@cyclonedx/cdxgen 11.1.0 → 11.1.2

package/README.md

@@ -519,6 +519,10 @@ pnpm run lint
 pnpm test
 ```
 
+## Sponsors
+
+<img src="./docs/_media/LevoLogo-LightBg.jpg" width="200" height="auto">
+
 <!-- LINK LABELS -->
 <!-- Badges -->
 

package/bin/cdxgen.js

@@ -167,6 +167,7 @@ const args = yargs(hideBin(process.argv))
   })
   .option("install-deps", {
     type: "boolean",
+    default: true,
     description:
       "Install dependencies automatically for some projects. Defaults to true but disabled for containers and oci scans. Use --no-install-deps to disable this feature.",
   })
@@ -506,7 +507,6 @@ const applyAdvancedOptions = (options) => {
       options.installDeps = true;
       break;
     default:
-      options.installDeps = true;
       break;
   }
   // When the user specifies source-code-analysis as a technique, then enable deep and evidence mode.

package/lib/cli/index.js

@@ -135,6 +135,7 @@ import {
   parsePkgJson,
   parsePkgLock,
   parsePnpmLock,
+  parsePnpmWorkspace,
   parsePom,
   parsePrivadoFile,
   parsePubLockData,
@@ -2310,6 +2311,11 @@ export async function createNodejsBom(path, options) {
     `${options.multiProject ? "**/" : ""}pnpm-lock.yaml`,
     options,
   );
+  const pnpmWorkspaceFiles = getAllFiles(
+    path,
+    `${options.multiProject ? "**/" : ""}pnpm-workspace.yaml`,
+    options,
+  );
   const minJsFiles = getAllFiles(
     path,
     `${options.multiProject ? "**/" : ""}*min.js`,
@@ -2479,6 +2485,67 @@ export async function createNodejsBom(path, options) {
     isPackageManagerAllowed("pnpm", ["npm", "yarn", "rush"], options)
   ) {
     manifestFiles = manifestFiles.concat(pnpmLockFiles);
+    const workspacePackages = [];
+    const workspaceSrcFiles = {};
+    const workspaceDirectDeps = {};
+    const depsWorkspaceRefs = {};
+    let workspaceCatalogs = {};
+    let workspaceWarningShown = false;
+    // Is this a pnpm workspace?
+    for (const f of pnpmWorkspaceFiles) {
+      if (DEBUG_MODE) {
+        console.log(`Parsing workspace definition ${f}`);
+      }
+      const workspaceObj = parsePnpmWorkspace(f);
+      if (workspaceObj?.packages) {
+        // We need the precise purl for all workspace packages and their direct dependencies
+        for (const awp of workspaceObj.packages) {
+          const wpkgJsonFiles = getAllFiles(awp, "**/package.json", options);
+          if (!wpkgJsonFiles?.length) {
+            if (!workspaceWarningShown) {
+              workspaceWarningShown = true;
+              console.log(
+                `Unable to find any package.json files belonging to the workspace '${awp}' referred in ${f}. To improve SBOM precision, run cdxgen from the directory containing the complete source code.`,
+              );
+            }
+            continue;
+          }
+          for (const apj of wpkgJsonFiles) {
+            const pkgData = JSON.parse(readFileSync(apj, "utf-8"));
+            if (pkgData?.name) {
+              let workspaceRef = `pkg:npm/${pkgData.name}`;
+              if (pkgData?.version) {
+                workspaceRef = `${workspaceRef}@${pkgData.version}`;
+              }
+              // Track all workspace purls
+              workspacePackages.push(workspaceRef);
+              workspaceSrcFiles[workspaceRef] = apj;
+              // Track the direct dependencies of each workspace and workspace refs for each direct deps.
+              const allDeps = {
+                ...(pkgData.dependencies || {}),
+                ...(pkgData.devDependencies || {}),
+                ...(pkgData.peerDependencies || {}),
+              };
+              for (const adep of Object.keys(allDeps)) {
+                if (!workspaceDirectDeps[workspaceRef]) {
+                  workspaceDirectDeps[workspaceRef] = new Set();
+                }
+                const apkgRef = `pkg:npm/${adep}`;
+                workspaceDirectDeps[workspaceRef].add(apkgRef);
+                if (!depsWorkspaceRefs[apkgRef]) {
+                  depsWorkspaceRefs[apkgRef] = [];
+                }
+                depsWorkspaceRefs[apkgRef].push(workspaceRef);
+              }
+            }
+          }
+        }
+      }
+      workspaceCatalogs = {
+        ...workspaceCatalogs,
+        ...(workspaceObj.catalogs || {}),
+      };
+    }
     for (const f of pnpmLockFiles) {
       if (DEBUG_MODE) {
         console.log(`Parsing ${f}`);
@@ -2527,7 +2594,15 @@ export async function createNodejsBom(path, options) {
         }
       }
       // Parse the pnpm file
-      const parsedList = await parsePnpmLock(f, parentComponent);
+      const parsedList = await parsePnpmLock(
+        f,
+        parentComponent,
+        workspacePackages,
+        workspaceSrcFiles,
+        workspaceCatalogs,
+        workspaceDirectDeps,
+        depsWorkspaceRefs,
+      );
       const dlist = parsedList.pkgList;
       if (dlist?.length) {
         pkgList = pkgList.concat(dlist);
@@ -5911,7 +5986,11 @@ export function trimComponents(components) {
   const keyCache = {};
   const filteredComponents = [];
   for (const comp of components) {
-    const key = comp.purl || comp["bom-ref"] || comp.name + comp.version;
+    const key = (
+      comp.purl ||
+      comp["bom-ref"] ||
+      comp.name + comp.version
+    ).toLowerCase();
     if (!keyCache[key]) {
       keyCache[key] = comp;
     } else {

package/lib/evinser/evinser.js

@@ -1017,10 +1017,7 @@ export function isFilterableType(language, userDefinedTypesMap, typeFullName) {
       return true;
     }
   }
-  if (userDefinedTypesMap[typeFullName]) {
-    return true;
-  }
-  return false;
+  return !!userDefinedTypesMap[typeFullName];
 }
 
 /**

package/lib/helpers/utils.js

@@ -23,6 +23,7 @@ import path, {
   extname,
   join,
   resolve,
+  relative,
   sep as _sep,
 } from "node:path";
 import process from "node:process";
@@ -975,12 +976,12 @@ export async function parsePkgJson(pkgJsonFile, simple = false) {
     try {
       const pkgData = JSON.parse(readFileSync(pkgJsonFile, "utf8"));
       const pkgIdentifier = parsePackageJsonName(pkgData.name);
-      const name = pkgIdentifier.fullName || pkgData.name;
+      let name = pkgIdentifier.fullName || pkgData.name;
       if (DEBUG_MODE && !name && !pkgJsonFile.includes("node_modules")) {
+        name = dirname(pkgJsonFile);
         console.log(
-          `${pkgJsonFile} doesn't contain the package name. Consider using the 'npm init' command to create a valid package.json file for this project.`,
+          `${pkgJsonFile} doesn't contain the package name. Consider using the 'npm init' command to create a valid package.json file for this project. Assuming the name as '${name}'.`,
         );
-        return pkgList;
       }
       const group = pkgIdentifier.scope || "";
       const purl = new PackageURL(
@@ -1967,6 +1968,59 @@ function _markTreeOptional(
   }
 }
 
+function _setTreeWorkspaceRef(
+  dependenciesMap,
+  depref,
+  pkgRefMap,
+  wref,
+  wsrcFile,
+  depsWorkspaceRefs,
+) {
+  for (const dref of dependenciesMap[depref] || []) {
+    const addedMap = {};
+    const depPkg = pkgRefMap[dref];
+    if (!depPkg) {
+      continue;
+    }
+    const wsprops = depPkg.properties.filter(
+      (p) => p.name === "internal:workspaceRef",
+    );
+    if (wsprops.length) {
+      continue;
+    }
+    depPkg.properties = depPkg.properties || [];
+    for (const prop of depPkg.properties) {
+      addedMap[prop.value] = true;
+    }
+    if (!addedMap[wref]) {
+      depPkg.properties.push({
+        name: "internal:workspaceRef",
+        value: wref,
+      });
+      addedMap[wref] = true;
+    }
+    if (wsrcFile && !addedMap[wsrcFile]) {
+      depPkg.properties.push({
+        name: "internal:workspaceSrcFile",
+        value: wsrcFile,
+      });
+      addedMap[wsrcFile] = true;
+    }
+    depsWorkspaceRefs[dref] = depsWorkspaceRefs[dref] || [];
+    depsWorkspaceRefs[dref] = depsWorkspaceRefs[dref].concat(
+      dependenciesMap[depref] || [],
+    );
+    _setTreeWorkspaceRef(
+      dependenciesMap,
+      dref,
+      pkgRefMap,
+      wref,
+      wsrcFile,
+      depsWorkspaceRefs,
+    );
+  }
+}
+
 async function getVersionNumPnpm(depPkg, relativePath) {
   let version = depPkg;
   if (typeof version === "object" && depPkg.version) {
@@ -2003,13 +2057,48 @@ async function getVersionNumPnpm(depPkg, relativePath) {
   return version;
 }
 
+/**
+ * Parse pnpm workspace file
+ *
+ * @param {string} workspaceFile pnpm-workspace.yaml
+ * @returns {object} Object containing packages and catalogs
+ */
+export function parsePnpmWorkspace(workspaceFile) {
+  const workspaceData = readFileSync(workspaceFile, "utf-8");
+  const yamlObj = _load(workspaceData);
+  if (!yamlObj) {
+    return {};
+  }
+  const packages = (yamlObj.packages || [])
+    .filter((n) => !/^(!|\.|__)/.test(n))
+    .map((n) => n.replaceAll("/**", "").replaceAll("/*", ""));
+  const catalogs = yamlObj.catalog || {};
+  return {
+    packages,
+    catalogs,
+  };
+}
+
 /**
  * Parse nodejs pnpm lock file
  *
  * @param {string} pnpmLock pnpm-lock.yaml file
- * @param {object} parentComponent parent component
+ * @param {Object} parentComponent parent component
+ * @param {Array[String]} workspacePackages Workspace packages
+ * @param {Object} workspaceSrcFiles Workspace package.json files
+ * @param {Object} workspaceCatalogs Workspace catalogs
+ * @param {Object} workspaceDirectDeps Direct dependencies of each workspace
+ * @param {Object} depsWorkspaceRefs Workspace references for each dependency
  */
-export async function parsePnpmLock(pnpmLock, parentComponent = null) {
+export async function parsePnpmLock(
+  pnpmLock,
+  parentComponent = null,
+  workspacePackages = [],
+  workspaceSrcFiles = {},
+  _workspaceCatalogs = {},
+  _workspaceDirectDeps = {},
+  depsWorkspaceRefs = {},
+) {
   let pkgList = [];
   const dependenciesList = [];
   // For lockfile >= 9, we need to track dev and optional packages manually
@@ -2022,6 +2111,16 @@ export async function parsePnpmLock(pnpmLock, parentComponent = null) {
   let lockfileVersion = 0;
   const parentSubComponents = [];
   const srcFilesMap = {};
+  const workspacePackageNames = {};
+  const pkgRefMap = {};
+  // Track references to packages that are directly installed from github.com
+  const gitPkgRefs = {};
+  // pnpm could refer to packages from git sources
+  const githubServerHost = process.env.CDXGEN_GIT_HOST || "github.com";
+  // Convert workspace package names to an object to help with the lookup
+  for (const w of workspacePackages || []) {
+    workspacePackageNames[w] = true;
+  }
   if (parentComponent?.name) {
     ppurl =
       parentComponent.purl ||
@@ -2061,6 +2160,10 @@ export async function parsePnpmLock(pnpmLock, parentComponent = null) {
         lockfileVersion >= 6
           ? yamlObj.importers["."]?.optionalDependencies || {}
           : {};
+      const rootPeerDeps =
+        lockfileVersion >= 6
+          ? yamlObj.importers["."]?.peerDependencies || {}
+          : {};
       const ddeplist = new Set();
       // Find the root optional dependencies
       for (const rdk of Object.keys(rootDevDeps)) {
@@ -2075,7 +2178,7 @@ export async function parsePnpmLock(pnpmLock, parentComponent = null) {
         ).toString();
         possibleOptionalDeps[decodeURIComponent(dpurl)] = true;
       }
-      for (const rdk of Object.keys(rootOptionalDeps)) {
+      for (const rdk of Object.keys({ ...rootOptionalDeps, ...rootPeerDeps })) {
         const version = await getVersionNumPnpm(rootOptionalDeps[rdk]);
         const dpurl = new PackageURL(
           "npm",
@@ -2117,6 +2220,8 @@ export async function parsePnpmLock(pnpmLock, parentComponent = null) {
         const componentOptionalDeps =
           yamlObj?.importers[importedComponentName]["optionalDependencies"] ||
           {};
+        const componentPeerDeps =
+          yamlObj?.importers[importedComponentName]["peerDependencies"] || {};
         let compPurl = undefined;
         let pkgSrcFile = undefined;
         let fallbackMode = true;
@@ -2136,14 +2241,39 @@ export async function parsePnpmLock(pnpmLock, parentComponent = null) {
             const compRef = decodeURIComponent(compPurl);
             // Add this package to the root dependency list and parent component
             ddeplist.add(compRef);
-            parentSubComponents.push({
+            const psObj = {
               group: importedComponentObj[0]?.group,
               name: importedComponentObj[0]?.name,
               version,
               type: "application",
               purl: compPurl,
               "bom-ref": compRef,
-            });
+            };
+            const purlNoVersion = new PackageURL(
+              "npm",
+              importedComponentObj[0]?.group,
+              importedComponentObj[0]?.name,
+              version,
+            ).toString();
+            const matchRef =
+              workspacePackageNames[decodeURIComponent(purlNoVersion)] ||
+              workspacePackageNames[compRef];
+            const matchSrcFile =
+              workspaceSrcFiles[decodeURIComponent(purlNoVersion)] ||
+              workspaceSrcFiles[compRef];
+            if (matchRef || matchSrcFile) {
+              psObj.properties = [
+                { name: "internal:is_workspace", value: "true" },
+              ];
+            }
+            if (matchSrcFile) {
+              psObj.properties.push({ name: "SrcFile", value: matchSrcFile });
+              psObj.properties.push({
+                name: "internal:virtual_path",
+                value: relative(dirname(pnpmLock), dirname(matchSrcFile)),
+              });
+            }
+            parentSubComponents.push(psObj);
             fallbackMode = false;
           }
         }
@@ -2167,20 +2297,37 @@ export async function parsePnpmLock(pnpmLock, parentComponent = null) {
         // Find the component optional dependencies
         const comDepList = new Set();
         for (const cdk of Object.keys(componentDeps)) {
+          let name = cdk;
+          let group = "";
+          let version;
           const versionObj = componentDeps[cdk];
-          const version = await getVersionNumPnpm(
-            versionObj,
-            importedComponentName,
-          );
+          if (versionObj?.version?.startsWith(githubServerHost)) {
+            const parts = versionObj.version.split("/");
+            version = parts.pop();
+            name = parts.pop();
+            group = parts.pop();
+            if (group === githubServerHost) {
+              group = "";
+            } else {
+              group = `@${group}`;
+            }
+            gitPkgRefs[versionObj.version] = { group, name, version };
+          } else {
+            version = await getVersionNumPnpm(
+              versionObj,
+              importedComponentName,
+            );
+          }
           const dpurl = new PackageURL(
             "npm",
-            "",
-            cdk,
+            group,
+            name,
             version,
             null,
             null,
           ).toString();
           const depRef = decodeURIComponent(dpurl);
+          // This is a definite dependency of this component
           comDepList.add(depRef);
           possibleOptionalDeps[depRef] = false;
           // Track the package.json files
@@ -2191,10 +2338,6 @@ export async function parsePnpmLock(pnpmLock, parentComponent = null) {
             srcFilesMap[depRef].push(pkgSrcFile);
           }
         }
-        dependenciesList.push({
-          ref: decodeURIComponent(compPurl),
-          dependsOn: [...comDepList].sort(),
-        });
         for (const cdk of Object.keys(componentDevDeps)) {
           const version = await getVersionNumPnpm(componentDevDeps[cdk]);
           const dpurl = new PackageURL(
@@ -2205,9 +2348,15 @@ export async function parsePnpmLock(pnpmLock, parentComponent = null) {
             null,
             null,
           ).toString();
-          possibleOptionalDeps[decodeURIComponent(dpurl)] = true;
-        }
-        for (const cdk of Object.keys(componentOptionalDeps)) {
+          const devDpRef = decodeURIComponent(dpurl);
+          possibleOptionalDeps[devDpRef] = true;
+          // This is also a dependency of this component
+          comDepList.add(devDpRef);
+        }
+        for (const cdk of Object.keys({
+          ...componentOptionalDeps,
+          ...componentPeerDeps,
+        })) {
           const version = await getVersionNumPnpm(componentOptionalDeps[cdk]);
           const dpurl = new PackageURL(
             "npm",
@@ -2219,6 +2368,10 @@ export async function parsePnpmLock(pnpmLock, parentComponent = null) {
           ).toString();
           possibleOptionalDeps[decodeURIComponent(dpurl)] = true;
         }
+        dependenciesList.push({
+          ref: decodeURIComponent(compPurl),
+          dependsOn: [...comDepList].sort(),
+        });
       }
       dependenciesList.push({
         ref: decodeURIComponent(ppurl),
@@ -2356,12 +2509,28 @@ export async function parsePnpmLock(pnpmLock, parentComponent = null) {
         }
         // Let's have some warnings till we fully support pnpm 8
         if (!name) {
-          console.warn(
-            `Unable to extract name and version for string ${pkgKeys[k]}`,
-            parts,
-            fullName,
-          );
-          continue;
+          if (gitPkgRefs[fullName]) {
+            name = gitPkgRefs[fullName].name;
+            group = gitPkgRefs[fullName].group;
+            version = gitPkgRefs[fullName].version;
+          } else if (parts?.length >= 3 && parts[0] === githubServerHost) {
+            version = parts[parts.length - 1];
+            name = parts[parts.length - 2];
+            group = parts.length === 4 ? `@${parts[parts.length - 3]}` : "";
+            gitPkgRefs[fullName] = {
+              group,
+              name,
+              version,
+              purl: new PackageURL("npm", group, name, version).toString(),
+            };
+          } else {
+            console.warn(
+              `Unable to extract name and version for string ${pkgKeys[k]}`,
+              parts,
+              fullName,
+            );
+            continue;
+          }
         }
         if (name.indexOf("file:") !== 0) {
           const purlString = new PackageURL(
@@ -2384,7 +2553,7 @@ export async function parsePnpmLock(pnpmLock, parentComponent = null) {
             if (dpkgName.endsWith("-cjs")) {
               const tmpB = vers.split("@");
               if (tmpB.length > 1) {
-                dpkgName = tmpB[0];
+                dpkgName = tmpB[0].replace(/^\//, "");
                 vers = tmpB[1];
               }
             }
@@ -2394,7 +2563,9 @@ export async function parsePnpmLock(pnpmLock, parentComponent = null) {
             // With overrides version could be like this: @nolyfill/side-channel@1.0.29
             if (vers.includes("@")) {
               const overrideVersion = vers.split("@").pop();
-              dpkgName = vers.replace(`@${overrideVersion}`, "");
+              dpkgName = vers
+                .replace(`@${overrideVersion}`, "")
+                .replace(/^\//, "");
               vers = overrideVersion;
             }
             const dpurlString = new PackageURL(
@@ -2423,6 +2594,7 @@ export async function parsePnpmLock(pnpmLock, parentComponent = null) {
           if (!dependenciesMap[bomRef]) {
             dependenciesMap[bomRef] = [];
           }
+
           dependenciesMap[bomRef] = dependenciesMap[bomRef].concat(deplist);
           const properties = [
             {
@@ -2450,12 +2622,75 @@ export async function parsePnpmLock(pnpmLock, parentComponent = null) {
               });
             }
           }
-          pkgList.push({
+          const purlNoVersion = new PackageURL("npm", group, name).toString();
+          let packageType = "library";
+          const theBomRef = decodeURIComponent(purlString);
+          if (
+            workspacePackageNames[decodeURIComponent(purlNoVersion)] ||
+            workspacePackageNames[theBomRef]
+          ) {
+            properties.push({
+              name: "internal:is_workspace",
+              value: "true",
+            });
+            packageType = "application";
+            const wsSrcFile =
+              workspaceSrcFiles[decodeURIComponent(purlNoVersion)] ||
+              workspaceSrcFiles[theBomRef];
+            if (wsSrcFile) {
+              properties.push({
+                name: "internal:virtual_path",
+                value: relative(dirname(pnpmLock), dirname(wsSrcFile)),
+              });
+            }
+          }
+          // Capture all the workspaces that directly depend on this package and their source file
+          for (const wref of Array.from(
+            depsWorkspaceRefs[purlNoVersion] ||
+              depsWorkspaceRefs[purlString] ||
+              [],
+          )) {
+            // This cycle shouldn't happen, but we can't be sure
+            if (wref === purlString) {
+              continue;
+            }
+            properties.push({
+              name: "internal:workspaceRef",
+              value: wref,
+            });
+            if (workspaceSrcFiles[wref]) {
+              properties.push({
+                name: "internal:workspaceSrcFile",
+                value: workspaceSrcFiles[wref],
+              });
+            }
+            // Add workspaceRef to the dependent components as well
+            for (const dref of dependenciesMap[theBomRef]) {
+              if (!depsWorkspaceRefs[dref]) {
+                depsWorkspaceRefs[dref] = [];
+              }
+              if (!depsWorkspaceRefs[dref].includes(wref)) {
+                depsWorkspaceRefs[dref].push(wref);
+              }
+              if (dependenciesMap[dref]) {
+                for (const l2ref of dependenciesMap[dref]) {
+                  if (!depsWorkspaceRefs[l2ref]) {
+                    depsWorkspaceRefs[l2ref] = [];
+                  }
+                  if (!depsWorkspaceRefs[l2ref].includes(wref)) {
+                    depsWorkspaceRefs[l2ref].push(wref);
+                  }
+                }
+              }
+            }
+          }
+          const thePkg = {
             group: group,
             name: name,
             version: version,
             purl: purlString,
-            "bom-ref": decodeURIComponent(purlString),
+            "bom-ref": theBomRef,
+            type: packageType,
             scope,
             _integrity: integrity,
             properties,
@@ -2472,7 +2707,12 @@ export async function parsePnpmLock(pnpmLock, parentComponent = null) {
                 ],
               },
             },
-          });
+          };
+          // Don't add internal workspace packages to the components list
+          if (thePkg.type !== "application") {
+            pkgList.push(thePkg);
+          }
+          pkgRefMap[thePkg["bom-ref"]] = thePkg;
         }
       }
     }
@@ -2524,6 +2764,55 @@ export async function parsePnpmLock(pnpmLock, parentComponent = null) {
     if (requiredDependencies[apkg["bom-ref"]]) {
       apkg.scope = undefined;
     }
+    // There are no workspaces so exit early
+    if (!Object.keys(workspacePackageNames).length) {
+      continue;
+    }
+    const purlNoVersion = decodeURIComponent(
+      new PackageURL("npm", apkg.group, apkg.name).toString(),
+    );
+    const wsRefs =
+      depsWorkspaceRefs[apkg["bom-ref"]] || depsWorkspaceRefs[purlNoVersion];
+    // There is a workspace reference
+    if (wsRefs?.length) {
+      const wsprops = apkg.properties.filter(
+        (p) => p.name === "internal:workspaceRef",
+      );
+      // workspace properties are already set.
+      if (wsprops.length) {
+        continue;
+      }
+      for (const wref of wsRefs) {
+        // Such a cycle should never happen, but we can't sure
+        if (wref === apkg["bom-ref"]) {
+          continue;
+        }
+        apkg.properties.push({
+          name: "internal:workspaceRef",
+          value: wref,
+        });
+        const purlObj = PackageURL.fromString(apkg.purl);
+        purlObj.version = undefined;
+        const wrefNoVersion = decodeURIComponent(purlObj.toString());
+        const wsrcFile =
+          workspaceSrcFiles[wref] || workspaceSrcFiles[wrefNoVersion];
+        if (wsrcFile) {
+          apkg.properties.push({
+            name: "internal:workspaceSrcFile",
+            value: wsrcFile,
+          });
+        }
+        // Repeat for the children
+        _setTreeWorkspaceRef(
+          dependenciesMap,
+          apkg["bom-ref"],
+          pkgRefMap,
+          wref,
+          wsrcFile,
+          depsWorkspaceRefs,
+        );
+      }
+    }
   }
 
   if (Object.keys(dependenciesMap).length) {
@@ -4449,6 +4738,7 @@ export async function parsePyLockData(lockData, lockFile, pyProjectFile) {
   const dependenciesList = [];
   const depsMap = {};
   const existingPkgMap = {};
+  const pkgBomRefMap = {};
   let directDepsKeys = {};
   let groupDepsKeys = {};
   let parentComponent;
@@ -4503,6 +4793,20 @@ export async function parsePyLockData(lockData, lockFile, pyProjectFile) {
           // Nested workspace is not supported
           const wcompMap = parsePyProjectTomlFile(awpyproj);
           if (wcompMap?.parentComponent) {
+            wcompMap.parentComponent.properties =
+              wcompMap.parentComponent.properties || [];
+            wcompMap.parentComponent.properties.push({
+              name: "internal:is_workspace",
+              value: "true",
+            });
+            wcompMap.parentComponent.properties.push({
+              name: "SrcFile",
+              value: awpyproj,
+            });
+            wcompMap.parentComponent.properties.push({
+              name: "internal:virtual_path",
+              value: relative(dirname(lockFile), dirname(awpyproj)),
+            });
             workspaceComponentMap[wcompMap.parentComponent.name] =
               wcompMap.parentComponent;
             workspacePyProjMap[wcompMap.parentComponent.name] = awpyproj;
@@ -4703,7 +5007,12 @@ export async function parsePyLockData(lockData, lockFile, pyProjectFile) {
     }
     // This would help the lookup
     existingPkgMap[pkg.name.toLowerCase()] = pkg["bom-ref"];
-    pkgList.push(pkg);
+    pkgBomRefMap[pkg["bom-ref"]] = pkg;
+    // Do not repeat workspace components again under components
+    // This will reduce false positives, when a downstream tool attempts to analyze all components
+    if (pkg.type !== "application") {
+      pkgList.push(pkg);
+    }
     if (!depsMap[pkg["bom-ref"]]) {
       depsMap[pkg["bom-ref"]] = new Set();
     }
@@ -4716,34 +5025,138 @@ export async function parsePyLockData(lockData, lockFile, pyProjectFile) {
         depsMap[pkgParentRef].add(pkg["bom-ref"]);
       }
     }
-    if (apkg.dependencies) {
+    let optionalDependencies = [];
+    let devDependencies = [];
+    if (apkg["dev-dependencies"]) {
+      for (const agroup of Object.keys(apkg["dev-dependencies"])) {
+        devDependencies = devDependencies.concat(
+          apkg["dev-dependencies"][agroup],
+        );
+      }
+    }
+    if (apkg["optional-dependencies"]) {
+      for (const agroup of Object.keys(apkg["optional-dependencies"])) {
+        optionalDependencies = optionalDependencies.concat(
+          apkg["optional-dependencies"][agroup],
+        );
+      }
+    }
+    if (
+      apkg.dependencies ||
+      devDependencies.length ||
+      optionalDependencies.length
+    ) {
       if (Array.isArray(apkg.dependencies)) {
         // pdm.lock files
-        for (const apkgDep of apkg.dependencies) {
+        let allDeps = apkg.dependencies;
+        allDeps = allDeps.concat(devDependencies);
+        allDeps = allDeps.concat(optionalDependencies);
+        for (const apkgDep of allDeps) {
           // Example: "msgpack>=0.5.2"
           const nameStr =
             apkgDep.name || apkgDep.split(/(==|<=|~=|>=)/)[0].split(" ")[0];
           depsMap[pkg["bom-ref"]].add(existingPkgMap[nameStr] || nameStr);
+          // Propagate the workspace properties to the child components
+          if (
+            existingPkgMap[nameStr] &&
+            pkgBomRefMap[existingPkgMap[nameStr]]
+          ) {
+            const dependentPkg = pkgBomRefMap[existingPkgMap[nameStr]];
+            dependentPkg.properties = dependentPkg.properties || [];
+            const addedValue = {};
+            // Is the parent a workspace
+            if (workspaceComponentMap[pkg.name]) {
+              dependentPkg.properties.push({
+                name: "internal:workspaceRef",
+                value: pkg["bom-ref"],
+              });
+              dependentPkg.properties.push({
+                name: "internal:workspaceSrcFile",
+                value: workspaceRefPyProjMap[pkg["bom-ref"]],
+              });
+              addedValue[pkg["bom-ref"]] = true;
+            }
+            for (const pprop of pkg.properties) {
+              if (
+                pprop.name.startsWith("internal:workspace") &&
+                !addedValue[pprop.value]
+              ) {
+                dependentPkg.properties.push(pprop);
+                addedValue[pprop.value] = true;
+              }
+            }
+          }
         }
-      } else if (Object.keys(apkg.dependencies).length) {
+      } else if (pkg.dependencies && Object.keys(apkg.dependencies).length) {
         for (const apkgDep of Object.keys(apkg.dependencies)) {
           depsMap[pkg["bom-ref"]].add(existingPkgMap[apkgDep] || apkgDep);
         }
       }
     }
   }
-  pkgList = await getPyMetadata(pkgList, false);
   for (const key of Object.keys(depsMap)) {
     const dependsOnList = new Set();
+    const parentPkg = pkgBomRefMap[key];
     for (const adep of Array.from(depsMap[key])) {
+      let depRef;
       if (adep.startsWith("pkg:")) {
-        dependsOnList.add(adep);
+        depRef = adep;
       } else if (existingPkgMap[adep]) {
-        dependsOnList.add(existingPkgMap[adep]);
+        depRef = existingPkgMap[adep];
       } else if (existingPkgMap[`py${adep}`]) {
-        dependsOnList.add(existingPkgMap[`py${adep}`]);
+        depRef = existingPkgMap[`py${adep}`];
       } else if (existingPkgMap[adep.replace(/-/g, "_")]) {
-        dependsOnList.add(existingPkgMap[adep.replace(/-/g, "_")]);
+        depRef = existingPkgMap[adep.replace(/-/g, "_")];
+      }
+      if (depRef) {
+        dependsOnList.add(depRef);
+        // We need to propagate the workspace properties from the parent
+        const dependentPkg = pkgBomRefMap[depRef];
+        dependentPkg.properties = dependentPkg.properties || [];
+        const addedValue = {};
+        for (const p of dependentPkg.properties) {
+          if (p.name.startsWith("internal:workspace")) {
+            addedValue[p.value] = true;
+          }
+        }
+        for (const pprop of parentPkg.properties) {
+          if (
+            pprop.name.startsWith("internal:workspace") &&
+            !addedValue[pprop.value]
+          ) {
+            dependentPkg.properties.push(pprop);
+            addedValue[pprop.value] = true;
+          } else if (pprop.name === "internal:is_workspace") {
+            dependentPkg.properties.push({
+              name: "internal:workspaceRef",
+              value: parentPkg["bom-ref"],
+            });
+            dependentPkg.properties.push({
+              name: "internal:workspaceSrcFile",
+              value: workspaceRefPyProjMap[parentPkg["bom-ref"]],
+            });
+            addedValue[parentPkg["bom-ref"]] = true;
+            addedValue[workspaceRefPyProjMap[parentPkg["bom-ref"]]] = true;
+            const childDeps = depsMap[dependentPkg["bom-ref"]];
+            for (const childRef of childDeps) {
+              if (!childRef.startsWith("pkg:")) {
+                continue;
+              }
+              const childPkg = pkgBomRefMap[childRef];
+              if (childPkg) {
+                childPkg.properties = childPkg.properties || [];
+                childPkg.properties.push({
+                  name: "internal:workspaceRef",
+                  value: parentPkg["bom-ref"],
+                });
+                childPkg.properties.push({
+                  name: "internal:workspaceSrcFile",
+                  value: workspaceRefPyProjMap[parentPkg["bom-ref"]],
+                });
+              }
+            }
+          }
+        }
       }
     }
     dependenciesList.push({
@@ -4751,6 +5164,7 @@ export async function parsePyLockData(lockData, lockFile, pyProjectFile) {
       dependsOn: [...dependsOnList].sort(),
     });
   }
+  pkgList = await getPyMetadata(pkgList, false);
   return {
     parentComponent,
     pkgList,
@@ -9114,17 +9528,43 @@ export function parseCsProjAssetsData(csProjData, assetsJsonFile) {
           continue;
         }
         const targetNameVersion = `${nameOperatorVersion.name}/${nameOperatorVersion.version}`;
-
-        // skip if the dep is not in the targets for whatever reason
+        let nameToUse = nameOperatorVersion.name;
+        // Due to the difference in casing, we might arrive this case where a simple lookup doesn't succeed.
+        // Instead of skipping, let's work harder to find a match.
         if (!csProjData.targets[frameworkTarget][targetNameVersion]) {
-          continue;
+          let matchFound = false;
+          for (const fkeys of Object.keys(
+            csProjData.targets[frameworkTarget],
+          )) {
+            const tmpParts = fkeys.split("/");
+            const tname = tmpParts[0];
+            const tversion = tmpParts[1];
+            if (
+              tname.toLowerCase() === nameOperatorVersion.name.toLowerCase() &&
+              tversion === nameOperatorVersion.version
+            ) {
+              nameToUse = tname;
+              matchFound = true;
+              break;
+            }
+          }
+          if (!matchFound) {
+            if (DEBUG_MODE) {
+              console.log(
+                "Unable to match",
+                dependencyName,
+                "with a target name. The dependency tree will be imprecise.",
+              );
+            }
+            continue;
+          }
         }
 
         const dpurl = decodeURIComponent(
           new PackageURL(
             "nuget",
             "",
-            nameOperatorVersion.name,
+            nameToUse,
             nameOperatorVersion.version,
             null,
             null,

package/lib/helpers/utils.test.js

@@ -76,6 +76,7 @@ import {
   parsePkgJson,
   parsePkgLock,
   parsePnpmLock,
+  parsePnpmWorkspace,
   parsePom,
   parsePrivadoFile,
   parsePubLockData,
@@ -3479,6 +3480,12 @@ test("parseSetupPyFile", async () => {
   ]);
 });
 
+test("parsePnpmWorkspace", async () => {
+  const wobj = parsePnpmWorkspace("./test/data/pnpm_locks/pnpm-workspace.yaml");
+  expect(wobj.packages.length).toEqual(31);
+  expect(Object.keys(wobj.catalogs).length).toEqual(217);
+});
+
 test("parsePnpmLock", async () => {
   let parsedList = await parsePnpmLock("./test/pnpm-lock.yaml");
   expect(parsedList.pkgList.length).toEqual(1706);
@@ -3491,6 +3498,7 @@ test("parsePnpmLock", async () => {
     "bom-ref": "pkg:npm/@babel/code-frame@7.10.1",
     purl: "pkg:npm/%40babel/code-frame@7.10.1",
     scope: undefined,
+    type: "library",
     version: "7.10.1",
     properties: [
       {
@@ -3523,6 +3531,7 @@ test("parsePnpmLock", async () => {
     "bom-ref": "pkg:npm/@babel/code-frame@7.16.7",
     purl: "pkg:npm/%40babel/code-frame@7.16.7",
     scope: "optional",
+    type: "library",
     version: "7.16.7",
     properties: [
       {
@@ -3554,6 +3563,7 @@ test("parsePnpmLock", async () => {
     "bom-ref": "pkg:npm/ansi-regex@2.1.1",
     purl: "pkg:npm/ansi-regex@2.1.1",
     scope: undefined,
+    type: "library",
     _integrity: "sha1-w7M6te42DYbg5ijwRorn7yfWVN8=",
     properties: [{ name: "SrcFile", value: "./test/data/pnpm-lock2.yaml" }],
     evidence: {
@@ -3590,6 +3600,7 @@ test("parsePnpmLock", async () => {
     "bom-ref": "pkg:npm/@nodelib/fs.scandir@2.1.5",
     purl: "pkg:npm/%40nodelib/fs.scandir@2.1.5",
     scope: undefined,
+    type: "library",
     _integrity:
       "sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g==",
     properties: [{ name: "SrcFile", value: "./test/data/pnpm-lock3.yaml" }],
@@ -3625,6 +3636,7 @@ test("parsePnpmLock", async () => {
     "bom-ref": "pkg:npm/@babel/code-frame@7.18.6",
     purl: "pkg:npm/%40babel/code-frame@7.18.6",
     scope: "optional",
+    type: "library",
     _integrity:
       "sha512-TDCmlK5eOvH+eH7cdAFlNXeVJqWIQ7gW9tY1GJIpUtFb6CmjVyq2VM3u71bOyR8CRihcCgMUYoDNyLXao3+70Q==",
     properties: [{ name: "SrcFile", value: "./test/data/pnpm-lock6.yaml" }],
@@ -3649,6 +3661,7 @@ test("parsePnpmLock", async () => {
     "bom-ref": "pkg:npm/yargs@17.7.1",
     purl: "pkg:npm/yargs@17.7.1",
     scope: "optional",
+    type: "library",
     _integrity:
       "sha512-cwiTb08Xuv5fqF4AovYacTFNxk62th7LKJ6BL9IGUpTJrWoU7/7WdQGTP2SjKf1dUNBGzDd28p/Yfs/GI6JrLw==",
     properties: [{ name: "SrcFile", value: "./test/data/pnpm-lock6.yaml" }],
@@ -3676,6 +3689,7 @@ test("parsePnpmLock", async () => {
     "bom-ref": "pkg:npm/@babel/code-frame@7.18.6",
     purl: "pkg:npm/%40babel/code-frame@7.18.6",
     scope: "optional",
+    type: "library",
     _integrity:
       "sha512-TDCmlK5eOvH+eH7cdAFlNXeVJqWIQ7gW9tY1GJIpUtFb6CmjVyq2VM3u71bOyR8CRihcCgMUYoDNyLXao3+70Q==",
     properties: [{ name: "SrcFile", value: "./test/data/pnpm-lock6a.yaml" }],
@@ -3723,9 +3737,9 @@ test("parsePnpmLock", async () => {
       obj["ref"] === "pkg:npm/rush/my-toolchain@latest#tools/my-toolchain",
   );
   expect(mainRootDependency["dependsOn"].length).toEqual(0);
-  expect(myAppRootDependency["dependsOn"].length).toEqual(2);
-  expect(myControlsRootDependency["dependsOn"].length).toEqual(0);
-  expect(myToolChainRootDependency["dependsOn"].length).toEqual(1);
+  expect(myAppRootDependency["dependsOn"].length).toEqual(4);
+  expect(myControlsRootDependency["dependsOn"].length).toEqual(2);
+  expect(myToolChainRootDependency["dependsOn"].length).toEqual(4);
 
   parsedList = await parsePnpmLock("./test/data/pnpm-lock9a.yaml", {
     name: "pnpm9",
@@ -3757,6 +3771,7 @@ test("parsePnpmLock", async () => {
     version: "2.3.0",
     purl: "pkg:npm/%40ampproject/remapping@2.3.0",
     "bom-ref": "pkg:npm/@ampproject/remapping@2.3.0",
+    type: "library",
     _integrity:
       "sha512-30iZtAPgz+LTIYoeivqYo853f02jBYSd5uGnGpkFV0M3xOt9aN73erkgYAmZU43x4VfqcnLxW9Kpg3R5LC4YYw==",
     properties: [{ name: "SrcFile", value: "./pnpm-lock.yaml" }],

package/lib/helpers/validator.js

@@ -1,11 +1,11 @@
 import { readFileSync } from "node:fs";
-import { dirname, join } from "node:path";
+import { join } from "node:path";
 import Ajv from "ajv";
 import addFormats from "ajv-formats";
 import { PackageURL } from "packageurl-js";
 import { DEBUG_MODE, dirNameStr, isPartialTree } from "./utils.js";
 
-import { URL, fileURLToPath } from "node:url";
+import { URL } from "node:url";
 let url = import.meta.url;
 if (!url.startsWith("file://")) {
   url = new URL(`file://${import.meta.url}`).toString();
@@ -58,7 +58,10 @@ export const validateBom = (bomJson) => {
   }
   // Deep validation tests
   return (
-    validateMetadata(bomJson) && validatePurls(bomJson) && validateRefs(bomJson)
+    validateMetadata(bomJson) &&
+    validatePurls(bomJson) &&
+    validateRefs(bomJson) &&
+    validateProps(bomJson)
   );
 };
 
@@ -266,3 +269,61 @@ export const validateRefs = (bomJson) => {
   }
   return true;
 };
+
+/**
+ * Validate the component properties
+ *
+ * @param {object} bomJson Bom json object
+ */
+export function validateProps(bomJson) {
+  const errorList = [];
+  const warningsList = [];
+  let isWorkspaceMode = false;
+  if (bomJson?.components) {
+    for (const comp of bomJson.components) {
+      if (!["library", "framework"].includes(comp.type)) {
+        continue;
+      }
+      if (!comp.properties) {
+        warningsList.push(`${comp["bom-ref"]} lacks properties.`);
+      } else {
+        let srcFilePropFound = false;
+        let workspacePropFound = false;
+        for (const p of comp.properties) {
+          if (p.name === "SrcFile") {
+            srcFilePropFound = true;
+          }
+          if (p.name === "internal:workspaceRef") {
+            isWorkspaceMode = true;
+            workspacePropFound = true;
+          }
+        }
+        if (
+          isWorkspaceMode &&
+          !workspacePropFound &&
+          !srcFilePropFound &&
+          comp?.scope !== "optional"
+        ) {
+          warningsList.push(
+            `${comp["bom-ref"]} lacks workspace-related properties.`,
+          );
+        }
+        if (!srcFilePropFound) {
+          warningsList.push(`${comp["bom-ref"]} lacks SrcFile property.`);
+        }
+      }
+      if (!comp.evidence) {
+        warningsList.push(`${comp["bom-ref"]} lacks evidence.`);
+      }
+    }
+  }
+  if (DEBUG_MODE && warningsList.length !== 0) {
+    console.log("===== WARNINGS =====");
+    console.log(warningsList);
+  }
+  if (errorList.length !== 0) {
+    console.log(errorList);
+    return false;
+  }
+  return true;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cyclonedx/cdxgen",
-  "version": "11.1.0",
+  "version": "11.1.2",
   "description": "Creates CycloneDX Software Bill of Materials (SBOM) from source or container image",
   "homepage": "http://github.com/cyclonedx/cdxgen",
   "author": "Prabhu Subramanian <prabhu@appthreat.com>",

package/types/lib/cli/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/cli/index.js"],"names":[],"mappings":"AAoxBA;;;;;;;;GAQG;AACH,gFAFW,MAAM,SAchB;AAuXD;;;;;;;GAOG;AACH,mCALW,MAAM,qBAiEhB;AAED;;;;;GAKG;AACH,uCAHW,MAAM;;;;EAKhB;AAED;;;;;GAKG;AACH,sCAHW,MAAM;;;;EAkBhB;AAED;;;;;GAKG;AACH,oCAHW,MAAM,8BAs7BhB;AAED;;;;;GAKG;AACH,sCAHW,MAAM,8BA0kBhB;AAED;;;;;;;;;;GAUG;AACH,+DAsEC;AAED;;;;;GAKG;AACH,sCAHW,MAAM,8BA+dhB;AAED;;;;;GAKG;AACH,kCAHW,MAAM,8BA+YhB;AAED;;;;;GAKG;AACH,oCAHW,MAAM,8BAqIhB;AAED;;;;;GAKG;AACH,oCAHW,MAAM,8BAkEhB;AAED;;;;;GAKG;AACH,mCAHW,MAAM,qBA+KhB;AAED;;;;;GAKG;AACH,uCAHW,MAAM,qBAsHhB;AAED;;;;;GAKG;AACH,uCAHW,MAAM,qBA2BhB;AAED;;;;;GAKG;AACH,sCAHW,MAAM,qBA2BhB;AAED;;;;;GAKG;AACH,sCAHW,MAAM,qBA2BhB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,qBAuBhB;AAED;;;;;GAKG;AACH,mCAHW,MAAM,8BAqDhB;AAED;;;;;GAKG;AACH,uCAHW,MAAM,8BA4ChB;AAED;;;;;GAKG;AACH,oCAHW,MAAM,qBA2BhB;AAED;;;;;GAKG;AACH,qCAHW,MAAM,8BA6FhB;AAED;;;;;GAKG;AACH,iDAHW,MAAM,qBAmUhB;AAED;;;;;GAKG;AACH,mCAHW,MAAM,qBAiJhB;AAED;;;;;GAKG;AACH,oCAHW,MAAM,8BAqNhB;AAED;;;;;GAKG;AACH,sCAHW,MAAM,8BAkahB;AAED;;;;;GAKG;AACH,2CAHW,MAAM;;;;;;;;;;;;;;;;;;;;GAoChB;AAED;;;;;;;;KA+DC;AAED;;;;;;GAMG;AACH,yDAqFC;AAED;;;;;;;;;GASG;AACH,2GA6BC;AAED;;;;;GAKG;AACH,0CAHW,MAAM,EAAE,8BA2iBlB;AAED;;;;;GAKG;AACH,iCAHW,MAAM,8BAgUhB;AAED;;;;;GAKG;AACH,gCAHW,MAAM,qBAiPhB;AAED;;;;;;GAMG;AACH,wDAFY,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,SAAS,CAAC,CAwHxE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/cli/index.js"],"names":[],"mappings":"AAqxBA;;;;;;;;GAQG;AACH,gFAFW,MAAM,SAchB;AAuXD;;;;;;;GAOG;AACH,mCALW,MAAM,qBAiEhB;AAED;;;;;GAKG;AACH,uCAHW,MAAM;;;;EAKhB;AAED;;;;;GAKG;AACH,sCAHW,MAAM;;;;EAkBhB;AAED;;;;;GAKG;AACH,oCAHW,MAAM,8BAs7BhB;AAED;;;;;GAKG;AACH,sCAHW,MAAM,8BAopBhB;AAED;;;;;;;;;;GAUG;AACH,+DAsEC;AAED;;;;;GAKG;AACH,sCAHW,MAAM,8BA+dhB;AAED;;;;;GAKG;AACH,kCAHW,MAAM,8BA+YhB;AAED;;;;;GAKG;AACH,oCAHW,MAAM,8BAqIhB;AAED;;;;;GAKG;AACH,oCAHW,MAAM,8BAkEhB;AAED;;;;;GAKG;AACH,mCAHW,MAAM,qBA+KhB;AAED;;;;;GAKG;AACH,uCAHW,MAAM,qBAsHhB;AAED;;;;;GAKG;AACH,uCAHW,MAAM,qBA2BhB;AAED;;;;;GAKG;AACH,sCAHW,MAAM,qBA2BhB;AAED;;;;;GAKG;AACH,sCAHW,MAAM,qBA2BhB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,qBAuBhB;AAED;;;;;GAKG;AACH,mCAHW,MAAM,8BAqDhB;AAED;;;;;GAKG;AACH,uCAHW,MAAM,8BA4ChB;AAED;;;;;GAKG;AACH,oCAHW,MAAM,qBA2BhB;AAED;;;;;GAKG;AACH,qCAHW,MAAM,8BA6FhB;AAED;;;;;GAKG;AACH,iDAHW,MAAM,qBAmUhB;AAED;;;;;GAKG;AACH,mCAHW,MAAM,qBAiJhB;AAED;;;;;GAKG;AACH,oCAHW,MAAM,8BAqNhB;AAED;;;;;GAKG;AACH,sCAHW,MAAM,8BAkahB;AAED;;;;;GAKG;AACH,2CAHW,MAAM;;;;;;;;;;;;;;;;;;;;GAoChB;AAED;;;;;;;;KA+DC;AAED;;;;;;GAMG;AACH,yDAyFC;AAED;;;;;;;;;GASG;AACH,2GA6BC;AAED;;;;;GAKG;AACH,0CAHW,MAAM,EAAE,8BA2iBlB;AAED;;;;;GAKG;AACH,iCAHW,MAAM,8BAgUhB;AAED;;;;;GAKG;AACH,gCAHW,MAAM,qBAiPhB;AAED;;;;;;GAMG;AACH,wDAFY,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,SAAS,CAAC,CAwHxE"}

package/types/lib/helpers/utils.d.ts

@@ -147,13 +147,25 @@ export function parseYarnLock(yarnLockFile: string): Promise<{
  * @param {string} swFile shrinkwrap-deps.json file
  */
 export function parseNodeShrinkwrap(swFile: string): Promise<any[]>;
+/**
+ * Parse pnpm workspace file
+ *
+ * @param {string} workspaceFile pnpm-workspace.yaml
+ * @returns {object} Object containing packages and catalogs
+ */
+export function parsePnpmWorkspace(workspaceFile: string): object;
 /**
  * Parse nodejs pnpm lock file
  *
  * @param {string} pnpmLock pnpm-lock.yaml file
- * @param {object} parentComponent parent component
- */
-export function parsePnpmLock(pnpmLock: string, parentComponent?: object): Promise<{
+ * @param {Object} parentComponent parent component
+ * @param {Array[String]} workspacePackages Workspace packages
+ * @param {Object} workspaceSrcFiles Workspace package.json files
+ * @param {Object} workspaceCatalogs Workspace catalogs
+ * @param {Object} workspaceDirectDeps Direct dependencies of each workspace
+ * @param {Object} depsWorkspaceRefs Workspace references for each dependency
+ */
+export function parsePnpmLock(pnpmLock: string, parentComponent?: any, workspacePackages?: any, workspaceSrcFiles?: any, _workspaceCatalogs?: {}, _workspaceDirectDeps?: {}, depsWorkspaceRefs?: any): Promise<{
     pkgList?: undefined;
     dependenciesList?: undefined;
     parentSubComponents?: undefined;

package/types/lib/helpers/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/utils.js"],"names":[],"mappings":"AAgJA,8CAKC;AAED,0CAIC;AAqBD,yCAYC;AAED,2CAQC;AAoND;;;;;;;GAOG;AACH,4EAiBC;AAED;;;;;;GAMG;AACH,mGA2EC;AAED;;;;;;;;GAQG;AACH,yGASC;AAgBD;;;;;;GAMG;AACH,qCAJW,MAAM,WACN,MAAM,2BA8BhB;AAED;;;;;;GAMG;AACH,+CAJW,MAAM,WACN,MAAM,+BAoBhB;AAYD;;;;GAIG;AACH,gCAFa,MAAM,CAIlB;AAED,iCAKC;AAED;;;;;;IAMI;AACJ,iDAJW,MAAM,GACJ,OAAO,CAWnB;AAED;;;;;;;;;GASG;AACH,iEA2BC;AAED;;;;;GAKG;AACH,6CAqDC;AAED;;;;;;GAMG;AACH,sEA0DC;AAED;;;;GAIG;AACH,4EAoCC;AAED;;;GAGG;AACH;;EAUC;AAED,sEA0BC;AAED;;;;GAIG;AACH,+DA4CC;AAED;;;;;GAKG;AACH,0CAHW,MAAM,WACN,OAAO,kBAkFjB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,YACN,MAAM;;;GA+ehB;AAED;;;;;;;GAOG;AACH,6CAFW,MAAM,MA2DhB;AAwBD;;;;GAIG;AACH,4CAFW,MAAM;;;GAkOhB;AAED;;;;GAIG;AACH,4CAFW,MAAM,kBAiEhB;AA+DD;;;;;GAKG;AACH,wCAHW,MAAM,oBACN,MAAM;;;;;;;;;;;;;;;;;;GAiiBhB;AAED;;;;GAIG;AACH,8CAFW,MAAM,kBA+ChB;AAED;;;;GAIG;AACH,sCAFW,MAAM,kBAgFhB;AAED;;;;;GAKG;AACH,kCAHW,MAAM,OAqIhB;AAED;;;;;;GAMG;AACH,0CALW,MAAM,WACN,MAAM,OA+JhB;AAED;;;;;;GAMG;AACH,0CALW,MAAM,oBACN,MAAM,kBACN,GAAG,mBACH,MAAM;;;;;;;;;GAqOhB;AAED;;;GAGG;AACH,uCAFW,MAAM,SAoChB;AAED;;;GAGG;AACH,wCAFW,MAAM,OAahB;AAED,yEAwBC;AAED;;;;GAIG;AACH,+CAFW,MAAM;;;EAwDhB;AAED;;;;;GAKG;AACH,iDAHW,MAAM,qBACN,MAAM;;;;;;;;EAmDhB;AAED;;;;;;;GAOG;AACH,qDALW,MAAM,0BAGJ,MAAM,CAmDlB;AAED;;;GAGG;AACH,iDAFW,MAAM,SA4ChB;AAED;;;GAGG;AACH,8CAFW,MAAM,SAsDhB;AAED;;;GAGG;AACH,2CAFW,MAAM,SAiBhB;AAED;;GAEG;AACH,kDAoCC;AAED;;;;GAIG;AACH,oCAFW,MAAM,OAchB;AAED;;;;GAIG;AACH,wCAFW,MAAM,OAYhB;AAED;;;;;;;;GAQG;AACH,2FAuGC;AAED;;;;;;;;;GASG;AACH,sFAGC;AAED;;;;;;;;;GASG;AACH,gFAFY,MAAO,SAAS,CA6B3B;AAED;;;;;;;;;GASG;AACH,0EAFY,OAAO,QAAQ,CAU1B;AAED;;;;GAIG;AACH,4DAFW,WAAY,SAYtB;AAED;;;;;;;;;GASG;AACH,+FAFY,OAAO,QAAQ,CAc1B;AAED;;;;GAIG;AACH;;;EAqBC;AAED;;;;;GAKG;AACH,iFAFW,GAAC,OA0BX;AAED;;;;;GAKG;AACH,sFAsNC;AAED;;;;GAIG;AACH,qDAmBC;AAED;;;;GAIG;AACH,gEAeC;AAED;;;;;GAKG;AACH,iDAHW,MAAM,OAmLhB;AAED;;;;;;GAMG;AACH,yDAHW,MAAM,iBACN,MAAM;;;;;;;;;;;;;;;;;;;;GA6ThB;AAED;;;;;GAKG;AACH,mFAgKC;AAED;;;;;;;GAOG;AACH,kCALW,MAAM;;;;;;;;GA4EhB;AAED;;;;GAIG;AACH,mEAqBC;AAeD;;;;;GAKG;AACH;;;;;;;;;EAiLC;AAED;;;;GAIG;AACH;;;;;;EAcC;AAED;;;;GAIG;AACH,+DAFY,SAAO,SAAS,CAc3B;AAED;;;;GAIG;AACH,uDAoBC;AAED;;;;GAIG;AACH,oDAFY,QAAQ,CAQnB;AAED;;;;;GAKG;AACH,oEAFY,SAAO,SAAS,CAc3B;AAED;;;;;;GAMG;AACH,oEAFY,OAAO,QAAQ,CA8D1B;AAED;;;;GAIG;AACH,iEA2CC;AA+BD;;;;;;;;GAkCC;AAyBD;;;;;;;GAOG;AACH,sEA4FC;AAED;;;;;;GAMG;AACH,0CAJW,MAAM;;;;;;;;;;;GA2DhB;AA4BD;;;;;;;;;;GAUG;AACH,2CARW,MAAM,aACN,MAAM;;;;;;;;GAkMhB;AAED;;;;GAIG;AACH,yCAHW,MAAM,OAehB;AAED;;;;GAIG;AACH,0CAHW,MAAM,kBAsBhB;AAED,+DA+CC;AAED,uEAwBC;AA6BD;;;;GAIG;AACH,oEAmGC;AAMD;;;;GAIG;AACH,sDAsBC;AAED;;;;;;;;;;GAUG;AACH,uIAFa,KAAK,CAAC,MAAM,CAAC,CA0IzB;AAED;;;;;GAKG;AACH,8CAHW,MAAM,eACN,MAAM,kBAqKhB;AAED;;;;;GAKG;AACH,kDAHW,MAAM,YACN,MAAM;;;;;;;GAoQhB;AAED;;;;GAIG;AACH,kEAqEC;AAED;;;;GAIG;AACH,gEA+CC;AA0BD;;;;;;;;;;;;;;;;;GAiBG;AACH,mEALW,OAAO,4BAiLjB;AAED;;;;;;;;GAQG;AACH,+DALW,OAAO,4BAsIjB;AAED;;;IA4IC;AAED,wEA0BC;AAED;;;;;;;GAOG;AACH,uEAgEC;AAED,0DAwBC;AAED,wDA+DC;AAED,0FAkEC;AAmBD;;IAiEC;AAED;;IA2DC;AAED,2DAiEC;AAED,yDAaC;AAaD,gDA+EC;AAED,yDAkDC;AAED,sDA0BC;AAED,sDAyBC;AAED,6DAwCC;AAED,yDAmCC;AAyCD,qFA2HC;AAED,8DA0BC;AAED,sDAiCC;AAED,yDAgCC;AAED,qDAkDC;AAED;;;;;GAKG;AACH,mDASC;AAED;;;;;;GAMG;AACH,4EAyJC;AAED,kEAoDC;AAED;;;;;;;;GAQG;AACH,kGAwSC;AAED;;;EAoNC;AAED;;;;EAsHC;AAED;;;EA+GC;AAED;;;;;;GAMG;AACH,oDAJW,MAAM,OAsChB;AAED;;;;;GAKG;AACH,+CAHW,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsJhB;AAED;;;;;;EA+HC;AAED;;;;GAIG;AACH,0CAFW,MAAM;;;;;;;;;;;;;;;;;;;;;IAqDhB;AAmBD;;;;;GAKG;AACH,yCAHW,MAAM,YAQhB;AAED;;;;;GAKG;AACH,wCAHW,MAAM,YAchB;AAED;;;;;GAKG;AACH,wCAHW,MAAM,YAQhB;AAED;;;;;GAKG;AACH,yCAHW,MAAM,YAQhB;AAED;;;;;GAKG;AACH,2CAHW,MAAM,YAQhB;AAED;;;;;;;GAOG;AACH,qDALW,MAAM;;;;;;;;;;IAgJhB;AA0CD;;;;;;;GAOG;AACH,8FAHW,MAAM,WACN,MAAM,UAuDhB;AAED;;;;GAIG;AACH,8CAHW,MAAM,WACN,MAAM;;;;;;EAqBhB;AAED;;;GAGG;AACH,iDAFW,MAAM;;;;;;;;;;;;;;;;;;;;;IAwDhB;AAED;;;;;;;GAOG;AACH,iDALW,MAAM,YACN,MAAM,YACN,OAAO,oBACP,OAAO,eA6DjB;AAED,wIA+BC;AAED;;;;;;;GAOG;AACH,sCALW,MAAM,eACN,MAAM,eA6JhB;AAED;;;;;;;;;;;;;;;;;;;;;;IA6DC;AAED;;;;;;GAMG;AACH,kDA8BC;AAED,uDAeC;AAED,2DAeC;AAED,2CAIC;AAED;;;;;;GAMG;AACH,uDAJW,MAAM,MAgBhB;AAED;;;;;;GAMG;AACH,uCAJW,MAAM,QACN,MAAM,GACJ,OAAO,QAAQ,CAU3B;AAED;;;;;;;;GAQG;AACH,2CANW,MAAM,WACN,MAAM,iBACN,MAAM,kBAsThB;AAED;;;;;;;GAOG;AACH,iDAFW,MAAM,OAehB;AAED;;;;;;;;;;;GAWG;AACH,uCAHW,MAAM,UACN,MAAM,UAYhB;AAED;;;;;;GAMG;AACH,2CAHW,MAAM,uBACN,MAAM,WAgBhB;AAED;;;;GAIG;AACH,4CAFW,MAAM,UAIhB;AAED;;;;;;;;GAQG;AACH,sCANW,MAAM,eACN,MAAM,oBACN,MAAM,gBAgChB;AAED;;;;;;GAMG;AACH,uCAJW,MAAM,kBA2EhB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,YACN,MAAM,GAAC,IAAI,UAiCrB;AAED;;;;;;;;GAQG;AACH,6DANW,MAAM,EAAE,qBACR,MAAM,EAAE,6BACR,MAAM,EAAE,GAEN,MAAM,EAAE,CAkBpB;AAED;;;;;;GAMG;AAEH,uDALW,MAAM,iBACN,MAAM,EAAE,GACN,GAAG,CAsCf;AAED;;;;;;GAMG;AACH,iDAJW,MAAM,YACN,MAAM,GACJ,MAAM,CA0ClB;AAED;;;;;GAKG;AACH,yCAHW,MAAM,YACN,MAAM,UAsEhB;AAED;;GAEG;AACH,sCAmBC;AAED,0DAiGC;AAED;;;;;;;;GAQG;AACH,oCANW,MAAM,YACN,MAAM,gBACN,MAAM,eACN,MAAM,OA6ChB;AAuFD;;;;;GAKG;AACH,uCAHW,MAAM,sBAuDhB;AAED;;;;;;;;;GASG;AACH,2CAPW,MAAM,kBACN,MAAM,eACN,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuYhB;AAED;;;;;;;;;;;GAWG;AACH,gDAPW,MAAM,+BAEN,MAAM;;;;;;;;;;;;;;;;EA+KhB;AAGD;;;;;EAmBC;AAED;;;;;;;GAOG;AACH,kEAJW,MAAM,cACN,MAAM,iCA2IhB;AAED,qDASC;AAED;;;;;;;EA2GC;AAED;;;EA8PC;AAED,sEA6BC;AAED;;;;;;;GAOG;AACH,mCALW,MAAM,WACN,MAAM;;;;;;;EAuQhB;AAED;;;;;;GAMG;AACH,2CAHW,MAAM,OAKhB;AAED,qDA0CC;AA8HD;;;;;GAKG;AACH;;;GA2HC;AAED,yEA0HC;AAED;;;;;;GAMG;AACH,mDAkBC;AAED;;;;;;;;;;GAUG;AACH,0DAkBC;AAED;;;;;;GAMG;AACH,sFAsBC;AAED;;;;;;;GAOG;AACH,2EAgCC;AAh8aD,gCAEc;AACd,4BAA4C;AAC5C,4BAA6C;AAC7C,2BAAmE;AAsBnE,iCAEE;AA2BF,iCAIyC;AAGzC,gCACmE;AAGnE,gCACsE;AAGtE,8BAA+B;AAK/B,4CAEmE;AAGnE,6CAEE;AAgBF,oCAAkD;AAGlD,uCAEuD;AAYvD,8BAAyC;AAczC,gCAA6C;AAU7C,8BAAiC;AAIjC,4BAA6B;AAI7B,2BAA2B;AAI3B,4BAA6B;AAI7B,2BAA2B;AAI3B,6BAA+B;AAI/B,0BAAyB;AAIzB,6BAA+B;AAM/B,2BAA2B;AAK3B,4BAA6B;AAK7B,mCAAoC;AAOpC,gDAC2D;AAE3D,2BAAuD;AAGvD,kDAWE;AAGF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqIE;;;;AA8IF,8BAQG;AA+3KH,8CAUE"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/utils.js"],"names":[],"mappings":"AAiJA,8CAKC;AAED,0CAIC;AAqBD,yCAYC;AAED,2CAQC;AAoND;;;;;;;GAOG;AACH,4EAiBC;AAED;;;;;;GAMG;AACH,mGA2EC;AAED;;;;;;;;GAQG;AACH,yGASC;AAgBD;;;;;;GAMG;AACH,qCAJW,MAAM,WACN,MAAM,2BA8BhB;AAED;;;;;;GAMG;AACH,+CAJW,MAAM,WACN,MAAM,+BAoBhB;AAYD;;;;GAIG;AACH,gCAFa,MAAM,CAIlB;AAED,iCAKC;AAED;;;;;;IAMI;AACJ,iDAJW,MAAM,GACJ,OAAO,CAWnB;AAED;;;;;;;;;GASG;AACH,iEA2BC;AAED;;;;;GAKG;AACH,6CAqDC;AAED;;;;;;GAMG;AACH,sEA0DC;AAED;;;;GAIG;AACH,4EAoCC;AAED;;;GAGG;AACH;;EAUC;AAED,sEA0BC;AAED;;;;GAIG;AACH,+DA4CC;AAED;;;;;GAKG;AACH,0CAHW,MAAM,WACN,OAAO,kBAkFjB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,YACN,MAAM;;;GA+ehB;AAED;;;;;;;GAOG;AACH,6CAFW,MAAM,MA2DhB;AAwBD;;;;GAIG;AACH,4CAFW,MAAM;;;GAkOhB;AAED;;;;GAIG;AACH,4CAFW,MAAM,kBAiEhB;AAoHD;;;;;GAKG;AACH,kDAHW,MAAM,GACJ,MAAM,CAgBlB;AAED;;;;;;;;;;GAUG;AACH,wCARW,MAAM;;;;;;;;;;;;;;;;;;GAuvBhB;AAED;;;;GAIG;AACH,8CAFW,MAAM,kBA+ChB;AAED;;;;GAIG;AACH,sCAFW,MAAM,kBAgFhB;AAED;;;;;GAKG;AACH,kCAHW,MAAM,OAqIhB;AAED;;;;;;GAMG;AACH,0CALW,MAAM,WACN,MAAM,OA+JhB;AAED;;;;;;GAMG;AACH,0CALW,MAAM,oBACN,MAAM,kBACN,GAAG,mBACH,MAAM;;;;;;;;;GAqOhB;AAED;;;GAGG;AACH,uCAFW,MAAM,SAoChB;AAED;;;GAGG;AACH,wCAFW,MAAM,OAahB;AAED,yEAwBC;AAED;;;;GAIG;AACH,+CAFW,MAAM;;;EAwDhB;AAED;;;;;GAKG;AACH,iDAHW,MAAM,qBACN,MAAM;;;;;;;;EAmDhB;AAED;;;;;;;GAOG;AACH,qDALW,MAAM,0BAGJ,MAAM,CAmDlB;AAED;;;GAGG;AACH,iDAFW,MAAM,SA4ChB;AAED;;;GAGG;AACH,8CAFW,MAAM,SAsDhB;AAED;;;GAGG;AACH,2CAFW,MAAM,SAiBhB;AAED;;GAEG;AACH,kDAoCC;AAED;;;;GAIG;AACH,oCAFW,MAAM,OAchB;AAED;;;;GAIG;AACH,wCAFW,MAAM,OAYhB;AAED;;;;;;;;GAQG;AACH,2FAuGC;AAED;;;;;;;;;GASG;AACH,sFAGC;AAED;;;;;;;;;GASG;AACH,gFAFY,MAAO,SAAS,CA6B3B;AAED;;;;;;;;;GASG;AACH,0EAFY,OAAO,QAAQ,CAU1B;AAED;;;;GAIG;AACH,4DAFW,WAAY,SAYtB;AAED;;;;;;;;;GASG;AACH,+FAFY,OAAO,QAAQ,CAc1B;AAED;;;;GAIG;AACH;;;EAqBC;AAED;;;;;GAKG;AACH,iFAFW,GAAC,OA0BX;AAED;;;;;GAKG;AACH,sFAsNC;AAED;;;;GAIG;AACH,qDAmBC;AAED;;;;GAIG;AACH,gEAeC;AAED;;;;;GAKG;AACH,iDAHW,MAAM,OAmLhB;AAED;;;;;;GAMG;AACH,yDAHW,MAAM,iBACN,MAAM;;;;;;;;;;;;;;;;;;;;GA0bhB;AAED;;;;;GAKG;AACH,mFAgKC;AAED;;;;;;;GAOG;AACH,kCALW,MAAM;;;;;;;;GA4EhB;AAED;;;;GAIG;AACH,mEAqBC;AAeD;;;;;GAKG;AACH;;;;;;;;;EAiLC;AAED;;;;GAIG;AACH;;;;;;EAcC;AAED;;;;GAIG;AACH,+DAFY,SAAO,SAAS,CAc3B;AAED;;;;GAIG;AACH,uDAoBC;AAED;;;;GAIG;AACH,oDAFY,QAAQ,CAQnB;AAED;;;;;GAKG;AACH,oEAFY,SAAO,SAAS,CAc3B;AAED;;;;;;GAMG;AACH,oEAFY,OAAO,QAAQ,CA8D1B;AAED;;;;GAIG;AACH,iEA2CC;AA+BD;;;;;;;;GAkCC;AAyBD;;;;;;;GAOG;AACH,sEA4FC;AAED;;;;;;GAMG;AACH,0CAJW,MAAM;;;;;;;;;;;GA2DhB;AA4BD;;;;;;;;;;GAUG;AACH,2CARW,MAAM,aACN,MAAM;;;;;;;;GAkMhB;AAED;;;;GAIG;AACH,yCAHW,MAAM,OAehB;AAED;;;;GAIG;AACH,0CAHW,MAAM,kBAsBhB;AAED,+DA+CC;AAED,uEAwBC;AA6BD;;;;GAIG;AACH,oEAmGC;AAMD;;;;GAIG;AACH,sDAsBC;AAED;;;;;;;;;;GAUG;AACH,uIAFa,KAAK,CAAC,MAAM,CAAC,CA0IzB;AAED;;;;;GAKG;AACH,8CAHW,MAAM,eACN,MAAM,kBAqKhB;AAED;;;;;GAKG;AACH,kDAHW,MAAM,YACN,MAAM;;;;;;;GAoQhB;AAED;;;;GAIG;AACH,kEAqEC;AAED;;;;GAIG;AACH,gEA+CC;AA0BD;;;;;;;;;;;;;;;;;GAiBG;AACH,mEALW,OAAO,4BAiLjB;AAED;;;;;;;;GAQG;AACH,+DALW,OAAO,4BAsIjB;AAED;;;IA4IC;AAED,wEA0BC;AAED;;;;;;;GAOG;AACH,uEAgEC;AAED,0DAwBC;AAED,wDA+DC;AAED,0FAkEC;AAmBD;;IAiEC;AAED;;IA2DC;AAED,2DAiEC;AAED,yDAaC;AAaD,gDA+EC;AAED,yDAkDC;AAED,sDA0BC;AAED,sDAyBC;AAED,6DAwCC;AAED,yDAmCC;AAyCD,qFA2HC;AAED,8DA0BC;AAED,sDAiCC;AAED,yDAgCC;AAED,qDAkDC;AAED;;;;;GAKG;AACH,mDASC;AAED;;;;;;GAMG;AACH,4EAyJC;AAED,kEAoDC;AAED;;;;;;;;GAQG;AACH,kGAwSC;AAED;;;EA8OC;AAED;;;;EAsHC;AAED;;;EA+GC;AAED;;;;;;GAMG;AACH,oDAJW,MAAM,OAsChB;AAED;;;;;GAKG;AACH,+CAHW,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsJhB;AAED;;;;;;EA+HC;AAED;;;;GAIG;AACH,0CAFW,MAAM;;;;;;;;;;;;;;;;;;;;;IAqDhB;AAmBD;;;;;GAKG;AACH,yCAHW,MAAM,YAQhB;AAED;;;;;GAKG;AACH,wCAHW,MAAM,YAchB;AAED;;;;;GAKG;AACH,wCAHW,MAAM,YAQhB;AAED;;;;;GAKG;AACH,yCAHW,MAAM,YAQhB;AAED;;;;;GAKG;AACH,2CAHW,MAAM,YAQhB;AAED;;;;;;;GAOG;AACH,qDALW,MAAM;;;;;;;;;;IAgJhB;AA0CD;;;;;;;GAOG;AACH,8FAHW,MAAM,WACN,MAAM,UAuDhB;AAED;;;;GAIG;AACH,8CAHW,MAAM,WACN,MAAM;;;;;;EAqBhB;AAED;;;GAGG;AACH,iDAFW,MAAM;;;;;;;;;;;;;;;;;;;;;IAwDhB;AAED;;;;;;;GAOG;AACH,iDALW,MAAM,YACN,MAAM,YACN,OAAO,oBACP,OAAO,eA6DjB;AAED,wIA+BC;AAED;;;;;;;GAOG;AACH,sCALW,MAAM,eACN,MAAM,eA6JhB;AAED;;;;;;;;;;;;;;;;;;;;;;IA6DC;AAED;;;;;;GAMG;AACH,kDA8BC;AAED,uDAeC;AAED,2DAeC;AAED,2CAIC;AAED;;;;;;GAMG;AACH,uDAJW,MAAM,MAgBhB;AAED;;;;;;GAMG;AACH,uCAJW,MAAM,QACN,MAAM,GACJ,OAAO,QAAQ,CAU3B;AAED;;;;;;;;GAQG;AACH,2CANW,MAAM,WACN,MAAM,iBACN,MAAM,kBAsThB;AAED;;;;;;;GAOG;AACH,iDAFW,MAAM,OAehB;AAED;;;;;;;;;;;GAWG;AACH,uCAHW,MAAM,UACN,MAAM,UAYhB;AAED;;;;;;GAMG;AACH,2CAHW,MAAM,uBACN,MAAM,WAgBhB;AAED;;;;GAIG;AACH,4CAFW,MAAM,UAIhB;AAED;;;;;;;;GAQG;AACH,sCANW,MAAM,eACN,MAAM,oBACN,MAAM,gBAgChB;AAED;;;;;;GAMG;AACH,uCAJW,MAAM,kBA2EhB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,YACN,MAAM,GAAC,IAAI,UAiCrB;AAED;;;;;;;;GAQG;AACH,6DANW,MAAM,EAAE,qBACR,MAAM,EAAE,6BACR,MAAM,EAAE,GAEN,MAAM,EAAE,CAkBpB;AAED;;;;;;GAMG;AAEH,uDALW,MAAM,iBACN,MAAM,EAAE,GACN,GAAG,CAsCf;AAED;;;;;;GAMG;AACH,iDAJW,MAAM,YACN,MAAM,GACJ,MAAM,CA0ClB;AAED;;;;;GAKG;AACH,yCAHW,MAAM,YACN,MAAM,UAsEhB;AAED;;GAEG;AACH,sCAmBC;AAED,0DAiGC;AAED;;;;;;;;GAQG;AACH,oCANW,MAAM,YACN,MAAM,gBACN,MAAM,eACN,MAAM,OA6ChB;AAuFD;;;;;GAKG;AACH,uCAHW,MAAM,sBAuDhB;AAED;;;;;;;;;GASG;AACH,2CAPW,MAAM,kBACN,MAAM,eACN,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuYhB;AAED;;;;;;;;;;;GAWG;AACH,gDAPW,MAAM,+BAEN,MAAM;;;;;;;;;;;;;;;;EA+KhB;AAGD;;;;;EAmBC;AAED;;;;;;;GAOG;AACH,kEAJW,MAAM,cACN,MAAM,iCA2IhB;AAED,qDASC;AAED;;;;;;;EA2GC;AAED;;;EA8PC;AAED,sEA6BC;AAED;;;;;;;GAOG;AACH,mCALW,MAAM,WACN,MAAM;;;;;;;EAuQhB;AAED;;;;;;GAMG;AACH,2CAHW,MAAM,OAKhB;AAED,qDA0CC;AA8HD;;;;;GAKG;AACH;;;GA2HC;AAED,yEA0HC;AAED;;;;;;GAMG;AACH,mDAkBC;AAED;;;;;;;;;;GAUG;AACH,0DAkBC;AAED;;;;;;GAMG;AACH,sFAsBC;AAED;;;;;;;GAOG;AACH,2EAgCC;AAv3bD,gCAEc;AACd,4BAA4C;AAC5C,4BAA6C;AAC7C,2BAAmE;AAsBnE,iCAEE;AA2BF,iCAIyC;AAGzC,gCACmE;AAGnE,gCACsE;AAGtE,8BAA+B;AAK/B,4CAEmE;AAGnE,6CAEE;AAgBF,oCAAkD;AAGlD,uCAEuD;AAYvD,8BAAyC;AAczC,gCAA6C;AAU7C,8BAAiC;AAIjC,4BAA6B;AAI7B,2BAA2B;AAI3B,4BAA6B;AAI7B,2BAA2B;AAI3B,6BAA+B;AAI/B,0BAAyB;AAIzB,6BAA+B;AAM/B,2BAA2B;AAK3B,4BAA6B;AAK7B,mCAAoC;AAOpC,gDAC2D;AAE3D,2BAAuD;AAGvD,kDAWE;AAGF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqIE;;;;AA8IF,8BAQG;AA4xLH,8CAUE"}

package/types/lib/helpers/validator.d.ts

@@ -1,3 +1,9 @@
+/**
+ * Validate the component properties
+ *
+ * @param {object} bomJson Bom json object
+ */
+export function validateProps(bomJson: object): boolean;
 export function validateBom(bomJson: object): boolean;
 export function validateMetadata(bomJson: object): boolean;
 export function validatePurls(bomJson: object): boolean;

package/types/lib/helpers/validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../lib/helpers/validator.js"],"names":[],"mappings":"AAmBO,qCAFI,MAAM,WA6ChB;AAOM,0CAFI,MAAM,WAwDhB;AAOM,uCAFI,MAAM,WAgEhB;AA6BM,sCAFI,MAAM,WAgDhB"}
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../lib/helpers/validator.js"],"names":[],"mappings":"AAgRA;;;;GAIG;AACH,uCAFW,MAAM,WAqDhB;AArTM,qCAFI,MAAM,WAgDhB;AAOM,0CAFI,MAAM,WAwDhB;AAOM,uCAFI,MAAM,WAgEhB;AA6BM,sCAFI,MAAM,WAgDhB"}