@openrewrite/recipes-nodejs 0.37.0-20260106-082310 → 0.37.0-20260106-104324

package/dist/security/version-utils.js

@@ -0,0 +1,173 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extractVersionPrefix = extractVersionPrefix;
+exports.applyVersionPrefix = applyVersionPrefix;
+exports.extractMinimumVersion = extractMinimumVersion;
+exports.isVersionWithinDelta = isVersionWithinDelta;
+exports.isVersionAffected = isVersionAffected;
+exports.isUpgradeableWithinDelta = isUpgradeableWithinDelta;
+exports.getUpgradeVersion = getUpgradeVersion;
+const semver = __importStar(require("semver"));
+function extractVersionPrefix(versionString) {
+    const match = versionString.match(/^([~^]|>=?|<=?|=)?(.*)$/);
+    if (match) {
+        return {
+            prefix: match[1] || '',
+            version: match[2]
+        };
+    }
+    return { prefix: '', version: versionString };
+}
+function applyVersionPrefix(originalVersion, newVersion) {
+    const { prefix } = extractVersionPrefix(originalVersion);
+    return prefix + newVersion;
+}
+function extractMinimumVersion(constraint) {
+    if (!constraint)
+        return undefined;
+    if (semver.valid(constraint)) {
+        return constraint;
+    }
+    const match = constraint.match(/^[~^>=<]*\s*(\d+\.\d+\.\d+(?:-[a-zA-Z0-9.]+)?)/);
+    if (match && semver.valid(match[1])) {
+        return match[1];
+    }
+    const coerced = semver.coerce(constraint);
+    return coerced === null || coerced === void 0 ? void 0 : coerced.version;
+}
+function isVersionWithinDelta(originalVersion, targetVersion, delta) {
+    if (delta === 'none') {
+        return false;
+    }
+    try {
+        const original = semver.parse(originalVersion);
+        const target = semver.parse(targetVersion);
+        if (!original || !target)
+            return false;
+        switch (delta) {
+            case 'patch':
+                return original.major === target.major && original.minor === target.minor;
+            case 'minor':
+                return original.major === target.major;
+            case 'major':
+                return true;
+            default:
+                return false;
+        }
+    }
+    catch (_a) {
+        return false;
+    }
+}
+function isVersionAffected(version, vulnerability) {
+    try {
+        const v = semver.parse(version);
+        if (!v)
+            return false;
+        if (vulnerability.introducedVersion && vulnerability.introducedVersion !== '0') {
+            const introduced = semver.parse(vulnerability.introducedVersion);
+            if (introduced && semver.lt(v, introduced)) {
+                return false;
+            }
+        }
+        if (vulnerability.fixedVersion) {
+            const fixed = semver.parse(vulnerability.fixedVersion);
+            if (fixed && semver.gte(v, fixed)) {
+                return false;
+            }
+            return true;
+        }
+        if (vulnerability.lastAffectedVersion) {
+            const lastAffected = semver.parse(vulnerability.lastAffectedVersion);
+            if (lastAffected && semver.gt(v, lastAffected)) {
+                return false;
+            }
+            return true;
+        }
+        return true;
+    }
+    catch (_a) {
+        return false;
+    }
+}
+function isUpgradeableWithinDelta(currentVersion, vulnerability, delta) {
+    if (delta === 'none') {
+        return false;
+    }
+    try {
+        const current = semver.parse(currentVersion);
+        if (!current)
+            return false;
+        if (vulnerability.fixedVersion) {
+            const fixed = semver.parse(vulnerability.fixedVersion);
+            if (!fixed)
+                return false;
+            switch (delta) {
+                case 'patch':
+                    return current.major === fixed.major && current.minor === fixed.minor;
+                case 'minor':
+                    return current.major === fixed.major;
+                case 'major':
+                    return true;
+            }
+        }
+        if (vulnerability.lastAffectedVersion) {
+            const lastAffected = semver.parse(vulnerability.lastAffectedVersion);
+            if (!lastAffected)
+                return false;
+            switch (delta) {
+                case 'patch':
+                    return current.major === lastAffected.major &&
+                        current.minor === lastAffected.minor;
+                case 'minor':
+                    return current.major === lastAffected.major;
+                case 'major':
+                    return true;
+            }
+        }
+        return false;
+    }
+    catch (_a) {
+        return false;
+    }
+}
+function getUpgradeVersion(vulnerability) {
+    if (vulnerability.fixedVersion) {
+        return vulnerability.fixedVersion;
+    }
+    return undefined;
+}
+//# sourceMappingURL=version-utils.js.map

package/dist/security/version-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-utils.js","sourceRoot":"","sources":["../../src/security/version-utils.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBA,oDASC;AAKD,gDAGC;AAMD,sDAiBC;AAKD,oDA2BC;AAKD,8CAmCC;AAKD,4DAiDC;AAKD,8CAQC;AA/LD,+CAAiC;AAYjC,SAAgB,oBAAoB,CAAC,aAAqB;IACtD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7D,IAAI,KAAK,EAAE,CAAC;QACR,OAAO;YACH,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YACtB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;SACpB,CAAC;IACN,CAAC;IACD,OAAO,EAAC,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,aAAa,EAAC,CAAC;AAChD,CAAC;AAKD,SAAgB,kBAAkB,CAAC,eAAuB,EAAE,UAAkB;IAC1E,MAAM,EAAC,MAAM,EAAC,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;IACvD,OAAO,MAAM,GAAG,UAAU,CAAC;AAC/B,CAAC;AAMD,SAAgB,qBAAqB,CAAC,UAAkB;IACpD,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAGlC,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,OAAO,UAAU,CAAC;IACtB,CAAC;IAGD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACjF,IAAI,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAGD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC1C,OAAO,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,CAAC;AAC5B,CAAC;AAKD,SAAgB,oBAAoB,CAChC,eAAuB,EACvB,aAAqB,EACrB,KAAmB;IAEnB,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAEvC,QAAQ,KAAK,EAAE,CAAC;YACZ,KAAK,OAAO;gBACR,OAAO,QAAQ,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC;YAC9E,KAAK,OAAO;gBACR,OAAO,QAAQ,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC;YAC3C,KAAK,OAAO;gBACR,OAAO,IAAI,CAAC;YAChB;gBACI,OAAO,KAAK,CAAC;QACrB,CAAC;IACL,CAAC;IAAC,WAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAKD,SAAgB,iBAAiB,CAAC,OAAe,EAAE,aAA4B;IAC3E,IAAI,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAGrB,IAAI,aAAa,CAAC,iBAAiB,IAAI,aAAa,CAAC,iBAAiB,KAAK,GAAG,EAAE,CAAC;YAC7E,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;YACjE,IAAI,UAAU,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;gBACzC,OAAO,KAAK,CAAC;YACjB,CAAC;QACL,CAAC;QAGD,IAAI,aAAa,CAAC,YAAY,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;YACvD,IAAI,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;gBAChC,OAAO,KAAK,CAAC;YACjB,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;QAGD,IAAI,aAAa,CAAC,mBAAmB,EAAE,CAAC;YACpC,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;YACrE,IAAI,YAAY,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC;gBAC7C,OAAO,KAAK,CAAC;YACjB,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAAC,WAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAKD,SAAgB,wBAAwB,CACpC,cAAsB,EACtB,aAA4B,EAC5B,KAAmB;IAEnB,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAG3B,IAAI,aAAa,CAAC,YAAY,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;YACvD,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YAEzB,QAAQ,KAAK,EAAE,CAAC;gBACZ,KAAK,OAAO;oBACR,OAAO,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC;gBAC1E,KAAK,OAAO;oBACR,OAAO,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC;gBACzC,KAAK,OAAO;oBACR,OAAO,IAAI,CAAC;YACpB,CAAC;QACL,CAAC;QAID,IAAI,aAAa,CAAC,mBAAmB,EAAE,CAAC;YACpC,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;YACrE,IAAI,CAAC,YAAY;gBAAE,OAAO,KAAK,CAAC;YAEhC,QAAQ,KAAK,EAAE,CAAC;gBACZ,KAAK,OAAO;oBACR,OAAO,OAAO,CAAC,KAAK,KAAK,YAAY,CAAC,KAAK;wBACvC,OAAO,CAAC,KAAK,KAAK,YAAY,CAAC,KAAK,CAAC;gBAC7C,KAAK,OAAO;oBACR,OAAO,OAAO,CAAC,KAAK,KAAK,YAAY,CAAC,KAAK,CAAC;gBAChD,KAAK,OAAO;oBACR,OAAO,IAAI,CAAC;YACpB,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAAC,WAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAKD,SAAgB,iBAAiB,CAAC,aAA4B;IAC1D,IAAI,aAAa,CAAC,YAAY,EAAE,CAAC;QAC7B,OAAO,aAAa,CAAC,YAAY,CAAC;IACtC,CAAC;IAID,OAAO,SAAS,CAAC;AACrB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openrewrite/recipes-nodejs",
-  "version": "0.37.0-20260106-082310",
+  "version": "0.37.0-20260106-104324",
   "license": "Moderne Source Available License",
   "description": "OpenRewrite recipes for Node.js library migrations.",
   "homepage": "https://github.com/moderneinc/rewrite-node",