5B,CACA,EADQ,MAAM,CACd;IAAyB,WAAW,AAApC,CACA,EADQ,MAAM,CACd;CAG2D,GAHjD,MAAM,GAAC,SAAS,CAqD5B;AAsCD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAfI,MAeJ,EACL,IAAI,EAfK,MAeL,EACJ,OAAO,EAfE,MAeF,EACP,IAAI,EAfK,MAeL,EACJ,OAAO,AAfN,CAQA,EAPA;IAA0B,mBAAmB,AAA7C,CAGA,EAHQ,OAAO,CAGf;IAAyB,GAAG,AAA5B,CAEA,EAFQ,MAAM,CAEd;IAAyB,WAAW,AAApC,CAEA,EAFQ,MAAM,CAEd;CAOW,GAPD,OAAO,CAAC,MAAM,CAAC,CAqE3B;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,SAAS,QAAA,EAAE,QAAQ,EAJ7C,MAI6C,GAF3C,MAAM,CA2ClB;AAkHD;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAJpC,MAIoC,EAAE,QAAQ,EAH9C,MAG8C,GAF5C,OAAO,CAAC,MAAM,EAAE,CAAC,CAyC7B;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,SAAS,EAJnC,MAImC,EAAE,QAAQ,EAH7C,MAG6C;;;GAuIvD;AA6CD;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACnC,SAAS,EATA,MASA,EACT,SAAS,EATA,MASA,EACT,QAAQ,EATC,MASD,EACR,QAAQ,QAAK,EACb,eAAe,GATN,MASW;;;;;;;;GAiNrB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAH5B,MAG4B,GAF1B,MAAM,GAAC,SAAS,CAc5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAHlC,MAGkC,GAFhC,OAAO,CASnB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAH/B,MAG+B,GAF7B,MAAM,CAQlB;AA6BD;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,SAAS,EAHnC,MAGmC,qBAY7C;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,SAAS,EAHnC,MAGmC,GAFjC,OAAO,CAAC,MAAM,EAAE,CAAC,CAmD7B;AAoBD;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,aAAa,EAH3C,MAG2C,GAFzC,OAAO,CAAC,MAAM,EAAE,CAAC,CAkC7B"}
+{"version":3,"file":"parsers-go.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-go.js"],"names":[],"mappings":"AAyPA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAX7B,MAW6B,EAAE,OAAO,AAV9C,CACA,EADQ,MAUsC,EAAE,OAAO,AATvD,CAMA,EALA;IAAyB,GAAG,AAA5B,CACA,EADQ,MAAM,CACd;IAAyB,WAAW,AAApC,CACA,EADQ,MAAM,CACd;IAAyB,UAAU,AAAnC,CAGA,EAHQ,MAAM,CAGd;CAG4D,GAHlD;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAC,EAAE,CAqE9C;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAN5B,MAM4B,EAAE,OAAO,AAL7C,CACA,EADQ,MAKqC,EAAE,OAAO,AAJtD,CACA,EADQ,MAImD,GAHjD,MAAM,GAAC,SAAS,CAK5B;AA2ID;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EALxB,MAKwB,EAAE,CAAC,EAJ3B,MAI2B,GAHzB,MAAM,CASlB;AAaD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAjBI,MAiBJ,EACL,IAAI,EAjBK,MAiBL,EACJ,OAAO,EAjBE,MAiBF,EACP,IAAI,EAjBK,MAiBL,EACJ,OAAO,AAjBN,CAUA,EATA;IAA0B,mBAAmB,AAA7C,CAGA,EAHQ,OAAO,CAGf;IAAyB,GAAG,AAA5B,CAEA,EAFQ,MAAM,CAEd;IAAyB,WAAW,AAApC,CAEA,EAFQ,MAAM,CAEd;IAAyB,UAAU,AAAnC,CAEA,EAFQ,MAAM,CAEd;CAOW,GAPD,OAAO,CAAC,MAAM,CAAC,CAwE3B;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,SAAS,QAAA,EAAE,QAAQ,EAL7C,MAK6C,GAH3C,MAAM,CAgDlB;AAkQD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAJpC,MAIoC,EAAE,QAAQ,EAH9C,MAG8C,GAF5C,OAAO,CAAC,MAAM,EAAE,CAAC,CA0E7B;AAyBD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,cAAc,CAAC,SAAS,EARnC,MAQmC,EAAE,QAAQ,EAP7C,MAO6C,EAAE,OAAO,AAN9D,CAGA,EAFA;IAAyB,aAAa,AAAtC,CAEA,EAFQ,MAAM,CAEd;CAGmE;;;;GA2HrE;AAsED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,eAAe,CACnC,SAAS,EATA,MASA,EACT,SAAS,EATA,MASA,EACT,QAAQ,EATC,MASD,EACR,QAAQ,QAAK,EACb,eAAe,GATN,MASW;;;;;;;;GAuTrB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAH5B,MAG4B,GAF1B,MAAM,GAAC,SAAS,CAc5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAHlC,MAGkC,GAFhC,OAAO,CASnB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAJ/B,MAI+B,GAH7B,MAAM,CAWlB;AAyCD;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,SAAS,EAHnC,MAGmC,qBAY7C;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,SAAS,EAHnC,MAGmC,GAFjC,OAAO,CAAC,MAAM,EAAE,CAAC,CAmD7B;AAoBD;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CAAC,aAAa,EAH3C,MAG2C,GAFzC,OAAO,CAAC,MAAM,EAAE,CAAC,CAqD7B"}

package/types/lib/ecosystems/parsers-js.d.ts

@@ -186,6 +186,22 @@ export declare function pnpmMetadata(pkgList: any[], lockFilePath: string): any[
  *          plain version and not an alias
  */
 export declare function parsePnpmAliasRef(value: string): Object | undefined;
+/**
+ * Decide whether a parsed pnpm lockfile document is a boot document.
+ *
+ * Since pnpm 12 a lockfile can hold two YAML documents. The first, the boot
+ * document, records the project's config dependencies and the resolved pnpm
+ * version under its importers, and the last is the project lockfile. The
+ * boot document is recognised by these keys rather than by its position
+ * alone, and tolerates either key missing.
+ *
+ * See: https://pnpm.io/lockfile
+ *
+ * @param {Object} docObj Parsed YAML document
+ *
+ * @returns {boolean} true when the document looks like a boot document
+ */
+export declare function isPnpmBootDocument(docObj: Object): boolean;
 /**
  * Parse nodejs pnpm lock file
  *
@@ -193,30 +209,11 @@ export declare function parsePnpmAliasRef(value: string): Object | undefined;
  * @param {Object} parentComponent parent component
  * @param {Array[String]} workspacePackages Workspace packages
  * @param {Object} workspaceSrcFiles Workspace package.json files
- * @param {Object} _workspaceCatalogs Workspace catalogs
  * @param {Object} _workspaceDirectDeps Direct dependencies of each workspace
  * @param {Object} depsWorkspaceRefs Workspace references for each dependency
  * @param {string} projectRoot Root path used to relativize pnpm-lock evidence paths
  */
-export declare function parsePnpmLock(pnpmLock: string, parentComponent?: Object, workspacePackages?: any, workspaceSrcFiles?: Object, _workspaceCatalogs?: Object, _workspaceDirectDeps?: Object, depsWorkspaceRefs?: Object, projectRoot?: string): Promise<{
-    pkgList?: undefined;
-    dependenciesList?: undefined;
-    parentSubComponents?: undefined;
-} | {
-    pkgList: any[];
-    dependenciesList: {
-        ref: string;
-        dependsOn: any[];
-    }[];
-    parentSubComponents: {
-        group: any;
-        name: any;
-        version: any;
-        type: string;
-        purl: any;
-        "bom-ref": string;
-    }[];
-}>;
+export declare function parsePnpmLock(pnpmLock: string, parentComponent?: Object, workspacePackages?: any, workspaceSrcFiles?: Object, _workspaceDirectDeps?: Object, depsWorkspaceRefs?: Object, projectRoot?: string): Promise<{}>;
 /**
  * Parse bower json file
  *

package/types/lib/ecosystems/parsers-js.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parsers-js.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-js.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAgbrC;;;;;;;;;;;;;GAaG;AACH,wBAAsB,YAAY,CAChC,WAAW,EAZF,MAYE,EACX,MAAM,AAZL,CAEA,EAFQ,OAYK,EACd,aAAa,AAXZ,CAEA,EAFQ,OAWY,EACrB,OAAO,AAVN,CAGA,EAFA;IAA0B,aAAa,AAAvC,CAEA,EAFQ,OAAO,CAEf;CAOW,GAPD,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAwPlC;AA0CD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAJhC,MAIgC,EAAE,KAAK,EAHvC,MAGuC,GAFrC,MAAM,CASlB;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAHpC,MAGoC,GAFlC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAC,GAAC,IAAI,CA6BjF;AA+ED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,WAAW,EAHnC,MAGmC,EAAE,OAAO,GAF5C,MAEiD;;;GAyyB3D;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAFhC,MAEgC,MA2E1C;AAwND;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,YAAY,EARH,MAQG,EACZ,eAAe,GARN,MAQa,EACtB,iBAAiB,MAAK,EACtB,iBAAiB,GARR,MAQa,EACtB,mBAAmB,GARV,MAQe,EACxB,iBAAiB,GARR,MAQa;;;;;;GAwhBvB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAFrC,MAEqC,kBAgE/C;AA6GD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,QAAA,UAQ1C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAPnC,MAAM,GAAC,MAO4B,EAAE,YAAY,EANjD,MAMiD,GAF/C,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAoCrC;AAqBD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAClC,MAAM,EATG,MAAM,GAAC,MASV,EACN,WAAW,EATF,MASE,EACX,UAAU,EATD,MASC,EACV,YAAY,EATH,MASG,EACZ,gBAAgB,EATP,MASO,EAChB,WAAW,AATV,CACA,EADQ,MASO,GARL,OAAO,CAAC,MAAM,CAAC,CA8D3B;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,aAAa,EAHrC,MAGqC,GAFnC,MAAM,CAoClB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,eAAe,EAHvC,MAGuC,GAFrC,MAAM,CA2BlB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EALhC,MAKgC,EAAE,WAAW,EAJ7C,MAI6C,EAAE,OAAO,EAHtD,MAGsD,GAFpD,MAAM,GAAC,IAAI,CA4DvB;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,OAAO,OAAA,EAAE,YAAY,EAH7C,MAG6C,SAsFvD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,QAAA,GAH1B,MAAM,GAAC,SAAS,CAkC5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAVC,MAUD,EACR,eAAe,GAVN,MAUa,EACtB,iBAAiB,MAAK,EACtB,iBAAiB,GAVR,MAUa,EACtB,kBAAkB,GAVT,MAUc,EACvB,oBAAoB,GAVX,MAUgB,EACzB,iBAAiB,GAVR,MAUa,EACtB,WAAW,GAVF,MAUc;;;;;;;;;;;;;;;;;;GA6+BxB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,aAAa,EAFvC,MAEuC,kBA6CjD;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,SAAS,EAF/B,MAE+B,kBA2FzC;AAGD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAH9B,MAAM,GAAC,MAGuB,GAF5B;IAAE,KAAK,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,GAAC,IAAI,CAAA;CAAE,CAoBvG;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,aAAa,QAAA,GAFjC,KAAK,QAAQ,CA4CzB"}
+{"version":3,"file":"parsers-js.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-js.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAubrC;;;;;;;;;;;;;GAaG;AACH,wBAAsB,YAAY,CAChC,WAAW,EAZF,MAYE,EACX,MAAM,AAZL,CAEA,EAFQ,OAYK,EACd,aAAa,AAXZ,CAEA,EAFQ,OAWY,EACrB,OAAO,AAVN,CAGA,EAFA;IAA0B,aAAa,AAAvC,CAEA,EAFQ,OAAO,CAEf;CAOW,GAPD,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAwPlC;AA0CD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAJhC,MAIgC,EAAE,KAAK,EAHvC,MAGuC,GAFrC,MAAM,CASlB;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAHpC,MAGoC,GAFlC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAC,GAAC,IAAI,CA6BjF;AAwKD;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,WAAW,EAHnC,MAGmC,EAAE,OAAO,GAF5C,MAEiD;;;GAs2B3D;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAFhC,MAEgC,MAsF1C;AAwOD;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,YAAY,EARH,MAQG,EACZ,eAAe,GARN,MAQa,EACtB,iBAAiB,MAAK,EACtB,iBAAiB,GARR,MAQa,EACtB,mBAAmB,GARV,MAQe,EACxB,iBAAiB,GARR,MAQa;;;;;;GAwhBvB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAFrC,MAEqC,kBAgE/C;AA6GD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,QAAA,UAQ1C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAPnC,MAAM,GAAC,MAO4B,EAAE,YAAY,EANjD,MAMiD,GAF/C,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAoCrC;AAqBD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAClC,MAAM,EATG,MAAM,GAAC,MASV,EACN,WAAW,EATF,MASE,EACX,UAAU,EATD,MASC,EACV,YAAY,EATH,MASG,EACZ,gBAAgB,EATP,MASO,EAChB,WAAW,AATV,CACA,EADQ,MASO,GARL,OAAO,CAAC,MAAM,CAAC,CA8D3B;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,aAAa,EAHrC,MAGqC,GAFnC,MAAM,CAoClB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,eAAe,EAHvC,MAGuC,GAFrC,MAAM,CA2BlB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EALhC,MAKgC,EAAE,WAAW,EAJ7C,MAI6C,EAAE,OAAO,EAHtD,MAGsD,GAFpD,MAAM,GAAC,IAAI,CA4DvB;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,OAAO,OAAA,EAAE,YAAY,EAH7C,MAG6C,SAsFvD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,QAAA,GAH1B,MAAM,GAAC,SAAS,CAkC5B;AA2CD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAJ9B,MAI8B,GAF5B,OAAO,CAkBnB;AAgDD;;;;;;;;;;GAUG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EATC,MASD,EACR,eAAe,GATN,MASa,EACtB,iBAAiB,MAAK,EACtB,iBAAiB,GATR,MASa,EACtB,oBAAoB,GATX,MASgB,EACzB,iBAAiB,GATR,MASa,EACtB,WAAW,GATF,MASc,eAkqCxB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,aAAa,EAFvC,MAEuC,kBA6CjD;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,SAAS,EAF/B,MAE+B,kBA2FzC;AAGD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAH9B,MAAM,GAAC,MAGuB,GAF5B;IAAE,KAAK,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,GAAC,IAAI,CAAA;CAAE,CAoBvG;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,aAAa,QAAA,GAFjC,KAAK,QAAQ,CA4CzB"}

package/types/lib/ecosystems/parsers-jvm.d.ts

@@ -1,10 +1,36 @@
 /**
  * Parse pom file
  *
+ * Versions resolve from the pom's own properties and dependencyManagement.
+ * A caller that has read the pom's parents passes what they define in
+ * `inherited`, so versions the parents manage resolve too. Imported BOMs and
+ * parents outside the scanned directory are not read.
+ *
  * @param {string} pomFile pom file to parse
- * @returns {Object} Object containing pom properties, modules, and array of dependencies
+ * @param {Object} [inherited] Properties and managed versions from parent poms
+ * @param {Object} [inherited.properties] Property name to raw value
+ * @param {Object} [inherited.managedVersions] `groupId:artifactId` to version
+ * @returns {Object} Object containing pom properties, modules, the parent
+ *   reference, the user properties and managed versions this pom defines, and
+ *   array of dependencies
+ */
+export declare function parsePom(pomFile: string, inherited?: {
+    properties?: Object;
+    managedVersions?: Object;
+}): Object;
+/**
+ * Parse a pom file together with the parent poms it names that are present
+ * inside the scanned directory, without running Maven. Properties and
+ * dependencyManagement versions from those parents resolve the versions the
+ * pom leaves to them. Parents outside the directory and imported BOMs are not
+ * read, so the versions they manage stay empty.
+ *
+ * @param {string} pomFile Pom file to parse
+ * @param {string} rootDir Scanned directory; parents outside it are ignored
+ * @param {Map} [cache] Reused across the poms of one scan
+ * @returns {Object} Same shape as parsePom
  */
-export declare function parsePom(pomFile: string): Object;
+export declare function parsePomWithLocalParents(pomFile: string, rootDir: string, cache?: Map<any, any>): Object;
 /**
  * Every pom file of the reactor an aggregator pom builds: its own modules,
  * recursively through nested aggregators. A recursive dependency:tree run

package/types/lib/ecosystems/parsers-jvm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parsers-jvm.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-jvm.js"],"names":[],"mappings":"AAsBA;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAHrB,MAGqB,GAFnB,MAAM,CA4JlB;AAMD;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAHnC,MAGmC,GAFjC,GAAG,CAAC,MAAM,CAAC,CAsDvB;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,6CAES,CAAC;AAiB7C;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAJjC,MAIiC,EAAE,OAAO,EAH1C,MAG0C,GAFxC;IAAC,KAAK,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC;IAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAAC,CA8CjF;AA2HD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,KAAA,EAAE,OAAO,KAAA,GAFxC;IAAC,eAAe,EAAE,EAAE,CAAC;IAAC,OAAO,EAAE,GAAC,EAAE,CAAC;IAAC,gBAAgB,EAAE,GAAC,EAAE,CAAA;CAAC,GAAC,EAAE,GAAC,EAAE,GAAC,GAAC,GAAC;IAAC,eAAe,EAAE;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,GAAC,CAAA;KAAC,GAAC,EAAE,CAAC;IAAC,OAAO,EAAE,EAAE,CAAC;IAAC,gBAAgB,EAAE,EAAE,CAAA;CAAC,CAkExJ;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAL7B,MAK6B,EAAE,OAAO,EAJtC,MAIsC,GAFpC,MAAM,CA8FlB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EATG,MASH,EACN,YAAY,EATH,GASG,EACZ,SAAS,EATA,GASA,EACT,YAAY,EATH,MASG,EACZ,WAAW,GATF,MASsB,OA+HhC;AAED,wBAAgB,iBAAiB,CAAC,SAAS,KAAA,OAe1C;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAF1B,MAE0B,SAkCpC;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAF3B,MAE2B,YAWrC;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,IAAI,EALtB,MAKsB,EAAE,UAAU,EAJlC,MAIkC,EAAE,IAAI,EAHxC,MAAM,EAGkC,GAFtC,MAAM,EAAE,CA0BpB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAFpC,MAEoC,SAkC9C;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAFjC,MAEiC,SAqD3C;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAF9B,MAE8B,SAexC;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,SAAS,KAAA,SAmCnC;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAGgC,GAF9B,MAAM,EAAE,CAkCpB;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAH5B,MAG4B,GAF1B,MAAM,EAAE,CAoDpB"}
+{"version":3,"file":"parsers-jvm.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-jvm.js"],"names":[],"mappings":"AAsDA;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EARrB,MAQqB,EAAE,SAAS,AAPxC,CAGA,EAFA;IAA2B,UAAU,AAArC,CACA,EADQ,MAAM,CACd;IAA2B,eAAe,AAA1C,CACA,EADQ,MAAM,CACd;CAI6C,GAJnC,MAAM,CA8PlB;AAiFD;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EALrC,MAKqC,EAAE,OAAO,EAJ9C,MAI8C,EAAE,KAAK,AAH7D,CACA,eAEyE,GAF/D,MAAM,CAalB;AAMD;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAHnC,MAGmC,GAFjC,GAAG,CAAC,MAAM,CAAC,CAsDvB;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,6CAES,CAAC;AAiB7C;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAJjC,MAIiC,EAAE,OAAO,EAH1C,MAG0C,GAFxC;IAAC,KAAK,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC;IAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAAC,CA8CjF;AA2HD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,KAAA,EAAE,OAAO,KAAA,GAFxC;IAAC,eAAe,EAAE,EAAE,CAAC;IAAC,OAAO,EAAE,GAAC,EAAE,CAAC;IAAC,gBAAgB,EAAE,GAAC,EAAE,CAAA;CAAC,GAAC,EAAE,GAAC,EAAE,GAAC,GAAC,GAAC;IAAC,eAAe,EAAE;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,GAAC,CAAA;KAAC,GAAC,EAAE,CAAC;IAAC,OAAO,EAAE,EAAE,CAAC;IAAC,gBAAgB,EAAE,EAAE,CAAA;CAAC,CAkExJ;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAL7B,MAK6B,EAAE,OAAO,EAJtC,MAIsC,GAFpC,MAAM,CA8FlB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EATG,MASH,EACN,YAAY,EATH,GASG,EACZ,SAAS,EATA,GASA,EACT,YAAY,EATH,MASG,EACZ,WAAW,GATF,MASsB,OA+HhC;AAED,wBAAgB,iBAAiB,CAAC,SAAS,KAAA,OAe1C;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAF1B,MAE0B,SAkCpC;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAF3B,MAE2B,YAWrC;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,IAAI,EALtB,MAKsB,EAAE,UAAU,EAJlC,MAIkC,EAAE,IAAI,EAHxC,MAAM,EAGkC,GAFtC,MAAM,EAAE,CA0BpB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAFpC,MAEoC,SAkC9C;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAFjC,MAEiC,SAqD3C;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAF9B,MAE8B,SAexC;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,SAAS,KAAA,SAmCnC;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAGgC,GAF9B,MAAM,EAAE,CAkCpB;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAH5B,MAG4B,GAF1B,MAAM,EAAE,CAoDpB"}

package/types/lib/ecosystems/parsers-misc.d.ts

@@ -186,65 +186,25 @@ export declare function parseComposerJson(composerJsonFile: string): Object;
  *
  * @param {string} pkgLockFile composer.lock file
  * @param {array} rootRequires require section from composer.json
- */
-export declare function parseComposerLock(pkgLockFile: string, rootRequires: array): never[] | {
-    pkgList: {
-        group: any;
-        name: any;
-        purl: any;
-        "bom-ref": string;
-        version: any;
-        repository: any;
-        license: any;
-        description: any;
-        scope: string;
-        properties: {
-            name: string;
-            value: string;
-        }[];
-        evidence: {
-            identity: {
-                field: string;
-                confidence: number;
-                methods: {
-                    technique: string;
-                    confidence: number;
-                    value: string;
-                }[];
-            };
-        };
-    }[];
-    dependenciesList: {
-        ref: string;
-        dependsOn: any[];
-    }[];
-    rootList: {
-        group: any;
-        name: any;
-        purl: any;
-        "bom-ref": string;
-        version: any;
-        repository: any;
-        license: any;
-        description: any;
-        scope: string;
-        properties: {
-            name: string;
-            value: string;
-        }[];
-        evidence: {
-            identity: {
-                field: string;
-                confidence: number;
-                methods: {
-                    technique: string;
-                    confidence: number;
-                    value: string;
-                }[];
-            };
-        };
+ * @returns {{pkgList: Object[], dependenciesList: Object[], rootList: Object[], platformProperties: {name: string, value: string}[]}|Array}
+ *   The locked packages, the dependency edges between them, the packages the
+ *   root requires, and the lock's `platform`, `platform-dev` and
+ *   `platform-overrides` entries as `cdx:composer:*` properties. The platform
+ *   entries are constraints and assumed versions, not the PHP that runs; the
+ *   caller puts them on the module component. Every locked package carries its
+ *   own `php`, `hhvm`, `ext-*` and `lib-*` requirements as
+ *   `cdx:composer:require:<name>` properties. A lock that is not valid JSON
+ *   gives an empty array.
+ */
+export declare function parseComposerLock(pkgLockFile: string, rootRequires: array): {
+    pkgList: Object[];
+    dependenciesList: Object[];
+    rootList: Object[];
+    platformProperties: {
+        name: string;
+        value: string;
     }[];
-};
+} | any[];
 /**
  * Method to execute dpkg --listfiles to determine the files provided by a given package
  *
@@ -409,6 +369,25 @@ export declare function parseCmakeDotFile(dotFile: string, pkgType: string, opti
  * @returns {Object} The component
  */
 export declare function cmakeFetchDependencyComponent(dep: Object, srcFile: string): Object;
+/**
+ * Read the wrap files of a meson project's subprojects directory: which
+ * dependency names each wrap provides, and the version it pins.
+ * https://mesonbuild.com/Wrap-dependency-system-manual.html
+ *
+ * A WrapDB wrap records `wrapdb_version = <upstream>-<wrap revision>`; any wrap
+ * names its unpacked `directory` and its archive, which carry the upstream
+ * version; a git wrap pins a `revision` that is often a version tag.
+ *
+ * @param {string} subprojectsDir path of the subprojects directory
+ * @returns {Map<string, {wrap: string, version: string, source: string, revision?: string}>}
+ *   by provided dependency name, lower-case
+ */
+export declare function readMesonWraps(subprojectsDir: string): Map<string, {
+    wrap: string;
+    version: string;
+    source: string;
+    revision?: string;
+}>;
 /**
  * Parse a CMake-like build file (CMakeLists.txt, meson.build, etc.) and extract the
  * parent component and list of dependency packages.

package/types/lib/ecosystems/parsers-misc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parsers-misc.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-misc.js"],"names":[],"mappings":"AA4EA;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,KAAA,EAAE,QAAQ,KAAA,GAF/C,MAAM,CA8ElB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAHjC,MAGiC,GAF/B,MAAM,EAAE,CA+BpB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAH/B,MAG+B,GAF7B,MAAM,EAAE,CAiEpB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EALvC,MAAM,WAAO,MAK0B,EAAE,OAAO,EAJhD,MAAM,EAI0C,EAAE,OAAO,EAHzD,MAAM,EAGmD,GAFvD,MAAM,EAAE,CAoEpB;AAmBD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAHpC,MAGoC,GAFlC,MAAM,EAAE,CAmEpB;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,YAAY,EAH7C,MAG6C,GAF3C,MAAM,EAAE,CA6DpB;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAHlC,MAGkC,GAFhC,MAAM,EAAE,CAmEpB;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,aAAa,EAH/B,MAG+B,GAF7B,MAAM,CAelB;AAaD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAHvB,MAGuB,GAFrB,MAAM,EAAE,CAiFpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAHhC,MAGgC,GAF9B,MAAM,EAAE,CAoDpB;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAH7B,MAG6B,GAF3B,MAAM,EAAE,CA4BpB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAH7B,MAG6B,GAF3B,MAAM,EAAE,CA2BpB;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,CAAC,EAH9B,MAG8B,GAF5B,MAAM,EAAE,CAapB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAHhC,MAGgC,GAF9B,MAAM,EAAE,CAqCpB;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,aAAa,EAHrC,MAGqC,GAFnC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,2BAA2B,EAAE,MAAM,EAAE,CAAA;CAAE,CAmF9F;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAH7B,MAG6B,GAF3B,MAAM,EAAE,CAmCpB;AA2HD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,gBAAgB,EAJ3C,MAI2C,EAAE,QAAQ,EAHrD,MAGqD,GAFnD;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,2BAA2B,EAAE,MAAM,EAAE,CAAA;CAAE,CAmD9F;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,YAAY,QAAA,GAF7B,MAAM,CA2GlB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,aAAa,QAAA,GAF/B,MAAM,CAqIlB;AA2CD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,gBAAgB,EAJvC,MAIuC,GAFrC,MAAM,CAqClB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAHlC,MAGkC,EAAE,YAAY,EAFhD,KAEgD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsK1D;AAmBD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAH5B,MAG4B,OAGtC;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAH3B,MAG2B,OAOrC;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAH3B,MAG2B,OAGrC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAH5B,MAG4B,OAGtC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAH9B,MAG8B,OAGxC;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,OAAA,EACP,gBAAgB,OAAA,EAChB,UAAU,EAND,MAMC,EACV,OAAO,EANE,MAMF,OA4ER;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAHjC,MAGiC,EAAE,OAAO,EAF1C,MAE0C;;;;;;;;EAqBpD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAFpC,MAEoC;;;;;;;;;;;;;;;;;;;IA+D9C;AAsCD;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAH3C,MAG2C,GAFzC,GAAG,CAAC,MAAM,CAAC,CA0CvB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAN3C,MAAM,SAMqC,EAAE,QAAQ,AAL7D,CACA,EADQ,MAAM,SAK+C,GAJnD,MAAM,CAqJlB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAH9B,MAG8B,GAF5B,OAAO,CAInB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAL9B,MAK8B,EAAE,OAAO,EAJvC,MAIuC,EAAE,OAAO,GAHhD,MAGqD,GAFnD;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAAE,CA2GtF;AAmKD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAJtC,MAIsC,EAAE,OAAO,EAH/C,MAG+C,GAF7C,MAAM,CAmElB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,aAAa,EALrC,MAKqC,EAAE,OAAO,EAJ9C,MAI8C,EAAE,OAAO,GAHvD,MAG4D,GAF1D;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAmS1D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAJ/B,MAI+B,GAH7B,8BAA4B,SAAS,CAoDjD;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,QAAA,GAFvB,MAAM,CAoBlB;AAqDD;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,EANvC,MAMuC,EAAE,WAAW,QAAA,EAAE,QAAQ,AAJtE,CAEA,QAEsE,iBA0LxE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EALG,MAKH,EACN,eAAe,eAAA,EACf,MAAM,AALL,CACF,QAImB,QA0BnB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,cAAc,QAAA,EAAE,YAAY,AAH9D,CACA,EADQ,OAG6D,GAF3D,MAAM,CAYlB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EALjC,QAKiC,EAAE,IAAI,QAAA,EAAE,OAAO,EAHhD,MAGgD,GAF9C,MAAM,CAyDlB;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAND,MAMC,EACV,OAAO,EANE,MAMF,EACP,IAAI,AANH,CACA,QAKe,GALL,MAAM,CA0FlB;AA+BD;;GAEG;AACH,wBAAgB,yBAAyB,SAExC;AAID;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,qBAAqB,CAAC,YAAY,EAJ7C,KAAK,CAAC,MAAM,CAIiC,GAF3C,OAAO,CAAC,IAAI,CAAC,CA4CzB;AA0UD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAHpC,MAGoC,GAFlC,MAAM,EAAE,CAoHpB"}
+{"version":3,"file":"parsers-misc.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-misc.js"],"names":[],"mappings":"AA4FA;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,KAAA,EAAE,QAAQ,KAAA,GAF/C,MAAM,CA8ElB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAHjC,MAGiC,GAF/B,MAAM,EAAE,CA+BpB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAH/B,MAG+B,GAF7B,MAAM,EAAE,CAiEpB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EALvC,MAAM,WAAO,MAK0B,EAAE,OAAO,EAJhD,MAAM,EAI0C,EAAE,OAAO,EAHzD,MAAM,EAGmD,GAFvD,MAAM,EAAE,CAoEpB;AAmBD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAHpC,MAGoC,GAFlC,MAAM,EAAE,CAmEpB;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,YAAY,EAH7C,MAG6C,GAF3C,MAAM,EAAE,CA6DpB;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAHlC,MAGkC,GAFhC,MAAM,EAAE,CAmEpB;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,aAAa,EAH/B,MAG+B,GAF7B,MAAM,CAelB;AAaD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAHvB,MAGuB,GAFrB,MAAM,EAAE,CAiFpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAHhC,MAGgC,GAF9B,MAAM,EAAE,CAoDpB;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAH7B,MAG6B,GAF3B,MAAM,EAAE,CA4BpB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAH7B,MAG6B,GAF3B,MAAM,EAAE,CA2BpB;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,CAAC,EAH9B,MAG8B,GAF5B,MAAM,EAAE,CAapB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAHhC,MAGgC,GAF9B,MAAM,EAAE,CAqCpB;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,aAAa,EAHrC,MAGqC,GAFnC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,2BAA2B,EAAE,MAAM,EAAE,CAAA;CAAE,CAmF9F;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAH7B,MAG6B,GAF3B,MAAM,EAAE,CAmCpB;AA2HD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,gBAAgB,EAJ3C,MAI2C,EAAE,QAAQ,EAHrD,MAGqD,GAFnD;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,2BAA2B,EAAE,MAAM,EAAE,CAAA;CAAE,CAmD9F;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,YAAY,QAAA,GAF7B,MAAM,CA2GlB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,aAAa,QAAA,GAF/B,MAAM,CAqIlB;AA2CD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,gBAAgB,EAJvC,MAIuC,GAFrC,MAAM,CAqClB;AAgID;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAZlC,MAYkC,EAAE,YAAY,EAXhD,KAWgD,GAV9C;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,kBAAkB,EAAE;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAC,EAAE,CAAA;CAAC,QAAM,CA0L1I;AAmBD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAH5B,MAG4B,OAGtC;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAH3B,MAG2B,OAOrC;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAH3B,MAG2B,OAGrC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAH5B,MAG4B,OAGtC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAH9B,MAG8B,OAGxC;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,OAAA,EACP,gBAAgB,OAAA,EAChB,UAAU,EAND,MAMC,EACV,OAAO,EANE,MAMF,OA4ER;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAHjC,MAGiC,EAAE,OAAO,EAF1C,MAE0C;;;;;;;;EAqBpD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAFpC,MAEoC;;;;;;;;;;;;;;;;;;;IA+D9C;AAsCD;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAH3C,MAG2C,GAFzC,GAAG,CAAC,MAAM,CAAC,CA0CvB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAN3C,MAAM,SAMqC,EAAE,QAAQ,AAL7D,CACA,EADQ,MAAM,SAK+C,GAJnD,MAAM,CAqJlB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAH9B,MAG8B,GAF5B,OAAO,CAInB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAL9B,MAK8B,EAAE,OAAO,EAJvC,MAIuC,EAAE,OAAO,GAHhD,MAGqD,GAFnD;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAAE,CA2GtF;AAmKD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAJtC,MAIsC,EAAE,OAAO,EAH/C,MAG+C,GAF7C,MAAM,CAmElB;AAwBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,cAAc,EAJlC,MAIkC,GAHhC,GAAG,CAAC,MAAM,EAAE;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAC,CAAC,CA0F3F;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,aAAa,EALrC,MAKqC,EAAE,OAAO,EAJ9C,MAI8C,EAAE,OAAO,GAHvD,MAG4D,GAF1D;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CA8V1D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAJ/B,MAI+B,GAH7B,8BAA4B,SAAS,CAoDjD;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,QAAA,GAFvB,MAAM,CAoBlB;AAqDD;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,EANvC,MAMuC,EAAE,WAAW,QAAA,EAAE,QAAQ,AAJtE,CAEA,QAEsE,iBA0LxE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EALG,MAKH,EACN,eAAe,eAAA,EACf,MAAM,AALL,CACF,QAImB,QA0BnB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,cAAc,QAAA,EAAE,YAAY,AAH9D,CACA,EADQ,OAG6D,GAF3D,MAAM,CAYlB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EALjC,QAKiC,EAAE,IAAI,QAAA,EAAE,OAAO,EAHhD,MAGgD,GAF9C,MAAM,CAyDlB;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAND,MAMC,EACV,OAAO,EANE,MAMF,EACP,IAAI,AANH,CACA,QAKe,GALL,MAAM,CA0FlB;AA+BD;;GAEG;AACH,wBAAgB,yBAAyB,SAExC;AAID;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,qBAAqB,CAAC,YAAY,EAJ7C,KAAK,CAAC,MAAM,CAIiC,GAF3C,OAAO,CAAC,IAAI,CAAC,CA4CzB;AAwWD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAHpC,MAGoC,GAFlC,MAAM,EAAE,CAoHpB"}

package/types/lib/ecosystems/parsers-python.d.ts

@@ -82,6 +82,16 @@ export declare function installedMetadataKey(p: Object): string | undefined;
  *   the METADATA files can skip those as components
  */
 export declare function enrichFromInstalledMetadata(pkgList: Object[], installedMetadata: Object[]): Set<string>;
+/**
+ * Whether an environment marker is false for every CPython interpreter. Only
+ * `platform_python_implementation` and `implementation_name` clauses are
+ * decided; anything else, or a marker with parentheses, is treated as possibly
+ * true, so the answer errs towards keeping a package.
+ *
+ * @param {string} marker PEP 508 environment marker
+ * @returns {boolean} true when no CPython environment satisfies the marker
+ */
+export declare function markerExcludesCPython(marker: string): boolean;
 /**
  * Method to parse python lock files such as poetry.lock, pdm.lock, uv.lock, and pylock.toml.
  *
@@ -166,11 +176,12 @@ export declare function parsePixiLockFile(pixiLockFileName: string, path: string
  */
 export declare function parsePixiTomlFile(pixiToml: string): {};
 /**
- * Method to run cli command `pixi install`
- *
+ * Method to run cli command `pixi install` in the project directory.
  *
+ * @param {string} projectPath Directory containing pixi.toml
+ * @returns {boolean} true when pixi install succeeded
  */
-export declare function generatePixiLockFile(_path: any): void;
+export declare function generatePixiLockFile(projectPath: string): boolean;
 /**
  * Parse a Mojo `mojoproject.toml` manifest.
  *

package/types/lib/ecosystems/parsers-python.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parsers-python.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-python.js"],"names":[],"mappings":"AAiEA;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,QAAA;;;cAqB9C;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,QAAQ,EALpC,MAKoC,EAAE,iBAAiB,AAJ/D,CAGF,EAHU,MAAM,EAIiD,kBAoBjE;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EALnC,MAKmC,EAAE,IAAI,EAJzC,MAIyC,EAAE,KAAK,EAHhD,MAGgD,GAF9C,IAAI,CAkBhB;AAuMD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAHpC,MAGoC,GAFlC,MAAM,CAwSlB;AAqFD;;;;;;;;;;GAUG;AACH,wBAAgB,gCAAgC,CAAC,SAAS,EAH/C,MAG+C,GAF7C,MAAM,GAAG,SAAS,CA2C9B;AAiBD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAH9B,MAG8B,GAF5B,MAAM,GAAC,SAAS,CAU5B;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAH3B,MAG2B,GAFzB,MAAM,GAAC,SAAS,CAM5B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAPxC,MAAM,EAOkC,EAAE,iBAAiB,EAN3D,MAAM,EAMqD,GAJzD,GAAG,CAAC,MAAM,CAAC,CA0CvB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EATC,MASD,EACR,QAAQ,EATC,MASD,EACR,aAAa,EATJ,MASI,EACb,OAAO,AATN,CAIF,EAHE;IAA2B,iBAAiB,AAA5C,CAGF,EAHU,MAAM,EAAE,CAGlB;CAKa;;;;;;;;;;;;;;;;;;;;;;GA4nBb;AAYD;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAChC,OAAO,QAAA,EACP,aAAa,UAAQ,EACrB,iBAAiB,AAThB,CAIA,EAJQ,MAAM,EASc,OAG9B;AAySD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,QAAA,GAFhC,KAAK,CAAC,MAAM,CAAC,CAmCzB;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,EAFvC,MAEuC,qBAqBjD;AA6CD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,gBAAgB,QAAA,EAAE,IAAI,QAAA;;;;;;;;;EAkLvD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,QAAA,MAiCzC;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,KAAA,QAkBzC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,eAAe,EAHrC,MAGqC,GAFnC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CA8C1D"}
+{"version":3,"file":"parsers-python.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-python.js"],"names":[],"mappings":"AAgEA;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,QAAA;;;cAqB9C;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,QAAQ,EALpC,MAKoC,EAAE,iBAAiB,AAJ/D,CAGF,EAHU,MAAM,EAIiD,kBAoBjE;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EALnC,MAKmC,EAAE,IAAI,EAJzC,MAIyC,EAAE,KAAK,EAHhD,MAGgD,GAF9C,IAAI,CAkBhB;AAuMD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAHpC,MAGoC,GAFlC,MAAM,CAwSlB;AAqFD;;;;;;;;;;GAUG;AACH,wBAAgB,gCAAgC,CAAC,SAAS,EAH/C,MAG+C,GAF7C,MAAM,GAAG,SAAS,CA2C9B;AAiBD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAH9B,MAG8B,GAF5B,MAAM,GAAC,SAAS,CAU5B;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAH3B,MAG2B,GAFzB,MAAM,GAAC,SAAS,CAM5B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAPxC,MAAM,EAOkC,EAAE,iBAAiB,EAN3D,MAAM,EAMqD,GAJzD,GAAG,CAAC,MAAM,CAAC,CA0CvB;AAiBD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAHjC,MAGiC,GAF/B,OAAO,CAWnB;AAsBD;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EATC,MASD,EACR,QAAQ,EATC,MASD,EACR,aAAa,EATJ,MASI,EACb,OAAO,AATN,CAIF,EAHE;IAA2B,iBAAiB,AAA5C,CAGF,EAHU,MAAM,EAAE,CAGlB;CAKa;;;;;;;;;;;;;;;;;;;;;;GA4pBb;AAYD;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAChC,OAAO,QAAA,EACP,aAAa,UAAQ,EACrB,iBAAiB,AAThB,CAIA,EAJQ,MAAM,EASc,OAG9B;AAySD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,QAAA,GAFhC,KAAK,CAAC,MAAM,CAAC,CAmCzB;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,EAFvC,MAEuC,qBAqBjD;AA6CD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,gBAAgB,QAAA,EAAE,IAAI,QAAA;;;;;;;;;EAkLvD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,QAAA,MAiCzC;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAHrC,MAGqC,GAFnC,OAAO,CAqBnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,eAAe,EAHrC,MAGqC,GAFnC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CA8C1D"}

package/types/lib/ecosystems/pythonutils.d.ts

@@ -84,6 +84,24 @@ export declare function getPyModules(src: string, epkgList: any[], options: Obje
  * @param {Object} options CLI options
  */
 export declare function createUVLock(basePath: string, options: Object): void;
+/**
+ * Check whether a pyproject.toml requires poetry-core 2 or newer to build.
+ *
+ * @param {string} pyprojectFile Path to pyproject.toml
+ * @returns {boolean} true when the project needs Poetry 2 or newer
+ */
+export declare function isPoetry2Project(pyprojectFile: string): boolean;
+/**
+ * Build the poetry install arguments for a poetry project.
+ *
+ * Poetry 2 installs only the main dependency group and no extras by default,
+ * so projects requiring poetry-core 2 or newer also get --all-groups and
+ * --all-extras. Callers prepend the python invocation such as -m poetry.
+ *
+ * @param {string} pyprojectFile pyproject.toml or poetry.lock path of the project
+ * @returns {string[]} poetry install arguments
+ */
+export declare function getPoetryInstallArgs(pyprojectFile: string): string[];
 /**
  * Execute pip freeze by creating a virtual env in a temp directory and construct the dependency tree
  *
@@ -97,8 +115,8 @@ export declare function createUVLock(basePath: string, options: Object): void;
 export declare function getPipFrozenTree(basePath: string, reqOrSetupFile: string, tempVenvDir: string, parentComponent: Object, projectRoot: any, getTreeWithPluginFn: any): Object;
 export declare function getPipTreeForPackages(basePath: any, pkgList: any, tempVenvDir: any, parentComponent: any, getTreeWithPluginFn: any): {
     rootList?: undefined;
-    dependenciesList?: undefined;
     failedPkgList?: undefined;
+    dependenciesList?: undefined;
 } | {
     failedPkgList: any[];
     rootList: {

package/types/lib/ecosystems/pythonutils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pythonutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/pythonutils.js"],"names":[],"mappings":"AAiCA;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,GAJxB,MAIsC,EAAE,YAAY,AAH5D,CACA,EADQ,MAG2D,GAFzD,MAAM,CAyLlB;AAyED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAHpC,MAGoC,GAFlC,MAAM,CA6BlB;AAgBD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAH3B,MAG2B,GAFzB,GAAG,CAAC,MAAM,CAAC,CAwCvB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAJ3B,MAI2B,EAAE,IAAI,EAHjC,MAGiC,GAF/B,OAAO,CA+BnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAJzB,MAIyB,EAAE,OAAO,GAHlC,MAGuC,GAFrC,OAAO,CAInB;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAL3B,MAK2B,EAAE,QAAQ,OAAA,EAAE,OAAO,EAH9C,MAG8C;;;;;;;;GAoFxD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAH1B,MAG0B,EAAE,OAAO,EAFnC,MAEmC,QAgD7C;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EARC,MAQD,EACR,cAAc,EARL,MAQK,EACd,WAAW,EARF,MAQE,EACX,eAAe,EARN,MAQM,EACf,WAAW,KAAA,EACX,mBAAmB,KAAA,GARR,MAAM,CAmkBlB;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,KAAA,EACR,OAAO,KAAA,EACP,WAAW,KAAA,EACX,eAAe,KAAA,EACf,mBAAmB,KAAA;;;;;;;;;;;;;;;;EAwNpB"}
+{"version":3,"file":"pythonutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/pythonutils.js"],"names":[],"mappings":"AAmCA;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,GAJxB,MAIsC,EAAE,YAAY,AAH5D,CACA,EADQ,MAG2D,GAFzD,MAAM,CAyLlB;AAyED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAHpC,MAGoC,GAFlC,MAAM,CA6BlB;AAgBD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAH3B,MAG2B,GAFzB,GAAG,CAAC,MAAM,CAAC,CAwCvB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAJ3B,MAI2B,EAAE,IAAI,EAHjC,MAGiC,GAF/B,OAAO,CA+BnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAJzB,MAIyB,EAAE,OAAO,GAHlC,MAGuC,GAFrC,OAAO,CAInB;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAL3B,MAK2B,EAAE,QAAQ,OAAA,EAAE,OAAO,EAH9C,MAG8C;;;;;;;;GAoFxD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAH1B,MAG0B,EAAE,OAAO,EAFnC,MAEmC,QAgD7C;AA8DD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,aAAa,EAHnC,MAGmC,GAFjC,OAAO,CAiBnB;AAsBD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,aAAa,EAHvC,MAGuC,GAFrC,MAAM,EAAE,CASpB;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EARC,MAQD,EACR,cAAc,EARL,MAQK,EACd,WAAW,EARF,MAQE,EACX,eAAe,EARN,MAQM,EACf,WAAW,KAAA,EACX,mBAAmB,KAAA,GARR,MAAM,CAqkBlB;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,KAAA,EACR,OAAO,KAAA,EACP,WAAW,KAAA,EACX,eAAe,KAAA,EACf,mBAAmB,KAAA;;;;;;;;;;;;;;;;EAwNpB"}