@coana-tech/cli 13.19.26 → 13.19.28

package/cli.js

@@ -83364,10 +83364,10 @@ ${indent}`);
         var pathModule = __webpack_require__(0);
         var isWindows = process.platform === "win32";
         var fs = __webpack_require__(3);
-        var DEBUG3 = process.env.NODE_DEBUG && /fs/.test(process.env.NODE_DEBUG);
+        var DEBUG = process.env.NODE_DEBUG && /fs/.test(process.env.NODE_DEBUG);
         function rethrow() {
           var callback;
-          if (DEBUG3) {
+          if (DEBUG) {
             var backtrace = new Error();
             callback = debugCallback;
           } else
@@ -118447,10 +118447,10 @@ var require_old = __commonJS({
     var pathModule = require("path");
     var isWindows = process.platform === "win32";
     var fs = require("fs");
-    var DEBUG3 = process.env.NODE_DEBUG && /fs/.test(process.env.NODE_DEBUG);
+    var DEBUG = process.env.NODE_DEBUG && /fs/.test(process.env.NODE_DEBUG);
     function rethrow() {
       var callback;
-      if (DEBUG3) {
+      if (DEBUG) {
         var backtrace = new Error();
         callback = debugCallback;
       } else
@@ -189534,7 +189534,7 @@ function combineVulnPathDetails([vpd1, ...rest]) {
   }
   return res;
 }
-var DEBUG, MESSAGE_PREFIX_FOR_FAILED_TO_PICK_VERSION, MESSAGE_PREFIX_FOR_NO_POTENTIAL_VERSIONS, FixesTask;
+var MESSAGE_PREFIX_FOR_FAILED_TO_PICK_VERSION, MESSAGE_PREFIX_FOR_NO_POTENTIAL_VERSIONS, FixesTask;
 var init_fixes_task = __esm({
   "../security-auditor/security-auditor-api/src/fixes-task.ts"() {
     "use strict";
@@ -189542,14 +189542,14 @@ var init_fixes_task = __esm({
     init_assertions();
     init_async();
     init_dependency_tree();
-    DEBUG = process.env.DEBUG;
     MESSAGE_PREFIX_FOR_FAILED_TO_PICK_VERSION = `Failed to pick a version`;
     MESSAGE_PREFIX_FOR_NO_POTENTIAL_VERSIONS = `No potential versions`;
     FixesTask = class {
-      constructor(pms, vms, packageStructure) {
+      constructor(pms, vms, packageStructure, logger5) {
         this.pms = pms;
         this.vms = vms;
         this.packageStructure = packageStructure;
+        this.logger = logger5;
         this.ecosystem = packageStructure.ecosystem ?? "NPM";
         this.parentsMap = /* @__PURE__ */ new Map();
       }
@@ -189568,24 +189568,29 @@ var init_fixes_task = __esm({
           };
         }
         const validNonVulnerableVersionsForAllVulns = [];
-        await applySeries(vulnerabilities, async (v) => {
-          try {
-            if (DEBUG) console.log("Starting finding fixes for vulnerability: ", v.url, "at ", (/* @__PURE__ */ new Date()).toString());
-            const { potentialVersionsForFix, vulnerabilityFixes } = await this.findFixForVulnerability(v);
-            if (DEBUG) console.log("Done finding fixes for vulnerability: ", v.url, "at ", (/* @__PURE__ */ new Date()).toString());
-            v.fix = {
-              type: "success",
-              vulnerabilityFixes
-            };
-            validNonVulnerableVersionsForAllVulns.push(potentialVersionsForFix);
-          } catch (e) {
-            if (DEBUG) {
-              console.log("Failed to find fix for vulnerability: ", v.url, "at ", (/* @__PURE__ */ new Date()).toString());
-              console.log(e.stack);
+        await asyncForEach(
+          vulnerabilities,
+          async (v) => {
+            try {
+              this.logger?.debug(`Starting finding fixes for vulnerability: ${v.url} at ${(/* @__PURE__ */ new Date()).toString()}`);
+              const { potentialVersionsForFix, vulnerabilityFixes } = await this.findFixForVulnerability(v);
+              this.logger?.debug(`Done finding fixes for vulnerability: ${v.url} at ${(/* @__PURE__ */ new Date()).toString()}`);
+              v.fix = {
+                type: "success",
+                vulnerabilityFixes
+              };
+              validNonVulnerableVersionsForAllVulns.push(potentialVersionsForFix);
+            } catch (e) {
+              this.logger?.error({
+                message: "Failed to find fix for vulnerability",
+                vulnerability: v.url,
+                stack: e.stack
+              });
+              v.fix = transformErrorToVulnerabilityFixes(e);
             }
-            v.fix = transformErrorToVulnerabilityFixes(e);
-          }
-        });
+          },
+          5
+        );
         const validNonVulnerableVersionsOfVulnerableDependenciesCombined = combinePotentialVersions(validNonVulnerableVersionsForAllVulns);
         const computeCombinedFix = async (vulnerabilities2, potentialVersionsCombined) => {
           try {
@@ -189622,11 +189627,8 @@ var init_fixes_task = __esm({
        */
       async findFixForVulnerability(vuln) {
         const potentialVersionsForFix = await this.computePotentialVersionsForFixWrapper(vuln);
-        if (DEBUG) {
-          console.log("Found potential versions, now choosing fixed versions", "at ", (/* @__PURE__ */ new Date()).toString());
-          console.log("vuln.vulnChainDetails", JSON.stringify(vuln.vulnChainDetails, null, 2));
-          console.log("potentialVersionsForFix", JSON.stringify(potentialVersionsForFix, null, 2));
-        }
+        this.logger?.debug(`Found potential versions, now choosing fixed versions for ${vuln.url}`);
+        this.logger?.debug(`potentialVersionsForFix: ${JSON.stringify(potentialVersionsForFix)}`);
         const vulnerabilityFixes = await this.chooseFixesFromPotentialVersionsForFix(
           vuln.vulnChainDetails,
           potentialVersionsForFix
@@ -189955,7 +189957,7 @@ var security_auditor_exports = {};
 __export(security_auditor_exports, {
   SecurityAuditor: () => SecurityAuditor
 });
-var DEBUG2, SecurityAuditor;
+var SecurityAuditor;
 var init_security_auditor = __esm({
   "../security-auditor/security-auditor-api/src/security-auditor.ts"() {
     "use strict";
@@ -189966,16 +189968,16 @@ var init_security_auditor = __esm({
     init_fixes_task();
     init_coana_supported_vulnerabilities_loader();
     init_vulnerabilities_supported_db();
-    DEBUG2 = process.env.DEBUG;
     SecurityAuditor = class {
       /**
        * @param enableMissingVulnerabilitySupportReporting - if true, then slack reporting is enabled. Still requires SLACK_OAUTH_TOKEN and SLACK_CHANNEL_ID to be set.
        */
-      constructor(pms, vms, enableMissingVulnerabilitySupportReporting, coanaSupportedVulnerabilitiesLoader = CoanaSupportedVulnerabilitiesLoader.create()) {
+      constructor(pms, vms, enableMissingVulnerabilitySupportReporting, coanaSupportedVulnerabilitiesLoader = CoanaSupportedVulnerabilitiesLoader.create(), nestLogger) {
         this.pms = pms;
         this.vms = vms;
         this.enableMissingVulnerabilitySupportReporting = enableMissingVulnerabilitySupportReporting;
         this.coanaSupportedVulnerabilitiesLoader = coanaSupportedVulnerabilitiesLoader;
+        this.nestLogger = nestLogger;
         if (enableMissingVulnerabilitySupportReporting) {
           this.slackReporter = new SlackReporter();
           this.coanaSupportedVulnerabilitiesDbInterface = CoanaSupportedVulnerabilitiesDBInterface.create();
@@ -190110,7 +190112,10 @@ var init_security_auditor = __esm({
               const patchedVersions = await this.findPatchedVersionsForVulnerability(vulnerability);
               return { ...vulnerability, patchedVersions };
             } catch (error) {
-              console.error(error.message);
+              this.nestLogger?.error(
+                `Error while fetching patched versions for vulnerability ${vulnerability.url}`,
+                error.stack
+              );
               return vulnerability;
             }
           })
@@ -190142,9 +190147,9 @@ var init_security_auditor = __esm({
       }
       async findFixes(vulnerabilities, packageStructure) {
         const startTime = Date.now();
-        if (DEBUG2) console.log("Starting findFixes at " + Date.now().toString());
-        const fixes = await new FixesTask(this.pms, this.vms, packageStructure).findFixes(vulnerabilities);
-        if (DEBUG2) console.log("Completed findFixes at " + Date.now().toString());
+        this.nestLogger?.debug("Starting findFixes at " + (/* @__PURE__ */ new Date()).toISOString());
+        const fixes = await new FixesTask(this.pms, this.vms, packageStructure, this.nestLogger).findFixes(vulnerabilities);
+        this.nestLogger?.debug("Completed findFixes at " + (/* @__PURE__ */ new Date()).toISOString());
         return Object.assign(fixes, { metadata: { computeFixesDuration: Date.now() - startTime } });
       }
       async close() {
@@ -190236,7 +190241,7 @@ var require_version = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.version = void 0;
-    exports2.version = "13.19.26";
+    exports2.version = "13.19.28";
   }
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coana-tech/cli",
-  "version": "13.19.26",
+  "version": "13.19.28",
   "description": "Coana CLI",
   "bin": {
     "@coana-tech/cli": "./cli.js"