@nodesecure/scanner 6.10.0 → 6.12.0

package/dist/class/TopPackages.class.d.ts

@@ -0,0 +1,10 @@
+/**
+ * This implementation take inspiration from npq
+ * @see https://github.com/lirantal/npq/blob/c11e5425707ae992fcd6fb0878abe01ccd77399b/lib/marshalls/typosquatting.marshall.js#L23
+ */
+export declare class TopPackages {
+    #private;
+    loadJSON(): Promise<void>;
+    getSimilarPackages(packageName: string): string[];
+}
+//# sourceMappingURL=TopPackages.class.d.ts.map

package/dist/class/TopPackages.class.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TopPackages.class.d.ts","sourceRoot":"","sources":["../../src/class/TopPackages.class.ts"],"names":[],"mappings":"AAaA;;;GAGG;AACH,qBAAa,WAAW;;IAGhB,QAAQ;IASd,kBAAkB,CAChB,WAAW,EAAE,MAAM,GAClB,MAAM,EAAE;CAqBZ"}

package/dist/class/TopPackages.class.js

@@ -0,0 +1,36 @@
+// Import Node.js Dependencies
+import path from "node:path";
+import fs from "node:fs/promises";
+// Import Third-party Dependencies
+import { distance } from "fastest-levenshtein";
+// Import Internal Dependencies
+import { getDirNameFromUrl } from "../utils/index.js";
+// CONSTANTS
+const __dirname = getDirNameFromUrl(import.meta.url);
+/**
+ * This implementation take inspiration from npq
+ * @see https://github.com/lirantal/npq/blob/c11e5425707ae992fcd6fb0878abe01ccd77399b/lib/marshalls/typosquatting.marshall.js#L23
+ */
+export class TopPackages {
+    #packages = [];
+    async loadJSON() {
+        const rawPackageStr = await fs.readFile(path.join(__dirname, "..", "data", "top-packages.json"), "utf-8");
+        this.#packages = JSON.parse(rawPackageStr);
+    }
+    getSimilarPackages(packageName) {
+        const similarPackages = [];
+        for (const popularPackageNameInRepository of this.#packages) {
+            // If the package to be installed is itself found within the Top Packages dataset
+            // then we don't report on it
+            if (packageName === popularPackageNameInRepository) {
+                return [];
+            }
+            const levenshteinDistance = distance(packageName, popularPackageNameInRepository);
+            if (levenshteinDistance > 0 && levenshteinDistance < 3) {
+                similarPackages.push(popularPackageNameInRepository);
+            }
+        }
+        return [...new Set(similarPackages)];
+    }
+}
+//# sourceMappingURL=TopPackages.class.js.map

package/dist/class/TopPackages.class.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TopPackages.class.js","sourceRoot":"","sources":["../../src/class/TopPackages.class.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAElC,kCAAkC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,+BAA+B;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,YAAY;AACZ,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAErD;;;GAGG;AACH,MAAM,OAAO,WAAW;IACtB,SAAS,GAAa,EAAE,CAAC;IAEzB,KAAK,CAAC,QAAQ;QACZ,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,QAAQ,CACrC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,CAAC,EACvD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAa,CAAC;IACzD,CAAC;IAED,kBAAkB,CAChB,WAAmB;QAEnB,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,KAAK,MAAM,8BAA8B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5D,iFAAiF;YACjF,6BAA6B;YAC7B,IAAI,WAAW,KAAK,8BAA8B,EAAE,CAAC;gBACnD,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,mBAAmB,GAAG,QAAQ,CAClC,WAAW,EACX,8BAA8B,CAC/B,CAAC;YAEF,IAAI,mBAAmB,GAAG,CAAC,IAAI,mBAAmB,GAAG,CAAC,EAAE,CAAC;gBACvD,eAAe,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;IACvC,CAAC;CACF"}