@mitre/hdf-fixtures 3.7.1 → 3.7.2-rc.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +3 -3
  2. package/package.json +2 -2
package/README.md CHANGED
@@ -51,9 +51,9 @@ Fixtures here are **real tool output**, or a schema-valid document derived from
51
51
 
52
52
  | File | Source | Consumers |
53
53
  |------|--------|-----------|
54
- | `inspec-multilayered.json` | InSpec runner, multi-overlay scan | hdf-extension-graph TS + Go tests + hdf-parsers parser parity test. The bug-exhibiting fixture for `hdf-libs-2nm0` — bare timestamps that broke parsers before #83/#828d landed. Moved from `hdf-extension-graph/test/fixtures/multilayered-inspec.json`. |
54
+ | `inspec-multilayered.json` | InSpec runner, multi-overlay scan | hdf-extension-graph TS + Go tests + hdf-parsers parser parity test + hdf-engine compliance tests (TS + Go). The bug-exhibiting fixture for `hdf-libs-2nm0` — bare timestamps that broke parsers before #83/#828d landed. Moved from `hdf-extension-graph/test/fixtures/multilayered-inspec.json`. The overlay chain re-reports the same requirement id in every layer it touches (534 ids appear more than once, 406 of them with differing statuses, and `SV-257777` twice within a single baseline), which is what hdf-engine's duplicate-id threshold tests need. |
55
55
  | `minimal.json` | Hand-crafted minimal valid HDF Results doc | hdf-to-xml converter (TS + Go) + hdf-parsers integration test + hdf-validators integration test. The smallest schema-valid HDF Results document — single baseline, one passing requirement. Moved from `hdf-converters/converters/hdf-to-xml/fixtures/input/minimal.json`. |
56
- | `duplicate-baselines.json` | Prisma Cloud HDF results (`prisma-to-hdf`) — 16 baselines, 94 requirements, repeated (name, id) keys. Constructed for merge/correlation testing, PR #362. | hdf-engine TS + Go (filter/query index-uniqueness) + hdf-cli MCP tools (inspect/aggregate/compliance). Moved from `hdf-engine/testdata/duplicate-baselines.json` and `hdf-cli/internal/mcp/tools/testdata/duplicate-baselines.json`. |
56
+ | `duplicate-baselines.json` | Prisma Cloud HDF results (`prisma-to-hdf`) — 16 baselines, 94 requirements, repeated (name, id) keys. Constructed for merge/correlation testing, PR #362. | hdf-engine TS + Go (filter/query index-uniqueness) + hdf-cli MCP tools (inspect/aggregate/compliance) + hdf-to-html converter TS + Go (same-named baselines are labelled by title, and no component carries a count). Moved from `hdf-engine/testdata/duplicate-baselines.json` and `hdf-cli/internal/mcp/tools/testdata/duplicate-baselines.json`. Byte-identical to `hdf-converters/converters/prisma-to-hdf/fixtures/expected/prismacloud_sample.csv.hdf.json` (sha256 `7273e11d8bf3d55d…`); `fixtures_test.go` pins both. |
57
57
  | `merge-grype.json` | Grype HDF results (`grype-to-hdf`, Grype 0.79.3) — one baseline, duplicate requirement ids. Constructed for merge/correlation testing, PR #362. | hdf-engine TS + Go (merge parity) + hdf-cli MCP tools (query correlation, multi-source). Moved from `hdf-engine/testdata/merge-grype.json` and `hdf-cli/internal/mcp/tools/testdata/grype-duplicate-ids.json`. |
58
58
  | `merge-zap.json` | OWASP ZAP HDF results (`zap-to-hdf`, ZAP 2.7.0) — four baselines/components, no ids. Constructed for merge/correlation testing, PR #362. | hdf-engine TS + Go (merge parity) + hdf-cli MCP tools (inspect, sources, query multi-source) + hdf-cli MCP evals (sources validation). Moved from `hdf-engine/testdata/merge-zap.json` and `hdf-cli/internal/mcp/tools/testdata/zap-webgoat.json`. |
59
59
 
@@ -61,7 +61,7 @@ Fixtures here are **real tool output**, or a schema-valid document derived from
61
61
 
62
62
  | File | Source | Consumers |
63
63
  |------|--------|-----------|
64
- | `win2022-stig.json` | Windows Server 2022 STIG | hdf-generators TS + Go integration tests + hdf-parsers parser parity test. Was previously duplicated across `hdf-generators/go/testdata/` and `hdf-generators/test/fixtures/`. |
64
+ | `win2022-stig.json` | Windows Server 2022 STIG | hdf-generators TS + Go integration tests + hdf-parsers parser parity test. Was previously duplicated across `hdf-generators/go/testdata/` and `hdf-generators/test/fixtures/`. + hdf-engine loader and loader-parity tests (Go + TS). |
65
65
 
66
66
  ### `amendments/` — HDF Amendments docs
67
67
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@mitre/hdf-fixtures",
3
- "version": "3.7.1",
3
+ "version": "3.7.2-rc.1",
4
4
  "description": "Shared real-world HDF reference fixtures for cross-package consumers (parsers, validators, extension-graph)",
5
5
  "type": "module",
6
6
  "main": "./dist/index.js",
@@ -25,7 +25,7 @@
25
25
  "author": "MITRE Corporation",
26
26
  "license": "Apache-2.0",
27
27
  "engines": {
28
- "node": ">=22.0.0"
28
+ "node": ">=24.0.0"
29
29
  },
30
30
  "scripts": {
31
31
  "build": "tsdown",