@dxworks/depinder 0.2.0 → 0.2.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cache/json-cache.js.map +1 -1
- package/dist/cache/mongo-cache.js +20 -11
- package/dist/cache/mongo-cache.js.map +1 -1
- package/dist/commands/analyse.js +28 -27
- package/dist/commands/analyse.js.map +1 -1
- package/dist/commands/cache.js +6 -6
- package/dist/commands/cache.js.map +1 -1
- package/dist/commands/extractFrameworkVersion.js +28 -22
- package/dist/commands/extractFrameworkVersion.js.map +1 -1
- package/dist/commands/transformBlackDuckReports.d.ts +6 -0
- package/dist/commands/transformBlackDuckReports.js +33 -21
- package/dist/commands/transformBlackDuckReports.js.map +1 -1
- package/dist/commands/update.js +3 -4
- package/dist/commands/update.js.map +1 -1
- package/dist/depinder.js +1 -1
- package/dist/depinder.js.map +1 -1
- package/dist/extension-points/registrar.js +7 -8
- package/dist/extension-points/registrar.js.map +1 -1
- package/dist/info/php/parser.js +21 -12
- package/dist/info/php/parser.js.map +1 -1
- package/dist/plugins/dotnet/index.js +8 -16
- package/dist/plugins/dotnet/index.js.map +1 -1
- package/dist/plugins/index.js +3 -3
- package/dist/plugins/index.js.map +1 -1
- package/dist/plugins/java/index.js +15 -23
- package/dist/plugins/java/index.js.map +1 -1
- package/dist/plugins/java/parsers/maven.js +2 -4
- package/dist/plugins/java/parsers/maven.js.map +1 -1
- package/dist/plugins/javascript/index.js +17 -18
- package/dist/plugins/javascript/index.js.map +1 -1
- package/dist/plugins/php/index.js +8 -11
- package/dist/plugins/php/index.js.map +1 -1
- package/dist/plugins/php/php-interfaces.js +4 -6
- package/dist/plugins/php/php-interfaces.js.map +1 -1
- package/dist/plugins/python/index.js +33 -20
- package/dist/plugins/python/index.js.map +1 -1
- package/dist/plugins/ruby/index.js +21 -12
- package/dist/plugins/ruby/index.js.map +1 -1
- package/dist/utils/npm.d.ts +0 -2
- package/dist/utils/projectMapping.js +20 -11
- package/dist/utils/projectMapping.js.map +1 -1
- package/dist/utils/utils.js +6 -6
- package/dist/utils/utils.js.map +1 -1
- package/dist/utils/vulnerabilities.js +54 -54
- package/dist/utils/vulnerabilities.js.map +1 -1
- package/package.json +45 -46
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"projectMapping.js","sourceRoot":"","sources":["../../src/utils/projectMapping.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"projectMapping.js","sourceRoot":"","sources":["../../src/utils/projectMapping.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsOA,gDAUC;AASD,8CAuDC;AASD,gDAmBC;AA5UD;;GAEG;AACH,uCAAyB;AACzB,2CAA6B;AAe7B,MAAM,cAAc,GAAG;IACrB,OAAO;IACP,MAAM;IACN,cAAc;IACd,MAAM;IACN,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,aAAa;IACb,OAAO;IACP,KAAK;CACN,CAAC;AAEF,oCAAoC;AACpC,MAAM,gBAAgB,GAAG,0DAA0D,CAAC;AAWpF;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,OAAe;IACvC,OAAO,yCAAyC,CAAC,IAAI,CAAC,OAAO,CAAC;QACvD,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;QAChC,OAAO,CAAC,WAAW,EAAE,KAAK,aAAa,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;QACzC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACxC,OAAO,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,OAAe;IAC3C,kEAAkE;IAClE,OAAO,yCAAyC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,YAAsB;IACjD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,SAAS,EAAE,CAAC;QACd,CAAC;aAAM,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YAC7C,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;gBAClB,4CAA4C;gBAC5C,SAAS,EAAE,CAAC;YACd,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,SAAiB;IACxC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAEnD,cAAc,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAEnD,IAAI,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,cAAc,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,cAAc,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC,EAAE,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,IAAY;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC7C,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,cAAsB;IAC9C,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;QAEvD,MAAM,YAAY,GAAG,qBAAqB,CAAC,cAAc,CAAC,CAAC;QAC3D,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE3C,IAAI,iBAAiB,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAEvD,IAAI,iBAAiB,KAAK,CAAC,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,mCAAmC,cAAc,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAE3D,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,CAAC,eAAe,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAChG,eAAe,CAAC,GAAG,EAAE,CAAC,CAAC,6BAA6B;QACtD,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,CAAC,eAAe,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,eAAe,CAAC,GAAG,EAAE,CAAC,CAAC,iDAAiD;QAC1E,CAAC;QAED,IAAI,UAAU,GAAG,sBAAsB,CAAC,eAAe,CAAC,CAAC;QAEzD,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;YACtB,eAAe,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,eAAe,CAAC,CAAC;QAE9D,OAAO,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,uBAAuB,KAAK,EAAE,CAAC,CAAC;QAC9C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,eAAyB;IACvD,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC;IAEpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,IAAI,gBAAgB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,UAAU,GAAG,CAAC,CAAC;YACf,MAAM,CAAC,uCAAuC;QAChD,CAAC;aAAM,IAAI,oBAAoB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,UAAU,GAAG,CAAC,CAAC;YACf,kEAAkE;QACpE,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAkB;IAC9C,IAAI,iBAAiB,GAAG,CAAC,CAAC,CAAC;IAE3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/C,IAAI,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,YAAY,KAAK,SAAS,CAAC,EAAE,CAAC;YACjE,iBAAiB,GAAG,CAAC,CAAC;YACtB,MAAM;QACR,CAAC;IACH,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,QAAuB;IACxD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE/C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YAChD,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,iBAAiB,CAAC,WAAmB,EAAE,QAAgB,EAAE,YAA2B;IAClG,IAAI,CAAC,WAAW,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;IACrE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAClD,MAAM,cAAc,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAE/C,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO;gBACL,WAAW;gBACX,YAAY,EAAE,WAAW;gBACzB,iBAAiB,EAAE,IAAI;aACxB,CAAC;QACJ,CAAC;QAED,IAAI,YAAY,IAAI,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAClD,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAW,CAAC;YAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACvD,MAAM,YAAY,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;YAEnD,OAAO;gBACL,WAAW;gBACX,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;gBAC5C,iBAAiB,EAAE,cAAc;aAClC,CAAC;QACJ,CAAC;QAED,qCAAqC;QACrC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,uBAAuB,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5D,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;YACtE,MAAM,cAAc,GAAG,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;YAEvD,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO;oBACL,WAAW;oBACX,YAAY,EAAE,uBAAuB;oBACrC,iBAAiB,EAAE,KAAK;iBACzB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,kDAAkD;QAClD,OAAO;YACL,WAAW;YACX,YAAY,EAAE,EAAE;YAChB,iBAAiB,EAAE,KAAK;SACzB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;QACxD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;IACrE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,cAAsB,EAAE,UAAkB,EAAE,QAAiB,EAAE,YAA2B;IAC3H,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;IACzE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAErD,0CAA0C;QAC1C,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,iBAAiB,CAAC,WAAW,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QAChE,CAAC;QAED,2DAA2D;QAC3D,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC;IACzE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,KAAK,EAAE,CAAC,CAAC;QACzD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}
|
package/dist/utils/utils.js
CHANGED
|
@@ -3,7 +3,12 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
|
3
3
|
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
4
|
};
|
|
5
5
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
-
exports.
|
|
6
|
+
exports.depinderTempFolder = exports.depinderFolder = exports.npmExePath = exports._package = void 0;
|
|
7
|
+
exports.getAssetFile = getAssetFile;
|
|
8
|
+
exports.getHomeDir = getHomeDir;
|
|
9
|
+
exports.walkDir = walkDir;
|
|
10
|
+
exports.delay = delay;
|
|
11
|
+
exports.getPackageSemver = getPackageSemver;
|
|
7
12
|
const path_1 = __importDefault(require("path"));
|
|
8
13
|
const os_1 = require("os");
|
|
9
14
|
const fs_1 = __importDefault(require("fs"));
|
|
@@ -14,7 +19,6 @@ exports._package = require('../../package.json');
|
|
|
14
19
|
function getAssetFile(assetName) {
|
|
15
20
|
return path_1.default.join(__dirname, '..', 'assets', assetName);
|
|
16
21
|
}
|
|
17
|
-
exports.getAssetFile = getAssetFile;
|
|
18
22
|
exports.npmExePath = getBin('npm');
|
|
19
23
|
function getBin(exe) {
|
|
20
24
|
return path_1.default.resolve(__dirname, '..', '..', 'node_modules', '.bin', exe);
|
|
@@ -30,17 +34,14 @@ function getHomeDir() {
|
|
|
30
34
|
}
|
|
31
35
|
return exports.depinderFolder;
|
|
32
36
|
}
|
|
33
|
-
exports.getHomeDir = getHomeDir;
|
|
34
37
|
function walkDir(dir) {
|
|
35
38
|
const allChildren = fs_1.default.readdirSync(dir);
|
|
36
39
|
const files = allChildren.map(it => path_1.default.resolve(dir, it)).filter(it => fs_1.default.lstatSync(it).isFile());
|
|
37
40
|
return [...files, ...allChildren.map(it => path_1.default.resolve(dir, it)).filter(it => fs_1.default.lstatSync(it).isDirectory()).flatMap(it => walkDir(path_1.default.resolve(dir, it)))];
|
|
38
41
|
}
|
|
39
|
-
exports.walkDir = walkDir;
|
|
40
42
|
function delay(ms) {
|
|
41
43
|
return new Promise(resolve => setTimeout(resolve, ms));
|
|
42
44
|
}
|
|
43
|
-
exports.delay = delay;
|
|
44
45
|
function getPackageSemver(version) {
|
|
45
46
|
try {
|
|
46
47
|
return new semver_1.SemVer(version);
|
|
@@ -54,5 +55,4 @@ function getPackageSemver(version) {
|
|
|
54
55
|
}
|
|
55
56
|
}
|
|
56
57
|
}
|
|
57
|
-
exports.getPackageSemver = getPackageSemver;
|
|
58
58
|
//# sourceMappingURL=utils.js.map
|
package/dist/utils/utils.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/utils/utils.ts"],"names":[],"mappings":";;;;;;
|
|
1
|
+
{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/utils/utils.ts"],"names":[],"mappings":";;;;;;AAUA,oCAEC;AAYD,gCAQC;AAED,0BAIC;AAED,sBAEC;AAED,4CAWC;AAvDD,gDAAuB;AACvB,2BAA0B;AAC1B,4CAAmB;AACnB,mCAA6B;AAC7B,6DAAmC;AAEnC,8DAA8D;AACjD,QAAA,QAAQ,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;AAGrD,SAAgB,YAAY,CAAC,SAAiB;IAC1C,OAAO,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;AAC1D,CAAC;AAEY,QAAA,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;AAEvC,SAAS,MAAM,CAAC,GAAW;IACvB,OAAO,cAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;AAC3E,CAAC;AAGY,QAAA,cAAc,GAAG,cAAI,CAAC,IAAI,CAAC,IAAA,YAAO,GAAE,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;AACzD,QAAA,kBAAkB,GAAG,cAAI,CAAC,IAAI,CAAC,sBAAc,EAAE,MAAM,CAAC,CAAA;AAEnE,SAAgB,UAAU;IACtB,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,sBAAc,CAAC,EAAE,CAAC;QACjC,YAAE,CAAC,SAAS,CAAC,sBAAc,CAAC,CAAA;IAChC,CAAC;IACD,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,0BAAkB,CAAC,EAAE,CAAC;QACrC,YAAE,CAAC,SAAS,CAAC,0BAAkB,CAAC,CAAA;IACpC,CAAC;IACD,OAAO,sBAAc,CAAA;AACzB,CAAC;AAED,SAAgB,OAAO,CAAC,GAAW;IAC/B,MAAM,WAAW,GAAG,YAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACvC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,cAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,YAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IAClG,OAAO,CAAC,GAAG,KAAK,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,cAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,YAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,cAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;AACjK,CAAC;AAED,SAAgB,KAAK,CAAC,EAAU;IAC5B,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;AAC1D,CAAC;AAED,SAAgB,gBAAgB,CAAC,OAAe;IAC5C,IAAI,CAAC;QACD,OAAO,IAAI,eAAM,CAAC,OAAO,CAAC,CAAA;IAC9B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,IAAI,CAAC;YACD,OAAO,IAAI,eAAM,CAAC,OAAO,EAAE,EAAC,KAAK,EAAE,IAAI,EAAC,CAAC,CAAA;QAE7C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,OAAO,iBAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACjC,CAAC;IACL,CAAC;AACL,CAAC"}
|
|
@@ -3,62 +3,62 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
|
3
3
|
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
4
|
};
|
|
5
5
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
-
exports.
|
|
7
|
-
|
|
6
|
+
exports.getVulnerabilitiesFromGithub = getVulnerabilitiesFromGithub;
|
|
7
|
+
exports.getVulnerabilitiesFromSonatype = getVulnerabilitiesFromSonatype;
|
|
8
8
|
const axios_1 = __importDefault(require("axios"));
|
|
9
9
|
async function getVulnerabilitiesFromGithub(ecosystem, packageName) {
|
|
10
|
-
const
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
10
|
+
const query = `
|
|
11
|
+
query securityVulnerabilities($ecosystem: SecurityAdvisoryEcosystem, $package: String!){
|
|
12
|
+
securityVulnerabilities(first: 100, ecosystem: $ecosystem package: $package) {
|
|
13
|
+
pageInfo {
|
|
14
|
+
endCursor
|
|
15
|
+
hasNextPage
|
|
16
|
+
}
|
|
17
|
+
nodes {
|
|
18
|
+
firstPatchedVersion {
|
|
19
|
+
identifier
|
|
20
|
+
}
|
|
21
|
+
package {
|
|
22
|
+
name
|
|
23
|
+
ecosystem
|
|
24
|
+
}
|
|
25
|
+
severity
|
|
26
|
+
updatedAt
|
|
27
|
+
vulnerableVersionRange
|
|
28
|
+
advisory {
|
|
29
|
+
identifiers {
|
|
30
|
+
value
|
|
31
|
+
type
|
|
21
32
|
}
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
updatedAt
|
|
32
|
-
vulnerableVersionRange
|
|
33
|
-
advisory {
|
|
34
|
-
identifiers {
|
|
35
|
-
value
|
|
36
|
-
type
|
|
37
|
-
}
|
|
38
|
-
databaseId
|
|
39
|
-
description
|
|
40
|
-
ghsaId
|
|
41
|
-
id
|
|
42
|
-
origin
|
|
43
|
-
permalink
|
|
44
|
-
publishedAt
|
|
45
|
-
references {
|
|
46
|
-
url
|
|
47
|
-
}
|
|
48
|
-
severity
|
|
49
|
-
summary
|
|
50
|
-
updatedAt
|
|
51
|
-
withdrawnAt
|
|
52
|
-
}
|
|
33
|
+
databaseId
|
|
34
|
+
description
|
|
35
|
+
ghsaId
|
|
36
|
+
id
|
|
37
|
+
origin
|
|
38
|
+
permalink
|
|
39
|
+
publishedAt
|
|
40
|
+
references {
|
|
41
|
+
url
|
|
53
42
|
}
|
|
43
|
+
severity
|
|
44
|
+
summary
|
|
45
|
+
updatedAt
|
|
46
|
+
withdrawnAt
|
|
54
47
|
}
|
|
55
48
|
}
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
49
|
+
}
|
|
50
|
+
}
|
|
51
|
+
`.trim();
|
|
52
|
+
const { data: response } = await axios_1.default.post('https://api.github.com/graphql', {
|
|
53
|
+
query,
|
|
54
|
+
variables: { ecosystem, package: packageName }
|
|
55
|
+
}, {
|
|
56
|
+
headers: {
|
|
57
|
+
Authorization: `Bearer ${process.env.GH_TOKEN}`,
|
|
58
|
+
'Content-Type': 'application/json',
|
|
59
|
+
}
|
|
59
60
|
});
|
|
60
|
-
return response.securityVulnerabilities.nodes.map((it) => {
|
|
61
|
-
var _a;
|
|
61
|
+
return response.data.securityVulnerabilities.nodes.map((it) => {
|
|
62
62
|
return {
|
|
63
63
|
severity: it.severity,
|
|
64
64
|
updatedAt: it.updatedAt,
|
|
@@ -69,14 +69,14 @@ async function getVulnerabilitiesFromGithub(ecosystem, packageName) {
|
|
|
69
69
|
identifiers: it.advisory.identifiers,
|
|
70
70
|
references: it.advisory.references,
|
|
71
71
|
vulnerableRange: it.vulnerableVersionRange,
|
|
72
|
-
firstPatchedVersion:
|
|
72
|
+
firstPatchedVersion: it.firstPatchedVersion?.identifiers,
|
|
73
73
|
};
|
|
74
74
|
});
|
|
75
75
|
}
|
|
76
|
-
exports.getVulnerabilitiesFromGithub = getVulnerabilitiesFromGithub;
|
|
77
76
|
async function getVulnerabilitiesFromSonatype(purls) {
|
|
78
77
|
const { data } = await axios_1.default.post('https://ossindex.sonatype.org/api/v3/component-report', { coordinates: purls });
|
|
79
|
-
return data.reduce((a, v) => (
|
|
78
|
+
return data.reduce((a, v) => ({
|
|
79
|
+
...a, [v.coordinates]: v.vulnerabilities.map((it) => ({
|
|
80
80
|
severity: mapSeverity(it.cvssScore),
|
|
81
81
|
score: it.cvssScore,
|
|
82
82
|
description: it.description,
|
|
@@ -84,9 +84,9 @@ async function getVulnerabilitiesFromSonatype(purls) {
|
|
|
84
84
|
identifiers: [{ value: it.cve, type: 'CVE' }],
|
|
85
85
|
permalink: it.reference,
|
|
86
86
|
references: [it.reference, ...it.externalReferences],
|
|
87
|
-
}))
|
|
87
|
+
})),
|
|
88
|
+
}), {});
|
|
88
89
|
}
|
|
89
|
-
exports.getVulnerabilitiesFromSonatype = getVulnerabilitiesFromSonatype;
|
|
90
90
|
function mapSeverity(cvssScore) {
|
|
91
91
|
if (cvssScore < 1)
|
|
92
92
|
return 'NONE';
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"vulnerabilities.js","sourceRoot":"","sources":["../../src/utils/vulnerabilities.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"vulnerabilities.js","sourceRoot":"","sources":["../../src/utils/vulnerabilities.ts"],"names":[],"mappings":";;;;;AAGA,oEAyEC;AACD,wEAcC;AA3FD,kDAAyB;AAGlB,KAAK,UAAU,4BAA4B,CAAC,SAAiB,EAAE,WAAmB;IACrF,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAyCb,CAAC,IAAI,EAAE,CAAA;IAER,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,eAAK,CAAC,IAAI,CACvC,gCAAgC,EAChC;QACI,KAAK;QACL,SAAS,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE;KACjD,EACD;QACI,OAAO,EAAE;YACL,aAAa,EAAE,UAAU,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE;YAC/C,cAAc,EAAE,kBAAkB;SACrC;KACJ,CACJ,CAAA;IAED,OAAO,QAAQ,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAO,EAAE,EAAE;QAC/D,OAAO;YACH,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC9C,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO;YAC5B,WAAW,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW;YACpC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS;YAChC,WAAW,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW;YACpC,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU;YAClC,eAAe,EAAE,EAAE,CAAC,sBAAsB;YAC1C,mBAAmB,EAAE,EAAE,CAAC,mBAAmB,EAAE,WAAW;SAC1C,CAAA;IACtB,CAAC,CAAC,CAAA;AAEN,CAAC;AACM,KAAK,UAAU,8BAA8B,CAAC,KAAe;IAChE,MAAM,EAAC,IAAI,EAAC,GAAG,MAAM,eAAK,CAAC,IAAI,CAAC,uDAAuD,EAAE,EAAC,WAAW,EAAE,KAAK,EAAC,CAAC,CAAA;IAE9G,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,CAAM,EAAE,EAAE,CAAC,CAAC;QACpC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,CAAC;YACvD,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC,SAAS,CAAC;YACnC,KAAK,EAAE,EAAE,CAAC,SAAS;YACnB,WAAW,EAAE,EAAE,CAAC,WAAW;YAC3B,OAAO,EAAE,EAAE,CAAC,KAAK;YACjB,WAAW,EAAE,CAAC,EAAC,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAC,CAAC;YAC3C,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,UAAU,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC;SACrC,CAAA,CAAC;KACvB,CAAC,EAAE,EAAE,CAAC,CAAA;AACX,CAAC;AAGD,SAAS,WAAW,CAAC,SAAc;IAC/B,IAAG,SAAS,GAAG,CAAC;QACZ,OAAO,MAAM,CAAA;IACjB,IAAG,SAAS,GAAG,CAAC;QACZ,OAAO,KAAK,CAAA;IAChB,IAAG,SAAS,GAAG,CAAC;QACZ,OAAO,QAAQ,CAAA;IACnB,IAAG,SAAS,GAAG,CAAC;QACZ,OAAO,MAAM,CAAA;IACjB,IAAG,SAAS,IAAG,EAAE;QACb,OAAO,UAAU,CAAA;IAErB,OAAO,MAAM,CAAA;AACjB,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@dxworks/depinder",
|
|
3
|
-
"version": "0.2.
|
|
3
|
+
"version": "0.2.2",
|
|
4
4
|
"description": "",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"dxworks",
|
|
@@ -15,6 +15,9 @@
|
|
|
15
15
|
"url": "git+https://github.com/dxworks/depinder.git"
|
|
16
16
|
},
|
|
17
17
|
"license": "Apache-2.0",
|
|
18
|
+
"engines": {
|
|
19
|
+
"node": ">=24.0.0"
|
|
20
|
+
},
|
|
18
21
|
"author": "Mario Rivis <mario.rivis@gmail.com>",
|
|
19
22
|
"main": "dist/depinder.js",
|
|
20
23
|
"bin": {
|
|
@@ -29,72 +32,68 @@
|
|
|
29
32
|
"clean:modules": "rm -rf ./node_modules ./package-lock.json",
|
|
30
33
|
"copy-files": "copyfiles -a -u 1 src/assets/**/*.* dist",
|
|
31
34
|
"create": "npm run build && npm run test",
|
|
32
|
-
"lint": "eslint ./src
|
|
33
|
-
"lint:fix": "eslint ./src --
|
|
35
|
+
"lint": "eslint ./src",
|
|
36
|
+
"lint:fix": "eslint ./src --fix",
|
|
34
37
|
"local": "npm run build && npm link && npx dx-depinder --help",
|
|
35
38
|
"refresh": "rm -rf ./node_modules ./package-lock.json && npm install",
|
|
36
39
|
"test": "jest --passWithNoTests",
|
|
37
40
|
"test:dev": "jest --watch"
|
|
38
41
|
},
|
|
39
42
|
"dependencies": {
|
|
40
|
-
"@dxworks/nuget-inspector": "^1.2.
|
|
41
|
-
"@
|
|
43
|
+
"@dxworks/nuget-inspector": "^1.2.1",
|
|
44
|
+
"@snyk/dep-graph": "^2.13.0",
|
|
42
45
|
"@snyk/gemfile": "^1.2.0",
|
|
46
|
+
"axios": "^1.7.0",
|
|
43
47
|
"chalk": "^4.1.2",
|
|
44
48
|
"cli-progress": "^3.11.2",
|
|
45
|
-
"commander": "^
|
|
46
|
-
"cross-env": "^
|
|
49
|
+
"commander": "^14.0.3",
|
|
50
|
+
"cross-env": "^10.0.0",
|
|
47
51
|
"csv": "^6.0.4",
|
|
48
|
-
"dotenv": "^
|
|
52
|
+
"dotenv": "^17.0.0",
|
|
53
|
+
"fast-xml-parser": "^5.3.3",
|
|
49
54
|
"lodash": "^4.17.21",
|
|
50
|
-
"minimatch": "^
|
|
51
|
-
"moment": "^2.
|
|
52
|
-
"mongodb": "^
|
|
53
|
-
"mongoose": "^
|
|
54
|
-
"node-html-parser": "^
|
|
55
|
-
"npm": "^
|
|
56
|
-
"npm-registry-fetch": "^
|
|
57
|
-
"
|
|
58
|
-
"
|
|
59
|
-
"puppeteer": "18.0.1",
|
|
60
|
-
"semver": "^7.3.5",
|
|
61
|
-
"snyk-gradle-plugin": "^3.25.2",
|
|
62
|
-
"snyk-nodejs-lockfile-parser": "^1.60.1",
|
|
55
|
+
"minimatch": "^10.0.0",
|
|
56
|
+
"moment": "^2.30.0",
|
|
57
|
+
"mongodb": "^7.0.0",
|
|
58
|
+
"mongoose": "^9.0.0",
|
|
59
|
+
"node-html-parser": "^7.0.0",
|
|
60
|
+
"npm": "^11.12.1",
|
|
61
|
+
"npm-registry-fetch": "^19.0.0",
|
|
62
|
+
"semver": "^7.7.0",
|
|
63
|
+
"snyk-nodejs-lockfile-parser": "^2.5.0",
|
|
63
64
|
"spdx-correct": "^3.1.1",
|
|
64
65
|
"spdx-license-ids": "^3.0.10",
|
|
65
66
|
"tmp": "^0.2.1",
|
|
66
67
|
"toml": "^3.0.0",
|
|
67
|
-
"winston": "^3.
|
|
68
|
-
"xml2js": "^0.6.2"
|
|
68
|
+
"winston": "^3.17.0"
|
|
69
69
|
},
|
|
70
70
|
"devDependencies": {
|
|
71
|
-
"@
|
|
72
|
-
"@types/
|
|
73
|
-
"@types/
|
|
74
|
-
"@types/
|
|
75
|
-
"@types/
|
|
76
|
-
"@types/
|
|
77
|
-
"@types/
|
|
78
|
-
"@types/
|
|
79
|
-
"@types/
|
|
80
|
-
"@types/
|
|
81
|
-
"@types/
|
|
82
|
-
"@types/
|
|
83
|
-
"@types/
|
|
84
|
-
"@types/
|
|
85
|
-
"@typescript-eslint/eslint-plugin": "^4.32.0",
|
|
86
|
-
"@typescript-eslint/parser": "^4.32.0",
|
|
71
|
+
"@eslint/js": "^9.0.0",
|
|
72
|
+
"@types/cli-progress": "^3.11.0",
|
|
73
|
+
"@types/dockerode": "^4.0.0",
|
|
74
|
+
"@types/fs-extra": "^11.0.0",
|
|
75
|
+
"@types/inquirer": "^9.0.0",
|
|
76
|
+
"@types/jest": "^29.0.0",
|
|
77
|
+
"@types/lodash": "^4.17.0",
|
|
78
|
+
"@types/node": "^24.0.0",
|
|
79
|
+
"@types/npm-registry-fetch": "^8.0.0",
|
|
80
|
+
"@types/semver": "^7.7.0",
|
|
81
|
+
"@types/spdx-correct": "^3.1.0",
|
|
82
|
+
"@types/string-template": "^1.0.0",
|
|
83
|
+
"@types/tmp": "^0.2.0",
|
|
84
|
+
"@types/ws": "^8.18.0",
|
|
87
85
|
"copyfiles": "^2.4.1",
|
|
88
|
-
"eslint": "^
|
|
86
|
+
"eslint": "^9.0.0",
|
|
89
87
|
"i": "^0.3.7",
|
|
90
|
-
"jest": "^
|
|
88
|
+
"jest": "^29.0.0",
|
|
91
89
|
"json": "^11.0.0",
|
|
92
90
|
"performance-now": "^2.1.0",
|
|
93
|
-
"rimraf": "^
|
|
94
|
-
"sort-package-json": "^
|
|
95
|
-
"ts-jest": "^
|
|
96
|
-
"ts-node": "^10.
|
|
97
|
-
"typescript": "^
|
|
91
|
+
"rimraf": "^6.0.0",
|
|
92
|
+
"sort-package-json": "^3.0.0",
|
|
93
|
+
"ts-jest": "^29.0.0",
|
|
94
|
+
"ts-node": "^10.9.0",
|
|
95
|
+
"typescript": "^5.0.0",
|
|
96
|
+
"typescript-eslint": "^8.0.0"
|
|
98
97
|
},
|
|
99
98
|
"dxw": {
|
|
100
99
|
"commands": [
|