@coana-tech/cli 14.12.102 → 14.12.104

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coana-tech/cli",
-  "version": "14.12.102",
+  "version": "14.12.104",
   "description": "Coana CLI",
   "type": "module",
   "bin": {

package/reachability-analyzers-cli.mjs

@@ -111651,7 +111651,7 @@ async function getCurrentCommitHash(project) {
 }
 function detectedOccurrencesFromAPMatches(matches, pathPrefixToRemove) {
   for (const match2 of Object.values(matches))
-    for (const stack of Array.isArray(match2) ? match2 : match2.stacks)
+    for (const stack of match2.stacks)
       for (const cl of stack) {
         if (cl.package === "<app>")
           cl.package = ROOT_NODE_STR;
@@ -111661,8 +111661,8 @@ function detectedOccurrencesFromAPMatches(matches, pathPrefixToRemove) {
   return ({ vulnerabilityAccessPaths }) => getStacksFromAccPaths(matches, { vulnerabilityAccessPaths });
 }
 function detectedOccurrencesFromAPMatchesRuby(matches, pathPrefixToPackage) {
-  for (const match2 of Object.values(matches))
-    for (const stack of Array.isArray(match2) ? match2 : match2.stacks)
+  for (const stacks of Object.values(matches))
+    for (const stack of stacks)
       for (const cl of stack) {
         if (cl.package === "<app>")
           cl.package = ROOT_NODE_STR;
@@ -111739,7 +111739,11 @@ var PythonCodeAwareVulnerabilityScanner = class {
         reachedDependencies: false,
         terminatedEarly: false,
         diagnostics: { timeout: false, aborted: false },
-        computeDetectedOccurrences: () => []
+        computeDetectedOccurrences: import_lodash14.default.constant({
+          analysisLevel: "function-level",
+          affectedPackages: [],
+          stacks: []
+        })
       };
     const packagesToExclude = heuristic.getPackagesToExcludeFromAnalysis?.(vulns);
     const vulnAccPaths = sortedUniq(vulns.flatMap((v) => v.vulnerabilityAccessPaths).sort());
@@ -112667,7 +112671,7 @@ function augmentVulnsWithDetectedOccurrences(vulns, codeAwareScanner, heuristic,
   const packagesFailedToInstall = codeAwareScanner.getPackagesExcludedUnrelatedToHeuristic();
   for (const v of vulns) {
     const detectedOccurrences = result.computeDetectedOccurrences(v);
-    if (Array.isArray(detectedOccurrences) ? detectedOccurrences.length === 0 : detectedOccurrences.stacks.length === 0) {
+    if (detectedOccurrences.stacks.length === 0) {
       if (SOCKET_MODE && result.terminatedEarly && !result.reachedDependencies && Object.keys(v.vulnChainDetails.transitiveDependencies).length > 1) {
         v.results = {
           type: "analysisError",
@@ -112745,16 +112749,15 @@ var GoAnalyzer = class {
     const res = otherVulns.length ? await analyzeWithHeuristics(this.state, otherVulns, [GoanaHeuristics.DEFAULT], false, new GoCodeAwareVulnerabilityScanner(this.projectDir, this.state.reachabilityAnalysisOptions), analysisMetadataCollector, statusUpdater) : [];
     if (unreachableVulns.length) {
       const heuristicName = GoanaHeuristics.IMPORT_REACHABILITY.name;
-      const detectedOccurrences = {
-        analysisLevel: "function-level",
-        affectedPackages: [],
-        stacks: []
-      };
       const scanResult = {
         type: "success",
         heuristicName,
         terminatedEarly: false,
-        detectedOccurrences
+        detectedOccurrences: {
+          analysisLevel: "function-level",
+          affectedPackages: [],
+          stacks: []
+        }
       };
       analysisMetadataCollector?.({
         vulnUrls: unreachableVulns.map((v) => v.url),

package/repos/coana-tech/class-graph-analysis/dist/bundle/class-graph-analysis-cli.mjs

@@ -7353,7 +7353,9 @@ var ClassfileSourceResolver = class {
       file,
       name: className,
       displayName: className,
-      nodeType: "class"
+      nodeType: "class",
+      isEntryPoint: appOrDep === "app"
+      // class nodes are entry points
     };
     const nodeIdx = graph.addNode(node);
     if (nodeIdx !== void 0) {
@@ -7994,14 +7996,14 @@ var ClassGraphRunner = class {
       this.options.externalResolutionManager?.resolveDefinitions(this.graph)
     ]);
     const allNodes = this.graph.getNodes();
-    const appIndices = allNodes.map((node, idx) => node.appOrDep === "app" ? idx : void 0).filter((idx) => idx !== void 0);
+    const entryPointIndices = allNodes.map((node, idx) => node.appOrDep === "app" && node.isEntryPoint ? idx : void 0).filter((idx) => idx !== void 0);
     const visited = /* @__PURE__ */ new Set();
     await Promise.all([
-      this.options.internalResolutionManager?.resolveEdges(this.graph, appIndices, appIndices.filter((idx) => !this.options.isExternalNode?.(allNodes[idx])), visited, "DIRECT_DEPENDENCIES"),
-      this.options.externalResolutionManager?.resolveEdges(this.graph, appIndices, appIndices.filter((idx) => this.options.isExternalNode?.(allNodes[idx])), visited, "DIRECT_DEPENDENCIES")
+      this.options.internalResolutionManager?.resolveEdges(this.graph, entryPointIndices, entryPointIndices.filter((idx) => !this.options.isExternalNode?.(allNodes[idx])), visited, "DIRECT_DEPENDENCIES"),
+      this.options.externalResolutionManager?.resolveEdges(this.graph, entryPointIndices, entryPointIndices.filter((idx) => this.options.isExternalNode?.(allNodes[idx])), visited, "DIRECT_DEPENDENCIES")
     ]);
     const reachablePackageIds = /* @__PURE__ */ new Set();
-    for (const idx of findReachableNodes(this.graph, appIndices)) {
+    for (const idx of findReachableNodes(this.graph, entryPointIndices)) {
       reachablePackageIds.add(allNodes[idx].packageId);
     }
     return Array.from(reachablePackageIds);
@@ -8046,18 +8048,18 @@ var ClassGraphRunner = class {
       this.options.externalResolutionManager?.resolveDefinitions(this.graph)
     ]);
     const allNodes = this.graph.getNodes();
-    const appIndices = allNodes.map((node, idx) => node.appOrDep === "app" ? idx : void 0).filter((idx) => idx !== void 0);
+    const entryPointIndices = allNodes.map((node, idx) => node.appOrDep === "app" && node.isEntryPoint ? idx : void 0).filter((idx) => idx !== void 0);
     const visited = /* @__PURE__ */ new Set();
-    const internalWorklist = appIndices.filter((idx) => !this.options.isExternalNode?.(allNodes[idx]));
-    const externalWorklist = this.options.externalResolutionManager ? appIndices.filter((idx) => this.options.isExternalNode?.(allNodes[idx])) : [];
+    const internalWorklist = entryPointIndices.filter((idx) => !this.options.isExternalNode?.(allNodes[idx]));
+    const externalWorklist = this.options.externalResolutionManager ? entryPointIndices.filter((idx) => this.options.isExternalNode?.(allNodes[idx])) : [];
     while (internalWorklist.length !== 0 || externalWorklist.length !== 0) {
       await Promise.all([
-        this.options.internalResolutionManager?.resolveEdges(this.graph, appIndices, internalWorklist, visited, "FULL_GRAPH"),
-        this.options.externalResolutionManager?.resolveEdges(this.graph, appIndices, externalWorklist, visited, "FULL_GRAPH")
+        this.options.internalResolutionManager?.resolveEdges(this.graph, entryPointIndices, internalWorklist, visited, "FULL_GRAPH"),
+        this.options.externalResolutionManager?.resolveEdges(this.graph, entryPointIndices, externalWorklist, visited, "FULL_GRAPH")
       ]);
       internalWorklist.length = 0;
       externalWorklist.length = 0;
-      const allReachableNodes = findReachableNodes(this.graph, appIndices);
+      const allReachableNodes = findReachableNodes(this.graph, entryPointIndices);
       for (const reachableIdx of allReachableNodes) {
         if (!visited.has(reachableIdx)) {
           const node = allNodes[reachableIdx];
@@ -8080,9 +8082,9 @@ var ClassGraphRunner = class {
       }
       vulnerableClassToIndices.get(node.displayName).push(idx);
     });
-    const vulnerablePaths = this.computeVulnerablePaths(this.graph, appIndices, allNodes, vulnerableClassToIndices);
+    const vulnerablePaths = this.computeVulnerablePaths(this.graph, entryPointIndices, allNodes, vulnerableClassToIndices);
     const reachablePackageIds = /* @__PURE__ */ new Set();
-    for (const idx of findReachableNodes(this.graph, appIndices)) {
+    for (const idx of findReachableNodes(this.graph, entryPointIndices)) {
       reachablePackageIds.add(allNodes[idx].packageId);
     }
     const analysisDiagnostics = {
@@ -8356,7 +8358,9 @@ var JavaSourceResolver = class {
       file,
       name: fullyQualifiedName,
       displayName: fullyQualifiedName,
-      nodeType: "class"
+      nodeType: "class",
+      isEntryPoint: appOrDep === "app"
+      // class nodes are entry points
     };
     const nodeIndex = graph.addNode(node);
     if (nodeIndex !== void 0) {
@@ -8937,7 +8941,9 @@ var KotlinSourceResolver = class {
       file,
       name: fullyQualifiedName,
       displayName: fullyQualifiedName,
-      nodeType: "class"
+      nodeType: "class",
+      isEntryPoint: appOrDep === "app"
+      // class nodes are entry points
     };
     const nodeIndex = graph.addNode(node);
     if (nodeIndex !== void 0) {
@@ -9339,7 +9345,9 @@ var PropertiesSourceResolver = class {
             file,
             name: key,
             displayName: `${key} (property)`,
-            nodeType: "property"
+            nodeType: "property",
+            isEntryPoint: false
+            // property nodes are not entry points
           };
           const idx = graph.addNode(node);
           if (idx !== void 0) {
@@ -9424,7 +9432,9 @@ var ScalaSourceResolver = class {
       file,
       name: fullyQualifiedName,
       displayName: fullyQualifiedName,
-      nodeType: "class"
+      nodeType: "class",
+      isEntryPoint: appOrDep === "app"
+      // class nodes are entry points
     };
     const nodeIndex = graph.addNode(node);
     if (nodeIndex !== void 0) {
@@ -10063,7 +10073,9 @@ var ServiceSourceResolver = class {
         file,
         name: serviceInterface,
         displayName: `${serviceInterface} (service)`,
-        nodeType: "service"
+        nodeType: "service",
+        isEntryPoint: appOrDep === "app"
+        // service nodes are entry points
       };
       graph.addNode(node);
     }
@@ -10113,7 +10125,9 @@ var SpringFactoriesSourceResolver = class {
         file,
         name: interfaceName,
         displayName: `${interfaceName} (spring-factory)`,
-        nodeType: "spring-factory"
+        nodeType: "spring-factory",
+        isEntryPoint: appOrDep === "app"
+        // spring-factory nodes are entry points
       };
       graph.addNode(node);
     }
@@ -10217,7 +10231,9 @@ var PropertiesXmlSourceResolver = class {
             file,
             name: key,
             displayName: `${key} (property)`,
-            nodeType: "property"
+            nodeType: "property",
+            isEntryPoint: false
+            // property nodes are not entry points
           };
           nodes.push(node);
         }
@@ -10277,7 +10293,9 @@ var SpringBeansXmlSourceResolver = class {
           name: beanId,
           // Can be referenced via ApplicationContext.getBean("beanId")
           displayName: `${beanId} (bean)`,
-          nodeType: "bean"
+          nodeType: "bean",
+          isEntryPoint: appOrDep === "app"
+          // bean nodes are entry points
         };
         nodes.push(node);
       }
@@ -10300,7 +10318,9 @@ var SpringBeansXmlSourceResolver = class {
             file,
             name: nestedBeanId,
             displayName: `${nestedBeanId} (bean)`,
-            nodeType: "bean"
+            nodeType: "bean",
+            isEntryPoint: appOrDep === "app"
+            // bean nodes are entry points
           };
           nodes.push(node);
         }
@@ -10458,7 +10478,9 @@ var StrutsXmlSourceResolver = class {
             name: actionId,
             // Can be referenced via Struts action mapping
             displayName: `${actionId} (struts)`,
-            nodeType: "struts-action"
+            nodeType: "struts-action",
+            isEntryPoint: false
+            // struts-action nodes are not entry points
           };
           nodes.push(node);
         }
@@ -10522,7 +10544,9 @@ var StrutsConfigXmlSourceResolver = class {
             name: formBeanName,
             // Can be referenced in action mappings
             displayName: `${formBeanName} (struts)`,
-            nodeType: "struts-form-bean"
+            nodeType: "struts-form-bean",
+            isEntryPoint: false
+            // struts-form-bean nodes are not entry points
           };
           nodes.push(node);
         }
@@ -10544,7 +10568,9 @@ var StrutsConfigXmlSourceResolver = class {
             name: actionPath,
             // Can be referenced via URL paths
             displayName: `${actionPath} (struts)`,
-            nodeType: "struts-action-path"
+            nodeType: "struts-action-path",
+            isEntryPoint: false
+            // struts-action-path nodes are not entry points
           };
           nodes.push(node);
         }
@@ -10642,7 +10668,9 @@ var WebXmlSourceResolver = class {
       name: fragmentName,
       // For web-fragment: fragment name (can be referenced in absolute-ordering); for web-app: undefined
       displayName: fragmentName ? `${fragmentName} (${nodeType})` : nodeType,
-      nodeType
+      nodeType,
+      isEntryPoint: appOrDep === "app"
+      // web-app and web-fragment nodes are entry points
     };
     nodes.push(fileLevelNode);
     this.processServletNames(rootElement, packageId, appOrDep, dir, file, nodes);
@@ -10666,7 +10694,9 @@ var WebXmlSourceResolver = class {
           name: servletName,
           // Can be referenced reflectively in servlet mappings
           displayName: `${servletName} (web.xml servlet)`,
-          nodeType: "servlet"
+          nodeType: "servlet",
+          isEntryPoint: false
+          // servlet nodes are not entry points
         };
         nodes.push(node);
       }
@@ -10688,7 +10718,9 @@ var WebXmlSourceResolver = class {
           name: filterName,
           // Can be referenced reflectively in filter mappings
           displayName: filterName,
-          nodeType: "filter"
+          nodeType: "filter",
+          isEntryPoint: false
+          // filter nodes are not entry points
         };
         nodes.push(node);
       }
@@ -10710,7 +10742,9 @@ var WebXmlSourceResolver = class {
           name: urlPattern,
           // URL patterns can be referenced in mappings
           displayName: `${urlPattern} (web.xml url-pattern)`,
-          nodeType: "url-pattern"
+          nodeType: "url-pattern",
+          isEntryPoint: false
+          // url-pattern nodes are not entry points
         };
         nodes.push(node);
       }
@@ -10730,7 +10764,9 @@ var WebXmlSourceResolver = class {
           name: urlPattern,
           // URL patterns can be referenced in mappings
           displayName: `${urlPattern} (web.xml url-pattern)`,
-          nodeType: "url-pattern"
+          nodeType: "url-pattern",
+          isEntryPoint: false
+          // url-pattern nodes are not entry points
         };
         nodes.push(node);
       }
@@ -10962,7 +10998,9 @@ var PersistenceXmlSourceResolver = class {
           name: unitName,
           // Can be referenced via Persistence.createEntityManagerFactory("name")
           displayName: `${unitName} (persistence)`,
-          nodeType: "persistence-unit"
+          nodeType: "persistence-unit",
+          isEntryPoint: false
+          // persistence-unit nodes are not entry points
         };
         nodes.push(node);
       }
@@ -11382,14 +11420,6 @@ var JvmResolutionContextProvider = class {
               springFactoryMap.set(factoryInterfaceName, []);
             }
             springFactoryMap.get(factoryInterfaceName).push(idx);
-            if (!sourceClassMap.has(factoryInterfaceName)) {
-              sourceClassMap.set(factoryInterfaceName, []);
-            }
-            sourceClassMap.get(factoryInterfaceName).push(idx);
-            if (!bytecodeClassMap.has(factoryInterfaceName)) {
-              bytecodeClassMap.set(factoryInterfaceName, []);
-            }
-            bytecodeClassMap.get(factoryInterfaceName).push(idx);
           }
           break;
         }
@@ -18170,9 +18200,6 @@ async function createJvmResolverCallbacks(resources) {
     if (isServiceFile(file)) {
       return serviceSourceResolver;
     }
-    if (isSpringFactoriesFile(file)) {
-      return springFactoriesSourceResolver;
-    }
   };
   return { sourceCallback, bytecodeCallback };
 }
@@ -27367,7 +27394,9 @@ var CSharpSourceResolver = class {
       dir,
       file,
       name: fullyQualifiedName,
-      displayName: fullyQualifiedName
+      displayName: fullyQualifiedName,
+      isEntryPoint: appOrDep === "app"
+      // All app-level classes are entry points
     };
     const nodeIndex = graph.addNode(node);
     if (nodeIndex !== void 0) {
@@ -28393,7 +28422,9 @@ var RustSourceResolver = class {
       displayName: fullyQualifiedName,
       crate: additionalProps.crate,
       fileModule: additionalProps.fileModule,
-      aliasFor: additionalProps.aliasFor
+      aliasFor: additionalProps.aliasFor,
+      isEntryPoint: appOrDep === "app"
+      // All app-level items are entry points
     };
     const idx = graph.addNode(node);
     if (idx !== void 0) {