@mitre/hdf-converters 2.12.6 → 3.0.0

package/dist/converters/cyclonedx-to-hdf/typescript/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../converters/cyclonedx-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/cyclonedx-to-hdf/typescript/index.js

@@ -0,0 +1,2 @@
+export { convertCyclonedxToHdf } from './converter.js';
+//# sourceMappingURL=index.js.map

package/dist/converters/cyclonedx-to-hdf/typescript/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../converters/cyclonedx-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/dbprotect-to-hdf/typescript/converter.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Converts DBProtect Cognos XML output to HDF format.
+ * Supports both "Check Results Details" (has Result Status) and "Findings Detail"
+ * (no Result Status; all rows are findings) report formats.
+ *
+ * @param input - DBProtect XML string
+ * @returns HDF JSON string
+ */
+export declare function convertDbprotectToHdf(input: string): Promise<string>;
+//# sourceMappingURL=converter.d.ts.map

package/dist/converters/dbprotect-to-hdf/typescript/converter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter.d.ts","sourceRoot":"","sources":["../../../../converters/dbprotect-to-hdf/typescript/converter.ts"],"names":[],"mappings":"AAgLA;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAgE1E"}

package/dist/converters/dbprotect-to-hdf/typescript/converter.js

@@ -0,0 +1,171 @@
+import { parseXmlWithArrays } from '@mitre/hdf-utilities';
+import { DEFAULT_STATIC_ANALYSIS_NIST_TAGS, nistToCci, } from '@mitre/hdf-mappings';
+import { inputChecksum, buildNistCciTags, limitArray, validateInputSize, buildHdfResults } from '../../../shared/typescript/converterutil.js';
+import { ResultStatus, Copyright, createMinimalBaseline, createRequirement, createResult, } from '@mitre/hdf-schema';
+/** Impact mapping from heimdall2 DBProtect mapper */
+const IMPACT_MAPPING = {
+    high: 0.7,
+    medium: 0.5,
+    low: 0.3,
+    informational: 0.0,
+};
+/**
+ * Maps metadata column names to row values by position index.
+ * Mirrors the heimdall2 compileFindings function.
+ */
+function compileFindings(parsed) {
+    const items = parsed.dataset.metadata.item;
+    const rows = parsed.dataset.data.row;
+    const colNames = items.map((item) => item['name']);
+    return rows.map((row) => {
+        const finding = {};
+        const values = row.value;
+        colNames.forEach((name, i) => {
+            const val = values[i];
+            if (val === null || val === undefined || typeof val === 'object') {
+                finding[name] = '';
+            }
+            else {
+                finding[name] = String(val);
+            }
+        });
+        return finding;
+    });
+}
+/** Check if the dataset has a "Result Status" column */
+function hasResultStatusColumn(parsed) {
+    return parsed.dataset.metadata.item.some((item) => item['name'] === 'Result Status');
+}
+/** Maps DBProtect result status strings to HDF ResultStatus */
+function getStatus(status) {
+    switch (status) {
+        case 'Fact':
+            return ResultStatus.NotReviewed;
+        case 'Failed':
+            return ResultStatus.Failed;
+        case 'Finding':
+            return ResultStatus.Failed;
+        case 'Not A Finding':
+            return ResultStatus.Passed;
+        default:
+            // Includes "Skipped" and any unknown status
+            return ResultStatus.NotReviewed;
+    }
+}
+/** Maps DBProtect risk level to HDF impact value */
+function getImpact(riskDV) {
+    const impact = IMPACT_MAPPING[riskDV.toLowerCase()];
+    return impact !== undefined ? impact : 0.5;
+}
+/** Creates a description string from a finding's task and check category */
+function formatDesc(f) {
+    return `Task : ${f['Task'] ?? ''}; Check Category : ${f['Check Category'] ?? ''}`;
+}
+/** Creates a summary string from a finding's metadata */
+function formatSummary(f) {
+    return [
+        `Organization : ${f['Organization'] ?? ''}`,
+        `Asset : ${f['Asset'] ?? ''}`,
+        `Asset Type : ${f['Asset Type'] ?? ''}`,
+        `IP Address, Port, Instance : ${f['IP Address, Port, Instance'] ?? ''}`,
+    ].join('\n');
+}
+/**
+ * Parses DBProtect date format "Feb 18 2021 15:57"
+ */
+function parseDate(dateStr) {
+    const trimmed = dateStr.trim();
+    if (!trimmed) {
+        return new Date();
+    }
+    const parsed = new Date(trimmed);
+    if (!isNaN(parsed.getTime())) {
+        return parsed;
+    }
+    return new Date();
+}
+/**
+ * Builds a single EvaluatedRequirement from a group of findings sharing a Check ID.
+ */
+function buildRequirement(checkID, findings, hasStatus) {
+    const rep = findings[0];
+    const nist = DEFAULT_STATIC_ANALYSIS_NIST_TAGS;
+    const cciTags = nistToCci(nist);
+    const tags = buildNistCciTags(nist, cciTags);
+    const descriptions = [
+        { label: 'default', data: formatDesc(rep) },
+    ];
+    const results = findings.map((f) => {
+        const status = hasStatus
+            ? getStatus(f['Result Status'] ?? '')
+            : ResultStatus.Failed;
+        return createResult(status, undefined, {
+            codeDesc: f['Details'] ?? '',
+            startTime: parseDate(f['Date'] ?? ''),
+        });
+    });
+    return createRequirement(checkID, rep['Check'] ?? '', descriptions, getImpact(rep['Risk DV'] ?? ''), results, { tags });
+}
+/**
+ * Converts DBProtect Cognos XML output to HDF format.
+ * Supports both "Check Results Details" (has Result Status) and "Findings Detail"
+ * (no Result Status; all rows are findings) report formats.
+ *
+ * @param input - DBProtect XML string
+ * @returns HDF JSON string
+ */
+export async function convertDbprotectToHdf(input) {
+    if (!input || input.trim().length === 0) {
+        throw new Error('dbprotect: empty input');
+    }
+    validateInputSize(input, 'dbprotect');
+    const resultsChecksum = await inputChecksum(input);
+    const parsed = parseXmlWithArrays(input, ['item', 'row', 'value']);
+    if (!parsed?.dataset?.data?.row || parsed.dataset.data.row.length === 0) {
+        throw new Error('dbprotect: no data rows found');
+    }
+    const findings = compileFindings(parsed);
+    const { items: limitedFindings, truncated } = limitArray(findings);
+    /* v8 ignore next -- truncation only triggers with >100K items */
+    if (truncated) {
+        // eslint-disable-next-line no-console
+        console.warn(`WARNING: Input truncated at ${limitedFindings.length} finding items (original: ${findings.length})`);
+    }
+    const hasStatus = hasResultStatusColumn(parsed);
+    // Group findings by Check ID, preserving insertion order
+    const groups = new Map();
+    for (const f of limitedFindings) {
+        const checkID = (f['Check ID'] ?? '').trim();
+        const existing = groups.get(checkID);
+        if (existing) {
+            existing.push(f);
+        }
+        else {
+            groups.set(checkID, [f]);
+        }
+    }
+    const requirements = [];
+    for (const [checkID, findingGroup] of groups) {
+        requirements.push(buildRequirement(checkID, findingGroup, hasStatus));
+    }
+    // Use first finding for metadata
+    const firstFinding = limitedFindings[0];
+    const title = firstFinding['Job Name'] ?? '';
+    const summary = formatSummary(firstFinding);
+    const targetName = firstFinding['Asset'] ?? '';
+    const baseline = createMinimalBaseline('DBProtect Scan', requirements, {
+        resultsChecksum,
+        title,
+        summary,
+    });
+    return buildHdfResults({
+        generatorName: 'dbprotect-to-hdf',
+        converterVersion: '1.0.0',
+        toolName: 'DBProtect',
+        toolFormat: 'XML',
+        baselines: [baseline],
+        components: [{ name: targetName, type: Copyright.Host }],
+        timestamp: new Date(),
+    });
+}
+//# sourceMappingURL=converter.js.map

package/dist/converters/dbprotect-to-hdf/typescript/converter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter.js","sourceRoot":"","sources":["../../../../converters/dbprotect-to-hdf/typescript/converter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EACL,iCAAiC,EACjC,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,UAAU,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAO9I,OAAO,EACL,YAAY,EACZ,SAAS,EACT,qBAAqB,EACrB,iBAAiB,EACjB,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,qDAAqD;AACrD,MAAM,cAAc,GAA2B;IAC7C,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,GAAG;IACX,GAAG,EAAE,GAAG;IACR,aAAa,EAAE,GAAG;CACnB,CAAC;AA0BF;;;GAGG;AACH,SAAS,eAAe,CAAC,MAAkB;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;IAErC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAkB,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAEjE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAY,EAAE,EAAE;QAC/B,MAAM,OAAO,GAAY,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC;QACzB,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAY,EAAE,CAAS,EAAE,EAAE;YAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACjE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wDAAwD;AACxD,SAAS,qBAAqB,CAAC,MAAkB;IAC/C,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CACtC,CAAC,IAAkB,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,eAAe,CACzD,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,SAAS,SAAS,CAAC,MAAc;IAC/B,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,YAAY,CAAC,WAAW,CAAC;QAClC,KAAK,QAAQ;YACX,OAAO,YAAY,CAAC,MAAM,CAAC;QAC7B,KAAK,SAAS;YACZ,OAAO,YAAY,CAAC,MAAM,CAAC;QAC7B,KAAK,eAAe;YAClB,OAAO,YAAY,CAAC,MAAM,CAAC;QAC7B;YACE,4CAA4C;YAC5C,OAAO,YAAY,CAAC,WAAW,CAAC;IACpC,CAAC;AACH,CAAC;AAED,oDAAoD;AACpD,SAAS,SAAS,CAAC,MAAc;IAC/B,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACpD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED,4EAA4E;AAC5E,SAAS,UAAU,CAAC,CAAU;IAC5B,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC;AACpF,CAAC;AAED,yDAAyD;AACzD,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO;QACL,kBAAkB,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE;QAC3C,WAAW,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE;QAC7B,gBAAgB,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE;QACvC,gCAAgC,CAAC,CAAC,4BAA4B,CAAC,IAAI,EAAE,EAAE;KACxE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,IAAI,EAAE,CAAC;IACpB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,IAAI,EAAE,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CACvB,OAAe,EACf,QAAmB,EACnB,SAAkB;IAElB,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;IAEzB,MAAM,IAAI,GAAG,iCAAiC,CAAC;IAC/C,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAE7C,MAAM,YAAY,GAAkB;QAClC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE;KAC5C,CAAC;IAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACjC,MAAM,MAAM,GAAG,SAAS;YACtB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;YACrC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;QAExB,OAAO,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE;YACrC,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE;YAC5B,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;SACtC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,iBAAiB,CACtB,OAAO,EACP,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAClB,YAAY,EACZ,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAC/B,OAAO,EACP,EAAE,IAAI,EAAE,CACT,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAa;IACvD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAEtC,MAAM,eAAe,GAAa,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAA0B,CAAC;IAE5F,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnE,iEAAiE;IACjE,IAAI,SAAS,EAAE,CAAC;QACd,sCAAsC;QACtC,OAAO,CAAC,IAAI,CACV,+BAA+B,eAAe,CAAC,MAAM,6BAA6B,QAAQ,CAAC,MAAM,GAAG,CACrG,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAEhD,yDAAyD;IACzD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,MAAM,EAAE,CAAC;QAC7C,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,iCAAiC;IACjC,MAAM,YAAY,GAAG,eAAe,CAAC,CAAC,CAAE,CAAC;IACzC,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAE/C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,gBAAgB,EAAE,YAAY,EAAE;QACrE,eAAe;QACf,KAAK;QACL,OAAO;KACR,CAAsB,CAAC;IAExB,OAAO,eAAe,CAAC;QACrB,aAAa,EAAE,kBAAkB;QACjC,gBAAgB,EAAE,OAAO;QACzB,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,KAAK;QACjB,SAAS,EAAE,CAAC,QAAQ,CAAC;QACrB,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC;QACxD,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC,CAAC;AACL,CAAC"}

package/dist/converters/dbprotect-to-hdf/typescript/fingerprint.d.ts

@@ -0,0 +1,10 @@
+/**
+ * DBProtect format fingerprint.
+ *
+ * Detects DBProtect XML files by checking for <dataset> root element
+ * with metadata/data child structure.
+ */
+import { type ConverterFingerprint } from '../../../shared/typescript/registry.js';
+export declare const dbprotectFingerprint: ConverterFingerprint;
+export declare function register(): void;
+//# sourceMappingURL=fingerprint.d.ts.map

package/dist/converters/dbprotect-to-hdf/typescript/fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../../../../converters/dbprotect-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAuC,KAAK,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAGxH,eAAO,MAAM,oBAAoB,EAAE,oBAiBlC,CAAC;AAEF,wBAAgB,QAAQ,IAAI,IAAI,CAG/B"}

package/dist/converters/dbprotect-to-hdf/typescript/fingerprint.js

@@ -0,0 +1,35 @@
+/**
+ * DBProtect format fingerprint.
+ *
+ * Detects DBProtect XML files by checking for <dataset> root element
+ * with metadata/data child structure.
+ */
+import { registerFingerprint, getFingerprint } from '../../../shared/typescript/registry.js';
+import { extractXmlRootElement } from '../../../shared/typescript/xml-utils.js';
+export const dbprotectFingerprint = {
+    id: 'dbprotect-to-hdf',
+    label: 'DBProtect',
+    direction: 'ingest',
+    inputFamily: 'xml',
+    outputType: 'results',
+    fingerprint: (input) => {
+        if (typeof input !== 'string')
+            return 0;
+        const root = extractXmlRootElement(input);
+        if (!root)
+            return 0;
+        if (root === 'dataset') {
+            // Higher confidence if metadata/data children present (DBProtect-specific)
+            if (input.includes('<metadata') && input.includes('<data'))
+                return 1.0;
+            return 0.8;
+        }
+        return 0;
+    },
+};
+export function register() {
+    if (getFingerprint('dbprotect-to-hdf'))
+        return;
+    registerFingerprint(dbprotectFingerprint);
+}
+//# sourceMappingURL=fingerprint.js.map

package/dist/converters/dbprotect-to-hdf/typescript/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../../../converters/dbprotect-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAA6B,MAAM,wCAAwC,CAAC;AACxH,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAEhF,MAAM,CAAC,MAAM,oBAAoB,GAAyB;IACxD,EAAE,EAAE,kBAAkB;IACtB,KAAK,EAAE,WAAW;IAClB,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,KAAK;IAClB,UAAU,EAAE,SAAS;IACrB,WAAW,EAAE,CAAC,KAAc,EAAU,EAAE;QACtC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC;QACpB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,2EAA2E;YAC3E,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,OAAO,GAAG,CAAC;YACvE,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;CACF,CAAC;AAEF,MAAM,UAAU,QAAQ;IACtB,IAAI,cAAc,CAAC,kBAAkB,CAAC;QAAE,OAAO;IAC/C,mBAAmB,CAAC,oBAAoB,CAAC,CAAC;AAC5C,CAAC"}

package/dist/converters/dbprotect-to-hdf/typescript/index.d.ts

@@ -0,0 +1,2 @@
+export { convertDbprotectToHdf } from './converter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/converters/dbprotect-to-hdf/typescript/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../converters/dbprotect-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/dbprotect-to-hdf/typescript/index.js

@@ -0,0 +1,2 @@
+export { convertDbprotectToHdf } from './converter.js';
+//# sourceMappingURL=index.js.map

package/dist/converters/dbprotect-to-hdf/typescript/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../converters/dbprotect-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/deptrack-to-hdf/typescript/converter.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Converts Dependency-Track FPF JSON output to HDF format.
+ *
+ * @param input - Dependency-Track FPF JSON string
+ * @returns HDF JSON string
+ */
+export declare function convertDeptrackToHdf(input: string): Promise<string>;
+//# sourceMappingURL=converter.d.ts.map

package/dist/converters/deptrack-to-hdf/typescript/converter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter.d.ts","sourceRoot":"","sources":["../../../../converters/deptrack-to-hdf/typescript/converter.ts"],"names":[],"mappings":"AAkMA;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA+CzE"}

package/dist/converters/deptrack-to-hdf/typescript/converter.js

@@ -0,0 +1,120 @@
+import { parseJSON } from '@mitre/hdf-utilities';
+import { nistToCci, DEFAULT_STATIC_ANALYSIS_NIST_TAGS, } from '@mitre/hdf-mappings';
+import { inputChecksum, mapCWEToNIST, validateInputSize, buildHdfResults } from '../../../shared/typescript/converterutil.js';
+import { ResultStatus, Copyright, createMinimalBaseline, createRequirement, createResult, } from '@mitre/hdf-schema';
+/**
+ * Maps Dependency-Track severity strings to HDF impact values.
+ * Uses the same mapping as the heimdall2 dependency-track-mapper:
+ * critical=0.9, high=0.7, medium=0.5, low=0.3, info=0, unassigned=0.5
+ */
+function getImpact(severity) {
+    switch (severity.toLowerCase()) {
+        case 'critical':
+            return 0.9;
+        case 'high':
+            return 0.7;
+        case 'medium':
+            return 0.5;
+        case 'low':
+            return 0.3;
+        case 'info':
+            return 0.0;
+        default:
+            return 0.5;
+    }
+}
+/**
+ * Builds the requirement title from component purl and vulnerability title.
+ * Matches the heimdall2 pattern: "{purl} - {title}" or just "{purl}".
+ */
+function getTitle(finding) {
+    const purl = finding.component.purl ?? finding.component.name;
+    const title = finding.vulnerability.title;
+    if (title) {
+        return `${purl} - ${title}`;
+    }
+    return purl;
+}
+/**
+ * Extracts CWE IDs as "CWE-NNN" strings from the cwes array.
+ */
+function getCweIDs(cwes) {
+    if (!cwes || cwes.length === 0) {
+        return [];
+    }
+    return cwes.map(cwe => `CWE-${cwe.cweId}`);
+}
+/**
+ * Builds a single EvaluatedRequirement from a Dependency-Track finding.
+ */
+function buildRequirement(finding, timestamp) {
+    const cweIDs = getCweIDs(finding.vulnerability.cwes);
+    const nist = mapCWEToNIST(cweIDs, DEFAULT_STATIC_ANALYSIS_NIST_TAGS);
+    const cciTags = nistToCci(nist);
+    const tags = {
+        nist,
+        cci: cciTags,
+    };
+    if (cweIDs.length > 0) {
+        tags['cweIds'] = cweIDs;
+    }
+    // Build descriptions: default, check, fix
+    const descriptions = [
+        { label: 'default', data: finding.vulnerability.description ?? '' },
+    ];
+    if (finding.vulnerability.description) {
+        descriptions.push({ label: 'check', data: finding.vulnerability.description });
+    }
+    if (finding.vulnerability.recommendation) {
+        descriptions.push({ label: 'fix', data: finding.vulnerability.recommendation });
+    }
+    // Build result: all findings are Failed
+    const codeDesc = finding.vulnerability.recommendation ?? 'No recommendation available';
+    const results = [
+        createResult(ResultStatus.Failed, undefined, {
+            codeDesc,
+            startTime: timestamp ? new Date(timestamp) : undefined,
+        }),
+    ];
+    return createRequirement(finding.matrix, getTitle(finding), descriptions, getImpact(finding.vulnerability.severity), results, { tags });
+}
+/**
+ * Converts Dependency-Track FPF JSON output to HDF format.
+ *
+ * @param input - Dependency-Track FPF JSON string
+ * @returns HDF JSON string
+ */
+export async function convertDeptrackToHdf(input) {
+    if (!input || input.trim().length === 0) {
+        throw new Error('deptrack: empty input');
+    }
+    validateInputSize(input, 'deptrack');
+    const resultsChecksum = await inputChecksum(input);
+    const parsed = parseJSON(input);
+    if (!parsed || typeof parsed !== 'object') {
+        throw new Error('deptrack: invalid JSON');
+    }
+    // Validate it looks like a Dependency-Track report
+    if (!parsed.findings && !parsed.project && !parsed.meta) {
+        throw new Error('deptrack: input does not appear to be a Dependency-Track report');
+    }
+    const findings = parsed.findings ?? [];
+    const requirements = findings.map(finding => buildRequirement(finding, parsed.meta?.timestamp));
+    const title = `Dependency-Track: ${parsed.project?.name ?? ''} ${parsed.project?.version ?? ''}`;
+    const baseline = createMinimalBaseline('Dependency-Track Scan', requirements, {
+        resultsChecksum,
+        title,
+        summary: parsed.project?.description,
+    });
+    const targetName = parsed.project?.name ?? parsed.project?.uuid ?? '';
+    return buildHdfResults({
+        generatorName: 'deptrack-to-hdf',
+        converterVersion: '1.0.0',
+        toolName: 'Dependency-Track',
+        toolFormat: 'JSON',
+        baselines: [baseline],
+        components: [{ name: targetName, type: Copyright.Application }],
+        timestamp: new Date(),
+    });
+}
+//# sourceMappingURL=converter.js.map

package/dist/converters/deptrack-to-hdf/typescript/converter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter.js","sourceRoot":"","sources":["../../../../converters/deptrack-to-hdf/typescript/converter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EACL,SAAS,EACT,iCAAiC,GAClC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAM9H,OAAO,EACL,YAAY,EACZ,SAAS,EACT,qBAAqB,EACrB,iBAAiB,EACjB,YAAY,GAEb,MAAM,mBAAmB,CAAC;AAkF3B;;;;GAIG;AACH,SAAS,SAAS,CAAC,QAAgB;IACjC,QAAQ,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/B,KAAK,UAAU;YACb,OAAO,GAAG,CAAC;QACb,KAAK,MAAM;YACT,OAAO,GAAG,CAAC;QACb,KAAK,QAAQ;YACX,OAAO,GAAG,CAAC;QACb,KAAK,KAAK;YACR,OAAO,GAAG,CAAC;QACb,KAAK,MAAM;YACT,OAAO,GAAG,CAAC;QACb;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,OAAwB;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC;IAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC;IAC1C,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,GAAG,IAAI,MAAM,KAAK,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,IAA+B;IAChD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,OAAwB,EAAE,SAA6B;IAC/E,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAEhC,MAAM,IAAI,GAA4B;QACpC,IAAI;QACJ,GAAG,EAAE,OAAO;KACb,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;IAC1B,CAAC;IAED,0CAA0C;IAC1C,MAAM,YAAY,GAAkB;QAClC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC,WAAW,IAAI,EAAE,EAAE;KACpE,CAAC;IAEF,IAAI,OAAO,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC;QACtC,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,CAAC,cAAc,EAAE,CAAC;QACzC,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC,cAAc,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,wCAAwC;IACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,cAAc,IAAI,6BAA6B,CAAC;IAEvF,MAAM,OAAO,GAAG;QACd,YAAY,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE;YAC3C,QAAQ;YACR,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;SACvD,CAAC;KACH,CAAC;IAEF,OAAO,iBAAiB,CACtB,OAAO,CAAC,MAAM,EACd,QAAQ,CAAC,OAAO,CAAC,EACjB,YAAY,EACZ,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,EACzC,OAAO,EACP,EAAE,IAAI,EAAE,CACT,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAa;IACtD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IACD,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAErC,MAAM,eAAe,GAAa,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG,SAAS,CAAiB,KAAK,CAAC,CAAC;IAEhD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,mDAAmD;IACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IACvC,MAAM,YAAY,GAA2B,QAAQ,CAAC,GAAG,CACvD,OAAO,CAAC,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAC7D,CAAC;IAEF,MAAM,KAAK,GAAG,qBAAqB,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,IAAI,MAAM,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;IAEjG,MAAM,QAAQ,GAAG,qBAAqB,CACpC,uBAAuB,EACvB,YAAY,EACZ;QACE,eAAe;QACf,KAAK;QACL,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW;KACrC,CACmB,CAAC;IAEvB,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC;IAEtE,OAAO,eAAe,CAAC;QACrB,aAAa,EAAE,iBAAiB;QAChC,gBAAgB,EAAE,OAAO;QACzB,QAAQ,EAAE,kBAAkB;QAC5B,UAAU,EAAE,MAAM;QAClB,SAAS,EAAE,CAAC,QAAQ,CAAC;QACrB,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC;QAC/D,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC,CAAC;AACL,CAAC"}

package/dist/converters/deptrack-to-hdf/typescript/fingerprint.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Dependency-Track format fingerprint.
+ *
+ * Exports a ConverterFingerprint object (data only, no converter import).
+ * Detects JSON with findings[] containing vulnerability.vulnId fields.
+ */
+import { type ConverterFingerprint } from '../../../shared/typescript/registry.js';
+export declare const deptrackFingerprint: ConverterFingerprint;
+export declare function register(): void;
+//# sourceMappingURL=fingerprint.d.ts.map

package/dist/converters/deptrack-to-hdf/typescript/fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../../../../converters/deptrack-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAuC,KAAK,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAExH,eAAO,MAAM,mBAAmB,EAAE,oBA8BjC,CAAC;AAEF,wBAAgB,QAAQ,IAAI,IAAI,CAG/B"}

package/dist/converters/deptrack-to-hdf/typescript/fingerprint.js

@@ -0,0 +1,46 @@
+/**
+ * Dependency-Track format fingerprint.
+ *
+ * Exports a ConverterFingerprint object (data only, no converter import).
+ * Detects JSON with findings[] containing vulnerability.vulnId fields.
+ */
+import { registerFingerprint, getFingerprint } from '../../../shared/typescript/registry.js';
+export const deptrackFingerprint = {
+    id: 'deptrack-to-hdf',
+    label: 'Dependency-Track',
+    direction: 'ingest',
+    inputFamily: 'json',
+    outputType: 'results',
+    fingerprint: (input) => {
+        if (typeof input !== 'object' || input === null)
+            return 0;
+        const obj = input;
+        // Primary: findings array with vulnerability.vulnId + project + meta
+        if (Array.isArray(obj.findings)) {
+            // Strong signal: has project and meta (standard FPF shape)
+            if (typeof obj.project === 'object' && obj.project !== null &&
+                typeof obj.meta === 'object' && obj.meta !== null) {
+                return 1.0;
+            }
+            // Medium signal: findings with vulnerability sub-objects
+            const findings = obj.findings;
+            if (findings.length > 0) {
+                const first = findings[0];
+                if (typeof first === 'object' && first !== null &&
+                    typeof first.vulnerability === 'object' && first.vulnerability !== null) {
+                    const vuln = first.vulnerability;
+                    if (typeof vuln.vulnId === 'string')
+                        return 0.9;
+                }
+            }
+            return 0.5;
+        }
+        return 0;
+    },
+};
+export function register() {
+    if (getFingerprint('deptrack-to-hdf'))
+        return;
+    registerFingerprint(deptrackFingerprint);
+}
+//# sourceMappingURL=fingerprint.js.map

package/dist/converters/deptrack-to-hdf/typescript/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../../../converters/deptrack-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAA6B,MAAM,wCAAwC,CAAC;AAExH,MAAM,CAAC,MAAM,mBAAmB,GAAyB;IACvD,EAAE,EAAE,iBAAiB;IACrB,KAAK,EAAE,kBAAkB;IACzB,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,SAAS;IACrB,WAAW,EAAE,CAAC,KAAc,EAAU,EAAE;QACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,qEAAqE;QACrE,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,2DAA2D;YAC3D,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI;gBACvD,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBACtD,OAAO,GAAG,CAAC;YACb,CAAC;YACD,yDAAyD;YACzD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAqB,CAAC;YAC3C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAA4B,CAAC;gBACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;oBAC3C,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;oBAC5E,MAAM,IAAI,GAAG,KAAK,CAAC,aAAwC,CAAC;oBAC5D,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;wBAAE,OAAO,GAAG,CAAC;gBAClD,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;CACF,CAAC;AAEF,MAAM,UAAU,QAAQ;IACtB,IAAI,cAAc,CAAC,iBAAiB,CAAC;QAAE,OAAO;IAC9C,mBAAmB,CAAC,mBAAmB,CAAC,CAAC;AAC3C,CAAC"}

package/dist/converters/deptrack-to-hdf/typescript/index.d.ts

@@ -0,0 +1,2 @@
+export { convertDeptrackToHdf } from './converter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/converters/deptrack-to-hdf/typescript/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../converters/deptrack-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/deptrack-to-hdf/typescript/index.js

@@ -0,0 +1,2 @@
+export { convertDeptrackToHdf } from './converter.js';
+//# sourceMappingURL=index.js.map

package/dist/converters/deptrack-to-hdf/typescript/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../converters/deptrack-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/fortify-to-hdf/typescript/converter.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Converts Fortify FVDL XML to HDF format.
+ *
+ * Descriptions are used as requirements (one per unique classID).
+ * Vulnerabilities are mapped to results under their corresponding Description.
+ * Snippets provide code context for result code descriptions.
+ *
+ * @param input - Fortify FVDL XML string
+ * @returns HDF JSON string
+ */
+export declare function convertFortifyToHdf(input: string): Promise<string>;
+//# sourceMappingURL=converter.d.ts.map

package/dist/converters/fortify-to-hdf/typescript/converter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter.d.ts","sourceRoot":"","sources":["../../../../converters/fortify-to-hdf/typescript/converter.ts"],"names":[],"mappings":"AA6QA;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA6FxE"}