@n8n/scan-community-package 0.1.0 → 0.1.1

package/package.json

@@ -1,10 +1,10 @@
 {
 	"name": "@n8n/scan-community-package",
-	"version": "0.1.0",
+	"version": "0.1.1",
 	"description": "Static code analyser for n8n community packages",
 	"license": "none",
 	"packageManager": "pnpm@10.2.1",
-	"bin": "scanner/scan-community-package.mjs",
+	"bin": "scanner/cli.mjs",
 	"files": [
 		"scanner"
 	],

package/scanner/cli.mjs

@@ -0,0 +1,36 @@
+#!/usr/bin/env node
+
+const args = process.argv.slice(2);
+if (args.length < 1) {
+	console.error(
+		"Usage: npx @n8n/scan-community-package <package-name>[@version]",
+	);
+	process.exit(1);
+}
+
+import { resolvePackage, analyzePackageByName } from "./scanner.mjs";
+
+const packageSpec = args[0];
+const { packageName, version } = resolvePackage(packageSpec);
+try {
+	const result = await analyzePackageByName(packageName, version);
+
+	if (result.passed) {
+		console.log(
+			`✅ Package ${packageName}@${result.version} has passed all security checks`,
+		);
+	} else {
+		console.log(
+			`❌ Package ${packageName}@${result.version} has failed security checks`,
+		);
+		console.log(`Reason: ${result.message}`);
+
+		if (result.details) {
+			console.log("\nDetails:");
+			console.log(result.details);
+		}
+	}
+} catch (error) {
+	console.error("Analysis failed:", error);
+	process.exit(1);
+}

package/scanner/{scan-community-package.mjs → scanner.mjs}

@@ -18,7 +18,27 @@ const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const TEMP_DIR = tmp.dirSync({ unsafeCleanup: true }).name;
 const registry = "https://registry.npmjs.org/";
 
-async function downloadAndExtractPackage(packageName, version) {
+export const resolvePackage = (packageSpec) => {
+	let packageName, version;
+	if (packageSpec.startsWith("@")) {
+		if (packageSpec.includes("@", 1)) {
+			// Handle scoped packages with versions
+			const lastAtIndex = packageSpec.lastIndexOf("@");
+			return {
+				packageName: packageSpec.substring(0, lastAtIndex),
+				version: packageSpec.substring(lastAtIndex + 1),
+			};
+		} else {
+			// Handle scoped packages without version
+			return { packageName: packageSpec, version: null };
+		}
+	}
+	// Handle regular packages
+	const parts = packageSpec.split("@");
+	return { packageName: parts[0], version: parts[1] || null };
+};
+
+const downloadAndExtractPackage = async (packageName, version) => {
 	try {
 		// Download the tarball
 		execSync(`npm -q pack ${packageName}@${version}`, { cwd: TEMP_DIR });
@@ -42,9 +62,9 @@ async function downloadAndExtractPackage(packageName, version) {
 		console.error(`\nFailed to download package: ${error.message}`);
 		throw error;
 	}
-}
+};
 
-async function analyzePackage(packageDir) {
+const analyzePackage = async (packageDir) => {
 	const { default: eslintPlugin } = await import("./eslint-plugin.mjs");
 	const eslint = new ESLint({
 		cwd: packageDir,
@@ -102,9 +122,9 @@ async function analyzePackage(packageDir) {
 			error,
 		};
 	}
-}
+};
 
-export async function analyzePackageByName(packageName, version) {
+export const analyzePackageByName = async (packageName, version) => {
 	try {
 		let exactVersion = version;
 
@@ -156,66 +176,4 @@ export async function analyzePackageByName(packageName, version) {
 			message: `Analysis failed: ${error.message}`,
 		};
 	}
-}
-
-const resolvePackage = (packageSpec) => {
-	let packageName, version;
-	if (packageSpec.startsWith("@")) {
-		if (packageSpec.includes("@", 1)) {
-			// Handle scoped packages with versions
-			const lastAtIndex = packageSpec.lastIndexOf("@");
-			return {
-				packageName: packageSpec.substring(0, lastAtIndex),
-				version: packageSpec.substring(lastAtIndex + 1),
-			};
-		} else {
-			// Handle scoped packages without version
-			return { packageName: packageSpec, version: null };
-		}
-	}
-	// Handle regular packages
-	const parts = packageSpec.split("@");
-	return { packageName: parts[0], version: parts[1] || null };
 };
-
-async function main() {
-	const args = process.argv.slice(2);
-
-	if (args.length < 1) {
-		console.error(
-			"Usage: node scan-community-package.mjs <package-name>[@version]",
-		);
-		process.exit(1);
-	}
-
-	const packageSpec = args[0];
-	const { packageName, version } = resolvePackage(packageSpec);
-
-	try {
-		const result = await analyzePackageByName(packageName, version);
-
-		if (result.passed) {
-			console.log(
-				`✅ Package ${packageName}@${result.version} has passed all security checks`,
-			);
-		} else {
-			console.log(
-				`❌ Package ${packageName}@${result.version} has failed security checks`,
-			);
-			console.log(`Reason: ${result.message}`);
-
-			if (result.details) {
-				console.log("\nDetails:");
-				console.log(result.details);
-			}
-		}
-	} catch (error) {
-		console.error("Analysis failed:", error);
-		process.exit(1);
-	}
-}
-
-// In ESM, check if the current file is being executed directly
-if (import.meta.url === `file://${process.argv[1]}`) {
-	void main();
-}