@code-pushup/js-packages-plugin 0.49.0 → 0.50.0

package/README.md

@@ -45,7 +45,7 @@ It supports the following package managers:
      // ...
      plugins: [
        // ...
-       await jsPackagesPlugin({ packageManager: 'npm' }), // replace with your package manager
+       await jsPackagesPlugin(), // the package manager is automatically derived from your file system. Use { packageManager: 'npm' } to configure it.
      ],
    };
    ```
@@ -59,7 +59,7 @@ It supports the following package managers:
      // ...
      plugins: [
        // ...
-       await jsPackagesPlugin({ packageManager: ['yarn-classic'], checks: ['audit'], dependencyGroups: ['prod'] }),
+       await jsPackagesPlugin({ packageManager: 'yarn-classic', checks: ['audit'], dependencyGroups: ['prod'] }),
      ],
    };
    ```

package/bin.js

@@ -670,6 +670,8 @@ var auditResultSchema = scorableWithPluginMetaSchema.merge(
 );
 var reportsDiffSchema = z15.object({
   commits: makeComparisonSchema(commitSchema).nullable().describe("Commits identifying compared reports"),
+  portalUrl: urlSchema.optional().describe("Link to comparison page in Code PushUp portal"),
+  label: z15.string().optional().describe("Label (e.g. project name)"),
   categories: makeArraysComparisonSchema(
     categoryDiffSchema,
     categoryResultSchema,
@@ -698,7 +700,9 @@ var reportsDiffSchema = z15.object({
 );
 
 // packages/utils/src/lib/execute-process.ts
-import { spawn } from "node:child_process";
+import {
+  spawn
+} from "node:child_process";
 
 // packages/utils/src/lib/reports/utils.ts
 import ansis from "ansis";
@@ -725,25 +729,29 @@ var ProcessError = class extends Error {
   }
 };
 function executeProcess(cfg) {
-  const { observer, cwd, command, args, ignoreExitCode = false } = cfg;
-  const { onStdout, onError, onComplete } = observer ?? {};
+  const { command, args, observer, ignoreExitCode = false, ...options } = cfg;
+  const { onStdout, onStderr, onError, onComplete } = observer ?? {};
   const date = (/* @__PURE__ */ new Date()).toISOString();
   const start = performance.now();
   return new Promise((resolve, reject) => {
-    const process2 = spawn(command, args, { cwd, shell: true });
+    const spawnedProcess = spawn(command, args ?? [], {
+      shell: true,
+      ...options
+    });
     let stdout = "";
     let stderr = "";
-    process2.stdout.on("data", (data) => {
+    spawnedProcess.stdout.on("data", (data) => {
       stdout += String(data);
-      onStdout?.(String(data));
+      onStdout?.(String(data), spawnedProcess);
     });
-    process2.stderr.on("data", (data) => {
+    spawnedProcess.stderr.on("data", (data) => {
       stderr += String(data);
+      onStderr?.(String(data), spawnedProcess);
     });
-    process2.on("error", (err) => {
+    spawnedProcess.on("error", (err) => {
       stderr += err.toString();
     });
-    process2.on("close", (code2) => {
+    spawnedProcess.on("close", (code2) => {
       const timings = { date, duration: calcDuration(start) };
       if (code2 === 0 || ignoreExitCode) {
         onComplete?.();
@@ -893,17 +901,23 @@ import { MultiProgressBars } from "multi-progress-bars";
 import { MarkdownDocument as MarkdownDocument3, md as md4 } from "build-md";
 
 // packages/utils/src/lib/reports/formatting.ts
-import { MarkdownDocument, md as md2 } from "build-md";
+import {
+  MarkdownDocument,
+  md as md2
+} from "build-md";
 
 // packages/utils/src/lib/reports/generate-md-report-categoy-section.ts
 import { MarkdownDocument as MarkdownDocument2, md as md3 } from "build-md";
 
 // packages/utils/src/lib/reports/generate-md-reports-diff.ts
 import {
-  MarkdownDocument as MarkdownDocument4,
-  md as md5
+  MarkdownDocument as MarkdownDocument5,
+  md as md6
 } from "build-md";
 
+// packages/utils/src/lib/reports/generate-md-reports-diff-utils.ts
+import { MarkdownDocument as MarkdownDocument4, md as md5 } from "build-md";
+
 // packages/utils/src/lib/reports/log-stdout-summary.ts
 import { bold as bold4, cyan, cyanBright, green as green2, red } from "ansis";
 
@@ -961,9 +975,7 @@ var jsPackagesPluginConfigSchema = z16.object({
   checks: z16.array(packageCommandSchema, {
     description: "Package manager commands to be run. Defaults to both audit and outdated."
   }).min(1).default(["audit", "outdated"]),
-  packageManager: packageManagerIdSchema.describe(
-    "Package manager to be used."
-  ),
+  packageManager: packageManagerIdSchema.describe("Package manager to be used.").optional(),
   dependencyGroups: z16.array(dependencyGroupSchema).min(1).default(["prod", "dev"]),
   auditLevelMapping: z16.record(packageAuditLevelSchema, issueSeveritySchema, {
     description: "Mapping of audit levels to issue severity. Custom mapping or overrides may be entered manually, otherwise has a default preset."
@@ -1493,7 +1505,7 @@ var packageManagers = {
 };
 
 // packages/plugin-js-packages/src/lib/runner/audit/transform.ts
-import { md as md6 } from "build-md";
+import { md as md7 } from "build-md";
 
 // packages/plugin-js-packages/src/lib/runner/audit/constants.ts
 var auditScoreModifiers = {
@@ -1545,16 +1557,16 @@ function vulnerabilitiesToIssues(vulnerabilities, auditLevelMapping) {
     return [];
   }
   return vulnerabilities.map((detail) => {
-    const versionRange = detail.versionRange === "*" ? md6`${md6.bold("all")} versions` : md6`versions ${md6.bold(detail.versionRange)}`;
-    const directDependency = typeof detail.directDependency === "string" && detail.directDependency !== "" ? md6.code(detail.directDependency) : "";
-    const depHierarchy = directDependency ? md6`${directDependency}'s dependency ${md6.code(detail.name)}` : md6`${md6.code(detail.name)} dependency`;
-    const vulnerabilitySummary = md6`has a ${md6.bold(
+    const versionRange = detail.versionRange === "*" ? md7`${md7.bold("all")} versions` : md7`versions ${md7.bold(detail.versionRange)}`;
+    const directDependency = typeof detail.directDependency === "string" && detail.directDependency !== "" ? md7.code(detail.directDependency) : "";
+    const depHierarchy = directDependency ? md7`${directDependency}'s dependency ${md7.code(detail.name)}` : md7`${md7.code(detail.name)} dependency`;
+    const vulnerabilitySummary = md7`has a ${md7.bold(
       detail.severity
     )} vulnerability in ${versionRange}.`;
     const fixInfo = detail.fixInformation ? ` ${detail.fixInformation}` : "";
-    const additionalInfo = detail.title != null && detail.url != null ? md6` More information: ${md6.link(detail.url, detail.title)}` : "";
+    const additionalInfo = detail.title != null && detail.url != null ? md7` More information: ${md7.link(detail.url, detail.title)}` : "";
     return {
-      message: md6`${depHierarchy} ${vulnerabilitySummary}${fixInfo}${additionalInfo}`.toString(),
+      message: md7`${depHierarchy} ${vulnerabilitySummary}${fixInfo}${additionalInfo}`.toString(),
       severity: auditLevelMapping[detail.severity]
     };
   });
@@ -1571,7 +1583,7 @@ var PLUGIN_CONFIG_PATH = join2(
 );
 
 // packages/plugin-js-packages/src/lib/runner/outdated/transform.ts
-import { md as md7 } from "build-md";
+import { md as md8 } from "build-md";
 import { clean, diff, neq } from "semver";
 
 // packages/plugin-js-packages/src/lib/runner/outdated/constants.ts
@@ -1642,11 +1654,11 @@ function outdatedToIssues(dependencies) {
   return dependencies.map((dep) => {
     const { name, current, latest, url } = dep;
     const outdatedLevel = diff(current, latest);
-    const packageReference = url == null ? md7.code(name) : md7.link(url, md7.code(name));
+    const packageReference = url == null ? md8.code(name) : md8.link(url, md8.code(name));
     return {
-      message: md7`Package ${packageReference} requires a ${md7.bold(
+      message: md8`Package ${packageReference} requires a ${md8.bold(
         outdatedLevel
-      )} update from ${md7.bold(current)} to ${md7.bold(latest)}.`.toString(),
+      )} update from ${md8.bold(current)} to ${md8.bold(latest)}.`.toString(),
       severity: outdatedSeverity[outdatedLevel]
     };
   });

package/index.js

@@ -1,10 +1,10 @@
 // packages/plugin-js-packages/src/lib/js-packages-plugin.ts
-import { dirname as dirname2, join as join3 } from "node:path";
+import { dirname as dirname2, join as join4 } from "node:path";
 import { fileURLToPath } from "node:url";
 
 // packages/plugin-js-packages/package.json
 var name = "@code-pushup/js-packages-plugin";
-var version = "0.49.0";
+var version = "0.50.0";
 
 // packages/plugin-js-packages/src/lib/config.ts
 import { z as z16 } from "zod";
@@ -677,6 +677,8 @@ var auditResultSchema = scorableWithPluginMetaSchema.merge(
 );
 var reportsDiffSchema = z15.object({
   commits: makeComparisonSchema(commitSchema).nullable().describe("Commits identifying compared reports"),
+  portalUrl: urlSchema.optional().describe("Link to comparison page in Code PushUp portal"),
+  label: z15.string().optional().describe("Label (e.g. project name)"),
   categories: makeArraysComparisonSchema(
     categoryDiffSchema,
     categoryResultSchema,
@@ -765,9 +767,7 @@ var jsPackagesPluginConfigSchema = z16.object({
   checks: z16.array(packageCommandSchema, {
     description: "Package manager commands to be run. Defaults to both audit and outdated."
   }).min(1).default(["audit", "outdated"]),
-  packageManager: packageManagerIdSchema.describe(
-    "Package manager to be used."
-  ),
+  packageManager: packageManagerIdSchema.describe("Package manager to be used.").optional(),
   dependencyGroups: z16.array(dependencyGroupSchema).min(1).default(["prod", "dev"]),
   auditLevelMapping: z16.record(packageAuditLevelSchema, issueSeveritySchema, {
     description: "Mapping of audit levels to issue severity. Custom mapping or overrides may be entered manually, otherwise has a default preset."
@@ -775,6 +775,11 @@ var jsPackagesPluginConfigSchema = z16.object({
   packageJsonPaths: packageJsonPathSchema
 });
 
+// packages/utils/src/lib/execute-process.ts
+import {
+  spawn
+} from "node:child_process";
+
 // packages/utils/src/lib/reports/utils.ts
 import ansis from "ansis";
 import { md } from "build-md";
@@ -782,6 +787,60 @@ import { md } from "build-md";
 // packages/utils/src/lib/reports/constants.ts
 var TERMINAL_WIDTH = 80;
 
+// packages/utils/src/lib/reports/utils.ts
+function calcDuration(start, stop) {
+  return Math.round((stop ?? performance.now()) - start);
+}
+
+// packages/utils/src/lib/execute-process.ts
+var ProcessError = class extends Error {
+  code;
+  stderr;
+  stdout;
+  constructor(result) {
+    super(result.stderr);
+    this.code = result.code;
+    this.stderr = result.stderr;
+    this.stdout = result.stdout;
+  }
+};
+function executeProcess(cfg) {
+  const { command, args, observer, ignoreExitCode = false, ...options } = cfg;
+  const { onStdout, onStderr, onError, onComplete } = observer ?? {};
+  const date = (/* @__PURE__ */ new Date()).toISOString();
+  const start = performance.now();
+  return new Promise((resolve, reject) => {
+    const spawnedProcess = spawn(command, args ?? [], {
+      shell: true,
+      ...options
+    });
+    let stdout = "";
+    let stderr = "";
+    spawnedProcess.stdout.on("data", (data) => {
+      stdout += String(data);
+      onStdout?.(String(data), spawnedProcess);
+    });
+    spawnedProcess.stderr.on("data", (data) => {
+      stderr += String(data);
+      onStderr?.(String(data), spawnedProcess);
+    });
+    spawnedProcess.on("error", (err) => {
+      stderr += err.toString();
+    });
+    spawnedProcess.on("close", (code2) => {
+      const timings = { date, duration: calcDuration(start) };
+      if (code2 === 0 || ignoreExitCode) {
+        onComplete?.();
+        resolve({ code: code2, stdout, stderr, ...timings });
+      } else {
+        const errorMsg = new ProcessError({ code: code2, stdout, stderr, ...timings });
+        onError?.(errorMsg);
+        reject(errorMsg);
+      }
+    });
+  });
+}
+
 // packages/utils/src/lib/file-system.ts
 import { bold, gray } from "ansis";
 import { bundleRequire } from "bundle-require";
@@ -816,6 +875,14 @@ function logListItem(args) {
 }
 
 // packages/utils/src/lib/file-system.ts
+async function fileExists(path) {
+  try {
+    const stats = await stat(path);
+    return stats.isFile();
+  } catch {
+    return false;
+  }
+}
 async function ensureDirectoryExists(baseDir) {
   try {
     await mkdir(baseDir, { recursive: true });
@@ -870,17 +937,23 @@ import { MultiProgressBars } from "multi-progress-bars";
 import { MarkdownDocument as MarkdownDocument3, md as md4 } from "build-md";
 
 // packages/utils/src/lib/reports/formatting.ts
-import { MarkdownDocument, md as md2 } from "build-md";
+import {
+  MarkdownDocument,
+  md as md2
+} from "build-md";
 
 // packages/utils/src/lib/reports/generate-md-report-categoy-section.ts
 import { MarkdownDocument as MarkdownDocument2, md as md3 } from "build-md";
 
 // packages/utils/src/lib/reports/generate-md-reports-diff.ts
 import {
-  MarkdownDocument as MarkdownDocument4,
-  md as md5
+  MarkdownDocument as MarkdownDocument5,
+  md as md6
 } from "build-md";
 
+// packages/utils/src/lib/reports/generate-md-reports-diff-utils.ts
+import { MarkdownDocument as MarkdownDocument4, md as md5 } from "build-md";
+
 // packages/utils/src/lib/reports/log-stdout-summary.ts
 import { bold as bold4, cyan, cyanBright, green as green2, red } from "ansis";
 
@@ -1369,7 +1442,7 @@ import { writeFile } from "node:fs/promises";
 import { dirname } from "node:path";
 
 // packages/plugin-js-packages/src/lib/runner/audit/transform.ts
-import { md as md6 } from "build-md";
+import { md as md7 } from "build-md";
 
 // packages/plugin-js-packages/src/lib/runner/constants.ts
 import { join as join2 } from "node:path";
@@ -1382,7 +1455,7 @@ var PLUGIN_CONFIG_PATH = join2(
 );
 
 // packages/plugin-js-packages/src/lib/runner/outdated/transform.ts
-import { md as md7 } from "build-md";
+import { md as md8 } from "build-md";
 import { clean, diff, neq } from "semver";
 
 // packages/plugin-js-packages/src/lib/runner/outdated/constants.ts
@@ -1408,28 +1481,113 @@ async function createRunnerConfig(scriptPath, config) {
   };
 }
 
+// packages/plugin-js-packages/src/lib/package-managers/derive-package-manager.ts
+import { readFile as readFile2 } from "node:fs/promises";
+import { join as join3 } from "node:path";
+
+// packages/plugin-js-packages/src/lib/package-managers/derive-yarn.ts
+async function deriveYarnVersion() {
+  const { stdout } = await executeProcess({
+    command: "yarn",
+    args: ["-v"]
+  });
+  const yarnVersion = Number.parseInt(stdout.toString().trim().at(0) ?? "", 10);
+  if (yarnVersion >= 2) {
+    return "yarn-modern";
+  } else if (yarnVersion === 1) {
+    return "yarn-classic";
+  }
+  return false;
+}
+
+// packages/plugin-js-packages/src/lib/package-managers/derive-package-manager.ts
+async function derivePackageManagerInPackageJson(currentDir = process.cwd()) {
+  if (await fileExists(join3(currentDir, "package.json"))) {
+    const content = JSON.parse(
+      (await readFile2(join3("package.json"))).toString()
+    );
+    const { packageManager: packageManagerData = "" } = content;
+    const [manager = "", version2 = ""] = packageManagerData.split("@");
+    if (manager === "npm") {
+      return manager;
+    }
+    if (manager === "pnpm") {
+      return manager;
+    }
+    if (manager === "yarn") {
+      const majorVersion = Number(version2.split(".")[0]);
+      return majorVersion > 1 ? "yarn-modern" : "yarn-classic";
+    }
+  }
+  return false;
+}
+async function derivePackageManager(currentDir = process.cwd()) {
+  const pkgManagerFromPackageJson = await derivePackageManagerInPackageJson(
+    currentDir
+  );
+  if (pkgManagerFromPackageJson) {
+    return pkgManagerFromPackageJson;
+  }
+  if (await fileExists(join3(currentDir, "package-lock.json"))) {
+    return "npm";
+  } else if (await fileExists(join3(currentDir, "pnpm-lock.yaml"))) {
+    return "pnpm";
+  } else if (await fileExists(join3(currentDir, "yarn.lock"))) {
+    const yarnVersion = await deriveYarnVersion();
+    if (yarnVersion) {
+      return yarnVersion;
+    }
+  }
+  throw new Error(
+    "Could not detect package manager. Please provide it in the js-packages plugin config."
+  );
+}
+
+// packages/plugin-js-packages/src/lib/utils.ts
+async function normalizeConfig(config) {
+  const jsPackagesPluginConfig = jsPackagesPluginConfigSchema.parse(
+    config ?? {}
+  );
+  const {
+    packageManager,
+    dependencyGroups: dependencyGroupsCfg = [],
+    checks: checksCfg = [],
+    ...jsPackagesPluginConfigRest
+  } = jsPackagesPluginConfig;
+  const checks = [...new Set(checksCfg)];
+  const depGroups = [...new Set(dependencyGroupsCfg)];
+  const pm = packageManagers[packageManager ?? await derivePackageManager()];
+  return {
+    ...jsPackagesPluginConfigRest,
+    packageManager: pm,
+    checks,
+    depGroups
+  };
+}
+
 // packages/plugin-js-packages/src/lib/js-packages-plugin.ts
 async function jsPackagesPlugin(config) {
-  const jsPackagesPluginConfig = jsPackagesPluginConfigSchema.parse(config);
-  const checks = [...new Set(jsPackagesPluginConfig.checks)];
-  const depGroups = [...new Set(jsPackagesPluginConfig.dependencyGroups)];
-  const id = jsPackagesPluginConfig.packageManager;
-  const pm = packageManagers[id];
-  const runnerScriptPath = join3(
+  const { packageManager, checks, depGroups, ...jsPackagesPluginConfigRest } = await normalizeConfig(config);
+  const runnerScriptPath = join4(
     fileURLToPath(dirname2(import.meta.url)),
     "bin.js"
   );
   return {
     slug: "js-packages",
     title: "JS Packages",
-    icon: pm.icon,
+    icon: packageManager.icon,
     description: "This plugin runs audit to uncover vulnerabilities and lists outdated dependencies. It supports npm, yarn classic, yarn modern, and pnpm package managers.",
-    docsUrl: pm.docs.homepage,
+    docsUrl: packageManager.docs.homepage,
     packageName: name,
     version,
-    audits: createAudits(id, checks, depGroups),
-    groups: createGroups(id, checks, depGroups),
-    runner: await createRunnerConfig(runnerScriptPath, jsPackagesPluginConfig)
+    audits: createAudits(packageManager.slug, checks, depGroups),
+    groups: createGroups(packageManager.slug, checks, depGroups),
+    runner: await createRunnerConfig(runnerScriptPath, {
+      ...jsPackagesPluginConfigRest,
+      checks,
+      packageManager: packageManager.slug,
+      dependencyGroups: depGroups
+    })
   };
 }
 function createGroups(id, checks, depGroups) {

package/package.json

@@ -1,15 +1,16 @@
 {
   "name": "@code-pushup/js-packages-plugin",
-  "version": "0.49.0",
+  "version": "0.50.0",
+  "description": "Code PushUp plugin for JavaScript packages 🛡️",
   "dependencies": {
-    "@code-pushup/models": "0.49.0",
-    "@code-pushup/utils": "0.49.0",
+    "@code-pushup/models": "0.50.0",
+    "@code-pushup/utils": "0.50.0",
     "build-md": "^0.4.1",
     "semver": "^7.6.0",
     "zod": "^3.22.4"
   },
   "license": "MIT",
-  "homepage": "https://github.com/code-pushup/cli#readme",
+  "homepage": "https://github.com/code-pushup/cli/tree/main/packages/plugin-js-packages#readme",
   "bugs": {
     "url": "https://github.com/code-pushup/cli/issues"
   },
@@ -18,33 +19,6 @@
     "url": "git+https://github.com/code-pushup/cli.git",
     "directory": "packages/plugin-js-packages"
   },
-  "contributors": [
-    {
-      "name": "Igor Katsuba",
-      "email": "igor@katsuba.dev",
-      "url": "https://katsuba.dev"
-    },
-    {
-      "name": "Kateřina Pilátová",
-      "email": "katerina.pilatova@flowup.cz",
-      "url": "https://github.com/Tlacenka"
-    },
-    {
-      "name": "Matěj Chalk",
-      "email": "matej.chalk@flowup.cz",
-      "url": "https://github.com/matejchalk"
-    },
-    {
-      "name": "Michael Hladky",
-      "email": "michael.hladky@push-based.io",
-      "url": "https://push-based.io"
-    },
-    {
-      "name": "Michael Seredenko",
-      "email": "misha.seredenko@push-based.io",
-      "url": "https://github.com/MishaSeredenkoPushBased"
-    }
-  ],
   "type": "module",
   "main": "./index.js",
   "types": "./src/index.d.ts"

package/src/lib/config.d.ts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { IssueSeverity } from '@code-pushup/models';
+import { type IssueSeverity } from '@code-pushup/models';
 export declare const dependencyGroups: readonly ["prod", "dev", "optional"];
 export type DependencyGroup = (typeof dependencyGroups)[number];
 declare const packageCommandSchema: z.ZodEnum<["audit", "outdated"]>;
@@ -21,7 +21,7 @@ export type AuditSeverity = Record<PackageAuditLevel, IssueSeverity>;
 export declare function fillAuditLevelMapping(mapping: Partial<AuditSeverity>): AuditSeverity;
 export declare const jsPackagesPluginConfigSchema: z.ZodObject<{
     checks: z.ZodDefault<z.ZodArray<z.ZodEnum<["audit", "outdated"]>, "many">>;
-    packageManager: z.ZodEnum<["npm", "yarn-classic", "yarn-modern", "pnpm"]>;
+    packageManager: z.ZodOptional<z.ZodEnum<["npm", "yarn-classic", "yarn-modern", "pnpm"]>>;
     dependencyGroups: z.ZodDefault<z.ZodArray<z.ZodEnum<["prod", "dev", "optional"]>, "many">>;
     auditLevelMapping: z.ZodEffects<z.ZodDefault<z.ZodRecord<z.ZodEnum<["critical", "high", "moderate", "low", "info"]>, z.ZodEnum<["info", "warning", "error"]>>>, AuditSeverity, Partial<Record<"info" | "critical" | "high" | "moderate" | "low", "info" | "warning" | "error">> | undefined>;
     packageJsonPaths: z.ZodDefault<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodObject<{
@@ -33,15 +33,15 @@ export declare const jsPackagesPluginConfigSchema: z.ZodObject<{
     }>]>>;
 }, "strip", z.ZodTypeAny, {
     checks: ("audit" | "outdated")[];
-    packageManager: "npm" | "pnpm" | "yarn-classic" | "yarn-modern";
     dependencyGroups: ("prod" | "dev" | "optional")[];
     auditLevelMapping: AuditSeverity;
     packageJsonPaths: string[] | {
         autoSearch: true;
     };
+    packageManager?: "npm" | "pnpm" | "yarn-classic" | "yarn-modern" | undefined;
 }, {
-    packageManager: "npm" | "pnpm" | "yarn-classic" | "yarn-modern";
     checks?: ("audit" | "outdated")[] | undefined;
+    packageManager?: "npm" | "pnpm" | "yarn-classic" | "yarn-modern" | undefined;
     dependencyGroups?: ("prod" | "dev" | "optional")[] | undefined;
     auditLevelMapping?: Partial<Record<"info" | "critical" | "high" | "moderate" | "low", "info" | "warning" | "error">> | undefined;
     packageJsonPaths?: string[] | {
@@ -49,5 +49,5 @@ export declare const jsPackagesPluginConfigSchema: z.ZodObject<{
     } | undefined;
 }>;
 export type JSPackagesPluginConfig = z.input<typeof jsPackagesPluginConfigSchema>;
-export type FinalJSPackagesPluginConfig = z.infer<typeof jsPackagesPluginConfigSchema>;
+export type FinalJSPackagesPluginConfig = Required<z.infer<typeof jsPackagesPluginConfigSchema>>;
 export {};

package/src/lib/constants.d.ts

@@ -1,6 +1,6 @@
-import { IssueSeverity } from '@code-pushup/models';
+import type { IssueSeverity } from '@code-pushup/models';
 import type { DependencyGroup, PackageAuditLevel } from './config';
-import { DependencyGroupLong } from './runner/outdated/types';
+import type { DependencyGroupLong } from './runner/outdated/types';
 export declare const defaultAuditLevelMapping: Record<PackageAuditLevel, IssueSeverity>;
 export declare const dependencyGroupToLong: Record<DependencyGroup, DependencyGroupLong>;
 export declare const dependencyGroupWeights: Record<DependencyGroup, number>;

package/src/lib/js-packages-plugin.d.ts

@@ -1,5 +1,5 @@
 import type { PluginConfig } from '@code-pushup/models';
-import { JSPackagesPluginConfig } from './config';
+import { type JSPackagesPluginConfig } from './config';
 /**
  * Instantiates Code PushUp JS packages plugin for core config.
  *
@@ -16,4 +16,4 @@ import { JSPackagesPluginConfig } from './config';
  *
  * @returns Plugin configuration.
  */
-export declare function jsPackagesPlugin(config: JSPackagesPluginConfig): Promise<PluginConfig>;
+export declare function jsPackagesPlugin(config?: JSPackagesPluginConfig): Promise<PluginConfig>;

package/src/lib/package-managers/derive-package-manager.d.ts

@@ -0,0 +1,3 @@
+import type { PackageManagerId } from '../config';
+export declare function derivePackageManagerInPackageJson(currentDir?: string): Promise<false | "npm" | "pnpm" | "yarn-classic" | "yarn-modern">;
+export declare function derivePackageManager(currentDir?: string): Promise<PackageManagerId>;

package/src/lib/package-managers/derive-yarn.d.ts

@@ -0,0 +1 @@
+export declare function deriveYarnVersion(): Promise<false | "yarn-classic" | "yarn-modern">;

package/src/lib/package-managers/index.d.ts

@@ -1,2 +1,2 @@
 export { packageManagers } from './package-managers';
-export { PackageManager } from './types';
+export type { PackageManager } from './types';

package/src/lib/package-managers/npm/audit-result.d.ts

@@ -1,5 +1,5 @@
-import { AuditResult } from '../../runner/audit/types';
-import { NpmAdvisory, NpmFixInformation, NpmVulnerabilities } from './types';
+import type { AuditResult } from '../../runner/audit/types';
+import type { NpmAdvisory, NpmFixInformation, NpmVulnerabilities } from './types';
 export declare function npmToAuditResult(output: string): AuditResult;
 export declare function npmToFixInformation(fixAvailable: boolean | NpmFixInformation): string;
 export declare function npmToAdvisory(name: string, vulnerabilities: NpmVulnerabilities, prevNodes?: Set<string>): NpmAdvisory | null;

package/src/lib/package-managers/npm/npm.d.ts

@@ -1,2 +1,2 @@
-import { PackageManager } from '../types';
+import type { PackageManager } from '../types';
 export declare const npmPackageManager: PackageManager;

package/src/lib/package-managers/npm/outdated-result.d.ts

@@ -1,2 +1,2 @@
-import { OutdatedResult } from '../../runner/outdated/types';
+import type { OutdatedResult } from '../../runner/outdated/types';
 export declare function npmToOutdatedResult(output: string): OutdatedResult;

package/src/lib/package-managers/npm/types.d.ts

@@ -1,6 +1,6 @@
-import { PackageAuditLevel } from '../../config';
-import { AuditSummary } from '../../runner/audit/types';
-import { DependencyGroupLong } from '../../runner/outdated/types';
+import type { PackageAuditLevel } from '../../config';
+import type { AuditSummary } from '../../runner/audit/types';
+import type { DependencyGroupLong } from '../../runner/outdated/types';
 export type NpmAdvisory = {
     title: string;
     url: string;

package/src/lib/package-managers/package-managers.d.ts

@@ -1,3 +1,3 @@
-import { PackageManagerId } from '../config';
-import { PackageManager } from './types';
+import type { PackageManagerId } from '../config';
+import type { PackageManager } from './types';
 export declare const packageManagers: Record<PackageManagerId, PackageManager>;

package/src/lib/package-managers/pnpm/audit-result.d.ts

@@ -1,3 +1,3 @@
-import { AuditResult } from '../../runner/audit/types';
+import type { AuditResult } from '../../runner/audit/types';
 export declare function pnpmToAuditResult(output: string): AuditResult;
 export declare function pnpmToDirectDependency(path: string): string | true;

package/src/lib/package-managers/pnpm/outdated-result.d.ts

@@ -1,2 +1,2 @@
-import { OutdatedResult } from '../../runner/outdated/types';
+import type { OutdatedResult } from '../../runner/outdated/types';
 export declare function pnpmToOutdatedResult(output: string): OutdatedResult;

package/src/lib/package-managers/pnpm/pnpm.d.ts

@@ -1,2 +1,2 @@
-import { PackageManager } from '../types';
+import type { PackageManager } from '../types';
 export declare const pnpmPackageManager: PackageManager;

package/src/lib/package-managers/pnpm/types.d.ts

@@ -1,5 +1,5 @@
-import { PackageAuditLevel } from '../../config';
-import { DependencyGroupLong } from '../../runner/outdated/types';
+import type { PackageAuditLevel } from '../../config';
+import type { DependencyGroupLong } from '../../runner/outdated/types';
 export type PnpmAuditAdvisory = {
     module_name: string;
     id: number;

package/src/lib/package-managers/types.d.ts

@@ -1,7 +1,7 @@
 import type { MaterialIcon } from '@code-pushup/models';
-import { DependencyGroup, PackageManagerId } from '../config';
-import { AuditResult } from '../runner/audit/types';
-import { OutdatedResult } from '../runner/outdated/types';
+import type { DependencyGroup, PackageManagerId } from '../config';
+import type { AuditResult } from '../runner/audit/types';
+import type { OutdatedResult } from '../runner/outdated/types';
 export type AuditResults = Partial<Record<DependencyGroup, AuditResult>>;
 export type PackageManager = {
     slug: PackageManagerId;

package/src/lib/package-managers/yarn-classic/audit-result.d.ts

@@ -1,2 +1,2 @@
-import { AuditResult } from '../../runner/audit/types';
+import type { AuditResult } from '../../runner/audit/types';
 export declare function yarnv1ToAuditResult(output: string): AuditResult;

package/src/lib/package-managers/yarn-classic/constants.d.ts

@@ -1,4 +1,4 @@
-import { OutdatedDependency } from '../../runner/outdated/types';
-import { Yarnv1FieldName } from './types';
+import type { OutdatedDependency } from '../../runner/outdated/types';
+import type { Yarnv1FieldName } from './types';
 export declare const outdatedtoFieldMapper: Record<keyof OutdatedDependency, Yarnv1FieldName>;
 export declare const REQUIRED_OUTDATED_FIELDS: Yarnv1FieldName[];

package/src/lib/package-managers/yarn-classic/outdated-result.d.ts

@@ -1,4 +1,4 @@
-import { OutdatedDependency, OutdatedResult } from '../../runner/outdated/types';
+import type { OutdatedDependency, OutdatedResult } from '../../runner/outdated/types';
 export declare function yarnv1ToOutdatedResult(output: string): OutdatedResult;
 export declare function validateOutdatedFields(head: string[]): boolean;
 export declare function getOutdatedFieldIndexes(all: string[]): Record<keyof OutdatedDependency, number>;

package/src/lib/package-managers/yarn-classic/types.d.ts

@@ -1,4 +1,4 @@
-import { PackageAuditLevel } from '../../config';
+import type { PackageAuditLevel } from '../../config';
 export type Yarnv1AuditAdvisory = {
     type: 'auditAdvisory';
     data: {

package/src/lib/package-managers/yarn-classic/yarn-classic.d.ts

@@ -1,2 +1,2 @@
-import { PackageManager } from '../types';
+import type { PackageManager } from '../types';
 export declare const yarnv1PackageManager: PackageManager;

package/src/lib/package-managers/yarn-modern/audit-result.d.ts

@@ -1,2 +1,2 @@
-import { AuditResult } from '../../runner/audit/types';
+import type { AuditResult } from '../../runner/audit/types';
 export declare function yarnv2ToAuditResult(output: string): AuditResult;

package/src/lib/package-managers/yarn-modern/outdated-result.d.ts

@@ -1,2 +1,2 @@
-import { OutdatedResult } from '../../runner/outdated/types';
+import type { OutdatedResult } from '../../runner/outdated/types';
 export declare function yarnv2ToOutdatedResult(output: string): OutdatedResult;

package/src/lib/package-managers/yarn-modern/types.d.ts

@@ -1,5 +1,5 @@
-import { PackageAuditLevel } from '../../config';
-import { DependencyGroupLong } from '../../runner/outdated/types';
+import type { PackageAuditLevel } from '../../config';
+import type { DependencyGroupLong } from '../../runner/outdated/types';
 export type Yarnv2AuditAdvisory = {
     module_name: string;
     severity: PackageAuditLevel;

package/src/lib/package-managers/yarn-modern/yarn-modern.d.ts

@@ -1,2 +1,2 @@
-import { PackageManager } from '../types';
+import type { PackageManager } from '../types';
 export declare const yarnv2PackageManager: PackageManager;

package/src/lib/runner/audit/constants.d.ts

@@ -1,2 +1,2 @@
-import { PackageAuditLevel } from '../../config';
+import type { PackageAuditLevel } from '../../config';
 export declare const auditScoreModifiers: Record<PackageAuditLevel, number>;

package/src/lib/runner/audit/transform.d.ts

@@ -1,6 +1,6 @@
 import type { AuditOutput, Issue } from '@code-pushup/models';
-import { AuditSeverity, DependencyGroup, PackageManagerId } from '../../config';
-import { AuditResult, AuditSummary, Vulnerability } from './types';
+import { type AuditSeverity, type DependencyGroup, type PackageManagerId } from '../../config';
+import type { AuditResult, AuditSummary, Vulnerability } from './types';
 export declare function auditResultToAuditOutput(result: AuditResult, id: PackageManagerId, depGroup: DependencyGroup, auditLevelMapping: AuditSeverity): AuditOutput;
 export declare function calculateAuditScore(stats: AuditSummary): number;
 export declare function summaryToDisplayValue(summary: AuditSummary): string;

package/src/lib/runner/audit/utils.d.ts

@@ -1,2 +1,2 @@
-import { PackageAuditLevel } from '../../config';
+import type { PackageAuditLevel } from '../../config';
 export declare function getVulnerabilitiesTotal(summary: Record<PackageAuditLevel, number>): number;

package/src/lib/runner/index.d.ts

@@ -1,4 +1,4 @@
 import type { RunnerConfig } from '@code-pushup/models';
-import { FinalJSPackagesPluginConfig } from '../config';
+import { type FinalJSPackagesPluginConfig } from '../config';
 export declare function createRunnerConfig(scriptPath: string, config: FinalJSPackagesPluginConfig): Promise<RunnerConfig>;
 export declare function executeRunner(): Promise<void>;

package/src/lib/runner/outdated/transform.d.ts

@@ -1,7 +1,7 @@
-import { ReleaseType } from 'semver';
+import { type ReleaseType } from 'semver';
 import type { AuditOutput, Issue } from '@code-pushup/models';
-import { DependencyGroup, PackageManagerId } from '../../config';
-import { OutdatedResult } from './types';
+import type { DependencyGroup, PackageManagerId } from '../../config';
+import type { OutdatedResult } from './types';
 export declare function outdatedResultToAuditOutput(result: OutdatedResult, packageManager: PackageManagerId, depGroup: DependencyGroup, totalDeps: number): AuditOutput;
 export declare function calculateOutdatedScore(majorOutdated: number, totalDeps: number): number;
 export declare function outdatedToDisplayValue(stats: Record<ReleaseType, number>): string;

package/src/lib/runner/utils.d.ts

@@ -1,5 +1,5 @@
-import { AuditResult, Vulnerability } from './audit/types';
-import { DependencyTotals } from './outdated/types';
+import type { AuditResult, Vulnerability } from './audit/types';
+import { type DependencyTotals } from './outdated/types';
 export declare function filterAuditResult(result: AuditResult, key: keyof Vulnerability, referenceResult?: AuditResult): AuditResult;
 export declare function findAllPackageJson(): Promise<string[]>;
 export declare function getTotalDependencies(packageJsonPaths: string[]): Promise<DependencyTotals>;

package/src/lib/utils.d.ts

@@ -0,0 +1,10 @@
+import { type JSPackagesPluginConfig } from './config';
+export declare function normalizeConfig(config?: JSPackagesPluginConfig): Promise<{
+    packageManager: import("./package-managers").PackageManager;
+    checks: ("audit" | "outdated")[];
+    depGroups: ("prod" | "dev" | "optional")[];
+    auditLevelMapping: import("./config").AuditSeverity;
+    packageJsonPaths: string[] | {
+        autoSearch: true;
+    };
+}>;