@manojkmfsi/monodog 1.1.16 → 1.1.17

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @manojkmfsi/monoapp
 
+## 1.1.17
+
+### Patch Changes
+
+- fix health score
+
 ## 1.1.16
 
 ### Patch Changes

package/dist/utils/health-utils.js

@@ -20,8 +20,8 @@ function calculatePackageHealth(buildStatus, testCoverage, lintStatus, securityA
         default:
             score += 10;
     }
-    // Test coverage (25 points)
-    score += Math.min(25, (testCoverage / 100) * 25);
+    // Test coverage (25 points) Note: test coverage is currently not calculated
+    score += 25; //Math.min(25, (testCoverage / 100) * 25);
     // Lint status (25 points)
     switch (lintStatus) {
         case 'pass':

package/dist/utils/monorepo-scanner.js

@@ -219,17 +219,56 @@ class MonorepoScanner {
      */
     async checkSecurityAudit(pkg) {
         try {
-            // Run npm audit
-            const result = (0, child_process_1.execSync)('npm audit --json', {
-                cwd: pkg.path,
-                stdio: 'pipe',
+            const audit = await this.runPnpmAudit(pkg.path);
+            // Extract paths from audit report
+            if (audit && audit.advisories) {
+                for (const key in audit.advisories) {
+                    const advisory = audit.advisories[key];
+                    for (const k in advisory.findings) {
+                        if (advisory.findings[k].paths && Array.isArray(advisory.findings[k].paths)) {
+                            for (const pathStr of advisory.findings[k].paths) {
+                                // Extract the first segment of the path (the top-level package)
+                                const topPkg = pathStr.split(">")[0].trim();
+                                const normalizedShort = path_1.default.normalize(topPkg);
+                                const normalizedFull = path_1.default.normalize(pkg.path);
+                                if (normalizedFull.endsWith(normalizedShort)) {
+                                    // Break early if we found a match
+                                    return 'fail';
+                                }
+                            }
+                        }
+                    }
+                }
+            }
+            return 'pass';
+        }
+        catch (error) {
+            return 'unknown';
+        }
+    }
+    /**
+    * Executes 'pnpm audit' safely.
+    */
+    async runPnpmAudit(packagePath) {
+        try {
+            const stdout = (0, child_process_1.execSync)('pnpm audit --json', {
+                cwd: packagePath,
+                stdio: ['pipe', 'pipe', 'pipe'], // Ensure pipes are set to capture output
                 timeout: 15000,
+                encoding: 'utf8',
             });
-            const audit = JSON.parse(result.toString());
-            return audit.metadata.vulnerabilities.total === 0 ? 'pass' : 'fail';
+            return JSON.parse(stdout);
         }
         catch (error) {
-            return 'unknown';
+            if (error.stdout) {
+                try {
+                    return JSON.parse(error.stdout.toString());
+                }
+                catch (parseError) {
+                    throw new Error(`Failed to parse audit JSON: ${parseError}`);
+                }
+            }
+            throw new Error(`pnpm audit failed: ${error.message}`);
         }
     }
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@manojkmfsi/monodog",
-  "version": "1.1.16",
+  "version": "1.1.17",
   "description": "App for monodog monorepo",
   "license": "MIT",
   "author": "Mindfiredigital",