@code-pushup/js-packages-plugin 0.56.0 → 0.58.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (113) hide show
  1. package/package.json +9 -7
  2. package/src/bin.js +6 -0
  3. package/src/bin.js.map +1 -0
  4. package/src/index.d.ts +2 -2
  5. package/src/index.js +3 -0
  6. package/src/index.js.map +1 -0
  7. package/src/lib/config.d.ts +4 -4
  8. package/src/lib/config.js +59 -0
  9. package/src/lib/config.js.map +1 -0
  10. package/src/lib/constants.d.ts +2 -2
  11. package/src/lib/constants.js +25 -0
  12. package/src/lib/constants.js.map +1 -0
  13. package/src/lib/js-packages-plugin.d.ts +1 -1
  14. package/src/lib/js-packages-plugin.js +101 -0
  15. package/src/lib/js-packages-plugin.js.map +1 -0
  16. package/src/lib/package-managers/constants.js +3 -0
  17. package/src/lib/package-managers/constants.js.map +1 -0
  18. package/src/lib/package-managers/derive-package-manager.d.ts +2 -2
  19. package/src/lib/package-managers/derive-package-manager.js +43 -0
  20. package/src/lib/package-managers/derive-package-manager.js.map +1 -0
  21. package/src/lib/package-managers/derive-yarn.js +16 -0
  22. package/src/lib/package-managers/derive-yarn.js.map +1 -0
  23. package/src/lib/package-managers/npm/audit-result.d.ts +2 -2
  24. package/src/lib/package-managers/npm/audit-result.js +65 -0
  25. package/src/lib/package-managers/npm/audit-result.js.map +1 -0
  26. package/src/lib/package-managers/npm/npm.d.ts +1 -1
  27. package/src/lib/package-managers/npm/npm.js +49 -0
  28. package/src/lib/package-managers/npm/npm.js.map +1 -0
  29. package/src/lib/package-managers/npm/outdated-result.d.ts +1 -1
  30. package/src/lib/package-managers/npm/outdated-result.js +16 -0
  31. package/src/lib/package-managers/npm/outdated-result.js.map +1 -0
  32. package/src/lib/package-managers/npm/types.d.ts +3 -3
  33. package/src/lib/package-managers/npm/types.js +2 -0
  34. package/src/lib/package-managers/npm/types.js.map +1 -0
  35. package/src/lib/package-managers/package-managers.d.ts +2 -2
  36. package/src/lib/package-managers/package-managers.js +11 -0
  37. package/src/lib/package-managers/package-managers.js.map +1 -0
  38. package/src/lib/package-managers/pnpm/audit-result.d.ts +1 -1
  39. package/src/lib/package-managers/pnpm/audit-result.js +34 -0
  40. package/src/lib/package-managers/pnpm/audit-result.js.map +1 -0
  41. package/src/lib/package-managers/pnpm/outdated-result.d.ts +1 -1
  42. package/src/lib/package-managers/pnpm/outdated-result.js +12 -0
  43. package/src/lib/package-managers/pnpm/outdated-result.js.map +1 -0
  44. package/src/lib/package-managers/pnpm/pnpm.d.ts +1 -1
  45. package/src/lib/package-managers/pnpm/pnpm.js +49 -0
  46. package/src/lib/package-managers/pnpm/pnpm.js.map +1 -0
  47. package/src/lib/package-managers/pnpm/types.d.ts +2 -2
  48. package/src/lib/package-managers/pnpm/types.js +2 -0
  49. package/src/lib/package-managers/pnpm/types.js.map +1 -0
  50. package/src/lib/package-managers/pnpm/utils.js +5 -0
  51. package/src/lib/package-managers/pnpm/utils.js.map +1 -0
  52. package/src/lib/package-managers/types.d.ts +3 -3
  53. package/src/lib/package-managers/types.js +2 -0
  54. package/src/lib/package-managers/types.js.map +1 -0
  55. package/src/lib/package-managers/yarn-classic/audit-result.d.ts +1 -1
  56. package/src/lib/package-managers/yarn-classic/audit-result.js +36 -0
  57. package/src/lib/package-managers/yarn-classic/audit-result.js.map +1 -0
  58. package/src/lib/package-managers/yarn-classic/constants.d.ts +2 -2
  59. package/src/lib/package-managers/yarn-classic/constants.js +14 -0
  60. package/src/lib/package-managers/yarn-classic/constants.js.map +1 -0
  61. package/src/lib/package-managers/yarn-classic/outdated-result.d.ts +1 -1
  62. package/src/lib/package-managers/yarn-classic/outdated-result.js +39 -0
  63. package/src/lib/package-managers/yarn-classic/outdated-result.js.map +1 -0
  64. package/src/lib/package-managers/yarn-classic/types.d.ts +1 -1
  65. package/src/lib/package-managers/yarn-classic/types.js +8 -0
  66. package/src/lib/package-managers/yarn-classic/types.js.map +1 -0
  67. package/src/lib/package-managers/yarn-classic/yarn-classic.d.ts +1 -1
  68. package/src/lib/package-managers/yarn-classic/yarn-classic.js +29 -0
  69. package/src/lib/package-managers/yarn-classic/yarn-classic.js.map +1 -0
  70. package/src/lib/package-managers/yarn-modern/audit-result.d.ts +1 -1
  71. package/src/lib/package-managers/yarn-modern/audit-result.js +25 -0
  72. package/src/lib/package-managers/yarn-modern/audit-result.js.map +1 -0
  73. package/src/lib/package-managers/yarn-modern/outdated-result.d.ts +1 -1
  74. package/src/lib/package-managers/yarn-modern/outdated-result.js +10 -0
  75. package/src/lib/package-managers/yarn-modern/outdated-result.js.map +1 -0
  76. package/src/lib/package-managers/yarn-modern/types.d.ts +2 -2
  77. package/src/lib/package-managers/yarn-modern/types.js +2 -0
  78. package/src/lib/package-managers/yarn-modern/types.js.map +1 -0
  79. package/src/lib/package-managers/yarn-modern/yarn-modern.d.ts +1 -1
  80. package/src/lib/package-managers/yarn-modern/yarn-modern.js +36 -0
  81. package/src/lib/package-managers/yarn-modern/yarn-modern.js.map +1 -0
  82. package/src/lib/runner/audit/constants.d.ts +1 -1
  83. package/src/lib/runner/audit/constants.js +10 -0
  84. package/src/lib/runner/audit/constants.js.map +1 -0
  85. package/src/lib/runner/audit/transform.d.ts +2 -2
  86. package/src/lib/runner/audit/transform.js +63 -0
  87. package/src/lib/runner/audit/transform.js.map +1 -0
  88. package/src/lib/runner/audit/types.d.ts +1 -1
  89. package/src/lib/runner/audit/types.js +2 -0
  90. package/src/lib/runner/audit/types.js.map +1 -0
  91. package/src/lib/runner/audit/utils.d.ts +1 -1
  92. package/src/lib/runner/audit/utils.js +4 -0
  93. package/src/lib/runner/audit/utils.js.map +1 -0
  94. package/src/lib/runner/index.d.ts +3 -3
  95. package/src/lib/runner/index.js +84 -0
  96. package/src/lib/runner/index.js.map +1 -0
  97. package/src/lib/runner/outdated/constants.js +13 -0
  98. package/src/lib/runner/outdated/constants.js.map +1 -0
  99. package/src/lib/runner/outdated/transform.d.ts +2 -2
  100. package/src/lib/runner/outdated/transform.js +60 -0
  101. package/src/lib/runner/outdated/transform.js.map +1 -0
  102. package/src/lib/runner/outdated/types.js +6 -0
  103. package/src/lib/runner/outdated/types.js.map +1 -0
  104. package/src/lib/runner/utils.d.ts +2 -2
  105. package/src/lib/runner/utils.js +56 -0
  106. package/src/lib/runner/utils.js.map +1 -0
  107. package/src/lib/utils.d.ts +3 -3
  108. package/src/lib/utils.js +17 -0
  109. package/src/lib/utils.js.map +1 -0
  110. package/bin.js +0 -1759
  111. package/index.js +0 -1651
  112. package/src/lib/package-managers/index.d.ts +0 -2
  113. package/src/lib/runner/constants.d.ts +0 -3
package/index.js DELETED
@@ -1,1651 +0,0 @@
1
- // packages/plugin-js-packages/src/lib/js-packages-plugin.ts
2
- import { dirname as dirname3, join as join4 } from "node:path";
3
- import { fileURLToPath } from "node:url";
4
-
5
- // packages/plugin-js-packages/package.json
6
- var name = "@code-pushup/js-packages-plugin";
7
- var version = "0.56.0";
8
-
9
- // packages/plugin-js-packages/src/lib/config.ts
10
- import { z as z17 } from "zod";
11
-
12
- // packages/models/src/lib/implementation/schemas.ts
13
- import { MATERIAL_ICONS } from "vscode-material-icons";
14
- import { z } from "zod";
15
-
16
- // packages/models/src/lib/implementation/limits.ts
17
- var MAX_SLUG_LENGTH = 128;
18
- var MAX_TITLE_LENGTH = 256;
19
- var MAX_DESCRIPTION_LENGTH = 65536;
20
- var MAX_ISSUE_MESSAGE_LENGTH = 1024;
21
-
22
- // packages/models/src/lib/implementation/utils.ts
23
- var slugRegex = /^[a-z\d]+(?:-[a-z\d]+)*$/;
24
- var filenameRegex = /^(?!.*[ \\/:*?"<>|]).+$/;
25
- function hasDuplicateStrings(strings) {
26
- const sortedStrings = strings.toSorted();
27
- const duplStrings = sortedStrings.filter(
28
- (item, index) => index !== 0 && item === sortedStrings[index - 1]
29
- );
30
- return duplStrings.length === 0 ? false : [...new Set(duplStrings)];
31
- }
32
- function hasMissingStrings(toCheck, existing) {
33
- const nonExisting = toCheck.filter((s) => !existing.includes(s));
34
- return nonExisting.length === 0 ? false : nonExisting;
35
- }
36
- function errorItems(items, transform = (itemArr) => itemArr.join(", ")) {
37
- return transform(items || []);
38
- }
39
- function exists(value) {
40
- return value != null;
41
- }
42
- function getMissingRefsForCategories(categories, plugins) {
43
- if (!categories || categories.length === 0) {
44
- return false;
45
- }
46
- const auditRefsFromCategory = categories.flatMap(
47
- ({ refs }) => refs.filter(({ type }) => type === "audit").map(({ plugin, slug }) => `${plugin}/${slug}`)
48
- );
49
- const auditRefsFromPlugins = plugins.flatMap(
50
- ({ audits, slug: pluginSlug }) => audits.map(({ slug }) => `${pluginSlug}/${slug}`)
51
- );
52
- const missingAuditRefs = hasMissingStrings(
53
- auditRefsFromCategory,
54
- auditRefsFromPlugins
55
- );
56
- const groupRefsFromCategory = categories.flatMap(
57
- ({ refs }) => refs.filter(({ type }) => type === "group").map(({ plugin, slug }) => `${plugin}#${slug} (group)`)
58
- );
59
- const groupRefsFromPlugins = plugins.flatMap(
60
- ({ groups, slug: pluginSlug }) => Array.isArray(groups) ? groups.map(({ slug }) => `${pluginSlug}#${slug} (group)`) : []
61
- );
62
- const missingGroupRefs = hasMissingStrings(
63
- groupRefsFromCategory,
64
- groupRefsFromPlugins
65
- );
66
- const missingRefs = [missingAuditRefs, missingGroupRefs].filter((refs) => Array.isArray(refs) && refs.length > 0).flat();
67
- return missingRefs.length > 0 ? missingRefs : false;
68
- }
69
- function missingRefsForCategoriesErrorMsg(categories, plugins) {
70
- const missingRefs = getMissingRefsForCategories(categories, plugins);
71
- return `The following category references need to point to an audit or group: ${errorItems(
72
- missingRefs
73
- )}`;
74
- }
75
-
76
- // packages/models/src/lib/implementation/schemas.ts
77
- var tableCellValueSchema = z.union([z.string(), z.number(), z.boolean(), z.null()]).default(null);
78
- function executionMetaSchema(options = {
79
- descriptionDate: "Execution start date and time",
80
- descriptionDuration: "Execution duration in ms"
81
- }) {
82
- return z.object({
83
- date: z.string({ description: options.descriptionDate }),
84
- duration: z.number({ description: options.descriptionDuration })
85
- });
86
- }
87
- var slugSchema = z.string({ description: "Unique ID (human-readable, URL-safe)" }).regex(slugRegex, {
88
- message: "The slug has to follow the pattern [0-9a-z] followed by multiple optional groups of -[0-9a-z]. e.g. my-slug"
89
- }).max(MAX_SLUG_LENGTH, {
90
- message: `slug can be max ${MAX_SLUG_LENGTH} characters long`
91
- });
92
- var descriptionSchema = z.string({ description: "Description (markdown)" }).max(MAX_DESCRIPTION_LENGTH).optional();
93
- var urlSchema = z.string().url();
94
- var docsUrlSchema = urlSchema.optional().or(z.literal("")).describe("Documentation site");
95
- var titleSchema = z.string({ description: "Descriptive name" }).max(MAX_TITLE_LENGTH);
96
- var scoreSchema = z.number({
97
- description: "Value between 0 and 1"
98
- }).min(0).max(1);
99
- function metaSchema(options) {
100
- const {
101
- descriptionDescription,
102
- titleDescription,
103
- docsUrlDescription,
104
- description
105
- } = options ?? {};
106
- return z.object(
107
- {
108
- title: titleDescription ? titleSchema.describe(titleDescription) : titleSchema,
109
- description: descriptionDescription ? descriptionSchema.describe(descriptionDescription) : descriptionSchema,
110
- docsUrl: docsUrlDescription ? docsUrlSchema.describe(docsUrlDescription) : docsUrlSchema
111
- },
112
- { description }
113
- );
114
- }
115
- var filePathSchema = z.string().trim().min(1, { message: "path is invalid" });
116
- var fileNameSchema = z.string().trim().regex(filenameRegex, {
117
- message: `The filename has to be valid`
118
- }).min(1, { message: "file name is invalid" });
119
- var positiveIntSchema = z.number().int().positive();
120
- var nonnegativeNumberSchema = z.number().nonnegative();
121
- function packageVersionSchema(options) {
122
- const { versionDescription = "NPM version of the package", required } = options ?? {};
123
- const packageSchema = z.string({ description: "NPM package name" });
124
- const versionSchema = z.string({ description: versionDescription });
125
- return z.object(
126
- {
127
- packageName: required ? packageSchema : packageSchema.optional(),
128
- version: required ? versionSchema : versionSchema.optional()
129
- },
130
- { description: "NPM package name and version of a published package" }
131
- );
132
- }
133
- var weightSchema = nonnegativeNumberSchema.describe(
134
- "Coefficient for the given score (use weight 0 if only for display)"
135
- );
136
- function weightedRefSchema(description, slugDescription) {
137
- return z.object(
138
- {
139
- slug: slugSchema.describe(slugDescription),
140
- weight: weightSchema.describe("Weight used to calculate score")
141
- },
142
- { description }
143
- );
144
- }
145
- function scorableSchema(description, refSchema, duplicateCheckFn, duplicateMessageFn) {
146
- return z.object(
147
- {
148
- slug: slugSchema.describe('Human-readable unique ID, e.g. "performance"'),
149
- refs: z.array(refSchema).min(1).refine(
150
- (refs) => !duplicateCheckFn(refs),
151
- (refs) => ({
152
- message: duplicateMessageFn(refs)
153
- })
154
- ).refine(hasNonZeroWeightedRef, () => ({
155
- message: "In a category there has to be at least one ref with weight > 0"
156
- }))
157
- },
158
- { description }
159
- );
160
- }
161
- var materialIconSchema = z.enum(MATERIAL_ICONS, {
162
- description: "Icon from VSCode Material Icons extension"
163
- });
164
- function hasNonZeroWeightedRef(refs) {
165
- return refs.reduce((acc, { weight }) => weight + acc, 0) !== 0;
166
- }
167
-
168
- // packages/models/src/lib/source.ts
169
- import { z as z2 } from "zod";
170
- var sourceFileLocationSchema = z2.object(
171
- {
172
- file: filePathSchema.describe("Relative path to source file in Git repo"),
173
- position: z2.object(
174
- {
175
- startLine: positiveIntSchema.describe("Start line"),
176
- startColumn: positiveIntSchema.describe("Start column").optional(),
177
- endLine: positiveIntSchema.describe("End line").optional(),
178
- endColumn: positiveIntSchema.describe("End column").optional()
179
- },
180
- { description: "Location in file" }
181
- ).optional()
182
- },
183
- { description: "Source file location" }
184
- );
185
-
186
- // packages/models/src/lib/audit.ts
187
- import { z as z3 } from "zod";
188
- var auditSchema = z3.object({
189
- slug: slugSchema.describe("ID (unique within plugin)")
190
- }).merge(
191
- metaSchema({
192
- titleDescription: "Descriptive name",
193
- descriptionDescription: "Description (markdown)",
194
- docsUrlDescription: "Link to documentation (rationale)",
195
- description: "List of scorable metrics for the given plugin"
196
- })
197
- );
198
- var pluginAuditsSchema = z3.array(auditSchema, {
199
- description: "List of audits maintained in a plugin"
200
- }).min(1).refine(
201
- (auditMetadata) => !getDuplicateSlugsInAudits(auditMetadata),
202
- (auditMetadata) => ({
203
- message: duplicateSlugsInAuditsErrorMsg(auditMetadata)
204
- })
205
- );
206
- function duplicateSlugsInAuditsErrorMsg(audits) {
207
- const duplicateRefs = getDuplicateSlugsInAudits(audits);
208
- return `In plugin audits the following slugs are not unique: ${errorItems(
209
- duplicateRefs
210
- )}`;
211
- }
212
- function getDuplicateSlugsInAudits(audits) {
213
- return hasDuplicateStrings(audits.map(({ slug }) => slug));
214
- }
215
-
216
- // packages/models/src/lib/audit-output.ts
217
- import { z as z6 } from "zod";
218
-
219
- // packages/models/src/lib/issue.ts
220
- import { z as z4 } from "zod";
221
- var issueSeveritySchema = z4.enum(["info", "warning", "error"], {
222
- description: "Severity level"
223
- });
224
- var issueSchema = z4.object(
225
- {
226
- message: z4.string({ description: "Descriptive error message" }).max(MAX_ISSUE_MESSAGE_LENGTH),
227
- severity: issueSeveritySchema,
228
- source: sourceFileLocationSchema.optional()
229
- },
230
- { description: "Issue information" }
231
- );
232
-
233
- // packages/models/src/lib/table.ts
234
- import { z as z5 } from "zod";
235
- var tableAlignmentSchema = z5.enum(["left", "center", "right"], {
236
- description: "Cell alignment"
237
- });
238
- var tableColumnObjectSchema = z5.object({
239
- key: z5.string(),
240
- label: z5.string().optional(),
241
- align: tableAlignmentSchema.optional()
242
- });
243
- var tableRowObjectSchema = z5.record(tableCellValueSchema, {
244
- description: "Object row"
245
- });
246
- var tableRowPrimitiveSchema = z5.array(tableCellValueSchema, {
247
- description: "Primitive row"
248
- });
249
- var tableSharedSchema = z5.object({
250
- title: z5.string().optional().describe("Display title for table")
251
- });
252
- var tablePrimitiveSchema = tableSharedSchema.merge(
253
- z5.object(
254
- {
255
- columns: z5.array(tableAlignmentSchema).optional(),
256
- rows: z5.array(tableRowPrimitiveSchema)
257
- },
258
- { description: "Table with primitive rows and optional alignment columns" }
259
- )
260
- );
261
- var tableObjectSchema = tableSharedSchema.merge(
262
- z5.object(
263
- {
264
- columns: z5.union([
265
- z5.array(tableAlignmentSchema),
266
- z5.array(tableColumnObjectSchema)
267
- ]).optional(),
268
- rows: z5.array(tableRowObjectSchema)
269
- },
270
- {
271
- description: "Table with object rows and optional alignment or object columns"
272
- }
273
- )
274
- );
275
- var tableSchema = (description = "Table information") => z5.union([tablePrimitiveSchema, tableObjectSchema], { description });
276
-
277
- // packages/models/src/lib/audit-output.ts
278
- var auditValueSchema = nonnegativeNumberSchema.describe("Raw numeric value");
279
- var auditDisplayValueSchema = z6.string({ description: "Formatted value (e.g. '0.9 s', '2.1 MB')" }).optional();
280
- var auditDetailsSchema = z6.object(
281
- {
282
- issues: z6.array(issueSchema, { description: "List of findings" }).optional(),
283
- table: tableSchema("Table of related findings").optional()
284
- },
285
- { description: "Detailed information" }
286
- );
287
- var auditOutputSchema = z6.object(
288
- {
289
- slug: slugSchema.describe("Reference to audit"),
290
- displayValue: auditDisplayValueSchema,
291
- value: auditValueSchema,
292
- score: scoreSchema,
293
- details: auditDetailsSchema.optional()
294
- },
295
- { description: "Audit information" }
296
- );
297
- var auditOutputsSchema = z6.array(auditOutputSchema, {
298
- description: "List of JSON formatted audit output emitted by the runner process of a plugin"
299
- }).refine(
300
- (audits) => !getDuplicateSlugsInAudits2(audits),
301
- (audits) => ({ message: duplicateSlugsInAuditsErrorMsg2(audits) })
302
- );
303
- function duplicateSlugsInAuditsErrorMsg2(audits) {
304
- const duplicateRefs = getDuplicateSlugsInAudits2(audits);
305
- return `In plugin audits the slugs are not unique: ${errorItems(
306
- duplicateRefs
307
- )}`;
308
- }
309
- function getDuplicateSlugsInAudits2(audits) {
310
- return hasDuplicateStrings(audits.map(({ slug }) => slug));
311
- }
312
-
313
- // packages/models/src/lib/category-config.ts
314
- import { z as z7 } from "zod";
315
- var categoryRefSchema = weightedRefSchema(
316
- "Weighted references to audits and/or groups for the category",
317
- "Slug of an audit or group (depending on `type`)"
318
- ).merge(
319
- z7.object({
320
- type: z7.enum(["audit", "group"], {
321
- description: "Discriminant for reference kind, affects where `slug` is looked up"
322
- }),
323
- plugin: slugSchema.describe(
324
- "Plugin slug (plugin should contain referenced audit or group)"
325
- )
326
- })
327
- );
328
- var categoryConfigSchema = scorableSchema(
329
- "Category with a score calculated from audits and groups from various plugins",
330
- categoryRefSchema,
331
- getDuplicateRefsInCategoryMetrics,
332
- duplicateRefsInCategoryMetricsErrorMsg
333
- ).merge(
334
- metaSchema({
335
- titleDescription: "Category Title",
336
- docsUrlDescription: "Category docs URL",
337
- descriptionDescription: "Category description",
338
- description: "Meta info for category"
339
- })
340
- ).merge(
341
- z7.object({
342
- isBinary: z7.boolean({
343
- description: 'Is this a binary category (i.e. only a perfect score considered a "pass")?'
344
- }).optional()
345
- })
346
- );
347
- function duplicateRefsInCategoryMetricsErrorMsg(metrics) {
348
- const duplicateRefs = getDuplicateRefsInCategoryMetrics(metrics);
349
- return `In the categories, the following audit or group refs are duplicates: ${errorItems(
350
- duplicateRefs
351
- )}`;
352
- }
353
- function getDuplicateRefsInCategoryMetrics(metrics) {
354
- return hasDuplicateStrings(
355
- metrics.map(({ slug, type, plugin }) => `${type} :: ${plugin} / ${slug}`)
356
- );
357
- }
358
- var categoriesSchema = z7.array(categoryConfigSchema, {
359
- description: "Categorization of individual audits"
360
- }).refine(
361
- (categoryCfg) => !getDuplicateSlugCategories(categoryCfg),
362
- (categoryCfg) => ({
363
- message: duplicateSlugCategoriesErrorMsg(categoryCfg)
364
- })
365
- );
366
- function duplicateSlugCategoriesErrorMsg(categories) {
367
- const duplicateStringSlugs = getDuplicateSlugCategories(categories);
368
- return `In the categories, the following slugs are duplicated: ${errorItems(
369
- duplicateStringSlugs
370
- )}`;
371
- }
372
- function getDuplicateSlugCategories(categories) {
373
- return hasDuplicateStrings(categories.map(({ slug }) => slug));
374
- }
375
-
376
- // packages/models/src/lib/commit.ts
377
- import { z as z8 } from "zod";
378
- var commitSchema = z8.object(
379
- {
380
- hash: z8.string({ description: "Commit SHA (full)" }).regex(
381
- /^[\da-f]{40}$/,
382
- "Commit SHA should be a 40-character hexadecimal string"
383
- ),
384
- message: z8.string({ description: "Commit message" }),
385
- date: z8.coerce.date({
386
- description: "Date and time when commit was authored"
387
- }),
388
- author: z8.string({
389
- description: "Commit author name"
390
- }).trim()
391
- },
392
- { description: "Git commit" }
393
- );
394
-
395
- // packages/models/src/lib/core-config.ts
396
- import { z as z14 } from "zod";
397
-
398
- // packages/models/src/lib/persist-config.ts
399
- import { z as z9 } from "zod";
400
- var formatSchema = z9.enum(["json", "md"]);
401
- var persistConfigSchema = z9.object({
402
- outputDir: filePathSchema.describe("Artifacts folder").optional(),
403
- filename: fileNameSchema.describe("Artifacts file name (without extension)").optional(),
404
- format: z9.array(formatSchema).optional()
405
- });
406
-
407
- // packages/models/src/lib/plugin-config.ts
408
- import { z as z12 } from "zod";
409
-
410
- // packages/models/src/lib/group.ts
411
- import { z as z10 } from "zod";
412
- var groupRefSchema = weightedRefSchema(
413
- "Weighted reference to a group",
414
- "Reference slug to a group within this plugin (e.g. 'max-lines')"
415
- );
416
- var groupMetaSchema = metaSchema({
417
- titleDescription: "Descriptive name for the group",
418
- descriptionDescription: "Description of the group (markdown)",
419
- docsUrlDescription: "Group documentation site",
420
- description: "Group metadata"
421
- });
422
- var groupSchema = scorableSchema(
423
- 'A group aggregates a set of audits into a single score which can be referenced from a category. E.g. the group slug "performance" groups audits and can be referenced in a category',
424
- groupRefSchema,
425
- getDuplicateRefsInGroups,
426
- duplicateRefsInGroupsErrorMsg
427
- ).merge(groupMetaSchema);
428
- var groupsSchema = z10.array(groupSchema, {
429
- description: "List of groups"
430
- }).optional().refine(
431
- (groups) => !getDuplicateSlugsInGroups(groups),
432
- (groups) => ({
433
- message: duplicateSlugsInGroupsErrorMsg(groups)
434
- })
435
- );
436
- function duplicateRefsInGroupsErrorMsg(groups) {
437
- const duplicateRefs = getDuplicateRefsInGroups(groups);
438
- return `In plugin groups the following references are not unique: ${errorItems(
439
- duplicateRefs
440
- )}`;
441
- }
442
- function getDuplicateRefsInGroups(groups) {
443
- return hasDuplicateStrings(groups.map(({ slug: ref }) => ref).filter(exists));
444
- }
445
- function duplicateSlugsInGroupsErrorMsg(groups) {
446
- const duplicateRefs = getDuplicateSlugsInGroups(groups);
447
- return `In groups the following slugs are not unique: ${errorItems(
448
- duplicateRefs
449
- )}`;
450
- }
451
- function getDuplicateSlugsInGroups(groups) {
452
- return Array.isArray(groups) ? hasDuplicateStrings(groups.map(({ slug }) => slug)) : false;
453
- }
454
-
455
- // packages/models/src/lib/runner-config.ts
456
- import { z as z11 } from "zod";
457
- var outputTransformSchema = z11.function().args(z11.unknown()).returns(z11.union([auditOutputsSchema, z11.promise(auditOutputsSchema)]));
458
- var runnerConfigSchema = z11.object(
459
- {
460
- command: z11.string({
461
- description: "Shell command to execute"
462
- }),
463
- args: z11.array(z11.string({ description: "Command arguments" })).optional(),
464
- outputFile: filePathSchema.describe("Output path"),
465
- outputTransform: outputTransformSchema.optional()
466
- },
467
- {
468
- description: "How to execute runner"
469
- }
470
- );
471
- var onProgressSchema = z11.function().args(z11.unknown()).returns(z11.void());
472
- var runnerFunctionSchema = z11.function().args(onProgressSchema.optional()).returns(z11.union([auditOutputsSchema, z11.promise(auditOutputsSchema)]));
473
-
474
- // packages/models/src/lib/plugin-config.ts
475
- var pluginMetaSchema = packageVersionSchema().merge(
476
- metaSchema({
477
- titleDescription: "Descriptive name",
478
- descriptionDescription: "Description (markdown)",
479
- docsUrlDescription: "Plugin documentation site",
480
- description: "Plugin metadata"
481
- })
482
- ).merge(
483
- z12.object({
484
- slug: slugSchema.describe("Unique plugin slug within core config"),
485
- icon: materialIconSchema
486
- })
487
- );
488
- var pluginDataSchema = z12.object({
489
- runner: z12.union([runnerConfigSchema, runnerFunctionSchema]),
490
- audits: pluginAuditsSchema,
491
- groups: groupsSchema
492
- });
493
- var pluginConfigSchema = pluginMetaSchema.merge(pluginDataSchema).refine(
494
- (pluginCfg) => !getMissingRefsFromGroups(pluginCfg),
495
- (pluginCfg) => ({
496
- message: missingRefsFromGroupsErrorMsg(pluginCfg)
497
- })
498
- );
499
- function missingRefsFromGroupsErrorMsg(pluginCfg) {
500
- const missingRefs = getMissingRefsFromGroups(pluginCfg);
501
- return `The following group references need to point to an existing audit in this plugin config: ${errorItems(
502
- missingRefs
503
- )}`;
504
- }
505
- function getMissingRefsFromGroups(pluginCfg) {
506
- return hasMissingStrings(
507
- pluginCfg.groups?.flatMap(
508
- ({ refs: audits }) => audits.map(({ slug: ref }) => ref)
509
- ) ?? [],
510
- pluginCfg.audits.map(({ slug }) => slug)
511
- );
512
- }
513
-
514
- // packages/models/src/lib/upload-config.ts
515
- import { z as z13 } from "zod";
516
- var uploadConfigSchema = z13.object({
517
- server: urlSchema.describe("URL of deployed portal API"),
518
- apiKey: z13.string({
519
- description: "API key with write access to portal (use `process.env` for security)"
520
- }),
521
- organization: slugSchema.describe(
522
- "Organization slug from Code PushUp portal"
523
- ),
524
- project: slugSchema.describe("Project slug from Code PushUp portal"),
525
- timeout: z13.number({ description: "Request timeout in minutes (default is 5)" }).positive().int().optional()
526
- });
527
-
528
- // packages/models/src/lib/core-config.ts
529
- var unrefinedCoreConfigSchema = z14.object({
530
- plugins: z14.array(pluginConfigSchema, {
531
- description: "List of plugins to be used (official, community-provided, or custom)"
532
- }).min(1),
533
- /** portal configuration for persisting results */
534
- persist: persistConfigSchema.optional(),
535
- /** portal configuration for uploading results */
536
- upload: uploadConfigSchema.optional(),
537
- categories: categoriesSchema.optional()
538
- });
539
- var coreConfigSchema = refineCoreConfig(unrefinedCoreConfigSchema);
540
- function refineCoreConfig(schema) {
541
- return schema.refine(
542
- ({ categories, plugins }) => !getMissingRefsForCategories(categories, plugins),
543
- ({ categories, plugins }) => ({
544
- message: missingRefsForCategoriesErrorMsg(categories, plugins)
545
- })
546
- );
547
- }
548
-
549
- // packages/models/src/lib/report.ts
550
- import { z as z15 } from "zod";
551
- var auditReportSchema = auditSchema.merge(auditOutputSchema);
552
- var pluginReportSchema = pluginMetaSchema.merge(
553
- executionMetaSchema({
554
- descriptionDate: "Start date and time of plugin run",
555
- descriptionDuration: "Duration of the plugin run in ms"
556
- })
557
- ).merge(
558
- z15.object({
559
- audits: z15.array(auditReportSchema).min(1),
560
- groups: z15.array(groupSchema).optional()
561
- })
562
- ).refine(
563
- (pluginReport) => !getMissingRefsFromGroups2(pluginReport.audits, pluginReport.groups ?? []),
564
- (pluginReport) => ({
565
- message: missingRefsFromGroupsErrorMsg2(
566
- pluginReport.audits,
567
- pluginReport.groups ?? []
568
- )
569
- })
570
- );
571
- function missingRefsFromGroupsErrorMsg2(audits, groups) {
572
- const missingRefs = getMissingRefsFromGroups2(audits, groups);
573
- return `group references need to point to an existing audit in this plugin report: ${errorItems(
574
- missingRefs
575
- )}`;
576
- }
577
- function getMissingRefsFromGroups2(audits, groups) {
578
- return hasMissingStrings(
579
- groups.flatMap(
580
- ({ refs: auditRefs }) => auditRefs.map(({ slug: ref }) => ref)
581
- ),
582
- audits.map(({ slug }) => slug)
583
- );
584
- }
585
- var reportSchema = packageVersionSchema({
586
- versionDescription: "NPM version of the CLI",
587
- required: true
588
- }).merge(
589
- executionMetaSchema({
590
- descriptionDate: "Start date and time of the collect run",
591
- descriptionDuration: "Duration of the collect run in ms"
592
- })
593
- ).merge(
594
- z15.object(
595
- {
596
- plugins: z15.array(pluginReportSchema).min(1),
597
- categories: z15.array(categoryConfigSchema).optional(),
598
- commit: commitSchema.describe("Git commit for which report was collected").nullable()
599
- },
600
- { description: "Collect output data" }
601
- )
602
- ).refine(
603
- ({ categories, plugins }) => !getMissingRefsForCategories(categories, plugins),
604
- ({ categories, plugins }) => ({
605
- message: missingRefsForCategoriesErrorMsg(categories, plugins)
606
- })
607
- );
608
-
609
- // packages/models/src/lib/reports-diff.ts
610
- import { z as z16 } from "zod";
611
- function makeComparisonSchema(schema) {
612
- const sharedDescription = schema.description || "Result";
613
- return z16.object({
614
- before: schema.describe(`${sharedDescription} (source commit)`),
615
- after: schema.describe(`${sharedDescription} (target commit)`)
616
- });
617
- }
618
- function makeArraysComparisonSchema(diffSchema, resultSchema, description) {
619
- return z16.object(
620
- {
621
- changed: z16.array(diffSchema),
622
- unchanged: z16.array(resultSchema),
623
- added: z16.array(resultSchema),
624
- removed: z16.array(resultSchema)
625
- },
626
- { description }
627
- );
628
- }
629
- var scorableMetaSchema = z16.object({
630
- slug: slugSchema,
631
- title: titleSchema,
632
- docsUrl: docsUrlSchema
633
- });
634
- var scorableWithPluginMetaSchema = scorableMetaSchema.merge(
635
- z16.object({
636
- plugin: pluginMetaSchema.pick({ slug: true, title: true, docsUrl: true }).describe("Plugin which defines it")
637
- })
638
- );
639
- var scorableDiffSchema = scorableMetaSchema.merge(
640
- z16.object({
641
- scores: makeComparisonSchema(scoreSchema).merge(
642
- z16.object({
643
- diff: z16.number().min(-1).max(1).describe("Score change (`scores.after - scores.before`)")
644
- })
645
- ).describe("Score comparison")
646
- })
647
- );
648
- var scorableWithPluginDiffSchema = scorableDiffSchema.merge(
649
- scorableWithPluginMetaSchema
650
- );
651
- var categoryDiffSchema = scorableDiffSchema;
652
- var groupDiffSchema = scorableWithPluginDiffSchema;
653
- var auditDiffSchema = scorableWithPluginDiffSchema.merge(
654
- z16.object({
655
- values: makeComparisonSchema(auditValueSchema).merge(
656
- z16.object({
657
- diff: z16.number().describe("Value change (`values.after - values.before`)")
658
- })
659
- ).describe("Audit `value` comparison"),
660
- displayValues: makeComparisonSchema(auditDisplayValueSchema).describe(
661
- "Audit `displayValue` comparison"
662
- )
663
- })
664
- );
665
- var categoryResultSchema = scorableMetaSchema.merge(
666
- z16.object({ score: scoreSchema })
667
- );
668
- var groupResultSchema = scorableWithPluginMetaSchema.merge(
669
- z16.object({ score: scoreSchema })
670
- );
671
- var auditResultSchema = scorableWithPluginMetaSchema.merge(
672
- auditOutputSchema.pick({ score: true, value: true, displayValue: true })
673
- );
674
- var reportsDiffSchema = z16.object({
675
- commits: makeComparisonSchema(commitSchema).nullable().describe("Commits identifying compared reports"),
676
- portalUrl: urlSchema.optional().describe("Link to comparison page in Code PushUp portal"),
677
- label: z16.string().optional().describe("Label (e.g. project name)"),
678
- categories: makeArraysComparisonSchema(
679
- categoryDiffSchema,
680
- categoryResultSchema,
681
- "Changes affecting categories"
682
- ),
683
- groups: makeArraysComparisonSchema(
684
- groupDiffSchema,
685
- groupResultSchema,
686
- "Changes affecting groups"
687
- ),
688
- audits: makeArraysComparisonSchema(
689
- auditDiffSchema,
690
- auditResultSchema,
691
- "Changes affecting audits"
692
- )
693
- }).merge(
694
- packageVersionSchema({
695
- versionDescription: "NPM version of the CLI (when `compare` was run)",
696
- required: true
697
- })
698
- ).merge(
699
- executionMetaSchema({
700
- descriptionDate: "Start date and time of the compare run",
701
- descriptionDuration: "Duration of the compare run in ms"
702
- })
703
- );
704
-
705
- // packages/plugin-js-packages/src/lib/constants.ts
706
- var defaultAuditLevelMapping = {
707
- critical: "error",
708
- high: "error",
709
- moderate: "warning",
710
- low: "warning",
711
- info: "info"
712
- };
713
- var dependencyGroupToLong = {
714
- prod: "dependencies",
715
- dev: "devDependencies",
716
- optional: "optionalDependencies"
717
- };
718
- var dependencyGroupWeights = {
719
- prod: 80,
720
- dev: 15,
721
- optional: 5
722
- };
723
- var dependencyDocs = {
724
- prod: "https://classic.yarnpkg.com/docs/dependency-types#toc-dependencies",
725
- dev: "https://classic.yarnpkg.com/docs/dependency-types#toc-devdependencies",
726
- optional: "https://classic.yarnpkg.com/docs/dependency-types#toc-optionaldependencies"
727
- };
728
-
729
- // packages/plugin-js-packages/src/lib/config.ts
730
- var dependencyGroups = ["prod", "dev", "optional"];
731
- var dependencyGroupSchema = z17.enum(dependencyGroups);
732
- var packageCommandSchema = z17.enum(["audit", "outdated"]);
733
- var packageManagerIdSchema = z17.enum([
734
- "npm",
735
- "yarn-classic",
736
- "yarn-modern",
737
- "pnpm"
738
- ]);
739
- var packageJsonPathSchema = z17.union([
740
- z17.array(z17.string()).min(1),
741
- z17.object({ autoSearch: z17.literal(true) })
742
- ]).describe(
743
- "File paths to package.json. Looks only at root package.json by default"
744
- ).default(["package.json"]);
745
- var packageAuditLevels = [
746
- "critical",
747
- "high",
748
- "moderate",
749
- "low",
750
- "info"
751
- ];
752
- var packageAuditLevelSchema = z17.enum(packageAuditLevels);
753
- function fillAuditLevelMapping(mapping) {
754
- return {
755
- critical: mapping.critical ?? defaultAuditLevelMapping.critical,
756
- high: mapping.high ?? defaultAuditLevelMapping.high,
757
- moderate: mapping.moderate ?? defaultAuditLevelMapping.moderate,
758
- low: mapping.low ?? defaultAuditLevelMapping.low,
759
- info: mapping.info ?? defaultAuditLevelMapping.info
760
- };
761
- }
762
- var jsPackagesPluginConfigSchema = z17.object({
763
- checks: z17.array(packageCommandSchema, {
764
- description: "Package manager commands to be run. Defaults to both audit and outdated."
765
- }).min(1).default(["audit", "outdated"]),
766
- packageManager: packageManagerIdSchema.describe("Package manager to be used.").optional(),
767
- dependencyGroups: z17.array(dependencyGroupSchema).min(1).default(["prod", "dev"]),
768
- auditLevelMapping: z17.record(packageAuditLevelSchema, issueSeveritySchema, {
769
- description: "Mapping of audit levels to issue severity. Custom mapping or overrides may be entered manually, otherwise has a default preset."
770
- }).default(defaultAuditLevelMapping).transform(fillAuditLevelMapping),
771
- packageJsonPaths: packageJsonPathSchema
772
- });
773
-
774
- // packages/utils/src/lib/execute-process.ts
775
- import {
776
- spawn
777
- } from "node:child_process";
778
-
779
- // packages/utils/src/lib/reports/utils.ts
780
- import ansis from "ansis";
781
- import { md } from "build-md";
782
-
783
- // packages/utils/src/lib/reports/constants.ts
784
- var TERMINAL_WIDTH = 80;
785
-
786
- // packages/utils/src/lib/reports/utils.ts
787
- function calcDuration(start, stop) {
788
- return Math.round((stop ?? performance.now()) - start);
789
- }
790
-
791
- // packages/utils/src/lib/execute-process.ts
792
- var ProcessError = class extends Error {
793
- code;
794
- stderr;
795
- stdout;
796
- constructor(result) {
797
- super(result.stderr);
798
- this.code = result.code;
799
- this.stderr = result.stderr;
800
- this.stdout = result.stdout;
801
- }
802
- };
803
- function executeProcess(cfg) {
804
- const { command, args, observer, ignoreExitCode = false, ...options } = cfg;
805
- const { onStdout, onStderr, onError, onComplete } = observer ?? {};
806
- const date = (/* @__PURE__ */ new Date()).toISOString();
807
- const start = performance.now();
808
- return new Promise((resolve, reject) => {
809
- const spawnedProcess = spawn(command, args ?? [], {
810
- shell: true,
811
- windowsHide: true,
812
- ...options
813
- });
814
- let stdout = "";
815
- let stderr = "";
816
- spawnedProcess.stdout.on("data", (data) => {
817
- stdout += String(data);
818
- onStdout?.(String(data), spawnedProcess);
819
- });
820
- spawnedProcess.stderr.on("data", (data) => {
821
- stderr += String(data);
822
- onStderr?.(String(data), spawnedProcess);
823
- });
824
- spawnedProcess.on("error", (err) => {
825
- stderr += err.toString();
826
- });
827
- spawnedProcess.on("close", (code2) => {
828
- const timings = { date, duration: calcDuration(start) };
829
- if (code2 === 0 || ignoreExitCode) {
830
- onComplete?.();
831
- resolve({ code: code2, stdout, stderr, ...timings });
832
- } else {
833
- const errorMsg = new ProcessError({ code: code2, stdout, stderr, ...timings });
834
- onError?.(errorMsg);
835
- reject(errorMsg);
836
- }
837
- });
838
- });
839
- }
840
-
841
- // packages/utils/src/lib/file-system.ts
842
- import { bold, gray } from "ansis";
843
- import { bundleRequire } from "bundle-require";
844
- import { mkdir, readFile, readdir, rm, stat } from "node:fs/promises";
845
- import { dirname, join } from "node:path";
846
-
847
- // packages/utils/src/lib/logging.ts
848
- import isaacs_cliui from "@isaacs/cliui";
849
- import { cliui } from "@poppinss/cliui";
850
- import { underline } from "ansis";
851
- var singletonUiInstance;
852
- function ui() {
853
- if (singletonUiInstance === void 0) {
854
- singletonUiInstance = cliui();
855
- }
856
- return {
857
- ...singletonUiInstance,
858
- row: (args) => {
859
- logListItem(args);
860
- }
861
- };
862
- }
863
- var singletonisaacUi;
864
- function logListItem(args) {
865
- if (singletonisaacUi === void 0) {
866
- singletonisaacUi = isaacs_cliui({ width: TERMINAL_WIDTH });
867
- }
868
- singletonisaacUi.div(...args);
869
- const content = singletonisaacUi.toString();
870
- singletonisaacUi.rows = [];
871
- singletonUiInstance?.logger.log(content);
872
- }
873
-
874
- // packages/utils/src/lib/file-system.ts
875
- async function fileExists(path) {
876
- try {
877
- const stats = await stat(path);
878
- return stats.isFile();
879
- } catch {
880
- return false;
881
- }
882
- }
883
- async function ensureDirectoryExists(baseDir) {
884
- try {
885
- await mkdir(baseDir, { recursive: true });
886
- return;
887
- } catch (error) {
888
- ui().logger.info(error.message);
889
- if (error.code !== "EEXIST") {
890
- throw error;
891
- }
892
- }
893
- }
894
- function pluginWorkDir(slug) {
895
- return join("node_modules", ".code-pushup", slug);
896
- }
897
- function filePathToCliArg(path) {
898
- return `"${path}"`;
899
- }
900
-
901
- // packages/utils/src/lib/git/git.ts
902
- import { simpleGit } from "simple-git";
903
-
904
- // packages/utils/src/lib/transform.ts
905
- import { platform } from "node:os";
906
- function objectToKeys(obj) {
907
- return Object.keys(obj);
908
- }
909
- function objectToEntries(obj) {
910
- return Object.entries(obj);
911
- }
912
- function objectFromEntries(entries) {
913
- return Object.fromEntries(entries);
914
- }
915
- function toUnixNewlines(text) {
916
- return platform() === "win32" ? text.replace(/\r\n/g, "\n") : text;
917
- }
918
- function fromJsonLines(jsonLines) {
919
- const unifiedNewLines = toUnixNewlines(jsonLines).trim();
920
- return JSON.parse(`[${unifiedNewLines.split("\n").join(",")}]`);
921
- }
922
-
923
- // packages/utils/src/lib/git/git.commits-and-tags.ts
924
- import { simpleGit as simpleGit2 } from "simple-git";
925
-
926
- // packages/utils/src/lib/semver.ts
927
- import { rcompare, valid } from "semver";
928
-
929
- // packages/utils/src/lib/progress.ts
930
- import { black, bold as bold2, gray as gray2, green } from "ansis";
931
- import { MultiProgressBars } from "multi-progress-bars";
932
-
933
- // packages/utils/src/lib/reports/generate-md-report.ts
934
- import { MarkdownDocument as MarkdownDocument3, md as md4 } from "build-md";
935
-
936
- // packages/utils/src/lib/reports/formatting.ts
937
- import {
938
- MarkdownDocument,
939
- md as md2
940
- } from "build-md";
941
-
942
- // packages/utils/src/lib/reports/generate-md-report-categoy-section.ts
943
- import { MarkdownDocument as MarkdownDocument2, md as md3 } from "build-md";
944
-
945
- // packages/utils/src/lib/reports/generate-md-reports-diff.ts
946
- import {
947
- MarkdownDocument as MarkdownDocument5,
948
- md as md6
949
- } from "build-md";
950
-
951
- // packages/utils/src/lib/reports/generate-md-reports-diff-utils.ts
952
- import { MarkdownDocument as MarkdownDocument4, md as md5 } from "build-md";
953
-
954
- // packages/utils/src/lib/reports/log-stdout-summary.ts
955
- import { bold as bold4, cyan, cyanBright, green as green2, red } from "ansis";
956
-
957
- // packages/plugin-js-packages/src/lib/runner/utils.ts
958
- function filterAuditResult(result, key, referenceResult) {
959
- if (result.vulnerabilities.length === 0) {
960
- return result;
961
- }
962
- const uniqueResult = result.vulnerabilities.reduce(
963
- (acc, ref) => {
964
- const matchReference = referenceResult ?? acc;
965
- const isMatch = matchReference.vulnerabilities.map((vulnerability) => vulnerability[key]).includes(ref[key]);
966
- if (isMatch) {
967
- return {
968
- vulnerabilities: acc.vulnerabilities,
969
- summary: {
970
- ...acc.summary,
971
- [ref.severity]: acc.summary[ref.severity] - 1,
972
- total: acc.summary.total - 1
973
- }
974
- };
975
- }
976
- return {
977
- vulnerabilities: [...acc.vulnerabilities, ref],
978
- summary: acc.summary
979
- };
980
- },
981
- { vulnerabilities: [], summary: result.summary }
982
- );
983
- return {
984
- vulnerabilities: uniqueResult.vulnerabilities,
985
- summary: uniqueResult.summary
986
- };
987
- }
988
-
989
- // packages/plugin-js-packages/src/lib/package-managers/constants.ts
990
- var COMMON_AUDIT_ARGS = ["audit", "--json"];
991
- var COMMON_OUTDATED_ARGS = ["outdated", "--json"];
992
-
993
- // packages/plugin-js-packages/src/lib/package-managers/npm/audit-result.ts
994
- function npmToAuditResult(output) {
995
- const npmAudit = JSON.parse(output);
996
- const vulnerabilities = objectToEntries(npmAudit.vulnerabilities).map(
997
- ([name2, detail]) => {
998
- const advisory = npmToAdvisory(name2, npmAudit.vulnerabilities);
999
- return {
1000
- name: name2.toString(),
1001
- severity: detail.severity,
1002
- versionRange: detail.range,
1003
- directDependency: detail.isDirect ? true : detail.effects[0] ?? "",
1004
- fixInformation: npmToFixInformation(detail.fixAvailable),
1005
- ...advisory != null && {
1006
- title: advisory.title,
1007
- url: advisory.url
1008
- }
1009
- };
1010
- }
1011
- );
1012
- return {
1013
- vulnerabilities,
1014
- summary: npmAudit.metadata.vulnerabilities
1015
- };
1016
- }
1017
- function npmToFixInformation(fixAvailable) {
1018
- if (typeof fixAvailable === "boolean") {
1019
- return fixAvailable ? "Fix is available." : "";
1020
- }
1021
- return `Fix available: Update \`${fixAvailable.name}\` to version **${fixAvailable.version}**${fixAvailable.isSemVerMajor ? " (breaking change)." : "."}`;
1022
- }
1023
- function npmToAdvisory(name2, vulnerabilities, prevNodes = /* @__PURE__ */ new Set()) {
1024
- const advisory = vulnerabilities[name2]?.via;
1025
- if (Array.isArray(advisory) && advisory.length > 0 && typeof advisory[0] === "object") {
1026
- return { title: advisory[0].title, url: advisory[0].url };
1027
- }
1028
- if (Array.isArray(advisory) && advisory.length > 0 && advisory.every((value) => typeof value === "string")) {
1029
- let advisoryInfo = null;
1030
- let newReferences = [];
1031
- let advisoryInfoFound = false;
1032
- for (const via of advisory) {
1033
- if (!prevNodes.has(via)) {
1034
- newReferences.push(via);
1035
- }
1036
- }
1037
- while (newReferences.length > 0 && !advisoryInfoFound) {
1038
- const ref = newReferences.pop();
1039
- prevNodes.add(ref);
1040
- const result = npmToAdvisory(ref, vulnerabilities, prevNodes);
1041
- if (result != null) {
1042
- advisoryInfo = { title: result.title, url: result.url };
1043
- advisoryInfoFound = true;
1044
- }
1045
- }
1046
- return advisoryInfo;
1047
- }
1048
- return null;
1049
- }
1050
-
1051
- // packages/plugin-js-packages/src/lib/package-managers/npm/outdated-result.ts
1052
- function npmToOutdatedResult(output) {
1053
- const npmOutdated = JSON.parse(output);
1054
- return objectToEntries(npmOutdated).filter(
1055
- (entry) => entry[1].current != null
1056
- ).map(([name2, overview]) => ({
1057
- name: name2,
1058
- current: overview.current,
1059
- latest: overview.latest,
1060
- type: overview.type,
1061
- ...overview.homepage != null && { url: overview.homepage }
1062
- }));
1063
- }
1064
-
1065
- // packages/plugin-js-packages/src/lib/package-managers/npm/npm.ts
1066
- var npmDependencyOptions = {
1067
- prod: ["--omit=dev", "--omit=optional"],
1068
- dev: ["--include=dev", "--omit=optional"],
1069
- optional: ["--include=optional", "--omit=dev"]
1070
- };
1071
- var npmPackageManager = {
1072
- slug: "npm",
1073
- name: "NPM",
1074
- command: "npm",
1075
- icon: "npm",
1076
- docs: {
1077
- homepage: "https://docs.npmjs.com/",
1078
- audit: "https://docs.npmjs.com/cli/commands/npm-audit",
1079
- outdated: "https://docs.npmjs.com/cli/commands/npm-outdated"
1080
- },
1081
- audit: {
1082
- getCommandArgs: (groupDep) => [
1083
- ...COMMON_AUDIT_ARGS,
1084
- ...npmDependencyOptions[groupDep],
1085
- "--audit-level=none"
1086
- ],
1087
- unifyResult: npmToAuditResult,
1088
- // prod dependencies need to be filtered out manually since v10
1089
- postProcessResult: (results) => {
1090
- const depGroups = objectToKeys(results);
1091
- const devFilter = results.dev && results.prod ? filterAuditResult(results.dev, "name", results.prod) : results.dev;
1092
- const optionalFilter = results.optional && results.prod ? filterAuditResult(results.optional, "name", results.prod) : results.optional;
1093
- return {
1094
- ...depGroups.includes("prod") && { prod: results.prod },
1095
- ...depGroups.includes("dev") && { dev: devFilter },
1096
- ...depGroups.includes("optional") && { optional: optionalFilter }
1097
- };
1098
- }
1099
- },
1100
- outdated: {
1101
- commandArgs: [...COMMON_OUTDATED_ARGS, "--long"],
1102
- unifyResult: npmToOutdatedResult
1103
- }
1104
- };
1105
-
1106
- // packages/plugin-js-packages/src/lib/runner/audit/utils.ts
1107
- function getVulnerabilitiesTotal(summary) {
1108
- return Object.values(summary).reduce((acc, value) => acc + value, 0);
1109
- }
1110
-
1111
- // packages/plugin-js-packages/src/lib/package-managers/pnpm/utils.ts
1112
- var filterOutWarnings = (output) => output.split("\n").filter((line) => !line.trim().startsWith("WARN")).join("\n");
1113
-
1114
- // packages/plugin-js-packages/src/lib/package-managers/pnpm/audit-result.ts
1115
- function pnpmToAuditResult(output) {
1116
- const pnpmResult = JSON.parse(
1117
- filterOutWarnings(output)
1118
- );
1119
- const vulnerabilities = Object.values(pnpmResult.advisories).map(
1120
- ({
1121
- module_name: name2,
1122
- id,
1123
- title,
1124
- url,
1125
- severity,
1126
- vulnerable_versions: versionRange,
1127
- recommendation: fixInformation,
1128
- findings
1129
- }) => {
1130
- const path = findings[0]?.paths[0];
1131
- return {
1132
- name: name2,
1133
- id,
1134
- title,
1135
- url,
1136
- severity,
1137
- versionRange,
1138
- directDependency: path == null ? true : pnpmToDirectDependency(path),
1139
- fixInformation
1140
- };
1141
- }
1142
- );
1143
- return {
1144
- vulnerabilities,
1145
- summary: {
1146
- ...pnpmResult.metadata.vulnerabilities,
1147
- total: getVulnerabilitiesTotal(pnpmResult.metadata.vulnerabilities)
1148
- }
1149
- };
1150
- }
1151
- function pnpmToDirectDependency(path) {
1152
- const deps = path.split(" > ").slice(1);
1153
- if (deps.length <= 1) {
1154
- return true;
1155
- }
1156
- return deps[0]?.split("@")[0] ?? true;
1157
- }
1158
-
1159
- // packages/plugin-js-packages/src/lib/package-managers/pnpm/outdated-result.ts
1160
- function pnpmToOutdatedResult(output) {
1161
- const pnpmOutdated = JSON.parse(
1162
- filterOutWarnings(output)
1163
- );
1164
- return objectToEntries(pnpmOutdated).map(
1165
- ([name2, { current, latest, dependencyType: type }]) => ({
1166
- name: name2,
1167
- current,
1168
- latest,
1169
- type
1170
- })
1171
- );
1172
- }
1173
-
1174
- // packages/plugin-js-packages/src/lib/package-managers/pnpm/pnpm.ts
1175
- var pnpmDependencyOptions = {
1176
- prod: ["--prod", "--no-optional"],
1177
- dev: ["--dev", "--no-optional"],
1178
- optional: []
1179
- };
1180
- var pnpmPackageManager = {
1181
- slug: "pnpm",
1182
- name: "pnpm",
1183
- command: "pnpm",
1184
- icon: "pnpm",
1185
- docs: {
1186
- homepage: "https://pnpm.io/pnpm-cli",
1187
- audit: "https://pnpm.io/cli/audit/",
1188
- outdated: "https://pnpm.io/cli/outdated"
1189
- },
1190
- audit: {
1191
- getCommandArgs: (groupDep) => [
1192
- ...COMMON_AUDIT_ARGS,
1193
- ...pnpmDependencyOptions[groupDep]
1194
- ],
1195
- ignoreExitCode: true,
1196
- unifyResult: pnpmToAuditResult,
1197
- // optional dependencies don't have an exclusive option so they need duplicates filtered out
1198
- postProcessResult: (results) => {
1199
- const depGroups = objectToKeys(results);
1200
- const prodFilter = results.optional && results.prod ? filterAuditResult(results.optional, "id", results.prod) : results.optional;
1201
- const devFilter = prodFilter && results.dev ? filterAuditResult(prodFilter, "id", results.dev) : results.optional;
1202
- return {
1203
- ...depGroups.includes("prod") && { prod: results.prod },
1204
- ...depGroups.includes("dev") && { dev: results.dev },
1205
- ...results.optional && { optional: devFilter }
1206
- };
1207
- }
1208
- },
1209
- outdated: {
1210
- commandArgs: COMMON_OUTDATED_ARGS,
1211
- unifyResult: pnpmToOutdatedResult
1212
- }
1213
- };
1214
-
1215
- // packages/plugin-js-packages/src/lib/package-managers/yarn-classic/audit-result.ts
1216
- function yarnv1ToAuditResult(output) {
1217
- const yarnv1Result = fromJsonLines(output);
1218
- const [yarnv1Advisory, yarnv1Summary] = validateYarnv1Result(yarnv1Result);
1219
- const vulnerabilities = yarnv1Advisory.map(
1220
- ({ data: { resolution, advisory } }) => {
1221
- const { id, path } = resolution;
1222
- const directDependency = path.slice(0, path.indexOf(">"));
1223
- const {
1224
- module_name: name2,
1225
- title,
1226
- url,
1227
- severity,
1228
- vulnerable_versions: versionRange,
1229
- recommendation: fixInformation
1230
- } = advisory;
1231
- return {
1232
- name: name2,
1233
- title,
1234
- id,
1235
- url,
1236
- severity,
1237
- versionRange,
1238
- directDependency: name2 === directDependency ? true : directDependency,
1239
- fixInformation
1240
- };
1241
- }
1242
- );
1243
- const summary = {
1244
- ...yarnv1Summary.data.vulnerabilities,
1245
- total: Object.values(yarnv1Summary.data.vulnerabilities).reduce(
1246
- (acc, amount) => acc + amount,
1247
- 0
1248
- )
1249
- };
1250
- return filterAuditResult({ vulnerabilities, summary }, "id");
1251
- }
1252
- function validateYarnv1Result(result) {
1253
- const summary = result.at(-1);
1254
- if (summary?.type !== "auditSummary") {
1255
- throw new Error("Invalid Yarn v1 audit result - no summary found.");
1256
- }
1257
- const vulnerabilities = result.filter(
1258
- (item) => item.type === "auditAdvisory"
1259
- );
1260
- return [vulnerabilities, summary];
1261
- }
1262
-
1263
- // packages/plugin-js-packages/src/lib/package-managers/yarn-classic/constants.ts
1264
- var outdatedtoFieldMapper = {
1265
- name: "Package",
1266
- current: "Current",
1267
- latest: "Latest",
1268
- type: "Package Type",
1269
- url: "URL"
1270
- };
1271
- var REQUIRED_OUTDATED_FIELDS = [
1272
- "Package",
1273
- "Current",
1274
- "Latest",
1275
- "Package Type"
1276
- ];
1277
-
1278
- // packages/plugin-js-packages/src/lib/package-managers/yarn-classic/types.ts
1279
- var yarnv1FieldNames = [
1280
- "Package",
1281
- "Current",
1282
- "Latest",
1283
- "Package Type",
1284
- "URL"
1285
- ];
1286
-
1287
- // packages/plugin-js-packages/src/lib/package-managers/yarn-classic/outdated-result.ts
1288
- function yarnv1ToOutdatedResult(output) {
1289
- const yarnv1Outdated = fromJsonLines(output);
1290
- const fields = yarnv1Outdated[1].data.head;
1291
- const dependencies = yarnv1Outdated[1].data.body;
1292
- if (dependencies.length === 0) {
1293
- return [];
1294
- }
1295
- validateOutdatedFields(fields);
1296
- const indexMapping = getOutdatedFieldIndexes(fields);
1297
- return dependencies.map(
1298
- (dep) => objectFromEntries(
1299
- objectToKeys(indexMapping).map((field) => [field, dep[indexMapping[field]]]).filter(
1300
- (entry) => entry[1] != null
1301
- )
1302
- )
1303
- );
1304
- }
1305
- function validateOutdatedFields(head) {
1306
- const relevantFields = head.filter(isYarnv1FieldName);
1307
- if (hasAllRequiredFields(relevantFields)) {
1308
- return true;
1309
- }
1310
- throw new Error(
1311
- `Yarn v1 outdated: Template [${head.join(
1312
- ", "
1313
- )}] does not contain all required fields [${yarnv1FieldNames.join(", ")}]`
1314
- );
1315
- }
1316
- function isYarnv1FieldName(value) {
1317
- const names = yarnv1FieldNames;
1318
- return names.includes(value);
1319
- }
1320
- function hasAllRequiredFields(head) {
1321
- return REQUIRED_OUTDATED_FIELDS.every((field) => head.includes(field));
1322
- }
1323
- function getOutdatedFieldIndexes(all) {
1324
- return objectFromEntries(
1325
- objectToEntries(outdatedtoFieldMapper).map(([outdatedField, yarnField]) => [
1326
- outdatedField,
1327
- all.indexOf(yarnField)
1328
- ])
1329
- );
1330
- }
1331
-
1332
- // packages/plugin-js-packages/src/lib/package-managers/yarn-classic/yarn-classic.ts
1333
- var yarnv1PackageManager = {
1334
- slug: "yarn-classic",
1335
- name: "Yarn v1",
1336
- command: "yarn",
1337
- icon: "yarn",
1338
- docs: {
1339
- homepage: "https://classic.yarnpkg.com/docs/",
1340
- audit: "https://classic.yarnpkg.com/docs/cli/audit",
1341
- outdated: "https://classic.yarnpkg.com/docs/cli/outdated/"
1342
- },
1343
- audit: {
1344
- getCommandArgs: (groupDep) => [
1345
- ...COMMON_AUDIT_ARGS,
1346
- "--groups",
1347
- dependencyGroupToLong[groupDep]
1348
- ],
1349
- ignoreExitCode: true,
1350
- unifyResult: yarnv1ToAuditResult
1351
- },
1352
- outdated: {
1353
- commandArgs: COMMON_OUTDATED_ARGS,
1354
- unifyResult: yarnv1ToOutdatedResult
1355
- }
1356
- };
1357
-
1358
- // packages/plugin-js-packages/src/lib/package-managers/yarn-modern/audit-result.ts
1359
- function yarnv2ToAuditResult(output) {
1360
- const yarnv2Audit = JSON.parse(output);
1361
- const vulnerabilities = Object.values(yarnv2Audit.advisories).map(
1362
- ({
1363
- module_name: name2,
1364
- severity,
1365
- title,
1366
- url,
1367
- vulnerable_versions: versionRange,
1368
- recommendation: fixInformation,
1369
- findings
1370
- }) => {
1371
- const directDep = findings[0]?.paths[0];
1372
- return {
1373
- name: name2,
1374
- severity,
1375
- title,
1376
- url,
1377
- versionRange,
1378
- fixInformation,
1379
- directDependency: directDep != null && directDep !== name2 ? directDep : true
1380
- };
1381
- }
1382
- );
1383
- return {
1384
- vulnerabilities,
1385
- summary: {
1386
- ...yarnv2Audit.metadata.vulnerabilities,
1387
- total: getVulnerabilitiesTotal(yarnv2Audit.metadata.vulnerabilities)
1388
- }
1389
- };
1390
- }
1391
-
1392
- // packages/plugin-js-packages/src/lib/package-managers/yarn-modern/outdated-result.ts
1393
- function yarnv2ToOutdatedResult(output) {
1394
- const npmOutdated = JSON.parse(output);
1395
- return npmOutdated.map(({ name: name2, current, latest, type }) => ({
1396
- name: name2,
1397
- current,
1398
- latest,
1399
- type
1400
- }));
1401
- }
1402
-
1403
- // packages/plugin-js-packages/src/lib/package-managers/yarn-modern/yarn-modern.ts
1404
- var yarnv2EnvironmentOptions = {
1405
- prod: "production",
1406
- dev: "development",
1407
- optional: ""
1408
- };
1409
- var yarnv2PackageManager = {
1410
- slug: "yarn-modern",
1411
- name: "yarn-modern",
1412
- command: "yarn",
1413
- icon: "yarn",
1414
- docs: {
1415
- homepage: "https://yarnpkg.com/getting-started",
1416
- audit: "https://yarnpkg.com/cli/npm/audit",
1417
- outdated: "https://github.com/mskelton/yarn-plugin-outdated"
1418
- },
1419
- audit: {
1420
- getCommandArgs: (groupDep) => [
1421
- "npm",
1422
- ...COMMON_AUDIT_ARGS,
1423
- "--environment",
1424
- yarnv2EnvironmentOptions[groupDep]
1425
- ],
1426
- supportedDepGroups: ["prod", "dev"],
1427
- // Yarn v2 does not support audit for optional dependencies
1428
- unifyResult: yarnv2ToAuditResult,
1429
- ignoreExitCode: true
1430
- },
1431
- outdated: {
1432
- commandArgs: COMMON_OUTDATED_ARGS,
1433
- unifyResult: yarnv2ToOutdatedResult
1434
- }
1435
- };
1436
-
1437
- // packages/plugin-js-packages/src/lib/package-managers/package-managers.ts
1438
- var packageManagers = {
1439
- npm: npmPackageManager,
1440
- "yarn-classic": yarnv1PackageManager,
1441
- "yarn-modern": yarnv2PackageManager,
1442
- pnpm: pnpmPackageManager
1443
- };
1444
-
1445
- // packages/plugin-js-packages/src/lib/runner/index.ts
1446
- import { writeFile } from "node:fs/promises";
1447
- import { dirname as dirname2 } from "node:path";
1448
-
1449
- // packages/plugin-js-packages/src/lib/runner/audit/transform.ts
1450
- import { md as md7 } from "build-md";
1451
-
1452
- // packages/plugin-js-packages/src/lib/runner/constants.ts
1453
- import { join as join2 } from "node:path";
1454
- var WORKDIR = pluginWorkDir("js-packages");
1455
- var RUNNER_OUTPUT_PATH = join2(WORKDIR, "runner-output.json");
1456
- var PLUGIN_CONFIG_PATH = join2(
1457
- process.cwd(),
1458
- WORKDIR,
1459
- "plugin-config.json"
1460
- );
1461
-
1462
- // packages/plugin-js-packages/src/lib/runner/outdated/transform.ts
1463
- import { md as md8 } from "build-md";
1464
- import { clean, diff, neq } from "semver";
1465
-
1466
- // packages/plugin-js-packages/src/lib/runner/outdated/constants.ts
1467
- var outdatedSeverity = {
1468
- major: "error",
1469
- premajor: "info",
1470
- minor: "warning",
1471
- preminor: "info",
1472
- patch: "info",
1473
- prepatch: "info",
1474
- prerelease: "info"
1475
- };
1476
- var RELEASE_TYPES = objectToKeys(outdatedSeverity);
1477
-
1478
- // packages/plugin-js-packages/src/lib/runner/index.ts
1479
- async function createRunnerConfig(scriptPath, config) {
1480
- await ensureDirectoryExists(dirname2(PLUGIN_CONFIG_PATH));
1481
- await writeFile(PLUGIN_CONFIG_PATH, JSON.stringify(config));
1482
- return {
1483
- command: "node",
1484
- args: [filePathToCliArg(scriptPath)],
1485
- outputFile: RUNNER_OUTPUT_PATH
1486
- };
1487
- }
1488
-
1489
- // packages/plugin-js-packages/src/lib/package-managers/derive-package-manager.ts
1490
- import { readFile as readFile2 } from "node:fs/promises";
1491
- import { join as join3 } from "node:path";
1492
-
1493
- // packages/plugin-js-packages/src/lib/package-managers/derive-yarn.ts
1494
- async function deriveYarnVersion() {
1495
- const { stdout } = await executeProcess({
1496
- command: "yarn",
1497
- args: ["-v"]
1498
- });
1499
- const yarnVersion = Number.parseInt(stdout.toString().trim().at(0) ?? "", 10);
1500
- if (yarnVersion >= 2) {
1501
- return "yarn-modern";
1502
- } else if (yarnVersion === 1) {
1503
- return "yarn-classic";
1504
- }
1505
- return false;
1506
- }
1507
-
1508
- // packages/plugin-js-packages/src/lib/package-managers/derive-package-manager.ts
1509
- async function derivePackageManagerInPackageJson(currentDir = process.cwd()) {
1510
- if (await fileExists(join3(currentDir, "package.json"))) {
1511
- const content = JSON.parse(
1512
- (await readFile2(join3("package.json"))).toString()
1513
- );
1514
- const { packageManager: packageManagerData = "" } = content;
1515
- const [manager = "", version2 = ""] = packageManagerData.split("@");
1516
- if (manager === "npm") {
1517
- return manager;
1518
- }
1519
- if (manager === "pnpm") {
1520
- return manager;
1521
- }
1522
- if (manager === "yarn") {
1523
- const majorVersion = Number(version2.split(".")[0]);
1524
- return majorVersion > 1 ? "yarn-modern" : "yarn-classic";
1525
- }
1526
- }
1527
- return false;
1528
- }
1529
- async function derivePackageManager(currentDir = process.cwd()) {
1530
- const pkgManagerFromPackageJson = await derivePackageManagerInPackageJson(currentDir);
1531
- if (pkgManagerFromPackageJson) {
1532
- return pkgManagerFromPackageJson;
1533
- }
1534
- if (await fileExists(join3(currentDir, "package-lock.json"))) {
1535
- return "npm";
1536
- } else if (await fileExists(join3(currentDir, "pnpm-lock.yaml"))) {
1537
- return "pnpm";
1538
- } else if (await fileExists(join3(currentDir, "yarn.lock"))) {
1539
- const yarnVersion = await deriveYarnVersion();
1540
- if (yarnVersion) {
1541
- return yarnVersion;
1542
- }
1543
- }
1544
- throw new Error(
1545
- "Could not detect package manager. Please provide it in the js-packages plugin config."
1546
- );
1547
- }
1548
-
1549
- // packages/plugin-js-packages/src/lib/utils.ts
1550
- async function normalizeConfig(config) {
1551
- const jsPackagesPluginConfig = jsPackagesPluginConfigSchema.parse(
1552
- config ?? {}
1553
- );
1554
- const {
1555
- packageManager,
1556
- dependencyGroups: dependencyGroupsCfg = [],
1557
- checks: checksCfg = [],
1558
- ...jsPackagesPluginConfigRest
1559
- } = jsPackagesPluginConfig;
1560
- const checks = [...new Set(checksCfg)];
1561
- const depGroups = [...new Set(dependencyGroupsCfg)];
1562
- const pm = packageManagers[packageManager ?? await derivePackageManager()];
1563
- return {
1564
- ...jsPackagesPluginConfigRest,
1565
- packageManager: pm,
1566
- checks,
1567
- depGroups
1568
- };
1569
- }
1570
-
1571
- // packages/plugin-js-packages/src/lib/js-packages-plugin.ts
1572
- async function jsPackagesPlugin(config) {
1573
- const { packageManager, checks, depGroups, ...jsPackagesPluginConfigRest } = await normalizeConfig(config);
1574
- const runnerScriptPath = join4(
1575
- fileURLToPath(dirname3(import.meta.url)),
1576
- "bin.js"
1577
- );
1578
- return {
1579
- slug: "js-packages",
1580
- title: "JS Packages",
1581
- icon: packageManager.icon,
1582
- description: "This plugin runs audit to uncover vulnerabilities and lists outdated dependencies. It supports npm, yarn classic, yarn modern, and pnpm package managers.",
1583
- docsUrl: packageManager.docs.homepage,
1584
- packageName: name,
1585
- version,
1586
- audits: createAudits(packageManager.slug, checks, depGroups),
1587
- groups: createGroups(packageManager.slug, checks, depGroups),
1588
- runner: await createRunnerConfig(runnerScriptPath, {
1589
- ...jsPackagesPluginConfigRest,
1590
- checks,
1591
- packageManager: packageManager.slug,
1592
- dependencyGroups: depGroups
1593
- })
1594
- };
1595
- }
1596
- function createGroups(id, checks, depGroups) {
1597
- const pm = packageManagers[id];
1598
- const supportedAuditDepGroups = pm.audit.supportedDepGroups ?? dependencyGroups;
1599
- const compatibleAuditDepGroups = depGroups.filter(
1600
- (group) => supportedAuditDepGroups.includes(group)
1601
- );
1602
- const groups = {
1603
- audit: {
1604
- slug: `${pm.slug}-audit`,
1605
- title: `${pm.name} audit`,
1606
- description: `Group containing ${pm.name} vulnerabilities.`,
1607
- docsUrl: pm.docs.audit,
1608
- refs: compatibleAuditDepGroups.map((depGroup) => ({
1609
- slug: `${pm.slug}-audit-${depGroup}`,
1610
- weight: dependencyGroupWeights[depGroup]
1611
- }))
1612
- },
1613
- outdated: {
1614
- slug: `${pm.slug}-outdated`,
1615
- title: `${pm.name} outdated dependencies`,
1616
- description: `Group containing outdated ${pm.name} dependencies.`,
1617
- docsUrl: pm.docs.outdated,
1618
- refs: depGroups.map((depGroup) => ({
1619
- slug: `${pm.slug}-outdated-${depGroup}`,
1620
- weight: dependencyGroupWeights[depGroup]
1621
- }))
1622
- }
1623
- };
1624
- return checks.map((check) => groups[check]);
1625
- }
1626
- function createAudits(id, checks, depGroups) {
1627
- const { slug } = packageManagers[id];
1628
- return checks.flatMap((check) => {
1629
- const supportedAuditDepGroups = packageManagers[id].audit.supportedDepGroups ?? dependencyGroups;
1630
- const compatibleDepGroups = check === "audit" ? depGroups.filter((group) => supportedAuditDepGroups.includes(group)) : depGroups;
1631
- return compatibleDepGroups.map((depGroup) => ({
1632
- slug: `${slug}-${check}-${depGroup}`,
1633
- title: getAuditTitle(slug, check, depGroup),
1634
- description: getAuditDescription(check, depGroup),
1635
- docsUrl: dependencyDocs[depGroup]
1636
- }));
1637
- });
1638
- }
1639
- function getAuditTitle(id, check, depGroup) {
1640
- const pm = packageManagers[id];
1641
- return check === "audit" ? `Vulnerabilities for ${pm.name} ${depGroup} dependencies.` : `Outdated ${pm.name} ${depGroup} dependencies.`;
1642
- }
1643
- function getAuditDescription(check, depGroup) {
1644
- return check === "audit" ? `Runs security audit on ${depGroup} dependencies.` : `Checks for outdated ${depGroup} dependencies`;
1645
- }
1646
-
1647
- // packages/plugin-js-packages/src/index.ts
1648
- var src_default = jsPackagesPlugin;
1649
- export {
1650
- src_default as default
1651
- };