@coana-tech/cli 14.12.17 → 14.12.20

package/reachability-analyzers-cli.mjs

@@ -6672,14 +6672,14 @@ var require_async_iterator = __commonJS({
       };
     }
     function readAndResolve(iter) {
-      var resolve16 = iter[kLastResolve];
-      if (resolve16 !== null) {
+      var resolve17 = iter[kLastResolve];
+      if (resolve17 !== null) {
         var data2 = iter[kStream].read();
         if (data2 !== null) {
           iter[kLastPromise] = null;
           iter[kLastResolve] = null;
           iter[kLastReject] = null;
-          resolve16(createIterResult(data2, false));
+          resolve17(createIterResult(data2, false));
         }
       }
     }
@@ -6687,13 +6687,13 @@ var require_async_iterator = __commonJS({
       process.nextTick(readAndResolve, iter);
     }
     function wrapForNext(lastPromise, iter) {
-      return function(resolve16, reject) {
+      return function(resolve17, reject) {
         lastPromise.then(function() {
           if (iter[kEnded]) {
-            resolve16(createIterResult(void 0, true));
+            resolve17(createIterResult(void 0, true));
             return;
           }
-          iter[kHandlePromise](resolve16, reject);
+          iter[kHandlePromise](resolve17, reject);
         }, reject);
       };
     }
@@ -6713,12 +6713,12 @@ var require_async_iterator = __commonJS({
           return Promise.resolve(createIterResult(void 0, true));
         }
         if (this[kStream].destroyed) {
-          return new Promise(function(resolve16, reject) {
+          return new Promise(function(resolve17, reject) {
             process.nextTick(function() {
               if (_this[kError]) {
                 reject(_this[kError]);
               } else {
-                resolve16(createIterResult(void 0, true));
+                resolve17(createIterResult(void 0, true));
               }
             });
           });
@@ -6741,13 +6741,13 @@ var require_async_iterator = __commonJS({
       return this;
     }), _defineProperty(_Object$setPrototypeO, "return", function _return() {
       var _this2 = this;
-      return new Promise(function(resolve16, reject) {
+      return new Promise(function(resolve17, reject) {
         _this2[kStream].destroy(null, function(err) {
           if (err) {
             reject(err);
             return;
           }
-          resolve16(createIterResult(void 0, true));
+          resolve17(createIterResult(void 0, true));
         });
       });
     }), _Object$setPrototypeO), AsyncIteratorPrototype);
@@ -6769,15 +6769,15 @@ var require_async_iterator = __commonJS({
         value: stream4._readableState.endEmitted,
         writable: true
       }), _defineProperty(_Object$create, kHandlePromise, {
-        value: function value(resolve16, reject) {
+        value: function value(resolve17, reject) {
           var data2 = iterator[kStream].read();
           if (data2) {
             iterator[kLastPromise] = null;
             iterator[kLastResolve] = null;
             iterator[kLastReject] = null;
-            resolve16(createIterResult(data2, false));
+            resolve17(createIterResult(data2, false));
           } else {
-            iterator[kLastResolve] = resolve16;
+            iterator[kLastResolve] = resolve17;
             iterator[kLastReject] = reject;
           }
         },
@@ -6796,12 +6796,12 @@ var require_async_iterator = __commonJS({
           iterator[kError] = err;
           return;
         }
-        var resolve16 = iterator[kLastResolve];
-        if (resolve16 !== null) {
+        var resolve17 = iterator[kLastResolve];
+        if (resolve17 !== null) {
           iterator[kLastPromise] = null;
           iterator[kLastResolve] = null;
           iterator[kLastReject] = null;
-          resolve16(createIterResult(void 0, true));
+          resolve17(createIterResult(void 0, true));
         }
         iterator[kEnded] = true;
       });
@@ -6816,7 +6816,7 @@ var require_async_iterator = __commonJS({
 var require_from = __commonJS({
   "../../node_modules/.pnpm/readable-stream@3.6.2/node_modules/readable-stream/lib/internal/streams/from.js"(exports, module) {
     "use strict";
-    function asyncGeneratorStep(gen, resolve16, reject, _next, _throw, key, arg) {
+    function asyncGeneratorStep(gen, resolve17, reject, _next, _throw, key, arg) {
       try {
         var info = gen[key](arg);
         var value = info.value;
@@ -6825,7 +6825,7 @@ var require_from = __commonJS({
         return;
       }
       if (info.done) {
-        resolve16(value);
+        resolve17(value);
       } else {
         Promise.resolve(value).then(_next, _throw);
       }
@@ -6833,13 +6833,13 @@ var require_from = __commonJS({
     function _asyncToGenerator(fn) {
       return function() {
         var self2 = this, args = arguments;
-        return new Promise(function(resolve16, reject) {
+        return new Promise(function(resolve17, reject) {
           var gen = fn.apply(self2, args);
           function _next(value) {
-            asyncGeneratorStep(gen, resolve16, reject, _next, _throw, "next", value);
+            asyncGeneratorStep(gen, resolve17, reject, _next, _throw, "next", value);
           }
           function _throw(err) {
-            asyncGeneratorStep(gen, resolve16, reject, _next, _throw, "throw", err);
+            asyncGeneratorStep(gen, resolve17, reject, _next, _throw, "throw", err);
           }
           _next(void 0);
         });
@@ -8676,10 +8676,10 @@ var require_awaitify = __commonJS({
         if (typeof args[arity - 1] === "function") {
           return asyncFn.apply(this, args);
         }
-        return new Promise((resolve16, reject) => {
+        return new Promise((resolve17, reject) => {
           args[arity - 1] = (err, ...cbArgs) => {
             if (err) return reject(err);
-            resolve16(cbArgs.length > 1 ? cbArgs : cbArgs[0]);
+            resolve17(cbArgs.length > 1 ? cbArgs : cbArgs[0]);
           };
           asyncFn.apply(this, args);
         });
@@ -9308,13 +9308,13 @@ var require_diagnostics = __commonJS({
         if (adapters[i2](namespace2)) return true;
       }
       if (!async.length) return false;
-      return new Promise(function pinky(resolve16) {
+      return new Promise(function pinky(resolve17) {
         Promise.all(
           async.map(function prebind(fn) {
             return fn(namespace2);
           })
         ).then(function resolved(values) {
-          resolve16(values.some(Boolean));
+          resolve17(values.some(Boolean));
         });
       });
     }
@@ -35343,8 +35343,8 @@ var require_follow_redirects = __commonJS({
       }
       return parsed;
     }
-    function resolveUrl(relative7, base) {
-      return useNativeURL ? new URL3(relative7, base) : parseUrl(url2.resolve(base, relative7));
+    function resolveUrl(relative8, base) {
+      return useNativeURL ? new URL3(relative8, base) : parseUrl(url2.resolve(base, relative8));
     }
     function validateUrl(input) {
       if (/^\[/.test(input.hostname) && !/^\[[:0-9a-f]+\]$/i.test(input.hostname)) {
@@ -40901,8 +40901,8 @@ var require_util3 = __commonJS({
     function createDeferredPromise() {
       let res;
       let rej;
-      const promise = new Promise((resolve16, reject) => {
-        res = resolve16;
+      const promise = new Promise((resolve17, reject) => {
+        res = resolve17;
         rej = reject;
       });
       return { promise, resolve: res, reject: rej };
@@ -42406,8 +42406,8 @@ Content-Type: ${value.type || "application/octet-stream"}\r
                 });
               }
             });
-            const busboyResolve = new Promise((resolve16, reject) => {
-              busboy.on("finish", resolve16);
+            const busboyResolve = new Promise((resolve17, reject) => {
+              busboy.on("finish", resolve17);
               busboy.on("error", (err) => reject(new TypeError(err)));
             });
             if (this.body !== null) for await (const chunk2 of consumeBody(this[kState].body)) busboy.write(chunk2);
@@ -42941,9 +42941,9 @@ var require_dispatcher_base = __commonJS({
       }
       close(callback) {
         if (callback === void 0) {
-          return new Promise((resolve16, reject) => {
+          return new Promise((resolve17, reject) => {
             this.close((err, data2) => {
-              return err ? reject(err) : resolve16(data2);
+              return err ? reject(err) : resolve17(data2);
             });
           });
         }
@@ -42981,12 +42981,12 @@ var require_dispatcher_base = __commonJS({
           err = null;
         }
         if (callback === void 0) {
-          return new Promise((resolve16, reject) => {
+          return new Promise((resolve17, reject) => {
             this.destroy(err, (err2, data2) => {
               return err2 ? (
                 /* istanbul ignore next: should never error */
                 reject(err2)
-              ) : resolve16(data2);
+              ) : resolve17(data2);
             });
           });
         }
@@ -44046,16 +44046,16 @@ var require_client = __commonJS({
         return this[kNeedDrain] < 2;
       }
       async [kClose]() {
-        return new Promise((resolve16) => {
+        return new Promise((resolve17) => {
           if (!this[kSize]) {
-            resolve16(null);
+            resolve17(null);
           } else {
-            this[kClosedResolve] = resolve16;
+            this[kClosedResolve] = resolve17;
           }
         });
       }
       async [kDestroy](err) {
-        return new Promise((resolve16) => {
+        return new Promise((resolve17) => {
           const requests = this[kQueue].splice(this[kPendingIdx]);
           for (let i2 = 0; i2 < requests.length; i2++) {
             const request = requests[i2];
@@ -44066,7 +44066,7 @@ var require_client = __commonJS({
               this[kClosedResolve]();
               this[kClosedResolve] = null;
             }
-            resolve16();
+            resolve17();
           };
           if (this[kHTTP2Session] != null) {
             util6.destroy(this[kHTTP2Session], err);
@@ -44646,7 +44646,7 @@ var require_client = __commonJS({
         });
       }
       try {
-        const socket = await new Promise((resolve16, reject) => {
+        const socket = await new Promise((resolve17, reject) => {
           client[kConnector]({
             host,
             hostname,
@@ -44658,7 +44658,7 @@ var require_client = __commonJS({
             if (err) {
               reject(err);
             } else {
-              resolve16(socket2);
+              resolve17(socket2);
             }
           });
         });
@@ -45282,12 +45282,12 @@ upgrade: ${upgrade}\r
           cb();
         }
       }
-      const waitForDrain = () => new Promise((resolve16, reject) => {
+      const waitForDrain = () => new Promise((resolve17, reject) => {
         assert9(callback === null);
         if (socket[kError]) {
           reject(socket[kError]);
         } else {
-          callback = resolve16;
+          callback = resolve17;
         }
       });
       if (client[kHTTPConnVersion] === "h2") {
@@ -45632,8 +45632,8 @@ var require_pool_base = __commonJS({
         if (this[kQueue].isEmpty()) {
           return Promise.all(this[kClients].map((c) => c.close()));
         } else {
-          return new Promise((resolve16) => {
-            this[kClosedResolve] = resolve16;
+          return new Promise((resolve17) => {
+            this[kClosedResolve] = resolve17;
           });
         }
       }
@@ -46203,7 +46203,7 @@ var require_readable2 = __commonJS({
         if (this.closed) {
           return Promise.resolve(null);
         }
-        return new Promise((resolve16, reject) => {
+        return new Promise((resolve17, reject) => {
           const signalListenerCleanup = signal ? util6.addAbortListener(signal, () => {
             this.destroy();
           }) : noop4;
@@ -46212,7 +46212,7 @@ var require_readable2 = __commonJS({
             if (signal && signal.aborted) {
               reject(signal.reason || Object.assign(new Error("The operation was aborted"), { name: "AbortError" }));
             } else {
-              resolve16(null);
+              resolve17(null);
             }
           }).on("error", noop4).on("data", function(chunk2) {
             limit -= chunk2.length;
@@ -46234,11 +46234,11 @@ var require_readable2 = __commonJS({
         throw new TypeError("unusable");
       }
       assert9(!stream4[kConsume]);
-      return new Promise((resolve16, reject) => {
+      return new Promise((resolve17, reject) => {
         stream4[kConsume] = {
           type,
           stream: stream4,
-          resolve: resolve16,
+          resolve: resolve17,
           reject,
           length: 0,
           body: []
@@ -46273,12 +46273,12 @@ var require_readable2 = __commonJS({
       }
     }
     function consumeEnd(consume2) {
-      const { type, body, resolve: resolve16, stream: stream4, length } = consume2;
+      const { type, body, resolve: resolve17, stream: stream4, length } = consume2;
       try {
         if (type === "text") {
-          resolve16(toUSVString(Buffer.concat(body)));
+          resolve17(toUSVString(Buffer.concat(body)));
         } else if (type === "json") {
-          resolve16(JSON.parse(Buffer.concat(body)));
+          resolve17(JSON.parse(Buffer.concat(body)));
         } else if (type === "arrayBuffer") {
           const dst = new Uint8Array(length);
           let pos2 = 0;
@@ -46286,12 +46286,12 @@ var require_readable2 = __commonJS({
             dst.set(buf, pos2);
             pos2 += buf.byteLength;
           }
-          resolve16(dst.buffer);
+          resolve17(dst.buffer);
         } else if (type === "blob") {
           if (!Blob2) {
             Blob2 = __require("buffer").Blob;
           }
-          resolve16(new Blob2(body, { type: stream4[kContentType] }));
+          resolve17(new Blob2(body, { type: stream4[kContentType] }));
         }
         consumeFinish(consume2);
       } catch (err) {
@@ -46546,9 +46546,9 @@ var require_api_request = __commonJS({
     };
     function request(opts, callback) {
       if (callback === void 0) {
-        return new Promise((resolve16, reject) => {
+        return new Promise((resolve17, reject) => {
           request.call(this, opts, (err, data2) => {
-            return err ? reject(err) : resolve16(data2);
+            return err ? reject(err) : resolve17(data2);
           });
         });
       }
@@ -46721,9 +46721,9 @@ var require_api_stream = __commonJS({
     };
     function stream4(opts, factory, callback) {
       if (callback === void 0) {
-        return new Promise((resolve16, reject) => {
+        return new Promise((resolve17, reject) => {
           stream4.call(this, opts, factory, (err, data2) => {
-            return err ? reject(err) : resolve16(data2);
+            return err ? reject(err) : resolve17(data2);
           });
         });
       }
@@ -47004,9 +47004,9 @@ var require_api_upgrade = __commonJS({
     };
     function upgrade(opts, callback) {
       if (callback === void 0) {
-        return new Promise((resolve16, reject) => {
+        return new Promise((resolve17, reject) => {
           upgrade.call(this, opts, (err, data2) => {
-            return err ? reject(err) : resolve16(data2);
+            return err ? reject(err) : resolve17(data2);
           });
         });
       }
@@ -47095,9 +47095,9 @@ var require_api_connect = __commonJS({
     };
     function connect(opts, callback) {
       if (callback === void 0) {
-        return new Promise((resolve16, reject) => {
+        return new Promise((resolve17, reject) => {
           connect.call(this, opts, (err, data2) => {
-            return err ? reject(err) : resolve16(data2);
+            return err ? reject(err) : resolve17(data2);
           });
         });
       }
@@ -50715,7 +50715,7 @@ var require_fetch = __commonJS({
       async function dispatch({ body }) {
         const url2 = requestCurrentURL(request);
         const agent = fetchParams.controller.dispatcher;
-        return new Promise((resolve16, reject) => agent.dispatch(
+        return new Promise((resolve17, reject) => agent.dispatch(
           {
             path: url2.pathname + url2.search,
             origin: url2.origin,
@@ -50791,7 +50791,7 @@ var require_fetch = __commonJS({
                   }
                 }
               }
-              resolve16({
+              resolve17({
                 status,
                 statusText,
                 headersList: headers[kHeadersList],
@@ -50834,7 +50834,7 @@ var require_fetch = __commonJS({
                 const val2 = headersList[n + 1].toString("latin1");
                 headers[kHeadersList].append(key, val2);
               }
-              resolve16({
+              resolve17({
                 status,
                 statusText: STATUS_CODES[status],
                 headersList: headers[kHeadersList],
@@ -54202,11 +54202,11 @@ var require_lib = __commonJS({
     };
     var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P, generator) {
       function adopt(value) {
-        return value instanceof P ? value : new P(function(resolve16) {
-          resolve16(value);
+        return value instanceof P ? value : new P(function(resolve17) {
+          resolve17(value);
         });
       }
-      return new (P || (P = Promise))(function(resolve16, reject) {
+      return new (P || (P = Promise))(function(resolve17, reject) {
         function fulfilled(value) {
           try {
             step(generator.next(value));
@@ -54222,7 +54222,7 @@ var require_lib = __commonJS({
           }
         }
         function step(result) {
-          result.done ? resolve16(result.value) : adopt(result.value).then(fulfilled, rejected);
+          result.done ? resolve17(result.value) : adopt(result.value).then(fulfilled, rejected);
         }
         step((generator = generator.apply(thisArg, _arguments || [])).next());
       });
@@ -54308,26 +54308,26 @@ var require_lib = __commonJS({
       }
       readBody() {
         return __awaiter(this, void 0, void 0, function* () {
-          return new Promise((resolve16) => __awaiter(this, void 0, void 0, function* () {
+          return new Promise((resolve17) => __awaiter(this, void 0, void 0, function* () {
             let output = Buffer.alloc(0);
             this.message.on("data", (chunk2) => {
               output = Buffer.concat([output, chunk2]);
             });
             this.message.on("end", () => {
-              resolve16(output.toString());
+              resolve17(output.toString());
             });
           }));
         });
       }
       readBodyBuffer() {
         return __awaiter(this, void 0, void 0, function* () {
-          return new Promise((resolve16) => __awaiter(this, void 0, void 0, function* () {
+          return new Promise((resolve17) => __awaiter(this, void 0, void 0, function* () {
             const chunks = [];
             this.message.on("data", (chunk2) => {
               chunks.push(chunk2);
             });
             this.message.on("end", () => {
-              resolve16(Buffer.concat(chunks));
+              resolve17(Buffer.concat(chunks));
             });
           }));
         });
@@ -54536,14 +54536,14 @@ var require_lib = __commonJS({
        */
       requestRaw(info, data2) {
         return __awaiter(this, void 0, void 0, function* () {
-          return new Promise((resolve16, reject) => {
+          return new Promise((resolve17, reject) => {
             function callbackForResult(err, res) {
               if (err) {
                 reject(err);
               } else if (!res) {
                 reject(new Error("Unknown error"));
               } else {
-                resolve16(res);
+                resolve17(res);
               }
             }
             this.requestRawWithCallback(info, data2, callbackForResult);
@@ -54725,12 +54725,12 @@ var require_lib = __commonJS({
         return __awaiter(this, void 0, void 0, function* () {
           retryNumber = Math.min(ExponentialBackoffCeiling, retryNumber);
           const ms = ExponentialBackoffTimeSlice * Math.pow(2, retryNumber);
-          return new Promise((resolve16) => setTimeout(() => resolve16(), ms));
+          return new Promise((resolve17) => setTimeout(() => resolve17(), ms));
         });
       }
       _processResponse(res, options) {
         return __awaiter(this, void 0, void 0, function* () {
-          return new Promise((resolve16, reject) => __awaiter(this, void 0, void 0, function* () {
+          return new Promise((resolve17, reject) => __awaiter(this, void 0, void 0, function* () {
             const statusCode = res.message.statusCode || 0;
             const response = {
               statusCode,
@@ -54738,7 +54738,7 @@ var require_lib = __commonJS({
               headers: {}
             };
             if (statusCode === HttpCodes.NotFound) {
-              resolve16(response);
+              resolve17(response);
             }
             function dateTimeDeserializer(key, value) {
               if (typeof value === "string") {
@@ -54777,7 +54777,7 @@ var require_lib = __commonJS({
               err.result = response.result;
               reject(err);
             } else {
-              resolve16(response);
+              resolve17(response);
             }
           }));
         });
@@ -54794,11 +54794,11 @@ var require_auth = __commonJS({
     "use strict";
     var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P, generator) {
       function adopt(value) {
-        return value instanceof P ? value : new P(function(resolve16) {
-          resolve16(value);
+        return value instanceof P ? value : new P(function(resolve17) {
+          resolve17(value);
         });
       }
-      return new (P || (P = Promise))(function(resolve16, reject) {
+      return new (P || (P = Promise))(function(resolve17, reject) {
         function fulfilled(value) {
           try {
             step(generator.next(value));
@@ -54814,7 +54814,7 @@ var require_auth = __commonJS({
           }
         }
         function step(result) {
-          result.done ? resolve16(result.value) : adopt(result.value).then(fulfilled, rejected);
+          result.done ? resolve17(result.value) : adopt(result.value).then(fulfilled, rejected);
         }
         step((generator = generator.apply(thisArg, _arguments || [])).next());
       });
@@ -54898,11 +54898,11 @@ var require_oidc_utils = __commonJS({
     "use strict";
     var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P, generator) {
       function adopt(value) {
-        return value instanceof P ? value : new P(function(resolve16) {
-          resolve16(value);
+        return value instanceof P ? value : new P(function(resolve17) {
+          resolve17(value);
         });
       }
-      return new (P || (P = Promise))(function(resolve16, reject) {
+      return new (P || (P = Promise))(function(resolve17, reject) {
         function fulfilled(value) {
           try {
             step(generator.next(value));
@@ -54918,7 +54918,7 @@ var require_oidc_utils = __commonJS({
           }
         }
         function step(result) {
-          result.done ? resolve16(result.value) : adopt(result.value).then(fulfilled, rejected);
+          result.done ? resolve17(result.value) : adopt(result.value).then(fulfilled, rejected);
         }
         step((generator = generator.apply(thisArg, _arguments || [])).next());
       });
@@ -54996,11 +54996,11 @@ var require_summary = __commonJS({
     "use strict";
     var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P, generator) {
       function adopt(value) {
-        return value instanceof P ? value : new P(function(resolve16) {
-          resolve16(value);
+        return value instanceof P ? value : new P(function(resolve17) {
+          resolve17(value);
         });
       }
-      return new (P || (P = Promise))(function(resolve16, reject) {
+      return new (P || (P = Promise))(function(resolve17, reject) {
         function fulfilled(value) {
           try {
             step(generator.next(value));
@@ -55016,7 +55016,7 @@ var require_summary = __commonJS({
           }
         }
         function step(result) {
-          result.done ? resolve16(result.value) : adopt(result.value).then(fulfilled, rejected);
+          result.done ? resolve17(result.value) : adopt(result.value).then(fulfilled, rejected);
         }
         step((generator = generator.apply(thisArg, _arguments || [])).next());
       });
@@ -55358,11 +55358,11 @@ var require_core = __commonJS({
     };
     var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P, generator) {
       function adopt(value) {
-        return value instanceof P ? value : new P(function(resolve16) {
-          resolve16(value);
+        return value instanceof P ? value : new P(function(resolve17) {
+          resolve17(value);
         });
       }
-      return new (P || (P = Promise))(function(resolve16, reject) {
+      return new (P || (P = Promise))(function(resolve17, reject) {
         function fulfilled(value) {
           try {
             step(generator.next(value));
@@ -55378,7 +55378,7 @@ var require_core = __commonJS({
           }
         }
         function step(result) {
-          result.done ? resolve16(result.value) : adopt(result.value).then(fulfilled, rejected);
+          result.done ? resolve17(result.value) : adopt(result.value).then(fulfilled, rejected);
         }
         step((generator = generator.apply(thisArg, _arguments || [])).next());
       });
@@ -59000,11 +59000,11 @@ var require_utils3 = __commonJS({
     "use strict";
     var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P, generator) {
       function adopt(value) {
-        return value instanceof P ? value : new P(function(resolve16) {
-          resolve16(value);
+        return value instanceof P ? value : new P(function(resolve17) {
+          resolve17(value);
         });
       }
-      return new (P || (P = Promise))(function(resolve16, reject) {
+      return new (P || (P = Promise))(function(resolve17, reject) {
         function fulfilled(value) {
           try {
             step(generator.next(value));
@@ -59020,7 +59020,7 @@ var require_utils3 = __commonJS({
           }
         }
         function step(result) {
-          result.done ? resolve16(result.value) : adopt(result.value).then(fulfilled, rejected);
+          result.done ? resolve17(result.value) : adopt(result.value).then(fulfilled, rejected);
         }
         step((generator = generator.apply(thisArg, _arguments || [])).next());
       });
@@ -59230,19 +59230,19 @@ Header Information: ${JSON.stringify(response.message.headers, void 0, 2)}
     exports.getProperRetention = getProperRetention;
     function sleep(milliseconds) {
       return __awaiter(this, void 0, void 0, function* () {
-        return new Promise((resolve16) => setTimeout(resolve16, milliseconds));
+        return new Promise((resolve17) => setTimeout(resolve17, milliseconds));
       });
     }
     exports.sleep = sleep;
     function digestForStream(stream4) {
       return __awaiter(this, void 0, void 0, function* () {
-        return new Promise((resolve16, reject) => {
+        return new Promise((resolve17, reject) => {
           const crc64 = new crc64_1.default();
           const md52 = crypto_1.default.createHash("md5");
           stream4.on("data", (data2) => {
             crc64.update(data2);
             md52.update(data2);
-          }).on("end", () => resolve16({
+          }).on("end", () => resolve17({
             crc64: crc64.digest("base64"),
             md5: md52.digest("base64")
           })).on("error", reject);
@@ -59366,11 +59366,11 @@ var require_upload_gzip = __commonJS({
     };
     var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P, generator) {
       function adopt(value) {
-        return value instanceof P ? value : new P(function(resolve16) {
-          resolve16(value);
+        return value instanceof P ? value : new P(function(resolve17) {
+          resolve17(value);
         });
       }
-      return new (P || (P = Promise))(function(resolve16, reject) {
+      return new (P || (P = Promise))(function(resolve17, reject) {
         function fulfilled(value) {
           try {
             step(generator.next(value));
@@ -59386,7 +59386,7 @@ var require_upload_gzip = __commonJS({
           }
         }
         function step(result) {
-          result.done ? resolve16(result.value) : adopt(result.value).then(fulfilled, rejected);
+          result.done ? resolve17(result.value) : adopt(result.value).then(fulfilled, rejected);
         }
         step((generator = generator.apply(thisArg, _arguments || [])).next());
       });
@@ -59399,14 +59399,14 @@ var require_upload_gzip = __commonJS({
       }, i2);
       function verb(n) {
         i2[n] = o[n] && function(v) {
-          return new Promise(function(resolve16, reject) {
-            v = o[n](v), settle2(resolve16, reject, v.done, v.value);
+          return new Promise(function(resolve17, reject) {
+            v = o[n](v), settle2(resolve17, reject, v.done, v.value);
           });
         };
       }
-      function settle2(resolve16, reject, d, v) {
+      function settle2(resolve17, reject, d, v) {
         Promise.resolve(v).then(function(v2) {
-          resolve16({ value: v2, done: d });
+          resolve17({ value: v2, done: d });
         }, reject);
       }
     };
@@ -59447,14 +59447,14 @@ var require_upload_gzip = __commonJS({
             return Number.MAX_SAFE_INTEGER;
           }
         }
-        return new Promise((resolve16, reject) => {
+        return new Promise((resolve17, reject) => {
           const inputStream = fs12.createReadStream(originalFilePath);
           const gzip = zlib3.createGzip();
           const outputStream = fs12.createWriteStream(tempFilePath);
           inputStream.pipe(gzip).pipe(outputStream);
           outputStream.on("finish", () => __awaiter(this, void 0, void 0, function* () {
             const size = (yield stat3(tempFilePath)).size;
-            resolve16(size);
+            resolve17(size);
           }));
           outputStream.on("error", (error) => {
             console.log(error);
@@ -59466,7 +59466,7 @@ var require_upload_gzip = __commonJS({
     exports.createGZipFileOnDisk = createGZipFileOnDisk;
     function createGZipFileInBuffer(originalFilePath) {
       return __awaiter(this, void 0, void 0, function* () {
-        return new Promise((resolve16) => __awaiter(this, void 0, void 0, function* () {
+        return new Promise((resolve17) => __awaiter(this, void 0, void 0, function* () {
           var _a2, e_1, _b, _c;
           const inputStream = fs12.createReadStream(originalFilePath);
           const gzip = zlib3.createGzip();
@@ -59492,7 +59492,7 @@ var require_upload_gzip = __commonJS({
               if (e_1) throw e_1.error;
             }
           }
-          resolve16(Buffer.concat(chunks));
+          resolve17(Buffer.concat(chunks));
         }));
       });
     }
@@ -59533,11 +59533,11 @@ var require_requestUtils = __commonJS({
     };
     var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P, generator) {
       function adopt(value) {
-        return value instanceof P ? value : new P(function(resolve16) {
-          resolve16(value);
+        return value instanceof P ? value : new P(function(resolve17) {
+          resolve17(value);
         });
       }
-      return new (P || (P = Promise))(function(resolve16, reject) {
+      return new (P || (P = Promise))(function(resolve17, reject) {
         function fulfilled(value) {
           try {
             step(generator.next(value));
@@ -59553,7 +59553,7 @@ var require_requestUtils = __commonJS({
           }
         }
         function step(result) {
-          result.done ? resolve16(result.value) : adopt(result.value).then(fulfilled, rejected);
+          result.done ? resolve17(result.value) : adopt(result.value).then(fulfilled, rejected);
         }
         step((generator = generator.apply(thisArg, _arguments || [])).next());
       });
@@ -59650,11 +59650,11 @@ var require_upload_http_client = __commonJS({
     };
     var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P, generator) {
       function adopt(value) {
-        return value instanceof P ? value : new P(function(resolve16) {
-          resolve16(value);
+        return value instanceof P ? value : new P(function(resolve17) {
+          resolve17(value);
         });
       }
-      return new (P || (P = Promise))(function(resolve16, reject) {
+      return new (P || (P = Promise))(function(resolve17, reject) {
         function fulfilled(value) {
           try {
             step(generator.next(value));
@@ -59670,7 +59670,7 @@ var require_upload_http_client = __commonJS({
           }
         }
         function step(result) {
-          result.done ? resolve16(result.value) : adopt(result.value).then(fulfilled, rejected);
+          result.done ? resolve17(result.value) : adopt(result.value).then(fulfilled, rejected);
         }
         step((generator = generator.apply(thisArg, _arguments || [])).next());
       });
@@ -60042,11 +60042,11 @@ var require_download_http_client = __commonJS({
     };
     var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P, generator) {
       function adopt(value) {
-        return value instanceof P ? value : new P(function(resolve16) {
-          resolve16(value);
+        return value instanceof P ? value : new P(function(resolve17) {
+          resolve17(value);
         });
       }
-      return new (P || (P = Promise))(function(resolve16, reject) {
+      return new (P || (P = Promise))(function(resolve17, reject) {
         function fulfilled(value) {
           try {
             step(generator.next(value));
@@ -60062,7 +60062,7 @@ var require_download_http_client = __commonJS({
           }
         }
         function step(result) {
-          result.done ? resolve16(result.value) : adopt(result.value).then(fulfilled, rejected);
+          result.done ? resolve17(result.value) : adopt(result.value).then(fulfilled, rejected);
         }
         step((generator = generator.apply(thisArg, _arguments || [])).next());
       });
@@ -60195,10 +60195,10 @@ var require_download_http_client = __commonJS({
           };
           const resetDestinationStream = (fileDownloadPath) => __awaiter(this, void 0, void 0, function* () {
             destinationStream.close();
-            yield new Promise((resolve16) => {
-              destinationStream.on("close", resolve16);
+            yield new Promise((resolve17) => {
+              destinationStream.on("close", resolve17);
               if (destinationStream.writableFinished) {
-                resolve16();
+                resolve17();
               }
             });
             yield (0, utils_1.rmFile)(fileDownloadPath);
@@ -60247,7 +60247,7 @@ var require_download_http_client = __commonJS({
        */
       pipeResponseToFile(response, destinationStream, isGzip) {
         return __awaiter(this, void 0, void 0, function* () {
-          yield new Promise((resolve16, reject) => {
+          yield new Promise((resolve17, reject) => {
             if (isGzip) {
               const gunzip = zlib3.createGunzip();
               response.message.on("error", (error) => {
@@ -60260,7 +60260,7 @@ var require_download_http_client = __commonJS({
                 destinationStream.close();
                 reject(error);
               }).pipe(destinationStream).on("close", () => {
-                resolve16();
+                resolve17();
               }).on("error", (error) => {
                 core.info(`An error occurred while writing a downloaded file to ${destinationStream.path}`);
                 reject(error);
@@ -60271,7 +60271,7 @@ var require_download_http_client = __commonJS({
                 destinationStream.close();
                 reject(error);
               }).pipe(destinationStream).on("close", () => {
-                resolve16();
+                resolve17();
               }).on("error", (error) => {
                 core.info(`An error occurred while writing a downloaded file to ${destinationStream.path}`);
                 reject(error);
@@ -60385,11 +60385,11 @@ var require_artifact_client = __commonJS({
     };
     var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P, generator) {
       function adopt(value) {
-        return value instanceof P ? value : new P(function(resolve16) {
-          resolve16(value);
+        return value instanceof P ? value : new P(function(resolve17) {
+          resolve17(value);
         });
       }
-      return new (P || (P = Promise))(function(resolve16, reject) {
+      return new (P || (P = Promise))(function(resolve17, reject) {
         function fulfilled(value) {
           try {
             step(generator.next(value));
@@ -60405,7 +60405,7 @@ var require_artifact_client = __commonJS({
           }
         }
         function step(result) {
-          result.done ? resolve16(result.value) : adopt(result.value).then(fulfilled, rejected);
+          result.done ? resolve17(result.value) : adopt(result.value).then(fulfilled, rejected);
         }
         step((generator = generator.apply(thisArg, _arguments || [])).next());
       });
@@ -67828,10 +67828,10 @@ var require_adm_zip = __commonJS({
          * @param {function|string} [props.namefix] - optional function to help fix filename
          */
         addLocalFolderPromise: function(localPath2, props) {
-          return new Promise((resolve16, reject) => {
+          return new Promise((resolve17, reject) => {
             this.addLocalFolderAsync2(Object.assign({ localPath: localPath2 }, props), (err, done) => {
               if (err) reject(err);
-              if (done) resolve16(this);
+              if (done) resolve17(this);
             });
           });
         },
@@ -68018,12 +68018,12 @@ var require_adm_zip = __commonJS({
           keepOriginalPermission = get_Bool(false, keepOriginalPermission);
           overwrite = get_Bool(false, overwrite);
           if (!callback) {
-            return new Promise((resolve16, reject) => {
+            return new Promise((resolve17, reject) => {
               this.extractAllToAsync(targetPath, overwrite, keepOriginalPermission, function(err) {
                 if (err) {
                   reject(err);
                 } else {
-                  resolve16(this);
+                  resolve17(this);
                 }
               });
             });
@@ -68121,11 +68121,11 @@ var require_adm_zip = __commonJS({
                  */
         writeZipPromise: function(targetFileName, props) {
           const { overwrite, perm } = Object.assign({ overwrite: true }, props);
-          return new Promise((resolve16, reject) => {
+          return new Promise((resolve17, reject) => {
             if (!targetFileName && opts.filename) targetFileName = opts.filename;
             if (!targetFileName) reject("ADM-ZIP: ZIP File Name Missing");
             this.toBufferPromise().then((zipData) => {
-              const ret = (done) => done ? resolve16(done) : reject("ADM-ZIP: Wasn't able to write zip file");
+              const ret = (done) => done ? resolve17(done) : reject("ADM-ZIP: Wasn't able to write zip file");
               filetools.writeFileToAsync(targetFileName, zipData, overwrite, perm, ret);
             }, reject);
           });
@@ -68134,8 +68134,8 @@ var require_adm_zip = __commonJS({
          * @returns {Promise<Buffer>} A promise to the Buffer.
          */
         toBufferPromise: function() {
-          return new Promise((resolve16, reject) => {
-            _zip.toAsyncBuffer(resolve16, reject);
+          return new Promise((resolve17, reject) => {
+            _zip.toAsyncBuffer(resolve17, reject);
           });
         },
         /**
@@ -68830,20 +68830,20 @@ var CLILogger = class {
    * in errors that are swallowed by the 'error' event listener in this function.
    */
   async finish() {
-    return new Promise((resolve16) => {
+    return new Promise((resolve17) => {
       if (this.logger instanceof Console || this.logger.writableEnded) {
-        resolve16();
+        resolve17();
         return;
       }
       this.logger.on("error", () => {
       });
       this.logger.end(() => {
         if (!this.writeStream || this.writeStream.writableEnded) {
-          resolve16();
+          resolve17();
           return;
         }
         if (!this.writeStream.writableEnded) {
-          this.writeStream.end(resolve16);
+          this.writeStream.end(resolve17);
         }
       });
     });
@@ -68878,11 +68878,11 @@ var E_ALREADY_LOCKED = new Error("mutex already locked");
 var E_CANCELED = new Error("request for lock canceled");
 var __awaiter$2 = function(thisArg, _arguments, P, generator) {
   function adopt(value) {
-    return value instanceof P ? value : new P(function(resolve16) {
-      resolve16(value);
+    return value instanceof P ? value : new P(function(resolve17) {
+      resolve17(value);
     });
   }
-  return new (P || (P = Promise))(function(resolve16, reject) {
+  return new (P || (P = Promise))(function(resolve17, reject) {
     function fulfilled(value) {
       try {
         step(generator.next(value));
@@ -68898,7 +68898,7 @@ var __awaiter$2 = function(thisArg, _arguments, P, generator) {
       }
     }
     function step(result) {
-      result.done ? resolve16(result.value) : adopt(result.value).then(fulfilled, rejected);
+      result.done ? resolve17(result.value) : adopt(result.value).then(fulfilled, rejected);
     }
     step((generator = generator.apply(thisArg, _arguments || [])).next());
   });
@@ -68913,8 +68913,8 @@ var Semaphore = class {
   acquire(weight = 1, priority = 0) {
     if (weight <= 0)
       throw new Error(`invalid weight ${weight}: must be positive`);
-    return new Promise((resolve16, reject) => {
-      const task = { resolve: resolve16, reject, weight, priority };
+    return new Promise((resolve17, reject) => {
+      const task = { resolve: resolve17, reject, weight, priority };
       const i2 = findIndexFromEnd(this._queue, (other) => priority <= other.priority);
       if (i2 === -1 && weight <= this._value) {
         this._dispatchItem(task);
@@ -68939,10 +68939,10 @@ var Semaphore = class {
     if (this._couldLockImmediately(weight, priority)) {
       return Promise.resolve();
     } else {
-      return new Promise((resolve16) => {
+      return new Promise((resolve17) => {
         if (!this._weightedWaiters[weight - 1])
           this._weightedWaiters[weight - 1] = [];
-        insertSorted(this._weightedWaiters[weight - 1], { resolve: resolve16, priority });
+        insertSorted(this._weightedWaiters[weight - 1], { resolve: resolve17, priority });
       });
     }
   }
@@ -69025,11 +69025,11 @@ function findIndexFromEnd(a2, predicate) {
 }
 var __awaiter$1 = function(thisArg, _arguments, P, generator) {
   function adopt(value) {
-    return value instanceof P ? value : new P(function(resolve16) {
-      resolve16(value);
+    return value instanceof P ? value : new P(function(resolve17) {
+      resolve17(value);
     });
   }
-  return new (P || (P = Promise))(function(resolve16, reject) {
+  return new (P || (P = Promise))(function(resolve17, reject) {
     function fulfilled(value) {
       try {
         step(generator.next(value));
@@ -69045,7 +69045,7 @@ var __awaiter$1 = function(thisArg, _arguments, P, generator) {
       }
     }
     function step(result) {
-      result.done ? resolve16(result.value) : adopt(result.value).then(fulfilled, rejected);
+      result.done ? resolve17(result.value) : adopt(result.value).then(fulfilled, rejected);
     }
     step((generator = generator.apply(thisArg, _arguments || [])).next());
   });
@@ -70446,10 +70446,10 @@ utils_default.inherits(CanceledError, AxiosError_default, {
 var CanceledError_default = CanceledError;
 
 // ../../node_modules/.pnpm/axios@1.8.2/node_modules/axios/lib/core/settle.js
-function settle(resolve16, reject, response) {
+function settle(resolve17, reject, response) {
   const validateStatus2 = response.config.validateStatus;
   if (!response.status || !validateStatus2 || validateStatus2(response.status)) {
-    resolve16(response);
+    resolve17(response);
   } else {
     reject(new AxiosError_default(
       "Request failed with status code " + response.status,
@@ -70950,7 +70950,7 @@ function setProxy(options, configProxy, location) {
 }
 var isHttpAdapterSupported = typeof process !== "undefined" && utils_default.kindOf(process) === "process";
 var wrapAsync = (asyncExecutor) => {
-  return new Promise((resolve16, reject) => {
+  return new Promise((resolve17, reject) => {
     let onDone;
     let isDone;
     const done = (value, isRejected) => {
@@ -70960,7 +70960,7 @@ var wrapAsync = (asyncExecutor) => {
     };
     const _resolve = (value) => {
       done(value);
-      resolve16(value);
+      resolve17(value);
     };
     const _reject = (reason) => {
       done(reason, true);
@@ -70980,7 +70980,7 @@ var resolveFamily = ({ address, family }) => {
 };
 var buildAddressEntry = (address, family) => resolveFamily(utils_default.isObject(address) ? address : { address, family });
 var http_default = isHttpAdapterSupported && function httpAdapter(config2) {
-  return wrapAsync(async function dispatchHttpRequest(resolve16, reject, onDone) {
+  return wrapAsync(async function dispatchHttpRequest(resolve17, reject, onDone) {
     let { data: data2, lookup, family } = config2;
     const { responseType, responseEncoding } = config2;
     const method = config2.method.toUpperCase();
@@ -71032,7 +71032,7 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config2) {
     if (protocol === "data:") {
       let convertedData;
       if (method !== "GET") {
-        return settle(resolve16, reject, {
+        return settle(resolve17, reject, {
           status: 405,
           statusText: "method not allowed",
           headers: {},
@@ -71054,7 +71054,7 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config2) {
       } else if (responseType === "stream") {
         convertedData = stream3.Readable.from(convertedData);
       }
-      return settle(resolve16, reject, {
+      return settle(resolve17, reject, {
         data: convertedData,
         status: 200,
         statusText: "OK",
@@ -71272,7 +71272,7 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config2) {
       };
       if (responseType === "stream") {
         response.data = responseStream;
-        settle(resolve16, reject, response);
+        settle(resolve17, reject, response);
       } else {
         const responseBuffer = [];
         let totalResponseBytes = 0;
@@ -71320,7 +71320,7 @@ var http_default = isHttpAdapterSupported && function httpAdapter(config2) {
           } catch (err) {
             return reject(AxiosError_default.from(err, null, config2, response.request, response));
           }
-          settle(resolve16, reject, response);
+          settle(resolve17, reject, response);
         });
       }
       emitter.once("abort", (err) => {
@@ -71547,7 +71547,7 @@ var resolveConfig_default = (config2) => {
 // ../../node_modules/.pnpm/axios@1.8.2/node_modules/axios/lib/adapters/xhr.js
 var isXHRAdapterSupported = typeof XMLHttpRequest !== "undefined";
 var xhr_default = isXHRAdapterSupported && function(config2) {
-  return new Promise(function dispatchXhrRequest(resolve16, reject) {
+  return new Promise(function dispatchXhrRequest(resolve17, reject) {
     const _config = resolveConfig_default(config2);
     let requestData = _config.data;
     const requestHeaders = AxiosHeaders_default.from(_config.headers).normalize();
@@ -71581,7 +71581,7 @@ var xhr_default = isXHRAdapterSupported && function(config2) {
         request
       };
       settle(function _resolve(value) {
-        resolve16(value);
+        resolve17(value);
         done();
       }, function _reject(err) {
         reject(err);
@@ -71924,8 +71924,8 @@ var fetch_default = isFetchSupported && (async (config2) => {
     responseType = responseType || "text";
     let responseData = await resolvers[utils_default.findKey(resolvers, responseType) || "text"](response, config2);
     !isStreamResponse && unsubscribe && unsubscribe();
-    return await new Promise((resolve16, reject) => {
-      settle(resolve16, reject, {
+    return await new Promise((resolve17, reject) => {
+      settle(resolve17, reject, {
         data: responseData,
         headers: AxiosHeaders_default.from(response.headers),
         status: response.status,
@@ -72291,8 +72291,8 @@ var CancelToken = class _CancelToken {
       throw new TypeError("executor must be a function.");
     }
     let resolvePromise;
-    this.promise = new Promise(function promiseExecutor(resolve16) {
-      resolvePromise = resolve16;
+    this.promise = new Promise(function promiseExecutor(resolve17) {
+      resolvePromise = resolve17;
     });
     const token = this;
     this.promise.then((cancel) => {
@@ -72305,9 +72305,9 @@ var CancelToken = class _CancelToken {
     });
     this.promise.then = (onfulfilled) => {
       let _resolve;
-      const promise = new Promise((resolve16) => {
-        token.subscribe(resolve16);
-        _resolve = resolve16;
+      const promise = new Promise((resolve17) => {
+        token.subscribe(resolve17);
+        _resolve = resolve17;
       }).then(onfulfilled);
       promise.cancel = function reject() {
         token.unsubscribe(_resolve);
@@ -72636,8 +72636,8 @@ var axiosRetry = (axiosInstance, defaultOptions2) => {
       }
       config2.transformRequest = [(data2) => data2];
       await onRetry(currentState.retryCount, error, config2);
-      return new Promise((resolve16) => {
-        setTimeout(() => resolve16(axiosInstance(config2)), delay);
+      return new Promise((resolve17) => {
+        setTimeout(() => resolve17(axiosInstance(config2)), delay);
       });
     }
     await handleMaxRetryTimesExceeded(currentState, error);
@@ -72848,12 +72848,12 @@ function serializeMavenDependencyToPackageUrl(mavenDep) {
 // ../web-compat-utils/src/nuget-dependency-utils.ts
 var import_packageurl_js2 = __toESM(require_packageurl_js(), 1);
 function prettyPrintNugetDependency({ packageName, version: version3 }) {
-  return `${packageName}/${version3}`;
+  return `${packageName}/${version3}`.toLocaleLowerCase();
 }
 function deserializeNugetDependency(s2) {
   const [packageName, version3] = s2.split("/");
   return {
-    packageName,
+    packageName: packageName.toLocaleLowerCase(),
     version: version3.trim() || null,
     resolvedType: "unknown"
   };
@@ -72864,7 +72864,7 @@ function parsePackageUrlToNugetDependency(purlString) {
     throw new Error(`Expected nuget package URL, got ${purl.type}`);
   }
   return {
-    packageName: purl.name,
+    packageName: purl.name.toLocaleLowerCase(),
     version: purl.version ?? null,
     resolvedType: "unknown"
   };
@@ -72972,7 +72972,7 @@ function deserializeRustDependencyChainNode(s2) {
 
 // dist/main.js
 var import_lodash19 = __toESM(require_lodash(), 1);
-import { relative as relative6, resolve as resolve15 } from "path";
+import { relative as relative7, resolve as resolve16 } from "path";
 
 // ../utils/src/dashboard-api/coana-api.ts
 import { writeFile } from "fs/promises";
@@ -73196,8 +73196,8 @@ function getCoanaAPI() {
 
 // ../utils/src/dashboard-api/socket-api.ts
 var import_form_data2 = __toESM(require_form_data2(), 1);
-import { readFile as readFile2 } from "fs/promises";
-import { join } from "path";
+import { readFile as readFile2 } from "node:fs/promises";
+import { join, relative, resolve } from "node:path";
 
 // ../web-compat-utils/src/ghsa.ts
 function extractGHSAIdFromUrl(url2) {
@@ -73608,7 +73608,7 @@ ${stderr}`) ? em.slice(0, -stderr.length - 1) : em}`);
   logger[logLevel](`stderr: ${stderr}`);
 }
 async function execNeverFail(cmd, dir, options) {
-  return new Promise((resolve16) => {
+  return new Promise((resolve17) => {
     let args;
     if (typeof cmd !== "string") [cmd, ...args] = cmd;
     const childProcess = execFile(
@@ -73616,7 +73616,7 @@ async function execNeverFail(cmd, dir, options) {
       args,
       { ...options, cwd: dir, maxBuffer: 1024 * 1024 * 1024, shell: args === void 0 },
       (error, stdout, stderr) => {
-        resolve16({ error, stdout, stderr });
+        resolve17({ error, stdout, stderr });
       }
     );
     if (options?.pipe) {
@@ -73699,7 +73699,7 @@ var import_lodash3 = __toESM(require_lodash(), 1);
 var import_micromatch = __toESM(require_micromatch(), 1);
 import { existsSync } from "fs";
 import { access, cp, readdir, stat } from "fs/promises";
-import { basename, join as join2, relative, resolve } from "path";
+import { basename, join as join2, relative as relative2, resolve as resolve2 } from "path";
 
 // ../web-compat-utils/src/async.ts
 async function asyncMap(array, mapper, concurrency = 1) {
@@ -73725,12 +73725,6 @@ async function asyncForEach(array, fn, concurrency = 1) {
   }
   await Promise.all(Array.from({ length: concurrency }, async () => worker()));
 }
-async function applySeries(arr, fn) {
-  let i2 = 0;
-  for (const item of arr) {
-    await fn(item, i2++);
-  }
-}
 async function asyncFilter(arr, predicate, concurrency = 1) {
   const results = await asyncMap(arr, predicate, concurrency);
   return arr.filter((_v, index2) => results[index2]);
@@ -73740,21 +73734,21 @@ async function asyncFilter(arr, predicate, concurrency = 1) {
 var { uniq } = import_lodash3.default;
 var { isMatch } = import_micromatch.default;
 function excludeFiles(excludedDirsRoot, filesRoot, files, excludeDirs) {
-  return files.map((f2) => resolve(filesRoot, f2)).filter(
-    (file) => !isMatch(relative(excludedDirsRoot, file), excludeDirs) && // also exclude files in directories that are excluded
+  return files.map((f2) => resolve2(filesRoot, f2)).filter(
+    (file) => !isMatch(relative2(excludedDirsRoot, file), excludeDirs) && // also exclude files in directories that are excluded
     !isMatch(
-      relative(excludedDirsRoot, file),
+      relative2(excludedDirsRoot, file),
       excludeDirs.map((ed) => `${ed}/**/*`)
     ) && !excludeDirs.some(
-      (excludeDir) => relative(excludedDirsRoot, file).startsWith(excludeDir.endsWith("/") ? excludeDir : `${excludeDir}/`)
+      (excludeDir) => relative2(excludedDirsRoot, file).startsWith(excludeDir.endsWith("/") ? excludeDir : `${excludeDir}/`)
     )
-  ).map((f2) => relative(filesRoot, f2));
+  ).map((f2) => relative2(filesRoot, f2));
 }
 function* parents(dir) {
   let [curr, last2] = [dir, dir];
   do {
     yield curr;
-    [last2, curr] = [curr, resolve(curr, "..")];
+    [last2, curr] = [curr, resolve2(curr, "..")];
   } while (curr !== last2);
   return void 0;
 }
@@ -73824,7 +73818,7 @@ ${error.message}`);
 var import_lodash17 = __toESM(require_lodash(), 1);
 var import_semver3 = __toESM(require_semver2(), 1);
 import assert8 from "assert";
-import { relative as relative5 } from "path";
+import { relative as relative6 } from "path";
 
 // ../utils/src/promise-queue.ts
 var PromiseQueue = class {
@@ -73885,14 +73879,14 @@ var PromiseQueue = class {
     this.runNextTask();
   }
   async onIdle() {
-    return new Promise((resolve16, reject) => {
+    return new Promise((resolve17, reject) => {
       if (this.error) {
         reject(this.error);
         this.error = null;
       } else if (this.queue.length === 0 && this.activeTasks === 0) {
-        resolve16();
+        resolve17();
       } else {
-        this.idleResolver = resolve16;
+        this.idleResolver = resolve17;
         this.idleRejector = reject;
       }
     });
@@ -73992,12 +73986,12 @@ function getVulnReachability(c) {
 // dist/analyzers/pip-analyzer.js
 var import_lodash16 = __toESM(require_lodash(), 1);
 import assert7 from "assert";
-import { resolve as resolve13 } from "path";
+import { resolve as resolve14 } from "path";
 
 // ../utils/src/pip-utils.ts
 import { existsSync as existsSync2 } from "fs";
 import { readFile as readFile4 } from "fs/promises";
-import { resolve as resolve3 } from "path";
+import { resolve as resolve4 } from "path";
 import util4 from "util";
 
 // ../utils/src/python-versions-manager.ts
@@ -74006,7 +74000,7 @@ var import_semver = __toESM(require_semver2(), 1);
 import { execFileSync } from "child_process";
 import { constants as constants2 } from "fs";
 import { access as access2, readFile as readFile3 } from "fs/promises";
-import { join as join4, resolve as resolve2 } from "path";
+import { join as join4, resolve as resolve3 } from "path";
 import util3 from "util";
 var { once } = import_lodash4.default;
 var systemPython = once(() => execFileSync("which", ["python"], { encoding: "utf8" }).trim());
@@ -74040,14 +74034,14 @@ var PythonVersionsManager = class _PythonVersionsManager {
   }
   // Extracts the python version specifier from the workspace and returns it as an array of semver parts.
   async getPythonSpecifier(workspacePath, checkPyProject = true) {
-    const absPath = resolve2(this.projectDir, workspacePath);
+    const absPath = resolve3(this.projectDir, workspacePath);
     for (const parent2 of parents(absPath))
       try {
         return [(await readFile3(join4(parent2, ".python-version"), "utf-8")).split("\n")[0].trim()];
       } catch (e) {
         if (e.code !== "ENOENT") logger.warn("Failed to read python version file with error", e);
       }
-    const pipfile = resolve2(absPath, "Pipfile");
+    const pipfile = resolve3(absPath, "Pipfile");
     try {
       await access2(pipfile, constants2.R_OK);
       try {
@@ -74097,7 +74091,7 @@ var PythonVersionsManager = class _PythonVersionsManager {
         );
     } else if (!await hasPyenv() || _PythonVersionsManager.getGlobalPythonVersion() === "system")
       return systemPython();
-    return resolve2(await _PythonVersionsManager.getPythonPrefixMatchingSpecifier(semVerSpec), "bin", "python");
+    return resolve3(await _PythonVersionsManager.getPythonPrefixMatchingSpecifier(semVerSpec), "bin", "python");
   }
   // Throws an error if the python version is not installed.
   static async getPythonPrefixForVersion(version3) {
@@ -74107,7 +74101,7 @@ var PythonVersionsManager = class _PythonVersionsManager {
     const versions = await this.getInstalledPythonVersions();
     return [
       ...versions.map(
-        (v) => [v, async () => resolve2(await this.getPythonPrefixForVersion(v), "bin", "python")]
+        (v) => [v, async () => resolve3(await this.getPythonPrefixForVersion(v), "bin", "python")]
       ),
       [await getPythonVersion(systemPython()), async () => systemPython()]
     ];
@@ -74201,7 +74195,7 @@ async function parseTomlFile(file) {
   return JSON.parse(await runCommandResolveStdOut(["python", "-SIc", parseTomlProgram, file]));
 }
 async function getPyProjectParsed(dir) {
-  const pyprojectLoc = resolve3(dir, "pyproject.toml");
+  const pyprojectLoc = resolve4(dir, "pyproject.toml");
   if (!existsSync2(pyprojectLoc)) return void 0;
   return parseTomlFile(pyprojectLoc);
 }
@@ -74233,7 +74227,7 @@ var MambaladeHeuristics = {
 // dist/whole-program-code-aware-vulnerability-scanner/python/phantom-deps.js
 var import_lodash15 = __toESM(require_lodash(), 1);
 import fs11 from "fs/promises";
-import path8, { resolve as resolve12 } from "path";
+import path8, { resolve as resolve13 } from "path";
 
 // ../utils/src/vulnerable-paths-utils.ts
 function mkTrie() {
@@ -74256,7 +74250,7 @@ var import_lodash14 = __toESM(require_lodash(), 1);
 import assert6 from "assert";
 import { existsSync as existsSync10 } from "fs";
 import { cp as cp5, readdir as readdir3, readFile as readFile10, rm as rm5, writeFile as writeFile8 } from "fs/promises";
-import { basename as basename9, dirname as dirname12, join as join20, resolve as resolve11, sep as sep3 } from "path";
+import { basename as basename9, dirname as dirname12, join as join20, resolve as resolve12, sep as sep3 } from "path";
 import util5 from "util";
 
 // ../utils/src/constants.ts
@@ -74305,10 +74299,10 @@ async function downloadFile(fileUrl, outputFile) {
 // ../utils/src/file-tree-utils.ts
 import { closeSync, lstatSync, openSync, readdirSync as readdirSync2, readSync } from "fs";
 import { readdir as readdir2 } from "fs/promises";
-import { basename as basename3, join as join7, relative as relative3, resolve as resolve5 } from "path";
+import { basename as basename3, join as join7, relative as relative4, resolve as resolve6 } from "path";
 
 // ../utils/src/package-utils.ts
-import { parse as parse2, join as join6, resolve as resolve4, normalize, dirname as dirname2, basename as basename2, relative as relative2 } from "path";
+import { parse as parse2, join as join6, resolve as resolve5, normalize, dirname as dirname2, basename as basename2, relative as relative3 } from "path";
 import { existsSync as existsSync4, readFileSync, readdirSync, statSync, writeFileSync } from "fs";
 function getPackageJsonObject(workspaceRoot) {
   const packageJSONContent = getPackageJsonContent(workspaceRoot);
@@ -74340,7 +74334,7 @@ async function findFilesInPythonProjectMatching(projectDir, fileMatcher, maxDept
         if (shouldIgnoreDir(fileOrDirectory.name, projectDir === path9)) continue;
         directoriesToTraverse.push(fileOrDirectory.name);
       } else if (fileOrDirectory.isFile()) {
-        if (fileMatcher(fullPath)) files.push(relative3(projectDir, fullPath));
+        if (fileMatcher(fullPath)) files.push(relative4(projectDir, fullPath));
       }
     }
     if (depthLeft === 0) return;
@@ -74383,24 +74377,10 @@ async function withTmpDirectory(prefix, fn, deleteTmpDir = true) {
 
 // ../web-compat-utils/src/vuln-chain-detail-utils.ts
 var ROOT_NODE_STR = "";
-function computeParentsMap(d) {
-  const parentsMap = /* @__PURE__ */ new Map();
-  const addToMap = (children2, id) => {
-    children2?.forEach((dep) => {
-      if (!parentsMap.has(dep)) parentsMap.set(dep, []);
-      parentsMap.get(dep).push(id);
-    });
-  };
-  for (const [id, node] of Object.entries(d.transitiveDependencies)) {
-    addToMap(node.children, id);
-  }
-  addToMap(d.children, ROOT_NODE_STR);
-  return parentsMap;
-}
 
 // dist/whole-program-code-aware-vulnerability-scanner/code-aware-vulnerability-scanner.js
 var import_lodash13 = __toESM(require_lodash(), 1);
-import { resolve as resolve10 } from "path";
+import { resolve as resolve11 } from "path";
 
 // dist/whole-program-code-aware-vulnerability-scanner/dotnet/dotnet-code-aware-vulnerability-scanner.js
 var import_lodash6 = __toESM(require_lodash(), 1);
@@ -76343,10 +76323,10 @@ function compareDocumentPosition(nodeA, nodeB) {
 function uniqueSort(nodes) {
   nodes = nodes.filter((node, i2, arr) => !arr.includes(node, i2 + 1));
   nodes.sort((a2, b) => {
-    const relative7 = compareDocumentPosition(a2, b);
-    if (relative7 & DocumentPosition.PRECEDING) {
+    const relative8 = compareDocumentPosition(a2, b);
+    if (relative8 & DocumentPosition.PRECEDING) {
       return -1;
-    } else if (relative7 & DocumentPosition.FOLLOWING) {
+    } else if (relative8 & DocumentPosition.FOLLOWING) {
       return 1;
     }
     return 0;
@@ -88577,130 +88557,6 @@ async function convertSocketArtifacts2(artifacts, tmpDir) {
   return deps;
 }
 
-// dist/whole-program-code-aware-vulnerability-scanner/js/jelly-runner.js
-var import_lodash9 = __toESM(require_lodash(), 1);
-import { readFile as readFile7, rm as rm2, writeFile as writeFile5 } from "fs/promises";
-import { relative as relative4, resolve as resolve6 } from "path";
-var { map: map2, uniq: uniq4 } = import_lodash9.default;
-var PRINT_JELLY_COMMAND = false;
-async function runJellyAnalysis(mainProjectRoot, projectRoot, jellyOptions, reachabilityAnalysisOptions, vulnerabilities, experiment) {
-  const tmpFolder = await createTmpDirectory("jelly-analysis");
-  try {
-    const filesToAnalyze = reachabilityAnalysisOptions.entryPoints ? reachabilityAnalysisOptions.entryPoints : [projectRoot];
-    const jellyExecutable = resolve6(COANA_REPOS_PATH(), "jelly-private", "dist", "bundle", "jelly.js");
-    const vulnerabilitiesInJellyFormat = vulnerabilities.map((v) => ({
-      osv: v,
-      patterns: v.vulnerabilityAccessPaths.map((p) => experiment === "AUGMENT_IMPORT_PATHS_EXPERIMENT" ? p.replace(">", "/**>") : p)
-      // Repalce > with /**> to ensure Jelly also matches call <PKG/dist/index.js>.foo for pattern <PKG>.foo
-    }));
-    const vulnerabilitiesFile = resolve6(tmpFolder, "vulnerabilities.json");
-    const diagnosticsFile = resolve6(tmpFolder, "diagnostics.json");
-    const matchesFile = resolve6(tmpFolder, "matches.json");
-    const callStackFile = resolve6(tmpFolder, "call-stacks.json");
-    const logFile = reachabilityAnalysisOptions.analysisLogFile ?? (reachabilityAnalysisOptions.printLogFile && resolve6(projectRoot, "js-analysis.log"));
-    await writeFile5(vulnerabilitiesFile, JSON.stringify(vulnerabilitiesInJellyFormat));
-    let excludeEntries;
-    if (reachabilityAnalysisOptions.excludeDirs?.length) {
-      const excludeDirsRelativeToProjectRoot = reachabilityAnalysisOptions.excludeDirs.map((d) => relative4(projectRoot, resolve6(mainProjectRoot, d)));
-      const excludeDirsRelativeToProjectRootWithWildcards = excludeDirsRelativeToProjectRoot.map((d) => `${d}/**`);
-      excludeEntries = [...excludeDirsRelativeToProjectRoot, ...excludeDirsRelativeToProjectRootWithWildcards];
-    }
-    const jellyCmd = [
-      "node",
-      `--max-old-space-size=${reachabilityAnalysisOptions.memoryLimitInMB ?? 8192}`,
-      jellyExecutable,
-      "--basedir",
-      mainProjectRoot,
-      "--timeout",
-      "" + (reachabilityAnalysisOptions.timeoutInSeconds ?? 60),
-      "--vulnerabilities",
-      vulnerabilitiesFile,
-      ...excludeEntries ? ["--exclude-entries", ...excludeEntries] : [],
-      "--diagnostics-json",
-      diagnosticsFile,
-      ...jellyOptions.maxIndirections ? ["--max-indirections", "" + jellyOptions.maxIndirections] : [],
-      ...jellyOptions.includePackages ? ["--include-packages", ...jellyOptions.includePackages] : [],
-      ...jellyOptions.approx ? ["--approx"] : [],
-      ...logFile ? ["--logfile", logFile] : [],
-      "--matches-file",
-      matchesFile,
-      "--vulnerabilities-callstacks",
-      callStackFile,
-      ...filesToAnalyze
-    ];
-    if (PRINT_JELLY_COMMAND)
-      logger.info("Jelly command:", jellyCmd.join(" "));
-    await runCommandResolveStdOut(
-      jellyCmd,
-      void 0,
-      // If it is an experimental run, make sure to crash the process if Jelly takes more than 50% longer than the timeout.
-      // This is done to mitigate the scenario where the Jelly process gets close to the memory limit and thus ends up spending most of its time on garbage collection, which can increase the time between timeout checks dramatically.
-      experiment && reachabilityAnalysisOptions.timeoutInSeconds ? { timeout: reachabilityAnalysisOptions.timeoutInSeconds * 1e3 * 1.5 } : void 0
-    );
-    if (reachabilityAnalysisOptions.printLogFile)
-      logger.info("JS analysis log file:", await readFile7(logFile, "utf-8"));
-    const analysisDiagnostics = JSON.parse(await readFile7(diagnosticsFile, "utf-8"));
-    analysisDiagnostics.time = analysisDiagnostics.analysisTime;
-    delete analysisDiagnostics.analysisTime;
-    analysisDiagnostics.timings = {
-      analysisTime: analysisDiagnostics.time,
-      patternMatchingTime: analysisDiagnostics.patternMatchingTime
-    };
-    const callStacks = JSON.parse(await readFile7(callStackFile, "utf-8"));
-    const matches = {};
-    for (const { vulnerability, paths } of callStacks) {
-      const transformedStacks = transformJellyCallStacks(projectRoot, paths);
-      if (matches[vulnerability.osv.url]) {
-        matches[vulnerability.osv.url].stacks.push(...transformedStacks.stacks);
-      } else
-        matches[vulnerability.osv.url] = transformedStacks;
-    }
-    return {
-      matches,
-      analysisDiagnostics
-    };
-  } finally {
-    await rm2(tmpFolder, { recursive: true });
-  }
-}
-async function runJellyPhantomDependencyAnalysis(projectRoot) {
-  const tmpFolder = await createTmpDirectory("jelly-analysis");
-  try {
-    const jellyExecutable = resolve6(COANA_REPOS_PATH(), "jelly-private", "dist", "bundle", "jelly.js");
-    const reachablePackagesFile = resolve6(tmpFolder, "reachable-packages.json");
-    const jellyCmd = [
-      "node",
-      jellyExecutable,
-      "--basedir",
-      projectRoot,
-      "--modules-only",
-      "--ignore-dependencies",
-      "--reachable-packages-file",
-      reachablePackagesFile,
-      projectRoot
-    ];
-    await runCommandResolveStdOut(jellyCmd);
-    return JSON.parse(await readFile7(reachablePackagesFile, "utf-8"));
-  } finally {
-    await rm2(tmpFolder, { recursive: true });
-  }
-}
-function relativizeSourceLocations(projectDir, paths) {
-  return {
-    ...paths,
-    stacks: paths.stacks.map((stack) => stack.map((s2) => ({
-      ...s2,
-      sourceLocation: { ...s2.sourceLocation, filename: relative4(projectDir, s2.sourceLocation.filename) }
-    })))
-  };
-}
-function transformJellyCallStacks(projectRoot, paths) {
-  return {
-    ...relativizeSourceLocations(projectRoot, paths),
-    affectedPackages: uniq4(paths.stacks.flatMap((stack) => map2(stack, "package")))
-  };
-}
-
 // dist/whole-program-code-aware-vulnerability-scanner/js/js-code-aware-vulnerability-scanner.js
 import { mkdtempSync } from "fs";
 import { cp as cp3, mkdir as mkdir7, rm as rm3, writeFile as writeFile6 } from "fs/promises";
@@ -88708,7 +88564,7 @@ import { tmpdir as tmpdir2 } from "os";
 import { join as join16 } from "path";
 
 // dist/whole-program-code-aware-vulnerability-scanner/js/dependency-preparation.js
-var import_lodash10 = __toESM(require_lodash(), 1);
+var import_lodash9 = __toESM(require_lodash(), 1);
 import { existsSync as existsSync8 } from "fs";
 import { mkdir as mkdir6, symlink } from "fs/promises";
 import { availableParallelism } from "os";
@@ -89447,10 +89303,10 @@ var Minipass = class extends EventEmitter2 {
    * Return a void Promise that resolves once the stream ends.
    */
   async promise() {
-    return new Promise((resolve16, reject) => {
+    return new Promise((resolve17, reject) => {
       this.on(DESTROYED, () => reject(new Error("stream destroyed")));
       this.on("error", (er) => reject(er));
-      this.on("end", () => resolve16());
+      this.on("end", () => resolve17());
     });
   }
   /**
@@ -89474,7 +89330,7 @@ var Minipass = class extends EventEmitter2 {
         return Promise.resolve({ done: false, value: res });
       if (this[EOF])
         return stop();
-      let resolve16;
+      let resolve17;
       let reject;
       const onerr = (er) => {
         this.off("data", ondata);
@@ -89488,19 +89344,19 @@ var Minipass = class extends EventEmitter2 {
         this.off("end", onend);
         this.off(DESTROYED, ondestroy);
         this.pause();
-        resolve16({ value, done: !!this[EOF] });
+        resolve17({ value, done: !!this[EOF] });
       };
       const onend = () => {
         this.off("error", onerr);
         this.off("data", ondata);
         this.off(DESTROYED, ondestroy);
         stop();
-        resolve16({ done: true, value: void 0 });
+        resolve17({ done: true, value: void 0 });
       };
       const ondestroy = () => onerr(new Error("stream destroyed"));
       return new Promise((res2, rej) => {
         reject = rej;
-        resolve16 = res2;
+        resolve17 = res2;
         this.once(DESTROYED, ondestroy);
         this.once("error", onerr);
         this.once("end", onend);
@@ -91956,9 +91812,9 @@ var listFile = (opt, _files) => {
   const parse15 = new Parser3(opt);
   const readSize = opt.maxReadSize || 16 * 1024 * 1024;
   const file = opt.file;
-  const p = new Promise((resolve16, reject) => {
+  const p = new Promise((resolve17, reject) => {
     parse15.on("error", reject);
-    parse15.on("end", resolve16);
+    parse15.on("end", resolve17);
     fs2.stat(file, (er, stat3) => {
       if (er) {
         reject(er);
@@ -94464,9 +94320,9 @@ var extractFile = (opt, _) => {
   const u = new Unpack(opt);
   const readSize = opt.maxReadSize || 16 * 1024 * 1024;
   const file = opt.file;
-  const p = new Promise((resolve16, reject) => {
+  const p = new Promise((resolve17, reject) => {
     u.on("error", reject);
-    u.on("close", resolve16);
+    u.on("close", resolve17);
     fs9.stat(file, (er, stat3) => {
       if (er) {
         reject(er);
@@ -94600,7 +94456,7 @@ var replaceAsync = (opt, files) => {
     };
     fs10.read(fd, headBuf, 0, 512, position, onread);
   };
-  const promise = new Promise((resolve16, reject) => {
+  const promise = new Promise((resolve17, reject) => {
     p.on("error", reject);
     let flag = "r+";
     const onopen = (er, fd) => {
@@ -94625,7 +94481,7 @@ var replaceAsync = (opt, files) => {
           });
           p.pipe(stream4);
           stream4.on("error", reject);
-          stream4.on("close", resolve16);
+          stream4.on("close", resolve17);
           addFilesAsync2(p, files);
         });
       });
@@ -94704,7 +94560,7 @@ var mtimeFilter = (opt) => {
 };
 
 // dist/whole-program-code-aware-vulnerability-scanner/js/dependency-preparation.js
-var { chunk } = import_lodash10.default;
+var { chunk } = import_lodash9.default;
 async function prepareNpmDependencies(subprojectDir, workspaceDir, artifactIdToArtifact, directDependencies, packageNamesToInstall) {
   if (existsSync8(resolve8(subprojectDir, "node_modules")))
     return { failedPackages: [], installedPackages: [] };
@@ -94928,6 +94784,122 @@ function computePackagesOnVulnPathExcludingVulnerablePackage(vulnerabilities) {
   return [...packagesToAnalyze];
 }
 
+// dist/whole-program-code-aware-vulnerability-scanner/js/jelly-runner.js
+var import_lodash10 = __toESM(require_lodash(), 1);
+import { readFile as readFile7, rm as rm2, writeFile as writeFile5 } from "fs/promises";
+import { relative as relative5, resolve as resolve9 } from "path";
+var { map: map2, uniq: uniq4 } = import_lodash10.default;
+var PRINT_JELLY_COMMAND = false;
+async function runJellyAnalysis(mainProjectRoot, projectRoot, jellyOptions, reachabilityAnalysisOptions, vulnerabilities, experiment) {
+  const tmpFolder = await createTmpDirectory("jelly-analysis");
+  try {
+    const filesToAnalyze = reachabilityAnalysisOptions.entryPoints ? reachabilityAnalysisOptions.entryPoints : [projectRoot];
+    const jellyExecutable = resolve9(COANA_REPOS_PATH(), "jelly-private", "dist", "bundle", "jelly.js");
+    const vulnerabilitiesInJellyFormat = vulnerabilities.map((v) => ({
+      osv: v,
+      patterns: v.vulnerabilityAccessPaths.map((p) => experiment === "AUGMENT_IMPORT_PATHS_EXPERIMENT" ? p.replace(">", "/**>") : p)
+      // Replace > with /**> to ensure Jelly also matches call <PKG/dist/index.js>.foo for pattern <PKG>.foo
+    }));
+    const vulnerabilitiesFile = resolve9(tmpFolder, "vulnerabilities.json");
+    const diagnosticsFile = resolve9(tmpFolder, "diagnostics.json");
+    const matchesFile = resolve9(tmpFolder, "matches.json");
+    const callStackFile = resolve9(tmpFolder, "call-stacks.json");
+    const logFile = reachabilityAnalysisOptions.analysisLogFile ?? (reachabilityAnalysisOptions.printLogFile && resolve9(projectRoot, "js-analysis.log"));
+    await writeFile5(vulnerabilitiesFile, JSON.stringify(vulnerabilitiesInJellyFormat));
+    let excludeEntries;
+    if (reachabilityAnalysisOptions.excludeDirs?.length) {
+      const excludeDirsRelativeToProjectRoot = reachabilityAnalysisOptions.excludeDirs.map((d) => relative5(projectRoot, resolve9(mainProjectRoot, d)));
+      const excludeDirsRelativeToProjectRootWithWildcards = excludeDirsRelativeToProjectRoot.map((d) => `${d}/**`);
+      excludeEntries = [...excludeDirsRelativeToProjectRoot, ...excludeDirsRelativeToProjectRootWithWildcards];
+    }
+    const jellyCmd = [
+      "node",
+      `--max-old-space-size=${reachabilityAnalysisOptions.memoryLimitInMB ?? 8192}`,
+      jellyExecutable,
+      "--basedir",
+      mainProjectRoot,
+      "--timeout",
+      "" + (reachabilityAnalysisOptions.timeoutInSeconds ?? 60),
+      "--vulnerabilities",
+      vulnerabilitiesFile,
+      ...excludeEntries ? ["--exclude-entries", ...excludeEntries] : [],
+      "--diagnostics-json",
+      diagnosticsFile,
+      ...jellyOptions.maxIndirections ? ["--max-indirections", "" + jellyOptions.maxIndirections] : [],
+      ...jellyOptions.includePackages ? ["--include-packages", ...jellyOptions.includePackages] : [],
+      ...jellyOptions.approx ? ["--approx"] : [],
+      ...logFile ? ["--logfile", logFile] : [],
+      "--matches-file",
+      matchesFile,
+      "--vulnerabilities-callstacks",
+      callStackFile,
+      ...filesToAnalyze
+    ];
+    if (PRINT_JELLY_COMMAND)
+      logger.info("Jelly command:", jellyCmd.join(" "));
+    await runCommandResolveStdOut(
+      jellyCmd,
+      void 0,
+      // If it is an experimental run, make sure to crash the process if Jelly takes more than 50% longer than the timeout.
+      // This is done to mitigate the scenario where the Jelly process gets close to the memory limit and thus ends up spending most of its time on garbage collection, which can increase the time between timeout checks dramatically.
+      experiment && reachabilityAnalysisOptions.timeoutInSeconds ? { timeout: reachabilityAnalysisOptions.timeoutInSeconds * 1e3 * 1.5 } : void 0
+    );
+    if (reachabilityAnalysisOptions.printLogFile)
+      logger.info("JS analysis log file:", await readFile7(logFile, "utf-8"));
+    const analysisDiagnostics = JSON.parse(await readFile7(diagnosticsFile, "utf-8"));
+    analysisDiagnostics.time = analysisDiagnostics.analysisTime;
+    delete analysisDiagnostics.analysisTime;
+    analysisDiagnostics.timings = {
+      analysisTime: analysisDiagnostics.time,
+      patternMatchingTime: analysisDiagnostics.patternMatchingTime
+    };
+    const callStacks = JSON.parse(await readFile7(callStackFile, "utf-8"));
+    const matches = {};
+    for (const { vulnerability, paths } of callStacks) {
+      const transformedStacks = transformJellyCallStacks(projectRoot, paths);
+      if (matches[vulnerability.osv.url]) {
+        matches[vulnerability.osv.url].stacks.push(...transformedStacks.stacks);
+      } else
+        matches[vulnerability.osv.url] = transformedStacks;
+    }
+    return {
+      matches,
+      analysisDiagnostics
+    };
+  } finally {
+    await rm2(tmpFolder, { recursive: true });
+  }
+}
+async function runJellyPhantomDependencyAnalysis(projectRoot, options) {
+  const tmpFolder = await createTmpDirectory("jelly-analysis");
+  try {
+    const jellyExecutable = resolve9(COANA_REPOS_PATH(), "jelly-private", "dist", "bundle", "jelly.js");
+    const reachablePackagesFile = resolve9(tmpFolder, "reachable-packages.json");
+    const jellyCmd = cmdt`node --max-old-space-size=${options.memoryLimitInMB}
+      ${jellyExecutable} --basedir ${projectRoot} --modules-only --ignore-dependencies
+        --reachable-packages-file ${reachablePackagesFile} ${projectRoot}`;
+    await runCommandResolveStdOut(jellyCmd);
+    return JSON.parse(await readFile7(reachablePackagesFile, "utf-8"));
+  } finally {
+    await rm2(tmpFolder, { recursive: true });
+  }
+}
+function relativizeSourceLocations(projectDir, paths) {
+  return {
+    ...paths,
+    stacks: paths.stacks.map((stack) => stack.map((s2) => ({
+      ...s2,
+      sourceLocation: { ...s2.sourceLocation, filename: relative5(projectDir, s2.sourceLocation.filename) }
+    })))
+  };
+}
+function transformJellyCallStacks(projectRoot, paths) {
+  return {
+    ...relativizeSourceLocations(projectRoot, paths),
+    affectedPackages: uniq4(paths.stacks.flatMap((stack) => map2(stack, "package")))
+  };
+}
+
 // dist/whole-program-code-aware-vulnerability-scanner/js/js-code-aware-vulnerability-scanner.js
 var JSCodeAwareVulnerabilityScanner = class _JSCodeAwareVulnerabilityScanner {
   mainProjectDir;
@@ -94969,7 +94941,7 @@ var JSCodeAwareVulnerabilityScanner = class _JSCodeAwareVulnerabilityScanner {
         computeDetectedOccurrences: ({ url: url2 }) => transformSourceLocations3(matches[url2] ?? [])
       };
     } catch (e) {
-      logger.error("Error while running analysis: ", e.stack);
+      logger.debug("Error while running analysis: ", e.stack);
       return { type: "error", message: e.message };
     } finally {
       this.numberAnalysesRun++;
@@ -95103,7 +95075,7 @@ import assert4 from "assert";
 import { existsSync as existsSync9, createReadStream, createWriteStream as createWriteStream2 } from "fs";
 import { readFile as readFile8, rm as rm4, cp as cp4 } from "fs/promises";
 import zlib2 from "zlib";
-import { join as join17, resolve as resolve9, sep } from "path";
+import { join as join17, resolve as resolve10, sep } from "path";
 
 // dist/whole-program-code-aware-vulnerability-scanner/go/heuristics.js
 var GoanaHeuristics = {
@@ -95207,7 +95179,7 @@ ${stderr}`);
     const projectDir = await createTmpDirectory("go-run-on-dependency-chain-");
     try {
       await cp4(Dir, projectDir, { recursive: true });
-      const projGoMod = resolve9(projectDir, "go.mod");
+      const projGoMod = resolve10(projectDir, "go.mod");
       if (!existsSync9(projGoMod))
         await cp4(GoMod, projGoMod);
       await exec(cmdt`chmod --recursive +w ${projectDir}`);
@@ -96408,7 +96380,7 @@ async function runWithJSHeuristics(cb) {
   return result;
 }
 async function getCurrentCommitHash(project) {
-  return (await runCommandResolveStdOut("git rev-parse HEAD", resolve10(COANA_REPOS_PATH(), project))).trim();
+  return (await runCommandResolveStdOut("git rev-parse HEAD", resolve11(COANA_REPOS_PATH(), project))).trim();
 }
 function detectedOccurrencesFromAPMatches(matches, pathPrefixToRemove) {
   for (const match of Object.values(matches))
@@ -96575,10 +96547,13 @@ ${errors.join("\n")}`);
         var trunc = trunc2;
         const exc = e;
         msg = util5.format("Error running mambalade:\n%O\nStdout:\n%s\nStderr:\n%s", pick(exc, ["code", "signal"]), trunc2(exc.stdout), trunc2(exc.stderr));
-        if (exc.signal ?? (exc.stderr.endsWith("MemoryError\n") || exc.stderr.includes("OSError: [Errno 12] Cannot allocate memory")))
+        if (exc.signal ?? (exc.stderr.endsWith("MemoryError\n") || exc.stderr.includes("OSError: [Errno 12] Cannot allocate memory"))) {
           msg = `Mambalade ran out of memory:
 ${msg}`;
-        logger.error(msg);
+          logger.debug(msg);
+        } else {
+          logger.error(msg);
+        }
       } else
         logger.error("Unexpected error:", e);
       return { type: "error", message: msg };
@@ -96663,7 +96638,7 @@ ${msg}`;
   }
   // public for testing only
   async tryUsingPreinstalledVirtualEnv(packages) {
-    const preinstallVirtualEnvPath = resolve11(this.projectDir, ".venv");
+    const preinstallVirtualEnvPath = resolve12(this.projectDir, ".venv");
     if (!existsSync10(preinstallVirtualEnvPath))
       return false;
     logger.info(`Checking preinstalled virtual environment at ${preinstallVirtualEnvPath}`);
@@ -96864,7 +96839,7 @@ async function processVenv(venvDir) {
   const nodeToPackage = /* @__PURE__ */ new Map();
   const root3 = mkTrie();
   await asyncForEach(Object.entries(installedPackages), async ([packageName, { distInfoDir }]) => {
-    const record = resolve12(venvDir, distInfoDir, "RECORD");
+    const record = resolve13(venvDir, distInfoDir, "RECORD");
     if (!await exists(record))
       return;
     const files = (await fs11.readFile(record, "utf-8")).split("\n").map((line) => line.split(",", 1)[0]);
@@ -96959,7 +96934,7 @@ var PipAnalyzer = class {
     } else if (workspaceData.type === "socket") {
       declaredDeps = new Set(workspaceData.data.artifacts.map((a2) => normalizePackageName(a2.name)));
     }
-    return (await findDirectDependencies(resolve13(subprojectDir, workspacePath), resolve13(info.virtualEnvFolder, ".venv"))).filter((d) => !declaredDeps.has(d));
+    return (await findDirectDependencies(resolve14(subprojectDir, workspacePath), resolve14(info.virtualEnvFolder, ".venv"))).filter((d) => !declaredDeps.has(d));
   }
   async runReachabilityAnalysis(vulns, analysisMetadataCollector, statusUpdater) {
     try {
@@ -97009,7 +96984,7 @@ async function analyzeWithHeuristics(state, vulns, heuristicsInOrder, doNotRecom
   let analysisNumber = 0;
   const newAnalysisRunListener = () => statusUpdater?.(`Static analysis run number ${++analysisNumber} in progress...`);
   const ecosystem = vulnerabilities[0].ecosystem ?? "NPM";
-  const expHeuristicName = process.env.ONLY_APPLICATION_SOURCE_FILES_FOR_KNOWN_LANGUAGES === "true" ? "ONLY_APPLICATION_SOURCE_FILES_FOR_KNOWN_LANGUAGES" : await getExperimentName(relative5(state.rootWorkingDir, state.subprojectDir) || ".", state.workspacePath, ecosystem, COANA_REPORT_ID, apiKey);
+  const expHeuristicName = process.env.ONLY_APPLICATION_SOURCE_FILES_FOR_KNOWN_LANGUAGES === "true" ? "ONLY_APPLICATION_SOURCE_FILES_FOR_KNOWN_LANGUAGES" : await getExperimentName(relative6(state.rootWorkingDir, state.subprojectDir) || ".", state.workspacePath, ecosystem, COANA_REPORT_ID, apiKey);
   let bucketsToAnalyze = state.otherAnalysisOptions.lightweightReachability ? void 0 : await getBucketsBasedOnPreviousResults();
   let useExperimentalHeuristic = Boolean(expHeuristicName && bucketsToAnalyze);
   if (!bucketsToAnalyze)
@@ -97044,7 +97019,7 @@ async function analyzeWithHeuristics(state, vulns, heuristicsInOrder, doNotRecom
   }
   async function analyzeWithExperimentalHeuristic(buckets) {
     try {
-      const previousAnalysisResults = await getPreviousAnalysisResults(relative5(state.rootWorkingDir, state.subprojectDir) || ".", state.workspacePath, COANA_REPORT_ID, apiKey);
+      const previousAnalysisResults = await getPreviousAnalysisResults(relative6(state.rootWorkingDir, state.subprojectDir) || ".", state.workspacePath, COANA_REPORT_ID, apiKey);
       if (!expHeuristicName || !previousAnalysisResults)
         return;
       const experimentalRes = await analyzeAndAugmentVulns(buckets, void 0, true, expHeuristicName);
@@ -97080,7 +97055,7 @@ async function analyzeWithHeuristics(state, vulns, heuristicsInOrder, doNotRecom
     } catch (e) {
       logger.warn("Error while running experimental heuristic - scan will continue in normal mode.", e);
       sendWarningToDashboard("Error while running experimental heuristic", {
-        subprojectPath: relative5(state.rootWorkingDir, state.subprojectDir) || ".",
+        subprojectPath: relative6(state.rootWorkingDir, state.subprojectDir) || ".",
         workspacePath: state.workspacePath,
         errorMessage: e.message,
         errorStack: e.stack
@@ -97091,7 +97066,7 @@ async function analyzeWithHeuristics(state, vulns, heuristicsInOrder, doNotRecom
   async function getBucketsBasedOnPreviousResults() {
     if (state.otherAnalysisOptions.skipCacheUsage || !SOCKET_MODE && (!COANA_REPORT_ID || apiKey.type === "missing"))
       return void 0;
-    const bucketsFromLastAnalysisAndCliVersion = await dashboardAPI.getBucketsForLastReport(relative5(state.rootWorkingDir, state.subprojectDir) || ".", state.workspacePath, vulnerabilities[0].ecosystem ?? "NPM", COANA_REPORT_ID, apiKey);
+    const bucketsFromLastAnalysisAndCliVersion = await dashboardAPI.getBucketsForLastReport(relative6(state.rootWorkingDir, state.subprojectDir) || ".", state.workspacePath, vulnerabilities[0].ecosystem ?? "NPM", COANA_REPORT_ID, apiKey);
     if (!bucketsFromLastAnalysisAndCliVersion)
       return void 0;
     const { cliVersion, buckets: bucketsFromLastAnalysis } = bucketsFromLastAnalysisAndCliVersion;
@@ -97106,7 +97081,7 @@ async function analyzeWithHeuristics(state, vulns, heuristicsInOrder, doNotRecom
     const duplicateUrls = findDuplicateVulnsInBuckets(bucketsFromLastAnalysis);
     if (duplicateUrls.length > 0) {
       sendWarningToDashboard(`Assertion error: Detected bucket(s) with non-unique vulnerability URLs. Non-unique URLs: ${duplicateUrls.join(" ")}.`, {
-        subprojectPath: relative5(state.rootWorkingDir, state.subprojectDir) || ".",
+        subprojectPath: relative6(state.rootWorkingDir, state.subprojectDir) || ".",
         workspacePath: state.workspacePath
       }, bucketsFromLastAnalysisAndCliVersion, COANA_REPORT_ID, apiKey);
       return void 0;
@@ -97247,7 +97222,7 @@ async function analyzeWithHeuristics(state, vulns, heuristicsInOrder, doNotRecom
       const oldMd = oldAnalysisMetadata.find((oldMd2) => newMd.vulnUrls.some((vulnUrl) => oldMd2.vulnUrls.includes(vulnUrl)));
       if (!oldMd) {
         sendWarningToDashboard("Could not find corresponding analysis metadata to compare time regressions with", {
-          subprojectPath: relative5(state.rootWorkingDir, state.subprojectDir) || ".",
+          subprojectPath: relative6(state.rootWorkingDir, state.subprojectDir) || ".",
           workspacePath: state.workspacePath
         }, void 0, COANA_REPORT_ID, apiKey);
         return;
@@ -97274,7 +97249,7 @@ async function analyzeWithHeuristics(state, vulns, heuristicsInOrder, doNotRecom
     });
     if (regressions.length === 0)
       return;
-    sendRegressionsToDashboard(regressions, relative5(state.rootWorkingDir, state.subprojectDir) || ".", state.workspacePath, COANA_REPORT_ID, apiKey);
+    sendRegressionsToDashboard(regressions, relative6(state.rootWorkingDir, state.subprojectDir) || ".", state.workspacePath, COANA_REPORT_ID, apiKey);
   }
   function sendReachabilityRegressionsToDashboard(heuristicName, experimentName, origRes, experimentRes) {
     const regressions = Object.keys(origRes).filter((vulnUrl) => experimentRes[vulnUrl] && origRes[vulnUrl] !== experimentRes[vulnUrl]).map((vulnUrl) => ({
@@ -97286,7 +97261,7 @@ async function analyzeWithHeuristics(state, vulns, heuristicsInOrder, doNotRecom
       originalResult: origRes[vulnUrl],
       experimentResult: experimentRes[vulnUrl]
     }));
-    sendRegressionsToDashboard(regressions, relative5(state.rootWorkingDir, state.subprojectDir) || ".", state.workspacePath, COANA_REPORT_ID, apiKey);
+    sendRegressionsToDashboard(regressions, relative6(state.rootWorkingDir, state.subprojectDir) || ".", state.workspacePath, COANA_REPORT_ID, apiKey);
   }
 }
 function getHeuristicFromName(state, heuristicName, ecosystem) {
@@ -97439,7 +97414,7 @@ var MavenAnalyzer = class {
 // dist/analyzers/npm-analyzer.js
 import { existsSync as existsSync11 } from "fs";
 import { rm as rm6 } from "fs/promises";
-import { resolve as resolve14 } from "path";
+import { resolve as resolve15 } from "path";
 var NpmAnalyzer = class {
   state;
   projectDir;
@@ -97449,9 +97424,9 @@ var NpmAnalyzer = class {
   }
   async runPhantomDependencyAnalysis() {
     try {
-      return (await runJellyPhantomDependencyAnalysis(this.projectDir)).map((r) => r.name);
+      return (await runJellyPhantomDependencyAnalysis(this.projectDir, this.state.reachabilityAnalysisOptions)).map((r) => r.name);
     } catch (e) {
-      console.error(e);
+      logger.debug("Error while running jelly phantom dependency analysis: ", e);
     }
   }
   async runReachabilityAnalysis(vulns, analysisMetadataCollector, statusUpdater) {
@@ -97461,16 +97436,16 @@ var NpmAnalyzer = class {
       heuristics.ONLY_VULN_PATH_PACKAGES_EXCEPT_VULNERABLE_PACKAGE_AND_MAX_ROUNDS_2
     ];
     const vulnerabilityScanner = new JSCodeAwareVulnerabilityScanner(this.state.rootWorkingDir, this.projectDir, this.state.reachabilityAnalysisOptions);
-    const nodeModulesAlreadyExisted = existsSync11(resolve14(this.state.subprojectDir, "node_modules"));
+    const nodeModulesAlreadyExisted = existsSync11(resolve15(this.state.subprojectDir, "node_modules"));
     try {
       await vulnerabilityScanner.prepareDependencies(this.state, heuristicsInOrder[0]);
       return await analyzeWithHeuristics(this.state, vulns, heuristicsInOrder, true, vulnerabilityScanner, analysisMetadataCollector, statusUpdater);
     } finally {
       if (!nodeModulesAlreadyExisted) {
-        if (existsSync11(resolve14(this.state.subprojectDir, "node_modules")))
-          await rm6(resolve14(this.state.subprojectDir, "node_modules"), { recursive: true });
-        if (existsSync11(resolve14(this.projectDir, "node_modules")))
-          await rm6(resolve14(this.projectDir, "node_modules"), { recursive: true });
+        if (existsSync11(resolve15(this.state.subprojectDir, "node_modules")))
+          await rm6(resolve15(this.state.subprojectDir, "node_modules"), { recursive: true });
+        if (existsSync11(resolve15(this.projectDir, "node_modules")))
+          await rm6(resolve15(this.projectDir, "node_modules"), { recursive: true });
       }
     }
   }
@@ -97518,46 +97493,6 @@ var RustAnalyzer = class {
   }
 };
 
-// dist/apply-precomputed-reachability-results.js
-async function addPrecomputedResultsToVulnerabilities(analyzer, vulnerabilities) {
-  const phantomDependencies = await analyzer.runPhantomDependencyAnalysis();
-  if (!phantomDependencies)
-    return;
-  await applySeries(vulnerabilities, async (v) => {
-    const dismissVulnerability = canDismissVulnerability(phantomDependencies, v.vulnChainDetails);
-    v.unreachableByPrecomputation = dismissVulnerability ? "YES" : "NO";
-  });
-}
-function canDismissVulnerability(phantomDependencies, vulnChainDetails) {
-  const parentsMap = computeParentsMap(vulnChainDetails);
-  const [vulnNodeIdentifier] = Object.entries(vulnChainDetails.transitiveDependencies).find(([_identifier, node]) => node.vulnerable);
-  let canDismiss = true;
-  const recHelper = (nodeIdentifier, depth) => {
-    if (depth === 0)
-      return void 0;
-    const parents3 = parentsMap.get(nodeIdentifier).filter((parent2) => parent2 !== ROOT_NODE_STR);
-    const thisReachabilityPrecomp = nodeIdentifier === vulnNodeIdentifier ? "Reachable" : vulnChainDetails.transitiveDependencies[nodeIdentifier].reachabilityPrecomp;
-    if (!thisReachabilityPrecomp)
-      return void 0;
-    const thisMayReachVulnerableNode = ["Reachable", "Unknown"].includes(thisReachabilityPrecomp);
-    if (parents3.length === 0 && thisMayReachVulnerableNode) {
-      canDismiss = false;
-    }
-    if (parents3) {
-      const parentsReachabilityPrecomp = parents3.map((p) => recHelper(p, depth - 1));
-      if (parentsReachabilityPrecomp.some((reachabilityPrecomp) => !reachabilityPrecomp) && thisMayReachVulnerableNode) {
-        canDismiss = false;
-      }
-    }
-    if (thisMayReachVulnerableNode && phantomDependencies.includes(nodeIdentifier)) {
-      canDismiss = false;
-    }
-    return thisReachabilityPrecomp;
-  };
-  recHelper(vulnNodeIdentifier, 5);
-  return canDismiss;
-}
-
 // dist/main.js
 var { partition: partition3 } = import_lodash19.default;
 var ecosystemAnalyzer = {
@@ -97571,20 +97506,16 @@ var ecosystemAnalyzer = {
 var apiKey2 = COANA_API_KEY ? { type: "present", value: COANA_API_KEY } : { type: "missing" };
 var dashboardAPI2 = new DashboardAPI(process.env.SOCKET_MODE === "true", process.env.DISABLE_ANALYTICS_SHARING === "true");
 async function runReachabilityAnalysis(state) {
-  const projectDir = resolve15(state.subprojectDir, state.workspacePath);
+  const projectDir = resolve16(state.subprojectDir, state.workspacePath);
   const ecosystem = state.workspaceData.data.type;
-  logger.info(`Preparing for running reachability analysis for project at "${relative6(state.rootWorkingDir, projectDir) || "."}" (${ecosystem})`);
+  logger.info(`Preparing for running reachability analysis for project at "${relative7(state.rootWorkingDir, projectDir) || "."}" (${ecosystem})`);
   const constructor = ecosystemAnalyzer[ecosystem];
   if (!constructor)
     throw Error(`No analyzer associated with ecosystem ${ecosystem}`);
   const analyzer = new constructor(state, projectDir);
-  try {
-    await addPrecomputedResultsToVulnerabilities(analyzer, state.vulnerabilities);
-  } catch (e) {
-  }
   const [vulnerabilitiesWithPrecomputedResults, vulnerabilitiesWithoutPrecomputedResults] = partition3(state.vulnerabilities, (v) => "results" in v);
   const augmentedVulnerabilities = await runWholeProgramCodeAwareVulnerabilityScanner(analyzer, vulnerabilitiesWithoutPrecomputedResults, async (amd) => {
-    await dashboardAPI2.registerAnalysisMetadata(relative6(state.rootWorkingDir, state.subprojectDir) || ".", state.workspacePath, state.workspaceData.data.type, amd, COANA_REPORT_ID, apiKey2);
+    await dashboardAPI2.registerAnalysisMetadata(relative7(state.rootWorkingDir, state.subprojectDir) || ".", state.workspacePath, state.workspaceData.data.type, amd, COANA_REPORT_ID, apiKey2);
   });
   return [...vulnerabilitiesWithPrecomputedResults, ...augmentedVulnerabilities];
 }