@coana-tech/cli 14.12.157 → 14.12.159

package/cli.mjs

@@ -234633,6 +234633,7 @@ function isShortestPath(root3, vulnPath) {
 }
 
 // ../web-compat-utils/src/analysis-error-keys.ts
+var FAILED_TO_INSTALL_PACKAGE_KEY = "[UNABLE_TO_INSTALL_PACKAGE_ERROR]: ";
 var CLI_ANALYSIS_ERROR_MESSAGE = "Sharing log due to analysis error";
 var ANALYSIS_LOW_CONFIDENCE_MESSAGE = "Analysis had low confidence in result";
 
@@ -235788,7 +235789,7 @@ function displayWorkspaceDiagnosticsSummaryInternal(diagnosticsEntries, vulns) {
       let category = "general";
       if (errorMessageLower.includes(ANALYSIS_LOW_CONFIDENCE_MESSAGE.toLowerCase())) {
         category = "lowConfidence";
-      } else if (errorMessageLower.includes("install") || errorMessageLower.includes("npm") || errorMessageLower.includes("pip") || errorMessageLower.includes("dependency")) {
+      } else if (errorMessage.startsWith(FAILED_TO_INSTALL_PACKAGE_KEY)) {
         category = "install";
       } else if (errorMessageLower.includes("timeout") || errorMessageLower.includes("timed out")) {
         category = "timeout";
@@ -250902,7 +250903,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
 }
 
 // dist/version.js
-var version3 = "14.12.157";
+var version3 = "14.12.159";
 
 // dist/cli-core.js
 var { mapValues, omit, partition, pickBy: pickBy2 } = import_lodash15.default;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coana-tech/cli",
-  "version": "14.12.157",
+  "version": "14.12.159",
   "description": "Coana CLI",
   "type": "module",
   "bin": {

package/reachability-analyzers-cli.mjs

@@ -110902,7 +110902,7 @@ function getExcludes(mainProjectRoot, projectRoot, options) {
   if (options.excludeDirs?.length) {
     const excludeDirsRelativeToProjectRoot = options.excludeDirs.map((d) => relative6(projectRoot, resolve13(mainProjectRoot, d)));
     const excludeDirsRelativeToProjectRootWithWildcards = excludeDirsRelativeToProjectRoot.map((d) => `${d}/**`);
-    return [...excludeDirsRelativeToProjectRoot, ...excludeDirsRelativeToProjectRootWithWildcards];
+    return ["--exclude-entries", ...excludeDirsRelativeToProjectRoot, ...excludeDirsRelativeToProjectRootWithWildcards];
   }
 }
 function relativizeSourceLocations(projectDir, paths) {
@@ -110952,14 +110952,16 @@ var JSCodeAwareVulnerabilityScanner = class _JSCodeAwareVulnerabilityScanner {
       analysisOptionsFromHeuristic.approx = process.env.JELLY_APPROX === "true" || experiment === "JELLY_APPROX";
       const analysisRes = await runJellyAnalysis(this.mainProjectDir, this.projectDir, analysisOptionsFromHeuristic, this.options, timeoutInSeconds, vulnerabilities, experiment, telemetryHandler, analyzerTelemetryHandler);
       const { analysisDiagnostics: diagnostics, matches } = analysisRes;
-      const lowConfidence = diagnostics.round < 2 && (diagnostics.timeout || diagnostics.aborted);
+      const terminatedEarly = diagnostics.aborted || diagnostics.timeout || diagnostics.lowmemory;
       return {
         type: "success",
         diagnostics,
-        terminatedEarly: diagnostics.aborted || diagnostics.timeout || diagnostics.lowmemory,
+        terminatedEarly,
         reachedDependencies: diagnostics.packages > 0,
         affectedPurls: analysisRes.affectedPurls,
-        lowConfidence,
+        // A round of 0 or 1 indicates that at most 1 level of indirections in the calls was resolved,
+        // which is too few for us to confidently trust the results.
+        lowConfidence: diagnostics.round < 2 && terminatedEarly,
         computeDetectedOccurrences: ({ url: url2 }) => this.transformSourceLocations(matches[url2] ?? { analysisLevel: "function-level", affectedPackages: [], stacks: [] })
       };
     } catch (e) {

package/repos/coana-tech/jelly-private/dist/bundle/approx.js

@@ -7,11 +7,11 @@ import "./iterator-helpers-polyfill.js";
 import {
   require_hints,
   require_parser
-} from "./chunk-NIHHHBFM.js";
+} from "./chunk-BV33FESD.js";
 import {
   require_proxy,
   require_sandbox
-} from "./chunk-5V2V4LSG.js";
+} from "./chunk-ID4Q5QL5.js";
 import {
   __commonJS,
   __name,
@@ -21,7 +21,7 @@ import {
   require_options,
   require_transform,
   require_util
-} from "./chunk-ODOUARTV.js";
+} from "./chunk-AAKFGMVW.js";
 
 // lib/approx/approx.js
 var require_approx = __commonJS({

package/repos/coana-tech/jelly-private/dist/bundle/{chunk-ODOUARTV.js → chunk-AAKFGMVW.js}

@@ -10871,6 +10871,8 @@ var require_options = __commonJS({
       reachableJson: void 0,
       callstacksJson: void 0,
       vulnerabilitiesFull: false,
+      eagerPropagation: false,
+      interops: true,
       modulesJson: void 0,
       preciseAccessPathTransitions: false,
       lazy: false,
@@ -10958,6 +10960,7 @@ var require_util = __commonJS({
     exports.mapSetToPairArray = mapSetToPairArray;
     exports.addPairArrayToMapSet = addPairArrayToMapSet;
     exports.pushAll = pushAll;
+    exports.escapeRegExp = escapeRegExp;
     exports.strHash = strHash;
     exports.isArrayIndex = isArrayIndex;
     exports.percent = percent;
@@ -11230,6 +11233,10 @@ var require_util = __commonJS({
         to.push(x);
     }
     __name(pushAll, "pushAll");
+    function escapeRegExp(s) {
+      return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    }
+    __name(escapeRegExp, "escapeRegExp");
     function strHash(s) {
       let h1 = 0, h2 = 17656767856;
       for (let i = 0, ch; i < s.length; i++) {
@@ -11431,6 +11438,7 @@ var require_asthelpers = __commonJS({
     exports.isMemberRead = isMemberRead;
     exports.isIdentifierReference = isIdentifierReference;
     exports.getConstructor = getConstructor;
+    exports.getConstantString = getConstantString;
     var types_1 = __require("@babel/types");
     var assert_1 = __importDefault(__require("assert"));
     var util_1 = require_util();
@@ -11621,6 +11629,23 @@ var require_asthelpers = __commonJS({
       assert_1.default.fail(`Constructor not found for class ${(0, util_1.locationToStringWithFileAndEnd)(path.node.loc)}`);
     }
     __name(getConstructor, "getConstructor");
+    function getConstantString(id) {
+      if (id.isStringLiteral())
+        return id.node.value;
+      if (id.isIdentifier()) {
+        const binding = id.scope.getBinding(id.node.name);
+        if (binding && binding.constant && binding.constantViolations.length === 0) {
+          const def = binding.path;
+          if (def.isVariableDeclarator()) {
+            const init = def.node.init;
+            if (init && (0, types_1.isStringLiteral)(init))
+              return init.value;
+          }
+        }
+      }
+      return void 0;
+    }
+    __name(getConstantString, "getConstantString");
   }
 });
 
@@ -11639,7 +11664,8 @@ var require_tokens = __commonJS({
       static {
         __name(this, "Token");
       }
-      hash;
+      index = -1;
+      hash = void 0;
     };
     exports.Token = Token;
     var FunctionToken = class extends Token {
@@ -11834,6 +11860,7 @@ var require_ecmascript = __commonJS({
     var types_1 = __require("@babel/types");
     var listeners_1 = require_listeners();
     var options_1 = require_options();
+    var asthelpers_1 = require_asthelpers();
     exports.OBJECT_PROTOTYPE = "Object.prototype";
     exports.ARRAY_PROTOTYPE = "Array.prototype";
     exports.FUNCTION_PROTOTYPE = "Function.prototype";
@@ -12950,7 +12977,8 @@ var require_ecmascript = __commonJS({
                 const args = p.path.node.arguments;
                 if (args.length < 3)
                   return;
-                if (!(0, types_1.isStringLiteral)(args[1])) {
+                const prop = (0, asthelpers_1.getConstantString)(p.path.get("arguments.1"));
+                if (prop === void 0) {
                   (0, nativehelpers_1.warnNativeUsed)("Object.defineProperty", p, "with dynamic property name");
                   return;
                 }
@@ -12958,7 +12986,7 @@ var require_ecmascript = __commonJS({
                   (0, nativehelpers_1.warnNativeUsed)("Object.defineProperty", p, "with non-expressions?");
                   return;
                 }
-                const ivars = (0, nativehelpers_1.prepareDefineProperty)("Object.defineProperty", args[1].value, p.op.expVar(args[2], p.path), p);
+                const ivars = (0, nativehelpers_1.prepareDefineProperty)("Object.defineProperty", prop, p.op.expVar(args[2], p.path), p);
                 (0, nativehelpers_1.defineProperties)([args[0], listeners_1.TokenListener.NATIVE_OBJECT_DEFINE_PROPERTY], ivars, p);
               }, "invoke")
             },
@@ -14455,6 +14483,7 @@ var require_constraintvars = __commonJS({
       static {
         __name(this, "ConstraintVar");
       }
+      index = -1;
       getKind() {
         return this.constructor.name;
       }
@@ -15415,7 +15444,8 @@ var require_nativehelpers = __commonJS({
       const args = p.path.node.arguments;
       if (args.length < 2 || !p.base)
         return;
-      if (!(0, types_1.isStringLiteral)(args[0])) {
+      const prop = (0, asthelpers_1.getConstantString)(p.path.get("arguments.0"));
+      if (prop === void 0) {
         warnNativeUsed(`Object.__define${ac === "get" ? "G" : "S"}etter__`, p, "with dynamic property name");
         return;
       }
@@ -15425,7 +15455,7 @@ var require_nativehelpers = __commonJS({
       }
       const ivar = p.op.expVar(args[1], p.path);
       if (ivar)
-        defineProperties(p.base, [{ prop: args[0].value, ac, ivar }], p);
+        defineProperties(p.base, [{ prop, ac, ivar }], p);
     }
     __name(defineGetterSetter, "defineGetterSetter");
   }
@@ -18662,7 +18692,6 @@ var require_packagejson = __commonJS({
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.findPackageJson = findPackageJson;
     exports.getPackageJsonInfo = getPackageJsonInfo;
-    exports.isInExports = isInExports;
     var util_1 = require_util();
     var path_1 = __require("path");
     var fs_1 = __require("fs");
@@ -18730,17 +18759,21 @@ var require_packagejson = __commonJS({
           }
         }
         if (typeof f === "object" && "exports" in f) {
-          exports2 = [];
-          if (main)
-            exports2.push(main);
+          const patterns = [];
+          let valid = true;
           const queue = [f.exports];
           while (queue.length > 0) {
             const exp = queue.pop();
             if (typeof exp === "string") {
-              if (exp.startsWith("./"))
-                exports2.push(exp !== "./" && exp.endsWith("/") ? exp + "*" : exp);
-              else {
-                exports2 = void 0;
+              if (exp === "./") {
+                patterns.length = 0;
+                patterns.push(".*");
+                break;
+              } else if (exp.startsWith("./")) {
+                const path = exp.substring(2);
+                patterns.push(path.endsWith("/") ? (0, util_1.escapeRegExp)(path) + ".*" : (0, util_1.escapeRegExp)(path).replaceAll("\\*", "[^/]*"));
+              } else {
+                valid = false;
                 logger_1.default.warn(`Warning: Non-relative export (${exp}) found in ${p.packageJson}`);
                 break;
               }
@@ -18751,11 +18784,13 @@ var require_packagejson = __commonJS({
             else if (typeof exp === "object")
               (0, util_1.pushAll)(Object.values(exp), queue);
             else {
-              exports2 = void 0;
+              valid = false;
               logger_1.default.warn(`Warning: Invalid export (${exp}) found in ${p.packageJson}`);
               break;
             }
           }
+          if (valid)
+            exports2 = new RegExp("^(" + patterns.join("|") + ")$");
         }
       } else {
         name = "<main>";
@@ -18765,16 +18800,6 @@ var require_packagejson = __commonJS({
       return { packagekey, name, version, main, dir, exports: exports2 };
     }
     __name(getPackageJsonInfo, "getPackageJsonInfo");
-    function isInExports(rel, exports2) {
-      for (const path of exports2)
-        if (path.includes("*")) {
-          if (new RegExp(`^${path.replaceAll(/\*/g, ".*")}$`).test(rel))
-            return true;
-        } else if (path === rel)
-          return true;
-      return false;
-    }
-    __name(isInExports, "isInExports");
   }
 });
 
@@ -19885,4 +19910,4 @@ fill-range/index.js:
    * Licensed under the MIT License.
    *)
 */
-//# sourceMappingURL=chunk-ODOUARTV.js.map
+//# sourceMappingURL=chunk-AAKFGMVW.js.map

package/repos/coana-tech/jelly-private/dist/bundle/{chunk-3MLCDX4W.js → chunk-AEP2QDUI.js}

@@ -8,7 +8,7 @@ import {
   __commonJS,
   __name,
   __require
-} from "./chunk-ODOUARTV.js";
+} from "./chunk-AAKFGMVW.js";
 
 // node_modules/source-map/lib/base64.js
 var require_base64 = __commonJS({
@@ -224380,4 +224380,4 @@ typescript/lib/typescript.js:
   and limitations under the License.
   ***************************************************************************** *)
 */
-//# sourceMappingURL=chunk-3MLCDX4W.js.map
+//# sourceMappingURL=chunk-AEP2QDUI.js.map

package/repos/coana-tech/jelly-private/dist/bundle/{chunk-NIHHHBFM.js → chunk-BV33FESD.js}

@@ -14,7 +14,7 @@ import {
   require_options,
   require_tokens,
   require_util
-} from "./chunk-ODOUARTV.js";
+} from "./chunk-AAKFGMVW.js";
 
 // lib/parsing/parser.js
 var require_parser = __commonJS({
@@ -516,4 +516,4 @@ export {
   require_patching,
   require_hints
 };
-//# sourceMappingURL=chunk-NIHHHBFM.js.map
+//# sourceMappingURL=chunk-BV33FESD.js.map

package/repos/coana-tech/jelly-private/dist/bundle/{chunk-5V2V4LSG.js → chunk-ID4Q5QL5.js}

@@ -9,7 +9,7 @@ import {
   __name,
   __require,
   require_transform
-} from "./chunk-ODOUARTV.js";
+} from "./chunk-AAKFGMVW.js";
 
 // lib/approx/proxy.js
 var require_proxy = __commonJS({
@@ -268,4 +268,4 @@ export {
   require_proxy,
   require_sandbox
 };
-//# sourceMappingURL=chunk-5V2V4LSG.js.map
+//# sourceMappingURL=chunk-ID4Q5QL5.js.map

package/repos/coana-tech/jelly-private/dist/bundle/hooks.js

@@ -6,10 +6,10 @@ import "./iterator-helpers-polyfill.js";
 
 import {
   require_moduleresolver
-} from "./chunk-3MLCDX4W.js";
+} from "./chunk-AEP2QDUI.js";
 import {
   require_sandbox
-} from "./chunk-5V2V4LSG.js";
+} from "./chunk-ID4Q5QL5.js";
 import {
   __commonJS,
   __name,
@@ -17,7 +17,7 @@ import {
   require_files,
   require_options,
   require_transform
-} from "./chunk-ODOUARTV.js";
+} from "./chunk-AAKFGMVW.js";
 
 // lib/approx/hooks.js
 var require_hooks = __commonJS({

package/repos/coana-tech/jelly-private/dist/bundle/jelly.js

@@ -9,11 +9,11 @@ import {
   require_hints,
   require_parser,
   require_patching
-} from "./chunk-NIHHHBFM.js";
+} from "./chunk-BV33FESD.js";
 import {
   require_moduleresolver,
   require_typescript
-} from "./chunk-3MLCDX4W.js";
+} from "./chunk-AEP2QDUI.js";
 import {
   __commonJS,
   __name,
@@ -37,7 +37,7 @@ import {
   require_tokens,
   require_transform,
   require_util
-} from "./chunk-ODOUARTV.js";
+} from "./chunk-AAKFGMVW.js";
 
 // lib/misc/timer.js
 var require_timer = __commonJS({
@@ -1200,16 +1200,18 @@ var require_globalstate = __commonJS({
       canonicalArgumentsVar = /* @__PURE__ */ new WeakMap();
       canonicalObjectPropertyVar = /* @__PURE__ */ new WeakMap();
       canonicalNodeVars = /* @__PURE__ */ new WeakMap();
+      vars = [];
       canonicalTokens = /* @__PURE__ */ new Map();
       static canonicalUnknownAccessPathToken = new tokens_1.AccessPathToken(accesspaths_1.UnknownAccessPath.instance);
       static canonicalIgnoredAccessPathToken = new tokens_1.AccessPathToken(accesspaths_1.IgnoredAccessPath.instance);
       static {
-        for (const t of [this.canonicalUnknownAccessPathToken, this.canonicalIgnoredAccessPathToken])
-          t.hash = (0, util_1.strHash)(t.toString());
+        for (const [i, t] of [this.canonicalUnknownAccessPathToken, this.canonicalIgnoredAccessPathToken].entries())
+          [t.index, t.hash] = [i, (0, util_1.strHash)(t.toString())];
       }
       canonicalNativeObjectTokens = /* @__PURE__ */ new Map();
       canonicalAccessPathTokens = /* @__PURE__ */ new Map();
       canonicalAccessPaths = /* @__PURE__ */ new Map();
+      tokens = [_GlobalState.canonicalUnknownAccessPathToken, _GlobalState.canonicalIgnoredAccessPathToken];
       packageInfos = /* @__PURE__ */ new Map();
       moduleInfosByPath = /* @__PURE__ */ new Map();
       moduleInfos = /* @__PURE__ */ new Map();
@@ -1241,16 +1243,21 @@ var require_globalstate = __commonJS({
         this.accessPathEdges = v && options_1.options.preciseAccessPathTransitions ? (0, patternloader_1.getPatternGraph)(v.getPatterns()) : void 0;
       }
       canonicalizeVar(v) {
+        const next = /* @__PURE__ */ __name(() => {
+          v.index = this.vars.length;
+          this.vars.push(v);
+          return v;
+        }, "next");
         if (v instanceof constraintvars_1.NodeVar)
-          return (0, util_1.getOrSet)(this.canonicalNodeVars, v.node, () => v);
+          return (0, util_1.getOrSet)(this.canonicalNodeVars, v.node, next);
         else if (v instanceof constraintvars_1.AncestorsVar)
-          return (0, util_1.getOrSet)(this.canonicalAncestorVars, v.t, () => v);
+          return (0, util_1.getOrSet)(this.canonicalAncestorVars, v.t, next);
         else if (v instanceof constraintvars_1.FunctionReturnVar)
-          return (0, util_1.getOrSet)(this.canonicalReturnVar, v.fun, () => v);
+          return (0, util_1.getOrSet)(this.canonicalReturnVar, v.fun, next);
         else if (v instanceof constraintvars_1.ThisVar)
-          return (0, util_1.getOrSet)(this.canonicalThisVar, v.fun, () => v);
+          return (0, util_1.getOrSet)(this.canonicalThisVar, v.fun, next);
         else if (v instanceof constraintvars_1.ArgumentsVar)
-          return (0, util_1.getOrSet)(this.canonicalArgumentsVar, v.fun, () => v);
+          return (0, util_1.getOrSet)(this.canonicalArgumentsVar, v.fun, next);
         else if (v instanceof constraintvars_1.ObjectPropertyVar) {
           const props = (0, util_1.mapGetMap)(this.canonicalObjectPropertyVar, v.obj);
           const m = (0, util_1.getOrSet)(props, v.prop, () => ({
@@ -1258,12 +1265,17 @@ var require_globalstate = __commonJS({
             set: void 0,
             normal: void 0
           }));
-          return m[v.accessor] ??= v;
+          return m[v.accessor] ??= next();
         }
         this.numberOfCanonicalizeVarCalls++;
-        return (0, util_1.getOrSet)(this.canonicalConstraintVars, v.toString(), () => v);
+        return (0, util_1.getOrSet)(this.canonicalConstraintVars, v.toString(), next);
       }
       canonicalizeToken(t) {
+        const next = /* @__PURE__ */ __name(() => {
+          t.index = this.tokens.length;
+          this.tokens.push(t);
+          return t;
+        }, "next");
         if (t instanceof tokens_1.AccessPathToken) {
           if (t.ap === accesspaths_1.UnknownAccessPath.instance)
             return _GlobalState.canonicalUnknownAccessPathToken;
@@ -1271,16 +1283,16 @@ var require_globalstate = __commonJS({
             return _GlobalState.canonicalIgnoredAccessPathToken;
           return (0, util_1.getOrSet)(this.canonicalAccessPathTokens, t.ap, () => {
             t.hash = (0, util_1.strHash)(`${t}${t.ap instanceof accesspaths_1.PatternAccessPath ? `;${t.ap.pattern}` : ""}`);
-            return t;
+            return next();
           });
         } else if (t instanceof tokens_1.NativeObjectToken && !t.moduleInfo)
           return (0, util_1.getOrSet)(this.canonicalNativeObjectTokens, t.name, () => {
             t.hash = (0, util_1.strHash)(t.toString());
-            return t;
+            return next();
           });
         this.numberOfCanonicalizeTokenCalls++;
         const s = t.toString();
-        return (0, util_1.getOrSet)(this.canonicalTokens, s, () => (t.hash = (0, util_1.strHash)(s), t));
+        return (0, util_1.getOrSet)(this.canonicalTokens, s, () => (t.hash = (0, util_1.strHash)(s), next()));
       }
       canonicalizeAccessPath(t) {
         if (t === accesspaths_1.IgnoredAccessPath.instance || t === accesspaths_1.UnknownAccessPath.instance)
@@ -1523,6 +1535,96 @@ var require_large_array = __commonJS({
   }
 });
 
+// lib/misc/arraymap.js
+var require_arraymap = __commonJS({
+  "lib/misc/arraymap.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.ArrayMapMap = exports.ArrayMapSet = exports.ArrayMap = void 0;
+    var ArrayMap = class {
+      static {
+        __name(this, "ArrayMap");
+      }
+      dom;
+      a = [];
+      s = 0;
+      constructor(dom) {
+        this.dom = dom;
+      }
+      get size() {
+        return this.s;
+      }
+      get(k) {
+        return this.a[k.index];
+      }
+      set(k, v) {
+        if (this.a[k.index] === void 0)
+          this.s++;
+        this.a[k.index] = v;
+      }
+      delete(k) {
+        if (this.a[k.index] !== void 0)
+          this.s--;
+        this.a[k.index] = void 0;
+      }
+      has(k) {
+        return this.a[k.index] !== void 0;
+      }
+      *keys() {
+        for (const [i, v] of this.a.entries())
+          if (v !== void 0)
+            yield this.dom[i];
+      }
+      *values() {
+        for (const v of this.a)
+          if (v !== void 0)
+            yield v;
+      }
+      *[Symbol.iterator]() {
+        for (const [i, v] of this.a.entries())
+          if (v !== void 0)
+            yield [this.dom[i], v];
+      }
+    };
+    exports.ArrayMap = ArrayMap;
+    var ArrayMapSet = class extends ArrayMap {
+      static {
+        __name(this, "ArrayMapSet");
+      }
+      getSet(k) {
+        let s = this.get(k);
+        if (s === void 0) {
+          s = /* @__PURE__ */ new Set();
+          this.set(k, s);
+        }
+        return s;
+      }
+    };
+    exports.ArrayMapSet = ArrayMapSet;
+    var ArrayMapMap = class extends ArrayMap {
+      static {
+        __name(this, "ArrayMapMap");
+      }
+      getMap(k) {
+        let m = this.get(k);
+        if (m === void 0) {
+          m = /* @__PURE__ */ new Map();
+          this.set(k, m);
+        }
+        return m;
+      }
+      totalSize() {
+        let s = 0;
+        for (const m of this.a.values())
+          if (m !== void 0)
+            s += m.size;
+        return s;
+      }
+    };
+    exports.ArrayMapMap = ArrayMapMap;
+  }
+});
+
 // lib/analysis/fragmentstate.js
 var require_fragmentstate = __commonJS({
   "lib/analysis/fragmentstate.js"(exports) {
@@ -1544,27 +1646,28 @@ var require_fragmentstate = __commonJS({
     var asthelpers_1 = require_asthelpers();
     var files_1 = require_files();
     var large_array_1 = require_large_array();
+    var arraymap_1 = require_arraymap();
     var FragmentState = class _FragmentState {
       static {
         __name(this, "FragmentState");
       }
       a;
       varProducer;
-      tokens = /* @__PURE__ */ new Map();
+      tokens;
       vars = /* @__PURE__ */ new Set();
       redirections = /* @__PURE__ */ new Map();
       numberOfTokens = 0;
       numberOfSubsetEdges = 0;
-      subsetEdges = /* @__PURE__ */ new Map();
-      reverseSubsetEdges = /* @__PURE__ */ new Map();
-      arrayEntries = /* @__PURE__ */ new Map();
-      objectProperties = /* @__PURE__ */ new Map();
-      tokenListeners = /* @__PURE__ */ new Map();
-      tokenListeners2 = /* @__PURE__ */ new Map();
+      subsetEdges;
+      reverseSubsetEdges;
+      arrayEntries;
+      objectProperties;
+      tokenListeners;
+      tokenListeners2;
       listenersProcessed = /* @__PURE__ */ new Map();
       externalCallbacksProcessed = /* @__PURE__ */ new Set();
-      arrayEntriesListeners = /* @__PURE__ */ new Map();
-      objectPropertiesListeners = /* @__PURE__ */ new Map();
+      arrayEntriesListeners;
+      objectPropertiesListeners;
       postponedListenerCalls = new large_array_1.LargeArray();
       postponedListenerCalls2 = new large_array_1.LargeArray();
       nodesWithNewEdges = /* @__PURE__ */ new Set();
@@ -1610,6 +1713,15 @@ var require_fragmentstate = __commonJS({
       constructor(s) {
         this.a = s.globalState;
         this.varProducer = new constraintvarproducer_1.ConstraintVarProducer(s, s.globalState);
+        this.tokens = new arraymap_1.ArrayMap(this.a.vars);
+        this.subsetEdges = new arraymap_1.ArrayMapSet(this.a.vars);
+        this.reverseSubsetEdges = new arraymap_1.ArrayMapSet(this.a.vars);
+        this.tokenListeners = new arraymap_1.ArrayMapMap(this.a.vars);
+        this.tokenListeners2 = new arraymap_1.ArrayMapMap(this.a.vars);
+        this.arrayEntries = new arraymap_1.ArrayMapSet(this.a.tokens);
+        this.objectProperties = new arraymap_1.ArrayMapSet(this.a.tokens);
+        this.arrayEntriesListeners = new arraymap_1.ArrayMapMap(this.a.tokens);
+        this.objectPropertiesListeners = new arraymap_1.ArrayMapMap(this.a.tokens);
       }
       registerCallEdge(call, from, to, { native, accessor, external } = {}) {
         if ((!accessor || options_1.options.callgraphImplicit) && (!native || options_1.options.callgraphNative) && (!external || options_1.options.callgraphExternal)) {
@@ -2231,7 +2343,6 @@ var require_escaping = __commonJS({
     var accesspaths_1 = require_accesspaths();
     var ecmascript_1 = require_ecmascript();
     var options_1 = require_options();
-    var packagejson_1 = require_packagejson();
     function findEscapingObjects(ms, solver) {
       const a = solver.globalState;
       const f = solver.fragmentState;
@@ -2250,7 +2361,7 @@ var require_escaping = __commonJS({
       for (const m of Array.isArray(ms) ? ms : [ms])
         if (m.packageInfo.isEntry && (m.getPath().includes("node_modules") || options_1.options.library)) {
           const pi = a.packageJsonInfos.get(m.packageInfo.dir);
-          if (!pi?.exports || (0, packagejson_1.isInExports)(`./${m.relativePath}`, pi.exports))
+          if (!pi?.exports || pi.exports.test(m.relativePath))
             addToWorklist(f.varProducer.objPropVar(a.canonicalizeToken(new tokens_1.NativeObjectToken("module", m)), "exports"));
         }
       const w2 = [];
@@ -2539,12 +2650,7 @@ var require_solver = __commonJS({
         const d = this.diagnostics;
         d.functions = a.functionInfos.size;
         d.vars = f.getNumberOfVarsWithTokens();
-        d.listeners = [
-          f.tokenListeners,
-          f.tokenListeners2,
-          f.arrayEntriesListeners,
-          f.objectPropertiesListeners
-        ].reduce((acc, l) => acc + (0, util_2.mapMapSize)(l), 0);
+        d.listeners = f.tokenListeners.totalSize() + f.tokenListeners2.totalSize() + f.arrayEntriesListeners.totalSize() + f.objectPropertiesListeners.totalSize();
         d.tokens = f.numberOfTokens;
         d.subsetEdges = f.numberOfSubsetEdges;
         d.functionToFunctionEdges = f.numberOfFunctionToFunctionEdges;
@@ -2723,11 +2829,11 @@ var require_solver = __commonJS({
       addSubsetEdge(fromRep, toRep) {
         if (fromRep !== toRep) {
           const f = this.fragmentState;
-          const s = (0, util_2.mapGetSet)(f.subsetEdges, fromRep);
+          const s = f.subsetEdges.getSet(fromRep);
           if (!s.has(toRep)) {
             s.add(toRep);
             f.numberOfSubsetEdges++;
-            (0, util_2.mapGetSet)(f.reverseSubsetEdges, toRep).add(fromRep);
+            f.reverseSubsetEdges.getSet(toRep).add(fromRep);
             if (logger_1.default.isVerboseEnabled())
               (0, assert_1.default)(!f.redirections.has(fromRep) && !f.redirections.has(toRep));
             f.vars.add(fromRep);
@@ -2801,7 +2907,7 @@ var require_solver = __commonJS({
                 }
               break;
           }
-        const m = (0, util_2.mapGetMap)(bound ? f.tokenListeners2 : f.tokenListeners, vRep);
+        const m = (bound ? f.tokenListeners2 : f.tokenListeners).getMap(vRep);
         if (!m.has(id)) {
           if (bound)
             for (const t of f.getTokens(vRep))
@@ -2901,7 +3007,7 @@ var require_solver = __commonJS({
       }
       runArrayEntriesListener(t, id, listener) {
         const f = this.fragmentState;
-        const m = (0, util_2.mapGetMap)(f.arrayEntriesListeners, t);
+        const m = f.arrayEntriesListeners.getMap(t);
         if (!m.has(id)) {
           const ps = f.arrayEntries.get(t);
           if (ps)
@@ -2917,7 +3023,7 @@ var require_solver = __commonJS({
         if (!(0, util_2.isArrayIndex)(prop))
           return;
         const f = this.fragmentState;
-        const ps = (0, util_2.mapGetSet)(f.arrayEntries, a);
+        const ps = f.arrayEntries.getSet(a);
         if (!ps.has(prop)) {
           if (logger_1.default.isDebugEnabled())
             logger_1.default.debug(`Adding array entry ${a}[${prop}]`);
@@ -2942,7 +3048,7 @@ var require_solver = __commonJS({
       }
       runObjectPropertiesListener(t, id, listener) {
         const f = this.fragmentState;
-        const m = (0, util_2.mapGetMap)(f.objectPropertiesListeners, t);
+        const m = f.objectPropertiesListeners.getMap(t);
         if (!m.has(id)) {
           const ps = f.objectProperties.get(t);
           if (ps) {
@@ -2958,7 +3064,7 @@ var require_solver = __commonJS({
       }
       addObjectProperty(a, prop) {
         const f = this.fragmentState;
-        const ps = (0, util_2.mapGetSet)(f.objectProperties, a);
+        const ps = f.objectProperties.getSet(a);
         if (!ps.has(prop)) {
           if (logger_1.default.isDebugEnabled())
             logger_1.default.debug(`Adding object property ${a}.${prop}`);
@@ -3000,8 +3106,8 @@ var require_solver = __commonJS({
         for (const t of f.getTokens(rep))
           if (!has(t))
             rts.add(t);
-        const repOut = (0, util_2.mapGetSet)(f.subsetEdges, rep);
-        const repIn = (0, util_2.mapGetSet)(f.reverseSubsetEdges, rep);
+        const repOut = f.subsetEdges.getSet(rep);
+        const repIn = f.reverseSubsetEdges.getSet(rep);
         const vOut = f.subsetEdges.get(v);
         if (vOut) {
           for (const w of vOut) {
@@ -3044,7 +3150,7 @@ var require_solver = __commonJS({
           f.reverseSubsetEdges.delete(rep);
         const tr = f.tokenListeners.get(v);
         if (tr) {
-          const qr = (0, util_2.mapGetMap)(f.tokenListeners, rep);
+          const qr = f.tokenListeners.getMap(rep);
           for (const [k, listener] of tr)
             if (!qr.has(k)) {
               qr.set(k, listener);
@@ -3055,7 +3161,7 @@ var require_solver = __commonJS({
         }
         const tr2 = f.tokenListeners2.get(v);
         if (tr2) {
-          const qr = (0, util_2.mapGetMap)(f.tokenListeners2, rep);
+          const qr = f.tokenListeners2.getMap(rep);
           for (const [k, listener] of tr2)
             if (!qr.has(k)) {
               qr.set(k, listener);
@@ -3317,9 +3423,9 @@ var require_modulefinder = __commonJS({
         CallExpression(path) {
           const imp = (0, types_1.isImport)(path.node.callee);
           if ((imp || isRequire(path.get("callee"))) && path.node.arguments.length >= 1) {
-            const arg = path.node.arguments[0];
-            if ((0, types_1.isStringLiteral)(arg))
-              loadModule(imp ? "module" : "commonjs", arg.value, path);
+            const str = (0, asthelpers_1.getConstantString)(path.get("arguments.0"));
+            if (str)
+              loadModule(imp ? "module" : "commonjs", str, path);
             else
               f.warnUnsupported(path.node, "Unhandled 'require'");
           }
@@ -4158,7 +4264,22 @@ var require_operations = __commonJS({
           f.registerCallWithResultMaybeUsedAsPromise(path.node);
         f.registerInvokedExpression(path.node.callee);
         let strs;
-        const strings = /* @__PURE__ */ __name(() => strs ??= args.length >= 1 && (0, types_1.isStringLiteral)(args[0]) ? [args[0].value] : this.getRequireHints(pars) ?? [], "strings");
+        const strings = /* @__PURE__ */ __name(() => {
+          if (!strs) {
+            let res;
+            if (args.length >= 1) {
+              const s = (0, asthelpers_1.getConstantString)(path.get("arguments.0"));
+              if (s !== void 0)
+                res = [s];
+              else
+                res = this.getRequireHints(pars);
+            }
+            if (!res)
+              res = [];
+            strs = res;
+          }
+          return strs;
+        }, "strings");
         if ((0, types_1.isImport)(p.node)) {
           f.registerCall(pars.node, caller, void 0, { native: true });
           const v = this.a.canonicalizeVar(new constraintvars_1.IntermediateVar(path.node, "import"));
@@ -4189,6 +4310,24 @@ var require_operations = __commonJS({
             f.warnUnsupported(arg, "SpreadElement in arguments");
           return void 0;
         });
+        if (options_1.options.interops && (0, types_1.isIdentifier)(p.node) && [
+          "__importDefault",
+          "__importStar",
+          "_interopRequireDefault",
+          "_interopRequireWildcard",
+          "_interop_require_default",
+          "_interop_require_wildcard",
+          "getDefaultExportFromCjs",
+          "_interopDefault",
+          "_interopNamespace",
+          "__toESM"
+        ].includes(p.node.name)) {
+          if (logger_1.default.isDebugEnabled())
+            logger_1.default.debug(`Interop call: ${p.node.name} at ${(0, util_1.locationToStringWithFile)(path.node.loc)}`);
+          this.solver.addSubsetConstraint(argVars[0], resultVar);
+          f.registerCall(pars.node, caller, void 0);
+          return;
+        }
         const handleCall = /* @__PURE__ */ __name((base, t) => {
           this.callFunctionBound(base, t, calleeVar, argVars, resultVar, strings, path);
         }, "handleCall");
@@ -4519,13 +4658,14 @@ var require_operations = __commonJS({
             const encl = this.a.getEnclosingFunctionOrModule(path);
             const analyzed = m instanceof infos_1.ModuleInfo && m.isIncluded;
             if (!analyzed || options_1.options.vulnerabilities || options_1.options.vulnerabilitiesJson) {
-              let aps = [accesspaths_1.IgnoredAccessPath.instance];
+              let aps = [];
               const s = (0, infos_1.normalizeModuleName)(str);
               const tracked = options_1.options.trackedModules && options_1.options.trackedModules.some((e) => micromatch_1.default.isMatch(m.getOfficialName(), e) || micromatch_1.default.isMatch(s, e));
               if (tracked) {
                 aps = this.a.vulnerabilities && options_1.options.preciseAccessPathTransitions ? new Set(this.a.vulnerabilities.importGlobsToPatterns.values().filter(([isMatch]) => isMatch(m.getOfficialName()) || isMatch(s)).flatMap(([, aps2]) => aps2)).values().map((ap) => new accesspaths_1.ModuleAccessPath(m, s, ap)).toArray() : [new accesspaths_1.ModuleAccessPath(m, s, void 0)];
                 (0, assert_1.default)(aps.length);
-              }
+              } else if (!analyzed)
+                aps = [accesspaths_1.IgnoredAccessPath.instance];
               for (const ap of aps) {
                 this.solver.addAccessPath(ap, resultVar, path.node, encl);
                 if ((0, types_1.isExportAllDeclaration)(path.node))
@@ -5385,6 +5525,7 @@ var require_analyzer = __commonJS({
               logger_1.default.info(`Loading ${options_1.options.approxLoad}`);
             a.approx.add(JSON.parse((0, fs_1.readFileSync)(options_1.options.approxLoad, "utf-8")));
           }
+          let prevTokens = 0;
           while (a.pendingFiles.isNonEmpty() || a.pendingModulesFull.isNonEmpty()) {
             d.analyzerRounds++;
             const prevModulesFull = d.modulesFull;
@@ -5456,6 +5597,13 @@ var require_analyzer = __commonJS({
                   (0, astvisitor_1.visit)(ast, new operations_1.Operations(moduleInfo, solver, (0, nativebuilder_1.buildModuleNatives)(solver, moduleInfo, moduleParams)));
                   ast.tokens = void 0;
                   moduleInfo.ast = void 0;
+                  if (options_1.options.eagerPropagation) {
+                    const t = new timer_1.default();
+                    await solver.propagate("Analyzing");
+                    solver.updateDiagnostics();
+                    logger_1.default.info(`Time: +${(0, timer_1.nanoToMs)(t.elapsed())}, tokens: +${solver.fragmentState.numberOfTokens - prevTokens}${prevTokens > 0 ? ` (+${(0, util_1.percent)((solver.fragmentState.numberOfTokens - prevTokens) / prevTokens)})` : ""}`);
+                    prevTokens = solver.fragmentState.numberOfTokens;
+                  }
                 }
               }
               await solver.propagate("Analyzing");
@@ -5667,7 +5815,7 @@ var require_analyzer = __commonJS({
             if (options_1.options.maxWaves !== void 0)
               logger_1.default.info(`Fixpoint wave limit reached: ${d.waveLimitReached} time${d.waveLimitReached !== 1 ? "s" : ""}`);
             logger_1.default.info(`Constraint vars: ${f.getNumberOfVarsWithTokens()} (${f.vars.size}), tokens: ${d.tokens}, subset edges: ${d.subsetEdges}, max tokens: ${f.getLargestTokenSetSize()}, max subset out: ${f.getLargestSubsetEdgeOutDegree()}, redirections: ${f.redirections.size}`);
-            logger_1.default.info(`Listeners (notifications) token: ${(0, util_1.mapMapSize)(f.tokenListeners)} (${d.tokenListenerNotifications}), bounded: ${(0, util_1.mapMapSize)(f.tokenListeners2)} (${d.tokenListener2Notifications}), array: ${(0, util_1.mapMapSize)(f.arrayEntriesListeners)} (${d.arrayEntriesListenerNotifications}), obj: ${(0, util_1.mapMapSize)(f.objectPropertiesListeners)} (${d.objectPropertiesListenerNotifications})`);
+            logger_1.default.info(`Listeners (notifications) token: ${f.tokenListeners.totalSize()} (${d.tokenListenerNotifications}), bounded: ${f.tokenListeners2.totalSize()} (${d.tokenListener2Notifications}), array: ${f.arrayEntriesListeners.totalSize()} (${d.arrayEntriesListenerNotifications}), obj: ${f.objectPropertiesListeners.totalSize()} (${d.objectPropertiesListenerNotifications})`);
             logger_1.default.info(`Canonicalize vars: ${a.canonicalConstraintVars.size} (${a.numberOfCanonicalizeVarCalls}), tokens: ${a.canonicalTokens.size} (${a.numberOfCanonicalizeTokenCalls}), access paths: ${(0, util_1.mapMapSize)(a.canonicalAccessPaths)} (${a.numberOfCanonicalizeAccessPathCalls})`);
             logger_1.default.info(`Propagation: ${(0, timer_1.nanoToMs)(d.totalPropagationTime)}, listeners: ${(0, timer_1.nanoToMs)(d.totalListenerCallTime)}, finalization: ${(0, timer_1.nanoToMs)(d.finalizationTime)}`);
             logger_1.default.info(`Patching time escape: ${(0, timer_1.nanoToMs)(d.totalEscapePatchingTime)}, approx: ${(0, timer_1.nanoToMs)(d.totalApproxPatchingTime)}, other: ${(0, timer_1.nanoToMs)(d.totalOtherPatchingTime)}`);
@@ -13783,7 +13931,7 @@ var require_main = __commonJS({
     var assert_1 = __importDefault(__require("assert"));
     var semver_1 = __importDefault(require_semver2());
     var ENGINES_NODE = require_package()?.engines?.node;
-    commander_1.program.name("jelly").version(options_1.VERSION).addHelpText("before", options_1.COPYRIGHT).option("-b, --basedir <directory>", "base directory for files to analyze (default: auto-detect)").option("-f, --logfile <file>", "log to file (default: log to stdout)").option("-l, --loglevel <level>", "log level (debug/verbose/info/warn/error)", "info").option("-i, --timeout <seconds>", "limit analysis time").option("-a, --dataflow-html <file>", "save data-flow graph as HTML file").option("-m, --callgraph-html <file>", "save call graph as HTML file").option("-j, --callgraph-json <file>", "save call graph as JSON file").option("-s, --soundness <file>", "compare with dynamic call graph").option("-n, --graal-home <directory>", "home of graal-nodejs (default: $GRAAL_HOME)").option("-d, --dynamic <file>", "generate call graph dynamically, no static analysis").option("--approx", "enable approximate interpretation").option("--approx-only <file>", "perform approximate interpretation, no static analysis").option("--approx-load <file>", "use pre-computed approximate interpretation results").option("-p, --patterns <file...>", "files containing API usage patterns to detect").option("-v, --vulnerabilities <file>", "report vulnerability matches").option("--vulnerabilities-json <json>", "report vulnerability matches (patterns given as JSON string)").option("--include-packages <package...>", "include only dependencies in this list").option("--exclude-packages <package...>", "exclude dependencies in this list").option("--ignore-dependencies", "don't include dependencies in analysis").option("--ignore-unresolved", "don't report errors about unresolved modules").option("--npm-test <dir>", "run 'npm test' instead of 'node' (use with -d)").option("--callgraph", "report call graph").option("--tokens-json <file>", "save tokens for constraint variables as JSON file").option("--tokens", "report tokens for constraint variables").option("--largest", "report largest token sets and subset relations").option("--no-cycle-elimination", "disable cycle elimination").option("--no-natives", "disable nonessential models of native libraries").option("--test-graal", "test graal-nodejs (use with -d)").option("--no-print-progress", "don't print analysis progress information").option("--no-tty", "don't print solver progress for TTY").option("--warnings-unsupported", "print warnings about unsupported features").option("--gc", "enable garbage collection for more accurate memory usage reporting").option("--typescript", "enable TypeScript type inference (use with -p)").option("--api-usage", "report API usage of external packages (implies --ignore-dependencies)").option("--api-exported", "report API of modules").option("--find-access-paths <location>", "find access paths for source location (file:line)").option("--higher-order-functions", "report higher-order functions").option("--zeros", "report calls with zero callees and functions with zero callers").option("--exclude-entries <glob...>", "files to exclude when specifying entry directories").option("--tracked-modules <glob...>", "modules to track usage of (default: auto-detect)").option("--external-matches", "enable pattern matches from external code").option("--no-callgraph-implicit", "omit implicit calls in call graph").option("--no-callgraph-native", "omit native calls in call graph").option("--no-callgraph-require", "omit module loading in call graph").option("--no-callgraph-external", "omit heuristic external callbacks in call graph").option("--diagnostics", "report internal analysis diagnostics").option("--diagnostics-json <file>", "save analysis diagnostics in JSON file").option("--variable-kinds", "report constraint variable kinds").option("--max-waves <number>", "limit number of fixpoint waves").option("--max-indirections <number>", "limit number of function call and property write indirections").option("--full-indirection-bounding", "enable indirection bounding for method calls and property reads (use with --max-indirections)").option("--typescript-library-usage <file>", "save TypeScript library usage in JSON file, no analysis").option("--modules-only", "report reachable packages and modules only, no analysis").option("--compare-callgraphs", "compare two call graphs given as JSON files, no analysis").option("--reachability", "compare call graph reachability (use with -s or --compare-callgraphs)").option("--library", "assume program is a library (default: true if in node_modules)").option("--skip-tests", "skip files that look like tests").option("--no-patch-escaping", "disable patching using escape analysis").option("--patch-dynamics", "enable dynamic property access patching heuristic").option("--patch-method-calls", "enable method call patching heuristic").option("--no-patch-this", "disable 'this' patching heuristic").option("--proto", "enable model of assignments to the __proto__ property").option("--obj-spread", "enable model of spread syntax for object literals ({...obj})").option("--native-overwrites", "allow overwriting of native object properties").option("--ignore-imprecise-native-calls", "ignore imprecise native calls").option("--matches-json <file>", "save vulnerability pattern matches in JSON file").option("--reachable-json <file>", "save reachable packages and modules in JSON file").option("--callstacks-json <file>", "save vulnerability call stacks in JSON file").option("--vulnerabilities-full", "full report of vulnerabilities").option("--modules-json <file>", "save modules dependencies in JSON file").option("--precise-access-path-transitions", "enable pruning of imprecise access path transitions (uses more unique access path tokens)").addOption(commander_1.program.createOption("--lazy", "lazy analysis of modules").implies({
+    commander_1.program.name("jelly").version(options_1.VERSION).addHelpText("before", options_1.COPYRIGHT).option("-b, --basedir <directory>", "base directory for files to analyze (default: auto-detect)").option("-f, --logfile <file>", "log to file (default: log to stdout)").option("-l, --loglevel <level>", "log level (debug/verbose/info/warn/error)", "info").option("-i, --timeout <seconds>", "limit analysis time").option("-a, --dataflow-html <file>", "save data-flow graph as HTML file").option("-m, --callgraph-html <file>", "save call graph as HTML file").option("-j, --callgraph-json <file>", "save call graph as JSON file").option("-s, --soundness <file>", "compare with dynamic call graph").option("-n, --graal-home <directory>", "home of graal-nodejs (default: $GRAAL_HOME)").option("-d, --dynamic <file>", "generate call graph dynamically, no static analysis").option("--approx", "enable approximate interpretation").option("--approx-only <file>", "perform approximate interpretation, no static analysis").option("--approx-load <file>", "use pre-computed approximate interpretation results").option("-p, --patterns <file...>", "files containing API usage patterns to detect").option("-v, --vulnerabilities <file>", "report vulnerability matches").option("--vulnerabilities-json <json>", "report vulnerability matches (patterns given as JSON string)").option("--include-packages <package...>", "include only dependencies in this list").option("--exclude-packages <package...>", "exclude dependencies in this list").option("--ignore-dependencies", "don't include dependencies in analysis").option("--ignore-unresolved", "don't report errors about unresolved modules").option("--npm-test <dir>", "run 'npm test' instead of 'node' (use with -d)").option("--callgraph", "report call graph").option("--tokens-json <file>", "save tokens for constraint variables as JSON file").option("--tokens", "report tokens for constraint variables").option("--largest", "report largest token sets and subset relations").option("--no-cycle-elimination", "disable cycle elimination").option("--no-natives", "disable nonessential models of native libraries").option("--test-graal", "test graal-nodejs (use with -d)").option("--no-print-progress", "don't print analysis progress information").option("--no-tty", "don't print solver progress for TTY").option("--warnings-unsupported", "print warnings about unsupported features").option("--gc", "enable garbage collection for more accurate memory usage reporting").option("--typescript", "enable TypeScript type inference (use with -p)").option("--api-usage", "report API usage of external packages (implies --ignore-dependencies)").option("--api-exported", "report API of modules").option("--find-access-paths <location>", "find access paths for source location (file:line)").option("--higher-order-functions", "report higher-order functions").option("--zeros", "report calls with zero callees and functions with zero callers").option("--exclude-entries <glob...>", "files to exclude when specifying entry directories").option("--tracked-modules <glob...>", "modules to track usage of (default: auto-detect)").option("--external-matches", "enable pattern matches from external code").option("--no-callgraph-implicit", "omit implicit calls in call graph").option("--no-callgraph-native", "omit native calls in call graph").option("--no-callgraph-require", "omit module loading in call graph").option("--no-callgraph-external", "omit heuristic external callbacks in call graph").option("--diagnostics", "report internal analysis diagnostics").option("--diagnostics-json <file>", "save analysis diagnostics in JSON file").option("--variable-kinds", "report constraint variable kinds").option("--max-waves <number>", "limit number of fixpoint waves").option("--max-indirections <number>", "limit number of function call and property write indirections").option("--full-indirection-bounding", "enable indirection bounding for method calls and property reads (use with --max-indirections)").option("--typescript-library-usage <file>", "save TypeScript library usage in JSON file, no analysis").option("--modules-only", "report reachable packages and modules only, no analysis").option("--compare-callgraphs", "compare two call graphs given as JSON files, no analysis").option("--reachability", "compare call graph reachability (use with -s or --compare-callgraphs)").option("--library", "assume program is a library (default: true if in node_modules)").option("--skip-tests", "skip files that look like tests").option("--no-patch-escaping", "disable patching using escape analysis").option("--patch-dynamics", "enable dynamic property access patching heuristic").option("--patch-method-calls", "enable method call patching heuristic").option("--no-patch-this", "disable 'this' patching heuristic").option("--proto", "enable model of assignments to the __proto__ property").option("--obj-spread", "enable model of spread syntax for object literals ({...obj})").option("--native-overwrites", "allow overwriting of native object properties").option("--ignore-imprecise-native-calls", "ignore imprecise native calls").option("--matches-json <file>", "save vulnerability pattern matches in JSON file").option("--reachable-json <file>", "save reachable packages and modules in JSON file").option("--callstacks-json <file>", "save vulnerability call stacks in JSON file").option("--vulnerabilities-full", "full report of vulnerabilities").option("--eager-propagation", "perform propagation after each module").option("--no-interops", "disable models of common module interop helper functions").option("--modules-json <file>", "save modules dependencies in JSON file").option("--precise-access-path-transitions", "enable pruning of imprecise access path transitions (uses more unique access path tokens)").addOption(commander_1.program.createOption("--lazy", "lazy analysis of modules").implies({
       preciseAccessPathTransitions: true
     })).option("--lazy-cleanup", "lazily clean up redundant tokens for lazy module analysis").option("--lazy-soft-assert", "assertions for --lazy mode are non-fatal (see diagnostics)").option("--reparse", "reparse by need (use with --lazy)").option("--memory <limit>", "abort if reaching selected fraction of memory limit").usage("[options] [files]").addHelpText("after", `
 All modules reachable by require/import from the given files are included in the analysis