@cyclonedx/cdxgen 11.7.0 → 11.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (148) hide show
  1. package/README.md +1 -1
  2. package/bin/cdxgen.js +3 -18
  3. package/bin/verify.js +17 -5
  4. package/data/bom-1.7.schema.json +1112 -348
  5. package/data/component-tags.json +0 -1
  6. package/data/cryptography-defs.json +3793 -0
  7. package/data/cryptography-defs.schema.json +576 -0
  8. package/data/spdx.schema.json +23 -2
  9. package/lib/cli/index.js +129 -88
  10. package/lib/helpers/dotnetutils.poku.js +1 -0
  11. package/lib/helpers/envcontext.js +0 -27
  12. package/lib/helpers/utils.js +610 -118
  13. package/lib/helpers/utils.poku.js +650 -18
  14. package/lib/helpers/validator.js +14 -3
  15. package/lib/managers/binary.js +13 -29
  16. package/lib/managers/docker.js +11 -25
  17. package/lib/managers/oci.js +20 -11
  18. package/lib/managers/piptree.js +1 -2
  19. package/lib/server/server.js +0 -1
  20. package/lib/stages/postgen/postgen.js +30 -12
  21. package/lib/third-party/README.md +9 -0
  22. package/lib/third-party/arborist/CHANGELOG.md +863 -0
  23. package/lib/third-party/arborist/LICENSE.md +20 -0
  24. package/lib/third-party/arborist/README.md +315 -0
  25. package/lib/third-party/arborist/lib/arborist/index.js +246 -0
  26. package/lib/third-party/arborist/lib/arborist/load-actual.js +462 -0
  27. package/lib/third-party/arborist/lib/arborist/load-virtual.js +329 -0
  28. package/lib/third-party/arborist/lib/calc-dep-flags.js +128 -0
  29. package/lib/third-party/arborist/lib/can-place-dep.js +452 -0
  30. package/lib/third-party/arborist/lib/case-insensitive-map.js +53 -0
  31. package/lib/third-party/arborist/lib/consistent-resolve.js +43 -0
  32. package/lib/third-party/arborist/lib/debug.js +50 -0
  33. package/lib/third-party/arborist/lib/deepest-nesting-target.js +18 -0
  34. package/lib/third-party/arborist/lib/dep-valid.js +163 -0
  35. package/lib/third-party/arborist/lib/diff.js +312 -0
  36. package/lib/third-party/arborist/lib/edge.js +374 -0
  37. package/lib/third-party/arborist/lib/from-path.js +35 -0
  38. package/lib/third-party/arborist/lib/gather-dep-set.js +43 -0
  39. package/lib/third-party/arborist/lib/index.js +13 -0
  40. package/lib/third-party/arborist/lib/inventory.js +137 -0
  41. package/lib/third-party/arborist/lib/link.js +140 -0
  42. package/lib/third-party/arborist/lib/node.js +1584 -0
  43. package/lib/third-party/arborist/lib/optional-set.js +39 -0
  44. package/lib/third-party/arborist/lib/override-resolves.js +11 -0
  45. package/lib/third-party/arborist/lib/override-set.js +221 -0
  46. package/lib/third-party/arborist/lib/peer-entry-sets.js +77 -0
  47. package/lib/third-party/arborist/lib/place-dep.js +586 -0
  48. package/lib/third-party/arborist/lib/printable.js +215 -0
  49. package/lib/third-party/arborist/lib/query-selector-all.js +184 -0
  50. package/lib/third-party/arborist/lib/realpath.js +100 -0
  51. package/lib/third-party/arborist/lib/relpath.js +5 -0
  52. package/lib/third-party/arborist/lib/reset-dep-flags.js +17 -0
  53. package/lib/third-party/arborist/lib/retire-path.js +20 -0
  54. package/lib/third-party/arborist/lib/shrinkwrap.js +1240 -0
  55. package/lib/third-party/arborist/lib/signal-handling.js +80 -0
  56. package/lib/third-party/arborist/lib/signals.js +48 -0
  57. package/lib/third-party/arborist/lib/spec-from-lock.js +35 -0
  58. package/lib/third-party/arborist/lib/tracker.js +89 -0
  59. package/lib/third-party/arborist/lib/tree-check.js +163 -0
  60. package/lib/third-party/arborist/lib/version-from-tgz.js +53 -0
  61. package/lib/third-party/arborist/lib/yarn-lock.js +397 -0
  62. package/package.json +146 -125
  63. package/types/cli/index.d.ts.map +1 -1
  64. package/types/helpers/envcontext.d.ts.map +1 -1
  65. package/types/helpers/utils.d.ts +30 -2
  66. package/types/helpers/utils.d.ts.map +1 -1
  67. package/types/helpers/validator.d.ts.map +1 -1
  68. package/types/lib/helpers/utils.d.ts +1 -1
  69. package/types/managers/binary.d.ts.map +1 -1
  70. package/types/managers/docker.d.ts.map +1 -1
  71. package/types/managers/oci.d.ts.map +1 -1
  72. package/types/managers/piptree.d.ts.map +1 -1
  73. package/types/server/server.d.ts.map +1 -1
  74. package/types/stages/postgen/postgen.d.ts.map +1 -1
  75. package/types/third-party/arborist/lib/arborist/index.d.ts +36 -0
  76. package/types/third-party/arborist/lib/arborist/index.d.ts.map +1 -0
  77. package/types/third-party/arborist/lib/arborist/load-actual.d.ts +38 -0
  78. package/types/third-party/arborist/lib/arborist/load-actual.d.ts.map +1 -0
  79. package/types/third-party/arborist/lib/arborist/load-virtual.d.ts +26 -0
  80. package/types/third-party/arborist/lib/arborist/load-virtual.d.ts.map +1 -0
  81. package/types/third-party/arborist/lib/calc-dep-flags.d.ts +3 -0
  82. package/types/third-party/arborist/lib/calc-dep-flags.d.ts.map +1 -0
  83. package/types/third-party/arborist/lib/can-place-dep.d.ts +38 -0
  84. package/types/third-party/arborist/lib/can-place-dep.d.ts.map +1 -0
  85. package/types/third-party/arborist/lib/case-insensitive-map.d.ts +10 -0
  86. package/types/third-party/arborist/lib/case-insensitive-map.d.ts.map +1 -0
  87. package/types/third-party/arborist/lib/consistent-resolve.d.ts +3 -0
  88. package/types/third-party/arborist/lib/consistent-resolve.d.ts.map +1 -0
  89. package/types/third-party/arborist/lib/debug.d.ts +6 -0
  90. package/types/third-party/arborist/lib/debug.d.ts.map +1 -0
  91. package/types/third-party/arborist/lib/deepest-nesting-target.d.ts +3 -0
  92. package/types/third-party/arborist/lib/deepest-nesting-target.d.ts.map +1 -0
  93. package/types/third-party/arborist/lib/dep-valid.d.ts +3 -0
  94. package/types/third-party/arborist/lib/dep-valid.d.ts.map +1 -0
  95. package/types/third-party/arborist/lib/diff.d.ts +28 -0
  96. package/types/third-party/arborist/lib/diff.d.ts.map +1 -0
  97. package/types/third-party/arborist/lib/edge.d.ts +45 -0
  98. package/types/third-party/arborist/lib/edge.d.ts.map +1 -0
  99. package/types/third-party/arborist/lib/from-path.d.ts +3 -0
  100. package/types/third-party/arborist/lib/from-path.d.ts.map +1 -0
  101. package/types/third-party/arborist/lib/gather-dep-set.d.ts +3 -0
  102. package/types/third-party/arborist/lib/gather-dep-set.d.ts.map +1 -0
  103. package/types/third-party/arborist/lib/index.d.ts +3 -0
  104. package/types/third-party/arborist/lib/index.d.ts.map +1 -0
  105. package/types/third-party/arborist/lib/inventory.d.ts +14 -0
  106. package/types/third-party/arborist/lib/inventory.d.ts.map +1 -0
  107. package/types/third-party/arborist/lib/link.d.ts +16 -0
  108. package/types/third-party/arborist/lib/link.d.ts.map +1 -0
  109. package/types/third-party/arborist/lib/node.d.ts +95 -0
  110. package/types/third-party/arborist/lib/node.d.ts.map +1 -0
  111. package/types/third-party/arborist/lib/optional-set.d.ts +3 -0
  112. package/types/third-party/arborist/lib/optional-set.d.ts.map +1 -0
  113. package/types/third-party/arborist/lib/override-resolves.d.ts +2 -0
  114. package/types/third-party/arborist/lib/override-resolves.d.ts.map +1 -0
  115. package/types/third-party/arborist/lib/override-set.d.ts +25 -0
  116. package/types/third-party/arborist/lib/override-set.d.ts.map +1 -0
  117. package/types/third-party/arborist/lib/peer-entry-sets.d.ts +3 -0
  118. package/types/third-party/arborist/lib/peer-entry-sets.d.ts.map +1 -0
  119. package/types/third-party/arborist/lib/place-dep.d.ts +45 -0
  120. package/types/third-party/arborist/lib/place-dep.d.ts.map +1 -0
  121. package/types/third-party/arborist/lib/printable.d.ts +3 -0
  122. package/types/third-party/arborist/lib/printable.d.ts.map +1 -0
  123. package/types/third-party/arborist/lib/query-selector-all.d.ts +3 -0
  124. package/types/third-party/arborist/lib/query-selector-all.d.ts.map +1 -0
  125. package/types/third-party/arborist/lib/realpath.d.ts +3 -0
  126. package/types/third-party/arborist/lib/realpath.d.ts.map +1 -0
  127. package/types/third-party/arborist/lib/relpath.d.ts +3 -0
  128. package/types/third-party/arborist/lib/relpath.d.ts.map +1 -0
  129. package/types/third-party/arborist/lib/reset-dep-flags.d.ts +3 -0
  130. package/types/third-party/arborist/lib/reset-dep-flags.d.ts.map +1 -0
  131. package/types/third-party/arborist/lib/retire-path.d.ts +3 -0
  132. package/types/third-party/arborist/lib/retire-path.d.ts.map +1 -0
  133. package/types/third-party/arborist/lib/shrinkwrap.d.ts +54 -0
  134. package/types/third-party/arborist/lib/shrinkwrap.d.ts.map +1 -0
  135. package/types/third-party/arborist/lib/signal-handling.d.ts +6 -0
  136. package/types/third-party/arborist/lib/signal-handling.d.ts.map +1 -0
  137. package/types/third-party/arborist/lib/signals.d.ts +3 -0
  138. package/types/third-party/arborist/lib/signals.d.ts.map +1 -0
  139. package/types/third-party/arborist/lib/spec-from-lock.d.ts +3 -0
  140. package/types/third-party/arborist/lib/spec-from-lock.d.ts.map +1 -0
  141. package/types/third-party/arborist/lib/tracker.d.ts +13 -0
  142. package/types/third-party/arborist/lib/tracker.d.ts.map +1 -0
  143. package/types/third-party/arborist/lib/tree-check.d.ts +3 -0
  144. package/types/third-party/arborist/lib/tree-check.d.ts.map +1 -0
  145. package/types/third-party/arborist/lib/version-from-tgz.d.ts +6 -0
  146. package/types/third-party/arborist/lib/version-from-tgz.d.ts.map +1 -0
  147. package/types/third-party/arborist/lib/yarn-lock.d.ts +35 -0
  148. package/types/third-party/arborist/lib/yarn-lock.d.ts.map +1 -0
package/README.md CHANGED
@@ -521,7 +521,7 @@ Before raising a PR, please run the following commands.
521
521
 
522
522
  ```shell
523
523
  corepack enable pnpm
524
- pnpm install --config.strict-dep-builds=true
524
+ pnpm install:frozen
525
525
  # Generate types using jsdoc syntax
526
526
  pnpm run gen-types
527
527
  # Run biomejs formatter and linter with auto fix
package/bin/cdxgen.js CHANGED
@@ -28,21 +28,18 @@ import {
28
28
  ATOM_DB,
29
29
  commandsExecuted,
30
30
  DEBUG_MODE,
31
- dirNameStr,
32
- getRuntimeInformation,
33
31
  getTmpDir,
34
32
  isMac,
35
33
  isSecureMode,
36
34
  isWin,
37
35
  remoteHostsAccessed,
36
+ retrieveCdxgenVersion,
38
37
  safeExistsSync,
39
38
  } from "../lib/helpers/utils.js";
40
39
  import { validateBom } from "../lib/helpers/validator.js";
41
40
  import { postProcess } from "../lib/stages/postgen/postgen.js";
42
41
  import { prepareEnv } from "../lib/stages/pregen/pregen.js";
43
42
 
44
- const dirName = dirNameStr;
45
-
46
43
  // Support for config files
47
44
  const configPaths = [
48
45
  ".cdxgenrc",
@@ -384,7 +381,7 @@ const args = _yargs
384
381
  .epilogue("for documentation, visit https://cyclonedx.github.io/cdxgen")
385
382
  .config(config)
386
383
  .scriptName("cdxgen")
387
- .version(version())
384
+ .version(retrieveCdxgenVersion())
388
385
  .alias("v", "version")
389
386
  .help(false)
390
387
  .option("help", {
@@ -399,23 +396,11 @@ if (process.env?.CDXGEN_NODE_OPTIONS) {
399
396
  }
400
397
 
401
398
  if (args.help) {
402
- console.log(`${version()}\n`);
399
+ console.log(`${retrieveCdxgenVersion()}\n`);
403
400
  _yargs.showHelp();
404
401
  process.exit(0);
405
402
  }
406
403
 
407
- function version() {
408
- const packageJsonAsString = fs.readFileSync(
409
- join(dirName, "package.json"),
410
- "utf-8",
411
- );
412
- const packageJson = JSON.parse(packageJsonAsString);
413
-
414
- const runtimeInfo = getRuntimeInformation();
415
-
416
- return `\x1b[1mCycloneDX Generator ${packageJson.version}\x1b[0m\nRuntime: ${runtimeInfo.runtime}, Version: ${runtimeInfo.version}`;
417
- }
418
-
419
404
  if (process.env.GLOBAL_AGENT_HTTP_PROXY || process.env.HTTP_PROXY) {
420
405
  // Support standard HTTP_PROXY variable if the user doesn't override the namespace
421
406
  if (!process.env.GLOBAL_AGENT_ENVIRONMENT_VARIABLE_NAMESPACE) {
package/bin/verify.js CHANGED
@@ -8,12 +8,14 @@ import jws from "jws";
8
8
  import yargs from "yargs";
9
9
  import { hideBin } from "yargs/helpers";
10
10
 
11
- import { dirNameStr } from "../lib/helpers/utils.js";
11
+ import { dirNameStr, retrieveCdxgenVersion } from "../lib/helpers/utils.js";
12
12
  import { getBomWithOras } from "../lib/managers/oci.js";
13
13
 
14
14
  const dirName = dirNameStr;
15
15
 
16
- const args = yargs(hideBin(process.argv))
16
+ const _yargs = yargs(hideBin(process.argv));
17
+
18
+ const args = _yargs
17
19
  .option("input", {
18
20
  alias: "i",
19
21
  default: "bom.json",
@@ -29,11 +31,21 @@ const args = yargs(hideBin(process.argv))
29
31
  .completion("completion", "Generate bash/zsh completion")
30
32
  .epilogue("for documentation, visit https://cyclonedx.github.io/cdxgen")
31
33
  .scriptName("cdx-verify")
32
- .version()
33
- .help("h")
34
- .alias("h", "help")
34
+ .version(retrieveCdxgenVersion())
35
+ .help(false)
36
+ .option("help", {
37
+ alias: "h",
38
+ type: "boolean",
39
+ description: "Show help",
40
+ })
35
41
  .wrap(Math.min(120, yargs().terminalWidth())).argv;
36
42
 
43
+ if (args.help) {
44
+ console.log(`${retrieveCdxgenVersion()}\n`);
45
+ _yargs.showHelp();
46
+ process.exit(0);
47
+ }
48
+
37
49
  if (args.version) {
38
50
  const packageJsonAsString = fs.readFileSync(
39
51
  join(dirName, "..", "package.json"),