@knime/utils 1.12.1 → 2.0.0

package/audit/cli.js

@@ -1,117 +0,0 @@
-#!/usr/bin/env node
-/* eslint-disable no-console, n/no-process-exit */
-
-/**
- * CLI wrapper for the bulk advisory audit.
- *
- * Usage:
- *   pnpm-bulk-audit [--lockfile path] [--registry url] [--severity level] [--json]
- *
- * Defaults:
- *   --lockfile  pnpm-lock.yaml (in cwd)
- *   --registry  https://registry.npmjs.org
- *   --severity  low
- */
-
-import { existsSync } from "node:fs";
-import { dirname, resolve } from "node:path";
-
-import { audit, formatAuditReport, readAuditConfig } from "./bulkAudit.js";
-
-function parseArgs(args) {
-  let lockfilePath = resolve("pnpm-lock.yaml");
-  let registry = "https://registry.npmjs.org";
-  let minSeverity = "low";
-  let json = false;
-  let noIgnore = false;
-  let prod = false;
-
-  for (let i = 0; i < args.length; i++) {
-    const arg = args[i];
-    if (arg === "--lockfile" && args[i + 1]) {
-      lockfilePath = resolve(args[++i]);
-    } else if (arg === "--registry" && args[i + 1]) {
-      registry = args[++i];
-    } else if (arg === "--severity" && args[i + 1]) {
-      minSeverity = args[++i];
-      const validSeverities = ["low", "moderate", "high", "critical"];
-      if (!validSeverities.includes(minSeverity)) {
-        console.error(
-          `Error: unknown severity "${minSeverity}". Must be one of: ${validSeverities.join(", ")}`,
-        );
-        process.exit(1);
-      }
-    } else if (arg === "--json") {
-      json = true;
-    } else if (arg === "--no-ignore") {
-      noIgnore = true;
-    } else if (arg === "--prod" || arg === "-P") {
-      prod = true;
-    } else if (arg === "--help" || arg === "-h") {
-      console.log(`Usage: pnpm-bulk-audit [options]
-
-Options:
-  --lockfile <path>     Path to pnpm-lock.yaml (default: ./pnpm-lock.yaml)
-  --registry <url>      npm registry URL (default: https://registry.npmjs.org)
-  --severity <level>    Minimum severity: low, moderate, high, critical (default: low)
-  --prod, -P            Only report vulnerabilities in production dependencies
-  --json                Output raw JSON
-  --no-ignore           Skip reading ignoreCves/ignoreGhsas from config
-  --help, -h            Show this help`);
-      process.exit(0);
-    }
-  }
-
-  return { lockfilePath, registry, minSeverity, json, noIgnore, prod };
-}
-
-async function main() {
-  const opts = parseArgs(process.argv.slice(2));
-
-  if (!existsSync(opts.lockfilePath)) {
-    console.error(`Error: lockfile not found at ${opts.lockfilePath}`);
-    process.exit(1);
-  }
-
-  try {
-    const workspaceDir = dirname(opts.lockfilePath);
-    const auditConfig = opts.noIgnore
-      ? undefined
-      : readAuditConfig(workspaceDir);
-
-    if (auditConfig && !opts.json) {
-      const ignoredCount =
-        (auditConfig.ignoreCves?.length ?? 0) +
-        (auditConfig.ignoreGhsas?.length ?? 0);
-      if (ignoredCount > 0) {
-        console.log(
-          `Ignoring ${ignoredCount} CVE/GHSA entr${ignoredCount === 1 ? "y" : "ies"} from config.\n`,
-        );
-      }
-    }
-
-    const result = await audit({
-      lockfilePath: opts.lockfilePath,
-      registry: opts.registry,
-      minSeverity: opts.minSeverity,
-      auditConfig,
-      prod: opts.prod,
-    });
-
-    if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
-    } else {
-      console.log(formatAuditReport(result));
-    }
-
-    process.exit(result.totalVulnerabilities > 0 ? 1 : 0);
-  } catch (error) {
-    console.error(
-      `Audit failed: ${error instanceof Error ? error.message : String(error)}`,
-    );
-    process.exit(1);
-  }
-}
-
-// eslint-disable-next-line no-void
-void main();