@cdxgen/cdxgen 13.5.0 → 13.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (380) hide show
  1. package/README.md +17 -10
  2. package/bin/audit.js +7 -4
  3. package/bin/cdxgen.js +260 -37
  4. package/bin/convert.js +146 -22
  5. package/bin/evinse.js +28 -3
  6. package/bin/repl.js +47 -3
  7. package/bin/sign.js +211 -34
  8. package/bin/tracebom.js +18 -6
  9. package/bin/validate.js +24 -3
  10. package/bin/verify.js +113 -5
  11. package/data/behavior-taxonomy.schema.json +1491 -0
  12. package/data/cyclonedx-2.0-bundled.schema.json +18606 -5528
  13. package/data/cyclonedx-2.0-cryptography-defs.schema.json +857 -0
  14. package/data/license-aliases.json +24 -2
  15. package/data/pqc-migration.json +239 -0
  16. package/data/remediations.json +176 -0
  17. package/data/rules/ai-bom.yaml +1 -1
  18. package/data/rules/brotli-decoder.yaml +107 -0
  19. package/data/rules/cbom-security.yaml +4 -3
  20. package/data/rules/package-integrity.yaml +28 -0
  21. package/data/rules/vscode-extensions.yaml +75 -0
  22. package/data/spdx-license-list.json +121 -7
  23. package/data/spdx-licenses.json +69 -0
  24. package/data/spdx.schema.json +845 -2
  25. package/lib/audit/index.js +25 -3
  26. package/lib/cli/bomAssembly.js +172 -4
  27. package/lib/cli/cliOptions.js +121 -17
  28. package/lib/cli/index.js +720 -902
  29. package/lib/cli/jsBom.js +156 -64
  30. package/lib/cli/jvmBom.js +602 -86
  31. package/lib/cli/managedBom.js +161 -19
  32. package/lib/cli/nativeBom.js +52 -5
  33. package/lib/core/boundedFile.js +344 -0
  34. package/lib/core/brotliProbe.js +182 -0
  35. package/lib/core/env.js +34 -0
  36. package/lib/core/fs.js +138 -3
  37. package/lib/core/globPatterns.js +218 -0
  38. package/lib/core/httpClient.js +98 -1
  39. package/lib/core/lockPaths.js +38 -0
  40. package/lib/core/paths.js +24 -1
  41. package/lib/core/processTree.js +100 -8
  42. package/lib/core/projectConfig.js +332 -25
  43. package/lib/core/toolRegistry.js +184 -0
  44. package/lib/ecosystems/cppEvidence.js +263 -106
  45. package/lib/ecosystems/cppIncludeResolver.js +16 -5
  46. package/lib/ecosystems/denoutils.js +2 -2
  47. package/lib/ecosystems/ecosystems.js +25 -10
  48. package/lib/ecosystems/gemHostProbe.js +301 -0
  49. package/lib/ecosystems/golem.js +3 -8
  50. package/lib/ecosystems/gradleutils.js +1909 -229
  51. package/lib/ecosystems/jsEvidence.js +90 -38
  52. package/lib/ecosystems/kosi.js +3 -5
  53. package/lib/ecosystems/npmVersionResolution.js +376 -0
  54. package/lib/ecosystems/parsers-bazel.js +107 -6
  55. package/lib/ecosystems/parsers-js.js +505 -22
  56. package/lib/ecosystems/parsers-misc.js +209 -20
  57. package/lib/ecosystems/parsers-python.js +178 -30
  58. package/lib/ecosystems/parsers-rust.js +117 -15
  59. package/lib/ecosystems/pythonutils.js +128 -2
  60. package/lib/ecosystems/remote/huggingface.js +22 -0
  61. package/lib/ecosystems/rubyutils.js +538 -31
  62. package/lib/ecosystems/rusi.js +2 -4
  63. package/lib/ecosystems/scalacliutils.js +2 -0
  64. package/lib/ecosystems/scalasem.js +798 -152
  65. package/lib/ecosystems/vendoredCode.js +237 -3
  66. package/lib/ecosystems/venvProbe.js +360 -0
  67. package/lib/evinser/evinser.js +536 -71
  68. package/lib/evinser/scalasem.js +5 -1
  69. package/lib/helpers/agenticToolutils.js +525 -94
  70. package/lib/helpers/bomSigner.js +43 -9
  71. package/lib/helpers/jssSigner.js +1276 -0
  72. package/lib/helpers/vsixutils.js +1574 -315
  73. package/lib/inventory/agentBlueprint.js +193 -0
  74. package/lib/inventory/agentToolNames.js +145 -0
  75. package/lib/inventory/aiCollector.js +153 -7
  76. package/lib/inventory/aiInventory.js +44 -8
  77. package/lib/inventory/aiProviders.js +324 -0
  78. package/lib/inventory/atomUtils.js +77 -0
  79. package/lib/inventory/bomUtils.js +8 -1
  80. package/lib/inventory/brotliDecoder.js +142 -0
  81. package/lib/inventory/buildToolRateLimit.js +1 -1
  82. package/lib/inventory/cbomutils.js +56 -7
  83. package/lib/inventory/ciParsers/githubActionsLock.js +821 -0
  84. package/lib/inventory/citations.js +31 -2
  85. package/lib/inventory/communityAiConfigParser.js +978 -80
  86. package/lib/inventory/cyclonedx20.js +152 -0
  87. package/lib/inventory/cyclonedx20Common.js +286 -0
  88. package/lib/inventory/cyclonedx20Derived.js +159 -0
  89. package/lib/inventory/cyclonedx20Parties.js +552 -0
  90. package/lib/inventory/cyclonedx20Read.js +768 -0
  91. package/lib/inventory/cyclonedx20ReadCommon.js +374 -0
  92. package/lib/inventory/cyclonedx20ReadComponents.js +692 -0
  93. package/lib/inventory/cyclonedx20ReadContext.js +380 -0
  94. package/lib/inventory/cyclonedx20ReadEvidence.js +466 -0
  95. package/lib/inventory/cyclonedx20ReadSections.js +599 -0
  96. package/lib/inventory/cyclonedx20Render.js +766 -0
  97. package/lib/inventory/cyclonedx20RenderComponents.js +716 -0
  98. package/lib/inventory/cyclonedx20RenderDefinitions.js +405 -0
  99. package/lib/inventory/cyclonedx20RenderEvidence.js +726 -0
  100. package/lib/inventory/cyclonedx20RenderHardware.js +203 -0
  101. package/lib/inventory/cyclonedx20RenderPatents.js +174 -0
  102. package/lib/inventory/cyclonedx20RenderRefIds.js +314 -0
  103. package/lib/inventory/cyclonedx20RenderSections.js +499 -0
  104. package/lib/inventory/cyclonedx20Tables.js +594 -0
  105. package/lib/inventory/deps.js +141 -13
  106. package/lib/inventory/dosai.js +375 -6
  107. package/lib/inventory/dosaiParsers.js +3 -6
  108. package/lib/inventory/dotnetRuntime.js +367 -0
  109. package/lib/inventory/ecosystemFormulationParsers.js +979 -0
  110. package/lib/inventory/envcontext.js +436 -48
  111. package/lib/inventory/evidenceUtils.js +13 -1
  112. package/lib/inventory/fetchBatch.js +1 -1
  113. package/lib/inventory/formulationParsers.js +124 -14
  114. package/lib/inventory/gtfobins.js +13 -0
  115. package/lib/inventory/hbom.js +45 -6
  116. package/lib/inventory/hbomLoader.js +166 -0
  117. package/lib/inventory/hostRuntimeProbe.js +686 -0
  118. package/lib/inventory/jvmLocalRepos.js +9 -2
  119. package/lib/inventory/jvmToolEnv.js +29 -0
  120. package/lib/inventory/licenseEnhancer.js +12 -0
  121. package/lib/inventory/mavenCentralMirror.js +534 -0
  122. package/lib/inventory/mcpConfigParser.js +5 -0
  123. package/lib/inventory/nodeBuildInfo.js +218 -0
  124. package/lib/inventory/nodeHostProbe.js +202 -0
  125. package/lib/inventory/occurrenceKey.js +90 -0
  126. package/lib/inventory/osPackageResolver.js +182 -0
  127. package/lib/inventory/phpBuildInfo.js +10 -59
  128. package/lib/inventory/phpHostProbe.js +32 -488
  129. package/lib/inventory/pqcMigration.js +426 -0
  130. package/lib/inventory/rubyBuildInfo.js +972 -0
  131. package/lib/inventory/rubyHostProbe.js +218 -0
  132. package/lib/inventory/rustFormulationParser.js +21 -10
  133. package/lib/inventory/scalaCoords.js +4 -3
  134. package/lib/inventory/scalaDedupe.js +440 -0
  135. package/lib/inventory/source.js +114 -8
  136. package/lib/managers/binary.js +337 -3
  137. package/lib/managers/docker.js +79 -0
  138. package/lib/parsers/huggingfaceManifest.js +9 -1
  139. package/lib/parsers/huggingfaceUtils.js +18 -0
  140. package/lib/parsers/kiroPermissions.js +166 -0
  141. package/lib/parsers/largeJson.js +28 -11
  142. package/lib/parsers/vscodeExtensionId.js +183 -0
  143. package/lib/server/server.js +48 -35
  144. package/lib/stages/postgen/postgen.js +41 -1
  145. package/lib/stages/postgen/ruleEngine.js +13 -5
  146. package/lib/stages/postgen/specVersionCompat.js +76 -0
  147. package/lib/stages/pregen/envAudit.js +1 -0
  148. package/lib/stages/pregen/pregen.js +114 -57
  149. package/lib/validator/bomValidator.js +14 -2
  150. package/lib/validator/complianceEngine.js +30 -3
  151. package/lib/validator/complianceRules.js +1416 -4
  152. package/lib/validator/generated/validate-1.6.mjs +1 -1
  153. package/lib/validator/generated/validate-1.7.mjs +1 -1
  154. package/lib/validator/generated/validate-2.0.mjs +57554 -13851
  155. package/lib/validator/index.js +49 -8
  156. package/lib/validator/reporters/json.js +6 -0
  157. package/package.json +11 -10
  158. package/types/bin/repl.d.ts.map +1 -1
  159. package/types/lib/audit/index.d.ts +6 -2
  160. package/types/lib/audit/index.d.ts.map +1 -1
  161. package/types/lib/cli/bomAssembly.d.ts +29 -1
  162. package/types/lib/cli/bomAssembly.d.ts.map +1 -1
  163. package/types/lib/cli/cliOptions.d.ts +6 -0
  164. package/types/lib/cli/cliOptions.d.ts.map +1 -1
  165. package/types/lib/cli/index.d.ts.map +1 -1
  166. package/types/lib/cli/jsBom.d.ts +3 -18
  167. package/types/lib/cli/jsBom.d.ts.map +1 -1
  168. package/types/lib/cli/jvmBom.d.ts +15 -0
  169. package/types/lib/cli/jvmBom.d.ts.map +1 -1
  170. package/types/lib/cli/managedBom.d.ts.map +1 -1
  171. package/types/lib/cli/nativeBom.d.ts.map +1 -1
  172. package/types/lib/core/boundedFile.d.ts +100 -0
  173. package/types/lib/core/boundedFile.d.ts.map +1 -0
  174. package/types/lib/core/brotliProbe.d.ts +37 -0
  175. package/types/lib/core/brotliProbe.d.ts.map +1 -0
  176. package/types/lib/core/env.d.ts +14 -0
  177. package/types/lib/core/env.d.ts.map +1 -1
  178. package/types/lib/core/fs.d.ts +4 -0
  179. package/types/lib/core/fs.d.ts.map +1 -1
  180. package/types/lib/core/globPatterns.d.ts +70 -0
  181. package/types/lib/core/globPatterns.d.ts.map +1 -0
  182. package/types/lib/core/httpClient.d.ts +24 -0
  183. package/types/lib/core/httpClient.d.ts.map +1 -1
  184. package/types/lib/core/lockPaths.d.ts +19 -0
  185. package/types/lib/core/lockPaths.d.ts.map +1 -0
  186. package/types/lib/core/paths.d.ts +9 -0
  187. package/types/lib/core/paths.d.ts.map +1 -1
  188. package/types/lib/core/processTree.d.ts +17 -4
  189. package/types/lib/core/processTree.d.ts.map +1 -1
  190. package/types/lib/core/projectConfig.d.ts +47 -8
  191. package/types/lib/core/projectConfig.d.ts.map +1 -1
  192. package/types/lib/core/toolRegistry.d.ts +36 -0
  193. package/types/lib/core/toolRegistry.d.ts.map +1 -0
  194. package/types/lib/ecosystems/cppEvidence.d.ts +40 -13
  195. package/types/lib/ecosystems/cppEvidence.d.ts.map +1 -1
  196. package/types/lib/ecosystems/cppIncludeResolver.d.ts +2 -1
  197. package/types/lib/ecosystems/cppIncludeResolver.d.ts.map +1 -1
  198. package/types/lib/ecosystems/ecosystems.d.ts.map +1 -1
  199. package/types/lib/ecosystems/gemHostProbe.d.ts +28 -0
  200. package/types/lib/ecosystems/gemHostProbe.d.ts.map +1 -0
  201. package/types/lib/ecosystems/golem.d.ts.map +1 -1
  202. package/types/lib/ecosystems/gradleutils.d.ts +294 -20
  203. package/types/lib/ecosystems/gradleutils.d.ts.map +1 -1
  204. package/types/lib/ecosystems/jsEvidence.d.ts +14 -1
  205. package/types/lib/ecosystems/jsEvidence.d.ts.map +1 -1
  206. package/types/lib/ecosystems/kosi.d.ts.map +1 -1
  207. package/types/lib/ecosystems/npmVersionResolution.d.ts +119 -0
  208. package/types/lib/ecosystems/npmVersionResolution.d.ts.map +1 -0
  209. package/types/lib/ecosystems/parsers-bazel.d.ts.map +1 -1
  210. package/types/lib/ecosystems/parsers-js.d.ts +17 -20
  211. package/types/lib/ecosystems/parsers-js.d.ts.map +1 -1
  212. package/types/lib/ecosystems/parsers-misc.d.ts +19 -0
  213. package/types/lib/ecosystems/parsers-misc.d.ts.map +1 -1
  214. package/types/lib/ecosystems/parsers-python.d.ts +10 -0
  215. package/types/lib/ecosystems/parsers-python.d.ts.map +1 -1
  216. package/types/lib/ecosystems/parsers-rust.d.ts.map +1 -1
  217. package/types/lib/ecosystems/pythonutils.d.ts +19 -1
  218. package/types/lib/ecosystems/pythonutils.d.ts.map +1 -1
  219. package/types/lib/ecosystems/remote/huggingface.d.ts.map +1 -1
  220. package/types/lib/ecosystems/rubyutils.d.ts +144 -12
  221. package/types/lib/ecosystems/rubyutils.d.ts.map +1 -1
  222. package/types/lib/ecosystems/rusi.d.ts.map +1 -1
  223. package/types/lib/ecosystems/scalacliutils.d.ts.map +1 -1
  224. package/types/lib/ecosystems/scalasem.d.ts +58 -16
  225. package/types/lib/ecosystems/scalasem.d.ts.map +1 -1
  226. package/types/lib/ecosystems/vendoredCode.d.ts +26 -0
  227. package/types/lib/ecosystems/vendoredCode.d.ts.map +1 -1
  228. package/types/lib/ecosystems/venvProbe.d.ts +40 -0
  229. package/types/lib/ecosystems/venvProbe.d.ts.map +1 -0
  230. package/types/lib/evinser/evinser.d.ts +120 -13
  231. package/types/lib/evinser/evinser.d.ts.map +1 -1
  232. package/types/lib/evinser/scalasem.d.ts.map +1 -1
  233. package/types/lib/helpers/agenticToolutils.d.ts +53 -19
  234. package/types/lib/helpers/agenticToolutils.d.ts.map +1 -1
  235. package/types/lib/helpers/bomSigner.d.ts +20 -3
  236. package/types/lib/helpers/bomSigner.d.ts.map +1 -1
  237. package/types/lib/helpers/jssSigner.d.ts +288 -0
  238. package/types/lib/helpers/jssSigner.d.ts.map +1 -0
  239. package/types/lib/helpers/vsixutils.d.ts +303 -19
  240. package/types/lib/helpers/vsixutils.d.ts.map +1 -1
  241. package/types/lib/inventory/agentBlueprint.d.ts +70 -0
  242. package/types/lib/inventory/agentBlueprint.d.ts.map +1 -0
  243. package/types/lib/inventory/agentToolNames.d.ts +51 -0
  244. package/types/lib/inventory/agentToolNames.d.ts.map +1 -0
  245. package/types/lib/inventory/aiCollector.d.ts.map +1 -1
  246. package/types/lib/inventory/aiInventory.d.ts.map +1 -1
  247. package/types/lib/inventory/aiProviders.d.ts +85 -0
  248. package/types/lib/inventory/aiProviders.d.ts.map +1 -0
  249. package/types/lib/inventory/atomUtils.d.ts +19 -0
  250. package/types/lib/inventory/atomUtils.d.ts.map +1 -1
  251. package/types/lib/inventory/bomUtils.d.ts.map +1 -1
  252. package/types/lib/inventory/brotliDecoder.d.ts +58 -0
  253. package/types/lib/inventory/brotliDecoder.d.ts.map +1 -0
  254. package/types/lib/inventory/cbomutils.d.ts +17 -0
  255. package/types/lib/inventory/cbomutils.d.ts.map +1 -1
  256. package/types/lib/inventory/ciParsers/githubActionsLock.d.ts +101 -0
  257. package/types/lib/inventory/ciParsers/githubActionsLock.d.ts.map +1 -0
  258. package/types/lib/inventory/citations.d.ts +5 -0
  259. package/types/lib/inventory/citations.d.ts.map +1 -1
  260. package/types/lib/inventory/communityAiConfigParser.d.ts.map +1 -1
  261. package/types/lib/inventory/cyclonedx20.d.ts +99 -0
  262. package/types/lib/inventory/cyclonedx20.d.ts.map +1 -0
  263. package/types/lib/inventory/cyclonedx20Common.d.ts +102 -0
  264. package/types/lib/inventory/cyclonedx20Common.d.ts.map +1 -0
  265. package/types/lib/inventory/cyclonedx20Derived.d.ts +74 -0
  266. package/types/lib/inventory/cyclonedx20Derived.d.ts.map +1 -0
  267. package/types/lib/inventory/cyclonedx20Parties.d.ts +91 -0
  268. package/types/lib/inventory/cyclonedx20Parties.d.ts.map +1 -0
  269. package/types/lib/inventory/cyclonedx20Read.d.ts +51 -0
  270. package/types/lib/inventory/cyclonedx20Read.d.ts.map +1 -0
  271. package/types/lib/inventory/cyclonedx20ReadCommon.d.ts +69 -0
  272. package/types/lib/inventory/cyclonedx20ReadCommon.d.ts.map +1 -0
  273. package/types/lib/inventory/cyclonedx20ReadComponents.d.ts +77 -0
  274. package/types/lib/inventory/cyclonedx20ReadComponents.d.ts.map +1 -0
  275. package/types/lib/inventory/cyclonedx20ReadContext.d.ts +118 -0
  276. package/types/lib/inventory/cyclonedx20ReadContext.d.ts.map +1 -0
  277. package/types/lib/inventory/cyclonedx20ReadEvidence.d.ts +40 -0
  278. package/types/lib/inventory/cyclonedx20ReadEvidence.d.ts.map +1 -0
  279. package/types/lib/inventory/cyclonedx20ReadSections.d.ts +45 -0
  280. package/types/lib/inventory/cyclonedx20ReadSections.d.ts.map +1 -0
  281. package/types/lib/inventory/cyclonedx20Render.d.ts +53 -0
  282. package/types/lib/inventory/cyclonedx20Render.d.ts.map +1 -0
  283. package/types/lib/inventory/cyclonedx20RenderComponents.d.ts +73 -0
  284. package/types/lib/inventory/cyclonedx20RenderComponents.d.ts.map +1 -0
  285. package/types/lib/inventory/cyclonedx20RenderDefinitions.d.ts +29 -0
  286. package/types/lib/inventory/cyclonedx20RenderDefinitions.d.ts.map +1 -0
  287. package/types/lib/inventory/cyclonedx20RenderEvidence.d.ts +110 -0
  288. package/types/lib/inventory/cyclonedx20RenderEvidence.d.ts.map +1 -0
  289. package/types/lib/inventory/cyclonedx20RenderHardware.d.ts +42 -0
  290. package/types/lib/inventory/cyclonedx20RenderHardware.d.ts.map +1 -0
  291. package/types/lib/inventory/cyclonedx20RenderPatents.d.ts +26 -0
  292. package/types/lib/inventory/cyclonedx20RenderPatents.d.ts.map +1 -0
  293. package/types/lib/inventory/cyclonedx20RenderRefIds.d.ts +55 -0
  294. package/types/lib/inventory/cyclonedx20RenderRefIds.d.ts.map +1 -0
  295. package/types/lib/inventory/cyclonedx20RenderSections.d.ts +45 -0
  296. package/types/lib/inventory/cyclonedx20RenderSections.d.ts.map +1 -0
  297. package/types/lib/inventory/cyclonedx20Tables.d.ts +134 -0
  298. package/types/lib/inventory/cyclonedx20Tables.d.ts.map +1 -0
  299. package/types/lib/inventory/deps.d.ts +35 -2
  300. package/types/lib/inventory/deps.d.ts.map +1 -1
  301. package/types/lib/inventory/dosai.d.ts +36 -1
  302. package/types/lib/inventory/dosai.d.ts.map +1 -1
  303. package/types/lib/inventory/dosaiParsers.d.ts.map +1 -1
  304. package/types/lib/inventory/dotnetRuntime.d.ts +91 -0
  305. package/types/lib/inventory/dotnetRuntime.d.ts.map +1 -0
  306. package/types/lib/inventory/ecosystemFormulationParsers.d.ts +73 -0
  307. package/types/lib/inventory/ecosystemFormulationParsers.d.ts.map +1 -0
  308. package/types/lib/inventory/envcontext.d.ts +74 -12
  309. package/types/lib/inventory/envcontext.d.ts.map +1 -1
  310. package/types/lib/inventory/evidenceUtils.d.ts.map +1 -1
  311. package/types/lib/inventory/formulationParsers.d.ts.map +1 -1
  312. package/types/lib/inventory/gtfobins.d.ts.map +1 -1
  313. package/types/lib/inventory/hbom.d.ts +11 -0
  314. package/types/lib/inventory/hbom.d.ts.map +1 -1
  315. package/types/lib/inventory/hbomLoader.d.ts +54 -0
  316. package/types/lib/inventory/hbomLoader.d.ts.map +1 -1
  317. package/types/lib/inventory/hostRuntimeProbe.d.ts +44 -0
  318. package/types/lib/inventory/hostRuntimeProbe.d.ts.map +1 -0
  319. package/types/lib/inventory/jvmLocalRepos.d.ts +5 -1
  320. package/types/lib/inventory/jvmLocalRepos.d.ts.map +1 -1
  321. package/types/lib/inventory/jvmToolEnv.d.ts +12 -0
  322. package/types/lib/inventory/jvmToolEnv.d.ts.map +1 -1
  323. package/types/lib/inventory/licenseEnhancer.d.ts.map +1 -1
  324. package/types/lib/inventory/mavenCentralMirror.d.ts +170 -0
  325. package/types/lib/inventory/mavenCentralMirror.d.ts.map +1 -0
  326. package/types/lib/inventory/mcpConfigParser.d.ts.map +1 -1
  327. package/types/lib/inventory/nodeBuildInfo.d.ts +95 -0
  328. package/types/lib/inventory/nodeBuildInfo.d.ts.map +1 -0
  329. package/types/lib/inventory/nodeHostProbe.d.ts +15 -0
  330. package/types/lib/inventory/nodeHostProbe.d.ts.map +1 -0
  331. package/types/lib/inventory/occurrenceKey.d.ts +52 -0
  332. package/types/lib/inventory/occurrenceKey.d.ts.map +1 -0
  333. package/types/lib/inventory/osPackageResolver.d.ts +38 -0
  334. package/types/lib/inventory/osPackageResolver.d.ts.map +1 -1
  335. package/types/lib/inventory/phpBuildInfo.d.ts.map +1 -1
  336. package/types/lib/inventory/phpHostProbe.d.ts.map +1 -1
  337. package/types/lib/inventory/pqcMigration.d.ts +84 -0
  338. package/types/lib/inventory/pqcMigration.d.ts.map +1 -0
  339. package/types/lib/inventory/rubyBuildInfo.d.ts +271 -0
  340. package/types/lib/inventory/rubyBuildInfo.d.ts.map +1 -0
  341. package/types/lib/inventory/rubyHostProbe.d.ts +47 -0
  342. package/types/lib/inventory/rubyHostProbe.d.ts.map +1 -0
  343. package/types/lib/inventory/rustFormulationParser.d.ts +7 -2
  344. package/types/lib/inventory/rustFormulationParser.d.ts.map +1 -1
  345. package/types/lib/inventory/scalaCoords.d.ts.map +1 -1
  346. package/types/lib/inventory/scalaDedupe.d.ts +43 -0
  347. package/types/lib/inventory/scalaDedupe.d.ts.map +1 -0
  348. package/types/lib/inventory/source.d.ts +25 -0
  349. package/types/lib/inventory/source.d.ts.map +1 -1
  350. package/types/lib/managers/binary.d.ts.map +1 -1
  351. package/types/lib/managers/docker.d.ts +12 -0
  352. package/types/lib/managers/docker.d.ts.map +1 -1
  353. package/types/lib/parsers/huggingfaceManifest.d.ts +10 -1
  354. package/types/lib/parsers/huggingfaceManifest.d.ts.map +1 -1
  355. package/types/lib/parsers/huggingfaceUtils.d.ts +12 -0
  356. package/types/lib/parsers/huggingfaceUtils.d.ts.map +1 -1
  357. package/types/lib/parsers/kiroPermissions.d.ts +62 -0
  358. package/types/lib/parsers/kiroPermissions.d.ts.map +1 -0
  359. package/types/lib/parsers/largeJson.d.ts +4 -3
  360. package/types/lib/parsers/largeJson.d.ts.map +1 -1
  361. package/types/lib/parsers/vscodeExtensionId.d.ts +48 -0
  362. package/types/lib/parsers/vscodeExtensionId.d.ts.map +1 -0
  363. package/types/lib/server/server.d.ts.map +1 -1
  364. package/types/lib/stages/postgen/postgen.d.ts +7 -0
  365. package/types/lib/stages/postgen/postgen.d.ts.map +1 -1
  366. package/types/lib/stages/postgen/ruleEngine.d.ts.map +1 -1
  367. package/types/lib/stages/postgen/specVersionCompat.d.ts +25 -0
  368. package/types/lib/stages/postgen/specVersionCompat.d.ts.map +1 -1
  369. package/types/lib/stages/pregen/envAudit.d.ts.map +1 -1
  370. package/types/lib/stages/pregen/pregen.d.ts +12 -8
  371. package/types/lib/stages/pregen/pregen.d.ts.map +1 -1
  372. package/types/lib/validator/bomValidator.d.ts +5 -1
  373. package/types/lib/validator/bomValidator.d.ts.map +1 -1
  374. package/types/lib/validator/complianceEngine.d.ts +4 -4
  375. package/types/lib/validator/complianceEngine.d.ts.map +1 -1
  376. package/types/lib/validator/complianceRules.d.ts +14 -2
  377. package/types/lib/validator/complianceRules.d.ts.map +1 -1
  378. package/types/lib/validator/index.d.ts +10 -0
  379. package/types/lib/validator/index.d.ts.map +1 -1
  380. package/types/lib/validator/reporters/json.d.ts.map +1 -1
package/data/spdx-licenses.json CHANGED
@@ -9,6 +9,7 @@
9
9
  "Adobe-Glyph",
10
10
  "Adobe-Utopia",
11
11
  "ADSL",
12
+ "Advanced-Cryptics-Dictionary",
12
13
  "AFL-1.1",
13
14
  "AFL-1.2",
14
15
  "AFL-2.0",
@@ -22,6 +23,7 @@
22
23
  "AGPL-3.0-only",
23
24
  "AGPL-3.0-or-later",
24
25
  "Aladdin",
26
+ "ALGLIB-Documentation",
25
27
  "AMD-newlib",
26
28
  "AMDPLPA",
27
29
  "AML",
@@ -46,8 +48,11 @@
46
48
  "Artistic-1.0-cl8",
47
49
  "Artistic-1.0-Perl",
48
50
  "Artistic-2.0",
51
+ "Artistic-dist",
52
+ "Aspell-RU",
49
53
  "ASWF-Digital-Assets-1.0",
50
54
  "ASWF-Digital-Assets-1.1",
55
+ "atc-game",
51
56
  "Baekmuk",
52
57
  "Bahyph",
53
58
  "Barr",
@@ -61,9 +66,11 @@
61
66
  "BlueOak-1.0.0",
62
67
  "Boehm-GC",
63
68
  "Boehm-GC-without-fee",
69
+ "BOLA-1.1",
64
70
  "Borceux",
65
71
  "Brian-Gladman-2-Clause",
66
72
  "Brian-Gladman-3-Clause",
73
+ "Brian-Gladman-3-Clause-no-conversion",
67
74
  "BSD-1-Clause",
68
75
  "BSD-2-Clause",
69
76
  "BSD-2-Clause-Darwin",
@@ -71,6 +78,8 @@
71
78
  "BSD-2-Clause-FreeBSD",
72
79
  "BSD-2-Clause-NetBSD",
73
80
  "BSD-2-Clause-Patent",
81
+ "BSD-2-Clause-pkgconf-disclaimer",
82
+ "BSD-2-Clause-pos-unchanged",
74
83
  "BSD-2-Clause-Views",
75
84
  "BSD-3-Clause",
76
85
  "BSD-3-Clause-acpica",
@@ -85,21 +94,29 @@
85
94
  "BSD-3-Clause-No-Nuclear-License-2014",
86
95
  "BSD-3-Clause-No-Nuclear-Warranty",
87
96
  "BSD-3-Clause-Open-MPI",
97
+ "BSD-3-Clause-OpenWebUI",
88
98
  "BSD-3-Clause-Sun",
99
+ "BSD-3-Clause-Tso",
89
100
  "BSD-4-Clause",
90
101
  "BSD-4-Clause-Shortened",
91
102
  "BSD-4-Clause-UC",
92
103
  "BSD-4.3RENO",
93
104
  "BSD-4.3TAHOE",
94
105
  "BSD-Advertising-Acknowledgement",
106
+ "BSD-ask-to-endorse",
95
107
  "BSD-Attribution-HPND-disclaimer",
96
108
  "BSD-Inferno-Nettverk",
109
+ "BSD-Mark-Modifications",
97
110
  "BSD-Protection",
111
+ "BSD-Source-alt-GPL",
98
112
  "BSD-Source-beginning-file",
99
113
  "BSD-Source-Code",
114
+ "BSD-Source-Code-no-disclaimer",
100
115
  "BSD-Systemics",
101
116
  "BSD-Systemics-W3Works",
102
117
  "BSL-1.0",
118
+ "Buddy",
119
+ "Bugroff",
103
120
  "BUSL-1.1",
104
121
  "bzip2-1.0.5",
105
122
  "bzip2-1.0.6",
@@ -108,6 +125,7 @@
108
125
  "CAL-1.0-Combined-Work-Exception",
109
126
  "Caldera",
110
127
  "Caldera-no-preamble",
128
+ "CAPEC-tou",
111
129
  "Catharon",
112
130
  "CATOSL-1.1",
113
131
  "CC-BY-1.0",
@@ -127,6 +145,7 @@
127
145
  "CC-BY-NC-2.5",
128
146
  "CC-BY-NC-3.0",
129
147
  "CC-BY-NC-3.0-DE",
148
+ "CC-BY-NC-3.0-IGO",
130
149
  "CC-BY-NC-4.0",
131
150
  "CC-BY-NC-ND-1.0",
132
151
  "CC-BY-NC-ND-2.0",
@@ -203,6 +222,7 @@
203
222
  "CPOL-1.02",
204
223
  "Cronyx",
205
224
  "Crossword",
225
+ "CryptoSwift",
206
226
  "CrystalStacker",
207
227
  "CUA-OPL-1.0",
208
228
  "Cube",
@@ -214,6 +234,7 @@
214
234
  "DL-DE-BY-2.0",
215
235
  "DL-DE-ZERO-2.0",
216
236
  "DOC",
237
+ "DocBook-DTD",
217
238
  "DocBook-Schema",
218
239
  "DocBook-Stylesheet",
219
240
  "DocBook-XML",
@@ -235,6 +256,9 @@
235
256
  "EPL-1.0",
236
257
  "EPL-2.0",
237
258
  "ErlPL-1.1",
259
+ "ESA-PL-permissive-2.4",
260
+ "ESA-PL-strong-copyleft-2.4",
261
+ "ESA-PL-weak-copyleft-2.4",
238
262
  "etalab-2.0",
239
263
  "EUDatagrid",
240
264
  "EUPL-1.0",
@@ -244,6 +268,7 @@
244
268
  "Fair",
245
269
  "FBM",
246
270
  "FDK-AAC",
271
+ "FDK-MPEG-H",
247
272
  "Ferguson-Twofish",
248
273
  "Frameworx-1.0",
249
274
  "FreeBSD-DOC",
@@ -252,10 +277,14 @@
252
277
  "FSFAP-no-warranty-disclaimer",
253
278
  "FSFUL",
254
279
  "FSFULLR",
280
+ "FSFULLRSD",
255
281
  "FSFULLRWD",
282
+ "FSL-1.1-ALv2",
283
+ "FSL-1.1-MIT",
256
284
  "FTL",
257
285
  "Furuseth",
258
286
  "fwlw",
287
+ "Game-Programming-Gems",
259
288
  "GCR-docs",
260
289
  "GD",
261
290
  "generic-xts",
@@ -310,9 +339,11 @@
310
339
  "gtkbook",
311
340
  "Gutmann",
312
341
  "HaskellReport",
342
+ "HDF5",
313
343
  "hdparm",
314
344
  "HIDAPI",
315
345
  "Hippocratic-2.1",
346
+ "Hippocratic-3.0-core",
316
347
  "HP-1986",
317
348
  "HP-1989",
318
349
  "HPND",
@@ -335,11 +366,14 @@
335
366
  "HPND-sell-MIT-disclaimer-xserver",
336
367
  "HPND-sell-regexpr",
337
368
  "HPND-sell-variant",
369
+ "HPND-sell-variant-critical-systems",
338
370
  "HPND-sell-variant-MIT-disclaimer",
339
371
  "HPND-sell-variant-MIT-disclaimer-rev",
372
+ "HPND-SMC",
340
373
  "HPND-UC",
341
374
  "HPND-UC-export-US",
342
375
  "HTMLTIDY",
376
+ "hyphen-bulgarian",
343
377
  "IBM-pibs",
344
378
  "ICU",
345
379
  "IEC-Code-Components-EULA",
@@ -349,6 +383,7 @@
349
383
  "iMatix",
350
384
  "Imlib2",
351
385
  "Info-ZIP",
386
+ "Informatica",
352
387
  "Inner-Net-2.0",
353
388
  "InnoSetup",
354
389
  "Intel",
@@ -358,8 +393,10 @@
358
393
  "IPL-1.0",
359
394
  "ISC",
360
395
  "ISC-Veillard",
396
+ "ISO-permission",
361
397
  "Jam",
362
398
  "JasPer-2.0",
399
+ "jove",
363
400
  "JPL-image",
364
401
  "JPNIC",
365
402
  "JSON",
@@ -385,6 +422,7 @@
385
422
  "LGPL-3.0-or-later",
386
423
  "LGPLLR",
387
424
  "Libpng",
425
+ "libpng-1.6.35",
388
426
  "libpng-2.0",
389
427
  "libselinux-1.0",
390
428
  "libtiff",
@@ -415,6 +453,7 @@
415
453
  "magaz",
416
454
  "mailprio",
417
455
  "MakeIndex",
456
+ "man2html",
418
457
  "Martin-Birgmeier",
419
458
  "McPhee-slideshow",
420
459
  "metamail",
@@ -432,10 +471,12 @@
432
471
  "MIT-Khronos-old",
433
472
  "MIT-Modern-Variant",
434
473
  "MIT-open-group",
474
+ "MIT-STK",
435
475
  "MIT-testregex",
436
476
  "MIT-Wu",
437
477
  "MITNFA",
438
478
  "MMIXware",
479
+ "MMPL-1.0.1",
439
480
  "Motosoto",
440
481
  "MPEG-SSG",
441
482
  "mpi-permissive",
@@ -453,6 +494,7 @@
453
494
  "MulanPSL-2.0",
454
495
  "Multics",
455
496
  "Mup",
497
+ "MVT-1.1",
456
498
  "NAIST-2003",
457
499
  "NASA-1.3",
458
500
  "Naumen",
@@ -465,9 +507,11 @@
465
507
  "NetCDF",
466
508
  "Newsletr",
467
509
  "NGPL",
510
+ "ngrep",
468
511
  "NICTA-1.0",
469
512
  "NIST-PD",
470
513
  "NIST-PD-fallback",
514
+ "NIST-PD-TNT",
471
515
  "NIST-Software",
472
516
  "NLOD-1.0",
473
517
  "NLOD-2.0",
@@ -479,6 +523,7 @@
479
523
  "NPL-1.1",
480
524
  "NPOSL-3.0",
481
525
  "NRL",
526
+ "NTIA-PD",
482
527
  "NTP",
483
528
  "NTP-0",
484
529
  "Nunit",
@@ -520,6 +565,7 @@
520
565
  "OLDAP-2.8",
521
566
  "OLFL-1.3",
522
567
  "OML",
568
+ "OpenMDW-1.0",
523
569
  "OpenPBS-2.3",
524
570
  "OpenSSL",
525
571
  "OpenSSL-standalone",
@@ -527,13 +573,16 @@
527
573
  "OPL-1.0",
528
574
  "OPL-UK-3.0",
529
575
  "OPUBL-1.0",
576
+ "OSC-1.0",
530
577
  "OSET-PL-2.1",
531
578
  "OSL-1.0",
532
579
  "OSL-1.1",
533
580
  "OSL-2.0",
534
581
  "OSL-2.1",
535
582
  "OSL-3.0",
583
+ "OSSP",
536
584
  "PADL",
585
+ "ParaType-Free-Font-1.3",
537
586
  "Parity-6.0.0",
538
587
  "Parity-7.0.0",
539
588
  "PDDL-1.0",
@@ -578,6 +627,7 @@
578
627
  "SGI-B-1.1",
579
628
  "SGI-B-2.0",
580
629
  "SGI-OpenGL",
630
+ "SGMLUG-PM",
581
631
  "SGP4",
582
632
  "SHL-0.5",
583
633
  "SHL-0.51",
@@ -591,6 +641,7 @@
591
641
  "SMPPL",
592
642
  "SNIA",
593
643
  "snprintf",
644
+ "SOFA",
594
645
  "softSurfer",
595
646
  "Soundex",
596
647
  "Spencer-86",
@@ -604,6 +655,7 @@
604
655
  "SSPL-1.0",
605
656
  "StandardML-NJ",
606
657
  "SugarCRM-1.1.3",
658
+ "SUL-1.0",
607
659
  "Sun-PPP",
608
660
  "Sun-PPP-2000",
609
661
  "SunPro",
@@ -613,6 +665,7 @@
613
665
  "TAPR-OHL-1.0",
614
666
  "TCL",
615
667
  "TCP-wrappers",
668
+ "TekHVC",
616
669
  "TermReadKey",
617
670
  "TGPPL-1.0",
618
671
  "ThirdEye",
@@ -638,9 +691,13 @@
638
691
  "Unicode-TOU",
639
692
  "UnixCrypt",
640
693
  "Unlicense",
694
+ "Unlicense-libtelnet",
695
+ "Unlicense-libwhirlpool",
696
+ "UnRAR",
641
697
  "UPL-1.0",
642
698
  "URT-RLE",
643
699
  "Vim",
700
+ "Vixie-Cron",
644
701
  "VOSTROM",
645
702
  "VSL-1.0",
646
703
  "W3C",
@@ -649,12 +706,15 @@
649
706
  "w3m",
650
707
  "Watcom-1.0",
651
708
  "Widget-Workshop",
709
+ "WordNet",
652
710
  "Wsuipa",
711
+ "WTFNMFPL",
653
712
  "WTFPL",
654
713
  "wwl",
655
714
  "wxWindows",
656
715
  "X11",
657
716
  "X11-distribute-modifications-variant",
717
+ "X11-no-permit-persons",
658
718
  "X11-swapped",
659
719
  "Xdebug-1.03",
660
720
  "Xerox",
@@ -692,8 +752,10 @@
692
752
  "Bootloader-exception",
693
753
  "CGAL-linking-exception",
694
754
  "Classpath-exception-2.0",
755
+ "Classpath-exception-2.0-short",
695
756
  "CLISP-exception-2.0",
696
757
  "cryptsetup-OpenSSL-exception",
758
+ "Digia-Qt-LGPL-exception-1.1",
697
759
  "DigiRule-FOSS-exception",
698
760
  "eCos-exception-2.0",
699
761
  "erlang-otp-linking-exception",
@@ -710,6 +772,7 @@
710
772
  "GNOME-examples-exception",
711
773
  "GNU-compiler-exception",
712
774
  "gnu-javamail-exception",
775
+ "Google-Patent-WebM",
713
776
  "GPL-3.0-389-ds-base-exception",
714
777
  "GPL-3.0-interface-exception",
715
778
  "GPL-3.0-linking-exception",
@@ -721,6 +784,7 @@
721
784
  "i2p-gpl-java-exception",
722
785
  "Independent-modules-exception",
723
786
  "KiCad-libraries-exception",
787
+ "kvirc-openssl-exception",
724
788
  "LGPL-3.0-linking-exception",
725
789
  "libpri-OpenH323-exception",
726
790
  "Libtool-exception",
@@ -736,6 +800,7 @@
736
800
  "OpenJDK-assembly-exception-1.0",
737
801
  "openvpn-openssl-exception",
738
802
  "PCRE2-exception",
803
+ "polyparse-exception",
739
804
  "PS-or-PDF-font-exception-20170817",
740
805
  "QPL-1.0-INRIA-2004-exception",
741
806
  "Qt-GPL-exception-1.0",
@@ -743,9 +808,13 @@
743
808
  "Qwt-exception-1.0",
744
809
  "romic-exception",
745
810
  "RRDtool-FLOSS-exception-2.0",
811
+ "rsync-linking-exception",
746
812
  "SANE-exception",
747
813
  "SHL-2.0",
748
814
  "SHL-2.1",
815
+ "Simple-Library-Usage-exception",
816
+ "Spelling-Provider-LGPL-exception",
817
+ "sqlitestudio-OpenSSL-exception",
749
818
  "stunnel-exception",
750
819
  "SWI-exception",
751
820
  "Swift-exception",