@cdxgen/cdxgen 13.5.0 → 13.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (182) hide show
  1. package/README.md +6 -6
  2. package/bin/cdxgen.js +4 -0
  3. package/bin/evinse.js +3 -0
  4. package/bin/validate.js +6 -0
  5. package/data/license-aliases.json +24 -2
  6. package/data/remediations.json +124 -0
  7. package/data/rules/ai-bom.yaml +1 -1
  8. package/data/rules/brotli-decoder.yaml +107 -0
  9. package/data/rules/vscode-extensions.yaml +75 -0
  10. package/data/spdx-license-list.json +121 -7
  11. package/data/spdx-licenses.json +69 -0
  12. package/data/spdx.schema.json +845 -2
  13. package/lib/cli/bomAssembly.js +92 -3
  14. package/lib/cli/index.js +108 -1
  15. package/lib/cli/jsBom.js +153 -64
  16. package/lib/cli/jvmBom.js +237 -46
  17. package/lib/cli/managedBom.js +142 -16
  18. package/lib/cli/nativeBom.js +42 -5
  19. package/lib/core/boundedFile.js +344 -0
  20. package/lib/core/brotliProbe.js +182 -0
  21. package/lib/core/env.js +8 -0
  22. package/lib/core/fs.js +12 -0
  23. package/lib/core/httpClient.js +98 -1
  24. package/lib/core/lockPaths.js +38 -0
  25. package/lib/core/paths.js +24 -1
  26. package/lib/core/processTree.js +5 -0
  27. package/lib/core/toolRegistry.js +170 -0
  28. package/lib/ecosystems/cppEvidence.js +263 -106
  29. package/lib/ecosystems/cppIncludeResolver.js +16 -5
  30. package/lib/ecosystems/ecosystems.js +25 -10
  31. package/lib/ecosystems/gemHostProbe.js +301 -0
  32. package/lib/ecosystems/gradleutils.js +828 -224
  33. package/lib/ecosystems/parsers-bazel.js +107 -6
  34. package/lib/ecosystems/parsers-js.js +505 -22
  35. package/lib/ecosystems/parsers-misc.js +209 -20
  36. package/lib/ecosystems/parsers-python.js +89 -2
  37. package/lib/ecosystems/pythonutils.js +128 -2
  38. package/lib/ecosystems/rubyutils.js +538 -31
  39. package/lib/ecosystems/scalacliutils.js +2 -0
  40. package/lib/ecosystems/scalasem.js +796 -151
  41. package/lib/ecosystems/vendoredCode.js +237 -3
  42. package/lib/ecosystems/venvProbe.js +360 -0
  43. package/lib/evinser/evinser.js +346 -43
  44. package/lib/helpers/agenticToolutils.js +413 -93
  45. package/lib/helpers/vsixutils.js +1574 -315
  46. package/lib/inventory/atomUtils.js +77 -0
  47. package/lib/inventory/brotliDecoder.js +142 -0
  48. package/lib/inventory/buildToolRateLimit.js +1 -1
  49. package/lib/inventory/cbomutils.js +56 -7
  50. package/lib/inventory/deps.js +35 -0
  51. package/lib/inventory/dosai.js +139 -5
  52. package/lib/inventory/dotnetRuntime.js +217 -0
  53. package/lib/inventory/envcontext.js +307 -13
  54. package/lib/inventory/evidenceUtils.js +11 -0
  55. package/lib/inventory/fetchBatch.js +1 -1
  56. package/lib/inventory/formulationParsers.js +31 -3
  57. package/lib/inventory/gtfobins.js +13 -0
  58. package/lib/inventory/hostRuntimeProbe.js +686 -0
  59. package/lib/inventory/jvmLocalRepos.js +9 -2
  60. package/lib/inventory/jvmToolEnv.js +29 -0
  61. package/lib/inventory/licenseEnhancer.js +12 -0
  62. package/lib/inventory/mavenCentralMirror.js +534 -0
  63. package/lib/inventory/nodeBuildInfo.js +218 -0
  64. package/lib/inventory/nodeHostProbe.js +202 -0
  65. package/lib/inventory/osPackageResolver.js +182 -0
  66. package/lib/inventory/phpBuildInfo.js +10 -59
  67. package/lib/inventory/phpHostProbe.js +32 -488
  68. package/lib/inventory/rubyBuildInfo.js +972 -0
  69. package/lib/inventory/rubyHostProbe.js +218 -0
  70. package/lib/inventory/scalaCoords.js +4 -3
  71. package/lib/inventory/scalaDedupe.js +440 -0
  72. package/lib/inventory/source.js +49 -2
  73. package/lib/managers/binary.js +337 -3
  74. package/lib/managers/docker.js +79 -0
  75. package/lib/parsers/largeJson.js +28 -11
  76. package/lib/parsers/vscodeExtensionId.js +183 -0
  77. package/lib/server/server.js +12 -1
  78. package/lib/stages/postgen/ruleEngine.js +13 -5
  79. package/lib/stages/pregen/envAudit.js +1 -0
  80. package/lib/stages/pregen/pregen.js +114 -57
  81. package/lib/validator/bomValidator.js +6 -1
  82. package/lib/validator/generated/validate-1.6.mjs +1 -1
  83. package/lib/validator/generated/validate-1.7.mjs +1 -1
  84. package/lib/validator/generated/validate-2.0.mjs +1 -1
  85. package/lib/validator/index.js +1 -1
  86. package/package.json +3 -2
  87. package/types/lib/cli/bomAssembly.d.ts +13 -1
  88. package/types/lib/cli/bomAssembly.d.ts.map +1 -1
  89. package/types/lib/cli/index.d.ts.map +1 -1
  90. package/types/lib/cli/jsBom.d.ts +1 -17
  91. package/types/lib/cli/jsBom.d.ts.map +1 -1
  92. package/types/lib/cli/jvmBom.d.ts.map +1 -1
  93. package/types/lib/cli/managedBom.d.ts.map +1 -1
  94. package/types/lib/cli/nativeBom.d.ts.map +1 -1
  95. package/types/lib/core/boundedFile.d.ts +70 -0
  96. package/types/lib/core/boundedFile.d.ts.map +1 -0
  97. package/types/lib/core/brotliProbe.d.ts +37 -0
  98. package/types/lib/core/brotliProbe.d.ts.map +1 -0
  99. package/types/lib/core/env.d.ts +4 -0
  100. package/types/lib/core/env.d.ts.map +1 -1
  101. package/types/lib/core/fs.d.ts.map +1 -1
  102. package/types/lib/core/httpClient.d.ts +24 -0
  103. package/types/lib/core/httpClient.d.ts.map +1 -1
  104. package/types/lib/core/lockPaths.d.ts +19 -0
  105. package/types/lib/core/lockPaths.d.ts.map +1 -0
  106. package/types/lib/core/processTree.d.ts +2 -0
  107. package/types/lib/core/processTree.d.ts.map +1 -1
  108. package/types/lib/core/toolRegistry.d.ts +36 -0
  109. package/types/lib/core/toolRegistry.d.ts.map +1 -0
  110. package/types/lib/ecosystems/cppEvidence.d.ts +40 -13
  111. package/types/lib/ecosystems/cppEvidence.d.ts.map +1 -1
  112. package/types/lib/ecosystems/cppIncludeResolver.d.ts +2 -1
  113. package/types/lib/ecosystems/cppIncludeResolver.d.ts.map +1 -1
  114. package/types/lib/ecosystems/ecosystems.d.ts.map +1 -1
  115. package/types/lib/ecosystems/gemHostProbe.d.ts +28 -0
  116. package/types/lib/ecosystems/gemHostProbe.d.ts.map +1 -0
  117. package/types/lib/ecosystems/gradleutils.d.ts +47 -13
  118. package/types/lib/ecosystems/gradleutils.d.ts.map +1 -1
  119. package/types/lib/ecosystems/parsers-bazel.d.ts.map +1 -1
  120. package/types/lib/ecosystems/parsers-js.d.ts +17 -20
  121. package/types/lib/ecosystems/parsers-js.d.ts.map +1 -1
  122. package/types/lib/ecosystems/parsers-misc.d.ts +19 -0
  123. package/types/lib/ecosystems/parsers-misc.d.ts.map +1 -1
  124. package/types/lib/ecosystems/parsers-python.d.ts +10 -0
  125. package/types/lib/ecosystems/parsers-python.d.ts.map +1 -1
  126. package/types/lib/ecosystems/pythonutils.d.ts +20 -2
  127. package/types/lib/ecosystems/pythonutils.d.ts.map +1 -1
  128. package/types/lib/ecosystems/rubyutils.d.ts +144 -12
  129. package/types/lib/ecosystems/rubyutils.d.ts.map +1 -1
  130. package/types/lib/ecosystems/scalacliutils.d.ts.map +1 -1
  131. package/types/lib/ecosystems/vendoredCode.d.ts +26 -0
  132. package/types/lib/ecosystems/vendoredCode.d.ts.map +1 -1
  133. package/types/lib/ecosystems/venvProbe.d.ts +40 -0
  134. package/types/lib/ecosystems/venvProbe.d.ts.map +1 -0
  135. package/types/lib/evinser/evinser.d.ts +63 -8
  136. package/types/lib/evinser/evinser.d.ts.map +1 -1
  137. package/types/lib/inventory/atomUtils.d.ts +19 -0
  138. package/types/lib/inventory/atomUtils.d.ts.map +1 -1
  139. package/types/lib/inventory/brotliDecoder.d.ts +58 -0
  140. package/types/lib/inventory/brotliDecoder.d.ts.map +1 -0
  141. package/types/lib/inventory/cbomutils.d.ts +17 -0
  142. package/types/lib/inventory/cbomutils.d.ts.map +1 -1
  143. package/types/lib/inventory/deps.d.ts.map +1 -1
  144. package/types/lib/inventory/dosai.d.ts +17 -1
  145. package/types/lib/inventory/dosai.d.ts.map +1 -1
  146. package/types/lib/inventory/dotnetRuntime.d.ts +44 -0
  147. package/types/lib/inventory/dotnetRuntime.d.ts.map +1 -0
  148. package/types/lib/inventory/envcontext.d.ts +52 -6
  149. package/types/lib/inventory/envcontext.d.ts.map +1 -1
  150. package/types/lib/inventory/evidenceUtils.d.ts.map +1 -1
  151. package/types/lib/inventory/formulationParsers.d.ts.map +1 -1
  152. package/types/lib/inventory/gtfobins.d.ts.map +1 -1
  153. package/types/lib/inventory/hostRuntimeProbe.d.ts +44 -0
  154. package/types/lib/inventory/hostRuntimeProbe.d.ts.map +1 -0
  155. package/types/lib/inventory/jvmToolEnv.d.ts +12 -0
  156. package/types/lib/inventory/jvmToolEnv.d.ts.map +1 -1
  157. package/types/lib/inventory/licenseEnhancer.d.ts.map +1 -1
  158. package/types/lib/inventory/mavenCentralMirror.d.ts +170 -0
  159. package/types/lib/inventory/mavenCentralMirror.d.ts.map +1 -0
  160. package/types/lib/inventory/nodeBuildInfo.d.ts +95 -0
  161. package/types/lib/inventory/nodeBuildInfo.d.ts.map +1 -0
  162. package/types/lib/inventory/nodeHostProbe.d.ts +15 -0
  163. package/types/lib/inventory/nodeHostProbe.d.ts.map +1 -0
  164. package/types/lib/inventory/osPackageResolver.d.ts +38 -0
  165. package/types/lib/inventory/osPackageResolver.d.ts.map +1 -1
  166. package/types/lib/inventory/phpBuildInfo.d.ts.map +1 -1
  167. package/types/lib/inventory/phpHostProbe.d.ts.map +1 -1
  168. package/types/lib/inventory/rubyBuildInfo.d.ts +271 -0
  169. package/types/lib/inventory/rubyBuildInfo.d.ts.map +1 -0
  170. package/types/lib/inventory/rubyHostProbe.d.ts +47 -0
  171. package/types/lib/inventory/rubyHostProbe.d.ts.map +1 -0
  172. package/types/lib/inventory/source.d.ts +10 -0
  173. package/types/lib/inventory/source.d.ts.map +1 -1
  174. package/types/lib/managers/binary.d.ts.map +1 -1
  175. package/types/lib/managers/docker.d.ts +12 -0
  176. package/types/lib/managers/docker.d.ts.map +1 -1
  177. package/types/lib/parsers/largeJson.d.ts +4 -3
  178. package/types/lib/parsers/largeJson.d.ts.map +1 -1
  179. package/types/lib/server/server.d.ts.map +1 -1
  180. package/types/lib/stages/pregen/envAudit.d.ts.map +1 -1
  181. package/types/lib/stages/pregen/pregen.d.ts +12 -8
  182. package/types/lib/stages/pregen/pregen.d.ts.map +1 -1
@@ -1 +1 @@
1
- {"version":3,"file":"dosai.d.ts","sourceRoot":"","sources":["../../../lib/inventory/dosai.js"],"names":[],"mappings":"AA+KA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CAAC,cAAc,EAL1C,MAAM,GAAC,MAKmC,GAJxC;IAAC,OAAO,EAAE,CAAC,MAAM,GAAC,SAAS,CAAC,CAAC;IAAC,KAAK,EAAE,CAAC,MAAM,GAAC,SAAS,CAAC,CAAA;CAAC,GAAC,SAAS,CAmB9E;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,WAAW,AAHrD,CACA,EADQ;IAAC,OAAO,EAAE,CAAC,MAAM,GAAC,SAAS,CAAC,CAAC;IAAC,KAAK,EAAE,CAAC,MAAM,GAAC,SAAS,CAAC,CAAA;CAGV,GAF3C,MAAM,CAUlB;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,WAAW,AAHrD,CACA,EADQ;IAAC,OAAO,EAAE,CAAC,MAAM,GAAC,SAAS,CAAC,CAAC;IAAC,KAAK,EAAE,CAAC,MAAM,GAAC,SAAS,CAAC,CAAA;CAGV,GAF3C,MAAM,CAIlB;AAwMD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAJpC,MAAM,EAI8B,EAAE,OAAO,EAH7C,MAG6C,GAF3C;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAC,CAyFtE;AAoDD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAHnC,MAGmC,GAFjC,OAAO,CAInB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAH/B,MAG+B,GAF7B,MAAM,GAAC,SAAS,CAW5B;AAkBD;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,IAF/B,MAAM,CAIlB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAHjC,MAGiC,GAF/B,OAAO,CAInB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,AAHxC,CACA,EADQ,MAGgC,GAF9B,MAAM,EAAE,CAOpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,UAAU,EAH9C,MAG8C,GAF5C,MAAM,EAAE,CAapB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,eAAe,EAH7C,MAAM,EAGuC,GAF3C,MAAM,EAAE,CAMpB;AA4DD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAPtC,MAOsC,EAAE,OAAO,AANvD,CAIA,EAHA;IAA2B,QAAQ,AAAnC,CACA,EADQ,MAAM,EAAE,CAChB;IAA2B,cAAc,AAAzC,CACA,WAAA;IAAyB,YAAY,AAArC,CACA,EADQ,MAAM,CACd;CAE4D,GAFlD,MAAM,GAAC,SAAS,CA0B5B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EALvC,MAKuC,EAAE,OAAO,AAJxD,CAEA,EADA;IAAyB,YAAY,AAArC,CACA,EADQ,MAAM,CACd;CAE6D,GAFnD,MAAM,GAAC,SAAS,CAa5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAH5B,MAG4B,GAF1B,OAAO,CAInB;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAH9B,MAG8B,GAF5B,SAAS,GAAC,QAAQ,GAAC,QAAQ,GAAC,SAAS,CAajD;AAeD;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,UAAU,EAF9C,MAE8C,QAKxD;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAHlC,MAGkC,GAFhC,OAAO,CAKnB;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAHpC,MAGoC,GAFlC,OAAO,CASnB;AAYD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAN5B,MAM4B,EAAE,GAAG,EALjC,MAKiC,EAAE,UAAU,EAJ7C,MAI6C,EAAE,OAAO,AAH9D,CACA,EADQ,MAG2D,GAFzD,OAAO,CAmLnB;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EALhC,MAKgC,EAAE,UAAU,EAJ5C,MAI4C,EAAE,OAAO,AAH7D,CACA,EADQ,MAG0D,GAFxD,OAAO,CAInB;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EALjC,MAKiC,EAAE,UAAU,EAJ7C,MAI6C,EAAE,OAAO,AAH9D,CACA,EADQ,MAG2D,GAFzD,OAAO,CAInB;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EALlC,MAKkC,EAAE,UAAU,EAJ9C,MAI8C,EAAE,OAAO,AAH/D,CACA,EADQ,MAG4D,GAF1D,OAAO,CAInB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAJ3B,MAI2B,EAAE,OAAO,AAH5C,CACA,EADQ,MAGyC,GAFvC,MAAM,GAAC,SAAS,CAe5B;AAiFD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EALnC,MAKmC,EAAE,MAAM,AAJnD,CACA,EADQ,MAI2C,EAAE,iBAAiB,AAHtE,CACA,EADQ,MAG8D,GAF5D,MAAM,EAAE,CAoCpB;AAuDD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,KAAA,EACP,YAAY,KAAA,EACZ,aAAa,KAAA,OAsEd;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,AAJzC,CACA,EADQ,MAAM,EAIgC,EAAE,OAAO,AAHvD,CACA,EADQ,MAGoD,GAFlD,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAI/B;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAN9B,MAM8B,EAAE,YAAY,EAL5C,GAAG,CAAC,MAAM,EAAE,MAAM,CAK0B,EAAE,QAAQ,AAJ9D,CACA,EADQ,MAIsD,GAHpD,MAAM,GAAC,SAAS,CAK5B;AAwCD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,8BAA8B,CAAC,SAAS,EAH7C,MAG6C,EAAE,YAAY,EAF3D,MAE2D,QAyBrE;AAED;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAC5C,YAAY,EARH,MAQG,EACZ,UAAU,AART,CACA,EADQ,MAAM,EAQA,EACf,OAAO,AARN,CAGA,EAFA;IAAyB,OAAO,AAAhC,CAEA,EAFQ,MAAM,CAEd;CAKW,GALD,MAAM,CA4ClB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CACtC,YAAY,EARH,MAQG,EACZ,UAAU,AART,CACA,EADQ,MAAM,EAQA,EACf,OAAO,AARN,CAGA,EAFA;IAAyB,OAAO,AAAhC,CAEA,EAFQ,MAAM,CAEd;CAKW,GALD,MAAM,CA8FlB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CACxC,cAAc,EARL,MAQK,EACd,UAAU,AART,CACA,EADQ,MAAM,EAQA,EACf,OAAO,AARN,CAGA,EAFA;IAAyB,OAAO,AAAhC,CAEA,EAFQ,MAAM,CAEd;CAKW,GALD,MAAM,CAwDlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,YAAY,EAJ1C,MAI0C,EAAE,UAAU,AAH9D,CACA,OAEmE,SA6FrE;AAED;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAAC,YAAY,EAJ/C,MAI+C,EAAE,WAAW,AAHpE,CACA,EADQ,MAGiE,GAF/D,MAAM,CAyKlB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAC7C,YAAY,EALH,MAKG,EACZ,WAAW,AALV,CACA,EADQ,MAKO,GAJL,MAAM,CA+GlB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,AAHjD,CACA,EADQ,MAG8C,GAF5C,MAAM,EAAE,CAmDpB"}
1
+ {"version":3,"file":"dosai.d.ts","sourceRoot":"","sources":["../../../lib/inventory/dosai.js"],"names":[],"mappings":"AA+KA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CAAC,cAAc,EAL1C,MAAM,GAAC,MAKmC,GAJxC;IAAC,OAAO,EAAE,CAAC,MAAM,GAAC,SAAS,CAAC,CAAC;IAAC,KAAK,EAAE,CAAC,MAAM,GAAC,SAAS,CAAC,CAAA;CAAC,GAAC,SAAS,CAmB9E;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,WAAW,AAHrD,CACA,EADQ;IAAC,OAAO,EAAE,CAAC,MAAM,GAAC,SAAS,CAAC,CAAC;IAAC,KAAK,EAAE,CAAC,MAAM,GAAC,SAAS,CAAC,CAAA;CAGV,GAF3C,MAAM,CAUlB;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,WAAW,AAHrD,CACA,EADQ;IAAC,OAAO,EAAE,CAAC,MAAM,GAAC,SAAS,CAAC,CAAC;IAAC,KAAK,EAAE,CAAC,MAAM,GAAC,SAAS,CAAC,CAAA;CAGV,GAF3C,MAAM,CAIlB;AAwMD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAJpC,MAAM,EAI8B,EAAE,OAAO,EAH7C,MAG6C,GAF3C;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAC,CAyFtE;AAoDD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAHnC,MAGmC,GAFjC,OAAO,CAInB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAH/B,MAG+B,GAF7B,MAAM,GAAC,SAAS,CAW5B;AAkBD;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,IAF/B,MAAM,CAIlB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAHjC,MAGiC,GAF/B,OAAO,CAInB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,AAHxC,CACA,EADQ,MAGgC,GAF9B,MAAM,EAAE,CAOpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,UAAU,EAH9C,MAG8C,GAF5C,MAAM,EAAE,CAapB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,eAAe,EAH7C,MAAM,EAGuC,GAF3C,MAAM,EAAE,CAMpB;AAgCD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,IAFtB,MAAM,CAWlB;AAmHD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EARtC,MAQsC,EAAE,OAAO,AAPvD,CAKA,EAJA;IAA2B,QAAQ,AAAnC,CACA,EADQ,MAAM,EAAE,CAChB;IAA2B,cAAc,AAAzC,CACA,WAAA;IAAyB,cAAc,AAAvC,CACA,EADQ,MAAM,CACd;IAAyB,YAAY,AAArC,CACA,EADQ,MAAM,CACd;CAE4D,GAFlD,MAAM,GAAC,SAAS,CAkD5B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EALvC,MAKuC,EAAE,OAAO,AAJxD,CAEA,EADA;IAAyB,YAAY,AAArC,CACA,EADQ,MAAM,CACd;CAE6D,GAFnD,MAAM,GAAC,SAAS,CAa5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAH5B,MAG4B,GAF1B,OAAO,CAInB;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAH9B,MAG8B,GAF5B,SAAS,GAAC,QAAQ,GAAC,QAAQ,GAAC,SAAS,CAajD;AAeD;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,UAAU,EAF9C,MAE8C,QAKxD;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAHlC,MAGkC,GAFhC,OAAO,CAKnB;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAHpC,MAGoC,GAFlC,OAAO,CASnB;AAYD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAN5B,MAM4B,EAAE,GAAG,EALjC,MAKiC,EAAE,UAAU,EAJ7C,MAI6C,EAAE,OAAO,AAH9D,CACA,EADQ,MAG2D,GAFzD,OAAO,CAmLnB;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EALhC,MAKgC,EAAE,UAAU,EAJ5C,MAI4C,EAAE,OAAO,AAH7D,CACA,EADQ,MAG0D,GAFxD,OAAO,CAInB;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EALjC,MAKiC,EAAE,UAAU,EAJ7C,MAI6C,EAAE,OAAO,AAH9D,CACA,EADQ,MAG2D,GAFzD,OAAO,CAInB;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EALlC,MAKkC,EAAE,UAAU,EAJ9C,MAI8C,EAAE,OAAO,AAH/D,CACA,EADQ,MAG4D,GAF1D,OAAO,CAInB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAJ3B,MAI2B,EAAE,OAAO,AAH5C,CACA,EADQ,MAGyC,GAFvC,MAAM,GAAC,SAAS,CAe5B;AAiFD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EALnC,MAKmC,EAAE,MAAM,AAJnD,CACA,EADQ,MAI2C,EAAE,iBAAiB,AAHtE,CACA,EADQ,MAG8D,GAF5D,MAAM,EAAE,CAoCpB;AAuDD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,KAAA,EACP,YAAY,KAAA,EACZ,aAAa,KAAA,OAsEd;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,AAJzC,CACA,EADQ,MAAM,EAIgC,EAAE,OAAO,AAHvD,CACA,EADQ,MAGoD,GAFlD,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAI/B;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAN9B,MAM8B,EAAE,YAAY,EAL5C,GAAG,CAAC,MAAM,EAAE,MAAM,CAK0B,EAAE,QAAQ,AAJ9D,CACA,EADQ,MAIsD,GAHpD,MAAM,GAAC,SAAS,CAK5B;AAwCD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,8BAA8B,CAAC,SAAS,EAH7C,MAG6C,EAAE,YAAY,EAF3D,MAE2D,QAyBrE;AAED;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAC5C,YAAY,EARH,MAQG,EACZ,UAAU,AART,CACA,EADQ,MAAM,EAQA,EACf,OAAO,AARN,CAGA,EAFA;IAAyB,OAAO,AAAhC,CAEA,EAFQ,MAAM,CAEd;CAKW,GALD,MAAM,CA4ClB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CACtC,YAAY,EARH,MAQG,EACZ,UAAU,AART,CACA,EADQ,MAAM,EAQA,EACf,OAAO,AARN,CAGA,EAFA;IAAyB,OAAO,AAAhC,CAEA,EAFQ,MAAM,CAEd;CAKW,GALD,MAAM,CA8FlB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CACxC,cAAc,EARL,MAQK,EACd,UAAU,AART,CACA,EADQ,MAAM,EAQA,EACf,OAAO,AARN,CAGA,EAFA;IAAyB,OAAO,AAAhC,CAEA,EAFQ,MAAM,CAEd;CAKW,GALD,MAAM,CAwDlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,YAAY,EAJ1C,MAI0C,EAAE,UAAU,AAH9D,CACA,OAEmE,SA6FrE;AAED;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAAC,YAAY,EAJ/C,MAI+C,EAAE,WAAW,AAHpE,CACA,EADQ,MAGiE,GAF/D,MAAM,CAyKlB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAC7C,YAAY,EALH,MAKG,EACZ,WAAW,AALV,CACA,EADQ,MAKO,GAJL,MAAM,CA+GlB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,AAHjD,CACA,EADQ,MAG8C,GAF5C,MAAM,EAAE,CAmDpB"}
@@ -0,0 +1,44 @@
1
+ /**
2
+ * Read the runtime pack a shared framework's deps.json was built from.
3
+ *
4
+ * @param {Object} depsJson parsed <framework>.deps.json
5
+ * @param {string} framework framework directory name
6
+ * @returns {{pack: string, version: string, rid: string}|undefined}
7
+ */
8
+ export declare function runtimePackFromDepsJson(depsJson: Object, framework: string): {
9
+ pack: string;
10
+ version: string;
11
+ rid: string;
12
+ } | undefined;
13
+ /**
14
+ * The CPE NVD uses for a shared framework version: `.net` from 5.0 on,
15
+ * `.net_core` before it, and `asp.net_core` for ASP.NET Core.
16
+ *
17
+ * @param {string} framework framework directory name
18
+ * @param {string} version runtime version
19
+ * @returns {string|undefined} CPE 2.3 string
20
+ */
21
+ export declare function dotnetCpe(framework: string, version: string): string | undefined;
22
+ /**
23
+ * Create the platform component for one installed shared framework.
24
+ *
25
+ * @param {string} framework framework directory name
26
+ * @param {{pack: string, version: string, rid: string}} runtime runtime pack
27
+ * @param {string} location root-relative path of the deps.json
28
+ * @returns {Object|undefined} component, or undefined when no purl can be built
29
+ */
30
+ export declare function createDotnetRuntimeComponent(framework: string, runtime: {
31
+ pack: string;
32
+ version: string;
33
+ rid: string;
34
+ }, location: string): Object | undefined;
35
+ /**
36
+ * Find the .NET shared frameworks installed under a root that no package
37
+ * manager owns, and return one platform component per runtime pack.
38
+ *
39
+ * @param {string} rootDir extracted root file system
40
+ * @param {string[]} [ownedPaths] root-relative paths a package database owns
41
+ * @returns {Object[]} platform components
42
+ */
43
+ export declare function collectDotnetRuntimes(rootDir: string, ownedPaths?: string[]): Object[];
44
+ //# sourceMappingURL=dotnetRuntime.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"dotnetRuntime.d.ts","sourceRoot":"","sources":["../../../lib/inventory/dotnetRuntime.js"],"names":[],"mappings":"AAgEA;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAJrC,MAIqC,EAAE,SAAS,EAHhD,MAGgD,GAF9C;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAC,GAAC,SAAS,CAuBlE;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,SAAS,EAJxB,MAIwB,EAAE,OAAO,EAHjC,MAGiC,GAF/B,MAAM,GAAC,SAAS,CAgB5B;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,SAAS,EAL3C,MAK2C,EAAE,OAAO,EAJpD;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAIS,EAAE,QAAQ,EAH9D,MAG8D,GAF5D,MAAM,GAAC,SAAS,CA4B5B;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAJlC,MAIkC,EAAE,UAAU,AAHtD,CACA,EADQ,MAAM,EAG6C,GAFjD,MAAM,EAAE,CAwDpB"}
@@ -177,16 +177,51 @@ export declare function collectSwiftInfo(dir: string): {
177
177
  version: string;
178
178
  } | undefined;
179
179
  /**
180
- * Collect Ruby version
180
+ * Whether a Ruby executable is one the operating system or a package manager
181
+ * that patches it owns. Distros backport fixes under the old upstream version,
182
+ * so its version must not be matched against upstream advisories by CPE.
183
+ *
184
+ * @param {string|undefined} realPath real path of the executable
185
+ * @returns {boolean}
186
+ */
187
+ export declare function isPackagedRubyPath(realPath: string | undefined): boolean;
188
+ /**
189
+ * Collect the Ruby on the PATH.
190
+ *
191
+ * `ruby --version` prints the interpreter's description, such as
192
+ * `ruby 3.3.6 (2024-11-05 revision 75015d4c1f) [x86_64-linux]`, which is kept
193
+ * as the component description. The identity is `pkg:generic/ruby@3.3.6`
194
+ * (or jruby, truffleruby), with the CPE of the release unless a package
195
+ * manager owns the executable: a distro backports fixes under the old upstream
196
+ * version.
181
197
  *
182
198
  * @param {string} dir Working directory
183
199
  * @returns Object containing Ruby details
184
200
  */
185
- export declare function collectRubyInfo(dir: string): {
186
- type: string;
187
- name: string;
188
- version: string;
189
- } | undefined;
201
+ export declare function collectRubyInfo(dir: string): Object | undefined;
202
+ /**
203
+ * Whether the Ruby collectRubyInfo found is the MRI release a project needs.
204
+ *
205
+ * @param {Object|undefined} info result of collectRubyInfo
206
+ * @param {string} version wanted MRI version
207
+ * @returns {boolean}
208
+ */
209
+ export declare function isRubyVersionActive(info: Object | undefined, version: string): boolean;
210
+ /**
211
+ * Collect the RubyGems version. `gem --version` prints the bare version.
212
+ *
213
+ * @param {string} dir Working directory
214
+ * @returns {Object|undefined} the RubyGems component
215
+ */
216
+ export declare function collectRubyGemsInfo(dir: string): Object | undefined;
217
+ /**
218
+ * Collect the Bundler version. `bundle --version` prints `Bundler version
219
+ * 2.5.22`, or the bare version from Bundler 2.6 on.
220
+ *
221
+ * @param {string} dir Working directory
222
+ * @returns {Object|undefined} the Bundler component
223
+ */
224
+ export declare function collectBundlerInfo(dir: string): Object | undefined;
190
225
  /**
191
226
  * Collect the PHP version of the PHP found on the PATH.
192
227
  *
@@ -381,6 +416,17 @@ export declare function gitAiNotes(dir: string, options?: {
381
416
  * @returns {Array<Object>} Array of { hash, message } revert/hotfix commits
382
417
  */
383
418
  export declare function gitRevertsAndHotfixes(dir: string, maxCount?: number): Array<Object>;
419
+ /**
420
+ * Whether the running Node.js links a bundled dependency as a shared library,
421
+ * from the `node_shared_<name>` configure variables it reports.
422
+ *
423
+ * @param {string} name key of process.versions
424
+ * @param {Object} [variables] configure variables, process.config.variables
425
+ * by default
426
+ * @returns {string|undefined} `shared`, `bundled`, or undefined when the build
427
+ * does not say
428
+ */
429
+ export declare function nodeComponentLinkage(name: string, variables?: Object): string | undefined;
384
430
  /**
385
431
  * Get information about the runtime.
386
432
  *
@@ -1 +1 @@
1
- {"version":3,"file":"envcontext.d.ts","sourceRoot":"","sources":["../../../lib/inventory/envcontext.js"],"names":[],"mappings":"AAyDA;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAFd,MAE4D,CAAC;AAwDvE;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,wBAapC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAL3B,MAK2B,EAAE,GAAG,EAJhC,MAIgC,sBAE1C;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAJrB,MAIqB,sBAE/B;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,UAAU,KAAA,EAAE,GAAG,EAJ9B,MAI8B,sBAExC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAJtB,MAIsB,MAkBhC;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAJlB,MAIkB,SA4B5B;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EALvB,MAKuB,EAAE,IAAI,OAAA,sBAiBvC;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,GAAG,EALtB,MAKsB,EAAE,QAAQ,GAJhC,MAIqC,GAFnC,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,CAAC,CA+BhD;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EALvB,MAKuB,EAAE,QAAQ,GAJjC,MAIsC,GAFpC,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,CAAC,CA8BlD;AA0DD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB;;;;;;;;;cAsBlC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAH1B,MAG0B;;;;;cAgBpC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAH1B,MAG0B;;;;;cAiBpC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB,GAFtB,MAAM,CAkBlB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAHvB,MAGuB;;;;;cAejC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB;;;;;cAelC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAHtB,MAGsB;;;;cAahC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAHzB,MAGyB;;;;cAanC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB;;;;cAalC;AA0BD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAHvB,MAGuB,sBAuBjC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAH5B,MAG4B,sBAkCtC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,QAAA,EAAE,IAAI,OAAA,sBAExC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,GAAG,EALvB,MAKuB,EAAE,OAAO,AAJxC,CAEA,EAFQ,MAI4C,GAF1C,MAAM,EAAE,CAqDpB;AA6CD;;GAEG;AACH,wBAAgB,iBAAiB,YAiBhC;AAED;;GAEG;AACH,wBAAgB,cAAc,YAO7B;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,QAAA,EAAE,QAAQ,QAAA,WA0BvD;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,QAAA,EAAE,QAAQ,QAAA,WA8GnD;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,QAAA,UA8B3C;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,QAAA,UA8B9C;AASD;;;;GAIG;AACH,wBAAgB,gBAAgB,YAgB/B;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAH/B,MAG+B,GAF7B,MAAM,CAWlB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,KAAA,EAAE,aAAa,KAAA,EAAE,QAAQ,KAAA,WAuC3E;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,KAAA,EAAE,QAAQ,KAAA;;;;;;EA2HvD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,KAAA,EAAE,cAAc,KAAA,WA2D7D;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,aAAa,KAAA,EACb,WAAW,KAAA,EACX,aAAa,KAAA,EACb,QAAQ,KAAA,GANG,OAAO,CA+MnB;AAmDD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAJ9B,MAI8B,EAAE,QAAQ,GAHxC,MAG6C,GAF3C,KAAK,CAAC,MAAM,CAAC,CAmDzB;AAyDD;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAJ9B,MAI8B,EAAE,UAAU,EAH1C,MAG0C,GAFxC,MAAM,CA6FlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,GAAG,EANnB,MAMmB,EAAE,OAAO,AALpC,CAGA,EAFA;IAAyB,GAAG,AAA5B,CACA,EADQ,MAAM,CACd;IAAyB,QAAQ,AAAjC,CACA,EADQ,MAAM,CACd;CAEyC,GAF/B,KAAK,CAAC,MAAM,CAAC,CA4CzB;AAMD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAJ9B,MAI8B,EAAE,QAAQ,GAHxC,MAG6C,GAF3C,KAAK,CAAC,MAAM,CAAC,CA+BzB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAFxB,MAAM,CA4GlB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,WAUpC;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,IAF9B,MAAM,GAAC,SAAS,CAc5B"}
1
+ {"version":3,"file":"envcontext.d.ts","sourceRoot":"","sources":["../../../lib/inventory/envcontext.js"],"names":[],"mappings":"AAkEA;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAFd,MAE4D,CAAC;AAwDvE;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,wBAkBpC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAL3B,MAK2B,EAAE,GAAG,EAJhC,MAIgC,sBAE1C;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAJrB,MAIqB,sBAE/B;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,UAAU,KAAA,EAAE,GAAG,EAJ9B,MAI8B,sBAExC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAJtB,MAIsB,MAkBhC;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAJlB,MAIkB,SA4B5B;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EALvB,MAKuB,EAAE,IAAI,OAAA,sBAiBvC;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,GAAG,EALtB,MAKsB,EAAE,QAAQ,GAJhC,MAIqC,GAFnC,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,CAAC,CA+BhD;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EALvB,MAKuB,EAAE,QAAQ,GAJjC,MAIsC,GAFpC,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,CAAC,CA8BlD;AA0DD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB;;;;;;;;;cAsBlC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAH1B,MAG0B;;;;;cAgBpC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAH1B,MAG0B;;;;;cAiBpC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB,GAFtB,MAAM,CA4BlB;AAgCD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAHvB,MAGuB;;;;;cAejC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB;;;;;cAelC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAHtB,MAGsB;;;;cAahC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAHzB,MAGyB;;;;cAanC;AAoCD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAAM,GAAC,SAGyB,GAF9B,OAAO,CAenB;AA+BD;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB,sBA2ClC;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAJ7B,MAAM,GAAC,SAIsB,EAAE,OAAO,EAHtC,MAGsC,GAFpC,OAAO,CAInB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAH5B,MAG4B,GAF1B,MAAM,GAAC,SAAS,CAoB5B;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAH3B,MAG2B,GAFzB,MAAM,GAAC,SAAS,CAyB5B;AA0BD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAHvB,MAGuB,sBAuBjC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAH5B,MAG4B,sBAkCtC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,QAAA,EAAE,IAAI,OAAA,sBAExC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,GAAG,EALvB,MAKuB,EAAE,OAAO,AAJxC,CAEA,EAFQ,MAI4C,GAF1C,MAAM,EAAE,CA6DpB;AA6CD;;GAEG;AACH,wBAAgB,iBAAiB,YAiBhC;AAED;;GAEG;AACH,wBAAgB,cAAc,YAO7B;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,QAAA,EAAE,QAAQ,QAAA,WA0BvD;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,QAAA,EAAE,QAAQ,QAAA,WA8GnD;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,QAAA,UA8B3C;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,QAAA,UA8B9C;AASD;;;;GAIG;AACH,wBAAgB,gBAAgB,YAgB/B;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAH/B,MAG+B,GAF7B,MAAM,CAWlB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,KAAA,EAAE,aAAa,KAAA,EAAE,QAAQ,KAAA,WAuC3E;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,KAAA,EAAE,QAAQ,KAAA;;;;;;EA2HvD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,KAAA,EAAE,cAAc,KAAA,WA2D7D;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,aAAa,KAAA,EACb,WAAW,KAAA,EACX,aAAa,KAAA,EACb,QAAQ,KAAA,GANG,OAAO,CA+MnB;AAmDD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAJ9B,MAI8B,EAAE,QAAQ,GAHxC,MAG6C,GAF3C,KAAK,CAAC,MAAM,CAAC,CAmDzB;AAyDD;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAJ9B,MAI8B,EAAE,UAAU,EAH1C,MAG0C,GAFxC,MAAM,CA6FlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,GAAG,EANnB,MAMmB,EAAE,OAAO,AALpC,CAGA,EAFA;IAAyB,GAAG,AAA5B,CACA,EADQ,MAAM,CACd;IAAyB,QAAQ,AAAjC,CACA,EADQ,MAAM,CACd;CAEyC,GAF/B,KAAK,CAAC,MAAM,CAAC,CA4CzB;AAMD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAJ9B,MAI8B,EAAE,QAAQ,GAHxC,MAG6C,GAF3C,KAAK,CAAC,MAAM,CAAC,CA+BzB;AAUD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAPK,MAOL,EACJ,SAAS,AAPR,CAEA,EAFQ,MAOwC,GALtC,MAAM,GAAC,SAAS,CAa5B;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAFxB,MAAM,CAsHlB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,WAUpC;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,IAF9B,MAAM,GAAC,SAAS,CAc5B"}
@@ -1 +1 @@
1
- {"version":3,"file":"evidenceUtils.d.ts","sourceRoot":"","sources":["../../../lib/inventory/evidenceUtils.js"],"names":[],"mappings":"AA6CA;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAJtC,MAIsC,EAAE,OAAO,AAHvD,CACA,EADQ,MAGoD,GAFlD,MAAM,GAAC,SAAS,CAgB5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,+BAA+B,CAAC,QAAQ,EAJ7C,MAI6C,EAAE,OAAO,AAH9D,CACA,EADQ,MAG2D,GAFzD,MAAM,GAAC,SAAS,CA8B5B;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAHxC,MAGwC,GAFtC,MAAM,CAalB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAJ1B,MAAM,EAAE,GAAC,MAIiB,EAAE,SAAS,UAAA,GAFnC,MAAM,EAAE,CAmDpB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAJjC,MAAM,GAAC,MAAM,EAIoB,EAAE,QAAQ,EAH3C,MAAM,EAGqC,GAFzC,MAAM,GAAC,MAAM,EAAE,CAwB3B;AAsCD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAPjC,MAAM,EAO2B,EAAE,UAAU,EAN7C,MAM6C,EAAE,OAAO,AAL9D,CAGA,EAFA;IAAyB,OAAO,AAAhC,CAEA,EAFQ,MAAM,CAEd;CAEmE,GAFzD,MAAM,EAAE,CAsQpB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EANJ,MAMI,EACb,QAAQ,EANC,MAMD,EACR,OAAO,OAAA,EACP,OAAO,UAAQ,EACf,gBAAgB,YAAY,SAsO7B;AA6ID;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAAM,EAG0B,GAF9B,MAAM,EAAE,CAqCpB;AAgCD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAHlC,MAAM,EAG4B,GAFhC,MAAM,EAAE,CAgEpB"}
1
+ {"version":3,"file":"evidenceUtils.d.ts","sourceRoot":"","sources":["../../../lib/inventory/evidenceUtils.js"],"names":[],"mappings":"AA6CA;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAJtC,MAIsC,EAAE,OAAO,AAHvD,CACA,EADQ,MAGoD,GAFlD,MAAM,GAAC,SAAS,CAgB5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,+BAA+B,CAAC,QAAQ,EAJ7C,MAI6C,EAAE,OAAO,AAH9D,CACA,EADQ,MAG2D,GAFzD,MAAM,GAAC,SAAS,CA8B5B;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAHxC,MAGwC,GAFtC,MAAM,CAalB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAJ1B,MAAM,EAAE,GAAC,MAIiB,EAAE,SAAS,UAAA,GAFnC,MAAM,EAAE,CAmDpB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAJjC,MAAM,GAAC,MAAM,EAIoB,EAAE,QAAQ,EAH3C,MAAM,EAGqC,GAFzC,MAAM,GAAC,MAAM,EAAE,CAwB3B;AAsCD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAPjC,MAAM,EAO2B,EAAE,UAAU,EAN7C,MAM6C,EAAE,OAAO,AAL9D,CAGA,EAFA;IAAyB,OAAO,AAAhC,CAEA,EAFQ,MAAM,CAEd;CAEmE,GAFzD,MAAM,EAAE,CAsQpB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EANJ,MAMI,EACb,QAAQ,EANC,MAMD,EACR,OAAO,OAAA,EACP,OAAO,UAAQ,EACf,gBAAgB,YAAY,SAsO7B;AAgJD;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAAM,EAG0B,GAF9B,MAAM,EAAE,CAqCpB;AAgCD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAHlC,MAAM,EAG4B,GAFhC,MAAM,EAAE,CAgEpB"}
@@ -1 +1 @@
1
- {"version":3,"file":"formulationParsers.d.ts","sourceRoot":"","sources":["../../../lib/inventory/formulationParsers.js"],"names":[],"mappings":"AA0GA;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAF1B;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,WAAU;CAEvB,QAkBpC;AAED;;;;GAIG;AACH,wBAAgB,UAAU,IAFb,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,WAAU;CAAE,CAAC,CAItE;AAgDD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAZnC,MAYmC,EAAE,OAAO,EAX5C,MAW4C,EAAE,OAAO,AAT7D,CAIA,EAJQ,MAS0D,GALxD;IAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAwN7D"}
1
+ {"version":3,"file":"formulationParsers.d.ts","sourceRoot":"","sources":["../../../lib/inventory/formulationParsers.js"],"names":[],"mappings":"AA4GA;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAF1B;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,WAAU;CAEvB,QAkBpC;AAED;;;;GAIG;AACH,wBAAgB,UAAU,IAFb,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,WAAU;CAAE,CAAC,CAItE;AA0DD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAZnC,MAYmC,EAAE,OAAO,EAX5C,MAW4C,EAAE,OAAO,AAT7D,CAIA,EAJQ,MAS0D,GALxD;IAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAwO7D"}
@@ -1 +1 @@
1
- {"version":3,"file":"gtfobins.d.ts","sourceRoot":"","sources":["../../../lib/inventory/gtfobins.js"],"names":[],"mappings":"AAwJA;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAL7B,MAK6B,EAAE,UAAU,AAJjD,CACA,EADQ,MAIyC,GAHvC,MAAM,GAAC,SAAS,CAyC5B;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAJlC,MAIkC,EAAE,UAAU,AAHtD,CACA,EADQ,MAG8C,GAF5C,MAAM,EAAE,CAmCpB;AAED;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAAC,aAAa,EAJlD,MAIkD,EAAE,GAAG,EAHvD,MAGuD,GAFrD,KAAK,CAAC,MAAM,CAAC,CA0FzB"}
1
+ {"version":3,"file":"gtfobins.d.ts","sourceRoot":"","sources":["../../../lib/inventory/gtfobins.js"],"names":[],"mappings":"AAiKA;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAL7B,MAK6B,EAAE,UAAU,AAJjD,CACA,EADQ,MAIyC,GAHvC,MAAM,GAAC,SAAS,CAyC5B;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAJlC,MAIkC,EAAE,UAAU,AAHtD,CACA,EADQ,MAG8C,GAF5C,MAAM,EAAE,CAmCpB;AAED;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAAC,aAAa,EAJlD,MAIkD,EAAE,GAAG,EAHvD,MAGuD,GAFrD,KAAK,CAAC,MAAM,CAAC,CA8FzB"}
@@ -0,0 +1,44 @@
1
+ export declare function listDirectory(directory: any): any;
2
+ export declare function isDirectory(path: any): any;
3
+ /**
4
+ * Look for a runtime no package manager owns, in the directories a spec names.
5
+ * Components come back only for the files nothing owns: a `file` component for
6
+ * each runtime binary or library the spec could read a build from, the
7
+ * components the spec's inventory builds from them, and the edges between them.
8
+ *
9
+ * @param {Object} options probe options, as probeHostPhp documents them
10
+ * @param {Object} spec the runtime: `label`, `ecosystem`, `capability`,
11
+ * `remediationId` (a remediation catalog id, spelled out by the caller),
12
+ * `maxProbes`, `directories(context)`, `classify(name, platform)`,
13
+ * `readBuild(context, candidate)`, `createInventory()`,
14
+ * `attach(inventory, component, build, candidate)`, `finish(inventory)`,
15
+ * optional `chocolateyPackages` and `chocolateyDirectories(context)` (where
16
+ * those packages unpack outside Chocolatey's folder), and `hooks` carrying
17
+ * the caller's
18
+ * `isDryRun`, `readEnvironmentVariable`, `recordActivity` and
19
+ * `recordDegradation`
20
+ * @returns {{components: Object[], dependencies: Object[]}}
21
+ */
22
+ export declare function probeHostRuntime(options: Object, spec: Object): {
23
+ components: Object[];
24
+ dependencies: Object[];
25
+ };
26
+ /**
27
+ * Ask the package databases of a POSIX host which package owns each path.
28
+ * The paths are named as the host names them (`/usr/lib/ruby/...`). A
29
+ * database that exists but cannot be read is reported, so the caller can tell
30
+ * "no owner" from "unknown".
31
+ *
32
+ * @param {Object} options probe options, as probeHostRuntime takes them
33
+ * @param {string[]} paths logical paths to look up
34
+ * @returns {{owners: Map<string, {database: string, packageName: string}>,
35
+ * unreadable: string[]}}
36
+ */
37
+ export declare function findHostPathOwners(options: Object, paths: string[]): {
38
+ owners: Map<string, {
39
+ database: string;
40
+ packageName: string;
41
+ }>;
42
+ unreadable: string[];
43
+ };
44
+ //# sourceMappingURL=hostRuntimeProbe.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"hostRuntimeProbe.d.ts","sourceRoot":"","sources":["../../../lib/inventory/hostRuntimeProbe.js"],"names":[],"mappings":"AAmDA,wBAAgB,aAAa,CAAC,SAAS,KAAA,OAMtC;AAED,wBAAgB,WAAW,CAAC,IAAI,KAAA,OAM/B;AAgeD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAb7B,MAa6B,EAAE,IAAI,EAZnC,MAYmC,GAFjC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAC,CA2D1D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAL/B,MAK+B,EAAE,KAAK,EAJtC,MAAM,EAIgC,GAHpC;IAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC;IACtE,UAAU,EAAE,MAAM,EAAE,CAAA;CAAC,CAqDzB"}
@@ -126,6 +126,18 @@ export declare function determineRequiredJavaVersion(toolPins: Array<{
126
126
  * @returns {string|undefined} Minimum Gradle version, when capped.
127
127
  */
128
128
  export declare function minimumGradleVersionForJava(javaMajor: number): string | undefined;
129
+ /**
130
+ * Pick the newest stable Gradle version from `sdk list` output that can run on
131
+ * the given JDK major. Without a known cap this is the newest stable version,
132
+ * matching the plain default install; with a cap, versions below it are
133
+ * skipped so a project that declared a new JDK never gets a Gradle that
134
+ * refuses to run on it, even when the sdkman list is stale.
135
+ *
136
+ * @param {string} stdout Raw `sdk list gradle` output
137
+ * @param {number|undefined} javaMajor JDK major the Gradle daemon must run on
138
+ * @returns {string|undefined} Best matching version identifier.
139
+ */
140
+ export declare function resolveGradleVersionForJava(stdout: string, javaMajor: number | undefined): string | undefined;
129
141
  /**
130
142
  * Collect the version tokens printed by `sdk list <candidate>`. The output is
131
143
  * a fixed-width table whose cells may carry `+`, `*`, or `>` status markers;
@@ -1 +1 @@
1
- {"version":3,"file":"jvmToolEnv.d.ts","sourceRoot":"","sources":["../../../lib/inventory/jvmToolEnv.js"],"names":[],"mappings":"AAMA,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAE/B;;;;;GAKG;AACH,OAAO,EACL,eAAe,IAAI,qBAAqB,EACxC,gBAAgB,EAChB,mBAAmB,GACpB,CAAC;AAuBF;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAHjC,MAGiC,GAF/B,OAAO,CASnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EALxC,MAKwC,GAJtC,MAAM,GAAC,SAAS,CAmB5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAJ3B,MAI2B,GAHzB,MAAM,GAAC,SAAS,CA4C5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAJtC,MAIsC,GAHpC,MAAM,GAAC,SAAS,CAwC5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAJrC,MAIqC,GAHnC,MAAM,GAAC,SAAS,CAgC5B;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAAC,WAAW,EAH9C,MAG8C,GAF5C,MAAM,GAAC,SAAS,CAkB5B;AAsDD;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,iDAKjC,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,wBAM5B,CAAC;AAEF,iEAAiE;AACjE,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAJlC,MAIkC,EAAE,OAAO,EAH3C,MAG2C,GAFzC,MAAM,GAAC,SAAS,CAY5B;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EAH1C,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,CAGK,GAFxC,MAAM,GAAC,SAAS,CAc5B;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAH1C,MAG0C,GAFxC,MAAM,GAAC,SAAS,CAI5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAHlC,MAGkC,GAFhC,MAAM,EAAE,CAgBpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAJjC,MAIiC,EAAE,MAAM,EAHzC,MAGyC,GAFvC,MAAM,GAAC,SAAS,CAwB5B;AAED;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,wBAKtC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,wBAKtC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAHjC,MAGiC,GAF/B,MAAM,GAAC,SAAS,CAS5B;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAHhC,MAGgC,GAF9B,MAAM,GAAC,SAAS,CAS5B;AASD;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAHvC,MAGuC,GAFrC,MAAM,GAAC,SAAS,CAuB5B"}
1
+ {"version":3,"file":"jvmToolEnv.d.ts","sourceRoot":"","sources":["../../../lib/inventory/jvmToolEnv.js"],"names":[],"mappings":"AAMA,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAE/B;;;;;GAKG;AACH,OAAO,EACL,eAAe,IAAI,qBAAqB,EACxC,gBAAgB,EAChB,mBAAmB,GACpB,CAAC;AAuBF;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAHjC,MAGiC,GAF/B,OAAO,CASnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EALxC,MAKwC,GAJtC,MAAM,GAAC,SAAS,CAmB5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAJ3B,MAI2B,GAHzB,MAAM,GAAC,SAAS,CA4C5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAJtC,MAIsC,GAHpC,MAAM,GAAC,SAAS,CAwC5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAJrC,MAIqC,GAHnC,MAAM,GAAC,SAAS,CAgC5B;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAAC,WAAW,EAH9C,MAG8C,GAF5C,MAAM,GAAC,SAAS,CAkB5B;AAsDD;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,iDAKjC,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,wBAO5B,CAAC;AAEF,iEAAiE;AACjE,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAJlC,MAIkC,EAAE,OAAO,EAH3C,MAG2C,GAFzC,MAAM,GAAC,SAAS,CAY5B;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EAH1C,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,CAGK,GAFxC,MAAM,GAAC,SAAS,CAc5B;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAH1C,MAG0C,GAFxC,MAAM,GAAC,SAAS,CAI5B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAJvC,MAIuC,EAAE,SAAS,EAHlD,MAAM,GAAC,SAG2C,GAFhD,MAAM,GAAC,SAAS,CAiB5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAHlC,MAGkC,GAFhC,MAAM,EAAE,CAgBpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAJjC,MAIiC,EAAE,MAAM,EAHzC,MAGyC,GAFvC,MAAM,GAAC,SAAS,CAwB5B;AAED;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,wBAKtC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,wBAKtC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAHjC,MAGiC,GAF/B,MAAM,GAAC,SAAS,CAS5B;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAHhC,MAGgC,GAF9B,MAAM,GAAC,SAAS,CAS5B;AASD;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAHvC,MAGuC,GAFrC,MAAM,GAAC,SAAS,CAuB5B"}
@@ -1 +1 @@
1
- {"version":3,"file":"licenseEnhancer.d.ts","sourceRoot":"","sources":["../../../lib/inventory/licenseEnhancer.js"],"names":[],"mappings":"AAOA,OAAO,EAIL,mBAAmB,EAIpB,MAAM,qBAAqB,CAAC;AAkF7B;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAH1B,MAG0B,GAFxB,MAAM,GAAC,IAAI,CAavB;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAE/B;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAJzB,MAIyB,EAAE,IAAI,GAH/B,MAGoC,GAFlC,MAAM,GAAC,IAAI,CAwFvB;AAgBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAH/B,MAG+B,GAF7B,MAAM,CA8BlB;AA0DD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAJ7B,MAAM,GAAC,MAIsB,EAAE,IAAI,GAHnC,MAGwC,GAFtC,MAAM,CAqFlB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAJvC,MAIuC,EAAE,IAAI,GAH7C,MAGkD,GAFhD,MAAM,CA4ClB;AAoGD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,EALzC,MAKyC,EAAE,MAAM,EAJjD,MAIiD,EAAE,KAAK,KAAK,GAF3D,MAAM,CAyElB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAJnB,MAImB,EAAE,IAAI,GAHzB,MAG8B,GAF5B,MAAM,CAgDlB;AA4KD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EALhC,MAKgC,EAAE,MAAM,EAJxC,MAIwC,EAAE,IAAI,AAHtD,CACA,EADQ,MAGmD,GAFjD,MAAM,EAAE,CA0CpB"}
1
+ {"version":3,"file":"licenseEnhancer.d.ts","sourceRoot":"","sources":["../../../lib/inventory/licenseEnhancer.js"],"names":[],"mappings":"AAOA,OAAO,EAIL,mBAAmB,EAIpB,MAAM,qBAAqB,CAAC;AAkF7B;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAH1B,MAG0B,GAFxB,MAAM,GAAC,IAAI,CAavB;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAE/B;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAJzB,MAIyB,EAAE,IAAI,GAH/B,MAGoC,GAFlC,MAAM,GAAC,IAAI,CAoGvB;AAgBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAH/B,MAG+B,GAF7B,MAAM,CA8BlB;AA0DD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAJ7B,MAAM,GAAC,MAIsB,EAAE,IAAI,GAHnC,MAGwC,GAFtC,MAAM,CAqFlB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAJvC,MAIuC,EAAE,IAAI,GAH7C,MAGkD,GAFhD,MAAM,CA4ClB;AAoGD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,EALzC,MAKyC,EAAE,MAAM,EAJjD,MAIiD,EAAE,KAAK,KAAK,GAF3D,MAAM,CAyElB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAJnB,MAImB,EAAE,IAAI,GAHzB,MAG8B,GAF5B,MAAM,CAgDlB;AA4KD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EALhC,MAKgC,EAAE,MAAM,EAJxC,MAIwC,EAAE,IAAI,AAHtD,CACA,EADQ,MAGmD,GAFjD,MAAM,EAAE,CA0CpB"}
@@ -0,0 +1,170 @@
1
+ /**
2
+ * Opt-in switch that points every Maven Central consumer at Google's public
3
+ * mirror: cdxgen's own POM, licence and metadata lookups, and every JVM build
4
+ * tool cdxgen runs (Maven and its wrapper, Gradle, sbt, Mill, Bazel and the
5
+ * Clojure tools). The value selects the mirror:
6
+ *
7
+ * `true`/`google` the global mirror bucket
8
+ * `eu` the Europe bucket
9
+ * `asia` the Asia bucket
10
+ * `http(s)://...` any other mirror or repository manager of Maven Central
11
+ *
12
+ * An explicit `MAVEN_CENTRAL_URL` still wins for cdxgen's own lookups, and a
13
+ * repository the user or the project already configures is never replaced:
14
+ * only the default Maven Central URLs are moved. Nothing is written to the
15
+ * scanned project or the user's home directory; the injection goes through
16
+ * command-line arguments and environment variables, and any settings or init
17
+ * script it needs is written under cdxgen's temp directory and removed again.
18
+ */
19
+ export declare const MAVEN_CENTRAL_MIRROR_VAR = "MAVEN_CENTRAL_MIRROR";
20
+ /**
21
+ * Google's public Maven Central mirror buckets, named by region.
22
+ *
23
+ * @type {Object<string, string>}
24
+ */
25
+ export declare const MAVEN_CENTRAL_MIRROR_URLS: Record<string, string>;
26
+ /**
27
+ * The default Maven Central repository URLs that the mirror replaces, for
28
+ * tools that name repositories by URL.
29
+ *
30
+ * @type {string[]}
31
+ */
32
+ export declare const MAVEN_CENTRAL_DEFAULT_URLS: string[];
33
+ /**
34
+ * Read the mirror switch. Undefined when cdxgen should use Maven Central
35
+ * itself, the mirror URL otherwise.
36
+ *
37
+ * @returns {string|undefined} Mirror base URL with a trailing slash
38
+ */
39
+ export declare function mavenCentralMirrorUrl(): string | undefined;
40
+ /**
41
+ * Whether the mirror switch is on. Names and URLs that do not resolve to a
42
+ * mirror leave it off, so a typo never silently redirects builds.
43
+ *
44
+ * @returns {boolean}
45
+ */
46
+ export declare function isMavenCentralMirrorEnabled(): boolean;
47
+ /**
48
+ * The repository cdxgen's own POM, licence and metadata lookups should fetch
49
+ * from. An explicit `MAVEN_CENTRAL_URL` is a deliberate choice, often a
50
+ * repository manager holding private artefacts, so it keeps winning over the
51
+ * mirror.
52
+ *
53
+ * @returns {string|undefined} Mirror URL, or undefined to keep the existing
54
+ * `MAVEN_CENTRAL_URL` behaviour
55
+ */
56
+ export declare function mavenCentralFetchUrl(): string | undefined;
57
+ /**
58
+ * Insert the mirror into the content of a settings file that is passed to
59
+ * Maven anyway, keeping every other element as it is. The mirror is appended
60
+ * to the existing ones, so the file's own mirror of Central still wins.
61
+ *
62
+ * @param {string} content Existing settings.xml content
63
+ * @param {string} mirrorUrl Mirror base URL
64
+ * @returns {string|undefined} Merged content, or undefined when the file
65
+ * holds no recognisable settings element to merge into
66
+ */
67
+ export declare function mergeMavenMirrorSettings(content: string, mirrorUrl: string): string | undefined;
68
+ /**
69
+ * Extra Maven arguments that send Central to the mirror, written as a global
70
+ * settings file under cdxgen's temp directory. An existing `-gs` settings
71
+ * file named by the caller is merged with the mirror instead, so a project
72
+ * that ships its own settings.xml keeps its repositories and its own mirror.
73
+ * A settings file the user named themselves (in `MVN_ARGS`/`MAVEN_ARGS`) is
74
+ * never touched, and neither is secure mode.
75
+ *
76
+ * @param {string} [existingSettingsFile] Settings file the caller already
77
+ * passes to Maven
78
+ * @returns {string[]} Arguments to append to the Maven command line
79
+ */
80
+ export declare function mavenMirrorSettingsArgs(existingSettingsFile?: string): string[];
81
+ /**
82
+ * Environment for a Maven or Maven wrapper invocation that moves the
83
+ * wrapper's own distribution download off Maven Central. Plain `mvn`
84
+ * invocations ignore it.
85
+ *
86
+ * @returns {Object} Environment variables to add to the child process
87
+ */
88
+ export declare function mavenWrapperMirrorEnv(): Object;
89
+ /**
90
+ * A Gradle init script that rewrites Maven Central repository URLs to the
91
+ * mirror as the settings and every project declare them. Repositories that are
92
+ * not Maven Central keep their URL, so private repositories and declared
93
+ * mirrors are untouched.
94
+ *
95
+ * @param {string} mirrorUrl Mirror base URL
96
+ * @returns {string}
97
+ */
98
+ export declare function gradleMirrorInitScript(mirrorUrl: string): string;
99
+ /**
100
+ * Extra Gradle arguments that install the mirror init script. Gradle applies
101
+ * every init script it is given, so cdxgen's own helper script keeps working.
102
+ *
103
+ * @returns {string[]} Arguments to append to the Gradle command line
104
+ */
105
+ export declare function gradleMirrorInitScriptArgs(): string[];
106
+ /**
107
+ * An sbt launcher repositories file that resolves Maven Central from the
108
+ * mirror. The launcher replaces its default list with this file, so the
109
+ * plugin and Typesafe repositories it must still reach are named here, and
110
+ * only the Central entry points at the mirror.
111
+ *
112
+ * @param {string} mirrorUrl Mirror base URL
113
+ * @returns {string}
114
+ */
115
+ export declare function sbtRepositoriesFile(mirrorUrl: string): string;
116
+ /**
117
+ * Environment for an sbt invocation that resolves Maven Central from the
118
+ * mirror: a repositories file under cdxgen's temp directory, named through
119
+ * `SBT_OPTS`. A user who already configures repositories (`~/.sbt/repositories`
120
+ * or their own `sbt.repository.config`) keeps their configuration, and the
121
+ * mirror stays out of the way.
122
+ *
123
+ * @returns {Object} Environment variables to add to the child process
124
+ */
125
+ export declare function sbtMirrorEnv(): Object;
126
+ /**
127
+ * Environment for tools that resolve through the Coursier CLI.
128
+ *
129
+ * @returns {Object} Environment variables to add to the child process
130
+ */
131
+ export declare function coursierMirrorEnv(): Object;
132
+ /**
133
+ * Extra Bazel build arguments that hand the mirror to repository rules, whose
134
+ * environment Bazel otherwise keeps isolated from the client's. Repositories
135
+ * whose URLs the project pins, as rules_jvm_external projects do, are not
136
+ * changed by this; it covers the ones that resolve through Coursier defaults.
137
+ *
138
+ * @returns {string[]} Arguments to append to the Bazel build command line
139
+ */
140
+ export declare function bazelMirrorArgs(): string[];
141
+ /**
142
+ * The `-Sdeps` data that repoints the default `central` repository of the
143
+ * Clojure CLI at the mirror. Repositories merge by name, so a project's other
144
+ * repositories, including Clojars, keep resolving as declared.
145
+ *
146
+ * @param {string} mirrorUrl Mirror base URL
147
+ * @returns {string}
148
+ */
149
+ export declare function clojureMirrorSdeps(mirrorUrl: string): string;
150
+ /**
151
+ * Extra arguments for a Clojure CLI invocation. Skipped when the user already
152
+ * passes `-Sdeps`, whose data would otherwise be replaced.
153
+ *
154
+ * @param {string[]} baseArgs Arguments the caller already assembled
155
+ * @returns {string[]} Arguments to append
156
+ */
157
+ export declare function clojureMirrorArgs(baseArgs?: string[]): string[];
158
+ /**
159
+ * Arguments for a Leiningen invocation that repoint its `central` repository
160
+ * at the mirror, through `lein update-in`, which changes the project map in
161
+ * memory and never the project.clj file. Skipped when the project declares
162
+ * its own `:mirrors`, which must keep winning.
163
+ *
164
+ * @param {string[]} baseArgs Arguments the caller already assembled
165
+ * @param {string} [projectFileContent] The project's project.clj, when the
166
+ * caller has it at hand
167
+ * @returns {string[]} Full argument list to invoke Leiningen with
168
+ */
169
+ export declare function leiningenMirrorArgs(baseArgs: string[], projectFileContent?: string): string[];
170
+ //# sourceMappingURL=mavenCentralMirror.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"mavenCentralMirror.d.ts","sourceRoot":"","sources":["../../../lib/inventory/mavenCentralMirror.js"],"names":[],"mappings":"AAeA;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,wBAAwB,yBAAyB,CAAC;AAE/D;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,wBAIrC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAF7B,MAAM,EAKf,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,qBAAqB,IAFxB,MAAM,GAAC,SAAS,CAuB5B;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,IAF9B,OAAO,CAInB;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,IAHvB,MAAM,GAAC,SAAS,CAW5B;AAkFD;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EALrC,MAKqC,EAAE,SAAS,EAJhD,MAIgD,GAH9C,MAAM,GAAC,SAAS,CAuB5B;AAoBD;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CAAC,oBAAoB,AAJzD,CAEA,EAFQ,MAIiD,GAF/C,MAAM,EAAE,CAyBpB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,IAFxB,MAAM,CAUlB;AAMD;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAHrC,MAGqC,GAFnC,MAAM,CAmClB;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,IAF7B,MAAM,EAAE,CAapB;AAMD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAHlC,MAGkC,GAFhC,MAAM,CASlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,IAFf,MAAM,CA0BlB;AAQD;;;;GAIG;AACH,wBAAgB,iBAAiB,IAFpB,MAAM,CAYlB;AAMD;;;;;;;GAOG;AACH,wBAAgB,eAAe,IAFlB,MAAM,EAAE,CAWpB;AAMD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAHjC,MAGiC,GAF/B,MAAM,CAIlB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,GAH/B,MAAM,EAG8B,GAFlC,MAAM,EAAE,CAWpB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EALjC,MAAM,EAK2B,EAAE,kBAAkB,AAJ7D,CAEA,EAFQ,MAIqD,GAFnD,MAAM,EAAE,CAgBpB"}
@@ -0,0 +1,95 @@
1
+ /**
2
+ * The most node-named files one scan opens in search of a build version.
3
+ *
4
+ * @type {number}
5
+ */
6
+ export declare const MAX_NODE_PROBES: number;
7
+ /**
8
+ * Whether a file name is one the Node.js runtime is installed under.
9
+ *
10
+ * @param {string} fileName basename or path of the candidate
11
+ * @returns {boolean} true for `node`, `nodejs` and `node.exe`
12
+ */
13
+ export declare function isNodeBinaryName(fileName: string): boolean;
14
+ /**
15
+ * Parse a Node.js version in the grammar the release tooling produces:
16
+ * `24.22.1`, `25.0.0-rc.1`, `26.0.0-nightly20260301abcdef`.
17
+ *
18
+ * @param {string} text candidate version, without the leading `v`
19
+ * @returns {string|undefined} the version, or undefined
20
+ */
21
+ export declare function parseNodeVersion(text: string): string | undefined;
22
+ /**
23
+ * Read the Node.js version a `node` binary was built as.
24
+ *
25
+ * @param {string} absPath absolute path of the binary
26
+ * @param {string|undefined} rootDir extracted root, when the file came from one
27
+ * @returns {{version: string, source: string, channel?: string}|undefined}
28
+ * source is `release-url` or `binary`
29
+ */
30
+ export declare function readNodeBuildVersion(absPath: string, rootDir: string | undefined): {
31
+ version: string;
32
+ source: string;
33
+ channel?: string;
34
+ } | undefined;
35
+ /**
36
+ * The CPE that lets a downstream scanner match a Node.js version. NVD names the
37
+ * product node.js and keeps a pre-release in the update field.
38
+ *
39
+ * @param {string} version Node.js version
40
+ * @returns {string} CPE 2.3 string
41
+ */
42
+ export declare function nodeCpe(version: string): string;
43
+ /**
44
+ * A Node.js runtime is one `platform` component per distinct version, like the
45
+ * PHP and Go stdlib components. Its identity is `pkg:generic/node`: it is only
46
+ * used where no package manager owns the runtime.
47
+ *
48
+ * @param {string} version Node.js version
49
+ * @returns {Object} component with `purl`, `bom-ref` and `cpe`
50
+ */
51
+ export declare function createNodeRuntimeComponent(version: string): Object;
52
+ /**
53
+ * The properties a node file component carries once its build is known.
54
+ *
55
+ * @param {{version: string, source: string, channel?: string}} build result of readNodeBuildVersion
56
+ * @returns {{name: string, value: string}[]} properties to append
57
+ */
58
+ export declare function nodeBuildProperties(build: {
59
+ version: string;
60
+ source: string;
61
+ channel?: string;
62
+ }): {
63
+ name: string;
64
+ value: string;
65
+ }[];
66
+ /**
67
+ * Start collecting the runtime components and edges of one scan.
68
+ *
69
+ * @returns {{runtimeComponents: Object[], dependencies: Object[], runtimeRefs: Set<string>}}
70
+ */
71
+ export declare function createNodeRuntimeInventory(): {
72
+ runtimeComponents: Object[];
73
+ dependencies: Object[];
74
+ runtimeRefs: Set<string>;
75
+ };
76
+ /**
77
+ * Tag a node file component with its build facts and link it to the runtime
78
+ * component of its version, creating that component on first use. Mutates the
79
+ * component in place.
80
+ *
81
+ * @param {{runtimeComponents: Object[], dependencies: Object[], runtimeRefs: Set<string>}} inventory
82
+ * accumulator from createNodeRuntimeInventory
83
+ * @param {Object} component file component, with a `properties` array
84
+ * @param {{version: string, source: string, channel?: string}} build result of readNodeBuildVersion
85
+ */
86
+ export declare function attachNodeBuild(inventory: {
87
+ runtimeComponents: Object[];
88
+ dependencies: Object[];
89
+ runtimeRefs: Set<string>;
90
+ }, component: Object, build: {
91
+ version: string;
92
+ source: string;
93
+ channel?: string;
94
+ }): void;
95
+ //# sourceMappingURL=nodeBuildInfo.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"nodeBuildInfo.d.ts","sourceRoot":"","sources":["../../../lib/inventory/nodeBuildInfo.js"],"names":[],"mappings":"AAgCA;;;;GAIG;AACH,eAAO,MAAM,eAAe,EAFlB,MAEuB,CAAC;AAElC;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAH9B,MAG8B,GAF5B,OAAO,CAQnB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAH1B,MAG0B,GAFxB,MAAM,GAAC,SAAS,CAO5B;AA6BD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EALjC,MAKiC,EAAE,OAAO,EAJ1C,MAAM,GAAC,SAImC,GAHxC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAC,GAAC,SAAS,CA+BzE;AAED;;;;;;GAMG;AACH,wBAAgB,OAAO,CAAC,OAAO,EAHpB,MAGoB,GAFlB,MAAM,CASlB;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAHvC,MAGuC,GAFrC,MAAM,CAOlB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAH9B;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAGpB,GAF5B;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,EAAE,CAW3C;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,IAF7B;IAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAAC,CAI3F;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAL9B;IAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAKhD,EAAE,SAAS,EAHzC,MAGyC,EAAE,KAAK,EAFhD;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAEF,QAkB1D"}
@@ -0,0 +1,15 @@
1
+ /**
2
+ * Look for Node.js no package manager owns on the host. Components come back
3
+ * only for the files nothing owns: a `file` component for each `node` binary
4
+ * with the cdx:node and cdx:brotli properties, one `platform` component per
5
+ * Node.js version with its CPE, and the brotli component when a binary embeds
6
+ * a decoder.
7
+ *
8
+ * @param {Object} [options] probe options, as probeHostPhp takes them
9
+ * @returns {{components: Object[], dependencies: Object[]}}
10
+ */
11
+ export declare function probeHostNode(options?: Object): {
12
+ components: Object[];
13
+ dependencies: Object[];
14
+ };
15
+ //# sourceMappingURL=nodeHostProbe.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"nodeHostProbe.d.ts","sourceRoot":"","sources":["../../../lib/inventory/nodeHostProbe.js"],"names":[],"mappings":"AA2JA;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,OAAO,AAHlC,CACA,EADQ,MAG+B,GAF7B;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAC,CAsC1D"}
@@ -50,4 +50,42 @@ export declare function collectExecutables(basePath: any, binPaths: any, exclude
50
50
  * @return {Array[String]} List of executables
51
51
  */
52
52
  export declare function collectSharedLibs(basePath: any, libPaths: any, ldConf: string, ldConfDirPattern: string, excludePaths?: any, extraLibGlobs?: any): any;
53
+ /**
54
+ * The most native extension candidates one scan returns.
55
+ *
56
+ * @type {number}
57
+ */
58
+ export declare const MAX_NATIVE_EXTENSIONS: number;
59
+ /**
60
+ * Collect native extension modules under a root file system that the library
61
+ * collector does not see, leaving out paths a package database owns and paths
62
+ * already collected. Symlinks are not followed, so a link pointing out of the
63
+ * root is never listed.
64
+ *
65
+ * @param {string} basePath extracted root file system
66
+ * @param {string[]} [excludePaths] root-relative paths to leave out
67
+ * @returns {string[]} root-relative paths, sorted, capped at MAX_NATIVE_EXTENSIONS
68
+ */
69
+ export declare function collectNativeExtensions(basePath: string, excludePaths?: string[]): string[];
70
+ /**
71
+ * Mark language packages that an OS package installed. Alpine's py3-brotli
72
+ * ships a Brotli-1.1.0.dist-info that a Python scan reports as
73
+ * pkg:pypi/brotli@1.1.0, but a distro fixes it by backporting under the same
74
+ * upstream version, so a PyPI advisory range keeps matching after the fix. The
75
+ * `cdx:os:installedBy` property names the OS package that owns the
76
+ * installation record, so a consumer can judge the component by that package
77
+ * instead.
78
+ *
79
+ * A component is marked only when every installation record it was read from
80
+ * belongs to an OS package: a copy that pip put in a virtual environment
81
+ * beside the distro's is not the distro's to fix. Run it after duplicates
82
+ * merge, so that a merged component carries all of its records.
83
+ *
84
+ * @param {Object[]} components BOM components, mutated in place
85
+ * @param {Map<string, string>|undefined} ownerByPath root-relative file path to
86
+ * owning OS package bom-ref
87
+ * @param {string} [rootDir] extracted root, stripped from absolute source paths
88
+ * @returns {number} how many components were marked
89
+ */
90
+ export declare function markOsInstalledLanguagePackages(components: Object[], ownerByPath: Map<string, string> | undefined, rootDir?: string): number;
53
91
  //# sourceMappingURL=osPackageResolver.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"osPackageResolver.d.ts","sourceRoot":"","sources":["../../../lib/inventory/osPackageResolver.js"],"names":[],"mappings":"AAwBA;;GAEG;AACH,wBAAgB,iBAAiB,SAGhC;AAsDD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAHnC,MAGmC,GAFjC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CA8BnH;AAuGD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAJ9B,MAI8B,EAAE,UAAU,EAH1C,MAAM,EAGoC,GAFxC,MAAM,GAAC,SAAS,CA+B5B;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,KAAA,EAAE,QAAQ,KAAA,EAAE,YAAY,MAAK,OAqEvE;AAcD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,KAAA,EACR,QAAQ,KAAA,EACR,MAAM,QAAA,EACN,gBAAgB,QAAA,EAChB,YAAY,MAAK,EACjB,aAAa,MAAK,OAiGnB"}
1
+ {"version":3,"file":"osPackageResolver.d.ts","sourceRoot":"","sources":["../../../lib/inventory/osPackageResolver.js"],"names":[],"mappings":"AAwBA;;GAEG;AACH,wBAAgB,iBAAiB,SAGhC;AAsDD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAHnC,MAGmC,GAFjC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CA8BnH;AAuGD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAJ9B,MAI8B,EAAE,UAAU,EAH1C,MAAM,EAGoC,GAFxC,MAAM,GAAC,SAAS,CA+B5B;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,KAAA,EAAE,QAAQ,KAAA,EAAE,YAAY,MAAK,OAqEvE;AAcD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,KAAA,EACR,QAAQ,KAAA,EACR,MAAM,QAAA,EACN,gBAAgB,QAAA,EAChB,YAAY,MAAK,EACjB,aAAa,MAAK,OAiGnB;AAkDD;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,EAFxB,MAE+B,CAAC;AAE1C;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAJrC,MAIqC,EAAE,YAAY,AAH3D,CACA,EADQ,MAAM,EAGkD,GAFtD,MAAM,EAAE,CA8BpB;AAqCD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,+BAA+B,CAC7C,UAAU,EAPD,MAAM,EAOL,EACV,WAAW,EAPF,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAC,SAOlB,EACX,OAAO,AANN,CACA,EADQ,MAMF,GALI,MAAM,CAyDlB"}
@@ -1 +1 @@
1
- {"version":3,"file":"phpBuildInfo.d.ts","sourceRoot":"","sources":["../../../lib/inventory/phpBuildInfo.js"],"names":[],"mappings":"AA8CA;;;;GAIG;AACH,eAAO,MAAM,cAAc,EAFjB,MAEsB,CAAC;AAUjC;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAJzB,MAIyB,GAHvB,MAAM,GAAC,SAAS,CAc5B;AAQD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAJjC,MAIiC,GAH/B;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,OAAO,CAAA;CAAC,GAAC,SAAS,CAkBhE;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAH5B,MAG4B,GAF1B,MAAM,GAAC,SAAS,CAuB5B;AAoBD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAH7B,MAG6B,GAF3B,MAAM,GAAC,SAAS,CAa5B;AA6JD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EALhC,MAKgC,EAAE,OAAO,EAJzC,MAAM,GAAC,SAIkC,GAHvC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,GAAC,SAAS,CAwBvD;AAED;;;;;;;GAOG;AACH,wBAAgB,MAAM,CAAC,OAAO,EAHnB,MAGmB,GAFjB,MAAM,CAgBlB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAPtC,MAOsC,EAAE,EAAE,OAAc,EAAE,AALlE,CAGA,EAFA;IAA0B,OAAO,AAAjC,CAEA,EAFQ,OAAO,CAEf;CAEuE,GAF7D,MAAM,CAWlB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAH1B,MAG0B,GAFxB,MAAM,CAIlB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAJ7B;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAIH,EAAE,IAAI,EAHnC,MAGmC,GAFjC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,EAAE,CAQ3C;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,IAF5B;IAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAAC,CAI3F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAN7B;IAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAMjD,EAAE,SAAS,EAJxC,MAIwC,EAAE,KAAK,EAH/C;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAGe,EAAE,IAAI,EAFrD,MAEqD,QAe/D"}
1
+ {"version":3,"file":"phpBuildInfo.d.ts","sourceRoot":"","sources":["../../../lib/inventory/phpBuildInfo.js"],"names":[],"mappings":"AAwCA;;;;GAIG;AACH,eAAO,MAAM,cAAc,EAFjB,MAEsB,CAAC;AAUjC;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAJzB,MAIyB,GAHvB,MAAM,GAAC,SAAS,CAc5B;AAQD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAJjC,MAIiC,GAH/B;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,OAAO,CAAA;CAAC,GAAC,SAAS,CAkBhE;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAH5B,MAG4B,GAF1B,MAAM,GAAC,SAAS,CAuB5B;AAoBD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAH7B,MAG6B,GAF3B,MAAM,GAAC,SAAS,CAa5B;AAkHD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EALhC,MAKgC,EAAE,OAAO,EAJzC,MAAM,GAAC,SAIkC,GAHvC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,GAAC,SAAS,CAwBvD;AAED;;;;;;;GAOG;AACH,wBAAgB,MAAM,CAAC,OAAO,EAHnB,MAGmB,GAFjB,MAAM,CAgBlB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAPtC,MAOsC,EAAE,EAAE,OAAc,EAAE,AALlE,CAGA,EAFA;IAA0B,OAAO,AAAjC,CAEA,EAFQ,OAAO,CAEf;CAEuE,GAF7D,MAAM,CAWlB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAH1B,MAG0B,GAFxB,MAAM,CAIlB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAJ7B;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAIH,EAAE,IAAI,EAHnC,MAGmC,GAFjC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,EAAE,CAQ3C;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,IAF5B;IAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAAC,CAI3F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAN7B;IAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAMjD,EAAE,SAAS,EAJxC,MAIwC,EAAE,KAAK,EAH/C;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAGe,EAAE,IAAI,EAFrD,MAEqD,QAe/D"}