@mitre/hdf-converters 2.13.0 → 3.0.0

package/lib/src/ionchannel-mapper.js

@@ -1,311 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.IonChannelMapper = exports.IonChannelAPIMapper = void 0;
-const axios_1 = __importDefault(require("axios"));
-const _ = __importStar(require("lodash"));
-const package_json_1 = require("../package.json");
-const base_converter_1 = require("./base-converter");
-const global_1 = require("./utils/global");
-// Extracts all levels of dependencies from any dependency (including sub-dependencies)
-function extractAllDependencies(dependency) {
-    const result = [];
-    result.push({
-        ...dependency,
-        parentDependencies: []
-    });
-    if (Array.isArray(dependency.dependencies)) {
-        dependency.dependencies.forEach((subDependency) => {
-            result.push(...extractAllDependencies(subDependency));
-        });
-    }
-    return result;
-}
-function preprocessIonChannelData(ionchannelData) {
-    const result = {
-        metadata: {},
-        scans: {
-            vulnerability: [], // Not Implemented yet
-            dependency: {
-                dependencies: [],
-                contextualizedDependencies: [] // Dependencies with their parent info
-            },
-            ecosystems: [], // Not Implemented yet
-            community: [], // Not Implemented yet
-            buildsystems: [], // Not Implemented yet
-            virus: [], // Not Implemented yet
-            license: [], // Not Implemented yet
-            difference: [], // Not Implemented yet
-            about_yml: [] // Not Implemented yet
-        }
-    };
-    const parsed = JSON.parse(ionchannelData);
-    const scanSummaries = _.get(parsed, 'scan_summaries');
-    result.metadata = _.omit(parsed, 'scan_summaries');
-    if (!Array.isArray(scanSummaries)) {
-        throw new Error(`Ion Channel scan_summaries invalid summary data (expecting array, got ${typeof scanSummaries})`);
-    }
-    scanSummaries.forEach((scanSummary) => {
-        switch (scanSummary.name) {
-            case 'dependency':
-                if (!scanSummary.results.data.dependencies) {
-                    throw new Error('Dependency scan contains no dependencies array');
-                }
-                result.scans.dependency.dependencies =
-                    scanSummary.results.data.dependencies;
-                break;
-            // We only care about dependencies at the moment
-            default:
-                break;
-        }
-    });
-    const dependencyGraph = {};
-    // Flatten dependency tree
-    result.scans.dependency.dependencies.forEach((topLevelDependency) => {
-        const flatDependencies = extractAllDependencies(topLevelDependency);
-        flatDependencies.forEach((dependency) => {
-            dependencyGraph[`${dependency.org}/${dependency.name}`] = dependency;
-        });
-    });
-    // Associate dependencies with each-other
-    Object.entries(dependencyGraph).forEach(([, dependency]) => {
-        if (Array.isArray(dependency.dependencies)) {
-            dependency.dependencies.forEach((subDependency) => {
-                dependencyGraph[`${subDependency.org}/${subDependency.name}`].parentDependencies.push(`${dependency.org}/${dependency.name}`);
-            });
-        }
-    });
-    Object.entries(dependencyGraph).forEach(([, dependency]) => {
-        result.scans.dependency.contextualizedDependencies.push(dependency);
-    });
-    return result;
-}
-class IonChannelAPIMapper {
-    apiKey;
-    projectId;
-    teamId;
-    analysisId;
-    apiClient;
-    constructor(apiKey, projectId, teamId, analysisId) {
-        this.apiKey = apiKey;
-        this.projectId = projectId;
-        this.teamId = teamId;
-        this.analysisId = analysisId;
-        this.apiClient = axios_1.default.create();
-        this.apiClient.defaults.headers.common['Authorization'] =
-            `Bearer ${this.apiKey}`;
-        this.apiClient.defaults.headers.common['Accept'] =
-            'application/json, text/plain, */*';
-    }
-    async toHdf() {
-        const analysis = await this.getAnalysis();
-        const mapper = new IonChannelMapper(JSON.stringify(analysis.analysis));
-        return mapper.toHdf();
-    }
-    async setTeam(teamName) {
-        const availableTeams = await this.getTeams();
-        const foundTeam = availableTeams.find((team) => team.name.toLowerCase() === teamName.toLowerCase());
-        if (!foundTeam) {
-            throw new Error(`Team ${teamName} not found in available teams: ${availableTeams
-                .map((team) => team.name)
-                .join(', ')}`);
-        }
-        this.teamId = foundTeam.id;
-    }
-    async getTeams() {
-        if (!this.apiKey) {
-            throw new Error('No API-Key Set');
-        }
-        return this.apiClient
-            .get('https://api.ionchannel.io/v1/teams/getTeams')
-            .then(({ data }) => data.data);
-    }
-    async setProject(projectName) {
-        const availableProjects = await this.getProjects();
-        const foundProject = availableProjects.find((project) => project.name.toLowerCase() === projectName.toLowerCase());
-        if (!foundProject) {
-            throw new Error(`Project ${projectName} not found in available projects: ${availableProjects
-                .map((project) => project.name)
-                .join(', ')}`);
-        }
-        this.projectId = foundProject.id;
-        this.analysisId = foundProject.analysis_summary.analysis_id;
-    }
-    async getProjects() {
-        if (!this.apiKey) {
-            throw new Error('No API-Key Defined');
-        }
-        if (!this.teamId) {
-            throw new Error('No Team ID Defined');
-        }
-        return this.apiClient
-            .get('https://api.ionchannel.io/v1/report/getProjects', {
-            params: {
-                team_id: this.teamId
-            }
-        })
-            .then(({ data }) => data.data);
-    }
-    async getAnalysis() {
-        if (!this.apiKey) {
-            throw new Error('No API-Key Defined');
-        }
-        if (!this.projectId) {
-            throw new Error('No Project ID Defined');
-        }
-        if (!this.teamId) {
-            throw new Error('No Team ID Defined');
-        }
-        if (!this.analysisId) {
-            throw new Error('No Analysis ID Defined');
-        }
-        return this.apiClient
-            .get('https://api.ionchannel.io/v1/report/getAnalysis', {
-            params: {
-                project_id: this.projectId,
-                team_id: this.teamId,
-                analysis_id: this.analysisId
-            }
-        })
-            .then(({ data }) => data.data);
-    }
-}
-exports.IonChannelAPIMapper = IonChannelAPIMapper;
-class IonChannelMapper extends base_converter_1.BaseConverter {
-    mappings = {
-        platform: {
-            name: 'Heimdall Tools',
-            release: package_json_1.version,
-            target_id: { path: 'metadata.project_id' }
-        },
-        passthrough: {
-            ionchannel_metadata: {
-                path: 'metadata'
-            }
-        },
-        version: package_json_1.version,
-        statistics: {
-            duration: null
-        },
-        profiles: [
-            {
-                name: 'IonChannel SBOM Analysis',
-                version: '',
-                title: {
-                    path: 'metadata.source',
-                    transformer: (source) => `IonChannel Analysis of ${source}`
-                },
-                maintainer: 'saf@groups.mitre.org',
-                summary: '',
-                license: null,
-                copyright: null,
-                copyright_email: null,
-                supports: [],
-                attributes: [],
-                depends: [],
-                groups: [],
-                status: 'loaded',
-                controls: [
-                    {
-                        path: 'scans.dependency.contextualizedDependencies',
-                        key: 'id',
-                        tags: {
-                            transformer: (dependency) => {
-                                return Array.isArray(dependency.dependencies)
-                                    ? {
-                                        ..._.omit(dependency, 'dependencies'),
-                                        nist: global_1.DEFAULT_INFORMATION_SYSTEM_COMPONENT_MANAGEMENT_NIST_TAGS,
-                                        cci: (0, global_1.getCCIsForNISTTags)(global_1.DEFAULT_INFORMATION_SYSTEM_COMPONENT_MANAGEMENT_NIST_TAGS),
-                                        dependencies: dependency.dependencies.map((subDependency) => `${subDependency.name}`)
-                                    }
-                                    : {
-                                        ..._.omit(dependency, 'dependencies'),
-                                        nist: global_1.DEFAULT_INFORMATION_SYSTEM_COMPONENT_MANAGEMENT_NIST_TAGS,
-                                        cci: (0, global_1.getCCIsForNISTTags)(global_1.DEFAULT_INFORMATION_SYSTEM_COMPONENT_MANAGEMENT_NIST_TAGS)
-                                    };
-                            }
-                        },
-                        descriptions: [],
-                        refs: [],
-                        source_location: {},
-                        title: {
-                            transformer: (dependency) => {
-                                // Specific to Python requirements, commonly called requirements.txt or requirements_dev.txt
-                                if (dependency.type === 'pypi' &&
-                                    dependency.package === 'egg' &&
-                                    dependency.name === '-e') {
-                                    return `Python requirements file ${dependency.file}`;
-                                }
-                                let title = `Dependency ${dependency.name} `;
-                                if (dependency.org && dependency.org.toLowerCase() !== 'n/a') {
-                                    title += `from ${dependency.org} `;
-                                }
-                                if (dependency.version &&
-                                    dependency.version.toLowerCase() !== 'n/a') {
-                                    title += `@ ${dependency.version} `;
-                                }
-                                if (dependency.requirement &&
-                                    dependency.requirement.toLowerCase() !== 'n/a') {
-                                    title += `(Required ${dependency.requirement}) `;
-                                }
-                                return title.trim();
-                            }
-                        },
-                        id: {
-                            transformer: (dependency) => {
-                                return `dependency-${dependency.org}/${dependency.name}`;
-                            }
-                        },
-                        desc: '',
-                        impact: 0.0,
-                        code: {
-                            transformer: (dependency) => JSON.stringify(dependency, null, 2)
-                        },
-                        results: []
-                    }
-                ],
-                sha256: ''
-            }
-        ]
-    };
-    constructor(ionchannelJson) {
-        super(preprocessIonChannelData(ionchannelJson));
-    }
-}
-exports.IonChannelMapper = IonChannelMapper;
-//# sourceMappingURL=ionchannel-mapper.js.map

package/lib/src/ionchannel-mapper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ionchannel-mapper.js","sourceRoot":"","sources":["../../src/ionchannel-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kDAA2C;AAE3C,0CAA4B;AAC5B,kDAAgE;AAShE,qDAA6E;AAC7E,2CAGwB;AAExB,uFAAuF;AACvF,SAAS,sBAAsB,CAC7B,UAAsB;IAEtB,MAAM,MAAM,GAA+B,EAAE,CAAC;IAC9C,MAAM,CAAC,IAAI,CAAC;QACV,GAAG,UAAU;QACb,kBAAkB,EAAE,EAAE;KACvB,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3C,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,EAAE;YAChD,MAAM,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,aAAa,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,wBAAwB,CAAC,cAAsB;IACtD,MAAM,MAAM,GAAG;QACb,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE;YACL,aAAa,EAAE,EAAE,EAAE,sBAAsB;YACzC,UAAU,EAAE;gBACV,YAAY,EAAE,EAAkB;gBAChC,0BAA0B,EAAE,EAAgC,CAAC,sCAAsC;aACpG;YACD,UAAU,EAAE,EAAE,EAAE,sBAAsB;YACtC,SAAS,EAAE,EAAE,EAAE,sBAAsB;YACrC,YAAY,EAAE,EAAE,EAAE,sBAAsB;YACxC,KAAK,EAAE,EAAE,EAAE,sBAAsB;YACjC,OAAO,EAAE,EAAE,EAAE,sBAAsB;YACnC,UAAU,EAAE,EAAE,EAAE,sBAAsB;YACtC,SAAS,EAAE,EAAE,CAAC,sBAAsB;SACrC;KACF,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAEtD,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAEnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,yEAAyE,OAAO,aAAa,GAAG,CACjG,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,OAAO,CAAC,CAAC,WAAwB,EAAE,EAAE;QACjD,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC;YACzB,KAAK,YAAY;gBACf,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;oBAC3C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;gBACpE,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY;oBAClC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;gBACxC,MAAM;YACR,gDAAgD;YAChD;gBACE,MAAM;QACV,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,eAAe,GAA6C,EAAE,CAAC;IAErE,0BAA0B;IAC1B,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,kBAAkB,EAAE,EAAE;QAClE,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,kBAAkB,CAAC,CAAC;QACpE,gBAAgB,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;YACtC,eAAe,CAAC,GAAG,UAAU,CAAC,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,GAAG,UAAU,CAAC;QACvE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,yCAAyC;IACzC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,EAAE;QACzD,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC3C,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,EAAE;gBAChD,eAAe,CACb,GAAG,aAAa,CAAC,GAAG,IAAI,aAAa,CAAC,IAAI,EAAE,CAC7C,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;YACpE,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,EAAE;QACzD,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAa,mBAAmB;IAC9B,MAAM,CAAS;IACf,SAAS,CAAU;IACnB,MAAM,CAAU;IAChB,UAAU,CAAU;IAEpB,SAAS,CAAgB;IAEzB,YACE,MAAc,EACd,SAAkB,EAClB,MAAe,EACf,UAAmB;QAEnB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAE7B,IAAI,CAAC,SAAS,GAAG,eAAK,CAAC,MAAM,EAAE,CAAC;QAChC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;YACrD,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC9C,mCAAmC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvE,OAAO,MAAM,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAgB;QAC5B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CACnC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,CAC7D,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,QAAQ,QAAQ,kCAAkC,cAAc;iBAC7D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;iBACxB,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,IAAI,CAAC,SAAS;aAClB,GAAG,CAAC,6CAA6C,CAAC;aAClD,IAAI,CAAC,CAAC,EAAC,IAAI,EAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB;QAClC,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CACzC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,CACtE,CAAC;QACF,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACb,WAAW,WAAW,qCAAqC,iBAAiB;iBACzE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;iBAC9B,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,YAAY,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,YAAY,CAAC,gBAAgB,CAAC,WAAW,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,IAAI,CAAC,SAAS;aAClB,GAAG,CAAC,iDAAiD,EAAE;YACtD,MAAM,EAAE;gBACN,OAAO,EAAE,IAAI,CAAC,MAAM;aACrB;SACF,CAAC;aACD,IAAI,CAAC,CAAC,EAAC,IAAI,EAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,IAAI,CAAC,SAAS;aAClB,GAAG,CAAC,iDAAiD,EAAE;YACtD,MAAM,EAAE;gBACN,UAAU,EAAE,IAAI,CAAC,SAAS;gBAC1B,OAAO,EAAE,IAAI,CAAC,MAAM;gBACpB,WAAW,EAAE,IAAI,CAAC,UAAU;aAC7B;SACF,CAAC;aACD,IAAI,CAAC,CAAC,EAAC,IAAI,EAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;CACF;AA/GD,kDA+GC;AAED,MAAa,gBAAiB,SAAQ,8BAAa;IACjD,QAAQ,GAGJ;QACF,QAAQ,EAAE;YACR,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,sBAAoB;YAC7B,SAAS,EAAE,EAAC,IAAI,EAAE,qBAAqB,EAAC;SACzC;QACD,WAAW,EAAE;YACX,mBAAmB,EAAE;gBACnB,IAAI,EAAE,UAAU;aACjB;SACF;QACD,OAAO,EAAE,sBAAoB;QAC7B,UAAU,EAAE;YACV,QAAQ,EAAE,IAAI;SACf;QACD,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,EAAE;gBACX,KAAK,EAAE;oBACL,IAAI,EAAE,iBAAiB;oBACvB,WAAW,EAAE,CAAC,MAAe,EAAE,EAAE,CAAC,0BAA0B,MAAM,EAAE;iBACrE;gBACD,UAAU,EAAE,sBAAsB;gBAClC,OAAO,EAAE,EAAE;gBACX,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI;gBACf,eAAe,EAAE,IAAI;gBACrB,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,EAAE;gBACX,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,6CAA6C;wBACnD,GAAG,EAAE,IAAI;wBACT,IAAI,EAAE;4BACJ,WAAW,EAAE,CAAC,UAAsB,EAAE,EAAE;gCACtC,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC;oCAC3C,CAAC,CAAC;wCACE,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC;wCACrC,IAAI,EAAE,kEAAyD;wCAC/D,GAAG,EAAE,IAAA,2BAAkB,EACrB,kEAAyD,CAC1D;wCACD,YAAY,EAAE,UAAU,CAAC,YAAY,CAAC,GAAG,CACvC,CAAC,aAAa,EAAE,EAAE,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,CAC3C;qCACF;oCACH,CAAC,CAAC;wCACE,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC;wCACrC,IAAI,EAAE,kEAAyD;wCAC/D,GAAG,EAAE,IAAA,2BAAkB,EACrB,kEAAyD,CAC1D;qCACF,CAAC;4BACR,CAAC;yBACF;wBACD,YAAY,EAAE,EAAE;wBAChB,IAAI,EAAE,EAAE;wBACR,eAAe,EAAE,EAAE;wBACnB,KAAK,EAAE;4BACL,WAAW,EAAE,CAAC,UAAsB,EAAE,EAAE;gCACtC,4FAA4F;gCAC5F,IACE,UAAU,CAAC,IAAI,KAAK,MAAM;oCAC1B,UAAU,CAAC,OAAO,KAAK,KAAK;oCAC5B,UAAU,CAAC,IAAI,KAAK,IAAI,EACxB,CAAC;oCACD,OAAO,4BAA4B,UAAU,CAAC,IAAI,EAAE,CAAC;gCACvD,CAAC;gCAED,IAAI,KAAK,GAAG,cAAc,UAAU,CAAC,IAAI,GAAG,CAAC;gCAC7C,IAAI,UAAU,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;oCAC7D,KAAK,IAAI,QAAQ,UAAU,CAAC,GAAG,GAAG,CAAC;gCACrC,CAAC;gCACD,IACE,UAAU,CAAC,OAAO;oCAClB,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,KAAK,EAC1C,CAAC;oCACD,KAAK,IAAI,KAAK,UAAU,CAAC,OAAO,GAAG,CAAC;gCACtC,CAAC;gCACD,IACE,UAAU,CAAC,WAAW;oCACtB,UAAU,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,KAAK,EAC9C,CAAC;oCACD,KAAK,IAAI,aAAa,UAAU,CAAC,WAAW,IAAI,CAAC;gCACnD,CAAC;gCACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;4BACtB,CAAC;yBACF;wBACD,EAAE,EAAE;4BACF,WAAW,EAAE,CAAC,UAAoC,EAAE,EAAE;gCACpD,OAAO,cAAc,UAAU,CAAC,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;4BAC3D,CAAC;yBACF;wBACD,IAAI,EAAE,EAAE;wBACR,MAAM,EAAE,GAAG;wBACX,IAAI,EAAE;4BACJ,WAAW,EAAE,CAAC,UAAsB,EAAE,EAAE,CACtC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;yBACtC;wBACD,OAAO,EAAE,EAAE;qBACZ;iBACF;gBACD,MAAM,EAAE,EAAE;aACX;SACF;KACF,CAAC;IAEF,YAAY,cAAsB;QAChC,KAAK,CAAC,wBAAwB,CAAC,cAAc,CAAC,CAAC,CAAC;IAClD,CAAC;CACF;AAtHD,4CAsHC","sourcesContent":["import axios, {AxiosInstance} from 'axios';\nimport {ExecJSON} from 'inspecjs';\nimport * as _ from 'lodash';\nimport {version as HeimdallToolsVersion} from '../package.json';\nimport {\n  ContextualizedDependency,\n  Dependency,\n  IonChannelAnalysisResponse,\n  ScanSummary\n} from '../types/ionchannelAnalysis';\nimport {Project} from '../types/ionchannelProjects';\nimport {Team} from '../types/ionchannelTeams';\nimport {BaseConverter, ILookupPath, MappedTransform} from './base-converter';\nimport {\n  DEFAULT_INFORMATION_SYSTEM_COMPONENT_MANAGEMENT_NIST_TAGS,\n  getCCIsForNISTTags\n} from './utils/global';\n\n// Extracts all levels of dependencies from any dependency (including sub-dependencies)\nfunction extractAllDependencies(\n  dependency: Dependency\n): ContextualizedDependency[] {\n  const result: ContextualizedDependency[] = [];\n  result.push({\n    ...dependency,\n    parentDependencies: []\n  });\n  if (Array.isArray(dependency.dependencies)) {\n    dependency.dependencies.forEach((subDependency) => {\n      result.push(...extractAllDependencies(subDependency));\n    });\n  }\n\n  return result;\n}\n\nfunction preprocessIonChannelData(ionchannelData: string) {\n  const result = {\n    metadata: {},\n    scans: {\n      vulnerability: [], // Not Implemented yet\n      dependency: {\n        dependencies: [] as Dependency[],\n        contextualizedDependencies: [] as ContextualizedDependency[] // Dependencies with their parent info\n      },\n      ecosystems: [], // Not Implemented yet\n      community: [], // Not Implemented yet\n      buildsystems: [], // Not Implemented yet\n      virus: [], // Not Implemented yet\n      license: [], // Not Implemented yet\n      difference: [], // Not Implemented yet\n      about_yml: [] // Not Implemented yet\n    }\n  };\n  const parsed = JSON.parse(ionchannelData);\n  const scanSummaries = _.get(parsed, 'scan_summaries');\n\n  result.metadata = _.omit(parsed, 'scan_summaries');\n\n  if (!Array.isArray(scanSummaries)) {\n    throw new Error(\n      `Ion Channel scan_summaries invalid summary data (expecting array, got ${typeof scanSummaries})`\n    );\n  }\n\n  scanSummaries.forEach((scanSummary: ScanSummary) => {\n    switch (scanSummary.name) {\n      case 'dependency':\n        if (!scanSummary.results.data.dependencies) {\n          throw new Error('Dependency scan contains no dependencies array');\n        }\n        result.scans.dependency.dependencies =\n          scanSummary.results.data.dependencies;\n        break;\n      // We only care about dependencies at the moment\n      default:\n        break;\n    }\n  });\n\n  const dependencyGraph: Record<string, ContextualizedDependency> = {};\n\n  // Flatten dependency tree\n  result.scans.dependency.dependencies.forEach((topLevelDependency) => {\n    const flatDependencies = extractAllDependencies(topLevelDependency);\n    flatDependencies.forEach((dependency) => {\n      dependencyGraph[`${dependency.org}/${dependency.name}`] = dependency;\n    });\n  });\n\n  // Associate dependencies with each-other\n  Object.entries(dependencyGraph).forEach(([, dependency]) => {\n    if (Array.isArray(dependency.dependencies)) {\n      dependency.dependencies.forEach((subDependency) => {\n        dependencyGraph[\n          `${subDependency.org}/${subDependency.name}`\n        ].parentDependencies.push(`${dependency.org}/${dependency.name}`);\n      });\n    }\n  });\n\n  Object.entries(dependencyGraph).forEach(([, dependency]) => {\n    result.scans.dependency.contextualizedDependencies.push(dependency);\n  });\n\n  return result;\n}\n\nexport class IonChannelAPIMapper {\n  apiKey: string;\n  projectId?: string;\n  teamId?: string;\n  analysisId?: string;\n\n  apiClient: AxiosInstance;\n\n  constructor(\n    apiKey: string,\n    projectId?: string,\n    teamId?: string,\n    analysisId?: string\n  ) {\n    this.apiKey = apiKey;\n    this.projectId = projectId;\n    this.teamId = teamId;\n    this.analysisId = analysisId;\n\n    this.apiClient = axios.create();\n    this.apiClient.defaults.headers.common['Authorization'] =\n      `Bearer ${this.apiKey}`;\n    this.apiClient.defaults.headers.common['Accept'] =\n      'application/json, text/plain, */*';\n  }\n\n  async toHdf(): Promise<ExecJSON.Execution> {\n    const analysis = await this.getAnalysis();\n    const mapper = new IonChannelMapper(JSON.stringify(analysis.analysis));\n    return mapper.toHdf();\n  }\n\n  async setTeam(teamName: string) {\n    const availableTeams = await this.getTeams();\n    const foundTeam = availableTeams.find(\n      (team) => team.name.toLowerCase() === teamName.toLowerCase()\n    );\n    if (!foundTeam) {\n      throw new Error(\n        `Team ${teamName} not found in available teams: ${availableTeams\n          .map((team) => team.name)\n          .join(', ')}`\n      );\n    }\n    this.teamId = foundTeam.id;\n  }\n\n  async getTeams(): Promise<Team[]> {\n    if (!this.apiKey) {\n      throw new Error('No API-Key Set');\n    }\n    return this.apiClient\n      .get('https://api.ionchannel.io/v1/teams/getTeams')\n      .then(({data}) => data.data);\n  }\n\n  async setProject(projectName: string) {\n    const availableProjects = await this.getProjects();\n    const foundProject = availableProjects.find(\n      (project) => project.name.toLowerCase() === projectName.toLowerCase()\n    );\n    if (!foundProject) {\n      throw new Error(\n        `Project ${projectName} not found in available projects: ${availableProjects\n          .map((project) => project.name)\n          .join(', ')}`\n      );\n    }\n    this.projectId = foundProject.id;\n    this.analysisId = foundProject.analysis_summary.analysis_id;\n  }\n\n  async getProjects(): Promise<Project[]> {\n    if (!this.apiKey) {\n      throw new Error('No API-Key Defined');\n    }\n    if (!this.teamId) {\n      throw new Error('No Team ID Defined');\n    }\n    return this.apiClient\n      .get('https://api.ionchannel.io/v1/report/getProjects', {\n        params: {\n          team_id: this.teamId\n        }\n      })\n      .then(({data}) => data.data);\n  }\n\n  async getAnalysis(): Promise<IonChannelAnalysisResponse> {\n    if (!this.apiKey) {\n      throw new Error('No API-Key Defined');\n    }\n    if (!this.projectId) {\n      throw new Error('No Project ID Defined');\n    }\n    if (!this.teamId) {\n      throw new Error('No Team ID Defined');\n    }\n    if (!this.analysisId) {\n      throw new Error('No Analysis ID Defined');\n    }\n    return this.apiClient\n      .get('https://api.ionchannel.io/v1/report/getAnalysis', {\n        params: {\n          project_id: this.projectId,\n          team_id: this.teamId,\n          analysis_id: this.analysisId\n        }\n      })\n      .then(({data}) => data.data);\n  }\n}\n\nexport class IonChannelMapper extends BaseConverter {\n  mappings: MappedTransform<\n    ExecJSON.Execution & {passthrough: unknown},\n    ILookupPath\n  > = {\n    platform: {\n      name: 'Heimdall Tools',\n      release: HeimdallToolsVersion,\n      target_id: {path: 'metadata.project_id'}\n    },\n    passthrough: {\n      ionchannel_metadata: {\n        path: 'metadata'\n      }\n    },\n    version: HeimdallToolsVersion,\n    statistics: {\n      duration: null\n    },\n    profiles: [\n      {\n        name: 'IonChannel SBOM Analysis',\n        version: '',\n        title: {\n          path: 'metadata.source',\n          transformer: (source?: string) => `IonChannel Analysis of ${source}`\n        },\n        maintainer: 'saf@groups.mitre.org',\n        summary: '',\n        license: null,\n        copyright: null,\n        copyright_email: null,\n        supports: [],\n        attributes: [],\n        depends: [],\n        groups: [],\n        status: 'loaded',\n        controls: [\n          {\n            path: 'scans.dependency.contextualizedDependencies',\n            key: 'id',\n            tags: {\n              transformer: (dependency: Dependency) => {\n                return Array.isArray(dependency.dependencies)\n                  ? {\n                      ..._.omit(dependency, 'dependencies'),\n                      nist: DEFAULT_INFORMATION_SYSTEM_COMPONENT_MANAGEMENT_NIST_TAGS,\n                      cci: getCCIsForNISTTags(\n                        DEFAULT_INFORMATION_SYSTEM_COMPONENT_MANAGEMENT_NIST_TAGS\n                      ),\n                      dependencies: dependency.dependencies.map(\n                        (subDependency) => `${subDependency.name}`\n                      )\n                    }\n                  : {\n                      ..._.omit(dependency, 'dependencies'),\n                      nist: DEFAULT_INFORMATION_SYSTEM_COMPONENT_MANAGEMENT_NIST_TAGS,\n                      cci: getCCIsForNISTTags(\n                        DEFAULT_INFORMATION_SYSTEM_COMPONENT_MANAGEMENT_NIST_TAGS\n                      )\n                    };\n              }\n            },\n            descriptions: [],\n            refs: [],\n            source_location: {},\n            title: {\n              transformer: (dependency: Dependency) => {\n                // Specific to Python requirements, commonly called requirements.txt or requirements_dev.txt\n                if (\n                  dependency.type === 'pypi' &&\n                  dependency.package === 'egg' &&\n                  dependency.name === '-e'\n                ) {\n                  return `Python requirements file ${dependency.file}`;\n                }\n\n                let title = `Dependency ${dependency.name} `;\n                if (dependency.org && dependency.org.toLowerCase() !== 'n/a') {\n                  title += `from ${dependency.org} `;\n                }\n                if (\n                  dependency.version &&\n                  dependency.version.toLowerCase() !== 'n/a'\n                ) {\n                  title += `@ ${dependency.version} `;\n                }\n                if (\n                  dependency.requirement &&\n                  dependency.requirement.toLowerCase() !== 'n/a'\n                ) {\n                  title += `(Required ${dependency.requirement}) `;\n                }\n                return title.trim();\n              }\n            },\n            id: {\n              transformer: (dependency: ContextualizedDependency) => {\n                return `dependency-${dependency.org}/${dependency.name}`;\n              }\n            },\n            desc: '',\n            impact: 0.0,\n            code: {\n              transformer: (dependency: Dependency) =>\n                JSON.stringify(dependency, null, 2)\n            },\n            results: []\n          }\n        ],\n        sha256: ''\n      }\n    ]\n  };\n\n  constructor(ionchannelJson: string) {\n    super(preprocessIonChannelData(ionchannelJson));\n  }\n}\n"]}

package/lib/src/jfrog-xray-mapper.d.ts

@@ -1,10 +0,0 @@
-import { ExecJSON } from 'inspecjs';
-import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
-export declare class JfrogXrayMapper extends BaseConverter {
-    withRaw: boolean;
-    mappings: MappedTransform<ExecJSON.Execution & {
-        passthrough: unknown;
-    }, ILookupPath>;
-    constructor(xrayJson: string, withRaw?: boolean);
-}
-//# sourceMappingURL=jfrog-xray-mapper.d.ts.map

package/lib/src/jfrog-xray-mapper.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"jfrog-xray-mapper.d.ts","sourceRoot":"","sources":["../../src/jfrog-xray-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,EAAC,MAAM,UAAU,CAAC;AAGlC,OAAO,EACL,aAAa,EAEb,WAAW,EAEX,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAuG1B,qBAAa,eAAgB,SAAQ,aAAa;IAChD,OAAO,EAAE,OAAO,CAAC;IAEjB,QAAQ,EAAE,eAAe,CACvB,QAAQ,CAAC,SAAS,GAAG;QAAC,WAAW,EAAE,OAAO,CAAA;KAAC,EAC3C,WAAW,CACZ,CA0EC;gBACU,QAAQ,EAAE,MAAM,EAAE,OAAO,UAAQ;CAI9C"}

package/lib/src/jfrog-xray-mapper.js

@@ -1,203 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.JfrogXrayMapper = void 0;
-const inspecjs_1 = require("inspecjs");
-const _ = __importStar(require("lodash"));
-const package_json_1 = require("../package.json");
-const base_converter_1 = require("./base-converter");
-const CweNistMapping_1 = require("./mappings/CweNistMapping");
-const global_1 = require("./utils/global");
-// Constants
-const IMPACT_MAPPING = new Map([
-    ['high', 0.7],
-    ['medium', 0.5],
-    ['low', 0.3]
-]);
-const CWE_PATH = 'component_versions.more_details.cves[0].cwe';
-const CWE_NIST_MAPPING = new CweNistMapping_1.CweNistMapping();
-// Transformation Functions
-function hashId(vulnerability) {
-    if (_.get(vulnerability, 'id') === '') {
-        return (0, base_converter_1.generateHash)(_.get(vulnerability, 'summary').toString(), 'md5');
-    }
-    else {
-        return _.get(vulnerability, 'id');
-    }
-}
-function formatDesc(vulnerability) {
-    const text = [];
-    if (_.has(vulnerability, 'description')) {
-        text.push(_.get(vulnerability, 'description').toString());
-    }
-    if (_.has(vulnerability, 'cves')) {
-        const re1 = /":/gi;
-        const re2 = /,/gi;
-        text.push(`cves: ${JSON.stringify(_.get(vulnerability, 'cves'))
-            .replace(re1, '"=>')
-            .replace(re2, ', ')}`);
-    }
-    return text.join('<br>');
-}
-function formatCodeDesc(vulnerability) {
-    const codeDescArray = [];
-    const re = /,/gi;
-    if (_.has(vulnerability, 'source_comp_id')) {
-        codeDescArray.push(`source_comp_id : ${_.get(vulnerability, 'source_comp_id')}`);
-    }
-    else {
-        codeDescArray.push('source_comp_id : ');
-    }
-    if (_.has(vulnerability, 'component_versions.vulnerable_versions')) {
-        codeDescArray.push(`vulnerable_versions : ${JSON.stringify(_.get(vulnerability, 'component_versions.vulnerable_versions'))}`);
-    }
-    else {
-        codeDescArray.push('vulnerable_versions : ');
-    }
-    if (_.has(vulnerability, 'component_versions.fixed_versions')) {
-        codeDescArray.push(`fixed_versions : ${JSON.stringify(_.get(vulnerability, 'component_versions.fixed_versions'))}`);
-    }
-    else {
-        codeDescArray.push('fixed_versions : ');
-    }
-    if (_.has(vulnerability, 'issue_type')) {
-        codeDescArray.push(`issue_type : ${_.get(vulnerability, 'issue_type')}`);
-    }
-    else {
-        codeDescArray.push('issue_type : ');
-    }
-    if (_.has(vulnerability, 'provider')) {
-        codeDescArray.push(`provider : ${_.get(vulnerability, 'provider')}`);
-    }
-    else {
-        codeDescArray.push('provider : ');
-    }
-    return codeDescArray.join('\n').replace(re, ', ');
-}
-function nistTag(identifier) {
-    const identifiers = [];
-    if (Array.isArray(identifier)) {
-        identifier.forEach((element) => {
-            if (element.split('CWE-')[1]) {
-                identifiers.push(element.split('CWE-')[1]);
-            }
-        });
-    }
-    return CWE_NIST_MAPPING.nistFilter(identifiers, global_1.DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS);
-}
-// Mappings
-class JfrogXrayMapper extends base_converter_1.BaseConverter {
-    withRaw;
-    mappings = {
-        platform: {
-            name: 'Heimdall Tools',
-            release: package_json_1.version
-        },
-        version: package_json_1.version,
-        statistics: {},
-        profiles: [
-            {
-                name: 'JFrog Xray Scan',
-                title: 'JFrog Xray Scan',
-                summary: 'Continuous Security and Universal Artifact Analysis',
-                supports: [],
-                attributes: [],
-                groups: [],
-                status: 'loaded',
-                controls: [
-                    {
-                        path: 'data',
-                        key: 'id',
-                        tags: {
-                            cci: {
-                                path: CWE_PATH,
-                                transformer: (identifier) => (0, global_1.getCCIsForNISTTags)(nistTag(identifier))
-                            },
-                            nist: {
-                                path: CWE_PATH,
-                                transformer: nistTag
-                            },
-                            cweid: { path: CWE_PATH }
-                        },
-                        refs: [],
-                        source_location: {},
-                        id: { transformer: hashId },
-                        title: { path: 'summary' },
-                        desc: {
-                            path: 'component_versions.more_details',
-                            transformer: formatDesc
-                        },
-                        impact: {
-                            path: 'severity',
-                            transformer: (0, base_converter_1.impactMapping)(IMPACT_MAPPING)
-                        },
-                        code: {
-                            transformer: (vulnerability) => {
-                                return JSON.stringify(vulnerability, null, 2);
-                            }
-                        },
-                        results: [
-                            {
-                                status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
-                                code_desc: { transformer: formatCodeDesc },
-                                start_time: ''
-                            }
-                        ]
-                    }
-                ],
-                sha256: ''
-            }
-        ],
-        passthrough: {
-            transformer: (data) => {
-                return {
-                    auxiliary_data: [
-                        {
-                            name: 'JFrog Xray',
-                            data: _.pick(data, ['total_count'])
-                        }
-                    ],
-                    ...(this.withRaw && { raw: data })
-                };
-            }
-        }
-    };
-    constructor(xrayJson, withRaw = false) {
-        super(JSON.parse(xrayJson), true);
-        this.withRaw = withRaw;
-    }
-}
-exports.JfrogXrayMapper = JfrogXrayMapper;
-//# sourceMappingURL=jfrog-xray-mapper.js.map

package/lib/src/jfrog-xray-mapper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"jfrog-xray-mapper.js","sourceRoot":"","sources":["../../src/jfrog-xray-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAM0B;AAC1B,8DAAyD;AACzD,2CAGwB;AAExB,YAAY;AACZ,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,QAAQ,EAAE,GAAG,CAAC;IACf,CAAC,KAAK,EAAE,GAAG,CAAC;CACb,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,6CAA6C,CAAC;AAE/D,MAAM,gBAAgB,GAAG,IAAI,+BAAc,EAAE,CAAC;AAE9C,2BAA2B;AAC3B,SAAS,MAAM,CAAC,aAAsB;IACpC,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QACtC,OAAO,IAAA,6BAAY,EAChB,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,SAAS,CAAuB,CAAC,QAAQ,EAAE,EACjE,KAAK,CACN,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAsB,CAAC;IACzD,CAAC;AACH,CAAC;AACD,SAAS,UAAU,CAAC,aAAsB;IACxC,MAAM,IAAI,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,aAAa,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CACN,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,aAAa,CAAuB,CAAC,QAAQ,EAAE,CACtE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,CAAC;QACnB,MAAM,GAAG,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC,IAAI,CACP,SAAS,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;aAClD,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC;aACnB,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CACxB,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AACD,SAAS,cAAc,CAAC,aAAsB;IAC5C,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,EAAE,GAAG,KAAK,CAAC;IACjB,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAC3C,aAAa,CAAC,IAAI,CAChB,oBAAoB,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,gBAAgB,CAAC,EAAE,CAC7D,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,wCAAwC,CAAC,EAAE,CAAC;QACnE,aAAa,CAAC,IAAI,CAChB,yBAAyB,IAAI,CAAC,SAAS,CACrC,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,wCAAwC,CAAC,CAC/D,EAAE,CACJ,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,mCAAmC,CAAC,EAAE,CAAC;QAC9D,aAAa,CAAC,IAAI,CAChB,oBAAoB,IAAI,CAAC,SAAS,CAChC,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,mCAAmC,CAAC,CAC1D,EAAE,CACJ,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE,CAAC;QACvC,aAAa,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,EAAE,CAAC;QACrC,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;AACpD,CAAC;AACD,SAAS,OAAO,CAAC,UAAmC;IAClD,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,UAAU,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,gBAAgB,CAAC,UAAU,CAChC,WAAW,EACX,+CAAsC,CACvC,CAAC;AACJ,CAAC;AAED,WAAW;AACX,MAAa,eAAgB,SAAQ,8BAAa;IAChD,OAAO,CAAU;IAEjB,QAAQ,GAGJ;QACF,QAAQ,EAAE;YACR,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,sBAAoB;SAC9B;QACD,OAAO,EAAE,sBAAoB;QAC7B,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,iBAAiB;gBACvB,KAAK,EAAE,iBAAiB;gBACxB,OAAO,EAAE,qDAAqD;gBAC9D,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,EAAE;gBACd,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,MAAM;wBACZ,GAAG,EAAE,IAAI;wBACT,IAAI,EAAE;4BACJ,GAAG,EAAE;gCACH,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,CAAC,UAAmC,EAAE,EAAE,CACnD,IAAA,2BAAkB,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC;6BAC1C;4BACD,IAAI,EAAE;gCACJ,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,OAAO;6BACrB;4BACD,KAAK,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAC;yBACxB;wBACD,IAAI,EAAE,EAAE;wBACR,eAAe,EAAE,EAAE;wBACnB,EAAE,EAAE,EAAC,WAAW,EAAE,MAAM,EAAC;wBACzB,KAAK,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC;wBACxB,IAAI,EAAE;4BACJ,IAAI,EAAE,iCAAiC;4BACvC,WAAW,EAAE,UAAU;yBACxB;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,UAAU;4BAChB,WAAW,EAAE,IAAA,8BAAa,EAAC,cAAc,CAAC;yBAC3C;wBACD,IAAI,EAAE;4BACJ,WAAW,EAAE,CAAC,aAAsC,EAAU,EAAE;gCAC9D,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;4BAChD,CAAC;yBACF;wBACD,OAAO,EAAE;4BACP;gCACE,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;gCAC3C,SAAS,EAAE,EAAC,WAAW,EAAE,cAAc,EAAC;gCACxC,UAAU,EAAE,EAAE;6BACf;yBACF;qBACF;iBACF;gBACD,MAAM,EAAE,EAAE;aACX;SACF;QACD,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,IAA6B,EAA2B,EAAE;gBACtE,OAAO;oBACL,cAAc,EAAE;wBACd;4BACE,IAAI,EAAE,YAAY;4BAClB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,aAAa,CAAC,CAAC;yBACpC;qBACF;oBACD,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;iBACjC,CAAC;YACJ,CAAC;SACF;KACF,CAAC;IACF,YAAY,QAAgB,EAAE,OAAO,GAAG,KAAK;QAC3C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AArFD,0CAqFC","sourcesContent":["import {ExecJSON} from 'inspecjs';\nimport * as _ from 'lodash';\nimport {version as HeimdallToolsVersion} from '../package.json';\nimport {\n  BaseConverter,\n  generateHash,\n  ILookupPath,\n  impactMapping,\n  MappedTransform\n} from './base-converter';\nimport {CweNistMapping} from './mappings/CweNistMapping';\nimport {\n  DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS,\n  getCCIsForNISTTags\n} from './utils/global';\n\n// Constants\nconst IMPACT_MAPPING: Map<string, number> = new Map([\n  ['high', 0.7],\n  ['medium', 0.5],\n  ['low', 0.3]\n]);\n\nconst CWE_PATH = 'component_versions.more_details.cves[0].cwe';\n\nconst CWE_NIST_MAPPING = new CweNistMapping();\n\n// Transformation Functions\nfunction hashId(vulnerability: unknown): string {\n  if (_.get(vulnerability, 'id') === '') {\n    return generateHash(\n      (_.get(vulnerability, 'summary') as unknown as string).toString(),\n      'md5'\n    );\n  } else {\n    return _.get(vulnerability, 'id') as unknown as string;\n  }\n}\nfunction formatDesc(vulnerability: unknown): string {\n  const text = [];\n  if (_.has(vulnerability, 'description')) {\n    text.push(\n      (_.get(vulnerability, 'description') as unknown as string).toString()\n    );\n  }\n  if (_.has(vulnerability, 'cves')) {\n    const re1 = /\":/gi;\n    const re2 = /,/gi;\n    text.push(\n      `cves: ${JSON.stringify(_.get(vulnerability, 'cves'))\n        .replace(re1, '\"=>')\n        .replace(re2, ', ')}`\n    );\n  }\n  return text.join('<br>');\n}\nfunction formatCodeDesc(vulnerability: unknown): string {\n  const codeDescArray: string[] = [];\n  const re = /,/gi;\n  if (_.has(vulnerability, 'source_comp_id')) {\n    codeDescArray.push(\n      `source_comp_id : ${_.get(vulnerability, 'source_comp_id')}`\n    );\n  } else {\n    codeDescArray.push('source_comp_id : ');\n  }\n  if (_.has(vulnerability, 'component_versions.vulnerable_versions')) {\n    codeDescArray.push(\n      `vulnerable_versions : ${JSON.stringify(\n        _.get(vulnerability, 'component_versions.vulnerable_versions')\n      )}`\n    );\n  } else {\n    codeDescArray.push('vulnerable_versions : ');\n  }\n  if (_.has(vulnerability, 'component_versions.fixed_versions')) {\n    codeDescArray.push(\n      `fixed_versions : ${JSON.stringify(\n        _.get(vulnerability, 'component_versions.fixed_versions')\n      )}`\n    );\n  } else {\n    codeDescArray.push('fixed_versions : ');\n  }\n  if (_.has(vulnerability, 'issue_type')) {\n    codeDescArray.push(`issue_type : ${_.get(vulnerability, 'issue_type')}`);\n  } else {\n    codeDescArray.push('issue_type : ');\n  }\n  if (_.has(vulnerability, 'provider')) {\n    codeDescArray.push(`provider : ${_.get(vulnerability, 'provider')}`);\n  } else {\n    codeDescArray.push('provider : ');\n  }\n  return codeDescArray.join('\\n').replace(re, ', ');\n}\nfunction nistTag(identifier: Record<string, unknown>): string[] {\n  const identifiers: string[] = [];\n  if (Array.isArray(identifier)) {\n    identifier.forEach((element) => {\n      if (element.split('CWE-')[1]) {\n        identifiers.push(element.split('CWE-')[1]);\n      }\n    });\n  }\n  return CWE_NIST_MAPPING.nistFilter(\n    identifiers,\n    DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS\n  );\n}\n\n// Mappings\nexport class JfrogXrayMapper extends BaseConverter {\n  withRaw: boolean;\n\n  mappings: MappedTransform<\n    ExecJSON.Execution & {passthrough: unknown},\n    ILookupPath\n  > = {\n    platform: {\n      name: 'Heimdall Tools',\n      release: HeimdallToolsVersion\n    },\n    version: HeimdallToolsVersion,\n    statistics: {},\n    profiles: [\n      {\n        name: 'JFrog Xray Scan',\n        title: 'JFrog Xray Scan',\n        summary: 'Continuous Security and Universal Artifact Analysis',\n        supports: [],\n        attributes: [],\n        groups: [],\n        status: 'loaded',\n        controls: [\n          {\n            path: 'data',\n            key: 'id',\n            tags: {\n              cci: {\n                path: CWE_PATH,\n                transformer: (identifier: Record<string, unknown>) =>\n                  getCCIsForNISTTags(nistTag(identifier))\n              },\n              nist: {\n                path: CWE_PATH,\n                transformer: nistTag\n              },\n              cweid: {path: CWE_PATH}\n            },\n            refs: [],\n            source_location: {},\n            id: {transformer: hashId},\n            title: {path: 'summary'},\n            desc: {\n              path: 'component_versions.more_details',\n              transformer: formatDesc\n            },\n            impact: {\n              path: 'severity',\n              transformer: impactMapping(IMPACT_MAPPING)\n            },\n            code: {\n              transformer: (vulnerability: Record<string, unknown>): string => {\n                return JSON.stringify(vulnerability, null, 2);\n              }\n            },\n            results: [\n              {\n                status: ExecJSON.ControlResultStatus.Failed,\n                code_desc: {transformer: formatCodeDesc},\n                start_time: ''\n              }\n            ]\n          }\n        ],\n        sha256: ''\n      }\n    ],\n    passthrough: {\n      transformer: (data: Record<string, unknown>): Record<string, unknown> => {\n        return {\n          auxiliary_data: [\n            {\n              name: 'JFrog Xray',\n              data: _.pick(data, ['total_count'])\n            }\n          ],\n          ...(this.withRaw && {raw: data})\n        };\n      }\n    }\n  };\n  constructor(xrayJson: string, withRaw = false) {\n    super(JSON.parse(xrayJson), true);\n    this.withRaw = withRaw;\n  }\n}\n"]}

package/lib/src/jsonix-converter.d.ts

@@ -1,8 +0,0 @@
-import { Jsonix } from '@mitre/jsonix';
-export declare abstract class JsonixConverter<T> {
-    context: Jsonix.Context;
-    constructor(mapping: Record<string, unknown>);
-    toJsonix(xmlString: string): T;
-    fromJsonix(object: T): string;
-}
-//# sourceMappingURL=jsonix-converter.d.ts.map

package/lib/src/jsonix-converter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"jsonix-converter.d.ts","sourceRoot":"","sources":["../../src/jsonix-converter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,MAAM,EAAC,MAAM,eAAe,CAAC;AAErC,8BAAsB,eAAe,CAAC,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;gBAEZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAI5C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,CAAC;IAK9B,UAAU,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM;CAI9B"}

package/lib/src/jsonix-converter.js

@@ -1,20 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.JsonixConverter = void 0;
-const jsonix_1 = require("@mitre/jsonix");
-class JsonixConverter {
-    context;
-    constructor(mapping) {
-        this.context = new jsonix_1.Jsonix.Context([mapping]);
-    }
-    toJsonix(xmlString) {
-        const unmarshaller = this.context.createUnmarshaller();
-        return unmarshaller.unmarshalString(xmlString);
-    }
-    fromJsonix(object) {
-        const marshaller = this.context.createMarshaller();
-        return marshaller.marshalString(object);
-    }
-}
-exports.JsonixConverter = JsonixConverter;
-//# sourceMappingURL=jsonix-converter.js.map

package/lib/src/jsonix-converter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"jsonix-converter.js","sourceRoot":"","sources":["../../src/jsonix-converter.ts"],"names":[],"mappings":";;;AAAA,0CAAqC;AAErC,MAAsB,eAAe;IACnC,OAAO,CAAiB;IAExB,YAAY,OAAgC;QAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,eAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,QAAQ,CAAC,SAAiB;QACxB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;QACvD,OAAO,YAAY,CAAC,eAAe,CAAC,SAAS,CAAM,CAAC;IACtD,CAAC;IAED,UAAU,CAAC,MAAS;QAClB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACnD,OAAO,UAAU,CAAC,aAAa,CAAC,MAAiC,CAAC,CAAC;IACrE,CAAC;CACF;AAhBD,0CAgBC","sourcesContent":["import {Jsonix} from '@mitre/jsonix';\n\nexport abstract class JsonixConverter<T> {\n  context: Jsonix.Context;\n\n  constructor(mapping: Record<string, unknown>) {\n    this.context = new Jsonix.Context([mapping]);\n  }\n\n  toJsonix(xmlString: string): T {\n    const unmarshaller = this.context.createUnmarshaller();\n    return unmarshaller.unmarshalString(xmlString) as T;\n  }\n\n  fromJsonix(object: T): string {\n    const marshaller = this.context.createMarshaller();\n    return marshaller.marshalString(object as Record<string, unknown>);\n  }\n}\n"]}

package/lib/src/jsonix-intermediate-converter.d.ts

@@ -1,6 +0,0 @@
-import { JsonixConverter } from './jsonix-converter';
-export declare abstract class JsonixIntermediateConverter<T, V> extends JsonixConverter<T> {
-    abstract toIntermediateObject(jsonixObj: T): V;
-    abstract fromIntermediateObject(intermediateObj: V): T;
-}
-//# sourceMappingURL=jsonix-intermediate-converter.d.ts.map

package/lib/src/jsonix-intermediate-converter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"jsonix-intermediate-converter.d.ts","sourceRoot":"","sources":["../../src/jsonix-intermediate-converter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,eAAe,EAAC,MAAM,oBAAoB,CAAC;AAEnD,8BAAsB,2BAA2B,CAC/C,CAAC,EACD,CAAC,CACD,SAAQ,eAAe,CAAC,CAAC,CAAC;IAC1B,QAAQ,CAAC,oBAAoB,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC;IAC9C,QAAQ,CAAC,sBAAsB,CAAC,eAAe,EAAE,CAAC,GAAG,CAAC;CACvD"}

package/lib/src/jsonix-intermediate-converter.js

@@ -1,8 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.JsonixIntermediateConverter = void 0;
-const jsonix_converter_1 = require("./jsonix-converter");
-class JsonixIntermediateConverter extends jsonix_converter_1.JsonixConverter {
-}
-exports.JsonixIntermediateConverter = JsonixIntermediateConverter;
-//# sourceMappingURL=jsonix-intermediate-converter.js.map