@coana-tech/cli 14.12.171 → 14.12.172

package/cli.mjs

@@ -14866,8 +14866,8 @@ var require_utils = __commonJS({
     exports2.toPosixSlashes = (str) => str.replace(REGEX_BACKSLASH, "/");
     exports2.isWindows = () => {
       if (typeof navigator !== "undefined" && navigator.platform) {
-        const platform9 = navigator.platform.toLowerCase();
-        return platform9 === "win32" || platform9 === "windows";
+        const platform10 = navigator.platform.toLowerCase();
+        return platform10 === "win32" || platform10 === "windows";
       }
       if (typeof process !== "undefined" && process.platform) {
         return process.platform === "win32";
@@ -56426,8 +56426,8 @@ var require_path_key = __commonJS({
     "use strict";
     var pathKey = (options = {}) => {
       const environment = options.env || process.env;
-      const platform9 = options.platform || process.platform;
-      if (platform9 !== "win32") {
+      const platform10 = options.platform || process.platform;
+      if (platform10 !== "win32") {
         return "PATH";
       }
       return Object.keys(environment).reverse().find((key) => key.toUpperCase() === "PATH") || "Path";
@@ -69910,7 +69910,7 @@ var require_lockfile = __commonJS({
               }
               const file = _ref22;
               if (yield exists2(file)) {
-                return readFile38(file);
+                return readFile39(file);
               }
             }
             return null;
@@ -69929,7 +69929,7 @@ var require_lockfile = __commonJS({
         })();
         let readJsonAndFile = exports3.readJsonAndFile = (() => {
           var _ref24 = (0, (_asyncToGenerator2 || _load_asyncToGenerator()).default)(function* (loc) {
-            const file = yield readFile38(loc);
+            const file = yield readFile39(loc);
             try {
               return {
                 object: (0, (_map || _load_map()).default)(JSON.parse(stripBOM2(file))),
@@ -70169,7 +70169,7 @@ var require_lockfile = __commonJS({
           };
         })();
         exports3.copy = copy;
-        exports3.readFile = readFile38;
+        exports3.readFile = readFile39;
         exports3.readFileRaw = readFileRaw;
         exports3.normalizeOS = normalizeOS;
         var _fs;
@@ -70267,7 +70267,7 @@ var require_lockfile = __commonJS({
             });
           });
         }
-        function readFile38(loc) {
+        function readFile39(loc) {
           return _readFile(loc, "utf8").then(normalizeOS);
         }
         function readFileRaw(loc) {
@@ -70346,9 +70346,9 @@ var require_lockfile = __commonJS({
         const SINGLE_INSTANCE_PORT = exports3.SINGLE_INSTANCE_PORT = 31997;
         const SINGLE_INSTANCE_FILENAME = exports3.SINGLE_INSTANCE_FILENAME = ".yarn-single-instance";
         const ENV_PATH_KEY = exports3.ENV_PATH_KEY = getPathKey(process.platform, process.env);
-        function getPathKey(platform9, env) {
+        function getPathKey(platform10, env) {
           let pathKey = "PATH";
-          if (platform9 === "win32") {
+          if (platform10 === "win32") {
             pathKey = "Path";
             for (const key in env) {
               if (key.toLowerCase() === "path") {
@@ -176243,7 +176243,7 @@ var require_client_metadata = __commonJS({
         const name3 = Buffer.byteLength(appName, "utf8") <= 128 ? options.appName : Buffer.from(appName, "utf8").subarray(0, 128).toString("utf8");
         metadataDocument.ifItFitsItSits("application", { name: name3 });
       }
-      const { name: name2 = "", version: version4 = "", platform: platform9 = "" } = options.driverInfo;
+      const { name: name2 = "", version: version4 = "", platform: platform10 = "" } = options.driverInfo;
       const driverInfo = {
         name: name2.length > 0 ? `nodejs|${name2}` : "nodejs",
         version: version4.length > 0 ? `${NODE_DRIVER_VERSION}|${version4}` : NODE_DRIVER_VERSION
@@ -176252,8 +176252,8 @@ var require_client_metadata = __commonJS({
         throw new error_1.MongoInvalidArgumentError("Unable to include driverInfo name and version, metadata cannot exceed 512 bytes");
       }
       let runtimeInfo = getRuntimeInfo();
-      if (platform9.length > 0) {
-        runtimeInfo = `${runtimeInfo}|${platform9}`;
+      if (platform10.length > 0) {
+        runtimeInfo = `${runtimeInfo}|${platform10}`;
       }
       if (!metadataDocument.ifItFitsItSits("platform", runtimeInfo)) {
         throw new error_1.MongoInvalidArgumentError("Unable to include driverInfo platform, metadata cannot exceed 512 bytes");
@@ -194903,14 +194903,14 @@ var require_axios = __commonJS({
       navigator: _navigator2,
       origin: origin2
     });
-    var platform9 = {
+    var platform10 = {
       ...utils,
       ...platform$1
     };
     function toURLEncodedForm2(data2, options) {
-      return toFormData3(data2, new platform9.classes.URLSearchParams(), {
+      return toFormData3(data2, new platform10.classes.URLSearchParams(), {
         visitor: function(value2, key, path9, helpers) {
-          if (platform9.isNode && utils$1.isBuffer(value2)) {
+          if (platform10.isNode && utils$1.isBuffer(value2)) {
             this.append(key, value2.toString("base64"));
             return false;
           }
@@ -195059,8 +195059,8 @@ var require_axios = __commonJS({
       maxContentLength: -1,
       maxBodyLength: -1,
       env: {
-        FormData: platform9.classes.FormData,
-        Blob: platform9.classes.Blob
+        FormData: platform10.classes.FormData,
+        Blob: platform10.classes.Blob
       },
       validateStatus: function validateStatus2(status) {
         return status >= 200 && status < 300;
@@ -195401,7 +195401,7 @@ var require_axios = __commonJS({
     }
     var DATA_URL_PATTERN2 = /^(?:([^;]+);)?(?:[^;]+;)?(base64|),([\s\S]*)$/;
     function fromDataURI2(uri, asBlob, options) {
-      const _Blob = options && options.Blob || platform9.classes.Blob;
+      const _Blob = options && options.Blob || platform10.classes.Blob;
       const protocol = parseProtocol2(uri);
       if (asBlob === void 0 && _Blob) {
         asBlob = true;
@@ -195551,7 +195551,7 @@ var require_axios = __commonJS({
       }
     };
     var readBlob$1 = readBlob2;
-    var BOUNDARY_ALPHABET2 = platform9.ALPHABET.ALPHA_DIGIT + "-_";
+    var BOUNDARY_ALPHABET2 = platform10.ALPHABET.ALPHA_DIGIT + "-_";
     var textEncoder2 = typeof TextEncoder === "function" ? new TextEncoder() : new util__default["default"].TextEncoder();
     var CRLF2 = "\r\n";
     var CRLF_BYTES2 = textEncoder2.encode(CRLF2);
@@ -195594,7 +195594,7 @@ var require_axios = __commonJS({
       const {
         tag = "form-data-boundary",
         size = 25,
-        boundary = tag + "-" + platform9.generateString(size, BOUNDARY_ALPHABET2)
+        boundary = tag + "-" + platform10.generateString(size, BOUNDARY_ALPHABET2)
       } = options || {};
       if (!utils$1.isFormData(form)) {
         throw TypeError("FormData instance required");
@@ -195818,7 +195818,7 @@ var require_axios = __commonJS({
     var isBrotliSupported2 = utils$1.isFunction(zlib__default["default"].createBrotliDecompress);
     var { http: httpFollow2, https: httpsFollow2 } = followRedirects__default["default"];
     var isHttps2 = /https:?/;
-    var supportedProtocols2 = platform9.protocols.map((protocol) => {
+    var supportedProtocols2 = platform10.protocols.map((protocol) => {
       return protocol + ":";
     });
     var flushOnFinish2 = (stream6, [throttled, flush]) => {
@@ -195945,7 +195945,7 @@ var require_axios = __commonJS({
           }
         }
         const fullPath = buildFullPath2(config3.baseURL, config3.url, config3.allowAbsoluteUrls);
-        const parsed = new URL(fullPath, platform9.hasBrowserEnv ? platform9.origin : void 0);
+        const parsed = new URL(fullPath, platform10.hasBrowserEnv ? platform10.origin : void 0);
         const protocol = parsed.protocol || supportedProtocols2[0];
         if (protocol === "data:") {
           if (config3.maxContentLength > -1) {
@@ -196317,14 +196317,14 @@ var require_axios = __commonJS({
         }
       });
     };
-    var isURLSameOrigin = platform9.hasStandardBrowserEnv ? /* @__PURE__ */ ((origin3, isMSIE) => (url3) => {
-      url3 = new URL(url3, platform9.origin);
+    var isURLSameOrigin = platform10.hasStandardBrowserEnv ? /* @__PURE__ */ ((origin3, isMSIE) => (url3) => {
+      url3 = new URL(url3, platform10.origin);
       return origin3.protocol === url3.protocol && origin3.host === url3.host && (isMSIE || origin3.port === url3.port);
     })(
-      new URL(platform9.origin),
-      platform9.navigator && /(msie|trident)/i.test(platform9.navigator.userAgent)
+      new URL(platform10.origin),
+      platform10.navigator && /(msie|trident)/i.test(platform10.navigator.userAgent)
     ) : () => true;
-    var cookies = platform9.hasStandardBrowserEnv ? (
+    var cookies = platform10.hasStandardBrowserEnv ? (
       // Standard browser envs support document.cookie
       {
         write(name2, value2, expires, path9, domain, secure) {
@@ -196445,7 +196445,7 @@ var require_axios = __commonJS({
         );
       }
       if (utils$1.isFormData(data2)) {
-        if (platform9.hasStandardBrowserEnv || platform9.hasStandardBrowserWebWorkerEnv) {
+        if (platform10.hasStandardBrowserEnv || platform10.hasStandardBrowserWebWorkerEnv) {
           headers.setContentType(void 0);
         } else if (utils$1.isFunction(data2.getHeaders)) {
           const formHeaders = data2.getHeaders();
@@ -196457,7 +196457,7 @@ var require_axios = __commonJS({
           });
         }
       }
-      if (platform9.hasStandardBrowserEnv) {
+      if (platform10.hasStandardBrowserEnv) {
         withXSRFToken && utils$1.isFunction(withXSRFToken) && (withXSRFToken = withXSRFToken(newConfig));
         if (withXSRFToken || withXSRFToken !== false && isURLSameOrigin(newConfig.url)) {
           const xsrfValue = xsrfHeaderName && xsrfCookieName && cookies.read(xsrfCookieName);
@@ -196589,7 +196589,7 @@ var require_axios = __commonJS({
           }
         }
         const protocol = parseProtocol2(_config.url);
-        if (protocol && platform9.protocols.indexOf(protocol) === -1) {
+        if (protocol && platform10.protocols.indexOf(protocol) === -1) {
           reject(new AxiosError3("Unsupported protocol " + protocol + ":", AxiosError3.ERR_BAD_REQUEST, config3));
           return;
         }
@@ -196735,7 +196735,7 @@ var require_axios = __commonJS({
       const encodeText = isFetchSupported && (typeof TextEncoder$1 === "function" ? /* @__PURE__ */ ((encoder) => (str) => encoder.encode(str))(new TextEncoder$1()) : async (str) => new Uint8Array(await new Request(str).arrayBuffer()));
       const supportsRequestStream = isRequestSupported && isReadableStreamSupported && test2(() => {
         let duplexAccessed = false;
-        const hasContentType = new Request(platform9.origin, {
+        const hasContentType = new Request(platform10.origin, {
           body: new ReadableStream$1(),
           method: "POST",
           get duplex() {
@@ -196768,7 +196768,7 @@ var require_axios = __commonJS({
           return body.size;
         }
         if (utils$1.isSpecCompliantForm(body)) {
-          const _request = new Request(platform9.origin, {
+          const _request = new Request(platform10.origin, {
             method: "POST",
             body
           });
@@ -199895,7 +199895,7 @@ var {
 } = import_index.default;
 
 // dist/index.js
-import { mkdir as mkdir7, mkdtemp as mkdtemp2, readFile as readFile37, rm as rm3, writeFile as writeFile17 } from "fs/promises";
+import { mkdir as mkdir7, mkdtemp as mkdtemp2, readFile as readFile38, rm as rm3, writeFile as writeFile17 } from "fs/promises";
 import { tmpdir as tmpdir5 } from "os";
 import { dirname as dirname26, join as join35, resolve as resolve44 } from "path";
 
@@ -211817,13 +211817,13 @@ async function getNodeExecutable(overridePath) {
   logger.debug("Extracting Node.js binary for spawned processes...");
   extractedNodePath = (async () => {
     const extractedPath = await extractTool("nodejs-binaries", "nodejs-binaries");
-    const { platform: platform9, arch } = process;
+    const { platform: platform10, arch } = process;
     const nodeArch = arch === "arm" ? "arm64" : arch;
-    const isWindows4 = platform9 === "win32";
-    const binaryName = isWindows4 ? `node-${platform9}-${nodeArch}.exe.gz` : `node-${platform9}-${nodeArch}.gz`;
+    const isWindows4 = platform10 === "win32";
+    const binaryName = isWindows4 ? `node-${platform10}-${nodeArch}.exe.gz` : `node-${platform10}-${nodeArch}.gz`;
     const compressedBinaryPath = join5(extractedPath, binaryName);
     if (!await exists(compressedBinaryPath)) {
-      throw new Error(`Node.js binary not found: ${compressedBinaryPath}. Platform: ${platform9}-${nodeArch}`);
+      throw new Error(`Node.js binary not found: ${compressedBinaryPath}. Platform: ${platform10}-${nodeArch}`);
     }
     const tmpDir = join5(getExtractionBaseDir(), "node-runtime");
     await mkdir4(tmpDir, { recursive: true });
@@ -212046,13 +212046,13 @@ async function getUvExecutable() {
   logger.debug("uv not found on system, extracting embedded uv...");
   extractedUvPath = (async () => {
     const extractedPath = await extractTool("uv-binaries", "uv-binaries");
-    const { platform: platform9, arch } = process;
+    const { platform: platform10, arch } = process;
     const nodeArch = arch === "arm" ? "arm64" : arch;
-    const isWindows4 = platform9 === "win32";
-    const binaryName = isWindows4 ? `uv-${platform9}-${nodeArch}.exe.gz` : `uv-${platform9}-${nodeArch}.gz`;
+    const isWindows4 = platform10 === "win32";
+    const binaryName = isWindows4 ? `uv-${platform10}-${nodeArch}.exe.gz` : `uv-${platform10}-${nodeArch}.gz`;
     const compressedBinaryPath = join5(extractedPath, binaryName);
     if (!await exists(compressedBinaryPath)) {
-      throw new Error(`uv binary not found: ${compressedBinaryPath}. Platform: ${platform9}-${nodeArch}`);
+      throw new Error(`uv binary not found: ${compressedBinaryPath}. Platform: ${platform10}-${nodeArch}`);
     }
     const tmpDir = join5(getExtractionBaseDir(), "uv-runtime");
     await mkdir4(tmpDir, { recursive: true });
@@ -223336,7 +223336,7 @@ var Pattern = class _Pattern {
   #isUNC;
   #isAbsolute;
   #followGlobstar = true;
-  constructor(patternList, globList, index2, platform9) {
+  constructor(patternList, globList, index2, platform10) {
     if (!isPatternList(patternList)) {
       throw new TypeError("empty pattern list");
     }
@@ -223353,7 +223353,7 @@ var Pattern = class _Pattern {
     this.#patternList = patternList;
     this.#globList = globList;
     this.#index = index2;
-    this.#platform = platform9;
+    this.#platform = platform10;
     if (this.#index === 0) {
       if (this.isUNC()) {
         const [p0, p1, p22, p3, ...prest] = this.#patternList;
@@ -223495,12 +223495,12 @@ var Ignore = class {
   absoluteChildren;
   platform;
   mmopts;
-  constructor(ignored, { nobrace, nocase, noext, noglobstar, platform: platform9 = defaultPlatform2 }) {
+  constructor(ignored, { nobrace, nocase, noext, noglobstar, platform: platform10 = defaultPlatform2 }) {
     this.relative = [];
     this.absolute = [];
     this.relativeChildren = [];
     this.absoluteChildren = [];
-    this.platform = platform9;
+    this.platform = platform10;
     this.mmopts = {
       dot: true,
       nobrace,
@@ -223508,7 +223508,7 @@ var Ignore = class {
       noext,
       noglobstar,
       optimizationLevel: 2,
-      platform: platform9,
+      platform: platform10,
       nocomment: true,
       nonegate: true
     };
@@ -235275,12 +235275,63 @@ var bgMagentaBright = format5(105, 49);
 var bgCyanBright = format5(106, 49);
 var bgWhiteBright = format5(107, 49);
 
+// dist/internal/check-system-requirements.js
+import { readFile as readFile34 } from "fs/promises";
+import { platform as platform9 } from "process";
+var VM_MAX_MAP_COUNT_PATH = "/proc/sys/vm/max_map_count";
+async function checkSystemRequirements(memoryLimitInMb, socketMode) {
+  if (platform9 !== "linux" || !socketMode) {
+    return;
+  }
+  await checkVmMaxMapCount(memoryLimitInMb);
+}
+async function checkVmMaxMapCount(memoryLimitInMb) {
+  if (!memoryLimitInMb || memoryLimitInMb <= 0 || !isFinite(memoryLimitInMb)) {
+    logger.warn(`Invalid memory limit: ${memoryLimitInMb}. Skipping vm.max_map_count check.`);
+    return;
+  }
+  let vmMaxMapCountStr;
+  try {
+    vmMaxMapCountStr = await readFile34(VM_MAX_MAP_COUNT_PATH, "utf-8");
+  } catch (error) {
+    const requiredValue = memoryLimitInMb * 4;
+    logger.warn(`Unable to read ${VM_MAX_MAP_COUNT_PATH} (${error}). Skipping vm.max_map_count check. If you encounter memory-related issues, ensure vm.max_map_count is at least ${requiredValue}.`);
+    return;
+  }
+  const vmMaxMapCount = parseInt(vmMaxMapCountStr.trim(), 10);
+  if (isNaN(vmMaxMapCount)) {
+    logger.warn(`Unable to parse vm.max_map_count. Value was: "${vmMaxMapCountStr.trim()}". Skipping check.`);
+    return;
+  }
+  const requiredVmMaxMapCount = memoryLimitInMb * 4;
+  if (vmMaxMapCount < requiredVmMaxMapCount) {
+    throw new Error(`System requirement not met: vm.max_map_count is too low.
+
+Current value: ${vmMaxMapCount}
+Required value: at least ${requiredVmMaxMapCount} (for --memory-limit ${memoryLimitInMb} MB)
+
+The reachability analysis may create many memory mappings, and the current
+vm.max_map_count limit will cause the analysis to fail.
+
+To fix this, run one of the following commands:
+
+  Temporary (until reboot):
+    sudo sysctl -w vm.max_map_count=${requiredVmMaxMapCount}
+
+  Permanent (survives reboot):
+    echo 'vm.max_map_count=${requiredVmMaxMapCount}' | sudo tee -a /etc/sysctl.conf
+    sudo sysctl -p
+
+Alternatively, you can reduce the --memory-limit option to require fewer mappings.`);
+  }
+}
+
 // dist/internal/constants.js
 var DEFAULT_REPORT_FILENAME_BASE = "coana-report";
 
 // dist/internal/exclude-dirs-from-configuration-files.js
 import { existsSync as existsSync25 } from "fs";
-import { readFile as readFile34 } from "fs/promises";
+import { readFile as readFile35 } from "fs/promises";
 import { basename as basename10, resolve as resolve41 } from "path";
 var import_yaml2 = __toESM(require_dist11(), 1);
 async function inferExcludeDirsFromConfigurationFiles(rootWorkingDir) {
@@ -235294,7 +235345,7 @@ async function inferExcludeDirsFromConfigurationFiles(rootWorkingDir) {
 }
 async function inferExcludeDirsFromSocketConfig(socketConfigFile) {
   try {
-    const config3 = (0, import_yaml2.parse)(await readFile34(socketConfigFile, "utf8"));
+    const config3 = (0, import_yaml2.parse)(await readFile35(socketConfigFile, "utf8"));
     const version4 = config3.version;
     const ignorePaths = config3[version4 === 1 ? "ignore" : "projectIgnorePaths"];
     if (!ignorePaths)
@@ -235311,7 +235362,7 @@ async function inferExcludeDirsFromSocketConfig(socketConfigFile) {
 // dist/internal/manifest-upload.js
 var import_fast_glob = __toESM(require_out4(), 1);
 var import_ignore3 = __toESM(require_ignore(), 1);
-import { readFile as readFile35 } from "fs/promises";
+import { readFile as readFile36 } from "fs/promises";
 import { join as join31 } from "path";
 var DEFAULT_IGNORE_PATTERNS = [
   "**/node_modules/**",
@@ -235327,7 +235378,7 @@ var DEFAULT_IGNORE_PATTERNS = [
 async function loadGitignore(rootDir) {
   try {
     const gitignorePath = join31(rootDir, ".gitignore");
-    const content = await readFile35(gitignorePath, "utf-8");
+    const content = await readFile36(gitignorePath, "utf-8");
     return (0, import_ignore3.default)().add(content);
   } catch {
     return void 0;
@@ -236454,7 +236505,7 @@ function toSocketFactsSocketDependencyTree(artifacts, vulnerabilities, tier1Reac
 }
 
 // dist/internal/vulnerability-scanning.js
-import { readFile as readFile36 } from "fs/promises";
+import { readFile as readFile37 } from "fs/promises";
 
 // ../security-auditor/security-auditor-builder/src/mongo-connection.ts
 var import_mongodb = __toESM(require_lib31(), 1);
@@ -251323,7 +251374,7 @@ async function scanForVulnerabilities(dependencyTree, offlineVulnerabilityScanne
 }
 async function offlineScan(dependencyTree, offlineVulnerabilityScannerDBPath) {
   logger.info("using offline vulnerability scanner db");
-  const offlineVulnerabilityScannerDB = JSON.parse(await readFile36(offlineVulnerabilityScannerDBPath, "utf-8"));
+  const offlineVulnerabilityScannerDB = JSON.parse(await readFile37(offlineVulnerabilityScannerDBPath, "utf-8"));
   const { ecosystemToUrlToVulnerabilityDetails, vulnerabilityDatabase } = offlineVulnerabilityScannerDB;
   const coanaSupportedVulnerabilitiesLoader = CoanaSupportedVulnerabilitiesLoader.create(ecosystemToUrlToVulnerabilityDetails);
   const vulnerabilityAccessPathLoader = CoanaSupportedVulnerabilitiesLoader.create(ecosystemToUrlToVulnerabilityDetails);
@@ -251341,7 +251392,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
 }
 
 // dist/version.js
-var version3 = "14.12.171";
+var version3 = "14.12.172";
 
 // dist/cli-core.js
 var { mapValues, omit, partition, pickBy: pickBy2 } = import_lodash15.default;
@@ -251788,6 +251839,7 @@ Subproject: ${subproject}`);
     logger.info(`Coana CLI version ${version3} scan initiated on ${this.rootWorkingDirectory}`);
     logger.info("Complete logs (including debug info) written to: ", this.coanaLogPath);
     this.verifyOptions();
+    await checkSystemRequirements(this.analysisMemoryLimitInMb, Boolean(this.options.socketMode));
     if (!this.options.excludeDirs)
       this.options.excludeDirs = await inferExcludeDirsFromConfigurationFiles(this.rootWorkingDirectory);
     logger.info("using options", JSON.stringify(pickBy2(this.options, (value2, key) => {
@@ -252417,7 +252469,7 @@ async function initializeComputeFixesAndUpgradePurls(path9, options) {
 var compareReportsCommand = new Command();
 compareReportsCommand.name("compare-reports").argument("<baselineReportPath>", "Path to the baseline report").argument("<newReportPath>", "Path to the new report").option("--api-key <key>", "Set the Coana dashboard API key.").option("-d, --debug", "Enable debug logging", false).option("--no-pr-comment", "Disable pull request comments (only relevant when run from a PR)", true).option("--no-block", "Do not fail with a non-zero exit code when new reachable vulnerabilities are detected", true).option("--ignore-undeterminable-reachability", "Ignore vulnerabilities with undeterminable reachability", false).action(async (baselineReportPath, newReportPath, options) => {
   async function readReport(reportPath) {
-    return JSON.parse(await readFile37(reportPath, "utf-8"));
+    return JSON.parse(await readFile38(reportPath, "utf-8"));
   }
   const baselineReport = await readReport(baselineReportPath);
   const newReport = await readReport(newReportPath);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coana-tech/cli",
-  "version": "14.12.171",
+  "version": "14.12.172",
   "description": "Coana CLI",
   "type": "module",
   "bin": {