@cdxgen/cdxgen 13.5.0 → 13.7.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +17 -10
- package/bin/audit.js +7 -4
- package/bin/cdxgen.js +260 -37
- package/bin/convert.js +146 -22
- package/bin/evinse.js +28 -3
- package/bin/repl.js +47 -3
- package/bin/sign.js +211 -34
- package/bin/tracebom.js +18 -6
- package/bin/validate.js +24 -3
- package/bin/verify.js +113 -5
- package/data/behavior-taxonomy.schema.json +1491 -0
- package/data/cyclonedx-2.0-bundled.schema.json +18606 -5528
- package/data/cyclonedx-2.0-cryptography-defs.schema.json +857 -0
- package/data/license-aliases.json +24 -2
- package/data/pqc-migration.json +239 -0
- package/data/remediations.json +176 -0
- package/data/rules/ai-bom.yaml +1 -1
- package/data/rules/brotli-decoder.yaml +107 -0
- package/data/rules/cbom-security.yaml +4 -3
- package/data/rules/package-integrity.yaml +28 -0
- package/data/rules/vscode-extensions.yaml +75 -0
- package/data/spdx-license-list.json +121 -7
- package/data/spdx-licenses.json +69 -0
- package/data/spdx.schema.json +845 -2
- package/lib/audit/index.js +25 -3
- package/lib/cli/bomAssembly.js +172 -4
- package/lib/cli/cliOptions.js +121 -17
- package/lib/cli/index.js +720 -902
- package/lib/cli/jsBom.js +156 -64
- package/lib/cli/jvmBom.js +602 -86
- package/lib/cli/managedBom.js +161 -19
- package/lib/cli/nativeBom.js +52 -5
- package/lib/core/boundedFile.js +344 -0
- package/lib/core/brotliProbe.js +182 -0
- package/lib/core/env.js +34 -0
- package/lib/core/fs.js +138 -3
- package/lib/core/globPatterns.js +218 -0
- package/lib/core/httpClient.js +98 -1
- package/lib/core/lockPaths.js +38 -0
- package/lib/core/paths.js +24 -1
- package/lib/core/processTree.js +100 -8
- package/lib/core/projectConfig.js +332 -25
- package/lib/core/toolRegistry.js +184 -0
- package/lib/ecosystems/cppEvidence.js +263 -106
- package/lib/ecosystems/cppIncludeResolver.js +16 -5
- package/lib/ecosystems/denoutils.js +2 -2
- package/lib/ecosystems/ecosystems.js +25 -10
- package/lib/ecosystems/gemHostProbe.js +301 -0
- package/lib/ecosystems/golem.js +3 -8
- package/lib/ecosystems/gradleutils.js +1909 -229
- package/lib/ecosystems/jsEvidence.js +90 -38
- package/lib/ecosystems/kosi.js +3 -5
- package/lib/ecosystems/npmVersionResolution.js +376 -0
- package/lib/ecosystems/parsers-bazel.js +107 -6
- package/lib/ecosystems/parsers-js.js +505 -22
- package/lib/ecosystems/parsers-misc.js +209 -20
- package/lib/ecosystems/parsers-python.js +178 -30
- package/lib/ecosystems/parsers-rust.js +117 -15
- package/lib/ecosystems/pythonutils.js +128 -2
- package/lib/ecosystems/remote/huggingface.js +22 -0
- package/lib/ecosystems/rubyutils.js +538 -31
- package/lib/ecosystems/rusi.js +2 -4
- package/lib/ecosystems/scalacliutils.js +2 -0
- package/lib/ecosystems/scalasem.js +798 -152
- package/lib/ecosystems/vendoredCode.js +237 -3
- package/lib/ecosystems/venvProbe.js +360 -0
- package/lib/evinser/evinser.js +536 -71
- package/lib/evinser/scalasem.js +5 -1
- package/lib/helpers/agenticToolutils.js +525 -94
- package/lib/helpers/bomSigner.js +43 -9
- package/lib/helpers/jssSigner.js +1276 -0
- package/lib/helpers/vsixutils.js +1574 -315
- package/lib/inventory/agentBlueprint.js +193 -0
- package/lib/inventory/agentToolNames.js +145 -0
- package/lib/inventory/aiCollector.js +153 -7
- package/lib/inventory/aiInventory.js +44 -8
- package/lib/inventory/aiProviders.js +324 -0
- package/lib/inventory/atomUtils.js +77 -0
- package/lib/inventory/bomUtils.js +8 -1
- package/lib/inventory/brotliDecoder.js +142 -0
- package/lib/inventory/buildToolRateLimit.js +1 -1
- package/lib/inventory/cbomutils.js +56 -7
- package/lib/inventory/ciParsers/githubActionsLock.js +821 -0
- package/lib/inventory/citations.js +31 -2
- package/lib/inventory/communityAiConfigParser.js +978 -80
- package/lib/inventory/cyclonedx20.js +152 -0
- package/lib/inventory/cyclonedx20Common.js +286 -0
- package/lib/inventory/cyclonedx20Derived.js +159 -0
- package/lib/inventory/cyclonedx20Parties.js +552 -0
- package/lib/inventory/cyclonedx20Read.js +768 -0
- package/lib/inventory/cyclonedx20ReadCommon.js +374 -0
- package/lib/inventory/cyclonedx20ReadComponents.js +692 -0
- package/lib/inventory/cyclonedx20ReadContext.js +380 -0
- package/lib/inventory/cyclonedx20ReadEvidence.js +466 -0
- package/lib/inventory/cyclonedx20ReadSections.js +599 -0
- package/lib/inventory/cyclonedx20Render.js +766 -0
- package/lib/inventory/cyclonedx20RenderComponents.js +716 -0
- package/lib/inventory/cyclonedx20RenderDefinitions.js +405 -0
- package/lib/inventory/cyclonedx20RenderEvidence.js +726 -0
- package/lib/inventory/cyclonedx20RenderHardware.js +203 -0
- package/lib/inventory/cyclonedx20RenderPatents.js +174 -0
- package/lib/inventory/cyclonedx20RenderRefIds.js +314 -0
- package/lib/inventory/cyclonedx20RenderSections.js +499 -0
- package/lib/inventory/cyclonedx20Tables.js +594 -0
- package/lib/inventory/deps.js +141 -13
- package/lib/inventory/dosai.js +375 -6
- package/lib/inventory/dosaiParsers.js +3 -6
- package/lib/inventory/dotnetRuntime.js +367 -0
- package/lib/inventory/ecosystemFormulationParsers.js +979 -0
- package/lib/inventory/envcontext.js +436 -48
- package/lib/inventory/evidenceUtils.js +13 -1
- package/lib/inventory/fetchBatch.js +1 -1
- package/lib/inventory/formulationParsers.js +124 -14
- package/lib/inventory/gtfobins.js +13 -0
- package/lib/inventory/hbom.js +45 -6
- package/lib/inventory/hbomLoader.js +166 -0
- package/lib/inventory/hostRuntimeProbe.js +686 -0
- package/lib/inventory/jvmLocalRepos.js +9 -2
- package/lib/inventory/jvmToolEnv.js +29 -0
- package/lib/inventory/licenseEnhancer.js +12 -0
- package/lib/inventory/mavenCentralMirror.js +534 -0
- package/lib/inventory/mcpConfigParser.js +5 -0
- package/lib/inventory/nodeBuildInfo.js +218 -0
- package/lib/inventory/nodeHostProbe.js +202 -0
- package/lib/inventory/occurrenceKey.js +90 -0
- package/lib/inventory/osPackageResolver.js +182 -0
- package/lib/inventory/phpBuildInfo.js +10 -59
- package/lib/inventory/phpHostProbe.js +32 -488
- package/lib/inventory/pqcMigration.js +426 -0
- package/lib/inventory/rubyBuildInfo.js +972 -0
- package/lib/inventory/rubyHostProbe.js +218 -0
- package/lib/inventory/rustFormulationParser.js +21 -10
- package/lib/inventory/scalaCoords.js +4 -3
- package/lib/inventory/scalaDedupe.js +440 -0
- package/lib/inventory/source.js +114 -8
- package/lib/managers/binary.js +337 -3
- package/lib/managers/docker.js +79 -0
- package/lib/parsers/huggingfaceManifest.js +9 -1
- package/lib/parsers/huggingfaceUtils.js +18 -0
- package/lib/parsers/kiroPermissions.js +166 -0
- package/lib/parsers/largeJson.js +28 -11
- package/lib/parsers/vscodeExtensionId.js +183 -0
- package/lib/server/server.js +48 -35
- package/lib/stages/postgen/postgen.js +41 -1
- package/lib/stages/postgen/ruleEngine.js +13 -5
- package/lib/stages/postgen/specVersionCompat.js +76 -0
- package/lib/stages/pregen/envAudit.js +1 -0
- package/lib/stages/pregen/pregen.js +114 -57
- package/lib/validator/bomValidator.js +14 -2
- package/lib/validator/complianceEngine.js +30 -3
- package/lib/validator/complianceRules.js +1416 -4
- package/lib/validator/generated/validate-1.6.mjs +1 -1
- package/lib/validator/generated/validate-1.7.mjs +1 -1
- package/lib/validator/generated/validate-2.0.mjs +57554 -13851
- package/lib/validator/index.js +49 -8
- package/lib/validator/reporters/json.js +6 -0
- package/package.json +11 -10
- package/types/bin/repl.d.ts.map +1 -1
- package/types/lib/audit/index.d.ts +6 -2
- package/types/lib/audit/index.d.ts.map +1 -1
- package/types/lib/cli/bomAssembly.d.ts +29 -1
- package/types/lib/cli/bomAssembly.d.ts.map +1 -1
- package/types/lib/cli/cliOptions.d.ts +6 -0
- package/types/lib/cli/cliOptions.d.ts.map +1 -1
- package/types/lib/cli/index.d.ts.map +1 -1
- package/types/lib/cli/jsBom.d.ts +3 -18
- package/types/lib/cli/jsBom.d.ts.map +1 -1
- package/types/lib/cli/jvmBom.d.ts +15 -0
- package/types/lib/cli/jvmBom.d.ts.map +1 -1
- package/types/lib/cli/managedBom.d.ts.map +1 -1
- package/types/lib/cli/nativeBom.d.ts.map +1 -1
- package/types/lib/core/boundedFile.d.ts +100 -0
- package/types/lib/core/boundedFile.d.ts.map +1 -0
- package/types/lib/core/brotliProbe.d.ts +37 -0
- package/types/lib/core/brotliProbe.d.ts.map +1 -0
- package/types/lib/core/env.d.ts +14 -0
- package/types/lib/core/env.d.ts.map +1 -1
- package/types/lib/core/fs.d.ts +4 -0
- package/types/lib/core/fs.d.ts.map +1 -1
- package/types/lib/core/globPatterns.d.ts +70 -0
- package/types/lib/core/globPatterns.d.ts.map +1 -0
- package/types/lib/core/httpClient.d.ts +24 -0
- package/types/lib/core/httpClient.d.ts.map +1 -1
- package/types/lib/core/lockPaths.d.ts +19 -0
- package/types/lib/core/lockPaths.d.ts.map +1 -0
- package/types/lib/core/paths.d.ts +9 -0
- package/types/lib/core/paths.d.ts.map +1 -1
- package/types/lib/core/processTree.d.ts +17 -4
- package/types/lib/core/processTree.d.ts.map +1 -1
- package/types/lib/core/projectConfig.d.ts +47 -8
- package/types/lib/core/projectConfig.d.ts.map +1 -1
- package/types/lib/core/toolRegistry.d.ts +36 -0
- package/types/lib/core/toolRegistry.d.ts.map +1 -0
- package/types/lib/ecosystems/cppEvidence.d.ts +40 -13
- package/types/lib/ecosystems/cppEvidence.d.ts.map +1 -1
- package/types/lib/ecosystems/cppIncludeResolver.d.ts +2 -1
- package/types/lib/ecosystems/cppIncludeResolver.d.ts.map +1 -1
- package/types/lib/ecosystems/ecosystems.d.ts.map +1 -1
- package/types/lib/ecosystems/gemHostProbe.d.ts +28 -0
- package/types/lib/ecosystems/gemHostProbe.d.ts.map +1 -0
- package/types/lib/ecosystems/golem.d.ts.map +1 -1
- package/types/lib/ecosystems/gradleutils.d.ts +294 -20
- package/types/lib/ecosystems/gradleutils.d.ts.map +1 -1
- package/types/lib/ecosystems/jsEvidence.d.ts +14 -1
- package/types/lib/ecosystems/jsEvidence.d.ts.map +1 -1
- package/types/lib/ecosystems/kosi.d.ts.map +1 -1
- package/types/lib/ecosystems/npmVersionResolution.d.ts +119 -0
- package/types/lib/ecosystems/npmVersionResolution.d.ts.map +1 -0
- package/types/lib/ecosystems/parsers-bazel.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-js.d.ts +17 -20
- package/types/lib/ecosystems/parsers-js.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-misc.d.ts +19 -0
- package/types/lib/ecosystems/parsers-misc.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-python.d.ts +10 -0
- package/types/lib/ecosystems/parsers-python.d.ts.map +1 -1
- package/types/lib/ecosystems/parsers-rust.d.ts.map +1 -1
- package/types/lib/ecosystems/pythonutils.d.ts +19 -1
- package/types/lib/ecosystems/pythonutils.d.ts.map +1 -1
- package/types/lib/ecosystems/remote/huggingface.d.ts.map +1 -1
- package/types/lib/ecosystems/rubyutils.d.ts +144 -12
- package/types/lib/ecosystems/rubyutils.d.ts.map +1 -1
- package/types/lib/ecosystems/rusi.d.ts.map +1 -1
- package/types/lib/ecosystems/scalacliutils.d.ts.map +1 -1
- package/types/lib/ecosystems/scalasem.d.ts +58 -16
- package/types/lib/ecosystems/scalasem.d.ts.map +1 -1
- package/types/lib/ecosystems/vendoredCode.d.ts +26 -0
- package/types/lib/ecosystems/vendoredCode.d.ts.map +1 -1
- package/types/lib/ecosystems/venvProbe.d.ts +40 -0
- package/types/lib/ecosystems/venvProbe.d.ts.map +1 -0
- package/types/lib/evinser/evinser.d.ts +120 -13
- package/types/lib/evinser/evinser.d.ts.map +1 -1
- package/types/lib/evinser/scalasem.d.ts.map +1 -1
- package/types/lib/helpers/agenticToolutils.d.ts +53 -19
- package/types/lib/helpers/agenticToolutils.d.ts.map +1 -1
- package/types/lib/helpers/bomSigner.d.ts +20 -3
- package/types/lib/helpers/bomSigner.d.ts.map +1 -1
- package/types/lib/helpers/jssSigner.d.ts +288 -0
- package/types/lib/helpers/jssSigner.d.ts.map +1 -0
- package/types/lib/helpers/vsixutils.d.ts +303 -19
- package/types/lib/helpers/vsixutils.d.ts.map +1 -1
- package/types/lib/inventory/agentBlueprint.d.ts +70 -0
- package/types/lib/inventory/agentBlueprint.d.ts.map +1 -0
- package/types/lib/inventory/agentToolNames.d.ts +51 -0
- package/types/lib/inventory/agentToolNames.d.ts.map +1 -0
- package/types/lib/inventory/aiCollector.d.ts.map +1 -1
- package/types/lib/inventory/aiInventory.d.ts.map +1 -1
- package/types/lib/inventory/aiProviders.d.ts +85 -0
- package/types/lib/inventory/aiProviders.d.ts.map +1 -0
- package/types/lib/inventory/atomUtils.d.ts +19 -0
- package/types/lib/inventory/atomUtils.d.ts.map +1 -1
- package/types/lib/inventory/bomUtils.d.ts.map +1 -1
- package/types/lib/inventory/brotliDecoder.d.ts +58 -0
- package/types/lib/inventory/brotliDecoder.d.ts.map +1 -0
- package/types/lib/inventory/cbomutils.d.ts +17 -0
- package/types/lib/inventory/cbomutils.d.ts.map +1 -1
- package/types/lib/inventory/ciParsers/githubActionsLock.d.ts +101 -0
- package/types/lib/inventory/ciParsers/githubActionsLock.d.ts.map +1 -0
- package/types/lib/inventory/citations.d.ts +5 -0
- package/types/lib/inventory/citations.d.ts.map +1 -1
- package/types/lib/inventory/communityAiConfigParser.d.ts.map +1 -1
- package/types/lib/inventory/cyclonedx20.d.ts +99 -0
- package/types/lib/inventory/cyclonedx20.d.ts.map +1 -0
- package/types/lib/inventory/cyclonedx20Common.d.ts +102 -0
- package/types/lib/inventory/cyclonedx20Common.d.ts.map +1 -0
- package/types/lib/inventory/cyclonedx20Derived.d.ts +74 -0
- package/types/lib/inventory/cyclonedx20Derived.d.ts.map +1 -0
- package/types/lib/inventory/cyclonedx20Parties.d.ts +91 -0
- package/types/lib/inventory/cyclonedx20Parties.d.ts.map +1 -0
- package/types/lib/inventory/cyclonedx20Read.d.ts +51 -0
- package/types/lib/inventory/cyclonedx20Read.d.ts.map +1 -0
- package/types/lib/inventory/cyclonedx20ReadCommon.d.ts +69 -0
- package/types/lib/inventory/cyclonedx20ReadCommon.d.ts.map +1 -0
- package/types/lib/inventory/cyclonedx20ReadComponents.d.ts +77 -0
- package/types/lib/inventory/cyclonedx20ReadComponents.d.ts.map +1 -0
- package/types/lib/inventory/cyclonedx20ReadContext.d.ts +118 -0
- package/types/lib/inventory/cyclonedx20ReadContext.d.ts.map +1 -0
- package/types/lib/inventory/cyclonedx20ReadEvidence.d.ts +40 -0
- package/types/lib/inventory/cyclonedx20ReadEvidence.d.ts.map +1 -0
- package/types/lib/inventory/cyclonedx20ReadSections.d.ts +45 -0
- package/types/lib/inventory/cyclonedx20ReadSections.d.ts.map +1 -0
- package/types/lib/inventory/cyclonedx20Render.d.ts +53 -0
- package/types/lib/inventory/cyclonedx20Render.d.ts.map +1 -0
- package/types/lib/inventory/cyclonedx20RenderComponents.d.ts +73 -0
- package/types/lib/inventory/cyclonedx20RenderComponents.d.ts.map +1 -0
- package/types/lib/inventory/cyclonedx20RenderDefinitions.d.ts +29 -0
- package/types/lib/inventory/cyclonedx20RenderDefinitions.d.ts.map +1 -0
- package/types/lib/inventory/cyclonedx20RenderEvidence.d.ts +110 -0
- package/types/lib/inventory/cyclonedx20RenderEvidence.d.ts.map +1 -0
- package/types/lib/inventory/cyclonedx20RenderHardware.d.ts +42 -0
- package/types/lib/inventory/cyclonedx20RenderHardware.d.ts.map +1 -0
- package/types/lib/inventory/cyclonedx20RenderPatents.d.ts +26 -0
- package/types/lib/inventory/cyclonedx20RenderPatents.d.ts.map +1 -0
- package/types/lib/inventory/cyclonedx20RenderRefIds.d.ts +55 -0
- package/types/lib/inventory/cyclonedx20RenderRefIds.d.ts.map +1 -0
- package/types/lib/inventory/cyclonedx20RenderSections.d.ts +45 -0
- package/types/lib/inventory/cyclonedx20RenderSections.d.ts.map +1 -0
- package/types/lib/inventory/cyclonedx20Tables.d.ts +134 -0
- package/types/lib/inventory/cyclonedx20Tables.d.ts.map +1 -0
- package/types/lib/inventory/deps.d.ts +35 -2
- package/types/lib/inventory/deps.d.ts.map +1 -1
- package/types/lib/inventory/dosai.d.ts +36 -1
- package/types/lib/inventory/dosai.d.ts.map +1 -1
- package/types/lib/inventory/dosaiParsers.d.ts.map +1 -1
- package/types/lib/inventory/dotnetRuntime.d.ts +91 -0
- package/types/lib/inventory/dotnetRuntime.d.ts.map +1 -0
- package/types/lib/inventory/ecosystemFormulationParsers.d.ts +73 -0
- package/types/lib/inventory/ecosystemFormulationParsers.d.ts.map +1 -0
- package/types/lib/inventory/envcontext.d.ts +74 -12
- package/types/lib/inventory/envcontext.d.ts.map +1 -1
- package/types/lib/inventory/evidenceUtils.d.ts.map +1 -1
- package/types/lib/inventory/formulationParsers.d.ts.map +1 -1
- package/types/lib/inventory/gtfobins.d.ts.map +1 -1
- package/types/lib/inventory/hbom.d.ts +11 -0
- package/types/lib/inventory/hbom.d.ts.map +1 -1
- package/types/lib/inventory/hbomLoader.d.ts +54 -0
- package/types/lib/inventory/hbomLoader.d.ts.map +1 -1
- package/types/lib/inventory/hostRuntimeProbe.d.ts +44 -0
- package/types/lib/inventory/hostRuntimeProbe.d.ts.map +1 -0
- package/types/lib/inventory/jvmLocalRepos.d.ts +5 -1
- package/types/lib/inventory/jvmLocalRepos.d.ts.map +1 -1
- package/types/lib/inventory/jvmToolEnv.d.ts +12 -0
- package/types/lib/inventory/jvmToolEnv.d.ts.map +1 -1
- package/types/lib/inventory/licenseEnhancer.d.ts.map +1 -1
- package/types/lib/inventory/mavenCentralMirror.d.ts +170 -0
- package/types/lib/inventory/mavenCentralMirror.d.ts.map +1 -0
- package/types/lib/inventory/mcpConfigParser.d.ts.map +1 -1
- package/types/lib/inventory/nodeBuildInfo.d.ts +95 -0
- package/types/lib/inventory/nodeBuildInfo.d.ts.map +1 -0
- package/types/lib/inventory/nodeHostProbe.d.ts +15 -0
- package/types/lib/inventory/nodeHostProbe.d.ts.map +1 -0
- package/types/lib/inventory/occurrenceKey.d.ts +52 -0
- package/types/lib/inventory/occurrenceKey.d.ts.map +1 -0
- package/types/lib/inventory/osPackageResolver.d.ts +38 -0
- package/types/lib/inventory/osPackageResolver.d.ts.map +1 -1
- package/types/lib/inventory/phpBuildInfo.d.ts.map +1 -1
- package/types/lib/inventory/phpHostProbe.d.ts.map +1 -1
- package/types/lib/inventory/pqcMigration.d.ts +84 -0
- package/types/lib/inventory/pqcMigration.d.ts.map +1 -0
- package/types/lib/inventory/rubyBuildInfo.d.ts +271 -0
- package/types/lib/inventory/rubyBuildInfo.d.ts.map +1 -0
- package/types/lib/inventory/rubyHostProbe.d.ts +47 -0
- package/types/lib/inventory/rubyHostProbe.d.ts.map +1 -0
- package/types/lib/inventory/rustFormulationParser.d.ts +7 -2
- package/types/lib/inventory/rustFormulationParser.d.ts.map +1 -1
- package/types/lib/inventory/scalaCoords.d.ts.map +1 -1
- package/types/lib/inventory/scalaDedupe.d.ts +43 -0
- package/types/lib/inventory/scalaDedupe.d.ts.map +1 -0
- package/types/lib/inventory/source.d.ts +25 -0
- package/types/lib/inventory/source.d.ts.map +1 -1
- package/types/lib/managers/binary.d.ts.map +1 -1
- package/types/lib/managers/docker.d.ts +12 -0
- package/types/lib/managers/docker.d.ts.map +1 -1
- package/types/lib/parsers/huggingfaceManifest.d.ts +10 -1
- package/types/lib/parsers/huggingfaceManifest.d.ts.map +1 -1
- package/types/lib/parsers/huggingfaceUtils.d.ts +12 -0
- package/types/lib/parsers/huggingfaceUtils.d.ts.map +1 -1
- package/types/lib/parsers/kiroPermissions.d.ts +62 -0
- package/types/lib/parsers/kiroPermissions.d.ts.map +1 -0
- package/types/lib/parsers/largeJson.d.ts +4 -3
- package/types/lib/parsers/largeJson.d.ts.map +1 -1
- package/types/lib/parsers/vscodeExtensionId.d.ts +48 -0
- package/types/lib/parsers/vscodeExtensionId.d.ts.map +1 -0
- package/types/lib/server/server.d.ts.map +1 -1
- package/types/lib/stages/postgen/postgen.d.ts +7 -0
- package/types/lib/stages/postgen/postgen.d.ts.map +1 -1
- package/types/lib/stages/postgen/ruleEngine.d.ts.map +1 -1
- package/types/lib/stages/postgen/specVersionCompat.d.ts +25 -0
- package/types/lib/stages/postgen/specVersionCompat.d.ts.map +1 -1
- package/types/lib/stages/pregen/envAudit.d.ts.map +1 -1
- package/types/lib/stages/pregen/pregen.d.ts +12 -8
- package/types/lib/stages/pregen/pregen.d.ts.map +1 -1
- package/types/lib/validator/bomValidator.d.ts +5 -1
- package/types/lib/validator/bomValidator.d.ts.map +1 -1
- package/types/lib/validator/complianceEngine.d.ts +4 -4
- package/types/lib/validator/complianceEngine.d.ts.map +1 -1
- package/types/lib/validator/complianceRules.d.ts +14 -2
- package/types/lib/validator/complianceRules.d.ts.map +1 -1
- package/types/lib/validator/index.d.ts +10 -0
- package/types/lib/validator/index.d.ts.map +1 -1
- package/types/lib/validator/reporters/json.d.ts.map +1 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"parsers-misc.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-misc.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"parsers-misc.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-misc.js"],"names":[],"mappings":"AA4FA;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,KAAA,EAAE,QAAQ,KAAA,GAF/C,MAAM,CA8ElB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAHjC,MAGiC,GAF/B,MAAM,EAAE,CA+BpB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAH/B,MAG+B,GAF7B,MAAM,EAAE,CAiEpB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EALvC,MAAM,WAAO,MAK0B,EAAE,OAAO,EAJhD,MAAM,EAI0C,EAAE,OAAO,EAHzD,MAAM,EAGmD,GAFvD,MAAM,EAAE,CAoEpB;AAmBD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAHpC,MAGoC,GAFlC,MAAM,EAAE,CAmEpB;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,YAAY,EAH7C,MAG6C,GAF3C,MAAM,EAAE,CA6DpB;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAHlC,MAGkC,GAFhC,MAAM,EAAE,CAmEpB;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,aAAa,EAH/B,MAG+B,GAF7B,MAAM,CAelB;AAaD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAHvB,MAGuB,GAFrB,MAAM,EAAE,CAiFpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAHhC,MAGgC,GAF9B,MAAM,EAAE,CAoDpB;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAH7B,MAG6B,GAF3B,MAAM,EAAE,CA4BpB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAH7B,MAG6B,GAF3B,MAAM,EAAE,CA2BpB;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,CAAC,EAH9B,MAG8B,GAF5B,MAAM,EAAE,CAapB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAHhC,MAGgC,GAF9B,MAAM,EAAE,CAqCpB;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,aAAa,EAHrC,MAGqC,GAFnC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,2BAA2B,EAAE,MAAM,EAAE,CAAA;CAAE,CAmF9F;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAH7B,MAG6B,GAF3B,MAAM,EAAE,CAmCpB;AA2HD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,gBAAgB,EAJ3C,MAI2C,EAAE,QAAQ,EAHrD,MAGqD,GAFnD;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,2BAA2B,EAAE,MAAM,EAAE,CAAA;CAAE,CAmD9F;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,YAAY,QAAA,GAF7B,MAAM,CA2GlB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,aAAa,QAAA,GAF/B,MAAM,CAqIlB;AA2CD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,gBAAgB,EAJvC,MAIuC,GAFrC,MAAM,CAqClB;AAgID;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAZlC,MAYkC,EAAE,YAAY,EAXhD,KAWgD,GAV9C;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,kBAAkB,EAAE;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAC,EAAE,CAAA;CAAC,QAAM,CA0L1I;AAmBD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAH5B,MAG4B,OAGtC;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAH3B,MAG2B,OAOrC;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAH3B,MAG2B,OAGrC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAH5B,MAG4B,OAGtC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAH9B,MAG8B,OAGxC;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,OAAA,EACP,gBAAgB,OAAA,EAChB,UAAU,EAND,MAMC,EACV,OAAO,EANE,MAMF,OA4ER;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAHjC,MAGiC,EAAE,OAAO,EAF1C,MAE0C;;;;;;;;EAqBpD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAFpC,MAEoC;;;;;;;;;;;;;;;;;;;IA+D9C;AAsCD;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAH3C,MAG2C,GAFzC,GAAG,CAAC,MAAM,CAAC,CA0CvB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAN3C,MAAM,SAMqC,EAAE,QAAQ,AAL7D,CACA,EADQ,MAAM,SAK+C,GAJnD,MAAM,CAqJlB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAH9B,MAG8B,GAF5B,OAAO,CAInB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAL9B,MAK8B,EAAE,OAAO,EAJvC,MAIuC,EAAE,OAAO,GAHhD,MAGqD,GAFnD;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAAE,CA2GtF;AAmKD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAJtC,MAIsC,EAAE,OAAO,EAH/C,MAG+C,GAF7C,MAAM,CAmElB;AAwBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,cAAc,EAJlC,MAIkC,GAHhC,GAAG,CAAC,MAAM,EAAE;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAC,CAAC,CA0F3F;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,aAAa,EALrC,MAKqC,EAAE,OAAO,EAJ9C,MAI8C,EAAE,OAAO,GAHvD,MAG4D,GAF1D;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CA8V1D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAJ/B,MAI+B,GAH7B,8BAA4B,SAAS,CAoDjD;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,QAAA,GAFvB,MAAM,CAoBlB;AAqDD;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,EANvC,MAMuC,EAAE,WAAW,QAAA,EAAE,QAAQ,AAJtE,CAEA,QAEsE,iBA0LxE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EALG,MAKH,EACN,eAAe,eAAA,EACf,MAAM,AALL,CACF,QAImB,QA0BnB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,cAAc,QAAA,EAAE,YAAY,AAH9D,CACA,EADQ,OAG6D,GAF3D,MAAM,CAYlB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EALjC,QAKiC,EAAE,IAAI,QAAA,EAAE,OAAO,EAHhD,MAGgD,GAF9C,MAAM,CAyDlB;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAND,MAMC,EACV,OAAO,EANE,MAMF,EACP,IAAI,AANH,CACA,QAKe,GALL,MAAM,CA0FlB;AA+BD;;GAEG;AACH,wBAAgB,yBAAyB,SAExC;AAID;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,qBAAqB,CAAC,YAAY,EAJ7C,KAAK,CAAC,MAAM,CAIiC,GAF3C,OAAO,CAAC,IAAI,CAAC,CA4CzB;AAwWD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAHpC,MAGoC,GAFlC,MAAM,EAAE,CAoHpB"}
|
|
@@ -82,6 +82,16 @@ export declare function installedMetadataKey(p: Object): string | undefined;
|
|
|
82
82
|
* the METADATA files can skip those as components
|
|
83
83
|
*/
|
|
84
84
|
export declare function enrichFromInstalledMetadata(pkgList: Object[], installedMetadata: Object[]): Set<string>;
|
|
85
|
+
/**
|
|
86
|
+
* Whether an environment marker is false for every CPython interpreter. Only
|
|
87
|
+
* `platform_python_implementation` and `implementation_name` clauses are
|
|
88
|
+
* decided; anything else, or a marker with parentheses, is treated as possibly
|
|
89
|
+
* true, so the answer errs towards keeping a package.
|
|
90
|
+
*
|
|
91
|
+
* @param {string} marker PEP 508 environment marker
|
|
92
|
+
* @returns {boolean} true when no CPython environment satisfies the marker
|
|
93
|
+
*/
|
|
94
|
+
export declare function markerExcludesCPython(marker: string): boolean;
|
|
85
95
|
/**
|
|
86
96
|
* Method to parse python lock files such as poetry.lock, pdm.lock, uv.lock, and pylock.toml.
|
|
87
97
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"parsers-python.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-python.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"parsers-python.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-python.js"],"names":[],"mappings":"AAiEA;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,QAAA;;;cAqB9C;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,QAAQ,EALpC,MAKoC,EAAE,iBAAiB,AAJ/D,CAGF,EAHU,MAAM,EAIiD,kBAoBjE;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EALnC,MAKmC,EAAE,IAAI,EAJzC,MAIyC,EAAE,KAAK,EAHhD,MAGgD,GAF9C,IAAI,CAkBhB;AAuMD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAHpC,MAGoC,GAFlC,MAAM,CAwSlB;AAqFD;;;;;;;;;;GAUG;AACH,wBAAgB,gCAAgC,CAAC,SAAS,EAH/C,MAG+C,GAF7C,MAAM,GAAG,SAAS,CA2C9B;AAiBD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAH9B,MAG8B,GAF5B,MAAM,GAAC,SAAS,CAU5B;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAH3B,MAG2B,GAFzB,MAAM,GAAC,SAAS,CAM5B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAPxC,MAAM,EAOkC,EAAE,iBAAiB,EAN3D,MAAM,EAMqD,GAJzD,GAAG,CAAC,MAAM,CAAC,CA0CvB;AAiBD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAHjC,MAGiC,GAF/B,OAAO,CAWnB;AAsBD;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EATC,MASD,EACR,QAAQ,EATC,MASD,EACR,aAAa,EATJ,MASI,EACb,OAAO,AATN,CAIF,EAHE;IAA2B,iBAAiB,AAA5C,CAGF,EAHU,MAAM,EAAE,CAGlB;CAKa;;;;;;;;;;;;;;;;;;;;;;GAwqBb;AAsCD;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAChC,OAAO,QAAA,EACP,aAAa,UAAQ,EACrB,iBAAiB,AAThB,CAIA,EAJQ,MAAM,EASc,OAG9B;AAmSD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,QAAA,GAFhC,KAAK,CAAC,MAAM,CAAC,CAmCzB;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,EAFvC,MAEuC,qBAqBjD;AAwED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,gBAAgB,QAAA,EAAE,IAAI,QAAA;;;;;;;;;EAmLvD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,QAAA,MAiCzC;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAHrC,MAGqC,GAFnC,OAAO,CAqBnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,eAAe,EAHrC,MAGqC,GAFnC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CA8C1D"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"parsers-rust.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-rust.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"parsers-rust.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-rust.js"],"names":[],"mappings":"AAuyBA;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,kBAAkB,CACtC,aAAa,QAAA,EACb,MAAM,GAPG,OAOK,EACd,WAAW,GAPF,MAOO,EAChB,OAAO,KAAK,SAuQb;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAClC,aAAa,QAAA,EACb,MAAM,GAPG,OAOK,EACd,WAAW,GAPF,MAOO,SAyGjB;AAgCD;;;;;;;GAOG;AACH,wBAAgB,gCAAgC,CAAC,aAAa,EAJnD,MAImD,EAAE,OAAO,AAHpE,CACA,EADQ,MAGiE,GAF/D,MAAM,EAAE,CAsIpB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,aAAa,EAH3C,MAG2C,GAFzC,MAAM,EAAE,CA8DpB;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAH/B,MAAM,GAAC,IAAI,GAAC,SAGmB,GAF7B,MAAM,CAOlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAHlC,MAGkC,GAFhC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,GAAC,SAAS,CA8BrD;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAH1B;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAGJ,GAFxB,MAAM,CAOlB;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAHjC,MAGiC,GAF/B,MAAM,CAUlB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iCAAiC,CAAC,aAAa,EAJpD,MAIoD,EAAE,OAAO,AAHrE,CACA,EADQ,MAGkE,GAFhE,GAAG,CAAC,MAAM,EAAE;IAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAC,CAAC,CA+DtF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAJ3D;IAAwB,QAAQ,EAAxB,MAAM,EAAE,CAChB;IAA+E,KAAK,EAA5E,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC,CACvE;CAE2D,GAFjD,GAAG,CAAC,MAAM,EAAE;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAC,CAAC,CAsEvG;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAHvC,MAGuC,GAFrC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAAC,CAoGhI;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,6BAA6B,CAC3C,gBAAgB,EALP,MAAM,EAKC,EAChB,mBAAmB,EALV,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAKrB,GAJR;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;CAAC,CAmCnE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gCAAgC,CAC9C,OAAO,EATE,MAAM,EASR,EACP,MAAM,EATG,GAAG,CAAC,MAAM,EAAE,MAAM,CASrB,EACN,WAAW,AATV,CACA,EADQ,GAAG,CAAC,MAAM,EAAE,MAAM,CASJ,EACvB,OAAO,AATN,CAGA,EAFA;IAA0B,iBAAiB,AAA3C,CAEA,EAFQ,OAAO,CAEf;CAMW,GAND,MAAM,EAAE,CAsFpB;AAkCD;;;;;;;;;;;GAWG;AACH,wBAAgB,oCAAoC,CAAC,YAAY,EAHtD,MAGsD,GAFpD,MAAM,CAalB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,kCAAkC,CAAC,EACjD,QAAQ,EACR,KAAK,EACL,WAAW,EACX,gBAAqB,EACrB,gBAA4B,GAC7B,EAbE;IAAqB,QAAQ,EAArB,MAAM,CACd;IAAqB,KAAK,EAAlB,MAAM,CACd;IAAqB,WAAW,EAAxB,MAAM,CACd;IAAwB,gBAAgB,AAAxC,CACA,EADQ,MAAM,EAAE,CAChB;IAA2B,gBAAgB,AAA3C,CACA,EADQ,GAAG,CAAC,MAAM,CAAC,CACnB;CAQF,GARY;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAC,CA2FrE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iCAAiC,CAAC,WAAW,EALlD,GAAG,CAAC,MAAM,EAAE,MAAM,CAKgC,EAAE,KAAK,EAJzD,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAIgC,EAAE,MAAM,EAHjE,GAAG,CAAC,MAAM,EAAE,MAAM,CAG+C,GAF/D;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAC,CAwJ1D;AAED;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAAC,SAAS,EAH5C,MAG4C,GAF1C,OAAO,CAAC,MAAM,EAAE,CAAC,CA4B7B"}
|
|
@@ -84,6 +84,24 @@ export declare function getPyModules(src: string, epkgList: any[], options: Obje
|
|
|
84
84
|
* @param {Object} options CLI options
|
|
85
85
|
*/
|
|
86
86
|
export declare function createUVLock(basePath: string, options: Object): void;
|
|
87
|
+
/**
|
|
88
|
+
* Check whether a pyproject.toml requires poetry-core 2 or newer to build.
|
|
89
|
+
*
|
|
90
|
+
* @param {string} pyprojectFile Path to pyproject.toml
|
|
91
|
+
* @returns {boolean} true when the project needs Poetry 2 or newer
|
|
92
|
+
*/
|
|
93
|
+
export declare function isPoetry2Project(pyprojectFile: string): boolean;
|
|
94
|
+
/**
|
|
95
|
+
* Build the poetry install arguments for a poetry project.
|
|
96
|
+
*
|
|
97
|
+
* Poetry 2 installs only the main dependency group and no extras by default,
|
|
98
|
+
* so projects requiring poetry-core 2 or newer also get --all-groups and
|
|
99
|
+
* --all-extras. Callers prepend the python invocation such as -m poetry.
|
|
100
|
+
*
|
|
101
|
+
* @param {string} pyprojectFile pyproject.toml or poetry.lock path of the project
|
|
102
|
+
* @returns {string[]} poetry install arguments
|
|
103
|
+
*/
|
|
104
|
+
export declare function getPoetryInstallArgs(pyprojectFile: string): string[];
|
|
87
105
|
/**
|
|
88
106
|
* Execute pip freeze by creating a virtual env in a temp directory and construct the dependency tree
|
|
89
107
|
*
|
|
@@ -96,9 +114,9 @@ export declare function createUVLock(basePath: string, options: Object): void;
|
|
|
96
114
|
*/
|
|
97
115
|
export declare function getPipFrozenTree(basePath: string, reqOrSetupFile: string, tempVenvDir: string, parentComponent: Object, projectRoot: any, getTreeWithPluginFn: any): Object;
|
|
98
116
|
export declare function getPipTreeForPackages(basePath: any, pkgList: any, tempVenvDir: any, parentComponent: any, getTreeWithPluginFn: any): {
|
|
99
|
-
dependenciesList?: undefined;
|
|
100
117
|
failedPkgList?: undefined;
|
|
101
118
|
rootList?: undefined;
|
|
119
|
+
dependenciesList?: undefined;
|
|
102
120
|
} | {
|
|
103
121
|
failedPkgList: any[];
|
|
104
122
|
rootList: {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"pythonutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/pythonutils.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"pythonutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/pythonutils.js"],"names":[],"mappings":"AAmCA;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,GAJxB,MAIsC,EAAE,YAAY,AAH5D,CACA,EADQ,MAG2D,GAFzD,MAAM,CAyLlB;AAyED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAHpC,MAGoC,GAFlC,MAAM,CA6BlB;AAgBD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAH3B,MAG2B,GAFzB,GAAG,CAAC,MAAM,CAAC,CAwCvB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAJ3B,MAI2B,EAAE,IAAI,EAHjC,MAGiC,GAF/B,OAAO,CA+BnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAJzB,MAIyB,EAAE,OAAO,GAHlC,MAGuC,GAFrC,OAAO,CAInB;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAL3B,MAK2B,EAAE,QAAQ,OAAA,EAAE,OAAO,EAH9C,MAG8C;;;;;;;;GAoFxD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAH1B,MAG0B,EAAE,OAAO,EAFnC,MAEmC,QAgD7C;AA8DD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,aAAa,EAHnC,MAGmC,GAFjC,OAAO,CAiBnB;AAsBD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,aAAa,EAHvC,MAGuC,GAFrC,MAAM,EAAE,CASpB;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EARC,MAQD,EACR,cAAc,EARL,MAQK,EACd,WAAW,EARF,MAQE,EACX,eAAe,EARN,MAQM,EACf,WAAW,KAAA,EACX,mBAAmB,KAAA,GARR,MAAM,CAqkBlB;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,KAAA,EACR,OAAO,KAAA,EACP,WAAW,KAAA,EACX,eAAe,KAAA,EACf,mBAAmB,KAAA;;;;;;;;;;;;;;;;EAwNpB"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"huggingface.d.ts","sourceRoot":"","sources":["../../../../lib/ecosystems/remote/huggingface.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"huggingface.d.ts","sourceRoot":"","sources":["../../../../lib/ecosystems/remote/huggingface.js"],"names":[],"mappings":"AAkKA,OAAO,EACL,6BAA6B,EAC7B,iBAAiB,GAClB,MAAM,mCAAmC,CAAC;AAE3C;;GAEG;AACH,wBAAgB,4BAA4B,SAG3C;AAu6BD;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,aAH5B,MAAM,KACJ,OAOV,CAAC;AAEJ;;;;;;;GAOG;AACH,wBAAsB,8BAA8B,CAClD,SAAS,EANA,MAMA,EACT,MAAM,EANG,MAMH,EACN,OAAO,AANN,CACA,EADQ,MAMG,GALD,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CA2NrC;AAED;;;;;;;GAOG;AACH,wBAAsB,6BAA6B,CACjD,SAAS,EANA,MAMA,EACT,MAAM,EANG,MAMH,EACN,OAAO,AANN,CACA,EADQ,MAMG,GALD,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAarC"}
|
|
@@ -191,6 +191,14 @@ export declare function toGemModuleNames(name: any): string[];
|
|
|
191
191
|
* @returns {Array<string>} List of module names
|
|
192
192
|
*/
|
|
193
193
|
export declare function collectGemModuleNames(rubyCommand: string, bundleCommand: string, gemHome: string, gemName: string, filePath: string): Array<string>;
|
|
194
|
+
/**
|
|
195
|
+
* Whether a gemspec is a default gem, one that ships with Ruby: RubyGems
|
|
196
|
+
* keeps them under `specifications/default/`.
|
|
197
|
+
*
|
|
198
|
+
* @param {string} gemspecFile path of the gemspec, either separator
|
|
199
|
+
* @returns {boolean}
|
|
200
|
+
*/
|
|
201
|
+
export declare function isDefaultGemspecPath(gemspecFile: string): boolean;
|
|
194
202
|
/**
|
|
195
203
|
* Method to parse Gemspec file contents.
|
|
196
204
|
*
|
|
@@ -310,33 +318,157 @@ export declare function addRubyGemsDistributionUrls(pkgList: any[]): any[];
|
|
|
310
318
|
*/
|
|
311
319
|
export declare function rubyRequirementToVers(requirements: string[]): string | null | undefined;
|
|
312
320
|
/**
|
|
313
|
-
*
|
|
321
|
+
* Read the Ruby a `.ruby-version` file selects, as rbenv, chruby, rvm, asdf
|
|
322
|
+
* and mise read it: `3.3.6`, `ruby-3.3.6`, `3.3`, `jruby-9.4.8.0`,
|
|
323
|
+
* `truffleruby-24.1.0`, `truffleruby+graalvm-24.1.0`. Only the first word
|
|
324
|
+
* counts; comments and blank lines are skipped.
|
|
325
|
+
*
|
|
326
|
+
* @param {string} text file contents
|
|
327
|
+
* @returns {{engine: string, version?: string, requirement?: string, source: string}|undefined}
|
|
328
|
+
*/
|
|
329
|
+
export declare function parseRubyVersionFile(text: string): {
|
|
330
|
+
engine: string;
|
|
331
|
+
version?: string;
|
|
332
|
+
requirement?: string;
|
|
333
|
+
source: string;
|
|
334
|
+
} | undefined;
|
|
335
|
+
/**
|
|
336
|
+
* Read the Ruby an asdf `.tool-versions` file selects: the first version on
|
|
337
|
+
* the `ruby` line, e.g. `ruby 3.3.6 3.2.2`.
|
|
338
|
+
*
|
|
339
|
+
* @param {string} text file contents
|
|
340
|
+
* @returns {{engine: string, version?: string, requirement?: string, source: string}|undefined}
|
|
341
|
+
*/
|
|
342
|
+
export declare function parseToolVersionsRuby(text: string): {
|
|
343
|
+
engine: string;
|
|
344
|
+
version?: string;
|
|
345
|
+
requirement?: string;
|
|
346
|
+
source: string;
|
|
347
|
+
} | undefined;
|
|
348
|
+
/**
|
|
349
|
+
* Read the Ruby a mise configuration selects from its `[tools]` table:
|
|
350
|
+
* `ruby = "3.3.6"`, `ruby = ["3.3.6", "3.2"]` or `ruby = { version = "3.3.6" }`.
|
|
351
|
+
*
|
|
352
|
+
* @param {string} text mise.toml contents
|
|
353
|
+
* @param {string} [source="mise.toml"] the file name, for the result
|
|
354
|
+
* @returns {{engine: string, version?: string, requirement?: string, source: string}|undefined}
|
|
355
|
+
*/
|
|
356
|
+
export declare function parseMiseRuby(text: string, source?: string): {
|
|
357
|
+
engine: string;
|
|
358
|
+
version?: string;
|
|
359
|
+
requirement?: string;
|
|
360
|
+
source: string;
|
|
361
|
+
} | undefined;
|
|
362
|
+
/**
|
|
363
|
+
* Read the `ruby` directive of a Gemfile: `ruby "3.3.6"`, `ruby "~> 3.3"`,
|
|
364
|
+
* `ruby "3.1.4", engine: "jruby", engine_version: "9.4.8.0"`, or
|
|
365
|
+
* `ruby file: ".ruby-version"`. The Gemfile is never evaluated, so a
|
|
366
|
+
* directive built from an expression, such as `ruby RUBY_VERSION`, says
|
|
367
|
+
* nothing.
|
|
368
|
+
*
|
|
369
|
+
* @param {string} text Gemfile contents
|
|
370
|
+
* @returns {{engine: string, version?: string, requirement?: string,
|
|
371
|
+
* file?: string, source: string}|undefined}
|
|
372
|
+
*/
|
|
373
|
+
export declare function parseGemfileRubyDirective(text: string): {
|
|
374
|
+
engine: string;
|
|
375
|
+
version?: string;
|
|
376
|
+
requirement?: string;
|
|
377
|
+
file?: string;
|
|
378
|
+
source: string;
|
|
379
|
+
} | undefined;
|
|
380
|
+
/**
|
|
381
|
+
* Read the `RUBY VERSION` section of a Gemfile.lock, which Bundler writes when
|
|
382
|
+
* the Gemfile has a `ruby` directive: `ruby 3.3.6p108`, `ruby 3.4.0p-1` for a
|
|
383
|
+
* pre-release, or `ruby 3.1.4p0 (jruby 9.4.8.0)` for another engine.
|
|
384
|
+
*
|
|
385
|
+
* @param {string} text Gemfile.lock contents
|
|
386
|
+
* @returns {{engine: string, version: string, patchlevel?: string,
|
|
387
|
+
* rubyVersion?: string, source: string}|undefined}
|
|
388
|
+
*/
|
|
389
|
+
export declare function parseGemfileLockRubyVersion(text: string): {
|
|
390
|
+
engine: string;
|
|
391
|
+
version: string;
|
|
392
|
+
patchlevel?: string;
|
|
393
|
+
rubyVersion?: string;
|
|
394
|
+
source: string;
|
|
395
|
+
} | undefined;
|
|
396
|
+
/**
|
|
397
|
+
* Collect every Ruby a project directory declares, from the Gemfile.lock
|
|
398
|
+
* `RUBY VERSION` section, `.ruby-version`, `.tool-versions`, mise.toml and the
|
|
399
|
+
* Gemfile `ruby` directive. Each declaration names its source.
|
|
400
|
+
*
|
|
401
|
+
* @param {string} projectPath project directory
|
|
402
|
+
* @param {string} [lockData] Gemfile.lock contents, when already read
|
|
403
|
+
* @returns {Array<{engine: string, version?: string, requirement?: string,
|
|
404
|
+
* patchlevel?: string, source: string, path: string}>}
|
|
405
|
+
*/
|
|
406
|
+
export declare function collectProjectRubyDeclarations(projectPath: string, lockData?: string): Array<{
|
|
407
|
+
engine: string;
|
|
408
|
+
version?: string;
|
|
409
|
+
requirement?: string;
|
|
410
|
+
patchlevel?: string;
|
|
411
|
+
source: string;
|
|
412
|
+
path: string;
|
|
413
|
+
}>;
|
|
414
|
+
/**
|
|
415
|
+
* Settle the Ruby a project runs on from its declarations: the exact version
|
|
416
|
+
* of the most authoritative source that has one, and the requirements of the
|
|
417
|
+
* sources that only constrain it.
|
|
418
|
+
*
|
|
419
|
+
* @param {Array<Object>} declarations result of collectProjectRubyDeclarations
|
|
420
|
+
* @returns {{engine: string, version?: string, patchlevel?: string,
|
|
421
|
+
* prerelease?: boolean, rubyVersion?: string, source?: string,
|
|
422
|
+
* requirements: string[], conflicts: string[]}|undefined}
|
|
423
|
+
*/
|
|
424
|
+
export declare function resolveProjectRuby(declarations: Array<Object>): {
|
|
425
|
+
engine: string;
|
|
426
|
+
version?: string;
|
|
427
|
+
patchlevel?: string;
|
|
428
|
+
prerelease?: boolean;
|
|
429
|
+
rubyVersion?: string;
|
|
430
|
+
source?: string;
|
|
431
|
+
requirements: string[];
|
|
432
|
+
conflicts: string[];
|
|
433
|
+
} | undefined;
|
|
434
|
+
/**
|
|
435
|
+
* Describe the Ruby runtime of a project as one external `platform`
|
|
314
436
|
* component, and make the components that declare a `required_ruby_version`
|
|
315
437
|
* depend on it (discussion 4409).
|
|
316
438
|
*
|
|
317
|
-
*
|
|
318
|
-
*
|
|
319
|
-
*
|
|
320
|
-
*
|
|
321
|
-
*
|
|
322
|
-
*
|
|
439
|
+
* When the project pins a Ruby (Gemfile.lock `RUBY VERSION`, `.ruby-version`,
|
|
440
|
+
* `.tool-versions`, mise or the Gemfile `ruby` directive), the component names
|
|
441
|
+
* that version, `pkg:generic/ruby@3.3.6`, with the CPE a scanner matches
|
|
442
|
+
* interpreter advisories by. The requirements of the gems then stay in the
|
|
443
|
+
* `cdx:ruby:requiredVersionRange` property, since CycloneDX allows a
|
|
444
|
+
* `versionRange` only on a component without a version.
|
|
445
|
+
*
|
|
446
|
+
* Without a pin, the component stands for the Ruby the bundle as a whole runs
|
|
447
|
+
* on, so its `versionRange` is the intersection of every requirement that
|
|
448
|
+
* could be read, in the `vers` syntax CycloneDX mandates for the field. Each
|
|
449
|
+
* component's own requirement stays in its `cdx:gem:rubyVersionSpecifiers`
|
|
450
|
+
* property. One runtime component per distinct requirement would describe the
|
|
451
|
+
* same interpreter many times over: a modest bundle spells `>= 2.x` a dozen
|
|
452
|
+
* ways.
|
|
323
453
|
*
|
|
324
454
|
* The type is `platform`, the CycloneDX type for a runtime environment that
|
|
325
455
|
* interprets software, and the one cdxgen gives the Ruby it finds in the
|
|
326
|
-
* build environment.
|
|
456
|
+
* build environment. A range is not a version, so an unpinned purl names none.
|
|
327
457
|
*
|
|
328
|
-
* `isExternal` and `versionRange` are CycloneDX 1.7 fields
|
|
329
|
-
*
|
|
330
|
-
*
|
|
458
|
+
* `isExternal` and `versionRange` are CycloneDX 1.7 fields. A pinned runtime
|
|
459
|
+
* also carries the `cdx:ruby:isExternal` property, which says the interpreter
|
|
460
|
+
* comes with the deployment environment in a BOM of an older spec; the caller
|
|
461
|
+
* decides whether such a BOM should carry an unpinned runtime at all.
|
|
331
462
|
*
|
|
332
463
|
* @param {Array} pkgList Components
|
|
333
464
|
* @param {object} parentComponent The metadata.component, when the project is
|
|
334
465
|
* itself a gem
|
|
335
466
|
* @param {Array} dependencies Dependency edges
|
|
467
|
+
* @param {object} [projectRuby] result of resolveProjectRuby
|
|
336
468
|
* @returns {{pkgList: Array, dependencies: Array}} Components and edges with
|
|
337
469
|
* the runtime component added
|
|
338
470
|
*/
|
|
339
|
-
export declare function addRubyRuntimeComponent(pkgList: any[], parentComponent: object, dependencies: any[]): {
|
|
471
|
+
export declare function addRubyRuntimeComponent(pkgList: any[], parentComponent: object, dependencies: any[], projectRuby?: object): {
|
|
340
472
|
pkgList: any[];
|
|
341
473
|
dependencies: any[];
|
|
342
474
|
};
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"rubyutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/rubyutils.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"rubyutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/rubyutils.js"],"names":[],"mappings":"AA0EA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAHzB,MAGyB,GAFvB,OAAO,CAOnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAHlC,MAAM,GAAG,SAGyB,GAFhC,MAAM,GAAG,SAAS,CAO9B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAHrC,MAAM,GAAG,SAG4B,GAFnC;IAAC,OAAO,EAAE,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAAC,QAAQ,EAAE,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;CAAC,CAe3E;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAHhC,MAGgC,GAF9B,MAAM,CAIlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,IAAI,EALnB,MAKmB,EAAE,OAAO,EAJ5B,MAAM,GAAG,SAImB,EAAE,QAAQ,EAHtC,MAAM,GAAG,SAG6B,GAFpC,MAAM,CAclB;AA4FD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAN/B,MAM+B,GAL7B;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAC,GAAG,SAAS,CAqE/F;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAL5B,MAK4B,GAJ1B;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAC,GAAG,SAAS,CAsE7D;AAuPD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAH9B,MAG8B,GAF5B;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;CAAC,GAAG,SAAS,CAqBjE;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,IAF1B,MAAM,CAWlB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAHnC,MAGmC,GAFjC,MAAM,CAiClB;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAHjC,MAGiC,GAF/B,MAAM,CAgClB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,wBAAwB,CAAC,OAAO,OAAA,EAAE,OAAO,GAJ5D;IAAwB,OAAO,EAAvB,MAAM,CACd;IAAwB,oBAAoB,EAApC,MAAM,CACd;CAEiE,GAFvD,OAAO,OAAO,CAuJ1B;AAsJD;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,OAAA,kBAiJhD;AA8CD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,KAAA,YAsBpC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,QAAA,EACX,aAAa,QAAA,EACb,OAAO,QAAA,EACP,OAAO,QAAA,EACP,QAAQ,QAAA,GAPG,KAAK,CAAC,MAAM,CAAC,CA4IzB;AAwFD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAHrC,MAGqC,GAFnC,OAAO,CAUnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,EAZvC,MAYuC,EAAE,WAAW,EAXpD,MAWoD,EAAE,OAAO,AAVrE,CASF,EARE;IAAyC,cAAc,AAAvD,CAEA,yBAAA;IAA0B,cAAc,AAAxC,CAGA,EAHQ,OAAO,CAGf;IAA0B,OAAO,AAAjC,CAGF,EAHU,OAAO,CAGjB;CAC4E,kBA6a5E;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,oBAAoB,CACxC,WAAW,EAPF,MAOE,EACX,QAAQ,EAPC,MAOD,EACR,OAAO,AAPN,CAGF,EAFE;IAAyB,OAAO,AAAhC,CACA,EADQ,MAAM,CACd;IAAyB,oBAAoB,AAA7C,CACF,EADU,MAAM,CAChB;CAIa;;;;;;;;GAqYb;AAUD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,kBAAkB,CAChC,eAAe,EAXN,MAWM,EACf,UAAU,EAXD,MAWC,EACV,OAAO,EAXE,MAAM,EAWR,EACP,YAAY,EAXH,MAAM,EAWH,EACZ,QAAQ,EAXC,MAAM,EAWP,EACR,cAAc,EAXL,MAAM,EAWD,EACd,OAAO,GAXE,MAWG,GAVD;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAC,CAkH3E;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,OAAA,SAmClD;AA8GD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EALvC,MAAM,EAKiC,GAHrC,MAAM,GAAC,IAAI,GAAC,SAAS,CAoHjC;AAiCD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAH9B,MAG8B,GAF5B;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,GAAC,SAAS,CAsB9F;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAH/B,MAG+B,GAF7B;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,GAAC,SAAS,CAsB9F;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAJvB,MAIuB,EAAE,MAAM,AAHvC,CACA,EADQ,MAG6C,GAF3C;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,GAAC,SAAS,CAwB9F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAJnC,MAImC,GAHjC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAChE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,GAAC,SAAS,CA4D5C;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAJrC,MAIqC,GAHnC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,GAAC,SAAS,CAyCnD;AASD;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAAC,WAAW,EAL/C,MAK+C,EAAE,QAAQ,AAJjE,CACA,EADQ,MAIyD,GAHvD,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAC,CAAC,CAsDvD;AAcD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EALpC,KAAK,CAAC,MAAM,CAKwB,GAJlC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC/D,UAAU,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAC5D,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAC,GAAC,SAAS,CAyD1D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,OAAA,EACP,eAAe,EATN,MASM,EACf,YAAY,OAAA,EACZ,WAAW,AARV,CACA,EADQ,MAQE,GAPA;IAAC,OAAO,QAAQ;IAAC,YAAY,QAAO;CAAC,CA4HjD"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"rusi.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/rusi.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"rusi.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/rusi.js"],"names":[],"mappings":"AAmWA;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,GAHpC,MAGyC,GAFvC,MAAM,GAAC,SAAS,CAW5B;AAsZD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAGgC,GAF9B,OAAO,CAInB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAH9B,MAG8B,GAF5B,MAAM,GAAC,SAAS,CAW5B;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,GAAG,EALxB,MAKwB,EAAE,UAAU,EAJpC,MAIoC,EAAE,OAAO,GAH7C,MAGkD,GAFhD,OAAO,CAyEnB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAJ3B,MAI2B,EAAE,OAAO,GAHpC,MAGyC,GAFvC,MAAM,GAAC,SAAS,CA2B5B;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,GAJnC,MAIwC,EAAE,UAAU,QAAK,GAFvD,MAAM,CA8DlB"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"scalacliutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/scalacliutils.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"scalacliutils.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/scalacliutils.js"],"names":[],"mappings":"AA0CA;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EANvC,MAMuC,GALrC;IAAE,YAAY,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,aAAa,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAyD5G;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAL1B,MAK0B,EAAE,OAAO,EAJnC,MAImC,EAAE,UAAU,EAH/C,MAG+C,GAF7C,MAAM,GAAC,IAAI,CAuDvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAHxC,MAGwC,GAFtC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAC,IAAI,CAkCjE;AAsBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EALtC,MAKsC,EAAE,OAAO,GAJ/C,MAIoD,GAHlD,MAAM,EAAE,CAoGpB"}
|
|
@@ -30,12 +30,13 @@ export declare function resolveScalasemCommand(): string | undefined;
|
|
|
30
30
|
/**
|
|
31
31
|
* Where the scalasem report is persisted. An absolute --semantics-slices-file
|
|
32
32
|
* keeps its directory; anything else lands in the evinse output directory, the
|
|
33
|
-
* same rule the atom slice writer follows.
|
|
33
|
+
* same rule the atom slice writer follows. Without either there is nowhere to
|
|
34
|
+
* keep it, and the report lives only as long as the run.
|
|
34
35
|
*
|
|
35
36
|
* @param {Object} options CLI options carrying `output` and `semanticsSlicesFile`.
|
|
36
|
-
* @returns {string} Absolute report path.
|
|
37
|
+
* @returns {string|undefined} Absolute report path.
|
|
37
38
|
*/
|
|
38
|
-
export declare function scalasemOutputFile(options?: Object): string;
|
|
39
|
+
export declare function scalasemOutputFile(options?: Object): string | undefined;
|
|
39
40
|
/**
|
|
40
41
|
* A version 1 semantics slice (the shape atom's scalasem wrote before schema
|
|
41
42
|
* version 2): keyed by .scala files with `usedTypes`, no `_meta.schemaVersion`.
|
|
@@ -46,8 +47,9 @@ export declare function scalasemOutputFile(options?: Object): string;
|
|
|
46
47
|
export declare function isV1SemanticsSlice(parsed: Object): boolean;
|
|
47
48
|
/**
|
|
48
49
|
* Run scalasem over a Scala project and return its report, reusing a
|
|
49
|
-
* persisted version 2 report that belongs to this project
|
|
50
|
-
* the
|
|
50
|
+
* persisted version 2 report that belongs to this project, is newer than the
|
|
51
|
+
* input BOM and than the build files and sources it describes, and, when
|
|
52
|
+
* cdxgen kept it, was made with the settings this run asks for.
|
|
51
53
|
*
|
|
52
54
|
* Failures are visible rather than silent: the reason is printed once, the
|
|
53
55
|
* run's diagnostics reach the caller as `cdx:scalasem:diagnostic` properties,
|
|
@@ -70,11 +72,13 @@ export declare function analyzeScalaProject(src: string, options?: Object): Obje
|
|
|
70
72
|
* @param {Object[]} diagnostics Run diagnostics, from the report or the spawn.
|
|
71
73
|
* @returns {Object[]} Metadata properties.
|
|
72
74
|
*/
|
|
73
|
-
export declare function scalasemMetadataProperties(report: Object | undefined,
|
|
75
|
+
export declare function scalasemMetadataProperties(report: Object | undefined, allDiagnostics?: any): Object[];
|
|
74
76
|
export declare function sortedCsv(values: any): string | undefined;
|
|
75
77
|
/**
|
|
76
78
|
* The platform a purl's artifact name targets: `_sjs1` is Scala.js,
|
|
77
|
-
* `_native0.x` is Scala Native, and neither is the JVM.
|
|
79
|
+
* `_native0.x` is Scala Native, and neither is the JVM. The platform suffix
|
|
80
|
+
* counts whether the Scala binary suffix follows it (`upickle_sjs1_3`, the
|
|
81
|
+
* published name a jar scan keeps) or not (`upickle_sjs1`, the sbt name).
|
|
78
82
|
*
|
|
79
83
|
* @param {string} purl Package URL.
|
|
80
84
|
* @returns {"jvm"|"js"|"native"} Platform key.
|
|
@@ -136,6 +140,12 @@ export declare class ScalaJoinIndex {
|
|
|
136
140
|
* sits in. A package the project also fills is ambiguous and joins nothing,
|
|
137
141
|
* and `javax.` names join only through an exact class, since the JDK ships
|
|
138
142
|
* most of them.
|
|
143
|
+
*
|
|
144
|
+
* The package is the part of the symbol before its first type name, which
|
|
145
|
+
* starts with a capital letter (`io.circe` of `io.circe.Json.fromString`). A
|
|
146
|
+
* symbol without one names a package (`io.circe`) or a member of one, such
|
|
147
|
+
* as a package object member (`io.circe.syntax.asJson`). Parent packages
|
|
148
|
+
* never answer: a missing `io.circe.generic` is not circe-core.
|
|
139
149
|
*/
|
|
140
150
|
packageOwners(symbol: any): any;
|
|
141
151
|
/**
|
|
@@ -175,8 +185,13 @@ export declare function isReportFileKey(key: any): boolean;
|
|
|
175
185
|
* Index the BOM components by their normalized Scala coordinates, both with
|
|
176
186
|
* and without the version, so a classpath jar, a namespace property and a map
|
|
177
187
|
* entry of the same library meet on one component. Each entry keeps the Scala
|
|
178
|
-
* binary
|
|
179
|
-
* artifacts of one library in a Maven build stay apart.
|
|
188
|
+
* binary versions the component was built for, so the `_2.13` and `_3`
|
|
189
|
+
* artifacts of one library in a Maven build stay apart. Components that share
|
|
190
|
+
* a normalized coordinate and were built for an overlapping set of Scala
|
|
191
|
+
* binary versions are one library listed more than once (a repository_url
|
|
192
|
+
* qualifier, a `_3` suffix beside the sbt name built for 2.13 and 3, a stale
|
|
193
|
+
* duplicate), so they share one entry, which the preferred component of the
|
|
194
|
+
* group stands for.
|
|
180
195
|
*/
|
|
181
196
|
export declare function componentCoordinateIndex(components?: any[]): {
|
|
182
197
|
byVersion: Map<any, any>;
|
|
@@ -192,13 +207,31 @@ export declare function componentCoordinateIndex(components?: any[]): {
|
|
|
192
207
|
* @returns {{component: Object, exact: boolean}|undefined} The component, and
|
|
193
208
|
* whether its version is the one on the classpath.
|
|
194
209
|
*/
|
|
195
|
-
export declare function matchClasspathEntry(entry: any,
|
|
196
|
-
byVersion: any;
|
|
197
|
-
withoutVersion: any;
|
|
198
|
-
}, platform: any): {
|
|
210
|
+
export declare function matchClasspathEntry(entry: any, coordinateIndex: any, platform: any): {
|
|
199
211
|
component: Object;
|
|
200
212
|
exact: boolean;
|
|
201
213
|
} | undefined;
|
|
214
|
+
/**
|
|
215
|
+
* The coordinates a classpath jar's path spells, for the layouts the report
|
|
216
|
+
* does not read itself, most specific first:
|
|
217
|
+
*
|
|
218
|
+
* - a Maven layout `<group dirs>/<artifact>/<version>/<file>` whose group is
|
|
219
|
+
* a dotted tail of the group the report recorded, so a group is only ever
|
|
220
|
+
* shortened by the directories the report took for it, never guessed
|
|
221
|
+
* - the Gradle cache `files-2.1/<group>/<artifact>/<version>/<sha1>/<file>`
|
|
222
|
+
* - an Ivy cache `<org>/<artifact>/jars/<artifact>-<version>.jar`, as sbt 0.13
|
|
223
|
+
* and sbt 1.0 to 1.2 keep it, and an Ivy local repository
|
|
224
|
+
* `<org>/<artifact>/<version>/jars/<artifact>.jar`
|
|
225
|
+
*
|
|
226
|
+
* @param {Object} entry Classpath entry with `path` and, when the report read
|
|
227
|
+
* them, `group`, `artifact` and `version`.
|
|
228
|
+
* @returns {{group: string, artifact: string, version: string}[]}
|
|
229
|
+
*/
|
|
230
|
+
export declare function jarPathCoordinates(entry: Object): {
|
|
231
|
+
group: string;
|
|
232
|
+
artifact: string;
|
|
233
|
+
version: string;
|
|
234
|
+
}[];
|
|
202
235
|
/**
|
|
203
236
|
* Build the symbol index from the three sources, reading each classpath jar
|
|
204
237
|
* once, and only for components that carry no namespaces yet.
|
|
@@ -241,9 +274,18 @@ export declare function collectScalasemEvidence(report?: Object, components?: Ob
|
|
|
241
274
|
/**
|
|
242
275
|
* The component purl of the library a crypto finding names as its provider.
|
|
243
276
|
* Maven coordinates match on group and base artifact; the short aliases cover
|
|
244
|
-
* the providers the rules emit for libraries without a coordinate.
|
|
277
|
+
* the providers the rules emit for libraries without a coordinate. Of several
|
|
278
|
+
* matching components, one on the referencing module's classpath wins, then
|
|
279
|
+
* the artifact whose name extends the provider's least (`bcprov-jdk18on`
|
|
280
|
+
* over `bcprov-ext-jdk18on`), then the first purl, so the choice never
|
|
281
|
+
* depends on the order of the BOM.
|
|
282
|
+
*
|
|
283
|
+
* @param {string} provider Provider the finding names.
|
|
284
|
+
* @param {Object[]} components BOM components.
|
|
285
|
+
* @param {Set<string>} [classpathPurls] Purls on the module's classpath.
|
|
286
|
+
* @returns {string|undefined} Component purl.
|
|
245
287
|
*/
|
|
246
|
-
export declare function scalasemProviderPurl(provider:
|
|
288
|
+
export declare function scalasemProviderPurl(provider: string, components?: Object[], classpathPurls?: Set<string>): string | undefined;
|
|
247
289
|
/**
|
|
248
290
|
* A JDBC address without what may carry credentials: userinfo, the Oracle
|
|
249
291
|
* `user/password@` prefix, URL parameters and the `;key=value` properties
|
|
@@ -265,7 +307,7 @@ export declare function scalasemServiceName(service: any): any;
|
|
|
265
307
|
* host, a host as it is, a topic as `client:topic`, a JDBC URL with its
|
|
266
308
|
* credentials and parameters dropped.
|
|
267
309
|
*/
|
|
268
|
-
export declare function scalasemServiceEndpoint(service: any):
|
|
310
|
+
export declare function scalasemServiceEndpoint(service: any): string | undefined;
|
|
269
311
|
/**
|
|
270
312
|
* Outbound services: HTTP and websocket clients, data stores, messaging
|
|
271
313
|
* topics and cloud clients. Locations ride in
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"scalasem.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/scalasem.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"scalasem.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/scalasem.js"],"names":[],"mappings":"AAyDA,eAAO,MAAM,kBAAkB,UAA4B,CAAC;AAM5D,eAAO,MAAM,sBAAsB,aAQjC,CAAC;AAEH,wBAAgB,oBAAoB,CAAC,UAAU,KAAA,EAAE,IAAI,KAAA,EAAE,KAAK,KAAA,QAY3D;AAED,wBAAgB,gBAAgB,CAAC,GAAG,KAAA,EAAE,GAAG,KAAA,EAAE,IAAI,KAAA,EAAE,KAAK,KAAA,QAMrD;AAED,wBAAgB,WAAW,CAAC,GAAG,KAAA,EAAE,GAAG,KAAA,EAAE,KAAK,KAAA,QAM1C;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAGgC,GAF9B,OAAO,CAMnB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAH7B,MAGkC,GAFhC,OAAO,CASnB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAFzB,MAAM,GAAC,SAAS,CAM5B;AA0BD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAH/B,MAGoC,GAFlC,MAAM,GAAC,SAAS,CAsB5B;AAuBD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAH9B,MAG8B,GAF5B,OAAO,CAOnB;AAqHD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAL5B,MAK4B,EAAE,OAAO,GAJrC,MAI0C,GAHxC,MAAM,GAAC,SAAS,CA2D5B;AAwOD;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EALG,MAAM,GAAC,SAKV,EACN,cAAc,MAAmC,GAJtC,MAAM,EAAE,CA0DpB;AAED,wBAAgB,SAAS,CAAC,MAAM,KAAA,sBAI/B;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAH3B,MAG2B,GAFzB,KAAK,GAAC,IAAI,GAAC,QAAQ,CAI/B;AAuCD;;;;;;;;;;;;GAYG;AACH,qBAAa,cAAc;IAElB,UAAU;IACV,YAAY;IACZ,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,cAAc;IACd,eAAe;IAPtB,cAQC;IAED,aAAa,CAAC,IAAI,KAAA,WAEjB;IAED;;;;;;;;OAQG;IACH,aAAa,CAAC,IAAI,EAJP,MAIO,EAAE,KAAK,EAHd,MAAM,EAGQ,EAAE,MAAM,EAFtB,MAEsB,QA2ChC;IAED,SAAS,CAAC,GAAG,KAAA,EAAE,MAAM,KAAA,EAAE,IAAI,KAAA,EAAE,MAAM,KAAA,QAelC;IAED;;;;;OAKG;IACH,qBAAqB,CAAC,MAAM,EAFjB,MAEiB,QAiB3B;IAED;;;OAGG;IACH,SAAS,CAAC,MAAM,KAAA,WAWf;IAED;;;OAGG;IACH,WAAW,CAAC,MAAM,KAAA,OASjB;IAED;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,MAAM,KAAA,OAiBnB;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,MAAM,EALF,MAKE,EAAE,QAAQ,EAJZ,MAAM,GAAC,SAIK,EAAE,YAAY,EAH1B,GAAG,CAAC,MAAM,CAAC,GAAC,SAGc,GAFxB,MAAM,GAAC,SAAS,CAoB5B;IAED;;;;OAIG;IACH,SAAS,CAAC,MAAM,KAAA,EAAE,QAAQ,KAAA,EAAE,YAAY,KAAA,SAcvC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,UAAU,KAAA,EAAE,QAAQ,KAAA,EAAE,YAAY,KAAA,SA4BxC;CACF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,KAAA,WAElC;AA+CD;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,QAAK;;;EAgDvD;AAsBD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,KAAA,EAAE,eAAe,KAAA,EAAE,QAAQ,KAAA,GAHvD;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAC,GAAC,SAAS,CA2BzD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAJ7B,MAI6B,GAF3B;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,EAAE,CA0EhE;AAoCD;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EALrC,MAKqC,EAAE,UAAU,EAJjD,MAAM,EAI2C,EAAE,YAAY,EAH/D,MAG+D,GAF7D,OAAO,CAAC,cAAc,CAAC,CAwFnC;AAsFD,eAAO,MAAM,uBAAuB,aASlC,CAAC;AACH,eAAO,MAAM,uBAAuB,aAKlC,CAAC;AAGH,eAAO,MAAM,6BAA6B,aAUxC,CAAC;AACH,eAAO,MAAM,0BAA0B,aA0CrC,CAAC;AAqEH;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAP9B,MAO8B,EAAE,OAAO,AAN/C,CACA,EADQ,MAMuC,EAAE,IAAI,AALrD,CACA,EADQ,MAK6C,EAAE,KAAK,AAJ5D,CACA,EADQ,MAIoD,EAAE,OAAO,AAHrE,CACA,EADQ,MAG6D,GAF3D,MAAM,GAAC,SAAS,CA8C5B;AAgDD;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,GAPG,MAOE,EACX,UAAU,GAPD,MAAM,EAOA,EACf,OAAO,GAPE,MAOG,GALD,OAAO,CAAC,MAAM,CAAC,CA0E3B;AAyXD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EANC,MAMD,EACR,UAAU,GAND,MAAM,EAMA,EACf,cAAc,AANb,CACA,EADQ,GAAG,CAAC,MAAM,CAMO,GALf,MAAM,GAAC,SAAS,CAmD5B;AAwfD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAH1B,MAG0B,GAFxB,MAAM,CAKlB;AAoDD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,KAAA,OAiB1C;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,KAAA,sBAoB9C;AASD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,GAJnC,MAIwC,EAAE,WAAW,GAHrD,MAG0D,GAFxD,MAAM,CAmDlB;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,GAJvC,MAI4C,EAAE,WAAW,GAHzD,MAG8D,GAF5D,MAAM,CA6DlB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,2BAA2B,CAC/C,GAAG,EARM,MAQN,EACH,OAAO,GARE,MAAM,EAQH,EACZ,OAAO,AARN,CACA,EADQ,MAQG,GAPD,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAC,CAAC,CAwEpF"}
|
|
@@ -14,6 +14,32 @@
|
|
|
14
14
|
* @returns {boolean}
|
|
15
15
|
*/
|
|
16
16
|
export declare function isLicenseFileName(name: string): boolean;
|
|
17
|
+
/**
|
|
18
|
+
* Read the version of a vendored directory from the library's own version
|
|
19
|
+
* header, else from its CMake project() call.
|
|
20
|
+
*
|
|
21
|
+
* @param {string} dir Absolute path of the vendored directory
|
|
22
|
+
* @returns {{version?: string, source?: string, cpe?: string, properties: Object[]}|undefined}
|
|
23
|
+
* undefined when nothing is known, and without a version when only the fix
|
|
24
|
+
* marker could be read
|
|
25
|
+
*/
|
|
26
|
+
export declare function vendoredVersionOf(dir: string): {
|
|
27
|
+
version?: string;
|
|
28
|
+
source?: string;
|
|
29
|
+
cpe?: string;
|
|
30
|
+
properties: Object[];
|
|
31
|
+
} | undefined;
|
|
32
|
+
/**
|
|
33
|
+
* Whether a file lies under a directory conventionally holding another
|
|
34
|
+
* project's code (`third_party/`, `vendor/`, `external/`) below the scan root.
|
|
35
|
+
* Build files there belong to the copied project: building them runs that
|
|
36
|
+
* project's build, and their dependencies are its build tooling.
|
|
37
|
+
*
|
|
38
|
+
* @param {string} root Project scan root
|
|
39
|
+
* @param {string} file File path
|
|
40
|
+
* @returns {boolean}
|
|
41
|
+
*/
|
|
42
|
+
export declare function isInVendoredDir(root: string, file: string): boolean;
|
|
17
43
|
/**
|
|
18
44
|
* Find the directories of a project that carry code under a license other
|
|
19
45
|
* than the project's.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"vendoredCode.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/vendoredCode.js"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA2BH;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAH3B,MAG2B,GAFzB,OAAO,CAkBnB;
|
|
1
|
+
{"version":3,"file":"vendoredCode.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/vendoredCode.js"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA2BH;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAH3B,MAG2B,GAFzB,OAAO,CAkBnB;AAuJD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAL1B,MAK0B,GAJxB;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAC,GAAC,SAAS,CAuC7F;AAcD;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAJzB,MAIyB,EAAE,IAAI,EAH/B,MAG+B,GAF7B,OAAO,CAWnB;AAMD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAP1B,MAO0B,EAAE,OAAO,GANnC,MAMwC,EAAE,WAAW,AAL7D,CAEA,EAFQ,MAAM,EAKoD,GAHxD;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAC,CA0FlD"}
|
|
@@ -0,0 +1,40 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Find the virtual environments and pyenv interpreters under the fixed
|
|
3
|
+
* places of a root.
|
|
4
|
+
*
|
|
5
|
+
* @param {string} rootPath root directory
|
|
6
|
+
* @param {string} platform `linux` or `darwin`
|
|
7
|
+
* @returns {{path: string, kind: string}[]} environments, at most MAX_ENVIRONMENTS
|
|
8
|
+
*/
|
|
9
|
+
export declare function findPythonEnvironments(rootPath: string, platform: string): {
|
|
10
|
+
path: string;
|
|
11
|
+
kind: string;
|
|
12
|
+
}[];
|
|
13
|
+
/**
|
|
14
|
+
* Inventory the packages installed in the virtual environments and pyenv
|
|
15
|
+
* interpreters of a host. One component per distinct name and version, with
|
|
16
|
+
* an occurrence for each dist-info directory it was found in, so no host path
|
|
17
|
+
* reaches a purl.
|
|
18
|
+
*
|
|
19
|
+
* @param {Object} [options] options
|
|
20
|
+
* @param {string} [options.rootPath="/"] root directory; tests point it at a built tree
|
|
21
|
+
* @param {string} [options.platform] `linux` or `darwin`
|
|
22
|
+
* @returns {Object[]} pypi components
|
|
23
|
+
*/
|
|
24
|
+
export declare function probeHostPythonEnvironments(options?: {
|
|
25
|
+
rootPath?: string;
|
|
26
|
+
platform?: string;
|
|
27
|
+
}): Object[];
|
|
28
|
+
/**
|
|
29
|
+
* Add the packages of the host's Python environments to an OBOM's component
|
|
30
|
+
* list. A package osquery already listed from the interpreter's own
|
|
31
|
+
* site-packages keeps its component; the environment's dist-info becomes one
|
|
32
|
+
* more occurrence of it, and its cdx:python:environment property says where
|
|
33
|
+
* else it is installed.
|
|
34
|
+
*
|
|
35
|
+
* @param {Object[]} components OBOM components
|
|
36
|
+
* @param {Object[]} envPackages result of probeHostPythonEnvironments
|
|
37
|
+
* @returns {Object[]} the components, with the environment packages merged in
|
|
38
|
+
*/
|
|
39
|
+
export declare function mergeHostPythonEnvironmentPackages(components: Object[], envPackages: Object[]): Object[];
|
|
40
|
+
//# sourceMappingURL=venvProbe.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"venvProbe.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/venvProbe.js"],"names":[],"mappings":"AAoHA;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAJpC,MAIoC,EAAE,QAAQ,EAH9C,MAG8C,GAF5C;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAC,EAAE,CAkD1C;AA8BD;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,AALhD,CAGA,EAFA;IAAyB,QAAQ,AAAjC,CACA,EADQ,MAAM,CACd;IAAyB,QAAQ,AAAjC,CACA,EADQ,MAAM,CACd;CAEqD,GAF3C,MAAM,EAAE,CAkGpB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kCAAkC,CAAC,UAAU,EAJlD,MAAM,EAI4C,EAAE,WAAW,EAH/D,MAAM,EAGyD,GAF7D,MAAM,EAAE,CAuCpB"}
|