@coana-tech/cli 14.9.2 → 14.9.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/cli.mjs +55 -47
  2. package/package.json +1 -1
package/cli.mjs CHANGED
@@ -197213,6 +197213,45 @@ function groupVulnsByUrlAndReachability(vulnerabilityInstances, mapper) {
197213
197213
  return groupedInstances;
197214
197214
  }
197215
197215
 
197216
+ // ../web-compat-utils/src/dependency-tree.ts
197217
+ function getEcosystem({ ecosystem }) {
197218
+ return ecosystem ?? "NPM";
197219
+ }
197220
+ var ADVISORY_ECOSYSTEMS = [
197221
+ "COMPOSER",
197222
+ "ERLANG",
197223
+ "ACTIONS",
197224
+ "GO",
197225
+ "MAVEN",
197226
+ "NPM",
197227
+ "NUGET",
197228
+ "PIP",
197229
+ "PUB",
197230
+ "RUBYGEMS",
197231
+ "RUST",
197232
+ "SWIFT"
197233
+ ];
197234
+ var ADVISORY_SEVERITIES = [
197235
+ "INFO",
197236
+ "LOW",
197237
+ "MODERATE",
197238
+ "HIGH",
197239
+ "CRITICAL"
197240
+ ];
197241
+ var ADVISORY_SEVERITIES_SORTED = ADVISORY_SEVERITIES.toReversed();
197242
+ function toPlainDependencyTree(dependencyTree) {
197243
+ function pickNode(node) {
197244
+ return i3(node, ["packageName", "version", "dependencies", "resolvedType"]);
197245
+ }
197246
+ return {
197247
+ ...pickNode(dependencyTree),
197248
+ transitiveDependencies: Object.fromEntries(
197249
+ Object.entries(dependencyTree.transitiveDependencies).map(([key, value]) => [key, pickNode(value)])
197250
+ ),
197251
+ ecosystem: dependencyTree.ecosystem
197252
+ };
197253
+ }
197254
+
197216
197255
  // ../web-compat-utils/src/vulnerability-diff-utils.ts
197217
197256
  function vulnerabilitiesDiff(oldVulnerabilities, newVulnerabilities, dismissedVulnerabilities = []) {
197218
197257
  const changedVulnerabilityWithReason = [];
@@ -198287,37 +198326,6 @@ function isShortestPath(root3, vulnPath) {
198287
198326
  // ../web-compat-utils/src/analysis-error-keys.ts
198288
198327
  var CLI_ANALYSIS_ERROR_MESSAGE = "Sharing log due to analysis error";
198289
198328
 
198290
- // ../web-compat-utils/src/dependency-tree.ts
198291
- function getEcosystem({ ecosystem }) {
198292
- return ecosystem ?? "NPM";
198293
- }
198294
- var ADVISORY_ECOSYSTEMS = [
198295
- "COMPOSER",
198296
- "ERLANG",
198297
- "ACTIONS",
198298
- "GO",
198299
- "MAVEN",
198300
- "NPM",
198301
- "NUGET",
198302
- "PIP",
198303
- "PUB",
198304
- "RUBYGEMS",
198305
- "RUST",
198306
- "SWIFT"
198307
- ];
198308
- function toPlainDependencyTree(dependencyTree) {
198309
- function pickNode(node) {
198310
- return i3(node, ["packageName", "version", "dependencies", "resolvedType"]);
198311
- }
198312
- return {
198313
- ...pickNode(dependencyTree),
198314
- transitiveDependencies: Object.fromEntries(
198315
- Object.entries(dependencyTree.transitiveDependencies).map(([key, value]) => [key, pickNode(value)])
198316
- ),
198317
- ecosystem: dependencyTree.ecosystem
198318
- };
198319
- }
198320
-
198321
198329
  // ../web-compat-utils/src/vuln-chain-detail-utils.ts
198322
198330
  var ROOT_NODE_STR = "";
198323
198331
  function augmentWithParentsMap(d3) {
@@ -211976,13 +211984,13 @@ import { join as join16 } from "path";
211976
211984
  var { memoize: memoize3 } = import_lodash14.default;
211977
211985
  var memoizedParseShellArgs = memoize3(parseShellArgs);
211978
211986
  var MAVEN_PUBLIC_REPOSITORIES = [
211979
- "https://repo1.maven.org/maven2",
211980
- "https://packages.atlassian.com/artifactory/maven-atlassian-external",
211981
- "https://maven.wso2.org/nexus/content/repositories/releases",
211982
- "https://repository.jboss.org/nexus/content/repositories/ea",
211983
- "https://maven.pkg.jetbrains.space/public/p/ktor/eap",
211984
- "https://maven.wso2.org/nexus/content/repositories/public",
211985
- "https://nexus.bedatadriven.com/content/groups/public"
211987
+ "https://repo1.maven.org/maven2/",
211988
+ "https://packages.atlassian.com/artifactory/maven-atlassian-external/",
211989
+ "https://maven.wso2.org/nexus/content/repositories/releases/",
211990
+ "https://repository.jboss.org/nexus/content/repositories/ea/",
211991
+ "https://maven.pkg.jetbrains.space/public/p/ktor/eap/",
211992
+ "https://maven.wso2.org/nexus/content/repositories/public/",
211993
+ "https://nexus.bedatadriven.com/content/groups/public/"
211986
211994
  ];
211987
211995
  async function findRepositoriesForMavenPackageAndVersion(groupId, artifactId, version3) {
211988
211996
  try {
@@ -212008,17 +212016,17 @@ async function findRepositoriesForMavenPackageAndVersion(groupId, artifactId, ve
212008
212016
  );
212009
212017
  return availableRepos.length ? availableRepos : void 0;
212010
212018
  }
212019
+ function getUrlForProject(repository, groupId, artifactId) {
212020
+ return new URL(`${groupId.replaceAll(".", "/")}/${artifactId}/`, repository).href;
212021
+ }
212011
212022
  function getUrlForPackage(repository, groupId, artifactId, version3) {
212012
- return `${repository.endsWith("/") ? repository.slice(0, -1) : repository}/${groupId.replaceAll(
212013
- ".",
212014
- "/"
212015
- )}/${artifactId}/${version3}/`;
212023
+ return new URL(`${version3}/`, getUrlForProject(repository, groupId, artifactId)).href;
212016
212024
  }
212017
212025
  function getUrlForArtifact(repository, groupId, artifactId, type, classifier, version3) {
212018
- return `${repository.endsWith("/") ? repository.slice(0, -1) : repository}/${groupId.replaceAll(
212019
- ".",
212020
- "/"
212021
- )}/${artifactId}/${version3}/${artifactId}-${version3}${classifier ? `-${classifier}` : ""}.${type ?? "jar"}`;
212026
+ return new URL(
212027
+ `${artifactId}-${version3}${classifier ? `-${classifier}` : ""}.${type ?? "jar"}`,
212028
+ getUrlForPackage(repository, groupId, artifactId, version3)
212029
+ ).href;
212022
212030
  }
212023
212031
 
212024
212032
  // ../security-auditor/security-auditor-api/src/vulnerability-patterns-helper/get-interesting-urls-for-vulnerability.ts
@@ -213327,7 +213335,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
213327
213335
  }
213328
213336
 
213329
213337
  // dist/version.js
213330
- var version2 = "14.9.2";
213338
+ var version2 = "14.9.5";
213331
213339
 
213332
213340
  // dist/cli-core.js
213333
213341
  var { omit, partition, pick } = import_lodash15.default;
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@coana-tech/cli",
3
- "version": "14.9.2",
3
+ "version": "14.9.5",
4
4
  "description": "Coana CLI",
5
5
  "type": "module",
6
6
  "bin": {