@cyclonedx/cdxgen 12.4.0 → 12.4.1

package/lib/validator/bomValidator.js

@@ -6,6 +6,10 @@ import Ajv2020 from "ajv/dist/2020.js";
 import addFormats from "ajv-formats";
 import { PackageURL } from "packageurl-js";
 
+import {
+  isCycloneDxSpecVersionAtLeast,
+  toCycloneDxSpecVersionString,
+} from "../helpers/bomUtils.js";
 import { thoughtLog } from "../helpers/logger.js";
 import { DEBUG_MODE, dirNameStr, isPartialTree } from "../helpers/utils.js";
 import {
@@ -14,6 +18,13 @@ import {
 } from "../stages/postgen/spdxConverter.js";
 
 const dirName = dirNameStr;
+const SUPPORTED_CYCLONEDX_SCHEMA_VERSIONS = new Set([
+  "1.4",
+  "1.5",
+  "1.6",
+  "1.7",
+  "2.0",
+]);
 const PLACEHOLDER_COMPONENT_NAMES = new Set(["app", "application", "project"]);
 const SPDX_EXPORT_TYPES = new Set([
   "CreationInfo",
@@ -23,6 +34,74 @@ const SPDX_EXPORT_TYPES = new Set([
   "software_Package",
 ]);
 let spdxExportSchemaValidator;
+const cycloneDxSchemaValidators = new Map();
+
+const AJV_OPTIONS = {
+  strict: false,
+  logger: false,
+  verbose: true,
+  code: {
+    source: true,
+    lines: true,
+    optimize: true,
+  },
+};
+
+const readJsonSchema = (fileName) =>
+  JSON.parse(readFileSync(join(dirName, "data", fileName), "utf-8"));
+
+const addDraft2020BundledSchema = (ajv, schema, schemaId) => {
+  const bundledSchema = { ...schema };
+  delete bundledSchema.$schema;
+  bundledSchema.$id = schemaId;
+  ajv.addSchema(bundledSchema);
+};
+
+const getCycloneDxSchemaValidator = (specVersion) => {
+  if (cycloneDxSchemaValidators.has(specVersion)) {
+    return cycloneDxSchemaValidators.get(specVersion);
+  }
+  let validate;
+  if (isCycloneDxSpecVersionAtLeast(specVersion, "2.0")) {
+    const ajv = new Ajv2020(AJV_OPTIONS);
+    addFormats(ajv);
+    addDraft2020BundledSchema(
+      ajv,
+      readJsonSchema("cryptography-defs.schema.json"),
+      "https://cyclonedx.org/schema/cryptography-defs.schema.json",
+    );
+    addDraft2020BundledSchema(
+      ajv,
+      readJsonSchema("jsf-0.82.schema.json"),
+      "https://cyclonedx.org/schema/jsf-0.82.schema.json",
+    );
+    addDraft2020BundledSchema(
+      ajv,
+      readJsonSchema("spdx.schema.json"),
+      "https://cyclonedx.org/schema/spdx.schema.json",
+    );
+    validate = ajv.compile(readJsonSchema("cyclonedx-2.0-bundled.schema.json"));
+  } else {
+    const schemas = [
+      readJsonSchema(`bom-${specVersion}.schema.json`),
+      readJsonSchema("jsf-0.82.schema.json"),
+      readJsonSchema("spdx.schema.json"),
+    ];
+    if (isCycloneDxSpecVersionAtLeast(specVersion, "1.7")) {
+      schemas.push(readJsonSchema("cryptography-defs.schema.json"));
+    }
+    const ajv = new Ajv({
+      ...AJV_OPTIONS,
+      schemas,
+    });
+    addFormats(ajv);
+    validate = ajv.getSchema(
+      `http://cyclonedx.org/schema/bom-${specVersion}.schema.json`,
+    );
+  }
+  cycloneDxSchemaValidators.set(specVersion, validate);
+  return validate;
+};
 
 const getSpdxElementId = (element) => element?.spdxId || element?.["@id"];
 
@@ -36,6 +115,7 @@ const getSpdxExportSchemaValidator = () => {
     );
     const ajv = new Ajv2020({
       strict: false,
+      validateSchema: false,
       logger: false,
       verbose: true,
       code: {
@@ -63,44 +143,16 @@ export const validateBom = (bomJson) => {
   if (!bomJson) {
     return true;
   }
-  const specVersion = bomJson.specVersion;
-  const schema = JSON.parse(
-    readFileSync(
-      join(dirName, "data", `bom-${specVersion}.schema.json`),
-      "utf-8",
-    ),
-  );
-  const defsSchema = JSON.parse(
-    readFileSync(join(dirName, "data", "jsf-0.82.schema.json"), "utf-8"),
-  );
-  const spdxSchema = JSON.parse(
-    readFileSync(join(dirName, "data", "spdx.schema.json"), "utf-8"),
-  );
-  const cryptoDefSchema = JSON.parse(
-    readFileSync(
-      join(dirName, "data", "cryptography-defs.schema.json"),
-      "utf-8",
-    ),
-  );
-  const schemas = [schema, defsSchema, spdxSchema];
-  if (specVersion >= 1.7) {
-    schemas.push(cryptoDefSchema);
-  }
-  const ajv = new Ajv({
-    schemas,
-    strict: false,
-    logger: false,
-    verbose: true,
-    code: {
-      source: true,
-      lines: true,
-      optimize: true,
-    },
-  });
-  addFormats(ajv);
-  const validate = ajv.getSchema(
-    `http://cyclonedx.org/schema/bom-${specVersion}.schema.json`,
-  );
+  const specVersion = toCycloneDxSpecVersionString(bomJson.specVersion);
+  if (!SUPPORTED_CYCLONEDX_SCHEMA_VERSIONS.has(specVersion)) {
+    console.log(
+      `Unsupported CycloneDX specVersion '${bomJson.specVersion}'. Supported versions are ${[
+        ...SUPPORTED_CYCLONEDX_SCHEMA_VERSIONS,
+      ].join(", ")}.`,
+    );
+    return false;
+  }
+  const validate = getCycloneDxSchemaValidator(specVersion);
   const isValid = validate(bomJson);
   if (!isValid) {
     if (bomJson.metadata?.component?.name) {

package/lib/validator/bomValidator.poku.js

@@ -1,7 +1,97 @@
+import { readFileSync as actualReadFileSync } from "node:fs";
+
 import esmock from "esmock";
 import { assert, describe, it } from "poku";
 import sinon from "sinon";
 
+import { validateBom } from "./bomValidator.js";
+
+const validCycloneDx20Bom = {
+  specFormat: "CycloneDX",
+  specVersion: "2.0",
+  serialNumber: "urn:uuid:3e671687-395b-41f5-a30f-a58921a69b79",
+  version: 1,
+  metadata: {
+    component: {
+      "bom-ref": "pkg:generic/demo@1.0.0",
+      name: "demo",
+      purl: "pkg:generic/demo@1.0.0",
+      type: "application",
+      version: "1.0.0",
+    },
+    tools: {
+      components: [{ type: "application", name: "cdxgen", version: "12.4.0" }],
+    },
+  },
+  components: [
+    {
+      "bom-ref": "pkg:npm/lodash@4.17.21",
+      name: "lodash",
+      purl: "pkg:npm/lodash@4.17.21",
+      type: "library",
+      version: "4.17.21",
+    },
+  ],
+  dependencies: [
+    {
+      ref: "pkg:generic/demo@1.0.0",
+      dependsOn: ["pkg:npm/lodash@4.17.21"],
+    },
+    { ref: "pkg:npm/lodash@4.17.21", dependsOn: [] },
+  ],
+};
+
+describe("validateBom()", () => {
+  it("validates CycloneDX 2.0-dev JSON against the bundled schema", () => {
+    assert.strictEqual(validateBom(validCycloneDx20Bom), true);
+  });
+
+  it("returns a clear validation failure for unsupported spec versions", async () => {
+    const readFileSyncStub = sinon.stub();
+    const consoleLogStub = sinon.stub(console, "log");
+    try {
+      const { validateBom } = await esmock("./bomValidator.js", {
+        "node:fs": {
+          readFileSync: readFileSyncStub,
+        },
+      });
+
+      assert.strictEqual(
+        validateBom({ bomFormat: "CycloneDX", specVersion: "2.0.1" }),
+        false,
+      );
+      sinon.assert.notCalled(readFileSyncStub);
+      sinon.assert.calledWithMatch(
+        consoleLogStub,
+        "Unsupported CycloneDX specVersion '2.0.1'.",
+      );
+    } finally {
+      consoleLogStub.restore();
+    }
+  });
+
+  it("caches compiled CycloneDX schema validators by spec version", async () => {
+    const readFileSyncStub = sinon
+      .stub()
+      .callsFake((...args) => actualReadFileSync(...args));
+    const { validateBom } = await esmock("./bomValidator.js", {
+      "node:fs": {
+        readFileSync: readFileSyncStub,
+      },
+    });
+
+    assert.strictEqual(validateBom(validCycloneDx20Bom), true);
+    const readCountAfterFirstValidation = readFileSyncStub.callCount;
+    assert.ok(readCountAfterFirstValidation > 0);
+
+    assert.strictEqual(validateBom(validCycloneDx20Bom), true);
+    assert.strictEqual(
+      readFileSyncStub.callCount,
+      readCountAfterFirstValidation,
+    );
+  });
+});
+
 describe("validateSpdx()", () => {
   it("lazy-loads the bundled SPDX export schema on first validation call", async () => {
     const readFileSyncStub = sinon

package/lib/validator/complianceRules.js

@@ -36,6 +36,8 @@
 
 import { PackageURL } from "packageurl-js";
 
+import { isCycloneDxBom } from "../helpers/bomUtils.js";
+
 /**
  * Extract the first SPDX-ish license id from a CycloneDX component's licenses
  * block. Returns null when no license is declared.
@@ -325,7 +327,7 @@ const SCVS_RULES = [
     scvsLevels: ["L1", "L2", "L3"],
     automatable: true,
     evaluate(bomJson) {
-      if (bomJson?.bomFormat !== "CycloneDX" || !bomJson?.specVersion) {
+      if (!isCycloneDxBom(bomJson)) {
         return fail(
           "BOM is not a valid CycloneDX document (bomFormat/specVersion missing).",
           {
@@ -467,7 +469,7 @@ const SCVS_RULES = [
     scvsLevels: ["L1", "L2", "L3"],
     automatable: true,
     evaluate(bomJson) {
-      if (bomJson?.bomFormat === "CycloneDX" && bomJson?.specVersion) {
+      if (isCycloneDxBom(bomJson)) {
         return pass(`SBOM format is CycloneDX ${bomJson.specVersion}.`);
       }
       return fail("bomFormat or specVersion missing from the SBOM root.", {

package/lib/validator/index.poku.js

@@ -46,6 +46,20 @@ function richBom() {
 }
 
 describe("validateBomAdvanced", () => {
+  it("accepts CycloneDX 2.0-dev root fields in compliance evaluation", () => {
+    const bom20 = richBom();
+    delete bom20.bomFormat;
+    bom20.specFormat = "CycloneDX";
+    bom20.specVersion = "2.0";
+    const report = validateBomAdvanced(bom20, { schema: false });
+    assert.strictEqual(
+      report.allFindings.some((finding) =>
+        /bomFormat\/specVersion missing/.test(finding.message),
+      ),
+      false,
+    );
+  });
+
   it("returns structural, compliance, and benchmark data", () => {
     const report = validateBomAdvanced(richBom(), { schema: false });
     assert.strictEqual(typeof report.schemaValid, "boolean");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cyclonedx/cdxgen",
-  "version": "12.4.0",
+  "version": "12.4.1",
   "description": "Creates CycloneDX Software Bill of Materials (SBOM) from source or container image",
   "keywords": [
     "sbom",

package/types/bin/repl.d.ts

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-export function importSbom(sbomOrPath: any): void;
+export function importSbom(sbomOrPath: any): Promise<void>;
 //# sourceMappingURL=repl.d.ts.map

package/types/bin/repl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repl.d.ts","sourceRoot":"","sources":["../../bin/repl.js"],"names":[],"mappings":";AA0WO,kDAmEN"}
+{"version":3,"file":"repl.d.ts","sourceRoot":"","sources":["../../bin/repl.js"],"names":[],"mappings":";AA6WO,2DAoEN"}

package/types/lib/audit/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/audit/index.js"],"names":[],"mappings":"AAkGA;;;;;GAKG;AACH,qCAHW,MAAM,GACJ,MAAM,CAclB;AAED;;;;;GAKG;AACH,qCAHW,MAAM,GACJ,MAAM,EAAE,CAoBpB;AAED;;;;;GAKG;AACH,uCAHW,MAAM,GACJ;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,CA0BjD;AA6CD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DC;AA4bD;;;;;;;;GAQG;AACH,mDAHW,MAAM,GACJ,MAAM,EAAE,CAqdpB;AAkJD;;;;;;GAMG;AACH,uDAJW,MAAM,UACN,MAAM,GACJ;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA0CnD;AAED;;;;;;;GAOG;AACH,uDALW,MAAM,UACN,MAAM,cACN,MAAM,GACJ;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAuBnD;AAoED;;;;;;;;;GASG;AACH,4DAJW,MAAM,UACN,MAAM,GACJ,MAAM,EAAE,CAkEpB;AA+BD;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAiN3B;AAoVD,uDA8CC;AAoBD;;;;;;GAMG;AACH,4CAJW;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,WACrC,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA4I3B;AAED;;;;;GAKG;AACH,kCAHW,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAqB3B;AAED;;;;;;GAMG;AACH,4CAJW,MAAM,WACN,MAAM,GACJ;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAmChD;AAED;;;;;GAKG;AACH,2CAHW,MAAM,GACJ,MAAM,GAAG,SAAS,CAU9B;AA11ED,gDAKE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/audit/index.js"],"names":[],"mappings":"AAmGA;;;;;GAKG;AACH,qCAHW,MAAM,GACJ,MAAM,CAclB;AAED;;;;;GAKG;AACH,qCAHW,MAAM,GACJ,MAAM,EAAE,CAoBpB;AAED;;;;;GAKG;AACH,uCAHW,MAAM,GACJ;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,CA0BjD;AA6CD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DC;AA4bD;;;;;;;;GAQG;AACH,mDAHW,MAAM,GACJ,MAAM,EAAE,CAqdpB;AAkJD;;;;;;GAMG;AACH,uDAJW,MAAM,UACN,MAAM,GACJ;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA0CnD;AAED;;;;;;;GAOG;AACH,uDALW,MAAM,UACN,MAAM,cACN,MAAM,GACJ;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAuBnD;AAoED;;;;;;;;;GASG;AACH,4DAJW,MAAM,UACN,MAAM,GACJ,MAAM,EAAE,CAkEpB;AA+BD;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAiN3B;AAoVD,uDA8CC;AAoBD;;;;;;GAMG;AACH,4CAJW;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,WACrC,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA4I3B;AAED;;;;;GAKG;AACH,kCAHW,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAqB3B;AAED;;;;;;GAMG;AACH,4CAJW,MAAM,WACN,MAAM,GACJ;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAmChD;AAED;;;;;GAKG;AACH,2CAHW,MAAM,GACJ,MAAM,GAAG,SAAS,CAU9B;AA11ED,gDAKE"}

package/types/lib/cli/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/cli/index.js"],"names":[],"mappings":"AAg8BA;;;;;;;;;GASG;AACH,wCANW,MAAM,cACN,MAAM,OACN,MAAM,UACN,MAAM,GACJ,MAAM,EAAE,CAcpB;AA2bD;;;;;;;GAOG;AACH,mCALW,MAAM,WACN,MAAM,GAEJ,MAAM,CA8ElB;AAED;;;;;;GAMG;AACH,uCAJW,MAAM,WACN,MAAM,GACJ,MAAM,GAAC,SAAS,CAI5B;AAED;;;;;;GAMG;AACH,sCAJW,MAAM,WACN,MAAM,GACJ,MAAM,GAAC,SAAS,CAwB5B;AAED;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAouC3B;AA4ID,0EA4/BC;AAgFD;;;;;;;;;;;GAWG;AACH,qDAHW,MAAM,GACJ,MAAM,GAAG,IAAI,CAwEzB;AAED;;;;;;GAMG;AACH,sCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAylB3B;AAED;;;;;;GAMG;AACH,kCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAoavC;AAED;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAmJrC;AA2FD;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAiE3B;AAED;;;;;;GAMG;AACH,mCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CAmPlB;AAED;;;;;;GAMG;AACH,uCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CA+GlB;AAED;;;;;;GAMG;AACH,uCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CA0BlB;AAED;;;;;;GAMG;AACH,sCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CA0BlB;AAED;;;;;;GAMG;AACH,sCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CAyBlB;AAED;;;;;;GAMG;AACH,0CAJW,MAAM,WACN,MAAM,GACJ,MAAM,CAsBlB;AAED;;;;;;GAMG;AACH,mCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAmE3B;AAED;;;;;;GAMG;AACH,uCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA2C3B;AAED;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CA0BlB;AAED;;;;;;GAMG;AACH,qCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA0I3B;AAED;;;;;;GAMG;AACH,qCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAgKvC;AAED;;;;;;GAMG;AACH,mCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAoH3B;AAED;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA6C3B;AAED;;;;;;GAMG;AACH,iDAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAkU3B;AAED;;;;;;GAMG;AACH,mCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CA8JlB;AAED;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA0P3B;AAED;;;;;;GAMG;AACH,sCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAkbrC;AAED;;;;;;;;;GASG;AACH,+CAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA+F3B;AAED;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAyL3B;AAED;;;;;;GAMG;AACH,+CAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAoD3B;AA2FD;;;;;;GAMG;AACH,2CAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA+D3B;AAED;;;;;;;;;GASG;AACH,mCAPW,MAAM,sCAEN,MAAM,wBAGJ,MAAM,CAyClB;AAED;;;;;;GAMG;AACH,0CAJW,MAAM,EAAE,WACR,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAy9B3B;AAED;;;;;;GAMG;AACH,iCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAmXrC;AAED;;;;;;GAMG;AACH,kCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAsB3B;AAED;;;;;;GAMG;AACH,gCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA8T3B;AAED;;;;;;;GAOG;AACH,gCALW,MAAM,eACN,MAAM,GACL,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAAC,CA+HjD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/cli/index.js"],"names":[],"mappings":"AAo8BA;;;;;;;;;GASG;AACH,wCANW,MAAM,cACN,MAAM,OACN,MAAM,UACN,MAAM,GACJ,MAAM,EAAE,CAcpB;AA6bD;;;;;;;GAOG;AACH,mCALW,MAAM,WACN,MAAM,GAEJ,MAAM,CA8ElB;AAED;;;;;;GAMG;AACH,uCAJW,MAAM,WACN,MAAM,GACJ,MAAM,GAAC,SAAS,CAI5B;AAED;;;;;;GAMG;AACH,sCAJW,MAAM,WACN,MAAM,GACJ,MAAM,GAAC,SAAS,CAwB5B;AAED;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAouC3B;AAsKD,0EA4/BC;AAgFD;;;;;;;;;;;GAWG;AACH,qDAHW,MAAM,GACJ,MAAM,GAAG,IAAI,CAwEzB;AAED;;;;;;GAMG;AACH,sCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAylB3B;AAED;;;;;;GAMG;AACH,kCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAoavC;AAED;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAmJrC;AA2FD;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAiE3B;AAED;;;;;;GAMG;AACH,mCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CAmPlB;AAED;;;;;;GAMG;AACH,uCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CA+GlB;AAED;;;;;;GAMG;AACH,uCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CA0BlB;AAED;;;;;;GAMG;AACH,sCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CA0BlB;AAED;;;;;;GAMG;AACH,sCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CAyBlB;AAED;;;;;;GAMG;AACH,0CAJW,MAAM,WACN,MAAM,GACJ,MAAM,CAsBlB;AAED;;;;;;GAMG;AACH,mCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAmE3B;AAED;;;;;;GAMG;AACH,uCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA2C3B;AAED;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CA0BlB;AAED;;;;;;GAMG;AACH,qCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA0I3B;AAED;;;;;;GAMG;AACH,qCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAgKvC;AAED;;;;;;GAMG;AACH,mCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAoH3B;AAED;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA6C3B;AAED;;;;;;GAMG;AACH,iDAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAkU3B;AAED;;;;;;GAMG;AACH,mCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CA8JlB;AAED;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA0P3B;AAED;;;;;;GAMG;AACH,sCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAkbrC;AAED;;;;;;;;;GASG;AACH,+CAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA+F3B;AAED;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAyL3B;AAED;;;;;;GAMG;AACH,+CAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAoD3B;AA2FD;;;;;;GAMG;AACH,2CAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA+D3B;AAED;;;;;;;;;GASG;AACH,mCAPW,MAAM,sCAEN,MAAM,wBAGJ,MAAM,CA4ClB;AAED;;;;;;GAMG;AACH,0CAJW,MAAM,EAAE,WACR,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAy9B3B;AAED;;;;;;GAMG;AACH,iCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAmXrC;AAED;;;;;;GAMG;AACH,kCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAsB3B;AAED;;;;;;GAMG;AACH,gCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA8T3B;AAED;;;;;;;GAOG;AACH,gCALW,MAAM,eACN,MAAM,GACL,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAAC,CA+HjD"}

package/types/lib/helpers/bomUtils.d.ts

@@ -1,5 +1,15 @@
 export function isSpdxJsonLd(bomJson: any): boolean;
+export function normalizeCycloneDxSpecVersion(specVersion: any): number | undefined;
+export function toCycloneDxSpecVersionString(specVersion: any): string | undefined;
+export function isCycloneDxSpecVersionAtLeast(specVersion: any, minimumVersion: any): boolean;
+export function isCycloneDx20SpecVersion(specVersion: any): boolean;
+export function getCycloneDxRootFormatKey(specVersionOrBom: any): "specFormat" | "bomFormat";
+export function getCycloneDxFormat(bomJson: any): any;
+export function hasCycloneDxFormat(bomJson: any): boolean;
 export function isCycloneDxBom(bomJson: any): boolean;
+export function setCycloneDxFormat(bomJson: any, specVersion: any, { preserveLegacyBomFormat }?: {
+    preserveLegacyBomFormat?: boolean | undefined;
+}): any;
 export function detectBomFormat(bomJson: any): "unknown" | "cyclonedx" | "spdx";
 export function getNonCycloneDxErrorMessage(bomJson: any, commandName?: string): string;
 //# sourceMappingURL=bomUtils.d.ts.map

package/types/lib/helpers/bomUtils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bomUtils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/bomUtils.js"],"names":[],"mappings":"AAMO,oDAKJ;AAEI,sDACmE;AAEnE,gFAQN;AAEM,wFASN"}
+{"version":3,"file":"bomUtils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/bomUtils.js"],"names":[],"mappings":"AAQO,oDAKJ;AAEI,oFAGN;AAEM,mFAGN;AAEM,8FAWN;AAEM,oEACwC;AAExC,6FAQN;AAEM,sDACoC;AAEpC,0DAC2C;AAE3C,sDAE4D;AAE5D;;QA4BN;AAEM,gFAQN;AAEM,wFASN"}

package/types/lib/helpers/hbomAnalysis.d.ts

@@ -4,15 +4,22 @@ export function getHbomCommandDiagnosticSummary(bomJson: any): {
     commandDiagnosticCount: any;
     commandDiagnostics: any;
     commandErrorCount: any;
+    commandErrorIds: string[];
     diagnosticIssues: string[];
+    installHintCount: number;
     installHints: string[];
     missingCommandCount: any;
+    missingCommandIds: string[];
     missingCommands: string[];
     partialSupportCount: any;
+    partialSupportIds: string[];
     permissionDeniedCommands: string[];
     permissionDeniedCount: any;
+    permissionDeniedIds: string[];
+    privilegeHintCount: number;
     privilegeHints: string[];
     requiresPrivilegedEnrichment: boolean;
+    timeoutIds: string[];
     timeoutCount: any;
 };
 export function isHbomLikeBom(bomJson: any): any;
@@ -29,6 +36,7 @@ export function getHbomSummary(bomJson: any): {
     commandDiagnosticCount: any;
     commandDiagnostics: any;
     commandErrorCount: any;
+    commandErrorIds: string[];
     componentCount: any;
     diagnosticIssues: string[];
     evidenceCommandCount: any;
@@ -41,18 +49,24 @@ export function getHbomSummary(bomJson: any): {
         count: any;
     }[];
     identifierPolicy: any;
+    installHintCount: number;
     installHints: string[];
     manufacturer: any;
     metadataName: any;
     metadataType: any;
     missingCommandCount: any;
+    missingCommandIds: string[];
     missingCommands: string[];
     partialSupportCount: any;
+    partialSupportIds: string[];
     platform: any;
     permissionDeniedCommands: string[];
     permissionDeniedCount: any;
+    permissionDeniedIds: string[];
+    privilegeHintCount: number;
     privilegeHints: string[];
     requiresPrivilegedEnrichment: boolean;
+    timeoutIds: string[];
     timeoutCount: any;
     topHardwareClasses: {
         hardwareClass: any;

package/types/lib/helpers/hbomAnalysis.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hbomAnalysis.d.ts","sourceRoot":"","sources":["../../../lib/helpers/hbomAnalysis.js"],"names":[],"mappings":"AAqCA,6DAIC;AAED;;;;;;;;;;;;;;;EA6DC;AAED,iDA2BC;AAED,0DAEC;AAED;;;IAgBC;AAED,oFAKC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyEC"}
+{"version":3,"file":"hbomAnalysis.d.ts","sourceRoot":"","sources":["../../../lib/helpers/hbomAnalysis.js"],"names":[],"mappings":"AAoDA,6DAIC;AAED;;;;;;;;;;;;;;;;;;;;;;EAqEC;AAED,iDA2BC;AAED,0DAEC;AAED;;;IAgBC;AAED,oFAKC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgFC"}

package/types/lib/helpers/hostTopology.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hostTopology.d.ts","sourceRoot":"","sources":["../../../lib/helpers/hostTopology.js"],"names":[],"mappings":"AAsmBA,uDAQC;AAED;;;;;;;EAwBC;AAYD,8DA8EC;AAED,0EAwDC"}
+{"version":3,"file":"hostTopology.d.ts","sourceRoot":"","sources":["../../../lib/helpers/hostTopology.js"],"names":[],"mappings":"AA2mBA,uDAQC;AAED;;;;;;;EAwBC;AAYD,8DA+EC;AAED,0EAwDC"}

package/types/lib/helpers/plugins.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugins.d.ts","sourceRoot":"","sources":["../../../lib/helpers/plugins.js"],"names":[],"mappings":"AA0BA;;;;GAIG;AACH,uCAFa;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAC,CAgCpF;AAED;;;;;;;;;;;;;GAaG;AACH,wCAXa;IACR,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,GAAC,SAAS,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,GAAC,SAAS,CAAC;IACrC,aAAa,EAAE,MAAM,GAAC,SAAS,CAAC;IAChC,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB,CAqKH;AAYD;;;;;GAKG;AACH,2CAFa,UAAU,CAAC,OAAO,oBAAoB,CAAC,CASnD;AAED;;;;;GAKG;AACH,kDAHW,UAAU,CAAC,OAAO,oBAAoB,CAAC,GACrC,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAWnD;AAoDD;;;;;;GAMG;AACH,8CAJW,MAAM,kBACN,UAAU,CAAC,OAAO,oBAAoB,CAAC,GACrC,MAAM,GAAC,SAAS,CAS5B"}
+{"version":3,"file":"plugins.d.ts","sourceRoot":"","sources":["../../../lib/helpers/plugins.js"],"names":[],"mappings":"AAyCA;;;;GAIG;AACH,uCAFa;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAC,CAgCpF;AAED;;;;;;;;;;;;;GAaG;AACH,wCAXa;IACR,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,GAAC,SAAS,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,GAAC,SAAS,CAAC;IACrC,aAAa,EAAE,MAAM,GAAC,SAAS,CAAC;IAChC,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB,CAuJH;AAYD;;;;;GAKG;AACH,2CAFa,UAAU,CAAC,OAAO,oBAAoB,CAAC,CASnD;AAED;;;;;GAKG;AACH,kDAHW,UAAU,CAAC,OAAO,oBAAoB,CAAC,GACrC,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAWnD;AAoDD;;;;;;GAMG;AACH,8CAJW,MAAM,kBACN,UAAU,CAAC,OAAO,oBAAoB,CAAC,GACrC,MAAM,GAAC,SAAS,CAS5B"}

package/types/lib/helpers/protobom.d.ts

@@ -1,3 +1,5 @@
+export function isProtoSupportedSpecVersion(specVersion: any): boolean;
+export function assertProtoSupportedSpecVersion(specVersion: any, operation?: string): void;
 export function isProtoBomFile(filePath: string): boolean;
 export function writeBinary(bomJson: string | Object, binFile: string, specVersion?: string | number): void;
 export function readBinary(binFile: string, asJson: boolean, specVersion?: string | number): any;

package/types/lib/helpers/protobom.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protobom.d.ts","sourceRoot":"","sources":["../../../lib/helpers/protobom.js"],"names":[],"mappings":"AA+IO,yCAHI,MAAM,GACJ,OAAO,CAOnB;AASM,qCAJI,MAAM,GAAG,MAAM,WACf,MAAM,gBACN,MAAM,GAAG,MAAM,QAWzB;AASM,oCAJI,MAAM,UACN,OAAO,gBACP,MAAM,GAAG,MAAM,OAgBzB"}
+{"version":3,"file":"protobom.d.ts","sourceRoot":"","sources":["../../../lib/helpers/protobom.js"],"names":[],"mappings":"AA+DO,uEASN;AAEM,4FAeN;AA0GM,yCAHI,MAAM,GACJ,OAAO,CAOnB;AASM,qCAJI,MAAM,GAAG,MAAM,WACf,MAAM,gBACN,MAAM,GAAG,MAAM,QAWzB;AASM,oCAJI,MAAM,UACN,OAAO,gBACP,MAAM,GAAG,MAAM,OAiBzB"}

package/types/lib/helpers/protobomLoader.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Determine whether a path looks like a CycloneDX protobuf BOM file.
+ *
+ * @param {string} filePath File path
+ * @returns {boolean} true when the path uses a protobuf BOM extension
+ */
+export function isProtoBomPath(filePath: string): boolean;
+/**
+ * Import protobuf BOM helpers and replace optional-dependency loader failures
+ * with actionable command-specific messages.
+ *
+ * @param {string} [commandName="cdxgen"] CLI command name
+ * @param {string} [featureDescription="protobuf support"] Feature being used
+ * @returns {Promise<object>} Loaded protobom module namespace
+ */
+export function importProtobomModule(commandName?: string, featureDescription?: string): Promise<object>;
+//# sourceMappingURL=protobomLoader.d.ts.map

package/types/lib/helpers/protobomLoader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protobomLoader.d.ts","sourceRoot":"","sources":["../../../lib/helpers/protobomLoader.js"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,yCAHW,MAAM,GACJ,OAAO,CAOnB;AAED;;;;;;;GAOG;AACH,mDAJW,MAAM,uBACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAqB3B"}

package/types/lib/server/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../lib/server/server.js"],"names":[],"mappings":"AA4FA;;;;;;GAMG;AACH,gCAJW,MAAM,GAAC,MAAM,GAAC,KAAK,CAAC,MAAM,GAAC,MAAM,CAAC,GAChC,MAAM,GAAC,MAAM,GAAC,OAAO,GAAC,KAAK,CAAC,MAAM,GAAC,MAAM,GAAC,OAAO,CAAC,CAwC9D;AAED;;;;;;;;;;GAUG;AACH,oCALW,MAAM,SACN,MAAM,YACN,MAAM,GACJ,MAAM,CAmBlB;AAED;;;;;;;GAOG;AACH,oCAHW,MAAM,GACJ,MAAM,CAiClB;kCA/KM,qBAAqB;AAgM5B,yDAKC;AAID,0CA8TC"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../lib/server/server.js"],"names":[],"mappings":"AA6FA;;;;;;GAMG;AACH,gCAJW,MAAM,GAAC,MAAM,GAAC,KAAK,CAAC,MAAM,GAAC,MAAM,CAAC,GAChC,MAAM,GAAC,MAAM,GAAC,OAAO,GAAC,KAAK,CAAC,MAAM,GAAC,MAAM,GAAC,OAAO,CAAC,CAwC9D;AAED;;;;;;;;;;GAUG;AACH,oCALW,MAAM,SACN,MAAM,YACN,MAAM,GACJ,MAAM,CAmBlB;AAED;;;;;;;GAOG;AACH,oCAHW,MAAM,GACJ,MAAM,CAiClB;kCA/KM,qBAAqB;AAgM5B,yDAKC;AAID,0CA8TC"}

package/types/lib/stages/postgen/postgen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postgen.d.ts","sourceRoot":"","sources":["../../../../lib/stages/postgen/postgen.js"],"names":[],"mappings":"AAwdA;;;;;;;;GAQG;AACH,uCANW,MAAM,WACN,MAAM,aACN,MAAM,GAEJ,MAAM,CAyClB;AAwCD;;;;;;;GAOG;AACH,uCALW,MAAM,WACN,MAAM,GAEJ,MAAM,CA8HlB;AAED;;;;;;;GAOG;AACH,wCALW,MAAM,WACN,MAAM,GAEJ,MAAM,CAqClB;AAkED;;;;;;;GAOG;AACH,mCALW,MAAM,WACN,MAAM,GAEJ,MAAM,CA8LlB;AAUD;;GAEG;AACH,gDAOC;AAED;;;;;;GAMG;AACH,iCAFa,IAAI,CAShB;AAMD;;;;;;;GAOG;AACH,kCALW,MAAM,WACN,MAAM,GAEJ,MAAM,CAyHlB"}
+{"version":3,"file":"postgen.d.ts","sourceRoot":"","sources":["../../../../lib/stages/postgen/postgen.js"],"names":[],"mappings":"AAuqBA;;;;;;;;GAQG;AACH,uCANW,MAAM,WACN,MAAM,aACN,MAAM,GAEJ,MAAM,CAyClB;AAwCD;;;;;;;GAOG;AACH,uCALW,MAAM,WACN,MAAM,GAEJ,MAAM,CA8HlB;AAED;;;;;;;GAOG;AACH,wCALW,MAAM,WACN,MAAM,GAEJ,MAAM,CAqClB;AAkED;;;;;;;GAOG;AACH,mCALW,MAAM,WACN,MAAM,GAEJ,MAAM,CA8LlB;AAUD;;GAEG;AACH,gDAOC;AAED;;;;;;GAMG;AACH,iCAFa,IAAI,CAShB;AAMD;;;;;;;GAOG;AACH,kCALW,MAAM,WACN,MAAM,GAEJ,MAAM,CAyHlB"}

package/types/lib/stages/postgen/ruleEngine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ruleEngine.d.ts","sourceRoot":"","sources":["../../../../lib/stages/postgen/ruleEngine.js"],"names":[],"mappings":"AAgVA;;;;GAIG;AACH,oCAHW,MAAM,GACJ,OAAO,OAAO,CAuF1B;AAiCD;;;;;GAKG;AACH,mCAJW,MAAM,WACN,MAAM,GACJ,OAAO,OAAO,CAuF1B;AAED;;GAEG;AACH,wEAYC"}
+{"version":3,"file":"ruleEngine.d.ts","sourceRoot":"","sources":["../../../../lib/stages/postgen/ruleEngine.js"],"names":[],"mappings":"AA2XA;;;;GAIG;AACH,oCAHW,MAAM,GACJ,OAAO,OAAO,CAuF1B;AAiCD;;;;;GAKG;AACH,mCAJW,MAAM,WACN,MAAM,GACJ,OAAO,OAAO,CAuF1B;AAED;;GAEG;AACH,wEAYC"}

package/types/lib/third-party/arborist/lib/node.d.ts

@@ -1,5 +1,6 @@
 export default Node;
 declare class Node {
+    [x: number]: () => any;
     constructor(options: any);
     queryContext: {};
     errors: any[];
@@ -87,8 +88,30 @@ declare class Node {
     resolve(name: any): any;
     inNodeModules(): any;
     toJSON(): any;
+    [_explain](edge: any, seen: any): any;
+    [_loadDeps](): void;
+    [_delistFromMeta](): void;
+    [_changePath](newPath: any): void;
+    [_refreshLocation](): void;
+    [_reloadNamedEdges](name: any, rootLoc?: any): void;
+    [_package]: any;
+    [_parent]: any;
+    [_fsParent]: any;
+    [_explanation]: any;
+    [_target]: any;
     #private;
 }
 import CaseInsensitiveMap from "./case-insensitive-map.js";
 import Inventory from "./inventory.js";
+declare const _explain: unique symbol;
+declare const _loadDeps: unique symbol;
+declare const _delistFromMeta: unique symbol;
+declare const _changePath: unique symbol;
+declare const _refreshLocation: unique symbol;
+declare const _reloadNamedEdges: unique symbol;
+declare const _package: unique symbol;
+declare const _parent: unique symbol;
+declare const _fsParent: unique symbol;
+declare const _explanation: unique symbol;
+declare const _target: unique symbol;
 //# sourceMappingURL=node.d.ts.map

package/types/lib/third-party/arborist/lib/node.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/node.js"],"names":[],"mappings":";AAiEA;IAME,0BAmLC;IA/IC,iBAAsB;IAKtB,cAAkC;IAClC,eAA0B;IAG1B,qBAAsC;IAOtC,UAC0E;IAG1E,UAAuC;IAIvC,cAA4D;IAC5D,cAAgC;IAqBhC,eAAoD;IACpD,mBAAiE;IACjE,kBAAgC;IAChC,oBAAoC;IACpC,6BAAwC;IACxC,qBAA2B;IAC3B,qBAAgC;IAChC,eAAqB;IACrB,kBAAqC;IAUnC,SAAc;IACd,cAAwB;IACxB,iBAA8B;IAC9B,UAAgB;IAChB,gBAA4B;IAC5B,eAAkB;IAYpB,kBAAgC;IAChC,kBAAwB;IACxB,6BAAwC;IAMtC,eAA0B;IA4D9B,oBAKC;IATD,gBAEC;IA28BD,wBAgDC;IA/DD,kBAGC;IA3TD,4BAgFC;IArFD,oBAGC;IAhVD,oBA0QC;IAED,gBAEC;IAvjBD,kBAKC;IAGD,qBAEC;IAMD,gCAYC;IAhBD,sBAEC;IAgBD,oBAUC;IAED,gCAIC;IAED,mBAEC;IAED,uBAEC;IAED,oBASC;IAED,0BAyBC;IAMD,sBA0BC;IA9BD,mBAEC;IAgCD,wCAKC;IA4DD,mCAOC;IAED,8BAOC;IAED,8BAkCC;IAED,wBAEC;IAKD,2BAGC;IAED,uBAOC;IAED,sBAEC;IAED,6BAKC;IAED,oCAUC;IAED,2CAIC;IA+aD,qDAiDC;IAED,6CAEC;IAKD,sEAiDC;IAED,+BAiBC;IAED,wBA0CC;IAKD,6BAEC;IAED,yBAkCC;IAED,wBAIC;IAmIC,cAAmB;IAQrB,4BAgBC;IAED,4BAKC;IAED,qCAQC;IAED,6DA2BC;IASD,uEA0BC;IAED,8BAKC;IAED,2BAWC;IAqBD,sBAEC;IAMD,qBAMC;IAVD,mBAEC;IAUD,iBAKC;IAED,iBAEC;IAED,eAKC;IAED,uBAEC;IAED,iBAKC;IAED,yBAEC;IAED,wBAiBC;IAED,qBASC;IAED,cAEC;;CAKF;+BA3/C8B,2BAA2B;sBAKpC,gBAAgB"}
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/node.js"],"names":[],"mappings":";AAiEA;;IAME,0BAmLC;IA/IC,iBAAsB;IAKtB,cAAkC;IAClC,eAA0B;IAG1B,qBAAsC;IAOtC,UAC0E;IAG1E,UAAuC;IAIvC,cAA4D;IAC5D,cAAgC;IAqBhC,eAAoD;IACpD,mBAAiE;IACjE,kBAAgC;IAChC,oBAAoC;IACpC,6BAAwC;IACxC,qBAA2B;IAC3B,qBAAgC;IAChC,eAAqB;IACrB,kBAAqC;IAUnC,SAAc;IACd,cAAwB;IACxB,iBAA8B;IAC9B,UAAgB;IAChB,gBAA4B;IAC5B,eAAkB;IAYpB,kBAAgC;IAChC,kBAAwB;IACxB,6BAAwC;IAMtC,eAA0B;IA4D9B,oBAKC;IATD,gBAEC;IA28BD,wBAgDC;IA/DD,kBAGC;IA3TD,4BAgFC;IArFD,oBAGC;IAhVD,oBA0QC;IAED,gBAEC;IAvjBD,kBAKC;IAGD,qBAEC;IAMD,gCAYC;IAhBD,sBAEC;IAgBD,oBAUC;IAED,gCAIC;IAED,mBAEC;IAED,uBAEC;IAED,oBASC;IAED,0BAyBC;IAMD,sBA0BC;IA9BD,mBAEC;IAgCD,wCAKC;IA4DD,mCAOC;IAED,8BAOC;IAED,8BAkCC;IAED,wBAEC;IAKD,2BAGC;IAED,uBAOC;IAED,sBAEC;IAED,6BAKC;IAED,oCAUC;IAED,2CAIC;IA+aD,qDAiDC;IAED,6CAEC;IAKD,sEAiDC;IAED,+BAiBC;IAED,wBA0CC;IAKD,6BAEC;IAED,yBAkCC;IAED,wBAIC;IAmIC,cAAmB;IAQrB,4BAgBC;IAED,4BAKC;IAED,qCAQC;IAED,6DA2BC;IASD,uEA0BC;IAED,8BAKC;IAED,2BAWC;IAqBD,sBAEC;IAMD,qBAMC;IAVD,mBAEC;IAUD,iBAKC;IAED,iBAEC;IAED,eAKC;IAED,uBAEC;IAED,iBAKC;IAED,yBAEC;IAED,wBAiBC;IAED,qBASC;IAED,cAEC;IAhpCD,sCAwDC;IAmYD,oBAuCC;IA6YD,0BAkBC;IAGD,kCAiCC;IAKD,2BASC;IAyHD,oDAiBC;IAzwCC,gBAA0D;IA6B1D,eAAoB;IAEpB,iBAAsB;IAkJtB,oBAAyB;IAkOvB,eAAoB;;CA88BzB;+BA3/C8B,2BAA2B;sBAKpC,gBAAgB;AAiBtC,sCAAoC;AALpC,uCAAwD;AAIxD,6CAAsD;AAFtD,yCAA8C;AAD9C,8CAAwD;AAHxD,+CAAsD;AAJtD,sCAAoC;AACpC,qCAAkC;AAElC,uCAAsC;AAStC,0CAA4C;AAV5C,qCAAsC"}

package/types/lib/validator/bomValidator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bomValidator.d.ts","sourceRoot":"","sources":["../../../lib/validator/bomValidator.js"],"names":[],"mappings":"AA2nBA;;;;GAIG;AACH,uCAFW,MAAM,WAiIhB;AAlsBM,qCAJI,MAAM,WAiEhB;AAQM,uCAHI,MAAM,GAAC,MAAM,GACX,OAAO,CAyLnB;AAOM,0CAFI,MAAM,WAmEhB;AAOM,uCAFI,MAAM,WA6GhB;AAgDM,sCAFI,MAAM,WAwFhB"}
+{"version":3,"file":"bomValidator.d.ts","sourceRoot":"","sources":["../../../lib/validator/bomValidator.js"],"names":[],"mappings":"AA4qBA;;;;GAIG;AACH,uCAFW,MAAM,WAiIhB;AAjvBM,qCAJI,MAAM,WAgHhB;AAQM,uCAHI,MAAM,GAAC,MAAM,GACX,OAAO,CAyLnB;AAOM,0CAFI,MAAM,WAmEhB;AAOM,uCAFI,MAAM,WA6GhB;AAgDM,sCAFI,MAAM,WAwFhB"}

package/types/lib/validator/complianceRules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"complianceRules.d.ts","sourceRoot":"","sources":["../../../lib/validator/complianceRules.js"],"names":[],"mappings":"AAsmDA;;;;GAIG;AACH,yCAFa,KAAK,CAAC,MAAM,CAAC,CAIzB;AAED;;;;GAIG;AACH,gCAFa,KAAK,CAAC,MAAM,CAAC,CAIzB;AAED;;;;GAIG;AACH,+BAFa,KAAK,CAAC,MAAM,CAAC,CAIzB;;;;;;;;AAzlDD;;;;;;GAMG;AACH,0CAHW,MAAM,GACJ,MAAM,GAAG,IAAI,CAoBzB;AAsBD;;;;;;;GAOG;AACH,8CAHW,MAAM,GACJ,KAAK,CAAC,MAAM,CAAC,CAezB;AAuCD;;;;;;;;;GASG;AACH,qCAHW,MAAM,GACJ,OAAO,CAqCnB;AAxED;;;;;;GAMG;AACH,gDAHW,MAAM,GACJ,GAAG,CAAC,MAAM,CAAC,CAoBvB;AAnCD;;;;;GAKG;AACH,iCAHW,MAAM,GACJ,MAAM,CAIlB"}
+{"version":3,"file":"complianceRules.d.ts","sourceRoot":"","sources":["../../../lib/validator/complianceRules.js"],"names":[],"mappings":"AAwmDA;;;;GAIG;AACH,yCAFa,KAAK,CAAC,MAAM,CAAC,CAIzB;AAED;;;;GAIG;AACH,gCAFa,KAAK,CAAC,MAAM,CAAC,CAIzB;AAED;;;;GAIG;AACH,+BAFa,KAAK,CAAC,MAAM,CAAC,CAIzB;;;;;;;;AAzlDD;;;;;;GAMG;AACH,0CAHW,MAAM,GACJ,MAAM,GAAG,IAAI,CAoBzB;AAsBD;;;;;;;GAOG;AACH,8CAHW,MAAM,GACJ,KAAK,CAAC,MAAM,CAAC,CAezB;AAuCD;;;;;;;;;GASG;AACH,qCAHW,MAAM,GACJ,OAAO,CAqCnB;AAxED;;;;;;GAMG;AACH,gDAHW,MAAM,GACJ,GAAG,CAAC,MAAM,CAAC,CAoBvB;AAnCD;;;;;GAKG;AACH,iCAHW,MAAM,GACJ,MAAM,CAIlB"}