@coana-tech/cli 14.12.50 → 14.12.52

package/repos/coana-tech/class-graph-analysis/dist/bundle/class-graph-analysis-cli.mjs

@@ -7385,11 +7385,14 @@ var ClassGraphRunner = class {
       appSrcIndices.length ? resolutionManagers.src?.resolveEdges(this.graph, appIndices, appSrcIndices, visited, "DIRECT_DEPENDENCIES") : Promise.resolve(),
       appBinIndices.length ? resolutionManagers.bin?.resolveEdges(this.graph, appIndices, appBinIndices, visited, "DIRECT_DEPENDENCIES") : Promise.resolve()
     ]);
-    const reachableNodes = [];
-    for (const reachableIdx of this.graph.getEdges().keys()) {
-      reachableNodes.push(allNodes[reachableIdx]);
+    const reachablePackageIds = /* @__PURE__ */ new Set();
+    for (const idx of findReachableNodes(this.graph, appIndices)) {
+      const node = allNodes[idx];
+      if (node.nodeType === "reflective")
+        continue;
+      reachablePackageIds.add(allNodes[idx].packageId);
     }
-    return n3(reachableNodes.map((node) => node.packageId));
+    return Array.from(reachablePackageIds);
   }
   async runAnalysis(vulnerableClasses) {
     try {
@@ -7402,6 +7405,7 @@ var ClassGraphRunner = class {
       return {
         success: false,
         vulnerablePaths: {},
+        reachablePackageIds: [],
         analysisDiagnostics,
         error: e2.message
       };
@@ -7464,6 +7468,13 @@ var ClassGraphRunner = class {
       vulnerableClassToIndices.get(node.fullyQualifiedName).push(idx);
     });
     const vulnerablePaths = this.computeVulnerablePaths(this.graph, appIndices, allNodes, vulnerableClassToIndices);
+    const reachablePackageIds = /* @__PURE__ */ new Set();
+    for (const idx of findReachableNodes(this.graph, appIndices)) {
+      const node = allNodes[idx];
+      if (node.nodeType === "reflective")
+        continue;
+      reachablePackageIds.add(allNodes[idx].packageId);
+    }
     const analysisDiagnostics = {
       timeout: false,
       aborted: false
@@ -7471,6 +7482,7 @@ var ClassGraphRunner = class {
     const result = {
       success: true,
       vulnerablePaths,
+      reachablePackageIds: Array.from(reachablePackageIds),
       analysisDiagnostics,
       error: null
     };