@coana-tech/cli 14.12.131 → 14.12.133

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coana-tech/cli",
-  "version": "14.12.131",
+  "version": "14.12.133",
   "description": "Coana CLI",
   "type": "module",
   "bin": {

package/reachability-analyzers-cli.mjs

@@ -110513,18 +110513,19 @@ async function runJellyAnalysis(mainProjectRoot, projectRoot, jellyOptions, reac
     const logFile = reachabilityAnalysisOptions.analysisLogFile ?? (reachabilityAnalysisOptions.printLogFile && resolve14(projectRoot, "js-analysis.log"));
     await writeFile6(vulnerabilitiesFile, JSON.stringify(vulnerabilitiesInJellyFormat));
     const useLazy = experiment === "LAZY_EXPERIMENT" || reachabilityAnalysisOptions.lazy;
+    const { includePackages } = jellyOptions;
     const jellyCmd = cmdt`
       ${await getNodeExecutable(ToolPathResolver.nodeExecutablePath)} --max-old-space-size=${reachabilityAnalysisOptions.memoryLimitInMB ?? 8192}
         ${jellyExecutable}
         --basedir ${mainProjectRoot}
         --timeout ${timeoutInSeconds}
         --vulnerabilities ${vulnerabilitiesFile}
-        ${useLazy && ["--lazy", "--lazy-cleanup"]}
+        ${useLazy && ["--lazy", "--lazy-cleanup", "--reparse", "--memory", "0.85"]}
         --reachable-json ${affectedPackagesFile}
         ${getExcludes(mainProjectRoot, projectRoot, reachabilityAnalysisOptions)}
         --diagnostics-json ${diagnosticsFile}
         --max-indirections=${jellyOptions.maxIndirections}
-        ${!!jellyOptions.includePackages && jellyOptions.includePackages.length ? ["--include-packages", ...jellyOptions.includePackages] : ["--ignore-dependencies"]}
+        ${!!includePackages && (includePackages.length ? ["--include-packages", ...includePackages] : ["--ignore-dependencies"])}
         ${jellyOptions.approx && "--approx"}
         ${logFile ? ["--logfile", logFile] : []}
         --callstacks-json ${callStackFile}
@@ -110592,7 +110593,7 @@ async function runJellyImportReachabilityAnalysis(mainProjectRoot, projectRoot,
     const includePackages = computePackagesOnVulnPath(vulnerabilities, { includeLeafPackages: true });
     const reachableModulesFile = resolve14(tmpFolder, "reachable-modules.json");
     const jellyCmd = cmdt`${await getNodeExecutable(ToolPathResolver.nodeExecutablePath)} --max-old-space-size=${options.memoryLimitInMB}
-      ${ToolPathResolver.jellyPath} --basedir ${mainProjectRoot} --modules-only
+      ${ToolPathResolver.jellyPath} --basedir ${mainProjectRoot} --modules-only --reparse
         ${includePackages.length ? ["--include-packages", ...includePackages] : ["--ignore-dependencies"]}
         ${getExcludes(mainProjectRoot, projectRoot, options)}
         --reachable-json ${reachableModulesFile}
@@ -110663,7 +110664,7 @@ var JSCodeAwareVulnerabilityScanner = class _JSCodeAwareVulnerabilityScanner {
       return {
         type: "success",
         diagnostics,
-        terminatedEarly: diagnostics.aborted || diagnostics.timeout,
+        terminatedEarly: diagnostics.aborted || diagnostics.timeout || diagnostics.lowmemory,
         reachedDependencies: diagnostics.packages > 0,
         affectedPurls: analysisRes.affectedPurls,
         computeDetectedOccurrences: ({ url: url3 }) => this.transformSourceLocations(matches[url3] ?? { analysisLevel: "function-level", affectedPackages: [], stacks: [] })

package/repos/coana-tech/jelly-private/dist/bundle/approx.js

@@ -7,11 +7,11 @@ import "./iterator-helpers-polyfill.js";
 import {
   require_hints,
   require_parser
-} from "./chunk-D4F3MOY5.js";
+} from "./chunk-QPIPGSUC.js";
 import {
   require_proxy,
   require_sandbox
-} from "./chunk-XK6IPQRH.js";
+} from "./chunk-MZDUAIIH.js";
 import {
   __commonJS,
   __name,
@@ -21,7 +21,7 @@ import {
   require_options,
   require_transform,
   require_util
-} from "./chunk-NNOCQRBG.js";
+} from "./chunk-K5LIJ7OH.js";
 
 // lib/approx/approx.js
 var require_approx = __commonJS({

package/repos/coana-tech/jelly-private/dist/bundle/{chunk-NNOCQRBG.js → chunk-K5LIJ7OH.js}

@@ -10873,7 +10873,9 @@ var require_options = __commonJS({
       vulnerabilitiesFull: false,
       modulesJson: void 0,
       lazy: false,
-      lazyCleanup: false
+      lazyCleanup: false,
+      reparse: false,
+      memory: void 0
     };
     function setOptions(opts) {
       for (const opt of Object.getOwnPropertyNames(exports.options)) {
@@ -14661,6 +14663,7 @@ var require_nativehelpers = __commonJS({
     var assert_1 = __importDefault(__require("assert"));
     var constraintvars_1 = require_constraintvars();
     var accesspaths_1 = require_accesspaths();
+    var infos_1 = require_infos();
     function assignParameterToThisProperty(param, prop, p) {
       if (p.path.node.arguments.length > param && p.base) {
         const arg = p.path.node.arguments[param];
@@ -14889,7 +14892,7 @@ var require_nativehelpers = __commonJS({
     __name(invokeCallback, "invokeCallback");
     function generatorCall(p) {
       if (p.base instanceof tokens_1.AllocationSiteToken && p.base.kind === "Generator") {
-        (0, assert_1.default)((0, types_1.isFunction)(p.base.allocSite));
+        (0, assert_1.default)(!(p.base.allocSite instanceof infos_1.ModuleInfo) && (0, types_1.isFunction)(p.base.allocSite));
         const solver = p.solver;
         const f = solver.fragmentState;
         const a = solver.globalState;
@@ -15432,9 +15435,8 @@ var require_nodejs = __commonJS({
         const mod = p.moduleSpecialNatives["module"];
         p.solver.addTokenConstraint(exp, vp.objPropVar(mod, "exports"));
         p.solver.addTokenConstraint(exp, vp.objPropVar(exp, "default"));
-        const prog = a.modules.get(p.moduleInfo);
-        const args = a.canonicalizeToken(new tokens_1.ArrayToken(prog));
-        p.solver.addTokenConstraint(args, vp.argumentsVar(prog));
+        const args = a.canonicalizeToken(new tokens_1.ArrayToken(p.moduleInfo));
+        p.solver.addTokenConstraint(args, vp.argumentsVar(p.moduleInfo));
         p.solver.addTokenConstraint(exp, vp.objPropVar(args, "0"));
         p.solver.addTokenConstraint(req, vp.objPropVar(args, "1"));
         p.solver.addTokenConstraint(mod, vp.objPropVar(args, "2"));
@@ -19869,4 +19871,4 @@ fill-range/index.js:
    * Licensed under the MIT License.
    *)
 */
-//# sourceMappingURL=chunk-NNOCQRBG.js.map
+//# sourceMappingURL=chunk-K5LIJ7OH.js.map

package/repos/coana-tech/jelly-private/dist/bundle/{chunk-XK6IPQRH.js → chunk-MZDUAIIH.js}

@@ -9,7 +9,7 @@ import {
   __name,
   __require,
   require_transform
-} from "./chunk-NNOCQRBG.js";
+} from "./chunk-K5LIJ7OH.js";
 
 // lib/approx/proxy.js
 var require_proxy = __commonJS({
@@ -268,4 +268,4 @@ export {
   require_proxy,
   require_sandbox
 };
-//# sourceMappingURL=chunk-XK6IPQRH.js.map
+//# sourceMappingURL=chunk-MZDUAIIH.js.map

package/repos/coana-tech/jelly-private/dist/bundle/{chunk-L7Z5ACXW.js → chunk-PYSMGG45.js}

@@ -8,7 +8,7 @@ import {
   __commonJS,
   __name,
   __require
-} from "./chunk-NNOCQRBG.js";
+} from "./chunk-K5LIJ7OH.js";
 
 // node_modules/source-map/lib/base64.js
 var require_base64 = __commonJS({
@@ -224380,4 +224380,4 @@ typescript/lib/typescript.js:
   and limitations under the License.
   ***************************************************************************** *)
 */
-//# sourceMappingURL=chunk-L7Z5ACXW.js.map
+//# sourceMappingURL=chunk-PYSMGG45.js.map

package/repos/coana-tech/jelly-private/dist/bundle/{chunk-D4F3MOY5.js → chunk-QPIPGSUC.js}

@@ -14,7 +14,7 @@ import {
   require_options,
   require_tokens,
   require_util
-} from "./chunk-NNOCQRBG.js";
+} from "./chunk-K5LIJ7OH.js";
 
 // lib/parsing/parser.js
 var require_parser = __commonJS({
@@ -516,4 +516,4 @@ export {
   require_patching,
   require_hints
 };
-//# sourceMappingURL=chunk-D4F3MOY5.js.map
+//# sourceMappingURL=chunk-QPIPGSUC.js.map

package/repos/coana-tech/jelly-private/dist/bundle/hooks.js

@@ -6,10 +6,10 @@ import "./iterator-helpers-polyfill.js";
 
 import {
   require_moduleresolver
-} from "./chunk-L7Z5ACXW.js";
+} from "./chunk-PYSMGG45.js";
 import {
   require_sandbox
-} from "./chunk-XK6IPQRH.js";
+} from "./chunk-MZDUAIIH.js";
 import {
   __commonJS,
   __name,
@@ -17,7 +17,7 @@ import {
   require_files,
   require_options,
   require_transform
-} from "./chunk-NNOCQRBG.js";
+} from "./chunk-K5LIJ7OH.js";
 
 // lib/approx/hooks.js
 var require_hooks = __commonJS({

package/repos/coana-tech/jelly-private/dist/bundle/jelly.js

@@ -9,11 +9,11 @@ import {
   require_hints,
   require_parser,
   require_patching
-} from "./chunk-D4F3MOY5.js";
+} from "./chunk-QPIPGSUC.js";
 import {
   require_moduleresolver,
   require_typescript
-} from "./chunk-L7Z5ACXW.js";
+} from "./chunk-PYSMGG45.js";
 import {
   __commonJS,
   __name,
@@ -37,7 +37,7 @@ import {
   require_tokens,
   require_transform,
   require_util
-} from "./chunk-NNOCQRBG.js";
+} from "./chunk-K5LIJ7OH.js";
 
 // lib/misc/timer.js
 var require_timer = __commonJS({
@@ -172,7 +172,6 @@ var require_globalstate = __commonJS({
       moduleInfosByPath = /* @__PURE__ */ new Map();
       moduleInfos = /* @__PURE__ */ new Map();
       dummyModuleInfos = /* @__PURE__ */ new Map();
-      modules = /* @__PURE__ */ new Map();
       functionInfos = /* @__PURE__ */ new Map();
       entryFiles = /* @__PURE__ */ new Set();
       reachedFiles = /* @__PURE__ */ new Set();
@@ -404,7 +403,7 @@ var require_constraintvarproducer = __commonJS({
         if (binding)
           return { v: this.nodeVar(binding.identifier) };
         else if (id.name === "arguments")
-          return { v: this.argumentsVar((0, asthelpers_1.getEnclosingNonArrowFunction)(path) ?? path.findParent((p) => p.isProgram()).node) };
+          return { v: this.argumentsVar((0, asthelpers_1.getEnclosingNonArrowFunction)(path) ?? id.loc.module) };
         else
           return { v: this.objPropVar(this.a.globalSpecialNatives["globalThis"], id.name), unbound: true };
       }
@@ -970,8 +969,10 @@ var require_memory = __commonJS({
       return mod && mod.__esModule ? mod : { "default": mod };
     };
     Object.defineProperty(exports, "__esModule", { value: true });
+    exports.MemoryLowException = void 0;
     exports.getMemoryUsage = getMemoryUsage;
     exports.getMemoryLimit = getMemoryLimit;
+    exports.checkMemoryLow = checkMemoryLow;
     var options_1 = require_options();
     var assert_1 = __importDefault(__require("assert"));
     var v8 = __importStar(__require("v8"));
@@ -993,6 +994,23 @@ var require_memory = __commonJS({
       return Math.ceil(v8.getHeapStatistics().heap_size_limit / 1048576);
     }
     __name(getMemoryLimit, "getMemoryLimit");
+    function checkMemoryLow() {
+      if (options_1.options.memory !== void 0) {
+        const s = v8.getHeapStatistics();
+        if (s.used_heap_size / s.heap_size_limit > Number(options_1.options.memory))
+          throw new MemoryLowException();
+      }
+    }
+    __name(checkMemoryLow, "checkMemoryLow");
+    var MemoryLowException = class extends Error {
+      static {
+        __name(this, "MemoryLowException");
+      }
+      constructor() {
+        super("Memory low");
+      }
+    };
+    exports.MemoryLowException = MemoryLowException;
   }
 });
 
@@ -1019,6 +1037,7 @@ var require_diagnostics = __commonJS({
       uniqueTokens = 0;
       aborted = false;
       timeout = false;
+      lowmemory = false;
       analysisTime = 0n;
       codeSize = 0;
       codeSizeMain = 0;
@@ -1196,7 +1215,7 @@ var require_escaping = __commonJS({
       }
       __name(addToWorklist, "addToWorklist");
       for (const m of Array.isArray(ms) ? ms : [ms])
-        if (1) {
+        if (m.packageInfo.isEntry && (m.getPath().includes("node_modules") || options_1.options.library)) {
           const pi = a.packageJsonInfos.get(m.packageInfo.dir);
           if (!pi?.exports || (0, packagejson_1.isInExports)(`./${m.relativePath}`, pi.exports))
             addToWorklist(f.varProducer.objPropVar(a.canonicalizeToken(new tokens_1.NativeObjectToken("module", m)), "exports"));
@@ -1581,6 +1600,7 @@ var require_solver = __commonJS({
             const f = this.fragmentState;
             (0, logger_1.writeStdOut)(`${this.phase}... (total time: ${d}ms, call edges: ${f.numberOfCallToFunctionEdges}` + (options_1.options.diagnostics ? `, vars: ${f.getNumberOfVarsWithTokens()}, tokens: ${f.numberOfTokens}, subsets: ${f.numberOfSubsetEdges}, ` + (options_1.options.maxIndirections !== void 0 ? `round: ${this.diagnostics.round}, ` : "") + `wave: ${this.diagnostics.wave}, propagations: ${this.diagnostics.propagations}, worklist: ${this.diagnostics.unprocessedTokensSize + f.postponedListenerCalls.length + f.postponedListenerCalls2.length - this.postponedListenersProcessed}` : "") + ")");
             f.a.timeoutTimer.checkTimeout();
+            (0, memory_1.checkMemoryLow)();
           }
         }
       }
@@ -1981,6 +2001,7 @@ var require_solver = __commonJS({
         this.diagnostics.propagations++;
         if (this.diagnostics.propagations % 100 === 0) {
           this.globalState.timeoutTimer.checkTimeout();
+          (0, memory_1.checkMemoryLow)();
           this.printDiagnostics();
         }
       }
@@ -1993,6 +2014,7 @@ var require_solver = __commonJS({
           logger_1.default.debug("Processing constraints until fixpoint...");
         const f = this.fragmentState;
         f.a.timeoutTimer.checkTimeout();
+        (0, memory_1.checkMemoryLow)();
         await this.checkAbort();
         if (logger_1.default.isVerboseEnabled())
           logger_1.default.verbose(`Propagating (tokens: ${this.unprocessedTokens.size}, non-bounded: ${f.postponedListenerCalls.length}, bounded: ${f.postponedListenerCalls2.length})`);
@@ -2066,6 +2088,7 @@ var require_solver = __commonJS({
               fun(arg);
               if (++this.postponedListenersProcessed % 100 === 0) {
                 f.a.timeoutTimer.checkTimeout();
+                (0, memory_1.checkMemoryLow)();
                 this.printDiagnostics();
               }
             }
@@ -2090,6 +2113,7 @@ var require_solver = __commonJS({
                 fun.apply(void 0, Array.isArray(args) ? args : [args]);
                 if (++this.postponedListenersProcessed % 100 === 0) {
                   f.a.timeoutTimer.checkTimeout();
+                  (0, memory_1.checkMemoryLow)();
                   this.printDiagnostics();
                 }
               }
@@ -3783,7 +3807,7 @@ var require_finalization = __commonJS({
       const f = solver.fragmentState;
       const a = solver.globalState;
       const d = solver.diagnostics;
-      if (d.aborted || d.timeout || d.waveLimitReached > 0 || d.indirectionsLimitReached > 0) {
+      if (d.aborted || d.timeout || d.lowmemory || d.waveLimitReached > 0 || d.indirectionsLimitReached > 0) {
         for (const n of f.callLocations) {
           const caller = f.callToContainingFunction.get(n);
           (0, assert_1.default)(caller);
@@ -4182,9 +4206,6 @@ var require_analyzer = __commonJS({
         return result;
       };
     })();
-    var __importDefault = exports && exports.__importDefault || function(mod) {
-      return mod && mod.__esModule ? mod : { "default": mod };
-    };
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.analyzeFiles = analyzeFiles;
     var fs_1 = __importStar(__require("fs"));
@@ -4211,10 +4232,10 @@ var require_analyzer = __commonJS({
     var patching_1 = require_patching();
     var diagnostics_1 = require_diagnostics2();
     var patchthis_1 = require_patchthis();
-    var assert_1 = __importDefault(__require("assert"));
     var accesspaths_1 = require_accesspaths();
     var tokens_1 = require_tokens();
     var types_1 = __require("@babel/types");
+    var memory_1 = require_memory();
     async function analyzeFiles(files, solver) {
       const a = solver.globalState;
       const d = solver.diagnostics;
@@ -4257,8 +4278,6 @@ var require_analyzer = __commonJS({
                     continue;
                   }
                   moduleInfo.loc = ast.program.loc;
-                  moduleInfo.ast = ast;
-                  a.modules.set(moduleInfo, ast.program);
                   a.filesAnalyzed.push(file);
                   const fileSize = (0, fs_1.statSync)(file).size;
                   d.modules++;
@@ -4281,12 +4300,24 @@ var require_analyzer = __commonJS({
                   } else {
                     a.reachedModuleFull(moduleInfo);
                   }
-                  if (d.modules % 16 === 0)
+                  if (!options_1.options.reparse || a.reachedModulesFull.has(moduleInfo))
+                    moduleInfo.ast = ast;
+                  if (d.modules % 16 === 0) {
                     a.timeoutTimer.checkTimeout();
+                    (0, memory_1.checkMemoryLow)();
+                  }
                 }
                 for (const moduleInfo of a.pendingModulesFull) {
-                  const ast = moduleInfo.ast;
-                  (0, assert_1.default)(ast);
+                  let ast = moduleInfo.ast;
+                  if (!ast) {
+                    if (!moduleInfo.loc)
+                      continue;
+                    if (!options_1.options.printProgress)
+                      logger_1.default.info(`Reloading ${moduleInfo} (${d.modules})`);
+                    const file = moduleInfo.getPath();
+                    const str = fs_1.default.readFileSync(file, "utf8");
+                    ast = (0, parser_1.parseAndDesugar)(str, file, solver.fragmentState);
+                  }
                   d.modulesFull++;
                   if (!options_1.options.modulesOnly && options_1.options.printProgress)
                     logger_1.default.info(`Analyzing ${moduleInfo}`);
@@ -4435,6 +4466,8 @@ var require_analyzer = __commonJS({
       } catch (ex) {
         if (ex instanceof timer_1.TimeoutException)
           d.timeout = true;
+        else if (ex instanceof memory_1.MemoryLowException)
+          d.lowmemory = true;
         else if (ex instanceof solver_1.AbortedException)
           d.aborted = true;
         else
@@ -4450,6 +4483,8 @@ var require_analyzer = __commonJS({
         logger_1.default.warn("Received abort signal, analysis aborted");
       else if (d.timeout)
         logger_1.default.warn("Time limit reached, analysis aborted");
+      else if (d.lowmemory)
+        logger_1.default.warn("Memory low, analysis aborted");
       else if (d.waveLimitReached > 0)
         logger_1.default.warn("Warning: Wave limit reached, analysis terminated early");
       else if (d.indirectionsLimitReached > 0)
@@ -8885,6 +8920,7 @@ var require_tapirpatterns = __commonJS({
     var util_1 = require_util();
     var timer_1 = require_timer();
     var patternmatcher_1 = require_patternmatcher();
+    var memory_1 = require_memory();
     function tapirLoadPatterns(patternFiles) {
       const tapirPatterns = (0, patternloader_1.removeObsoletePatterns)((0, patternloader_1.loadTapirDetectionPatternFiles)(patternFiles));
       const patterns = (0, patternloader_1.convertTapirPatterns)(tapirPatterns);
@@ -8915,6 +8951,7 @@ var require_tapirpatterns = __commonJS({
           const p = patterns[i];
           if (p) {
             solver.globalState.timeoutTimer.checkTimeout();
+            (0, memory_1.checkMemoryLow)();
             const ms = matcher.findDetectionPatternMatches(p, solver.diagnostics);
             for (const m of ms) {
               logger_1.default.info(`Pattern #${tpId}: ${tpPattern}${tpVersion} matches ${(0, util_1.locationToStringWithFileAndEnd)(m.exp.loc)} (confidence: ${isHigh(m) ? "high" : "low"})`);
@@ -8971,6 +9008,10 @@ var require_tapirpatterns = __commonJS({
           logger_1.default.error("Time limit reached, pattern matching aborted");
           if (solver.diagnostics)
             solver.diagnostics.timeout = true;
+        } else if (ex instanceof memory_1.MemoryLowException) {
+          logger_1.default.error("Memory low, pattern matching aborted");
+          if (solver.diagnostics)
+            solver.diagnostics.lowmemory = true;
         } else
           throw ex;
       }
@@ -12424,7 +12465,7 @@ var require_paths = __commonJS({
     }
     __name(isPathExistInArray, "isPathExistInArray");
     function removeBestCandidate(candidates) {
-      return candidates.sort((a, b) => a.totalCost - b.totalCost).shift();
+      return candidates.sort((a, b) => b.totalCost - a.totalCost).pop();
     }
     __name(removeBestCandidate, "removeBestCandidate");
     function dijkstra(g, source, removed) {
@@ -12595,6 +12636,7 @@ var require_vulnerabilitydetector = __commonJS({
     var assert_1 = __importDefault(__require("assert"));
     var paths_1 = require_paths();
     var options_1 = require_options();
+    var memory_1 = require_memory();
     var MAX_PATHS_PER_SOURCE = 5;
     var MAX_SOURCES = 5;
     var VulnerabilityDetector = class {
@@ -12787,7 +12829,7 @@ ${p} (${(0, vulnerabilities_1.getVulnerabilityId)(v)})`);
         }
         logger_1.default.info(`Vulnerability summary:
   Entry packages that depend on package with vulnerability: ${cp}
-  Entry package that depend on module with vulnerability: ${cm}
+  Entry package modules that depend on module with vulnerability: ${cm}
   Entry package functions that may reach function with vulnerability: ${cf}
   Entry package function call site that may reach function vulnerability: ${cc}`);
         if (logger_1.default.isDebugEnabled()) {
@@ -12893,6 +12935,9 @@ ${p} (${(0, vulnerabilities_1.getVulnerabilityId)(v)})`);
           if (ex instanceof timer_1.TimeoutException) {
             logger_1.default.error("Time limit reached, pattern matching aborted");
             diagnostics.timeout = true;
+          } else if (ex instanceof memory_1.MemoryLowException) {
+            logger_1.default.error("Memory low, pattern matching aborted");
+            diagnostics.lowmemory = true;
           } else
             throw ex;
         }
@@ -13416,7 +13461,7 @@ var require_main = __commonJS({
     var assert_1 = __importDefault(__require("assert"));
     var semver_1 = __importDefault(require_semver2());
     var ENGINES_NODE = require_package()?.engines?.node;
-    commander_1.program.name("jelly").version(options_1.VERSION).addHelpText("before", options_1.COPYRIGHT).option("-b, --basedir <directory>", "base directory for files to analyze (default: auto-detect)").option("-f, --logfile <file>", "log to file (default: log to stdout)").option("-l, --loglevel <level>", "log level (debug/verbose/info/warn/error)", "info").option("-i, --timeout <seconds>", "limit analysis time").option("-a, --dataflow-html <file>", "save data-flow graph as HTML file").option("-m, --callgraph-html <file>", "save call graph as HTML file").option("-j, --callgraph-json <file>", "save call graph as JSON file").option("-s, --soundness <file>", "compare with dynamic call graph").option("-n, --graal-home <directory>", "home of graal-nodejs (default: $GRAAL_HOME)").option("-d, --dynamic <file>", "generate call graph dynamically, no static analysis").option("--approx", "enable approximate interpretation").option("--approx-only <file>", "perform approximate interpretation, no static analysis").option("--approx-load <file>", "use pre-computed approximate interpretation results").option("-p, --patterns <file...>", "files containing API usage patterns to detect").option("-v, --vulnerabilities <file>", "report vulnerability matches").option("--vulnerabilities-json <json>", "report vulnerability matches (patterns given as JSON string)").option("--include-packages <package...>", "include only dependencies in this list").option("--exclude-packages <package...>", "exclude dependencies in this list").option("--ignore-dependencies", "don't include dependencies in analysis").option("--ignore-unresolved", "don't report errors about unresolved modules").option("--npm-test <dir>", "run 'npm test' instead of 'node' (use with -d)").option("--callgraph", "report call graph").option("--tokens-json <file>", "save tokens for constraint variables as JSON file").option("--tokens", "report tokens for constraint variables").option("--largest", "report largest token sets and subset relations").option("--no-cycle-elimination", "disable cycle elimination").option("--no-natives", "disable nonessential models of native libraries").option("--test-graal", "test graal-nodejs (use with -d)").option("--no-print-progress", "don't print analysis progress information").option("--no-tty", "don't print solver progress for TTY").option("--warnings-unsupported", "print warnings about unsupported features").option("--gc", "enable garbage collection for more accurate memory usage reporting").option("--typescript", "enable TypeScript type inference (use with -p)").option("--api-usage", "report API usage of external packages (implies --ignore-dependencies)").option("--api-exported", "report API of modules").option("--find-access-paths <location>", "find access paths for source location (file:line)").option("--higher-order-functions", "report higher-order functions").option("--zeros", "report calls with zero callees and functions with zero callers").option("--exclude-entries <glob...>", "files to exclude when specifying entry directories").option("--tracked-modules <glob...>", "modules to track usage of (default: auto-detect)").option("--external-matches", "enable pattern matches from external code").option("--no-callgraph-implicit", "omit implicit calls in call graph").option("--no-callgraph-native", "omit native calls in call graph").option("--no-callgraph-require", "omit module loading in call graph").option("--no-callgraph-external", "omit heuristic external callbacks in call graph").option("--diagnostics", "report internal analysis diagnostics").option("--diagnostics-json <file>", "save analysis diagnostics in JSON file").option("--variable-kinds", "report constraint variable kinds").option("--max-waves <number>", "limit number of fixpoint waves").option("--max-indirections <number>", "limit number of function call and property write indirections").option("--full-indirection-bounding", "enable indirection bounding for method calls and property reads (use with --max-indirections)").option("--typescript-library-usage <file>", "save TypeScript library usage in JSON file, no analysis").option("--modules-only", "report reachable packages and modules only, no analysis").option("--compare-callgraphs", "compare two call graphs given as JSON files, no analysis").option("--reachability", "compare call graph reachability (use with -s or --compare-callgraphs)").option("--library", "assume program is a library (default: true if in node_modules)").option("--skip-tests", "skip files that look like tests").option("--no-patch-escaping", "disable patching using escape analysis").option("--patch-dynamics", "enable dynamic property access patching heuristic").option("--patch-method-calls", "enable method call patching heuristic").option("--no-patch-this", "disable 'this' patching heuristic").option("--proto", "enable model of assignments to the __proto__ property").option("--obj-spread", "enable model of spread syntax for object literals ({...obj})").option("--native-overwrites", "allow overwriting of native object properties").option("--ignore-imprecise-native-calls", "ignore imprecise native calls").option("--matches-json <file>", "save vulnerability pattern matches in JSON file").option("--reachable-json <file>", "save reachable packages and modules in JSON file").option("--callstacks-json <file>", "save vulnerability call stacks in JSON file").option("--vulnerabilities-full", "full report of vulnerabilities").option("--modules-json <file>", "save modules dependencies in JSON file").option("--lazy", "lazy analysis of modules").option("--lazy-cleanup", "lazily clean up redundant tokens for lazy module analysis").usage("[options] [files]").addHelpText("after", `
+    commander_1.program.name("jelly").version(options_1.VERSION).addHelpText("before", options_1.COPYRIGHT).option("-b, --basedir <directory>", "base directory for files to analyze (default: auto-detect)").option("-f, --logfile <file>", "log to file (default: log to stdout)").option("-l, --loglevel <level>", "log level (debug/verbose/info/warn/error)", "info").option("-i, --timeout <seconds>", "limit analysis time").option("-a, --dataflow-html <file>", "save data-flow graph as HTML file").option("-m, --callgraph-html <file>", "save call graph as HTML file").option("-j, --callgraph-json <file>", "save call graph as JSON file").option("-s, --soundness <file>", "compare with dynamic call graph").option("-n, --graal-home <directory>", "home of graal-nodejs (default: $GRAAL_HOME)").option("-d, --dynamic <file>", "generate call graph dynamically, no static analysis").option("--approx", "enable approximate interpretation").option("--approx-only <file>", "perform approximate interpretation, no static analysis").option("--approx-load <file>", "use pre-computed approximate interpretation results").option("-p, --patterns <file...>", "files containing API usage patterns to detect").option("-v, --vulnerabilities <file>", "report vulnerability matches").option("--vulnerabilities-json <json>", "report vulnerability matches (patterns given as JSON string)").option("--include-packages <package...>", "include only dependencies in this list").option("--exclude-packages <package...>", "exclude dependencies in this list").option("--ignore-dependencies", "don't include dependencies in analysis").option("--ignore-unresolved", "don't report errors about unresolved modules").option("--npm-test <dir>", "run 'npm test' instead of 'node' (use with -d)").option("--callgraph", "report call graph").option("--tokens-json <file>", "save tokens for constraint variables as JSON file").option("--tokens", "report tokens for constraint variables").option("--largest", "report largest token sets and subset relations").option("--no-cycle-elimination", "disable cycle elimination").option("--no-natives", "disable nonessential models of native libraries").option("--test-graal", "test graal-nodejs (use with -d)").option("--no-print-progress", "don't print analysis progress information").option("--no-tty", "don't print solver progress for TTY").option("--warnings-unsupported", "print warnings about unsupported features").option("--gc", "enable garbage collection for more accurate memory usage reporting").option("--typescript", "enable TypeScript type inference (use with -p)").option("--api-usage", "report API usage of external packages (implies --ignore-dependencies)").option("--api-exported", "report API of modules").option("--find-access-paths <location>", "find access paths for source location (file:line)").option("--higher-order-functions", "report higher-order functions").option("--zeros", "report calls with zero callees and functions with zero callers").option("--exclude-entries <glob...>", "files to exclude when specifying entry directories").option("--tracked-modules <glob...>", "modules to track usage of (default: auto-detect)").option("--external-matches", "enable pattern matches from external code").option("--no-callgraph-implicit", "omit implicit calls in call graph").option("--no-callgraph-native", "omit native calls in call graph").option("--no-callgraph-require", "omit module loading in call graph").option("--no-callgraph-external", "omit heuristic external callbacks in call graph").option("--diagnostics", "report internal analysis diagnostics").option("--diagnostics-json <file>", "save analysis diagnostics in JSON file").option("--variable-kinds", "report constraint variable kinds").option("--max-waves <number>", "limit number of fixpoint waves").option("--max-indirections <number>", "limit number of function call and property write indirections").option("--full-indirection-bounding", "enable indirection bounding for method calls and property reads (use with --max-indirections)").option("--typescript-library-usage <file>", "save TypeScript library usage in JSON file, no analysis").option("--modules-only", "report reachable packages and modules only, no analysis").option("--compare-callgraphs", "compare two call graphs given as JSON files, no analysis").option("--reachability", "compare call graph reachability (use with -s or --compare-callgraphs)").option("--library", "assume program is a library (default: true if in node_modules)").option("--skip-tests", "skip files that look like tests").option("--no-patch-escaping", "disable patching using escape analysis").option("--patch-dynamics", "enable dynamic property access patching heuristic").option("--patch-method-calls", "enable method call patching heuristic").option("--no-patch-this", "disable 'this' patching heuristic").option("--proto", "enable model of assignments to the __proto__ property").option("--obj-spread", "enable model of spread syntax for object literals ({...obj})").option("--native-overwrites", "allow overwriting of native object properties").option("--ignore-imprecise-native-calls", "ignore imprecise native calls").option("--matches-json <file>", "save vulnerability pattern matches in JSON file").option("--reachable-json <file>", "save reachable packages and modules in JSON file").option("--callstacks-json <file>", "save vulnerability call stacks in JSON file").option("--vulnerabilities-full", "full report of vulnerabilities").option("--modules-json <file>", "save modules dependencies in JSON file").option("--lazy", "lazy analysis of modules").option("--lazy-cleanup", "lazily clean up redundant tokens for lazy module analysis").option("--reparse", "reparse by need (use with --lazy)").option("--memory <limit>", "abort if reaching selected fraction of memory limit").usage("[options] [files]").addHelpText("after", `
 All modules reachable by require/import from the given files are included in the analysis
 (except when using --ignore-dependencies, --include-packages or --exclude-packages).
 If specifying directories instead of files, the files in the directories and their