@mitre/hdf-converters 2.13.0 → 3.0.0

package/dist/converters/netsparker-to-hdf/typescript/fingerprint.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Netsparker/Invicti format fingerprint.
+ *
+ * Detects Netsparker XML files by checking for <netsparker-enterprise>
+ * or <invicti-enterprise> root element.
+ */
+import { type ConverterFingerprint } from '../../../shared/typescript/registry.js';
+export declare const netsparkerFingerprint: ConverterFingerprint;
+export declare function register(): void;
+//# sourceMappingURL=fingerprint.d.ts.map

package/dist/converters/netsparker-to-hdf/typescript/fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../../../../converters/netsparker-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAuC,KAAK,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAGxH,eAAO,MAAM,qBAAqB,EAAE,oBAYnC,CAAC;AAEF,wBAAgB,QAAQ,IAAI,IAAI,CAG/B"}

package/dist/converters/netsparker-to-hdf/typescript/fingerprint.js

@@ -0,0 +1,29 @@
+/**
+ * Netsparker/Invicti format fingerprint.
+ *
+ * Detects Netsparker XML files by checking for <netsparker-enterprise>
+ * or <invicti-enterprise> root element.
+ */
+import { registerFingerprint, getFingerprint } from '../../../shared/typescript/registry.js';
+import { extractXmlRootElement } from '../../../shared/typescript/xml-utils.js';
+export const netsparkerFingerprint = {
+    id: 'netsparker-to-hdf',
+    label: 'Netsparker',
+    direction: 'ingest',
+    inputFamily: 'xml',
+    outputType: 'results',
+    fingerprint: (input) => {
+        if (typeof input !== 'string')
+            return 0;
+        const root = extractXmlRootElement(input);
+        if (!root)
+            return 0;
+        return (root === 'netsparker-enterprise' || root === 'invicti-enterprise') ? 1.0 : 0;
+    },
+};
+export function register() {
+    if (getFingerprint('netsparker-to-hdf'))
+        return;
+    registerFingerprint(netsparkerFingerprint);
+}
+//# sourceMappingURL=fingerprint.js.map

package/dist/converters/netsparker-to-hdf/typescript/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../../../converters/netsparker-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAA6B,MAAM,wCAAwC,CAAC;AACxH,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAEhF,MAAM,CAAC,MAAM,qBAAqB,GAAyB;IACzD,EAAE,EAAE,mBAAmB;IACvB,KAAK,EAAE,YAAY;IACnB,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,KAAK;IAClB,UAAU,EAAE,SAAS;IACrB,WAAW,EAAE,CAAC,KAAc,EAAU,EAAE;QACtC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC;QACpB,OAAO,CAAC,IAAI,KAAK,uBAAuB,IAAI,IAAI,KAAK,oBAAoB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,CAAC;CACF,CAAC;AAEF,MAAM,UAAU,QAAQ;IACtB,IAAI,cAAc,CAAC,mBAAmB,CAAC;QAAE,OAAO;IAChD,mBAAmB,CAAC,qBAAqB,CAAC,CAAC;AAC7C,CAAC"}

package/dist/converters/netsparker-to-hdf/typescript/index.d.ts

@@ -0,0 +1,2 @@
+export { convertNetsparkerToHdf } from './converter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/converters/netsparker-to-hdf/typescript/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../converters/netsparker-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/netsparker-to-hdf/typescript/index.js

@@ -0,0 +1,2 @@
+export { convertNetsparkerToHdf } from './converter.js';
+//# sourceMappingURL=index.js.map

package/dist/converters/netsparker-to-hdf/typescript/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../converters/netsparker-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/neuvector-to-hdf/typescript/converter.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Converts NeuVector container vulnerability scan JSON output to HDF format.
+ *
+ * Each vulnerability becomes a separate requirement with a unique
+ * ID of name/package_name/package_version. Impact is derived from the
+ * CVSS v3 score (preferred) or CVSS v2 score as fallback, normalized to 0-1.
+ *
+ * CWE identifiers are extracted from vulnerability descriptions via regex
+ * and mapped to NIST 800-53 controls. When no CWE is found, default
+ * remediation NIST tags (SI-2, RA-5) are used.
+ *
+ * @param input - NeuVector scan JSON string
+ * @returns HDF JSON string
+ */
+export declare function convertNeuvectorToHdf(input: string): Promise<string>;
+//# sourceMappingURL=converter.d.ts.map

package/dist/converters/neuvector-to-hdf/typescript/converter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter.d.ts","sourceRoot":"","sources":["../../../../converters/neuvector-to-hdf/typescript/converter.ts"],"names":[],"mappings":"AA+KA;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAkE1E"}

package/dist/converters/neuvector-to-hdf/typescript/converter.js

@@ -0,0 +1,148 @@
+import { parseJSON } from '@mitre/hdf-utilities';
+import { nistToCci, DEFAULT_REMEDIATION_NIST_TAGS, } from '@mitre/hdf-mappings';
+import { inputChecksum, limitArray, mapCWEToNIST, extractCWEIDs, validateInputSize, buildHdfResults } from '../../../shared/typescript/converterutil.js';
+import { ResultStatus, Copyright, createMinimalBaseline, createRequirement, createResult, } from '@mitre/hdf-schema';
+/**
+ * Extracts CWE identifiers from a vulnerability description string.
+ * Returns CWE-prefixed IDs (e.g., ["CWE-444"]) for use in tags and mapCWEToNIST.
+ */
+function extractCWEs(description) {
+    return extractCWEIDs(description).map(id => `CWE-${id}`);
+}
+/**
+ * Computes the HDF impact from NeuVector CVSS scores.
+ * Prefers CVSS v3 score; falls back to CVSS v2 if v3 is 0.
+ * Impact is normalized to 0.0-1.0 by dividing by 10.
+ */
+function getImpact(vuln) {
+    if (vuln.score_v3 > 0) {
+        return vuln.score_v3 / 10;
+    }
+    if (vuln.score > 0) {
+        return vuln.score / 10;
+    }
+    return 0.5; // default when no score available
+}
+/**
+ * Constructs the unique ID for a NeuVector vulnerability.
+ */
+function vulnID(vuln) {
+    return `${vuln.name}/${vuln.package_name}/${vuln.package_version}`;
+}
+/**
+ * Generates a human-readable title for the vulnerability.
+ */
+function vulnTitle(vuln) {
+    return `NeuVector found a vulnerability to ${vuln.name} in ${vuln.package_name}/${vuln.package_version}.`;
+}
+/**
+ * Generates the result message describing the fix action.
+ */
+function vulnMessage(vuln) {
+    if (!vuln.fixed_version) {
+        return `Vulnerable package ${vuln.package_name} is at version ${vuln.package_version}. No fixed version available.`;
+    }
+    return `Vulnerable package ${vuln.package_name} is at version ${vuln.package_version}. Update to fixed version ${vuln.fixed_version}.`;
+}
+/**
+ * Builds a single EvaluatedRequirement from a NeuVector vulnerability.
+ */
+function buildRequirement(vuln) {
+    const cweIDs = extractCWEs(vuln.description);
+    const nist = mapCWEToNIST(cweIDs, DEFAULT_REMEDIATION_NIST_TAGS);
+    const cciTags = nistToCci(nist);
+    const tags = {
+        nist,
+        cci: cciTags,
+    };
+    if (cweIDs.length > 0) {
+        tags['cwe'] = cweIDs;
+    }
+    const descriptions = [
+        { label: 'default', data: vuln.description },
+    ];
+    const results = [
+        createResult(ResultStatus.Failed, vulnMessage(vuln), {
+            codeDesc: '',
+        }),
+    ];
+    return createRequirement(vulnID(vuln), vulnTitle(vuln), descriptions, getImpact(vuln), results, { tags });
+}
+/**
+ * Constructs the baseline title from the image metadata.
+ */
+function imageTitle(report) {
+    return `${report.registry}/${report.repository}:${report.tag} - Digest: ${report.digest} - Image ID: ${report.image_id}`;
+}
+/**
+ * Constructs the target name from the image metadata.
+ */
+function targetNameFromReport(report) {
+    return `${report.registry}/${report.repository}:${report.tag}`;
+}
+/**
+ * Converts NeuVector container vulnerability scan JSON output to HDF format.
+ *
+ * Each vulnerability becomes a separate requirement with a unique
+ * ID of name/package_name/package_version. Impact is derived from the
+ * CVSS v3 score (preferred) or CVSS v2 score as fallback, normalized to 0-1.
+ *
+ * CWE identifiers are extracted from vulnerability descriptions via regex
+ * and mapped to NIST 800-53 controls. When no CWE is found, default
+ * remediation NIST tags (SI-2, RA-5) are used.
+ *
+ * @param input - NeuVector scan JSON string
+ * @returns HDF JSON string
+ */
+export async function convertNeuvectorToHdf(input) {
+    if (!input || input.trim().length === 0) {
+        throw new Error('neuvector: empty input');
+    }
+    validateInputSize(input, 'neuvector');
+    const scan = parseJSON(input);
+    if (!scan || typeof scan !== 'object' || !('report' in scan)) {
+        throw new Error('neuvector: invalid JSON structure');
+    }
+    const resultsChecksum = await inputChecksum(input);
+    const { items: limitedVulns, truncated } = limitArray(scan.report.vulnerabilities ?? []);
+    /* v8 ignore next -- truncation only triggers with >100K items */
+    if (truncated) {
+        // eslint-disable-next-line no-console
+        console.warn(`WARNING: Input truncated at ${limitedVulns.length} vulnerability items (original: ${scan.report.vulnerabilities.length})`);
+    }
+    // Deduplicate by composite ID (name/package_name/package_version)
+    const seen = new Set();
+    const requirements = [];
+    for (const vuln of limitedVulns) {
+        const id = vulnID(vuln);
+        if (seen.has(id)) {
+            continue;
+        }
+        seen.add(id);
+        requirements.push(buildRequirement(vuln));
+    }
+    const title = imageTitle(scan.report);
+    const baseline = createMinimalBaseline('NeuVector Scan', requirements, {
+        resultsChecksum,
+        title,
+    });
+    return buildHdfResults({
+        generatorName: 'neuvector-to-hdf',
+        converterVersion: '1.0.0',
+        toolName: 'NeuVector',
+        toolFormat: 'JSON',
+        baselines: [baseline],
+        components: [
+            {
+                name: targetNameFromReport(scan.report),
+                type: Copyright.ContainerImage,
+                labels: {
+                    image: `${scan.report.registry}/${scan.report.repository}:${scan.report.tag}`,
+                    registry: scan.report.registry,
+                },
+            },
+        ],
+        timestamp: new Date(),
+    });
+}
+//# sourceMappingURL=converter.js.map

package/dist/converters/neuvector-to-hdf/typescript/converter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter.js","sourceRoot":"","sources":["../../../../converters/neuvector-to-hdf/typescript/converter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EACL,SAAS,EACT,6BAA6B,GAC9B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAMzJ,OAAO,EACL,YAAY,EACZ,SAAS,EACT,qBAAqB,EACrB,iBAAiB,EACjB,YAAY,GAEb,MAAM,mBAAmB,CAAC;AA2D3B;;;GAGG;AACH,SAAS,WAAW,CAAC,WAAmB;IACtC,OAAO,aAAa,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,IAAmB;IACpC,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC,CAAC,kCAAkC;AAChD,CAAC;AAED;;GAEG;AACH,SAAS,MAAM,CAAC,IAAmB;IACjC,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;AACrE,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,IAAmB;IACpC,OAAO,sCAAsC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,eAAe,GAAG,CAAC;AAC5G,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,IAAmB;IACtC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACxB,OAAO,sBAAsB,IAAI,CAAC,YAAY,kBAAkB,IAAI,CAAC,eAAe,+BAA+B,CAAC;IACtH,CAAC;IACD,OAAO,sBAAsB,IAAI,CAAC,YAAY,kBAAkB,IAAI,CAAC,eAAe,6BAA6B,IAAI,CAAC,aAAa,GAAG,CAAC;AACzI,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,IAAmB;IAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAEhC,MAAM,IAAI,GAA4B;QACpC,IAAI;QACJ,GAAG,EAAE,OAAO;KACb,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,MAAM,YAAY,GAAkB;QAClC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE;KAC7C,CAAC;IAEF,MAAM,OAAO,GAAG;QACd,YAAY,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE;YACnD,QAAQ,EAAE,EAAE;SACb,CAAC;KACH,CAAC;IAEF,OAAO,iBAAiB,CACtB,MAAM,CAAC,IAAI,CAAC,EACZ,SAAS,CAAC,IAAI,CAAC,EACf,YAAY,EACZ,SAAS,CAAC,IAAI,CAAC,EACf,OAAO,EACP,EAAE,IAAI,EAAE,CACT,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,MAA2B;IAC7C,OAAO,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,GAAG,cAAc,MAAM,CAAC,MAAM,gBAAgB,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3H,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,MAA2B;IACvD,OAAO,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;AACjE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAa;IACvD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAEtC,MAAM,IAAI,GAAG,SAAS,CAAgB,KAAK,CAAC,CAAC;IAE7C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,eAAe,GAAa,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IAE7D,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,UAAU,CACnD,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAClC,CAAC;IACF,iEAAiE;IACjE,IAAI,SAAS,EAAE,CAAC;QACd,sCAAsC;QACtC,OAAO,CAAC,IAAI,CACV,+BAA+B,YAAY,CAAC,MAAM,mCAAmC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAC3H,CAAC;IACJ,CAAC;IAED,kEAAkE;IAClE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEtC,MAAM,QAAQ,GAAG,qBAAqB,CACpC,gBAAgB,EAChB,YAAY,EACZ;QACE,eAAe;QACf,KAAK;KACN,CACmB,CAAC;IAEvB,OAAO,eAAe,CAAC;QACrB,aAAa,EAAE,kBAAkB;QACjC,gBAAgB,EAAE,OAAO;QACzB,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,MAAM;QAClB,SAAS,EAAE,CAAC,QAAQ,CAAC;QACrB,UAAU,EAAE;YACV;gBACE,IAAI,EAAE,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC;gBACvC,IAAI,EAAE,SAAS,CAAC,cAAc;gBAC9B,MAAM,EAAE;oBACN,KAAK,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;oBAC7E,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;iBAC/B;aACF;SACF;QACD,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC,CAAC;AACL,CAAC"}

package/dist/converters/neuvector-to-hdf/typescript/fingerprint.d.ts

@@ -0,0 +1,11 @@
+/**
+ * NeuVector format fingerprint.
+ *
+ * Exports a ConverterFingerprint object (data only, no converter import).
+ * Detects NeuVector scan JSON by the presence of `report.vulnerabilities[]`
+ * where vulnerability items have `name` + `package_name`.
+ */
+import { type ConverterFingerprint } from '../../../shared/typescript/registry.js';
+export declare const neuvectorFingerprint: ConverterFingerprint;
+export declare function register(): void;
+//# sourceMappingURL=fingerprint.d.ts.map

package/dist/converters/neuvector-to-hdf/typescript/fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../../../../converters/neuvector-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAuC,KAAK,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAExH,eAAO,MAAM,oBAAoB,EAAE,oBAiBlC,CAAC;AAEF,wBAAgB,QAAQ,IAAI,IAAI,CAG/B"}

package/dist/converters/neuvector-to-hdf/typescript/fingerprint.js

@@ -0,0 +1,37 @@
+/**
+ * NeuVector format fingerprint.
+ *
+ * Exports a ConverterFingerprint object (data only, no converter import).
+ * Detects NeuVector scan JSON by the presence of `report.vulnerabilities[]`
+ * where vulnerability items have `name` + `package_name`.
+ */
+import { registerFingerprint, getFingerprint } from '../../../shared/typescript/registry.js';
+export const neuvectorFingerprint = {
+    id: 'neuvector-to-hdf',
+    label: 'NeuVector',
+    direction: 'ingest',
+    inputFamily: 'json',
+    outputType: 'results',
+    fingerprint: (input) => {
+        if (typeof input !== 'object' || input === null)
+            return 0;
+        const obj = input;
+        const report = obj.report;
+        if (!report || typeof report !== 'object')
+            return 0;
+        if (!Array.isArray(report.vulnerabilities))
+            return 0;
+        if (report.vulnerabilities.length === 0)
+            return 0.7;
+        const first = report.vulnerabilities[0];
+        if (first && typeof first.name === 'string' && typeof first.package_name === 'string')
+            return 1.0;
+        return 0.5;
+    },
+};
+export function register() {
+    if (getFingerprint('neuvector-to-hdf'))
+        return;
+    registerFingerprint(neuvectorFingerprint);
+}
+//# sourceMappingURL=fingerprint.js.map

package/dist/converters/neuvector-to-hdf/typescript/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../../../converters/neuvector-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAA6B,MAAM,wCAAwC,CAAC;AAExH,MAAM,CAAC,MAAM,oBAAoB,GAAyB;IACxD,EAAE,EAAE,kBAAkB;IACtB,KAAK,EAAE,WAAW;IAClB,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,SAAS;IACrB,WAAW,EAAE,CAAC,KAAc,EAAU,EAAE;QACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,MAA6C,CAAC;QACjE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;YAAE,OAAO,CAAC,CAAC;QACrD,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,CAAwC,CAAC;QAC/E,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC;QAClG,OAAO,GAAG,CAAC;IACb,CAAC;CACF,CAAC;AAEF,MAAM,UAAU,QAAQ;IACtB,IAAI,cAAc,CAAC,kBAAkB,CAAC;QAAE,OAAO;IAC/C,mBAAmB,CAAC,oBAAoB,CAAC,CAAC;AAC5C,CAAC"}

package/dist/converters/neuvector-to-hdf/typescript/index.d.ts

@@ -0,0 +1,2 @@
+export { convertNeuvectorToHdf } from './converter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/converters/neuvector-to-hdf/typescript/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../converters/neuvector-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/neuvector-to-hdf/typescript/index.js

@@ -0,0 +1,2 @@
+export { convertNeuvectorToHdf } from './converter.js';
+//# sourceMappingURL=index.js.map

package/dist/converters/neuvector-to-hdf/typescript/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../converters/neuvector-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/nikto-to-hdf/typescript/converter.d.ts

@@ -0,0 +1,2 @@
+export declare function convertNiktoToHdf(input: string): Promise<string>;
+//# sourceMappingURL=converter.d.ts.map

package/dist/converters/nikto-to-hdf/typescript/converter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter.d.ts","sourceRoot":"","sources":["../../../../converters/nikto-to-hdf/typescript/converter.ts"],"names":[],"mappings":"AAkFA,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAuEtE"}

package/dist/converters/nikto-to-hdf/typescript/converter.js

@@ -0,0 +1,111 @@
+import { Copyright, createMinimalBaseline, ResultStatus, } from '@mitre/hdf-schema';
+import { getNiktoNistControl, nistToCci, DEFAULT_STATIC_ANALYSIS_NIST_TAGS, } from '@mitre/hdf-mappings';
+import { parseJSON } from '@mitre/hdf-utilities';
+import { inputChecksum, buildNistCciTags, limitArray, validateInputSize, buildHdfResults } from '../../../shared/typescript/converterutil.js';
+function buildNistTags(niktoId) {
+    const control = getNiktoNistControl(niktoId);
+    if (control) {
+        return [control];
+    }
+    return [...DEFAULT_STATIC_ANALYSIS_NIST_TAGS];
+}
+function buildCodeDesc(vuln) {
+    const parts = [];
+    if (vuln.url) {
+        parts.push(`URL: ${vuln.url}`);
+    }
+    if (vuln.method) {
+        parts.push(`Method: ${vuln.method}`);
+    }
+    return parts.join(' ');
+}
+function convertVulnToRequirement(vuln) {
+    const nistTags = buildNistTags(vuln.id);
+    const cciTags = nistToCci(nistTags);
+    const result = {
+        status: ResultStatus.Failed,
+        codeDesc: buildCodeDesc(vuln),
+        startTime: new Date('0001-01-01T00:00:00Z'),
+    };
+    const extras = {};
+    if (vuln.OSVDB && vuln.OSVDB !== '0') {
+        extras.osvdb = vuln.OSVDB;
+    }
+    const tags = buildNistCciTags(nistTags, cciTags, Object.keys(extras).length > 0 ? extras : undefined);
+    return {
+        id: vuln.id,
+        title: vuln.msg,
+        impact: 0.5,
+        results: [result],
+        tags,
+        descriptions: [
+            { label: 'default', data: vuln.msg },
+        ],
+    };
+}
+export async function convertNiktoToHdf(input) {
+    validateInputSize(input, 'nikto');
+    const resultsChecksum = await inputChecksum(input);
+    const niktoData = parseJSON(input);
+    // Group vulnerabilities by ID to handle duplicates
+    const vulnGroups = new Map();
+    if (niktoData.vulnerabilities) {
+        const { items: limitedVulns, truncated: truncatedVulns } = limitArray(niktoData.vulnerabilities);
+        /* v8 ignore next -- truncation only triggers with >100K items */
+        if (truncatedVulns) {
+            // eslint-disable-next-line no-console
+            console.warn(`WARNING: Input truncated at ${limitedVulns.length} vulnerability items (original: ${niktoData.vulnerabilities.length})`);
+        }
+        for (const vuln of limitedVulns) {
+            const existing = vulnGroups.get(vuln.id);
+            if (existing) {
+                existing.push(vuln);
+            }
+            else {
+                vulnGroups.set(vuln.id, [vuln]);
+            }
+        }
+    }
+    const requirements = [];
+    for (const [, vulns] of vulnGroups) {
+        // Use first vuln for the requirement definition
+        const primary = vulns[0];
+        const req = convertVulnToRequirement(primary);
+        // Add results from duplicate IDs
+        if (vulns.length > 1) {
+            for (let i = 1; i < vulns.length; i++) {
+                req.results.push({
+                    status: ResultStatus.Failed,
+                    codeDesc: buildCodeDesc(vulns[i]),
+                    startTime: new Date('0001-01-01T00:00:00Z'),
+                });
+            }
+        }
+        requirements.push(req);
+    }
+    const targetParts = [];
+    if (niktoData.host) {
+        targetParts.push(`Host: ${niktoData.host}`);
+    }
+    if (niktoData.port) {
+        targetParts.push(`Port: ${niktoData.port}`);
+    }
+    const targetName = targetParts.length > 0 ? targetParts.join(' ') : 'Nikto Scan';
+    const baseline = createMinimalBaseline(targetName, requirements, {
+        resultsChecksum,
+        title: `Nikto Target: ${targetName}`,
+        summary: niktoData.banner || '',
+    });
+    return buildHdfResults({
+        generatorName: 'nikto-to-hdf',
+        converterVersion: 'unknown',
+        toolName: 'Nikto',
+        toolFormat: 'JSON',
+        baselines: [baseline],
+        components: [{
+                type: Copyright.Application,
+                name: targetName,
+            }],
+    });
+}
+//# sourceMappingURL=converter.js.map

package/dist/converters/nikto-to-hdf/typescript/converter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter.js","sourceRoot":"","sources":["../../../../converters/nikto-to-hdf/typescript/converter.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,SAAS,EACT,qBAAqB,EAIrB,YAAY,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,mBAAmB,EACnB,SAAS,EACT,iCAAiC,GAClC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAC,SAAS,EAAC,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAC,aAAa,EAAE,gBAAgB,EAAE,UAAU,EAAE,iBAAiB,EAAE,eAAe,EAAC,MAAM,6CAA6C,CAAC;AAoB5I,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,CAAC,GAAG,iCAAiC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,aAAa,CAAC,IAAwB;IAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAwB;IACxD,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAEpC,MAAM,MAAM,GAAsB;QAChC,MAAM,EAAE,YAAY,CAAC,MAAM;QAC3B,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC;QAC7B,SAAS,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC;KAC5C,CAAC;IAEF,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,GAAG,EAAE,CAAC;QACrC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAC5B,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEtG,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK,EAAE,IAAI,CAAC,GAAG;QACf,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,IAAI;QACJ,YAAY,EAAE;YACZ,EAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAC;SACnC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAa;IACnD,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAClC,MAAM,eAAe,GAAa,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IAE7D,MAAM,SAAS,GAAG,SAAS,CAAc,KAAK,CAAC,CAAC;IAEhD,mDAAmD;IACnD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAgC,CAAC;IAC3D,IAAI,SAAS,CAAC,eAAe,EAAE,CAAC;QAC9B,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACjG,iEAAiE;QACjE,IAAI,cAAc,EAAE,CAAC;YACnB,sCAAsC;YACtC,OAAO,CAAC,IAAI,CAAC,+BAA+B,YAAY,CAAC,MAAM,mCAAmC,SAAS,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;QACzI,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzC,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;QACnC,gDAAgD;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAE9C,iCAAiC;QACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;oBACf,MAAM,EAAE,YAAY,CAAC,MAAM;oBAC3B,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;oBAClC,SAAS,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC;iBAC5C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;QACnB,WAAW,CAAC,IAAI,CAAC,SAAS,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;QACnB,WAAW,CAAC,IAAI,CAAC,SAAS,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IAEjF,MAAM,QAAQ,GAAsB,qBAAqB,CAAC,UAAU,EAAE,YAAY,EAAE;QAClF,eAAe;QACf,KAAK,EAAE,iBAAiB,UAAU,EAAE;QACpC,OAAO,EAAE,SAAS,CAAC,MAAM,IAAI,EAAE;KAChC,CAAsB,CAAC;IAExB,OAAO,eAAe,CAAC;QACrB,aAAa,EAAE,cAAc;QAC7B,gBAAgB,EAAE,SAAS;QAC3B,QAAQ,EAAE,OAAO;QACjB,UAAU,EAAE,MAAM;QAClB,SAAS,EAAE,CAAC,QAAQ,CAAC;QACrB,UAAU,EAAE,CAAC;gBACX,IAAI,EAAE,SAAS,CAAC,WAAW;gBAC3B,IAAI,EAAE,UAAU;aACjB,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}

package/dist/converters/nikto-to-hdf/typescript/fingerprint.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Nikto format fingerprint.
+ *
+ * Detects Nikto JSON output by checking for a vulnerabilities array.
+ * Nikto outputs JSON (not XML), containing host/port/vulnerabilities fields.
+ */
+import { type ConverterFingerprint } from '../../../shared/typescript/registry.js';
+export declare const niktoFingerprint: ConverterFingerprint;
+export declare function register(): void;
+//# sourceMappingURL=fingerprint.d.ts.map

package/dist/converters/nikto-to-hdf/typescript/fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../../../../converters/nikto-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAuC,KAAK,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAExH,eAAO,MAAM,gBAAgB,EAAE,oBAiB9B,CAAC;AAEF,wBAAgB,QAAQ,IAAI,IAAI,CAG/B"}

package/dist/converters/nikto-to-hdf/typescript/fingerprint.js

@@ -0,0 +1,33 @@
+/**
+ * Nikto format fingerprint.
+ *
+ * Detects Nikto JSON output by checking for a vulnerabilities array.
+ * Nikto outputs JSON (not XML), containing host/port/vulnerabilities fields.
+ */
+import { registerFingerprint, getFingerprint } from '../../../shared/typescript/registry.js';
+export const niktoFingerprint = {
+    id: 'nikto-to-hdf',
+    label: 'Nikto',
+    direction: 'ingest',
+    inputFamily: 'json',
+    outputType: 'results',
+    fingerprint: (input) => {
+        if (typeof input !== 'object' || input === null)
+            return 0;
+        const obj = input;
+        // Nikto JSON has a "vulnerabilities" array and optionally "host", "port", "banner"
+        if (Array.isArray(obj.vulnerabilities)) {
+            // Higher confidence if host/port present (standard Nikto fields)
+            if (typeof obj.host === 'string' || typeof obj.port === 'string')
+                return 0.95;
+            return 0.85;
+        }
+        return 0;
+    },
+};
+export function register() {
+    if (getFingerprint('nikto-to-hdf'))
+        return;
+    registerFingerprint(niktoFingerprint);
+}
+//# sourceMappingURL=fingerprint.js.map

package/dist/converters/nikto-to-hdf/typescript/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../../../converters/nikto-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAA6B,MAAM,wCAAwC,CAAC;AAExH,MAAM,CAAC,MAAM,gBAAgB,GAAyB;IACpD,EAAE,EAAE,cAAc;IAClB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,SAAS;IACrB,WAAW,EAAE,CAAC,KAAc,EAAU,EAAE;QACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,mFAAmF;QACnF,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;YACvC,iEAAiE;YACjE,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC9E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;CACF,CAAC;AAEF,MAAM,UAAU,QAAQ;IACtB,IAAI,cAAc,CAAC,cAAc,CAAC;QAAE,OAAO;IAC3C,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;AACxC,CAAC"}

package/dist/converters/nikto-to-hdf/typescript/index.d.ts

@@ -0,0 +1,2 @@
+export { convertNiktoToHdf } from './converter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/converters/nikto-to-hdf/typescript/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../converters/nikto-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/nikto-to-hdf/typescript/index.js

@@ -0,0 +1,2 @@
+export { convertNiktoToHdf } from './converter.js';
+//# sourceMappingURL=index.js.map

package/dist/converters/nikto-to-hdf/typescript/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../converters/nikto-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/oscal-to-hdf/typescript/converter-catalog.d.ts

@@ -0,0 +1,20 @@
+/**
+ * OSCAL Catalog to HDF Baseline converter.
+ *
+ * Mirrors the Go implementation in converters/oscal-to-hdf/go/converter_catalog.go.
+ */
+import type { HdfBaseline } from '@mitre/hdf-schema';
+import type { Catalog } from './types.js';
+/**
+ * Converts an OSCAL Catalog document to HDF Baseline JSON.
+ *
+ * @param input - Raw JSON string containing an OSCAL catalog
+ * @returns HDF Baseline JSON string
+ */
+export declare function convertOscalCatalogToHdf(input: string): Promise<string>;
+/**
+ * Shared logic: converts a parsed Catalog to HDFBaseline.
+ * Also used by the profile converter after resolving.
+ */
+export declare function catalogToBaseline(catalog: Catalog, rawInput: string): Promise<HdfBaseline>;
+//# sourceMappingURL=converter-catalog.d.ts.map

package/dist/converters/oscal-to-hdf/typescript/converter-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter-catalog.d.ts","sourceRoot":"","sources":["../../../../converters/oscal-to-hdf/typescript/converter-catalog.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAuB,MAAM,mBAAmB,CAAC;AAE1E,OAAO,KAAK,EAAS,OAAO,EAAW,MAAM,YAAY,CAAC;AAS1D;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAgB7E;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,WAAW,CAAC,CA0DtB"}