@cyclonedx/cdxgen 12.2.1 → 12.3.0

package/types/lib/helpers/analyzer.d.ts

@@ -1,5 +1,18 @@
+export const CHROMIUM_EXTENSION_CAPABILITY_CATEGORIES: string[];
 export function findJSImportsExports(src: any, deep: any): Promise<{
     allImports: {};
     allExports: {};
 }>;
+export function analyzeSuspiciousJsFile(filePath: string): {
+    executionIndicators: string[];
+    indicators: string[];
+    networkIndicators: string[];
+    obfuscationIndicators: string[];
+};
+export function detectExtensionCapabilities(src: string, deep?: boolean): {
+    capabilities: string[];
+    indicators: {
+        [x: string]: string[];
+    };
+};
 //# sourceMappingURL=analyzer.d.ts.map

package/types/lib/helpers/analyzer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"analyzer.d.ts","sourceRoot":"","sources":["../../../lib/helpers/analyzer.js"],"names":[],"mappings":"AA83BO;;;GAkBN"}
+{"version":3,"file":"analyzer.d.ts","sourceRoot":"","sources":["../../../lib/helpers/analyzer.js"],"names":[],"mappings":"AA23BA,gEAQE;AAmUK;;;GAiBN;AASM,kDAHI,MAAM,GACJ;IAAC,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAAC,qBAAqB,EAAE,MAAM,EAAE,CAAA;CAAC,CAe/H;AAWM,iDANI,MAAM,SACN,OAAO,GACL;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE;YAAO,MAAM,GAAE,MAAM,EAAE;KAAC,CAAA;CAAC,CAwF1E"}

package/types/lib/helpers/annotationFormatter.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Format annotation properties as a markdown table for CycloneDX annotations.
+ *
+ * @param {{ name: string, value: string }[]} properties annotation properties
+ * @returns {string} markdown table text
+ */
+export function propertiesToMarkdownTable(properties: {
+    name: string;
+    value: string;
+}[]): string;
+/**
+ * Build production-ready markdown annotation text.
+ *
+ * @param {string} message leading message text
+ * @param {{ name: string, value: string }[]} properties annotation properties
+ * @param {string[]} [details] optional detail lines shown before the table
+ * @returns {string} annotation text
+ */
+export function buildAnnotationText(message: string, properties: {
+    name: string;
+    value: string;
+}[], details?: string[]): string;
+//# sourceMappingURL=annotationFormatter.d.ts.map

package/types/lib/helpers/annotationFormatter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"annotationFormatter.d.ts","sourceRoot":"","sources":["../../../lib/helpers/annotationFormatter.js"],"names":[],"mappings":"AAcA;;;;;GAKG;AACH,sDAHW;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,GAC/B,MAAM,CAalB;AAED;;;;;;;GAOG;AACH,6CALW,MAAM,cACN;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,YACjC,MAAM,EAAE,GACN,MAAM,CASlB"}

package/types/lib/helpers/bomUtils.d.ts

@@ -0,0 +1,5 @@
+export function isSpdxJsonLd(bomJson: any): boolean;
+export function isCycloneDxBom(bomJson: any): boolean;
+export function detectBomFormat(bomJson: any): "unknown" | "cyclonedx" | "spdx";
+export function getNonCycloneDxErrorMessage(bomJson: any, commandName?: string): string;
+//# sourceMappingURL=bomUtils.d.ts.map

package/types/lib/helpers/bomUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bomUtils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/bomUtils.js"],"names":[],"mappings":"AAMO,oDAKJ;AAEI,sDACmE;AAEnE,gFAQN;AAEM,wFASN"}

package/types/lib/helpers/chromextutils.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Discover known Chromium-based browser user-data directories.
+ *
+ * @returns {Array<{browser: string, channel: string, dir: string}>}
+ */
+export function getChromiumExtensionDirs(): Array<{
+    browser: string;
+    channel: string;
+    dir: string;
+}>;
+/**
+ * Discover existing Chromium-based browser user-data directories.
+ *
+ * @returns {Array<{browser: string, channel: string, dir: string}>}
+ */
+export function discoverChromiumExtensionDirs(): Array<{
+    browser: string;
+    channel: string;
+    dir: string;
+}>;
+/**
+ * Compare Chromium extension versions with numeric dot-separated semantics.
+ *
+ * @param {string} leftVersion Left version
+ * @param {string} rightVersion Right version
+ * @returns {number} Negative when left<right, positive when left>right, zero when equal
+ */
+export function compareChromiumExtensionVersions(leftVersion: string, rightVersion: string): number;
+/**
+ * Read profile names from Chromium user-data directory.
+ *
+ * @param {string} userDataDir Browser user-data directory
+ * @returns {string[]} Profile directory names
+ */
+export function getChromiumProfiles(userDataDir: string): string[];
+/**
+ * Parse a Chromium extension manifest file.
+ *
+ * @param {string} manifestFile Absolute path to manifest.json
+ * @returns {Object|undefined} Parsed manifest metadata
+ */
+export function parseChromiumExtensionManifest(manifestFile: string): Object | undefined;
+/**
+ * Infer browser context from a resolved Chromium extension manifest path.
+ *
+ * @param {string} manifestFile Absolute path to manifest.json
+ * @returns {{browser?: string, channel?: string, profile?: string, profilePath?: string}}
+ */
+export function inferChromiumContextFromManifest(manifestFile: string): {
+    browser?: string;
+    channel?: string;
+    profile?: string;
+    profilePath?: string;
+};
+/**
+ * Collect one directly specified extension from a path.
+ *
+ * Supported path forms:
+ * - `<...>/manifest.json`
+ * - `<...>/<extension-id>/<version>/manifest.json`
+ * - `<...>/<version>/` (contains manifest.json)
+ * - `<...>/<extension-id>/` (contains version subdirectories)
+ *
+ * Note: a standalone `<...>/<version>/` directory is not sufficient unless its
+ * parent directory name is the extension id, because the parser derives the
+ * extension id from the version directory's parent path.
+ *
+ * @param {string} extensionPath Candidate extension path
+ * @returns {{components: Object[], extensionDirs: string[]}}
+ */
+export function collectChromeExtensionsFromPath(extensionPath: string): {
+    components: Object[];
+    extensionDirs: string[];
+};
+/**
+ * Convert parsed Chromium extension metadata into a CycloneDX component object.
+ *
+ * @param {Object} extInfo Extension metadata
+ * @returns {Object|undefined} CycloneDX component object or undefined
+ */
+export function toComponent(extInfo: Object): Object | undefined;
+/**
+ * Collect installed Chromium extension components from discovered browser directories.
+ *
+ * @param {Array<{browser: string, channel: string, dir: string}>} browserDirs Browser directories
+ * @returns {Object[]} Array of CycloneDX component objects
+ */
+export function collectInstalledChromeExtensions(browserDirs: Array<{
+    browser: string;
+    channel: string;
+    dir: string;
+}>): Object[];
+/**
+ * The purl type for Chrome extensions as defined by the packageurl spec.
+ */
+export const CHROME_EXTENSION_PURL_TYPE: "chrome-extension";
+//# sourceMappingURL=chromextutils.d.ts.map

package/types/lib/helpers/chromextutils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chromextutils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/chromextutils.js"],"names":[],"mappings":"AAsLA;;;;GAIG;AACH,4CAFa,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAC,CAAC,CAoMlE;AAED;;;;GAIG;AACH,iDAFa,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAC,CAAC,CAYlE;AAED;;;;;;GAMG;AACH,8DAJW,MAAM,gBACN,MAAM,GACJ,MAAM,CAwBlB;AAED;;;;;GAKG;AACH,iDAHW,MAAM,GACJ,MAAM,EAAE,CA8CpB;AAED;;;;;GAKG;AACH,6DAHW,MAAM,GACJ,MAAM,GAAC,SAAS,CAuK5B;AAED;;;;;GAKG;AACH,+DAHW,MAAM,GACJ;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAC,CA4BxF;AAuFD;;;;;;;;;;;;;;;GAeG;AACH,+DAHW,MAAM,GACJ;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAC,CAuC3D;AAED;;;;;GAKG;AACH,qCAHW,MAAM,GACJ,MAAM,GAAC,SAAS,CA+M5B;AAED;;;;;GAKG;AACH,8DAHW,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAC,CAAC,GACpD,MAAM,EAAE,CAyGpB;AAnnCD;;GAEG;AACH,yCAA0C,kBAAkB,CAAC"}

package/types/lib/helpers/ciParsers/githubActions.d.ts

@@ -1,13 +1,8 @@
 /**
- * Parse a single GitHub Actions workflow file and return formulation-shaped data.
+ * Parse a single GitHub Actions workflow file into workflow, component, and dependency data.
  *
- * Reads and parses the YAML, then walks every job and step to produce:
- * - **workflows** – CycloneDX formulation workflow objects with tasks
- * - **components** – action references (`pkg:github/…`) and run-step processes
- * - **dependencies** – workflow→job and job→action/step edges
- *
- * @param {string} f - Absolute path to a workflow YAML file.
- * @param {Object} options - CLI options
+ * @param {string} f Absolute path to a workflow YAML file
+ * @param {Object} options CLI options
  * @returns {{ workflows: Object[], components: Object[], dependencies: Object[] }}
  */
 export function parseWorkflowFile(f: string, options: Object): {

package/types/lib/helpers/ciParsers/githubActions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"githubActions.d.ts","sourceRoot":"","sources":["../../../../lib/helpers/ciParsers/githubActions.js"],"names":[],"mappings":"AA0QA;;;;;;;;;;;GAWG;AACH,qCAJW,MAAM,WACN,MAAM,GACJ;IAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAgUjF;;;;IAeC;;;;OAIG;IACH,sBAJW,MAAM,EAAE,WACR,MAAM,GACJ;QAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAA;KAAE,CAoB3H"}
+{"version":3,"file":"githubActions.d.ts","sourceRoot":"","sources":["../../../../lib/helpers/ciParsers/githubActions.js"],"names":[],"mappings":"AA4lDA;;;;;;GAMG;AAEH,qCALW,MAAM,WACN,MAAM,GACJ;IAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAqiBjF;;;;IAeC;;;;OAIG;IACH,sBAJW,MAAM,EAAE,WACR,MAAM,GACJ;QAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAA;KAAE,CAqB3H"}

package/types/lib/helpers/containerRisk.d.ts

@@ -0,0 +1,17 @@
+export function getContainerRiskMetadata(name: any, linkedName: any): {
+    attackTactics: any[];
+    attackTechniques: any[];
+    canonicalName: any;
+    knowledgeSourceRefs: any[];
+    knowledgeSources: any[];
+    matchSource: string;
+    offenseTools: any[];
+    riskTags: any[];
+    seccompBlockedSyscalls: any[];
+    seccompProfile: any;
+} | undefined;
+export function createContainerRiskProperties(name: any, linkedName: any): {
+    name: string;
+    value: any;
+}[];
+//# sourceMappingURL=containerRisk.d.ts.map

package/types/lib/helpers/containerRisk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"containerRisk.d.ts","sourceRoot":"","sources":["../../../lib/helpers/containerRisk.js"],"names":[],"mappings":"AAqFA;;;;;;;;;;;cAuCC;AAED;;;IA2DC"}

package/types/lib/helpers/display.d.ts

@@ -6,9 +6,10 @@
  * @param {Object} bomJson CycloneDX BOM JSON object
  * @param {string[]} [filterTypes] Optional list of component types to include; all types shown when omitted
  * @param {string} [highlight] Optional string to highlight in the output
+ * @param {string} [summaryText] Optional summary message to print after the table
  * @returns {void}
  */
-export function printTable(bomJson: Object, filterTypes?: string[], highlight?: string): void;
+export function printTable(bomJson: Object, filterTypes?: string[], highlight?: string, summaryText?: string): void;
 /**
  * Prints OS package components from the BOM as a formatted streaming table.
  *
@@ -102,6 +103,8 @@ export function printSummary(bomJson: Object): void;
  * @param {EnvAuditFinding[]} envAuditFindings Audit findings to display
  */
 export function displaySelfThreatModel(filePath: string, config: Object, options: Object, envAuditFindings: EnvAuditFinding[]): void;
+export function buildDependencyTreeLegendLines(treeGraphics: string[]): string[];
+export function buildDependencyTreeLines(dependencies: Object[], mode?: string): string[];
 export type EnvAuditFinding = {
     type: string;
     variable: string;

package/types/lib/helpers/display.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"display.d.ts","sourceRoot":"","sources":["../../../lib/helpers/display.js"],"names":[],"mappings":"AAuBA;;;;;;;;;GASG;AACH,oCALW,MAAM,gBACN,MAAM,EAAE,cACR,MAAM,GACJ,IAAI,CA0EhB;AAQD;;;;;GAKG;AACH,sCAHW,MAAM,GACJ,IAAI,CAsBhB;AACD;;;;;;GAMG;AACH,uCAHW,MAAM,GACJ,IAAI,CAwBhB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,GACJ,IAAI,CAuBhB;AAeD;;;;;;GAMG;AACH,0CAHW,MAAM,GACJ,IAAI,CAwChB;AAED;;;;;;GAMG;AACH,wCAHW,MAAM,GACJ,IAAI,CA4ChB;AACD;;;;;;;;GAQG;AACH,6CALW,MAAM,SACN,MAAM,cACN,MAAM,GACJ,IAAI,CA4ChB;AA4DD;;;;;;GAMG;AACH,gDAHW,MAAM,GACJ,IAAI,CAoChB;AAED;;;;;GAKG;AACH,sDAHW,MAAM,EAAE,GACN,IAAI,CA4BhB;AAED;;;;;;;GAOG;AACH,4CAHW,MAAM,GACJ,IAAI,CAsBhB;AAED;;;;;;GAMG;AACH,sCAHW,MAAM,GACJ,IAAI,CAkDhB;AAED;;GAEG;AAEH;;;;;;;;GAQG;AACH,iDALW,MAAM,UACN,MAAM,WACN,MAAM,oBACN,eAAe,EAAE,QAmU3B;8BA7UY;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAC"}
+{"version":3,"file":"display.d.ts","sourceRoot":"","sources":["../../../lib/helpers/display.js"],"names":[],"mappings":"AA+DA;;;;;;;;;;GAUG;AACH,oCANW,MAAM,gBACN,MAAM,EAAE,cACR,MAAM,gBACN,MAAM,GACJ,IAAI,CAuFhB;AAQD;;;;;GAKG;AACH,sCAHW,MAAM,GACJ,IAAI,CAsBhB;AACD;;;;;;GAMG;AACH,uCAHW,MAAM,GACJ,IAAI,CAwBhB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,GACJ,IAAI,CAuBhB;AAeD;;;;;;GAMG;AACH,0CAHW,MAAM,GACJ,IAAI,CAwChB;AAED;;;;;;GAMG;AACH,wCAHW,MAAM,GACJ,IAAI,CA4ChB;AACD;;;;;;;;GAQG;AACH,6CALW,MAAM,SACN,MAAM,cACN,MAAM,GACJ,IAAI,CAoChB;AAoMD;;;;;;GAMG;AACH,gDAHW,MAAM,GACJ,IAAI,CAoChB;AAED;;;;;GAKG;AACH,sDAHW,MAAM,EAAE,GACN,IAAI,CA4BhB;AAED;;;;;;;GAOG;AACH,4CAHW,MAAM,GACJ,IAAI,CAsBhB;AAED;;;;;;GAMG;AACH,sCAHW,MAAM,GACJ,IAAI,CAkDhB;AAED;;GAEG;AAEH;;;;;;;;GAQG;AACH,iDALW,MAAM,UACN,MAAM,WACN,MAAM,oBACN,eAAe,EAAE,QAmU3B;AA3hCM,6DAHI,MAAM,EAAE,GACN,MAAM,EAAE,CAcpB;AAofM,uDAJI,MAAM,EAAE,SACR,MAAM,GACJ,MAAM,EAAE,CAyCpB;8BAuKY;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAC"}

package/types/lib/helpers/exportUtils.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Normalize the requested export formats.
+ *
+ * @param {string|string[]|undefined|null} format Raw format value
+ * @returns {string[]} Normalized export formats
+ */
+export function normalizeOutputFormats(format: string | string[] | undefined | null): string[];
+/**
+ * Derive the SPDX output path from a base output path.
+ *
+ * @param {string} outputPath Output path
+ * @returns {string} SPDX output path
+ */
+export function deriveSpdxOutputPath(outputPath: string): string;
+/**
+ * Derive the CycloneDX output path from a base output path.
+ *
+ * @param {string} outputPath Output path
+ * @returns {string} CycloneDX output path
+ */
+export function deriveCycloneDxOutputPath(outputPath: string): string;
+/**
+ * Determine the final output plan for the requested export formats.
+ *
+ * @param {object} options CLI options
+ * @returns {{ formats: Set<string>, outputs: Record<string, string>, explicitFormat: boolean }} Output plan
+ */
+export function createOutputPlan(options: object): {
+    formats: Set<string>;
+    outputs: Record<string, string>;
+    explicitFormat: boolean;
+};
+/**
+ * Return the output directory for a planned export path.
+ *
+ * @param {string} outputPath Output path
+ * @returns {string} Output directory
+ */
+export function getOutputDirectory(outputPath: string): string;
+//# sourceMappingURL=exportUtils.d.ts.map

package/types/lib/helpers/exportUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exportUtils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/exportUtils.js"],"names":[],"mappings":"AAYA;;;;;GAKG;AACH,+CAHW,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAAI,GAC5B,MAAM,EAAE,CAoBpB;AAED;;;;;GAKG;AACH,iDAHW,MAAM,GACJ,MAAM,CAgBlB;AAED;;;;;GAKG;AACH,sDAHW,MAAM,GACJ,MAAM,CAUlB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,GACJ;IAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,cAAc,EAAE,OAAO,CAAA;CAAE,CAgC9F;AAED;;;;;GAKG;AACH,+CAHW,MAAM,GACJ,MAAM,CAIlB"}

package/types/lib/helpers/formulationParsers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"formulationParsers.d.ts","sourceRoot":"","sources":["../../../lib/helpers/formulationParsers.js"],"names":[],"mappings":"AA2CA;;;;;;;GAOG;AACH,uCAFW;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,WAAU;CAAE,QAoB7D;AAED;;;;GAIG;AACH,8BAFa,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,WAAU;CAAE,CAAC,CAItE;AAgDD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,gDAZW,MAAM,WACN,MAAM,YAEN,MAAM,GAIJ;IAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CA+M7D"}
+{"version":3,"file":"formulationParsers.d.ts","sourceRoot":"","sources":["../../../lib/helpers/formulationParsers.js"],"names":[],"mappings":"AAwGA;;;;;;;GAOG;AACH,uCAFW;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,WAAU;CAAE,QAoB7D;AAED;;;;GAIG;AACH,8BAFa,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,WAAU;CAAE,CAAC,CAItE;AAgDD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,gDAZW,MAAM,WACN,MAAM,YAEN,MAAM,GAIJ;IAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAuN7D"}

package/types/lib/helpers/gtfobins.d.ts

@@ -0,0 +1,17 @@
+export function getGtfoBinsMetadata(name: any, linkedName: any): {
+    canonicalName: any;
+    contexts: any;
+    functions: any;
+    matchSource: string;
+    mitreTechniques: any;
+    privilegedContexts: any;
+    reference: string;
+    riskTags: any[];
+    source: any;
+    sourceRef: any;
+} | undefined;
+export function createGtfoBinsProperties(name: any, linkedName: any): {
+    name: string;
+    value: any;
+}[];
+//# sourceMappingURL=gtfobins.d.ts.map

package/types/lib/helpers/gtfobins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gtfobins.d.ts","sourceRoot":"","sources":["../../../lib/helpers/gtfobins.js"],"names":[],"mappings":"AAmHA;;;;;;;;;;;cAsCC;AAED;;;IAiCC"}

package/types/lib/helpers/lolbas.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Resolve LOLBAS metadata for a binary or script name.
+ *
+ * @param {string} candidate Binary or script path/name
+ * @returns {object|undefined} Matched LOLBAS metadata
+ */
+export function getLolbasMetadata(candidate: string): object | undefined;
+/**
+ * Resolve LOLBAS properties for an osquery row.
+ *
+ * @param {string} queryCategory Osquery query category
+ * @param {object} row Osquery row
+ * @returns {Array<object>} CycloneDX custom properties
+ */
+export function createLolbasProperties(queryCategory: string, row: object): Array<object>;
+//# sourceMappingURL=lolbas.d.ts.map

package/types/lib/helpers/lolbas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lolbas.d.ts","sourceRoot":"","sources":["../../../lib/helpers/lolbas.js"],"names":[],"mappings":"AA2IA;;;;;GAKG;AACH,6CAHW,MAAM,GACJ,MAAM,GAAC,SAAS,CAqB5B;AAED;;;;;;GAMG;AACH,sDAJW,MAAM,OACN,MAAM,GACJ,KAAK,CAAC,MAAM,CAAC,CA+FzB"}

package/types/lib/helpers/osqueryTransform.d.ts

@@ -0,0 +1,7 @@
+export function deriveOsQueryVersion(res: any): any;
+export function deriveOsQueryName(res: any, singleResult: any, queryName: any): any;
+export function deriveOsQueryPublisher(res: any): any;
+export function deriveOsQueryDescription(res: any): any;
+export function sanitizeOsQueryIdentity(value: any): string;
+export function createOsQueryPurl(purlType: any, group: any, name: any, version: any, qualifiers: any, subpath: any): string;
+//# sourceMappingURL=osqueryTransform.d.ts.map

package/types/lib/helpers/osqueryTransform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"osqueryTransform.d.ts","sourceRoot":"","sources":["../../../lib/helpers/osqueryTransform.js"],"names":[],"mappings":"AAEA,oDAWC;AAED,oFAgBC;AAED,sDASC;AAED,wDAaC;AAED,4DAMC;AAED,6HAgBC"}

package/types/lib/helpers/provenanceUtils.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Return a component property value by name.
+ *
+ * @param {object} component CycloneDX component
+ * @param {string} propertyName Property name to look up
+ * @returns {string | undefined} Property value if present
+ */
+export function getComponentPropertyValue(component: object, propertyName: string): string | undefined;
+/**
+ * Return a property value by name from a raw properties array.
+ *
+ * @param {object[]} properties CycloneDX properties array
+ * @param {string} propertyName Property name to look up
+ * @returns {string | undefined} Property value if present
+ */
+export function getPropertyValue(properties: object[], propertyName: string): string | undefined;
+/**
+ * Check whether any of the supplied properties exist and carry a value.
+ *
+ * @param {object[]} properties CycloneDX properties array
+ * @param {string[]} propertyNames Property names to test
+ * @returns {boolean} True when any named property has a non-empty value
+ */
+export function hasAnyPropertyValue(properties: object[], propertyNames: string[]): boolean;
+/**
+ * Determine whether a raw properties array includes trusted publishing metadata.
+ *
+ * @param {object[]} properties CycloneDX properties array
+ * @returns {boolean} True when trusted publishing is recorded for npm or PyPI
+ */
+export function hasTrustedPublishingProperties(properties: object[]): boolean;
+/**
+ * Determine whether a raw properties array includes direct registry provenance evidence.
+ *
+ * @param {object[]} properties CycloneDX properties array
+ * @returns {boolean} True when direct provenance evidence is present
+ */
+export function hasRegistryProvenanceEvidenceProperties(properties: object[]): boolean;
+/**
+ * Determine whether a component includes trusted publishing metadata.
+ *
+ * @param {object} component CycloneDX component
+ * @returns {boolean} True when trusted publishing is recorded for npm or PyPI
+ */
+export function hasComponentTrustedPublishing(component: object): boolean;
+/**
+ * Determine whether a component includes direct registry provenance evidence.
+ *
+ * @param {object} component CycloneDX component
+ * @returns {boolean} True when provenance URL, digests, signatures, or key IDs exist
+ */
+export function hasComponentRegistryProvenanceEvidence(component: object): boolean;
+/**
+ * Determine whether a component includes registry provenance metadata.
+ *
+ * @param {object} component CycloneDX component
+ * @returns {boolean} True when provenance or trusted publishing metadata exists
+ */
+export function hasComponentRegistryProvenance(component: object): boolean;
+/**
+ * Filter components to those carrying trusted publishing metadata.
+ *
+ * @param {object[]} components BOM components
+ * @returns {object[]} Trusted-publishing-backed components
+ */
+export function getTrustedComponents(components: object[]): object[];
+/**
+ * Filter components to those carrying direct registry provenance evidence.
+ *
+ * @param {object[]} components BOM components
+ * @returns {object[]} Provenance-backed components
+ */
+export function getProvenanceComponents(components: object[]): object[];
+/**
+ * Count components with trusted publishing metadata by registry ecosystem.
+ *
+ * @param {object[]} components BOM components
+ * @returns {{npm: number, pypi: number, total: number}} Trusted publishing counts
+ */
+export function getTrustedPublishingComponentCounts(components: object[]): {
+    npm: number;
+    pypi: number;
+    total: number;
+};
+export const NPM_PROVENANCE_EVIDENCE_PROPERTIES: string[];
+export const PYPI_PROVENANCE_EVIDENCE_PROPERTIES: string[];
+export const REGISTRY_PROVENANCE_EVIDENCE_PROPERTIES: string[];
+export const TRUSTED_PUBLISHING_PROPERTIES: string[];
+export const REGISTRY_PROVENANCE_ICON: "\uD83D\uDEE1";
+//# sourceMappingURL=provenanceUtils.d.ts.map

package/types/lib/helpers/provenanceUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenanceUtils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/provenanceUtils.js"],"names":[],"mappings":"AAmCA;;;;;;GAMG;AACH,qDAJW,MAAM,gBACN,MAAM,GACJ,MAAM,GAAG,SAAS,CAK9B;AAED;;;;;;GAMG;AACH,6CAJW,MAAM,EAAE,gBACR,MAAM,GACJ,MAAM,GAAG,SAAS,CAI9B;AAED;;;;;;GAMG;AACH,gDAJW,MAAM,EAAE,iBACR,MAAM,EAAE,GACN,OAAO,CAMnB;AAED;;;;;GAKG;AACH,2DAHW,MAAM,EAAE,GACN,OAAO,CAMnB;AAED;;;;;GAKG;AACH,oEAHW,MAAM,EAAE,GACN,OAAO,CAOnB;AAED;;;;;GAKG;AACH,yDAHW,MAAM,GACJ,OAAO,CAInB;AAED;;;;;GAKG;AACH,kEAHW,MAAM,GACJ,OAAO,CAInB;AAED;;;;;GAKG;AACH,0DAHW,MAAM,GACJ,OAAO,CAOnB;AAED;;;;;GAKG;AACH,iDAHW,MAAM,EAAE,GACN,MAAM,EAAE,CASpB;AAED;;;;;GAKG;AACH,oDAHW,MAAM,EAAE,GACN,MAAM,EAAE,CASpB;AAED;;;;;GAKG;AACH,gEAHW,MAAM,EAAE,GACN;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,CA6BtD;AA3LD,0DAQE;AACF,2DASE;AACF,+DAGE;AACF,qDAGE;AAEF,uCAAwC,cAAI,CAAC"}

package/types/lib/helpers/pylockutils.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Check whether a file name conforms to pylock naming.
+ *
+ * @param {string} lockFilePath lock file path
+ * @returns {boolean} true if this is a pylock file
+ */
+export function isPyLockFile(lockFilePath: string): boolean;
+/**
+ * Check whether a parsed toml object follows pylock format.
+ *
+ * @param {object} lockTomlObj parsed toml object
+ * @returns {boolean} true if object appears to be pylock data
+ */
+export function isPyLockObject(lockTomlObj: object): boolean;
+/**
+ * Get package entries from py lock data in a format-agnostic way.
+ *
+ * @param {object} lockTomlObj parsed toml object
+ * @returns {Array<object>} package entries
+ */
+export function getPyLockPackages(lockTomlObj: object): Array<object>;
+/**
+ * Convert top-level pylock keys to custom cdx properties.
+ *
+ * @param {object} lockTomlObj parsed toml object
+ * @returns {Array<object>} custom properties
+ */
+export function collectPyLockTopLevelProperties(lockTomlObj: object): Array<object>;
+/**
+ * Convert package-level pylock keys to custom cdx properties.
+ *
+ * @param {object} pkg pylock package entry
+ * @returns {Array<object>} custom properties
+ */
+export function collectPyLockPackageProperties(pkg: object): Array<object>;
+/**
+ * Build file components from pylock source entries.
+ *
+ * @param {object} pkg pylock package entry
+ * @param {string} lockFile lock file path
+ * @returns {Array<object>} file components
+ */
+export function collectPyLockFileComponents(pkg: object, lockFile: string): Array<object>;
+/**
+ * Check whether index points to the default pypi registry.
+ *
+ * @param {string} indexUrl index URL from pylock
+ * @returns {boolean} true for default pypi
+ */
+export function isDefaultPypiRegistry(indexUrl: string): boolean;
+//# sourceMappingURL=pylockutils.d.ts.map

package/types/lib/helpers/pylockutils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pylockutils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/pylockutils.js"],"names":[],"mappings":"AAkCA;;;;;GAKG;AACH,2CAHW,MAAM,GACJ,OAAO,CAOnB;AAED;;;;;GAKG;AACH,4CAHW,MAAM,GACJ,OAAO,CAMnB;AAED;;;;;GAKG;AACH,+CAHW,MAAM,GACJ,KAAK,CAAC,MAAM,CAAC,CAUzB;AAED;;;;;GAKG;AACH,6DAHW,MAAM,GACJ,KAAK,CAAC,MAAM,CAAC,CAazB;AAED;;;;;GAKG;AACH,oDAHW,MAAM,GACJ,KAAK,CAAC,MAAM,CAAC,CAazB;AAED;;;;;;GAMG;AACH,iDAJW,MAAM,YACN,MAAM,GACJ,KAAK,CAAC,MAAM,CAAC,CAwCzB;AAED;;;;;GAKG;AACH,gDAHW,MAAM,GACJ,OAAO,CAOnB"}

package/types/lib/helpers/registryProvenance.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Extract advanced npm provenance and publishing properties from registry metadata.
+ *
+ * @param {object} packument npm packument body
+ * @param {string | undefined} version package version
+ * @returns {object[]} custom properties
+ */
+export function collectNpmRegistryProvenanceProperties(packument: object, version: string | undefined): object[];
+/**
+ * Extract advanced PyPI provenance and publishing properties from registry metadata.
+ *
+ * @param {object} projectBody PyPI JSON body
+ * @param {string | undefined} version package version
+ * @returns {object[]} custom properties
+ */
+export function collectPypiRegistryProvenanceProperties(projectBody: object, version: string | undefined): object[];
+//# sourceMappingURL=registryProvenance.d.ts.map

package/types/lib/helpers/registryProvenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registryProvenance.d.ts","sourceRoot":"","sources":["../../../lib/helpers/registryProvenance.js"],"names":[],"mappings":"AA6SA;;;;;;GAMG;AACH,kEAJW,MAAM,WACN,MAAM,GAAG,SAAS,GAChB,MAAM,EAAE,CA4MpB;AAED;;;;;;GAMG;AACH,qEAJW,MAAM,WACN,MAAM,GAAG,SAAS,GAChB,MAAM,EAAE,CAmRpB"}