@openrewrite/recipes-nodejs 0.36.0-20251211-172625 → 0.36.0-20251212-170419

package/dist/security/dependency-vulnerability-check.d.ts

@@ -0,0 +1,63 @@
+import { ExecutionContext, Recipe, ScanningRecipe, TreeVisitor } from "@openrewrite/rewrite";
+import { DependencyScope, ResolvedDependency, PackageManager, DependencyRecipeAccumulator } from "@openrewrite/rewrite/javascript";
+import { Vulnerability, VulnerabilityDatabase } from "./vulnerability";
+export type UpgradeDelta = 'none' | 'patch' | 'minor' | 'major';
+interface PathSegment {
+    name: string;
+    version: string;
+}
+interface VulnerableDependency {
+    resolved: ResolvedDependency;
+    vulnerability: Vulnerability;
+    depth: number;
+    isDirect: boolean;
+    scope?: DependencyScope;
+    path: PathSegment[];
+}
+interface VulnerabilityFix {
+    packageName: string;
+    newVersion: string;
+    isTransitive: boolean;
+    cves: string[];
+    scope?: DependencyScope;
+}
+interface ProjectUpdateInfo {
+    projectDir: string;
+    packageJsonPath: string;
+    originalPackageJson: string;
+    packageManager: PackageManager;
+}
+interface Accumulator extends DependencyRecipeAccumulator<ProjectUpdateInfo> {
+    db: VulnerabilityDatabase;
+    vulnerableByProject: Map<string, VulnerableDependency[]>;
+    fixesByProject: Map<string, VulnerabilityFix[]>;
+}
+export declare class DependencyVulnerabilityCheck extends ScanningRecipe<Accumulator> {
+    readonly name = "org.openrewrite.node.dependency-vulnerability-check";
+    readonly displayName = "Find and fix vulnerable npm dependencies";
+    readonly description: string;
+    private readonly vulnerabilityReport;
+    scope?: DependencyScope;
+    overrideTransitive?: boolean;
+    maximumUpgradeDelta?: UpgradeDelta;
+    minimumSeverity?: string;
+    cvePattern?: string;
+    initialValue(_ctx: ExecutionContext): Accumulator;
+    private getMinimumSeverity;
+    private getMaximumUpgradeDelta;
+    private isReportOnly;
+    private matchesCvePattern;
+    private isVersionAffected;
+    private isUpgradeableWithinDelta;
+    private getUpgradeVersion;
+    private renderPath;
+    private findVulnerabilities;
+    private computeFixes;
+    scanner(acc: Accumulator): Promise<TreeVisitor<any, ExecutionContext>>;
+    getRecipeList(): Promise<Recipe[]>;
+    editorWithData(acc: Accumulator): Promise<TreeVisitor<any, ExecutionContext>>;
+    private runPackageManagerInstall;
+    private createModifiedPackageJson;
+}
+export {};
+//# sourceMappingURL=dependency-vulnerability-check.d.ts.map

package/dist/security/dependency-vulnerability-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependency-vulnerability-check.d.ts","sourceRoot":"","sources":["../../src/security/dependency-vulnerability-check.ts"],"names":[],"mappings":"AAMA,OAAO,EAAoB,gBAAgB,EAAU,MAAM,EAAE,cAAc,EAAQ,WAAW,EAAa,MAAM,sBAAsB,CAAC;AAKxI,OAAO,EACH,eAAe,EAEf,kBAAkB,EAClB,cAAc,EAEd,2BAA2B,EAM9B,MAAM,iCAAiC,CAAC;AAGzC,OAAO,EAA2C,aAAa,EAAE,qBAAqB,EAAC,MAAM,iBAAiB,CAAC;AAM/G,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAsHhE,UAAU,WAAW;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACnB;AAKD,UAAU,oBAAoB;IAE1B,QAAQ,EAAE,kBAAkB,CAAC;IAE7B,aAAa,EAAE,aAAa,CAAC;IAE7B,KAAK,EAAE,MAAM,CAAC;IAEd,QAAQ,EAAE,OAAO,CAAC;IAElB,KAAK,CAAC,EAAE,eAAe,CAAC;IAExB,IAAI,EAAE,WAAW,EAAE,CAAC;CACvB;AAKD,UAAU,gBAAgB;IAEtB,WAAW,EAAE,MAAM,CAAC;IAEpB,UAAU,EAAE,MAAM,CAAC;IAEnB,YAAY,EAAE,OAAO,CAAC;IAEtB,IAAI,EAAE,MAAM,EAAE,CAAC;IAEf,KAAK,CAAC,EAAE,eAAe,CAAC;CAC3B;AAKD,UAAU,iBAAiB;IAEvB,UAAU,EAAE,MAAM,CAAC;IAEnB,eAAe,EAAE,MAAM,CAAC;IAExB,mBAAmB,EAAE,MAAM,CAAC;IAE5B,cAAc,EAAE,cAAc,CAAC;CAClC;AAKD,UAAU,WAAY,SAAQ,2BAA2B,CAAC,iBAAiB,CAAC;IAExE,EAAE,EAAE,qBAAqB,CAAC;IAE1B,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAEzD,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;CACnD;AAgBD,qBAAa,4BAA6B,SAAQ,cAAc,CAAC,WAAW,CAAC;IACzE,QAAQ,CAAC,IAAI,yDAAyD;IACtE,QAAQ,CAAC,WAAW,8CAA8C;IAClE,QAAQ,CAAC,WAAW,SAI8D;IAElF,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAKlC;IAUF,KAAK,CAAC,EAAE,eAAe,CAAC;IAUxB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAa7B,mBAAmB,CAAC,EAAE,YAAY,CAAC;IAWnC,eAAe,CAAC,EAAE,MAAM,CAAC;IAWzB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,WAAW;IAWjD,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,sBAAsB;IAI9B,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,iBAAiB;IAezB,OAAO,CAAC,iBAAiB;IAwCzB,OAAO,CAAC,wBAAwB;IAwDhC,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,UAAU;IAclB,OAAO,CAAC,mBAAmB;IAyE3B,OAAO,CAAC,YAAY;IAyDd,OAAO,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IA0EtE,aAAa,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAMlC,cAAc,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;YAiKrE,wBAAwB;IAuBtC,OAAO,CAAC,yBAAyB;CAgBpC"}