@coana-tech/cli 14.12.188 → 14.12.189

package/cli.mjs

@@ -236550,9 +236550,45 @@ function displayWorkspaceDiagnosticsSummaryInternal(diagnosticsEntries, vulns) {
 }
 
 // dist/internal/socket-report-socket-dependency-tree.js
+function filterOrphanedArtifacts(artifacts) {
+  const reachable = /* @__PURE__ */ new Set();
+  const queue = [];
+  for (const artifact of artifacts) {
+    if (artifact.direct) {
+      reachable.add(artifact.id);
+      queue.push(artifact.id);
+    }
+  }
+  const depsById = new Map(artifacts.map((a4) => [a4.id, a4.dependencies ?? []]));
+  while (queue.length > 0) {
+    const id = queue.pop();
+    for (const dep of depsById.get(id) ?? []) {
+      if (!reachable.has(dep)) {
+        reachable.add(dep);
+        queue.push(dep);
+      }
+    }
+  }
+  const removedIds = /* @__PURE__ */ new Set();
+  const filtered = artifacts.filter((a4) => {
+    if (a4.direct || reachable.has(a4.id))
+      return true;
+    removedIds.add(a4.id);
+    return false;
+  });
+  if (removedIds.size > 0) {
+    logger.debug(`Filtered out ${removedIds.size} orphaned component(s) not reachable from any direct dependency`);
+  }
+  return { filtered, removedIds };
+}
 function toSocketFactsSocketDependencyTree(artifacts, vulnerabilities, tier1ReachabilityScanId, workspaceDiagnostics) {
+  const { filtered: filteredArtifacts, removedIds: orphanedArtifactIds } = filterOrphanedArtifacts(artifacts);
+  artifacts = filteredArtifacts;
   const artifactIdToArtifact = Object.fromEntries(artifacts.map((artifact) => [artifact.id, artifact]));
   for (const vulnerability of vulnerabilities) {
+    if (vulnerability.artifactId && orphanedArtifactIds.has(vulnerability.artifactId)) {
+      continue;
+    }
     const component = artifactIdToArtifact[vulnerability.artifactId];
     if (!component) {
       throw new Error(`Component not found for vulnerability ${vulnerability.purl}`);
@@ -251483,7 +251519,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
 }
 
 // dist/version.js
-var version3 = "14.12.188";
+var version3 = "14.12.189";
 
 // dist/cli-core.js
 var { mapValues, omit, partition, pickBy: pickBy2 } = import_lodash15.default;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coana-tech/cli",
-  "version": "14.12.188",
+  "version": "14.12.189",
   "description": "Coana CLI",
   "type": "module",
   "bin": {