@dependabit/detector 0.1.1

package/CHANGELOG.md

@@ -0,0 +1,10 @@
+# @dependabit/detector
+
+## 0.1.1
+
+### Patch Changes
+
+- Publish release setup updates and action metadata.
+- Updated dependencies
+  - @dependabit/github-client@0.1.1
+  - @dependabit/manifest@0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024-present Pradeep Mouli
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,32 @@
+# @dependabit/detector
+
+LLM-based dependency detection for external resources.
+
+## Overview
+
+This package provides intelligent dependency detection using Large Language Models (LLMs) to analyze codebases and identify external dependencies, APIs, and resources.
+
+## Features
+
+- LLM-powered dependency detection
+- README parser for extracting references
+- Code comment parser for inline documentation
+- Package file parser for standard dependency files
+
+## Installation
+
+```bash
+pnpm add @dependabit/detector
+```
+
+## Usage
+
+```typescript
+import { detect } from '@dependabit/detector';
+
+// Coming soon in Phase 3
+```
+
+## License
+
+MIT

package/dist/detector.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Detector Orchestrator
+ * Coordinates content parsers and LLM analysis to detect external dependencies
+ */
+import type { LLMProvider } from './llm/client.js';
+import type { DependencyEntry } from '@dependabit/manifest';
+export interface DetectorOptions {
+    repoPath: string;
+    llmProvider: LLMProvider;
+    ignorePatterns?: string[];
+}
+export interface DetectionResult {
+    dependencies: DependencyEntry[];
+    statistics: {
+        filesScanned: number;
+        urlsFound: number;
+        llmCalls: number;
+        totalTokens: number;
+        totalLatencyMs: number;
+    };
+}
+/**
+ * Main detector class
+ */
+export declare class Detector {
+    private options;
+    constructor(options: DetectorOptions);
+    /**
+     * Detect all external dependencies in the repository
+     *
+     * Implementation follows a hybrid approach:
+     * 1. Programmatic parsing of repository files (README, code comments, package files)
+     * 2. LLM analysis only for documents not fully parsed in step 1 (future enhancement)
+     * 3. Programmatic type categorization based on URL patterns and context
+     * 4. LLM fallback for uncategorized dependencies
+     * 5. Programmatic access method determination based on URL patterns
+     * 6. LLM fallback for access methods that can't be determined (future enhancement)
+     * 7. Manifest entry creation with references and versioning
+     */
+    detectDependencies(): Promise<DetectionResult>;
+    private addReference;
+    /**
+     * Programmatically determine access method based on URL patterns
+     * Returns null if cannot be determined programmatically
+     */
+    private determineAccessMethod;
+    /**
+     * Programmatically determine dependency type based on URL patterns and context
+     * Returns null if cannot be determined programmatically
+     */
+    private determineDependencyType;
+    private extractName;
+    private parsePackageFile;
+    private findFiles;
+    private findPackageFiles;
+    private findSourceFiles;
+    private shouldIgnore;
+    /**
+     * Analyze only specific files for dependencies (for incremental updates)
+     * This is more efficient than full repository scan when only few files changed
+     */
+    analyzeFiles(filePaths: string[]): Promise<DetectionResult>;
+}
+//# sourceMappingURL=detector.d.ts.map

package/dist/detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector.d.ts","sourceRoot":"","sources":["../src/detector.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAUnD,OAAO,KAAK,EACV,eAAe,EAIhB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,WAAW,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,UAAU,EAAE;QACV,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAiBD;;GAEG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,OAAO,CAA4B;IAE3C,YAAY,OAAO,EAAE,eAAe,EAKnC;IAED;;;;;;;;;;;OAWG;IACG,kBAAkB,IAAI,OAAO,CAAC,eAAe,CAAC,CA0QnD;IAED,OAAO,CAAC,YAAY;IAgBpB;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IA0B7B;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IA2D/B,OAAO,CAAC,WAAW;IAiBnB,OAAO,CAAC,gBAAgB;YAsBV,SAAS;YA2BT,gBAAgB;YAIhB,eAAe;IAI7B,OAAO,CAAC,YAAY;IAIpB;;;OAGG;IACG,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CA2MhE;CACF"}