@mitre/hdf-utilities 3.0.1 → 3.1.0

package/dist/xml/index.js

@@ -1,187 +1,157 @@
+import { findValuesByKey } from "../object/index.js";
+import { XMLBuilder, XMLParser, XMLValidator } from "fast-xml-parser";
+//#region src/xml/index.ts
 /**
- * XML parsing utilities for HDF converters
- * Provides XML parsing with sensible defaults for security tool output
- */
-import { XMLParser, XMLBuilder, XMLValidator } from 'fast-xml-parser';
-export { findValuesByKey as findXmlValues } from '../object/index.js';
+* XML parsing utilities for HDF converters
+* Provides XML parsing with sensible defaults for security tool output
+*/
 /**
- * Default options for XML parsing optimized for security tool converters.
- *
- * **XXE Safety**: fast-xml-parser v5.x does not process DTD or external entities
- * by default. The `processEntities: false` option is set as defense-in-depth to
- * ensure entity expansion is disabled even if future versions change defaults.
- * See: https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/docs/v5/2.XMLparseOptions.md
- */
+* Default options for XML parsing optimized for security tool converters.
+*
+* **XXE Safety**: fast-xml-parser v5.x does not process DTD or external entities
+* by default. The `processEntities: false` option is set as defense-in-depth to
+* ensure entity expansion is disabled even if future versions change defaults.
+* See: https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/docs/v5/2.XMLparseOptions.md
+*/
 const DEFAULT_PARSE_OPTIONS = {
-    attributeNamePrefix: '',
-    textNodeName: '#text',
-    ignoreAttributes: false,
-    ignoreDeclaration: true,
-    parseAttributeValue: false,
-    parseTagValue: false,
-    removeNSPrefix: true,
-    processEntities: false,
+	attributeNamePrefix: "",
+	textNodeName: "#text",
+	ignoreAttributes: false,
+	ignoreDeclaration: true,
+	parseAttributeValue: false,
+	parseTagValue: false,
+	removeNSPrefix: true,
+	processEntities: false
 };
 /**
- * Default options for XML building
- */
+* Default options for XML building
+*/
 const DEFAULT_BUILD_OPTIONS = {
-    attributeNamePrefix: '',
-    textNodeName: '#text',
-    ignoreAttributes: false,
-    format: true,
-    indentBy: '  ',
-    suppressEmptyNode: false,
+	attributeNamePrefix: "",
+	textNodeName: "#text",
+	ignoreAttributes: false,
+	format: true,
+	indentBy: "  ",
+	suppressEmptyNode: false
 };
 /**
- * Parse XML string to JavaScript object
- *
- * @param xml - XML string to parse
- * @param options - Optional parser configuration (merged with defaults)
- * @returns Parsed JavaScript object
- *
- * @example
- * ```typescript
- * const xmlString = '<root><item id="1">Test</item></root>';
- * const result = parseXml(xmlString);
- * // Returns: { root: { item: { id: '1', '#text': 'Test' } } }
- * ```
- */
-export function parseXml(xml, options) {
-    if (options?.maxSize !== undefined && xml.length > options.maxSize) {
-        throw new Error(`Input exceeds maximum allowed size: ${xml.length} bytes exceeds limit of ${options.maxSize} bytes`);
-    }
-    // Validate XML first
-    const validation = XMLValidator.validate(xml);
-    if (validation !== true) {
-        throw new Error(`Invalid XML: ${validation.err.msg}`);
-    }
-    const mergedOptions = {
-        ...DEFAULT_PARSE_OPTIONS,
-        ...options,
-    };
-    const parser = new XMLParser(mergedOptions);
-    return parser.parse(xml);
+* Parse XML string to JavaScript object
+*
+* @param xml - XML string to parse
+* @param options - Optional parser configuration (merged with defaults)
+* @returns Parsed JavaScript object
+*
+* @example
+* ```typescript
+* const xmlString = '<root><item id="1">Test</item></root>';
+* const result = parseXml(xmlString);
+* // Returns: { root: { item: { id: '1', '#text': 'Test' } } }
+* ```
+*/
+function parseXml(xml, options) {
+	if (options?.maxSize !== void 0 && xml.length > options.maxSize) throw new Error(`Input exceeds maximum allowed size: ${xml.length} bytes exceeds limit of ${options.maxSize} bytes`);
+	const validation = XMLValidator.validate(xml);
+	if (validation !== true) throw new Error(`Invalid XML: ${validation.err.msg}`);
+	return new XMLParser({
+		...DEFAULT_PARSE_OPTIONS,
+		...options
+	}).parse(xml);
 }
 /**
- * Build XML string from JavaScript object
- *
- * @param obj - JavaScript object to convert to XML
- * @param options - Optional builder configuration (merged with defaults)
- * @returns XML string
- *
- * @example
- * ```typescript
- * const obj = { root: { item: { id: '1', '#text': 'Test' } } };
- * const xml = buildXml(obj);
- * // Returns formatted XML string
- * ```
- */
-export function buildXml(obj, options) {
-    const mergedOptions = {
-        ...DEFAULT_BUILD_OPTIONS,
-        ...options,
-    };
-    const builder = new XMLBuilder(mergedOptions);
-    return builder.build(obj);
+* Build XML string from JavaScript object
+*
+* @param obj - JavaScript object to convert to XML
+* @param options - Optional builder configuration (merged with defaults)
+* @returns XML string
+*
+* @example
+* ```typescript
+* const obj = { root: { item: { id: '1', '#text': 'Test' } } };
+* const xml = buildXml(obj);
+* // Returns formatted XML string
+* ```
+*/
+function buildXml(obj, options) {
+	return new XMLBuilder({
+		...DEFAULT_BUILD_OPTIONS,
+		...options
+	}).build(obj);
 }
 /**
- * Validate if a string is well-formed XML
- *
- * @param xml - String to validate
- * @returns True if valid XML, false otherwise
- *
- * @example
- * ```typescript
- * isValidXml('<root><item>Test</item></root>'); // true
- * isValidXml('<root><item>Test</root>'); // false (mismatched tags)
- * isValidXml('not xml'); // false
- * ```
- */
-export function isValidXml(xml) {
-    if (!xml || xml.trim().length === 0) {
-        return false;
-    }
-    const result = XMLValidator.validate(xml);
-    return result === true;
+* Validate if a string is well-formed XML
+*
+* @param xml - String to validate
+* @returns True if valid XML, false otherwise
+*
+* @example
+* ```typescript
+* isValidXml('<root><item>Test</item></root>'); // true
+* isValidXml('<root><item>Test</root>'); // false (mismatched tags)
+* isValidXml('not xml'); // false
+* ```
+*/
+function isValidXml(xml) {
+	if (!xml || xml.trim().length === 0) return false;
+	return XMLValidator.validate(xml) === true;
 }
 /**
- * Parse XML with array handling for repeated elements
- * Forces specified tag names to always be arrays, even if only one element exists
- *
- * @param xml - XML string to parse
- * @param arrayTags - Array of tag names that should always be parsed as arrays
- * @returns Parsed JavaScript object with forced arrays
- *
- * @example
- * ```typescript
- * const xml = '<root><item>Test</item></root>';
- * const result = parseXmlWithArrays(xml, ['item']);
- * // Returns: { root: { item: ['Test'] } }
- * // Without arrayTags, would return: { root: { item: 'Test' } }
- * ```
- */
-export function parseXmlWithArrays(xml, arrayTags, options) {
-    if (options?.maxSize !== undefined && xml.length > options.maxSize) {
-        throw new Error(`Input exceeds maximum allowed size: ${xml.length} bytes exceeds limit of ${options.maxSize} bytes`);
-    }
-    // Validate XML first (consistency with parseXml)
-    const validation = XMLValidator.validate(xml);
-    if (validation !== true) {
-        throw new Error(`Invalid XML: ${validation.err.msg}`);
-    }
-    const mergedOptions = {
-        ...DEFAULT_PARSE_OPTIONS,
-        ...options,
-        isArray: (tagName) => arrayTags.includes(tagName),
-    };
-    const parser = new XMLParser(mergedOptions);
-    return parser.parse(xml);
+* Parse XML with array handling for repeated elements
+* Forces specified tag names to always be arrays, even if only one element exists
+*
+* @param xml - XML string to parse
+* @param arrayTags - Array of tag names that should always be parsed as arrays
+* @returns Parsed JavaScript object with forced arrays
+*
+* @example
+* ```typescript
+* const xml = '<root><item>Test</item></root>';
+* const result = parseXmlWithArrays(xml, ['item']);
+* // Returns: { root: { item: ['Test'] } }
+* // Without arrayTags, would return: { root: { item: 'Test' } }
+* ```
+*/
+function parseXmlWithArrays(xml, arrayTags, options) {
+	if (options?.maxSize !== void 0 && xml.length > options.maxSize) throw new Error(`Input exceeds maximum allowed size: ${xml.length} bytes exceeds limit of ${options.maxSize} bytes`);
+	const validation = XMLValidator.validate(xml);
+	if (validation !== true) throw new Error(`Invalid XML: ${validation.err.msg}`);
+	return new XMLParser({
+		...DEFAULT_PARSE_OPTIONS,
+		...options,
+		isArray: (tagName) => arrayTags.includes(tagName)
+	}).parse(xml);
 }
 /**
- * Extract text content from XML, stripping all tags
- *
- * @param xml - XML string
- * @returns Plain text content with tags removed
- *
- * @example
- * ```typescript
- * const xml = '<root><b>Bold</b> and <i>italic</i></root>';
- * const text = extractTextFromXml(xml);
- * // Returns: 'Bold and italic'
- * ```
- */
-export function extractTextFromXml(xml) {
-    if (!isValidXml(xml)) {
-        return '';
-    }
-    try {
-        const parsed = parseXml(xml, { ignoreAttributes: true });
-        return extractTextRecursive(parsed).trim();
-    }
-    catch {
-        return '';
-    }
+* Extract text content from XML, stripping all tags
+*
+* @param xml - XML string
+* @returns Plain text content with tags removed
+*
+* @example
+* ```typescript
+* const xml = '<root><b>Bold</b> and <i>italic</i></root>';
+* const text = extractTextFromXml(xml);
+* // Returns: 'Bold and italic'
+* ```
+*/
+function extractTextFromXml(xml) {
+	if (!isValidXml(xml)) return "";
+	try {
+		return extractTextRecursive(parseXml(xml, { ignoreAttributes: true })).trim();
+	} catch {
+		return "";
+	}
 }
 /**
- * Recursively extract text from parsed XML object
- * @private
- */
+* Recursively extract text from parsed XML object
+* @private
+*/
 function extractTextRecursive(obj) {
-    if (typeof obj === 'string' || typeof obj === 'number') {
-        return String(obj);
-    }
-    if (Array.isArray(obj)) {
-        return obj.map(extractTextRecursive).join(' ');
-    }
-    if (typeof obj === 'object' && obj !== null) {
-        const record = obj;
-        // Recursively extract text from all properties
-        return Object.values(record)
-            .map(extractTextRecursive)
-            .filter(text => text.length > 0)
-            .join(' ');
-    }
-    return '';
+	if (typeof obj === "string" || typeof obj === "number") return String(obj);
+	if (Array.isArray(obj)) return obj.map(extractTextRecursive).join(" ");
+	if (typeof obj === "object" && obj !== null) return Object.values(obj).map(extractTextRecursive).filter((text) => text.length > 0).join(" ");
+	return "";
 }
+//#endregion
+export { buildXml, extractTextFromXml, findValuesByKey as findXmlValues, isValidXml, parseXml, parseXmlWithArrays };
+
 //# sourceMappingURL=index.js.map

package/dist/xml/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/xml/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAGtE,OAAO,EAAE,eAAe,IAAI,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEtE;;;;;;;GAOG;AACH,MAAM,qBAAqB,GAAwB;IACjD,mBAAmB,EAAE,EAAE;IACvB,YAAY,EAAE,OAAO;IACrB,gBAAgB,EAAE,KAAK;IACvB,iBAAiB,EAAE,IAAI;IACvB,mBAAmB,EAAE,KAAK;IAC1B,aAAa,EAAE,KAAK;IACpB,cAAc,EAAE,IAAI;IACpB,eAAe,EAAE,KAAK;CACvB,CAAC;AAEF;;GAEG;AACH,MAAM,qBAAqB,GAA+B;IACxD,mBAAmB,EAAE,EAAE;IACvB,YAAY,EAAE,OAAO;IACrB,gBAAgB,EAAE,KAAK;IACvB,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,IAAI;IACd,iBAAiB,EAAE,KAAK;CACzB,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,QAAQ,CACtB,GAAW,EACX,OAAoD;IAEpD,IAAI,OAAO,EAAE,OAAO,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CACb,uCAAuC,GAAG,CAAC,MAAM,2BAA2B,OAAO,CAAC,OAAO,QAAQ,CACpG,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,gBAAgB,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,aAAa,GAAG;QACpB,GAAG,qBAAqB;QACxB,GAAG,OAAO;KACX,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,aAAa,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,QAAQ,CACtB,GAA4B,EAC5B,OAAoC;IAEpC,MAAM,aAAa,GAAG;QACpB,GAAG,qBAAqB;QACxB,GAAG,OAAO;KACX,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,aAAa,CAAC,CAAC;IAC9C,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAW,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,MAAM,KAAK,IAAI,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAW,EACX,SAAmB,EACnB,OAAoD;IAEpD,IAAI,OAAO,EAAE,OAAO,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CACb,uCAAuC,GAAG,CAAC,MAAM,2BAA2B,OAAO,CAAC,OAAO,QAAQ,CACpG,CAAC;IACJ,CAAC;IAED,iDAAiD;IACjD,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,gBAAgB,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,aAAa,GAAwB;QACzC,GAAG,qBAAqB;QACxB,GAAG,OAAO;QACV,OAAO,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;KAC1D,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,aAAa,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,GAAY;IACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACvD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,GAA8B,CAAC;QAE9C,+CAA+C;QAC/C,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;aACzB,GAAG,CAAC,oBAAoB,CAAC;aACzB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;aAC/B,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC"}
+{"version":3,"file":"index.js","names":[],"sources":["../../src/xml/index.ts"],"sourcesContent":["/**\n * XML parsing utilities for HDF converters\n * Provides XML parsing with sensible defaults for security tool output\n */\n\nimport { XMLParser, XMLBuilder, XMLValidator } from 'fast-xml-parser';\nimport type { X2jOptions, XmlBuilderOptions } from 'fast-xml-parser';\n\nexport { findValuesByKey as findXmlValues } from '../object/index.js';\n\n/**\n * Default options for XML parsing optimized for security tool converters.\n *\n * **XXE Safety**: fast-xml-parser v5.x does not process DTD or external entities\n * by default. The `processEntities: false` option is set as defense-in-depth to\n * ensure entity expansion is disabled even if future versions change defaults.\n * See: https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/docs/v5/2.XMLparseOptions.md\n */\nconst DEFAULT_PARSE_OPTIONS: Partial<X2jOptions> = {\n  attributeNamePrefix: '',\n  textNodeName: '#text',\n  ignoreAttributes: false,\n  ignoreDeclaration: true,\n  parseAttributeValue: false,\n  parseTagValue: false,\n  removeNSPrefix: true,\n  processEntities: false,\n};\n\n/**\n * Default options for XML building\n */\nconst DEFAULT_BUILD_OPTIONS: Partial<XmlBuilderOptions> = {\n  attributeNamePrefix: '',\n  textNodeName: '#text',\n  ignoreAttributes: false,\n  format: true,\n  indentBy: '  ',\n  suppressEmptyNode: false,\n};\n\n/**\n * Parse XML string to JavaScript object\n *\n * @param xml - XML string to parse\n * @param options - Optional parser configuration (merged with defaults)\n * @returns Parsed JavaScript object\n *\n * @example\n * ```typescript\n * const xmlString = '<root><item id=\"1\">Test</item></root>';\n * const result = parseXml(xmlString);\n * // Returns: { root: { item: { id: '1', '#text': 'Test' } } }\n * ```\n */\nexport function parseXml(\n  xml: string,\n  options?: Partial<X2jOptions> & { maxSize?: number }\n): Record<string, unknown> {\n  if (options?.maxSize !== undefined && xml.length > options.maxSize) {\n    throw new Error(\n      `Input exceeds maximum allowed size: ${xml.length} bytes exceeds limit of ${options.maxSize} bytes`\n    );\n  }\n\n  // Validate XML first\n  const validation = XMLValidator.validate(xml);\n  if (validation !== true) {\n    throw new Error(`Invalid XML: ${validation.err.msg}`);\n  }\n\n  const mergedOptions = {\n    ...DEFAULT_PARSE_OPTIONS,\n    ...options,\n  };\n\n  const parser = new XMLParser(mergedOptions);\n  return parser.parse(xml) as Record<string, unknown>;\n}\n\n/**\n * Build XML string from JavaScript object\n *\n * @param obj - JavaScript object to convert to XML\n * @param options - Optional builder configuration (merged with defaults)\n * @returns XML string\n *\n * @example\n * ```typescript\n * const obj = { root: { item: { id: '1', '#text': 'Test' } } };\n * const xml = buildXml(obj);\n * // Returns formatted XML string\n * ```\n */\nexport function buildXml(\n  obj: Record<string, unknown>,\n  options?: Partial<XmlBuilderOptions>\n): string {\n  const mergedOptions = {\n    ...DEFAULT_BUILD_OPTIONS,\n    ...options,\n  };\n\n  const builder = new XMLBuilder(mergedOptions);\n  return builder.build(obj) as string;\n}\n\n/**\n * Validate if a string is well-formed XML\n *\n * @param xml - String to validate\n * @returns True if valid XML, false otherwise\n *\n * @example\n * ```typescript\n * isValidXml('<root><item>Test</item></root>'); // true\n * isValidXml('<root><item>Test</root>'); // false (mismatched tags)\n * isValidXml('not xml'); // false\n * ```\n */\nexport function isValidXml(xml: string): boolean {\n  if (!xml || xml.trim().length === 0) {\n    return false;\n  }\n\n  const result = XMLValidator.validate(xml);\n  return result === true;\n}\n\n/**\n * Parse XML with array handling for repeated elements\n * Forces specified tag names to always be arrays, even if only one element exists\n *\n * @param xml - XML string to parse\n * @param arrayTags - Array of tag names that should always be parsed as arrays\n * @returns Parsed JavaScript object with forced arrays\n *\n * @example\n * ```typescript\n * const xml = '<root><item>Test</item></root>';\n * const result = parseXmlWithArrays(xml, ['item']);\n * // Returns: { root: { item: ['Test'] } }\n * // Without arrayTags, would return: { root: { item: 'Test' } }\n * ```\n */\nexport function parseXmlWithArrays(\n  xml: string,\n  arrayTags: string[],\n  options?: Partial<X2jOptions> & { maxSize?: number }\n): Record<string, unknown> {\n  if (options?.maxSize !== undefined && xml.length > options.maxSize) {\n    throw new Error(\n      `Input exceeds maximum allowed size: ${xml.length} bytes exceeds limit of ${options.maxSize} bytes`\n    );\n  }\n\n  // Validate XML first (consistency with parseXml)\n  const validation = XMLValidator.validate(xml);\n  if (validation !== true) {\n    throw new Error(`Invalid XML: ${validation.err.msg}`);\n  }\n\n  const mergedOptions: Partial<X2jOptions> = {\n    ...DEFAULT_PARSE_OPTIONS,\n    ...options,\n    isArray: (tagName: string) => arrayTags.includes(tagName),\n  };\n\n  const parser = new XMLParser(mergedOptions);\n  return parser.parse(xml) as Record<string, unknown>;\n}\n\n/**\n * Extract text content from XML, stripping all tags\n *\n * @param xml - XML string\n * @returns Plain text content with tags removed\n *\n * @example\n * ```typescript\n * const xml = '<root><b>Bold</b> and <i>italic</i></root>';\n * const text = extractTextFromXml(xml);\n * // Returns: 'Bold and italic'\n * ```\n */\nexport function extractTextFromXml(xml: string): string {\n  if (!isValidXml(xml)) {\n    return '';\n  }\n\n  try {\n    const parsed = parseXml(xml, { ignoreAttributes: true });\n    return extractTextRecursive(parsed).trim();\n  } catch {\n    return '';\n  }\n}\n\n/**\n * Recursively extract text from parsed XML object\n * @private\n */\nfunction extractTextRecursive(obj: unknown): string {\n  if (typeof obj === 'string' || typeof obj === 'number') {\n    return String(obj);\n  }\n\n  if (Array.isArray(obj)) {\n    return obj.map(extractTextRecursive).join(' ');\n  }\n\n  if (typeof obj === 'object' && obj !== null) {\n    const record = obj as Record<string, unknown>;\n\n    // Recursively extract text from all properties\n    return Object.values(record)\n      .map(extractTextRecursive)\n      .filter(text => text.length > 0)\n      .join(' ');\n  }\n\n  return '';\n}\n"],"mappings":";;;;;;;;;;;;;;;AAkBA,MAAM,wBAA6C;CACjD,qBAAqB;CACrB,cAAc;CACd,kBAAkB;CAClB,mBAAmB;CACnB,qBAAqB;CACrB,eAAe;CACf,gBAAgB;CAChB,iBAAiB;CAClB;;;;AAKD,MAAM,wBAAoD;CACxD,qBAAqB;CACrB,cAAc;CACd,kBAAkB;CAClB,QAAQ;CACR,UAAU;CACV,mBAAmB;CACpB;;;;;;;;;;;;;;;AAgBD,SAAgB,SACd,KACA,SACyB;AACzB,KAAI,SAAS,YAAY,KAAA,KAAa,IAAI,SAAS,QAAQ,QACzD,OAAM,IAAI,MACR,uCAAuC,IAAI,OAAO,0BAA0B,QAAQ,QAAQ,QAC7F;CAIH,MAAM,aAAa,aAAa,SAAS,IAAI;AAC7C,KAAI,eAAe,KACjB,OAAM,IAAI,MAAM,gBAAgB,WAAW,IAAI,MAAM;AASvD,QADe,IAAI,UALG;EACpB,GAAG;EACH,GAAG;EACJ,CAE0C,CAC7B,MAAM,IAAI;;;;;;;;;;;;;;;;AAiB1B,SAAgB,SACd,KACA,SACQ;AAOR,QADgB,IAAI,WALE;EACpB,GAAG;EACH,GAAG;EACJ,CAE4C,CAC9B,MAAM,IAAI;;;;;;;;;;;;;;;AAgB3B,SAAgB,WAAW,KAAsB;AAC/C,KAAI,CAAC,OAAO,IAAI,MAAM,CAAC,WAAW,EAChC,QAAO;AAIT,QADe,aAAa,SAAS,IAAI,KACvB;;;;;;;;;;;;;;;;;;AAmBpB,SAAgB,mBACd,KACA,WACA,SACyB;AACzB,KAAI,SAAS,YAAY,KAAA,KAAa,IAAI,SAAS,QAAQ,QACzD,OAAM,IAAI,MACR,uCAAuC,IAAI,OAAO,0BAA0B,QAAQ,QAAQ,QAC7F;CAIH,MAAM,aAAa,aAAa,SAAS,IAAI;AAC7C,KAAI,eAAe,KACjB,OAAM,IAAI,MAAM,gBAAgB,WAAW,IAAI,MAAM;AAUvD,QADe,IAAI,UANwB;EACzC,GAAG;EACH,GAAG;EACH,UAAU,YAAoB,UAAU,SAAS,QAAQ;EAC1D,CAE0C,CAC7B,MAAM,IAAI;;;;;;;;;;;;;;;AAgB1B,SAAgB,mBAAmB,KAAqB;AACtD,KAAI,CAAC,WAAW,IAAI,CAClB,QAAO;AAGT,KAAI;AAEF,SAAO,qBADQ,SAAS,KAAK,EAAE,kBAAkB,MAAM,CAAC,CACrB,CAAC,MAAM;SACpC;AACN,SAAO;;;;;;;AAQX,SAAS,qBAAqB,KAAsB;AAClD,KAAI,OAAO,QAAQ,YAAY,OAAO,QAAQ,SAC5C,QAAO,OAAO,IAAI;AAGpB,KAAI,MAAM,QAAQ,IAAI,CACpB,QAAO,IAAI,IAAI,qBAAqB,CAAC,KAAK,IAAI;AAGhD,KAAI,OAAO,QAAQ,YAAY,QAAQ,KAIrC,QAAO,OAAO,OAHC,IAGa,CACzB,IAAI,qBAAqB,CACzB,QAAO,SAAQ,KAAK,SAAS,EAAE,CAC/B,KAAK,IAAI;AAGd,QAAO"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mitre/hdf-utilities",
-  "version": "3.0.1",
+  "version": "3.1.0",
   "description": "Utility functions for HDF libraries (JSON parsing, validation helpers)",
   "publishConfig": {
     "access": "public"
@@ -10,49 +10,37 @@
   "types": "./dist/index.d.ts",
   "exports": {
     ".": {
-      "import": "./dist/index.js",
-      "types": "./dist/index.d.ts"
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
     },
     "./json": {
-      "import": "./dist/json/index.js",
-      "types": "./dist/json/index.d.ts"
+      "types": "./dist/json/index.d.ts",
+      "import": "./dist/json/index.js"
     },
     "./hash": {
-      "import": "./dist/hash/index.js",
-      "types": "./dist/hash/index.d.ts"
+      "types": "./dist/hash/index.d.ts",
+      "import": "./dist/hash/index.js"
     },
     "./xml": {
-      "import": "./dist/xml/index.js",
-      "types": "./dist/xml/index.d.ts"
+      "types": "./dist/xml/index.d.ts",
+      "import": "./dist/xml/index.js"
     },
     "./csv": {
-      "import": "./dist/csv/index.js",
-      "types": "./dist/csv/index.d.ts"
+      "types": "./dist/csv/index.d.ts",
+      "import": "./dist/csv/index.js"
     },
     "./object": {
-      "import": "./dist/object/index.js",
-      "types": "./dist/object/index.d.ts"
+      "types": "./dist/object/index.d.ts",
+      "import": "./dist/object/index.js"
     },
     "./string": {
-      "import": "./dist/string/index.js",
-      "types": "./dist/string/index.d.ts"
+      "types": "./dist/string/index.d.ts",
+      "import": "./dist/string/index.js"
     }
   },
   "files": [
     "dist"
   ],
-  "scripts": {
-    "build": "pnpm clean && tsc",
-    "clean": "rimraf dist",
-    "test": "pnpm run test:ts",
-    "test:ts": "vitest run",
-    "test:go": "echo 'No Go tests in hdf-utilities'",
-    "test:watch": "vitest",
-    "test:coverage": "vitest run --coverage",
-    "type-check": "tsc --noEmit",
-    "lint": "eslint src test",
-    "lint:fix": "eslint src test --fix"
-  },
   "repository": {
     "type": "git",
     "url": "https://github.com/mitre/hdf-libs.git",
@@ -62,10 +50,10 @@
   "license": "Apache-2.0",
   "dependencies": {
     "d3-dsv": "^3.0.1",
-    "fast-xml-parser": "5.5.7"
+    "fast-xml-parser": "5.7.1"
   },
   "engines": {
-    "node": ">=20.0.0"
+    "node": ">=22.0.0"
   },
   "keywords": [
     "hdf",
@@ -78,5 +66,17 @@
     "@stryker-mutator/core": "^9.5.1",
     "@stryker-mutator/vitest-runner": "^9.5.1",
     "@types/d3-dsv": "^3.0.7"
+  },
+  "scripts": {
+    "build": "tsdown",
+    "clean": "rimraf dist",
+    "test": "pnpm run test:ts",
+    "test:ts": "vitest run",
+    "test:go": "echo 'No Go tests in hdf-utilities'",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "type-check": "tsc --noEmit",
+    "lint": "eslint src test",
+    "lint:fix": "eslint src test --fix"
   }
-}
+}

package/dist/severity/index.d.ts

@@ -1,29 +0,0 @@
-/**
- * Severity-to-impact mapping utilities.
- *
- * These define the canonical bidirectional mapping between severity labels
- * (critical, high, medium, low, informational) and HDF impact scores (0.0–1.0),
- * aligned with CVSS 3.x severity bands normalized to 0–1.
- *
- * Threshold ranges (used by impactToSeverity):
- *   >=0.9       = critical (CVSS 9.0–10.0)
- *   [0.7, 0.9)  = high     (CVSS 7.0–8.9)
- *   [0.4, 0.7)  = medium   (CVSS 4.0–6.9)
- *   (0.0, 0.4)  = low      (CVSS 0.1–3.9)
- *   0.0         = informational (CVSS 0.0)
- */
-/**
- * Map a severity string to an impact score.
- *
- * @param severity - Severity level (case-insensitive)
- * @returns Impact score between 0.0 and 1.0; defaults to 0.5 for unrecognized values
- */
-export declare function severityToImpact(severity: string): number;
-/**
- * Map an impact score to a severity string.
- *
- * @param impact - Impact score (0.0 to 1.0)
- * @returns Severity level string
- */
-export declare function impactToSeverity(impact: number): string;
-//# sourceMappingURL=index.d.ts.map

package/dist/severity/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/severity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAaH;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGzD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAMvD"}

package/dist/severity/index.js

@@ -1,52 +0,0 @@
-/**
- * Severity-to-impact mapping utilities.
- *
- * These define the canonical bidirectional mapping between severity labels
- * (critical, high, medium, low, informational) and HDF impact scores (0.0–1.0),
- * aligned with CVSS 3.x severity bands normalized to 0–1.
- *
- * Threshold ranges (used by impactToSeverity):
- *   >=0.9       = critical (CVSS 9.0–10.0)
- *   [0.7, 0.9)  = high     (CVSS 7.0–8.9)
- *   [0.4, 0.7)  = medium   (CVSS 4.0–6.9)
- *   (0.0, 0.4)  = low      (CVSS 0.1–3.9)
- *   0.0         = informational (CVSS 0.0)
- */
-const severityMap = {
-    critical: 0.9,
-    high: 0.7,
-    medium: 0.5,
-    low: 0.3,
-    info: 0.0,
-    none: 0.0,
-    informational: 0.0,
-    information: 0.0,
-};
-/**
- * Map a severity string to an impact score.
- *
- * @param severity - Severity level (case-insensitive)
- * @returns Impact score between 0.0 and 1.0; defaults to 0.5 for unrecognized values
- */
-export function severityToImpact(severity) {
-    const normalized = severity.toLowerCase();
-    return severityMap[normalized] ?? 0.5;
-}
-/**
- * Map an impact score to a severity string.
- *
- * @param impact - Impact score (0.0 to 1.0)
- * @returns Severity level string
- */
-export function impactToSeverity(impact) {
-    if (impact >= 0.9)
-        return 'critical';
-    if (impact >= 0.7)
-        return 'high';
-    if (impact >= 0.4)
-        return 'medium';
-    if (impact > 0.0)
-        return 'low';
-    return 'informational';
-}
-//# sourceMappingURL=index.js.map

package/dist/severity/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/severity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,GAA2B;IAC1C,QAAQ,EAAE,GAAG;IACb,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,GAAG;IACX,GAAG,EAAE,GAAG;IACR,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;IACT,aAAa,EAAE,GAAG;IAClB,WAAW,EAAE,GAAG;CACjB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC1C,OAAO,WAAW,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,UAAU,CAAC;IACrC,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,MAAM,CAAC;IACjC,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,QAAQ,CAAC;IACnC,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IAC/B,OAAO,eAAe,CAAC;AACzB,CAAC"}