@coana-tech/cli 13.19.15 → 13.19.18

package/cli.js

@@ -7063,7 +7063,7 @@ var require_buffer_list = __commonJS({
         }
       }, {
         key: "join",
-        value: function join11(s3) {
+        value: function join12(s3) {
           if (this.length === 0) return "";
           var p2 = this.head;
           var ret = "" + p2.data;
@@ -13661,7 +13661,7 @@ var require_lodash = __commonJS({
           }
           return mapped.length && mapped[0] === arrays[0] ? baseIntersection(mapped, undefined2, comparator) : [];
         });
-        function join11(array, separator) {
+        function join12(array, separator) {
           return array == null ? "" : nativeJoin.call(array, separator);
         }
         function last2(array) {
@@ -13813,7 +13813,7 @@ var require_lodash = __commonJS({
           comparator = typeof comparator == "function" ? comparator : undefined2;
           return baseUniq(baseFlatten(arrays, 1, isArrayLikeObject, true), undefined2, comparator);
         });
-        function uniq(array) {
+        function uniq2(array) {
           return array && array.length ? baseUniq(array) : [];
         }
         function uniqBy(array, iteratee2) {
@@ -15475,7 +15475,7 @@ var require_lodash = __commonJS({
         lodash.union = union;
         lodash.unionBy = unionBy;
         lodash.unionWith = unionWith;
-        lodash.uniq = uniq;
+        lodash.uniq = uniq2;
         lodash.uniqBy = uniqBy;
         lodash.uniqWith = uniqWith;
         lodash.unset = unset;
@@ -15580,7 +15580,7 @@ var require_lodash = __commonJS({
         lodash.isUndefined = isUndefined2;
         lodash.isWeakMap = isWeakMap;
         lodash.isWeakSet = isWeakSet;
-        lodash.join = join11;
+        lodash.join = join12;
         lodash.kebabCase = kebabCase;
         lodash.last = last2;
         lodash.lastIndexOf = lastIndexOf;
@@ -17300,7 +17300,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join11 = ",";
+            let join12 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -17314,7 +17314,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join11 = `,
+                join12 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -17322,13 +17322,13 @@ ${indentation}`;
               for (; i5 < maximumValuesToStringify - 1; i5++) {
                 const tmp2 = stringifyFnReplacer(String(i5), value, stack2, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join11;
+                res += join12;
               }
               const tmp = stringifyFnReplacer(String(i5), value, stack2, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join11}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join12}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -17349,7 +17349,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join11 = `,
+              join12 = `,
 ${indentation}`;
               whitespace2 = " ";
             }
@@ -17363,13 +17363,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value, stack2, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace2}${tmp}`;
-                separator = join11;
+                separator = join12;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace2}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join11;
+              separator = join12;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -17410,7 +17410,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join11 = ",";
+            let join12 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -17423,7 +17423,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join11 = `,
+                join12 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -17431,13 +17431,13 @@ ${indentation}`;
               for (; i5 < maximumValuesToStringify - 1; i5++) {
                 const tmp2 = stringifyArrayReplacer(String(i5), value[i5], stack2, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join11;
+                res += join12;
               }
               const tmp = stringifyArrayReplacer(String(i5), value[i5], stack2, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join11}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join12}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -17450,7 +17450,7 @@ ${originalIndentation}`;
             let whitespace2 = "";
             if (spacer !== "") {
               indentation += spacer;
-              join11 = `,
+              join12 = `,
 ${indentation}`;
               whitespace2 = " ";
             }
@@ -17459,7 +17459,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value[key2], stack2, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace2}${tmp}`;
-                separator = join11;
+                separator = join12;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -17517,20 +17517,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join12 = `,
+              const join13 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i5 = 0;
               for (; i5 < maximumValuesToStringify - 1; i5++) {
                 const tmp2 = stringifyIndent(String(i5), value[i5], stack2, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join12;
+                res2 += join13;
               }
               const tmp = stringifyIndent(String(i5), value[i5], stack2, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join12}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join13}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -17546,16 +17546,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join11 = `,
+            const join12 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join11, maximumBreadth);
+              res += stringifyTypedArray(value, join12, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join11;
+              separator = join12;
             }
             if (deterministic) {
               keys = insertSort(keys);
@@ -17566,13 +17566,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value[key2], stack2, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join11;
+                separator = join12;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join11;
+              separator = join12;
             }
             if (separator !== "") {
               res = `
@@ -92458,6 +92458,11 @@ var init_docker_spec = __esm({
     "use strict";
     import_path14 = require("path");
     builderSpecs = [
+      {
+        name: "maven-builder",
+        file: (0, import_path14.join)("builders", "maven", "Dockerfile"),
+        isBuilder: true
+      },
       {
         name: "python-builder",
         file: (0, import_path14.join)("builders", "python", "Dockerfile"),
@@ -92492,6 +92497,9 @@ var init_docker_spec = __esm({
           jdk19: { JDK_VERSION: "19", ALPINE_COMMUNITY_REPOSITORY_VERSION: "3.19" },
           jdk20: { JDK_VERSION: "20", ALPINE_COMMUNITY_REPOSITORY_VERSION: "3.19" },
           jdk21: { JDK_VERSION: "21" }
+        },
+        from: {
+          name: "maven-builder"
         }
       },
       {
@@ -95295,7 +95303,9 @@ var require_file_utils = __commonJS({
     exports2.excludeFiles = excludeFiles;
     exports2.copyFiles = copyFiles;
     exports2.findParent = findParent2;
+    exports2.getAllFilesRec = getAllFilesRec;
     var promises_12 = require("fs/promises");
+    var lodash_1 = require_lodash();
     var micromatch_1 = require_micromatch();
     var path_1 = require("path");
     var async_1 = (init_async(), __toCommonJS(async_exports));
@@ -95323,6 +95333,23 @@ var require_file_utils = __commonJS({
       } while (curr !== last2);
       return void 0;
     }
+    async function getAllFilesRec(dir, excludeDirs) {
+      async function helper(dir2, arrayOfFiles) {
+        const files = await (0, promises_12.readdir)(dir2);
+        for (const file of files) {
+          const filePath = (0, path_1.join)(dir2, file);
+          const info = await (0, promises_12.stat)(filePath);
+          if (info.isDirectory()) {
+            if (!excludeDirs?.includes(file))
+              await helper(filePath, arrayOfFiles);
+          } else {
+            arrayOfFiles.push(filePath);
+          }
+        }
+        return arrayOfFiles;
+      }
+      return (0, lodash_1.uniq)(await helper(dir, []));
+    }
   }
 });
 
@@ -95577,10 +95604,11 @@ function findParent(dir, predicate, wholePath) {
   } while (curr !== last2);
   return void 0;
 }
-var import_micromatch, import_path17;
+var import_lodash4, import_micromatch, import_path17;
 var init_file_utils = __esm({
   "../utils/src/file-utils.ts"() {
     "use strict";
+    import_lodash4 = __toESM(require_lodash());
     import_micromatch = __toESM(require_micromatch());
     import_path17 = require("path");
     init_async();
@@ -95588,21 +95616,21 @@ var init_file_utils = __esm({
 });
 
 // ../utils/src/constants.ts
-var import_path18, import_lodash4, COANA_ROOT2, COANA_REPOS_PATH, REQUIREMENTS_FILES_SEARCH_DEPTH;
+var import_path18, import_lodash5, COANA_ROOT2, COANA_REPOS_PATH, REQUIREMENTS_FILES_SEARCH_DEPTH;
 var init_constants2 = __esm({
   "../utils/src/constants.ts"() {
     "use strict";
     import_path18 = require("path");
     init_file_utils();
-    import_lodash4 = __toESM(require_lodash());
-    COANA_ROOT2 = (0, import_lodash4.once)(() => {
+    import_lodash5 = __toESM(require_lodash());
+    COANA_ROOT2 = (0, import_lodash5.once)(() => {
       const coanaRoot = process.env.COANA_ROOT ?? findParent(__dirname, (d2) => ["coana-package-manager", "coana"].includes(d2));
       if (!coanaRoot) {
         throw new Error("COANA_ROOT not set and could not be found");
       }
       return coanaRoot;
     });
-    COANA_REPOS_PATH = (0, import_lodash4.once)(() => {
+    COANA_REPOS_PATH = (0, import_lodash5.once)(() => {
       return process.env.COANA_REPOS_PATH ?? (0, import_path18.resolve)(COANA_ROOT2(), "coana-repos");
     });
     REQUIREMENTS_FILES_SEARCH_DEPTH = 2;
@@ -95610,17 +95638,17 @@ var init_constants2 = __esm({
 });
 
 // ../other-modules-communicator/src/constants.ts
-var import_lodash5, import_path19, PACKAGE_MANAGER_SCRIPT_PATH, REACHABILITY_ANALYZERS_SCRIPT_PATH, DOCKER_ENV_VARS_BLACKLIST;
+var import_lodash6, import_path19, PACKAGE_MANAGER_SCRIPT_PATH, REACHABILITY_ANALYZERS_SCRIPT_PATH, DOCKER_ENV_VARS_BLACKLIST;
 var init_constants3 = __esm({
   "../other-modules-communicator/src/constants.ts"() {
     "use strict";
-    import_lodash5 = __toESM(require_lodash());
+    import_lodash6 = __toESM(require_lodash());
     import_path19 = require("path");
     init_constants2();
-    PACKAGE_MANAGER_SCRIPT_PATH = (0, import_lodash5.once)(() => {
+    PACKAGE_MANAGER_SCRIPT_PATH = (0, import_lodash6.once)(() => {
       return process.env.PACKAGE_MANAGER_SCRIPT_PATH ?? (0, import_path19.resolve)(COANA_ROOT2(), "packages", "package-management", "dist", "package-management-cli.js");
     });
-    REACHABILITY_ANALYZERS_SCRIPT_PATH = (0, import_lodash5.once)(() => {
+    REACHABILITY_ANALYZERS_SCRIPT_PATH = (0, import_lodash6.once)(() => {
       return process.env.REACHABILITY_ANALYZERS_SCRIPT_PATH ?? (0, import_path19.resolve)(COANA_ROOT2(), "packages", "reachability-analyzers", "dist", "reachability-analyzers-cli.js");
     });
     DOCKER_ENV_VARS_BLACKLIST = [
@@ -95642,13 +95670,13 @@ var other_modules_communicator_exports = {};
 __export(other_modules_communicator_exports, {
   OtherModulesCommunicator: () => OtherModulesCommunicator
 });
-var import_promises11, import_lodash6, import_path20, import_logger_singleton7, OtherModulesCommunicator;
+var import_promises11, import_lodash7, import_path20, import_logger_singleton7, OtherModulesCommunicator;
 var init_other_modules_communicator = __esm({
   "../other-modules-communicator/src/other-modules-communicator.ts"() {
     "use strict";
     init_docker_manager();
     import_promises11 = require("fs/promises");
-    import_lodash6 = __toESM(require_lodash());
+    import_lodash7 = __toESM(require_lodash());
     import_path20 = require("path");
     init_command_utils();
     init_tmp_file();
@@ -95662,7 +95690,7 @@ var init_other_modules_communicator = __esm({
         this.options = options;
       }
       // Memoize temporary directory per subprojectPath
-      getTmpDirForSubproject = (0, import_lodash6.memoize)(
+      getTmpDirForSubproject = (0, import_lodash7.memoize)(
         async (_subprojectPath) => createTmpDirectory(`coana-other-modules-communicator`)
       );
       getSpinnerTextForPackageManagerCommand(cmd, packageManagerName, subprojectPath) {
@@ -95697,7 +95725,7 @@ var init_other_modules_communicator = __esm({
         return this.options.runWithoutDocker ? subprojectPath : (0, import_path20.resolve)("/project", (0, import_path20.relative)(this.rootWorkingDir, subprojectPath));
       }
       // options shared between package-management and reachability-analyzers
-      commonOptions = (0, import_lodash6.once)(
+      commonOptions = (0, import_lodash7.once)(
         () => argt`${this.options.debug && "--debug"} ${this.options.silent && "--silent"}
         --coana-log-path=${this.options.coanaLogPath} --silent-spinner`
       );
@@ -123322,7 +123350,7 @@ function prettyPrintAxiosError(error) {
       requestBodyExcerpt = error.config?.data.toString();
     }
   }
-  const errorContext = (0, import_lodash7.pickBy)(
+  const errorContext = (0, import_lodash8.pickBy)(
     {
       url: error.config?.url,
       method: error.config?.method,
@@ -123341,11 +123369,11 @@ function prettyPrintAxiosError(error) {
     console.error("Unknown Axios error", error.message);
   }
 }
-var import_lodash7;
+var import_lodash8;
 var init_axios_error = __esm({
   "../utils/src/dashboard-api/axios-error.ts"() {
     "use strict";
-    import_lodash7 = __toESM(require_lodash());
+    import_lodash8 = __toESM(require_lodash());
   }
 });
 
@@ -124074,7 +124102,7 @@ function convertDetectedOccurrenceToLegacyFormat(detectedOccurrence, ecosystem)
       affectedPackages: detectedOccurrence.affectedPackages,
       type: getTypeFromEcosystem(ecosystem),
       match: {},
-      affectedAppCodePoints: (0, import_lodash8.map)(detectedOccurrence.stacks, "0.sourceLocation")
+      affectedAppCodePoints: (0, import_lodash9.map)(detectedOccurrence.stacks, "0.sourceLocation")
     };
   }
   return {
@@ -124105,11 +124133,11 @@ function getTypeFromEcosystem(ecosystem) {
       throw new Error(`Unsupported ecosystem: ${ecosystem}`);
   }
 }
-var import_lodash8;
+var import_lodash9;
 var init_detected_occurrence_utils = __esm({
   "../web-compat-utils/src/detected-occurrence-utils.ts"() {
     "use strict";
-    import_lodash8 = __toESM(require_lodash());
+    import_lodash9 = __toESM(require_lodash());
     init_dist();
   }
 });
@@ -129900,7 +129928,7 @@ var init_ecosystem_manager = __esm({
 });
 
 // ../utils/src/python-versions-manager.ts
-var import_semver4, import_child_process2, import_lodash9, systemPython;
+var import_semver4, import_child_process2, import_lodash10, systemPython;
 var init_python_versions_manager = __esm({
   "../utils/src/python-versions-manager.ts"() {
     "use strict";
@@ -129909,8 +129937,8 @@ var init_python_versions_manager = __esm({
     init_logger_singleton();
     init_pip_utils();
     import_child_process2 = require("child_process");
-    import_lodash9 = __toESM(require_lodash());
-    systemPython = (0, import_lodash9.once)(() => (0, import_child_process2.execFileSync)("which", ["python"], { encoding: "utf8" }).trim());
+    import_lodash10 = __toESM(require_lodash());
+    systemPython = (0, import_lodash10.once)(() => (0, import_child_process2.execFileSync)("which", ["python"], { encoding: "utf8" }).trim());
   }
 });
 
@@ -171241,13 +171269,13 @@ var init_esm11 = __esm({
 function getUrlForArtifact(repository, groupId, artifactId, type, classifier, version2) {
   return `${repository}/${groupId.replaceAll(".", "/")}/${artifactId}/${version2}/${artifactId}-${version2}${classifier ? `-${classifier}` : ""}.${type ?? "jar"}`;
 }
-var import_lodash10, MAVEN_PUBLIC_REPOSITORIES, memoizedParseShellArgs;
+var import_lodash11, MAVEN_PUBLIC_REPOSITORIES, memoizedParseShellArgs;
 var init_maven_utils = __esm({
   "../utils/src/maven-utils.ts"() {
     "use strict";
     init_command_utils();
     init_esm11();
-    import_lodash10 = __toESM(require_lodash());
+    import_lodash11 = __toESM(require_lodash());
     MAVEN_PUBLIC_REPOSITORIES = [
       "https://repo1.maven.org/maven2",
       "https://packages.atlassian.com/artifactory/maven-atlassian-external",
@@ -171257,7 +171285,7 @@ var init_maven_utils = __esm({
       "https://maven.wso2.org/nexus/content/repositories/public",
       "https://nexus.bedatadriven.com/content/groups/public"
     ];
-    memoizedParseShellArgs = (0, import_lodash10.memoize)(parseShellArgs);
+    memoizedParseShellArgs = (0, import_lodash11.memoize)(parseShellArgs);
   }
 });
 
@@ -171515,8 +171543,8 @@ var init_vulnerabilities_supported_db = __esm({
       async getAllActiveCoanaSupportedVulnerabilities() {
         return this.vulnerabilitiesSupportedCollection.find({ active: true, withdrawnAt: null }).toArray();
       }
-      async getAllCoanaSupportedVulnerabilities() {
-        return this.vulnerabilitiesSupportedCollection.find({}).toArray();
+      async getAllCoanaSupportedVulnerabilities(ecosystem) {
+        return this.vulnerabilitiesSupportedCollection.find(ecosystem !== void 0 ? { ecosystem } : {}).toArray();
       }
       async getCoanaSupportedVulnerability(ecosystem, advisory) {
         return this.vulnerabilitiesSupportedCollection.findOne({
@@ -171578,35 +171606,41 @@ var coana_supported_vulnerabilities_loader_exports = {};
 __export(coana_supported_vulnerabilities_loader_exports, {
   CoanaSupportedVulnerabilitiesLoader: () => CoanaSupportedVulnerabilitiesLoader
 });
-var CoanaSupportedVulnerabilitiesLoader;
+var CoanaSupportedVulnerabilitiesLoader, OfflineCoanaSupportedVulnerabilitiesLoader, DatabaseCoanaSupportedVulnerabilitiesLoader;
 var init_coana_supported_vulnerabilities_loader = __esm({
   "../security-auditor/security-auditor-api/src/package-meta-data/coana-supported-vulnerabilities-loader.ts"() {
     "use strict";
     init_vulnerabilities_supported_db();
     CoanaSupportedVulnerabilitiesLoader = class {
-      // only used if ecosystemToUrlToVulnerabilityDetails is not provided
-      /**
-       * Uses the database from mongodb if ecosystemToUrlToVulnerabilityDetails is not provided.
-       * @param ecosystemToUrlToCoanaVulnerabilityMeta
-       */
-      constructor(ecosystemToUrlToCoanaVulnerabilityMeta, vulnerabilitiesSupportedDbInterface) {
-        this.ecosystemToUrlToCoanaVulnerabilityMeta = ecosystemToUrlToCoanaVulnerabilityMeta;
-        if (!ecosystemToUrlToCoanaVulnerabilityMeta) {
-          this.coanaSupportedVulnerabilitiesPromise = vulnerabilitiesSupportedDbInterface ? Promise.resolve(vulnerabilitiesSupportedDbInterface) : CoanaSupportedVulnerabilitiesDBInterface.create();
-        }
+      static create(ecosystemToUrlToVulnerabilityDetails) {
+        return ecosystemToUrlToVulnerabilityDetails ? new OfflineCoanaSupportedVulnerabilitiesLoader(ecosystemToUrlToVulnerabilityDetails) : new DatabaseCoanaSupportedVulnerabilitiesLoader();
+      }
+    };
+    OfflineCoanaSupportedVulnerabilitiesLoader = class extends CoanaSupportedVulnerabilitiesLoader {
+      constructor(ecosystemToUrlToVulnerabilityDetails) {
+        super();
+        this.ecosystemToUrlToVulnerabilityDetails = ecosystemToUrlToVulnerabilityDetails;
       }
+      async getCoanaSupportedVulnerability(ecosystem, advisoryUrl) {
+        return { type: "offline", data: this.ecosystemToUrlToVulnerabilityDetails[ecosystem]?.[advisoryUrl] };
+      }
+    };
+    DatabaseCoanaSupportedVulnerabilitiesLoader = class extends CoanaSupportedVulnerabilitiesLoader {
       coanaSupportedVulnerabilitiesPromise;
+      constructor(vulnerabilitiesSupportedDbInterface) {
+        super();
+        this.coanaSupportedVulnerabilitiesPromise = vulnerabilitiesSupportedDbInterface ? Promise.resolve(vulnerabilitiesSupportedDbInterface) : CoanaSupportedVulnerabilitiesDBInterface.create();
+      }
       async getCoanaSupportedVulnerability(ecosystem, advisoryUrl) {
-        if (this.ecosystemToUrlToCoanaVulnerabilityMeta)
-          return { type: "offline", data: this.ecosystemToUrlToCoanaVulnerabilityMeta[ecosystem]?.[advisoryUrl] };
         const vulnSupportDBEntry = await (await this.coanaSupportedVulnerabilitiesPromise).getCoanaSupportedVulnerability(ecosystem, advisoryUrl.replace("https://github.com/advisories/", ""));
         if (!vulnSupportDBEntry) return void 0;
         return { type: "database", data: vulnSupportDBEntry };
       }
       async close() {
-        if (this.coanaSupportedVulnerabilitiesPromise) {
-          await (await this.coanaSupportedVulnerabilitiesPromise).close();
-        }
+        await (await this.coanaSupportedVulnerabilitiesPromise).close();
+      }
+      async getCoanaSupportedVulnerabilities(ecosystem) {
+        return (await this.coanaSupportedVulnerabilitiesPromise).getAllCoanaSupportedVulnerabilities(ecosystem);
       }
     };
   }
@@ -189405,11 +189439,9 @@ var init_in_memory_vulnerability_metadata_store = __esm({
     init_vulnerability_collection_builder();
     init_coana_supported_vulnerabilities_loader();
     InMemoryVulnerabilityMetadataStore = class {
-      vulnerabilityDB;
-      vulnerabilitiesAccessPathsLoader;
-      constructor(vulnerabilityDB, vulnerabilitiesAccessPathsLoader) {
-        this.vulnerabilityDB = vulnerabilityDB ?? computeAdvisoryDB();
-        this.vulnerabilitiesAccessPathsLoader = vulnerabilitiesAccessPathsLoader ?? new CoanaSupportedVulnerabilitiesLoader();
+      constructor(vulnerabilityDB = computeAdvisoryDB(), vulnerabilitiesAccessPathsLoader = CoanaSupportedVulnerabilitiesLoader.create()) {
+        this.vulnerabilityDB = vulnerabilityDB;
+        this.vulnerabilitiesAccessPathsLoader = vulnerabilitiesAccessPathsLoader;
       }
       async getVulnerabilities(ecosystem, packageName) {
         const cves = (await this.vulnerabilityDB)[ecosystem][packageName];
@@ -189938,18 +189970,17 @@ var init_security_auditor = __esm({
       /**
        * @param enableMissingVulnerabilitySupportReporting - if true, then slack reporting is enabled. Still requires SLACK_OAUTH_TOKEN and SLACK_CHANNEL_ID to be set.
        */
-      constructor(pms, vms, enableMissingVulnerabilitySupportReporting, coanaSupportedVulnerabilitiesLoader = void 0) {
+      constructor(pms, vms, enableMissingVulnerabilitySupportReporting, coanaSupportedVulnerabilitiesLoader = CoanaSupportedVulnerabilitiesLoader.create()) {
         this.pms = pms;
         this.vms = vms;
         this.enableMissingVulnerabilitySupportReporting = enableMissingVulnerabilitySupportReporting;
+        this.coanaSupportedVulnerabilitiesLoader = coanaSupportedVulnerabilitiesLoader;
         if (enableMissingVulnerabilitySupportReporting) {
           this.slackReporter = new SlackReporter();
           this.coanaSupportedVulnerabilitiesDbInterface = CoanaSupportedVulnerabilitiesDBInterface.create();
         }
-        this.coanaSupportedVulnerabilitiesLoader = coanaSupportedVulnerabilitiesLoader ?? new CoanaSupportedVulnerabilitiesLoader();
       }
       slackReporter;
-      coanaSupportedVulnerabilitiesLoader;
       coanaSupportedVulnerabilitiesDbInterface;
       /**
        * If vulnerabilitiesMap is provided, then it's used to look for vulnerabilities instead
@@ -190121,7 +190152,7 @@ var init_security_auditor = __esm({
         if (this.coanaSupportedVulnerabilitiesDbInterface) {
           await (await this.coanaSupportedVulnerabilitiesDbInterface).close();
         }
-        await this.coanaSupportedVulnerabilitiesLoader.close();
+        await this.coanaSupportedVulnerabilitiesLoader.close?.();
       }
     };
   }
@@ -190181,8 +190212,8 @@ var require_vulnerability_scanning = __commonJS({
       logger_singleton_1.logger.info("using offline vulnerability scanner db");
       const offlineVulnerabilityScannerDB = JSON.parse(await (0, promises_12.readFile)(offlineVulnerabilityScannerDBPath, "utf-8"));
       const { ecosystemToUrlToVulnerabilityDetails, vulnerabilityDatabase } = offlineVulnerabilityScannerDB;
-      const coanaSupportedVulnerabilitiesLoader = new coana_supported_vulnerabilities_loader_1.CoanaSupportedVulnerabilitiesLoader(ecosystemToUrlToVulnerabilityDetails);
-      const vulnerabilityAccessPathLoader = new coana_supported_vulnerabilities_loader_1.CoanaSupportedVulnerabilitiesLoader(ecosystemToUrlToVulnerabilityDetails);
+      const coanaSupportedVulnerabilitiesLoader = coana_supported_vulnerabilities_loader_1.CoanaSupportedVulnerabilitiesLoader.create(ecosystemToUrlToVulnerabilityDetails);
+      const vulnerabilityAccessPathLoader = coana_supported_vulnerabilities_loader_1.CoanaSupportedVulnerabilitiesLoader.create(ecosystemToUrlToVulnerabilityDetails);
       const pms = new in_memory_package_metadata_store_1.InMemoryPackageMetadataStore(
         // packageMetaData is left as an empty object since it's only used during
         // the vulnerability fix algorithm, which isn't currently supported in offline mode
@@ -190204,7 +190235,7 @@ var require_version = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.version = void 0;
-    exports2.version = "13.19.15";
+    exports2.version = "13.19.18";
   }
 });
 
@@ -190591,7 +190622,7 @@ var require_cli_core = __commonJS({
           }
           return workspacePaths.map((workspacePath) => {
             const codeAwareScanResultsForAllPackages = [];
-            codeAwareScanResultsForAllPackages.push(...transformToReportVulnerabilities(workspaceToAugmentedVulnerabilities[workspacePath], projectInfo[workspacePath].directDependenciesMap ?? {}, subprojectPath, workspacePath, rootWorkingDirectory));
+            codeAwareScanResultsForAllPackages.push(...this.transformToReportVulnerabilities(workspaceToAugmentedVulnerabilities[workspacePath], projectInfo[workspacePath].directDependenciesMap ?? {}, subprojectPath, workspacePath, rootWorkingDirectory));
             return {
               subprojectPath: (0, path_1.relative)(rootWorkingDirectory, subprojectPath) || ".",
               workspacePath,
@@ -190627,38 +190658,43 @@ var require_cli_core = __commonJS({
           ...workspacePath ? { workspacePath } : {}
         }, isStartEvent, this.reportId, this.options.apiKey);
       }
+      /**
+       * Augment the results field of the `vulns` with metadata.
+       */
+      transformToReportVulnerabilities(vulns, directDependencies, subprojectPath, workspacePath, projectDir) {
+        return vulns.map((v) => {
+          const vulnerableNode = Object.values(v.vulnChainDetails?.transitiveDependencies ?? []).find((node) => node.vulnerable);
+          if (!vulnerableNode) {
+            throw new Error(`AssertionError: Unable to find vulnerable node in vulnChainDetails ${JSON.stringify(v.vulnChainDetails)}} for vulnerability ${v.url}`);
+          }
+          const reachability = (0, vulnerability_reachability_1.getVulnReachability)(v.results);
+          let dependencyType = getDependencyType(v.vulnChainDetails, v.results, directDependencies, reachability);
+          if (!dependencyType || dependencyType === "unknown") {
+            dependencyType = "prod&dev";
+            if (this.options.apiKey) {
+              (0, dashboard_integration_1.sendWarningToDashboard)("Unable to determine dependency type", { subprojectPath, workspacePath }, { vulnChainDetails: v.vulnChainDetails, results: v.results, directDependencies, reachability }, this.reportId, this.options.apiKey);
+            }
+          }
+          return {
+            vulnerabilityUrl: v.url,
+            vulnerabilityUnreachableByPrecomputation: v.unreachableByPrecomputation ? v.unreachableByPrecomputation : "NOT_COMPUTED",
+            // vulnChainDetails is always present
+            // we only keep it as optional (potentially undefined) to
+            // handle requests to the backend from old version of the CLI.
+            vulnChainDetails: v.vulnChainDetails,
+            subprojectPath: getRelativeSubprojectPath(subprojectPath, projectDir),
+            workspacePath,
+            codeAwareScanResult: v.results,
+            packageName: vulnerableNode.packageName,
+            packageVersion: vulnerableNode.version ?? "",
+            ecosystem: v.ecosystem ?? "NPM",
+            dependencyType,
+            reachability
+          };
+        });
+      }
     };
     exports2.CliCore = CliCore;
-    function transformToReportVulnerabilities(vulns, directDependencies, subprojectPath, workspacePath, projectDir) {
-      return vulns.map((v) => {
-        const vulnerableNode = Object.values(v.vulnChainDetails?.transitiveDependencies ?? []).find((node) => node.vulnerable);
-        if (!vulnerableNode) {
-          throw new Error(`AssertionError: Unable to find vulnerable node in vulnChainDetails ${JSON.stringify(v.vulnChainDetails)}} for vulnerability ${v.url}`);
-        }
-        const reachability = (0, vulnerability_reachability_1.getVulnReachability)(v.results);
-        const dependencyType = getDependencyType(v.vulnChainDetails, v.results, directDependencies, reachability);
-        if (dependencyType === "unknown") {
-          logger_singleton_1.logger.info(JSON.stringify(v.vulnChainDetails, null, 2), JSON.stringify(v.results, null, 2), directDependencies, reachability);
-          throw new Error(`AssertionError: Unable to determine dependency type for vulnerability ${v.url} with reachability ${reachability}`);
-        }
-        return {
-          vulnerabilityUrl: v.url,
-          vulnerabilityUnreachableByPrecomputation: v.unreachableByPrecomputation ? v.unreachableByPrecomputation : "NOT_COMPUTED",
-          // vulnChainDetails is always present
-          // we only keep it as optional (potentially undefined) to
-          // handle requests to the backend from old version of the CLI.
-          vulnChainDetails: v.vulnChainDetails,
-          subprojectPath: getRelativeSubprojectPath(subprojectPath, projectDir),
-          workspacePath,
-          codeAwareScanResult: v.results,
-          packageName: vulnerableNode.packageName,
-          packageVersion: vulnerableNode.version ?? "",
-          ecosystem: v.ecosystem ?? "NPM",
-          dependencyType,
-          reachability
-        };
-      });
-    }
     function getRelativeSubprojectPath(subprojectPath, projectDir) {
       return (0, path_1.relative)(projectDir, subprojectPath) || ".";
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coana-tech/cli",
-  "version": "13.19.15",
+  "version": "13.19.18",
   "description": "Coana CLI",
   "bin": {
     "@coana-tech/cli": "./cli.js"