@mitre/hdf-utilities 2.0.0 → 3.0.1

package/dist/index.d.ts

@@ -8,4 +8,5 @@ export { parseXml, buildXml, isValidXml, parseXmlWithArrays, extractTextFromXml,
 export { parseCsv, parseCsvArray, buildCsv, buildCsvArray, isValidCsv, sanitizeCsvValue, sanitizeCsvArray, sanitizeCsvObject, extractCsvColumn, findCsvRows, type CsvParseOptions, type CsvBuildOptions, } from './csv/index.js';
 export { findValuesByKey, extractColumn, findRows } from './object/index.js';
 export { stripHtml, parseTimestamp } from './string/index.js';
+export { severityToImpact, impactToSeverity } from './severity/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAG/G,OAAO,EACL,YAAY,EACZ,MAAM,EACN,MAAM,EACN,UAAU,EACV,UAAU,EACV,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,WAAW,GACjB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,GACd,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,QAAQ,EACR,aAAa,EACb,QAAQ,EACR,aAAa,EACb,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,EACX,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAG7E,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAG/G,OAAO,EACL,YAAY,EACZ,MAAM,EACN,MAAM,EACN,UAAU,EACV,UAAU,EACV,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,WAAW,GACjB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,GACd,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,QAAQ,EACR,aAAa,EACb,QAAQ,EACR,aAAa,EACb,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,EACX,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAG7E,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAG9D,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/index.js

@@ -14,4 +14,6 @@ export { parseCsv, parseCsvArray, buildCsv, buildCsvArray, isValidCsv, sanitizeC
 export { findValuesByKey, extractColumn, findRows } from './object/index.js';
 // String utilities
 export { stripHtml, parseTimestamp } from './string/index.js';
+// Severity/impact mapping
+export { severityToImpact, impactToSeverity } from './severity/index.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,iBAAiB;AACjB,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAyB,MAAM,iBAAiB,CAAC;AAE/G,iBAAiB;AACjB,OAAO,EACL,YAAY,EACZ,MAAM,EACN,MAAM,EACN,UAAU,EACV,UAAU,GAIX,MAAM,iBAAiB,CAAC;AAEzB,gBAAgB;AAChB,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,GACd,MAAM,gBAAgB,CAAC;AAExB,gBAAgB;AAChB,OAAO,EACL,QAAQ,EACR,aAAa,EACb,QAAQ,EACR,aAAa,EACb,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,GAGZ,MAAM,gBAAgB,CAAC;AAExB,uCAAuC;AACvC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7E,mBAAmB;AACnB,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,iBAAiB;AACjB,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAyB,MAAM,iBAAiB,CAAC;AAE/G,iBAAiB;AACjB,OAAO,EACL,YAAY,EACZ,MAAM,EACN,MAAM,EACN,UAAU,EACV,UAAU,GAIX,MAAM,iBAAiB,CAAC;AAEzB,gBAAgB;AAChB,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,GACd,MAAM,gBAAgB,CAAC;AAExB,gBAAgB;AAChB,OAAO,EACL,QAAQ,EACR,aAAa,EACb,QAAQ,EACR,aAAa,EACb,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,GAGZ,MAAM,gBAAgB,CAAC;AAExB,uCAAuC;AACvC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7E,mBAAmB;AACnB,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAE9D,0BAA0B;AAC1B,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/severity/index.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Severity-to-impact mapping utilities.
+ *
+ * These define the canonical bidirectional mapping between severity labels
+ * (critical, high, medium, low, informational) and HDF impact scores (0.0–1.0),
+ * aligned with CVSS 3.x severity bands normalized to 0–1.
+ *
+ * Threshold ranges (used by impactToSeverity):
+ *   >=0.9       = critical (CVSS 9.0–10.0)
+ *   [0.7, 0.9)  = high     (CVSS 7.0–8.9)
+ *   [0.4, 0.7)  = medium   (CVSS 4.0–6.9)
+ *   (0.0, 0.4)  = low      (CVSS 0.1–3.9)
+ *   0.0         = informational (CVSS 0.0)
+ */
+/**
+ * Map a severity string to an impact score.
+ *
+ * @param severity - Severity level (case-insensitive)
+ * @returns Impact score between 0.0 and 1.0; defaults to 0.5 for unrecognized values
+ */
+export declare function severityToImpact(severity: string): number;
+/**
+ * Map an impact score to a severity string.
+ *
+ * @param impact - Impact score (0.0 to 1.0)
+ * @returns Severity level string
+ */
+export declare function impactToSeverity(impact: number): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/severity/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/severity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAaH;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGzD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAMvD"}

package/dist/severity/index.js

@@ -0,0 +1,52 @@
+/**
+ * Severity-to-impact mapping utilities.
+ *
+ * These define the canonical bidirectional mapping between severity labels
+ * (critical, high, medium, low, informational) and HDF impact scores (0.0–1.0),
+ * aligned with CVSS 3.x severity bands normalized to 0–1.
+ *
+ * Threshold ranges (used by impactToSeverity):
+ *   >=0.9       = critical (CVSS 9.0–10.0)
+ *   [0.7, 0.9)  = high     (CVSS 7.0–8.9)
+ *   [0.4, 0.7)  = medium   (CVSS 4.0–6.9)
+ *   (0.0, 0.4)  = low      (CVSS 0.1–3.9)
+ *   0.0         = informational (CVSS 0.0)
+ */
+const severityMap = {
+    critical: 0.9,
+    high: 0.7,
+    medium: 0.5,
+    low: 0.3,
+    info: 0.0,
+    none: 0.0,
+    informational: 0.0,
+    information: 0.0,
+};
+/**
+ * Map a severity string to an impact score.
+ *
+ * @param severity - Severity level (case-insensitive)
+ * @returns Impact score between 0.0 and 1.0; defaults to 0.5 for unrecognized values
+ */
+export function severityToImpact(severity) {
+    const normalized = severity.toLowerCase();
+    return severityMap[normalized] ?? 0.5;
+}
+/**
+ * Map an impact score to a severity string.
+ *
+ * @param impact - Impact score (0.0 to 1.0)
+ * @returns Severity level string
+ */
+export function impactToSeverity(impact) {
+    if (impact >= 0.9)
+        return 'critical';
+    if (impact >= 0.7)
+        return 'high';
+    if (impact >= 0.4)
+        return 'medium';
+    if (impact > 0.0)
+        return 'low';
+    return 'informational';
+}
+//# sourceMappingURL=index.js.map

package/dist/severity/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/severity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,GAA2B;IAC1C,QAAQ,EAAE,GAAG;IACb,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,GAAG;IACX,GAAG,EAAE,GAAG;IACR,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;IACT,aAAa,EAAE,GAAG;IAClB,WAAW,EAAE,GAAG;CACjB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC1C,OAAO,WAAW,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,UAAU,CAAC;IACrC,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,MAAM,CAAC;IACjC,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,QAAQ,CAAC;IACnC,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IAC/B,OAAO,eAAe,CAAC;AACzB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mitre/hdf-utilities",
-  "version": "2.0.0",
+  "version": "3.0.1",
   "description": "Utility functions for HDF libraries (JSON parsing, validation helpers)",
   "publishConfig": {
     "access": "public"
@@ -41,6 +41,18 @@
   "files": [
     "dist"
   ],
+  "scripts": {
+    "build": "pnpm clean && tsc",
+    "clean": "rimraf dist",
+    "test": "pnpm run test:ts",
+    "test:ts": "vitest run",
+    "test:go": "echo 'No Go tests in hdf-utilities'",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "type-check": "tsc --noEmit",
+    "lint": "eslint src test",
+    "lint:fix": "eslint src test --fix"
+  },
   "repository": {
     "type": "git",
     "url": "https://github.com/mitre/hdf-libs.git",
@@ -66,17 +78,5 @@
     "@stryker-mutator/core": "^9.5.1",
     "@stryker-mutator/vitest-runner": "^9.5.1",
     "@types/d3-dsv": "^3.0.7"
-  },
-  "scripts": {
-    "build": "pnpm clean && tsc",
-    "clean": "rimraf dist",
-    "test": "pnpm run test:ts",
-    "test:ts": "vitest run",
-    "test:go": "echo 'No Go tests in hdf-utilities'",
-    "test:watch": "vitest",
-    "test:coverage": "vitest run --coverage",
-    "type-check": "tsc --noEmit",
-    "lint": "eslint src test",
-    "lint:fix": "eslint src test --fix"
   }
-}
+}

package/LICENSE.md

@@ -1,55 +0,0 @@
-# License
-
-Copyright © 2025 The MITRE Corporation.
-
-Approved for Public Release; Distribution Unlimited. Case Number 18-3678.
-
-Licensed under the Apache License, Version 2.0 (the "License"); you may
-not use this file except in compliance with the License. You may obtain a
-copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
-WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
-License for the specific language governing permissions and limitations
-under the License.
-
-## Redistribution Terms
-
-Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions are
-met:
-
-- Redistributions of source code must retain the above copyright/digital
-  rights legend, this list of conditions and the following Notice.
-- Redistributions in binary form must reproduce the above
-  copyright/digital rights legend, this list of conditions and the
-  following Notice in the documentation and/or other materials provided
-  with the distribution.
-- Neither the name of The MITRE Corporation nor the names of its contributors
-  may be used to endorse or promote products derived from this software
-  without specific prior written permission.
-
-## Notice
-
-The MITRE Corporation grants permission to reproduce, distribute, modify, and
-otherwise use this software to the extent permitted by the licensed terms
-provided in the LICENSE file included with this project.
-
-This software was produced by The MITRE Corporation for the U.S. Government
-under contract. As such the U.S. Government has certain use and data
-rights in this software. No use other than those granted to the U.S.
-Government, or to those acting on behalf of the U.S. Government, under
-these contract arrangements is authorized without the express written
-permission of The MITRE Corporation.
-
-Some files in this codebase were generated by generative AI, under the
-direction and review of The MITRE Corporation employees, for the purpose of
-development efficiency. All AI-generated code functionality was validated
-by standard quality and assurance testing.
-
-For further information, please contact The MITRE Corporation,
-Contracts Management Office, 7515 Colshire Drive, McLean, VA 22102-7539,
-(703) 983-6000.