@codacy/tools-bandit-1 0.3.0 → 0.5.0

package/dist/index.js

@@ -668,6 +668,18 @@ var patterns_default = [
   }
 ];
 
+// src/metadata.ts
+var descriptor = {
+  id: "Bandit",
+  displayName: "Bandit",
+  preferredVersion: "1.8.3",
+  languages: ["Python"],
+  filePatterns: ["**/*.py"],
+  supportedOS: ["linux", "darwin"],
+  supportedArch: ["x64", "arm64"],
+  supportedRunners: ["local", "container"]
+};
+
 // src/adapter.ts
 var TOOL_ID = "Bandit";
 var ADAPTER_ID = "bandit-1";
@@ -695,37 +707,6 @@ function mapConfidence(confidence) {
       return 1;
   }
 }
-function getLineContent(lines, lineNumber) {
-  return lines[lineNumber - 1] ?? "";
-}
-async function readFileLines(filePath) {
-  try {
-    const content = await import_promises.default.readFile(filePath, "utf-8");
-    return content.split("\n");
-  } catch {
-    return [];
-  }
-}
-function buildResult(startedAt, completedAt, issues, errors, filesAnalyzed) {
-  const durationMs = completedAt.getTime() - startedAt.getTime();
-  return {
-    metadata: {
-      startedAt: startedAt.toISOString(),
-      completedAt: completedAt.toISOString(),
-      durationMs
-    },
-    issues,
-    errors,
-    summary: {
-      toolId: TOOL_ID,
-      status: errors.some((e) => e.level === "error") ? "partial" : "success",
-      issueCount: issues.length,
-      errorCount: errors.length,
-      durationMs,
-      filesAnalyzed
-    }
-  };
-}
 var CONFIG_FILE_CANDIDATES = [".bandit", "bandit.yml", "pyproject.toml"];
 async function resolveBinaryPath(ctx) {
   const venvDir = (0, import_tooling.getVenvDir)(ctx.globalDir, ADAPTER_ID);
@@ -745,16 +726,9 @@ function buildMessage(result) {
   return base;
 }
 var adapter = {
-  id: TOOL_ID,
-  displayName: "Bandit",
-  preferredVersion: "1.8.3",
+  ...descriptor,
   compatibleVersions: ">=1.7.0",
   website: "https://bandit.readthedocs.io/",
-  languages: ["Python"],
-  filePatterns: ["**/*.py"],
-  supportedOS: ["linux", "darwin"],
-  supportedArch: ["x64", "arm64"],
-  supportedRunners: ["local", "container"],
   prerequisites: [
     {
       name: "Python",
@@ -935,7 +909,7 @@ var adapter = {
     const issues = [];
     const errors = [];
     if (ctx.targetFiles.length === 0) {
-      return buildResult(startedAt, /* @__PURE__ */ new Date(), issues, errors, 0);
+      return (0, import_tooling.buildResult)(TOOL_ID, startedAt, /* @__PURE__ */ new Date(), issues, errors, 0);
     }
     const binary = await resolveBinaryPath(ctx);
     const absoluteFiles = ctx.targetFiles.map((f) => import_path.default.resolve(ctx.repositoryRoot, f));
@@ -948,11 +922,6 @@ var adapter = {
       } else {
         args.push("-c", configPath);
       }
-    } else if (codacyConfig.patterns.length === 0) {
-      ctx.logger.info("Skipping analysis: no local config and no patterns enabled", {
-        toolId: TOOL_ID
-      });
-      return buildResult(startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
     }
     args.push(...absoluteFiles);
     try {
@@ -968,10 +937,10 @@ var adapter = {
           message: `bandit exited with code ${exitCode}${stderr ? `: ${stderr.trim()}` : ""}`,
           level: "error"
         });
-        return buildResult(startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
+        return (0, import_tooling.buildResult)(TOOL_ID, startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
       }
       if (!stdout.trim()) {
-        return buildResult(startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
+        return (0, import_tooling.buildResult)(TOOL_ID, startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
       }
       let banditOutput;
       try {
@@ -984,7 +953,7 @@ var adapter = {
           message: `Failed to parse bandit JSON output: ${err instanceof Error ? err.message : String(err)}`,
           level: "error"
         });
-        return buildResult(startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
+        return (0, import_tooling.buildResult)(TOOL_ID, startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
       }
       if (banditOutput.errors && banditOutput.errors.length > 0) {
         for (const banditError of banditOutput.errors) {
@@ -1006,7 +975,7 @@ var adapter = {
       }
       for (const [filePath, fileResults] of resultsByFile) {
         const absolutePath = import_path.default.isAbsolute(filePath) ? filePath : import_path.default.resolve(ctx.repositoryRoot, filePath);
-        const lines = await readFileLines(absolutePath);
+        const lines = await (0, import_tooling.readFileLines)(absolutePath);
         const relPath = import_path.default.relative(ctx.repositoryRoot, absolutePath);
         for (const result2 of fileResults) {
           const patternId = (0, import_tooling.buildPatternId)(TOOL_ID, result2.test_id);
@@ -1026,7 +995,7 @@ var adapter = {
             endColumn: result2.end_col_offset ? result2.end_col_offset + 1 : void 0,
             // 0-based → 1-based
             message: buildMessage(result2),
-            lineContent: getLineContent(lines, result2.line_number),
+            lineContent: (0, import_tooling.getLineContent)(lines, result2.line_number),
             multilineContent: (0, import_tooling.getMultilineContent)(lines, result2.line_number, endLine),
             category: meta.category,
             severity: meta.severity,
@@ -1054,7 +1023,14 @@ var adapter = {
         level: "error"
       });
     }
-    const result = buildResult(startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
+    const result = (0, import_tooling.buildResult)(
+      TOOL_ID,
+      startedAt,
+      /* @__PURE__ */ new Date(),
+      issues,
+      errors,
+      ctx.targetFiles.length
+    );
     ctx.logger.info("Analysis complete", {
       toolId: TOOL_ID,
       issueCount: result.summary.issueCount,

package/dist/metadata.d.ts

@@ -0,0 +1,13 @@
+import { AdapterDescriptor } from '@codacy/tooling';
+
+/**
+ * Lightweight adapter descriptor for lazy loading.
+ *
+ * This module contains only plain-data metadata fields and has zero heavy
+ * imports (no patterns.json, no runtime utilities). The CLI imports this
+ * at startup for adapter registration without loading the full adapter module.
+ */
+
+declare const descriptor: AdapterDescriptor;
+
+export { descriptor };

package/dist/metadata.js

@@ -0,0 +1,39 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/metadata.ts
+var metadata_exports = {};
+__export(metadata_exports, {
+  descriptor: () => descriptor
+});
+module.exports = __toCommonJS(metadata_exports);
+var descriptor = {
+  id: "Bandit",
+  displayName: "Bandit",
+  preferredVersion: "1.8.3",
+  languages: ["Python"],
+  filePatterns: ["**/*.py"],
+  supportedOS: ["linux", "darwin"],
+  supportedArch: ["x64", "arm64"],
+  supportedRunners: ["local", "container"]
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  descriptor
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codacy/tools-bandit-1",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "description": "Bandit adapter — CLI-mode Python security linter",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -8,7 +8,7 @@
     "dist"
   ],
   "dependencies": {
-    "@codacy/tooling": "0.3.0"
+    "@codacy/tooling": "0.5.0"
   },
   "license": "MIT",
   "author": "Codacy <support@codacy.com> (https://www.codacy.com)",
@@ -21,8 +21,18 @@
   "engines": {
     "node": ">=20.0.0"
   },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./metadata": {
+      "types": "./dist/metadata.d.ts",
+      "default": "./dist/metadata.js"
+    }
+  },
   "scripts": {
-    "build": "tsup src/index.ts --format cjs --dts --clean",
+    "build": "tsup src/index.ts src/metadata.ts --format cjs --dts --clean",
     "test": "vitest run",
     "lint": "eslint src/",
     "clean": "rm -rf dist",