@patrickdk77/office-defuse 0.0.0-stage → 0.1.0

package/dist/findings.d.ts

@@ -0,0 +1,25 @@
+import { OfficeCategory as C, OfficeDetail as D, type OfficeActionOverride, type OfficeFinding, type OfficeFindingAction } from './types';
+interface Spec {
+    action: OfficeFindingAction;
+    /**
+     * May contain <first|second> choices, which take the first alternative whose {key} values from the data are all
+     * set and not empty, or that names none. A value has control and format characters replaced by "?" and is cut to
+     * 60 characters.
+     */
+    description: string;
+    weight: number;
+}
+/** The built-in spec for a kind of finding, or undefined for a kind office-defuse does not make, such as one from another package. */
+export declare function findingSpec(category: string, detail: string): Spec | undefined;
+/** Every category and detail pair office-defuse makes, with its default action, description and score weight. */
+export declare function allFindingSpecs(): Array<{
+    category: C;
+    detail: D;
+} & Spec>;
+export declare class FindingFactory {
+    private readonly overrides;
+    constructor(overrides?: OfficeActionOverride[]);
+    private actionFor;
+    make(category: C, detail: D, location?: string, data?: Record<string, string | number>): OfficeFinding;
+}
+export {};

package/dist/findings.js

@@ -0,0 +1,169 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FindingFactory = void 0;
+exports.findingSpec = findingSpec;
+exports.allFindingSpecs = allFindingSpecs;
+const types_1 = require("./types");
+const specs = new Map();
+function def(c, d, action, weight, description) {
+    specs.set(`${c}/${d}`, { action, weight, description });
+}
+// CONTAINER: the ZIP layer. Every reject stops the run.
+def(types_1.OfficeCategory.Container, types_1.OfficeDetail.NotZip, 'reject', 0, 'The file is not a ZIP archive, or it is cut short');
+def(types_1.OfficeCategory.Container, types_1.OfficeDetail.AmbiguousEnd, 'reject', 0, 'The archive has more than one end record a reader could pick');
+def(types_1.OfficeCategory.Container, types_1.OfficeDetail.MultiDisk, 'reject', 0, 'The archive claims to span several disks');
+def(types_1.OfficeCategory.Container, types_1.OfficeDetail.DirectoryMismatch, 'reject', 0, "The archive's end record disagrees with its central directory");
+def(types_1.OfficeCategory.Container, types_1.OfficeDetail.OutOfRange, 'reject', 0, 'An entry or the central directory lies outside the file');
+def(types_1.OfficeCategory.Container, types_1.OfficeDetail.Overlap, 'reject', 0, 'Two entries in the archive share bytes');
+def(types_1.OfficeCategory.Container, types_1.OfficeDetail.HeaderMismatch, 'reject', 0, 'A local header contradicts the central directory<: {name}|>');
+def(types_1.OfficeCategory.Container, types_1.OfficeDetail.DuplicateName, 'reject', 0, 'Two entries have the same name, ignoring case<: {name}|>');
+def(types_1.OfficeCategory.Container, types_1.OfficeDetail.UnsafeName, 'reject', 0, 'An entry name is unsafe to use as a path<: {name}|>');
+def(types_1.OfficeCategory.Container, types_1.OfficeDetail.NameEncoding, 'reject', 0, 'An entry name can be read in more than one way');
+def(types_1.OfficeCategory.Container, types_1.OfficeDetail.EncryptedEntry, 'reject', 0, 'An entry is encrypted<: {name}|>');
+def(types_1.OfficeCategory.Container, types_1.OfficeDetail.UnsupportedMethod, 'reject', 0, 'An entry uses a compression method other than stored or deflate<: {name}|>');
+def(types_1.OfficeCategory.Container, types_1.OfficeDetail.Zip64Mismatch, 'reject', 0, 'ZIP64 fields disagree with the fields they extend');
+def(types_1.OfficeCategory.Container, types_1.OfficeDetail.BadExtraField, 'reject', 0, 'An extra field block does not parse<: {name}|>');
+def(types_1.OfficeCategory.Container, types_1.OfficeDetail.DataError, 'reject', 0, "An entry's data does not match its declared size and checksum<: {name}|>");
+def(types_1.OfficeCategory.Container, types_1.OfficeDetail.LeadingBytes, 'strip', 10, 'Data before the first entry of the archive');
+def(types_1.OfficeCategory.Container, types_1.OfficeDetail.HiddenData, 'strip', 20, 'Data between entries of the archive that no entry covers');
+def(types_1.OfficeCategory.Container, types_1.OfficeDetail.TrailingBytes, 'strip', 10, 'Data after the end of the archive');
+// XML. MALFORMED and ENCODING stop the run.
+def(types_1.OfficeCategory.Xml, types_1.OfficeDetail.Doctype, 'info', 0, 'An XML part declares a document type<: {part}|>');
+def(types_1.OfficeCategory.Xml, types_1.OfficeDetail.InternalSubset, 'strip', 20, 'An XML part declares entities or other markup in its document type<: {part}|>');
+def(types_1.OfficeCategory.Xml, types_1.OfficeDetail.ExternalEntity, 'strip', 40, 'An XML part takes content from <{target}|outside the file>');
+def(types_1.OfficeCategory.Xml, types_1.OfficeDetail.Malformed, 'reject', 0, 'An XML part is not well-formed<: {part}|>');
+def(types_1.OfficeCategory.Xml, types_1.OfficeDetail.Encoding, 'reject', 0, 'An XML part is not in valid UTF-8 or UTF-16<: {part}|>');
+// LIMIT
+def(types_1.OfficeCategory.Limit, types_1.OfficeDetail.FileSize, 'reject', 0, 'The file exceeds the file size limit');
+def(types_1.OfficeCategory.Limit, types_1.OfficeDetail.EntryCount, 'reject', 0, 'The archive exceeds the entry count limit');
+def(types_1.OfficeCategory.Limit, types_1.OfficeDetail.DecompressedSize, 'reject', 0, 'An entry exceeds the decompressed size limit');
+def(types_1.OfficeCategory.Limit, types_1.OfficeDetail.TotalDecompressedSize, 'reject', 0, 'The archive exceeds the total decompressed size limit');
+def(types_1.OfficeCategory.Limit, types_1.OfficeDetail.XmlDepth, 'reject', 0, 'An XML part exceeds the element depth limit');
+def(types_1.OfficeCategory.Limit, types_1.OfficeDetail.XmlTokenSize, 'reject', 0, 'An XML part exceeds the token size limit');
+def(types_1.OfficeCategory.Limit, types_1.OfficeDetail.XmlEntityDepth, 'reject', 0, 'An XML part exceeds the entity nesting limit');
+def(types_1.OfficeCategory.Limit, types_1.OfficeDetail.XmlEntityExpansions, 'reject', 0, 'The file exceeds the entity expansion limit');
+def(types_1.OfficeCategory.Limit, types_1.OfficeDetail.XmlEntitySize, 'reject', 0, 'The file exceeds the expanded entity size limit');
+def(types_1.OfficeCategory.Limit, types_1.OfficeDetail.Time, 'reject', 0, 'The file exceeds the time limit');
+// PACKAGE
+def(types_1.OfficeCategory.Package, types_1.OfficeDetail.Unrecognized, 'reject', 0, 'The file is not a recognized Office or OpenDocument package');
+def(types_1.OfficeCategory.Package, types_1.OfficeDetail.AmbiguousFormat, 'reject', 0, 'The file can be read as more than one format');
+def(types_1.OfficeCategory.Package, types_1.OfficeDetail.Unreadable, 'reject', 0, 'The file could not be read');
+def(types_1.OfficeCategory.Package, types_1.OfficeDetail.DuplicateEntry, 'reject', 0, 'The package names one thing twice, and readers may pick either');
+def(types_1.OfficeCategory.Package, types_1.OfficeDetail.UntypedPart, 'strip', 10, 'A part has no content type<: {part}|>');
+def(types_1.OfficeCategory.Package, types_1.OfficeDetail.UnreferencedPart, 'strip', 0, 'A part nothing in the package refers to<: {part}|>');
+def(types_1.OfficeCategory.Package, types_1.OfficeDetail.OdfLayout, 'strip', 10, 'The OpenDocument package layout is irregular<: {reason}|>');
+// ENCRYPTED
+def(types_1.OfficeCategory.Encrypted, types_1.OfficeDetail.PasswordRequired, 'reject', 0, 'The document is encrypted with a password');
+// MACRO
+def(types_1.OfficeCategory.Macro, types_1.OfficeDetail.VbaProject, 'strip', 70, 'The document holds VBA macros');
+def(types_1.OfficeCategory.Macro, types_1.OfficeDetail.XlmMacrosheet, 'strip', 70, 'The workbook holds an Excel 4.0 macro sheet');
+def(types_1.OfficeCategory.Macro, types_1.OfficeDetail.OdfBasic, 'strip', 70, 'The document holds Basic macros');
+def(types_1.OfficeCategory.Macro, types_1.OfficeDetail.OdfScripts, 'strip', 70, 'The document holds scripts');
+def(types_1.OfficeCategory.Macro, types_1.OfficeDetail.OdfDialogs, 'strip', 30, 'The document holds Basic dialogs, which call macros');
+def(types_1.OfficeCategory.Macro, types_1.OfficeDetail.EventOnOpen, 'strip', 70, 'A macro or script runs when the document opens');
+def(types_1.OfficeCategory.Macro, types_1.OfficeDetail.Event, 'strip', 50, 'A macro or script runs on <the {event}|an> event');
+def(types_1.OfficeCategory.Macro, types_1.OfficeDetail.Link, 'strip', 50, 'A link or action runs a macro or script');
+// UI
+def(types_1.OfficeCategory.Ui, types_1.OfficeDetail.Ribbon, 'info', 0, 'The document customizes the ribbon');
+def(types_1.OfficeCategory.Ui, types_1.OfficeDetail.Callback, 'strip', 30, 'The custom ribbon calls a macro<: {callback}|>');
+def(types_1.OfficeCategory.Ui, types_1.OfficeDetail.OdfConfiguration, 'strip', 10, 'The document carries its own menu, toolbar or key settings, which can call macros');
+// ACTION
+def(types_1.OfficeCategory.Action, types_1.OfficeDetail.RunProgram, 'strip', 80, 'A click or hover runs a program or opens a file');
+def(types_1.OfficeCategory.Action, types_1.OfficeDetail.OleVerb, 'strip', 40, 'A click or hover activates an embedded object');
+// DDE
+def(types_1.OfficeCategory.Dde, types_1.OfficeDetail.Field, 'strip', 70, 'A field runs a command through DDE');
+def(types_1.OfficeCategory.Dde, types_1.OfficeDetail.Link, 'strip', 70, 'A DDE link asks another program for data<: {application}|>');
+def(types_1.OfficeCategory.Dde, types_1.OfficeDetail.Formula, 'strip', 70, 'A formula <takes text from external entity {entity}, so it may call DDE|asks another program for data through DDE>');
+// FIELD
+def(types_1.OfficeCategory.Field, types_1.OfficeDetail.Macrobutton, 'strip', 40, 'A field runs a macro when double-clicked');
+def(types_1.OfficeCategory.Field, types_1.OfficeDetail.Computed, 'strip', 50, "A field's type <comes from external entity {entity}|is built by another field when it updates>");
+// EXTERNAL
+def(types_1.OfficeCategory.External, types_1.OfficeDetail.Template, 'strip', 60, 'The document loads its template from <{target}|outside the file>');
+def(types_1.OfficeCategory.External, types_1.OfficeDetail.Object, 'strip', 60, 'A linked object loads from <{target}|outside the file>');
+def(types_1.OfficeCategory.External, types_1.OfficeDetail.Image, 'strip', 30, 'An image loads from <{target}|outside the file>');
+def(types_1.OfficeCategory.External, types_1.OfficeDetail.Frame, 'strip', 40, 'A frame shows <{target}|a page from outside the file>');
+def(types_1.OfficeCategory.External, types_1.OfficeDetail.Include, 'strip', 40, 'Content is included from <{target}|another file>');
+def(types_1.OfficeCategory.External, types_1.OfficeDetail.Workbook, 'strip', 30, 'Formulas read another workbook at <{target}|another location>');
+def(types_1.OfficeCategory.External, types_1.OfficeDetail.Reload, 'strip', 40, 'The document loads <{target}|another address> on its own after a delay');
+def(types_1.OfficeCategory.External, types_1.OfficeDetail.Other, 'strip', 30, 'The document refers to <{target}|something outside the file>');
+def(types_1.OfficeCategory.External, types_1.OfficeDetail.LocalFile, 'strip', 5, 'The document refers to a local file<: {target}|>');
+// LINK
+def(types_1.OfficeCategory.Link, types_1.OfficeDetail.Safe, 'info', 0, 'Web or email link');
+def(types_1.OfficeCategory.Link, types_1.OfficeDetail.FileUrl, 'strip', 60, 'A link opens a local file');
+def(types_1.OfficeCategory.Link, types_1.OfficeDetail.NetworkPath, 'strip', 60, 'A link opens a network share');
+def(types_1.OfficeCategory.Link, types_1.OfficeDetail.DataUrl, 'strip', 60, 'A link carries embedded data');
+def(types_1.OfficeCategory.Link, types_1.OfficeDetail.ScriptUrl, 'strip', 50, 'A link uses a javascript: or vbscript: URL');
+def(types_1.OfficeCategory.Link, types_1.OfficeDetail.OtherScheme, 'strip', 30, 'A link uses a scheme other than http, https or mailto');
+def(types_1.OfficeCategory.Link, types_1.OfficeDetail.Credentials, 'strip', 40, 'A link hides its real host behind a user name');
+def(types_1.OfficeCategory.Link, types_1.OfficeDetail.IpHost, 'strip', 40, 'A link points at a raw IP address');
+def(types_1.OfficeCategory.Link, types_1.OfficeDetail.LookalikeHost, 'strip', 40, "A link's host uses punycode or mixed scripts");
+def(types_1.OfficeCategory.Link, types_1.OfficeDetail.EncodedHost, 'strip', 40, "A link's host is percent-encoded");
+def(types_1.OfficeCategory.Link, types_1.OfficeDetail.Relative, 'strip', 30, "A relative link, which resolves against the file's own location");
+// EMBEDDED
+def(types_1.OfficeCategory.Embedded, types_1.OfficeDetail.OleObject, 'strip', 40, 'An embedded OLE object');
+def(types_1.OfficeCategory.Embedded, types_1.OfficeDetail.Package, 'strip', 30, 'An embedded document<: {contentType}|>');
+def(types_1.OfficeCategory.Embedded, types_1.OfficeDetail.OleFile, 'strip', 40, 'A part holds an OLE file that nothing declares as an object');
+def(types_1.OfficeCategory.Embedded, types_1.OfficeDetail.Applet, 'strip', 60, 'An embedded Java applet');
+def(types_1.OfficeCategory.Embedded, types_1.OfficeDetail.Plugin, 'strip', 50, 'An embedded browser plug-in object');
+// CONTROL
+def(types_1.OfficeCategory.Control, types_1.OfficeDetail.ActiveX, 'strip', 50, 'An ActiveX control');
+/** The built-in spec for a kind of finding, or undefined for a kind office-defuse does not make, such as one from another package. */
+function findingSpec(category, detail) {
+    return specs.get(`${category}/${detail}`);
+}
+/** The spec of a kind office-defuse makes itself, which always has one. */
+function ownSpec(category, detail) {
+    const s = findingSpec(category, detail);
+    if (!s)
+        throw new Error(`No finding spec for ${category}/${detail}`);
+    return s;
+}
+/** Every category and detail pair office-defuse makes, with its default action, description and score weight. */
+function allFindingSpecs() {
+    return [...specs.entries()].map(([k, s]) => {
+        const [category, detail] = k.split('/');
+        return { category, detail, ...s };
+    });
+}
+/** Values from the file can hold control or direction characters, so the description shows none of them. */
+const shown = (v) => String(v).replace(/[\p{Cc}\p{Cf}]/gu, '?');
+class FindingFactory {
+    overrides;
+    constructor(overrides = []) {
+        this.overrides = overrides;
+    }
+    actionFor(category, detail) {
+        const exact = this.overrides.find(o => o.category === category && o.detail === detail);
+        if (exact)
+            return exact.action;
+        const byCategory = this.overrides.find(o => o.category === category && o.detail === undefined);
+        if (byCategory)
+            return byCategory.action;
+        return ownSpec(category, detail).action;
+    }
+    make(category, detail, location, data) {
+        const spec = ownSpec(category, detail);
+        const description = spec.description.replace(/<([^<>]*)>/g, (_match, body) => {
+            const fills = body.split('|').map(alt => {
+                let missing = false;
+                const text = alt.replace(/\{([a-zA-Z]+)\}/g, (_, key) => {
+                    const v = data?.[key];
+                    if (v === undefined || v === '')
+                        missing = true;
+                    const s = shown(v ?? '');
+                    return s.length > 60 ? `${s.slice(0, 57)}...` : s;
+                });
+                return { text, missing };
+            });
+            // Every choice ends with an alternative that names no value, so one always fits.
+            return (fills.find(x => !x.missing) ?? fills[fills.length - 1]).text;
+        });
+        const f = { category, detail, description, action: this.actionFor(category, detail) };
+        if (location !== undefined)
+            f.location = location;
+        if (data !== undefined && Object.keys(data).length)
+            f.data = data;
+        return f;
+    }
+}
+exports.FindingFactory = FindingFactory;

package/dist/formats.d.ts

@@ -0,0 +1,10 @@
+export interface Format {
+    /** The usual file extension, without the dot. */
+    format: string;
+    /** The MIME type of a file in this format. */
+    mimeType: string;
+}
+/** OOXML formats by the content type of the main part, lowercased. */
+export declare const OOXML_FORMATS: Map<string, Format>;
+/** OpenDocument formats by the media type in the mimetype entry or the manifest, exactly as written. */
+export declare const ODF_FORMATS: Map<string, Format>;

package/dist/formats.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ODF_FORMATS = exports.OOXML_FORMATS = void 0;
+const f = (format, mimeType) => ({ format, mimeType });
+/** OOXML formats by the content type of the main part, lowercased. */
+exports.OOXML_FORMATS = new Map([
+    ['application/vnd.openxmlformats-officedocument.wordprocessingml.document.main+xml', f('docx', 'application/vnd.openxmlformats-officedocument.wordprocessingml.document')],
+    ['application/vnd.ms-word.document.macroenabled.main+xml', f('docm', 'application/vnd.ms-word.document.macroEnabled.12')],
+    ['application/vnd.openxmlformats-officedocument.wordprocessingml.template.main+xml', f('dotx', 'application/vnd.openxmlformats-officedocument.wordprocessingml.template')],
+    ['application/vnd.ms-word.template.macroenabledtemplate.main+xml', f('dotm', 'application/vnd.ms-word.template.macroEnabled.12')],
+    ['application/vnd.openxmlformats-officedocument.spreadsheetml.sheet.main+xml', f('xlsx', 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet')],
+    ['application/vnd.ms-excel.sheet.macroenabled.main+xml', f('xlsm', 'application/vnd.ms-excel.sheet.macroEnabled.12')],
+    ['application/vnd.openxmlformats-officedocument.spreadsheetml.template.main+xml', f('xltx', 'application/vnd.openxmlformats-officedocument.spreadsheetml.template')],
+    ['application/vnd.ms-excel.template.macroenabled.main+xml', f('xltm', 'application/vnd.ms-excel.template.macroEnabled.12')],
+    ['application/vnd.ms-excel.addin.macroenabled.main+xml', f('xlam', 'application/vnd.ms-excel.addin.macroEnabled.12')],
+    ['application/vnd.ms-excel.sheet.binary.macroenabled.main', f('xlsb', 'application/vnd.ms-excel.sheet.binary.macroEnabled.12')],
+    ['application/vnd.openxmlformats-officedocument.presentationml.presentation.main+xml', f('pptx', 'application/vnd.openxmlformats-officedocument.presentationml.presentation')],
+    ['application/vnd.ms-powerpoint.presentation.macroenabled.main+xml', f('pptm', 'application/vnd.ms-powerpoint.presentation.macroEnabled.12')],
+    ['application/vnd.openxmlformats-officedocument.presentationml.template.main+xml', f('potx', 'application/vnd.openxmlformats-officedocument.presentationml.template')],
+    ['application/vnd.ms-powerpoint.template.macroenabled.main+xml', f('potm', 'application/vnd.ms-powerpoint.template.macroEnabled.12')],
+    ['application/vnd.openxmlformats-officedocument.presentationml.slideshow.main+xml', f('ppsx', 'application/vnd.openxmlformats-officedocument.presentationml.slideshow')],
+    ['application/vnd.ms-powerpoint.slideshow.macroenabled.main+xml', f('ppsm', 'application/vnd.ms-powerpoint.slideshow.macroEnabled.12')],
+    ['application/vnd.ms-powerpoint.addin.macroenabled.main+xml', f('ppam', 'application/vnd.ms-powerpoint.addin.macroEnabled.12')],
+    ['application/vnd.openxmlformats-officedocument.presentationml.slide+xml', f('sldx', 'application/vnd.openxmlformats-officedocument.presentationml.slide')],
+    ['application/vnd.ms-powerpoint.slide.macroenabled.main+xml', f('sldm', 'application/vnd.ms-powerpoint.slide.macroEnabled.12')],
+    ['application/vnd.ms-visio.drawing.main+xml', f('vsdx', 'application/vnd.ms-visio.drawing')],
+    ['application/vnd.ms-visio.drawing.macroenabled.main+xml', f('vsdm', 'application/vnd.ms-visio.drawing.macroEnabled.12')],
+    ['application/vnd.ms-visio.template.main+xml', f('vstx', 'application/vnd.ms-visio.template')],
+    ['application/vnd.ms-visio.template.macroenabled.main+xml', f('vstm', 'application/vnd.ms-visio.template.macroEnabled.12')],
+    ['application/vnd.ms-visio.stencil.main+xml', f('vssx', 'application/vnd.ms-visio.stencil')],
+    ['application/vnd.ms-visio.stencil.macroenabled.main+xml', f('vssm', 'application/vnd.ms-visio.stencil.macroEnabled.12')],
+]);
+/** OpenDocument formats by the media type in the mimetype entry or the manifest, exactly as written. */
+exports.ODF_FORMATS = new Map([
+    ['text', 'odt'],
+    ['text-template', 'ott'],
+    ['spreadsheet', 'ods'],
+    ['spreadsheet-template', 'ots'],
+    ['presentation', 'odp'],
+    ['presentation-template', 'otp'],
+    ['graphics', 'odg'],
+    ['graphics-template', 'otg'],
+    ['formula', 'odf'],
+    ['text-master', 'odm'],
+    ['base', 'odb'],
+].map(([kind, ext]) => [`application/vnd.oasis.opendocument.${kind}`, f(ext, `application/vnd.oasis.opendocument.${kind}`)]));

package/dist/formulas.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Follows the quotes of a formula one character at a time, as its text arrives: double-quoted strings and
+ * single-quoted names, where doubling the quote escapes it.
+ */
+export declare class Quotes {
+    private quote;
+    private closing;
+    /** Takes the next character and tells whether it stands outside quotes. */
+    outside(c: string): boolean;
+}
+/** Whether an OpenDocument formula calls the DDE function. */
+export declare function callsDde(formula: string): boolean;
+/** One word of a Word field code. A switch is an unquoted word that starts with a backslash. */
+export interface FieldWord {
+    text: string;
+    quoted: boolean;
+}
+/**
+ * Splits a Word field code into words: quoted arguments, switches and bare words. Inside quotes a backslash escapes
+ * the next character; outside them a doubled backslash stands for one, as Word writes paths.
+ */
+export declare function fieldWords(code: string): FieldWord[];

package/dist/formulas.js

@@ -0,0 +1,77 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Quotes = void 0;
+exports.callsDde = callsDde;
+exports.fieldWords = fieldWords;
+/**
+ * Follows the quotes of a formula one character at a time, as its text arrives: double-quoted strings and
+ * single-quoted names, where doubling the quote escapes it.
+ */
+class Quotes {
+    quote = '';
+    closing = false;
+    /** Takes the next character and tells whether it stands outside quotes. */
+    outside(c) {
+        if (this.closing) {
+            this.closing = false;
+            if (c === this.quote)
+                return false;
+            this.quote = '';
+        }
+        if (this.quote) {
+            if (c === this.quote)
+                this.closing = true;
+            return false;
+        }
+        if (c === '"' || c === "'") {
+            this.quote = c;
+            return false;
+        }
+        return true;
+    }
+}
+exports.Quotes = Quotes;
+/** Whether an OpenDocument formula calls the DDE function. */
+function callsDde(formula) {
+    const q = new Quotes();
+    for (let i = 0; i < formula.length; i++) {
+        if (q.outside(formula[i]) && /^DDE\s*\(/i.test(formula.slice(i, i + 16)) && !/[\w.]/.test(formula[i - 1] ?? ''))
+            return true;
+    }
+    return false;
+}
+/**
+ * Splits a Word field code into words: quoted arguments, switches and bare words. Inside quotes a backslash escapes
+ * the next character; outside them a doubled backslash stands for one, as Word writes paths.
+ */
+function fieldWords(code) {
+    const out = [];
+    const space = (c) => c === ' ' || c === '\t' || c === '\n' || c === '\r' || c === '\xa0';
+    let i = 0;
+    while (i < code.length) {
+        while (i < code.length && space(code[i]))
+            i++;
+        if (i >= code.length)
+            break;
+        let text = '';
+        const quoted = code[i] === '"';
+        if (quoted) {
+            i++;
+            while (i < code.length && code[i] !== '"') {
+                if (code[i] === '\\' && i + 1 < code.length)
+                    i++;
+                text += code[i++];
+            }
+            i++;
+        }
+        else {
+            while (i < code.length && !space(code[i])) {
+                if (code[i] === '\\' && code[i + 1] === '\\')
+                    i++;
+                text += code[i++];
+            }
+        }
+        out.push({ text, quoted });
+    }
+    return out;
+}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { inspectOffice, inspectOfficeSource } from './engine';
+export { allFindingSpecs } from './findings';
+export { bufferSource, fileSource } from './io';
+export { COMBINATIONS, DEFAULT_BANDS, scoreFindings } from './score';
+export * from './types';

package/dist/index.js

@@ -0,0 +1,30 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scoreFindings = exports.DEFAULT_BANDS = exports.COMBINATIONS = exports.fileSource = exports.bufferSource = exports.allFindingSpecs = exports.inspectOfficeSource = exports.inspectOffice = void 0;
+var engine_1 = require("./engine");
+Object.defineProperty(exports, "inspectOffice", { enumerable: true, get: function () { return engine_1.inspectOffice; } });
+Object.defineProperty(exports, "inspectOfficeSource", { enumerable: true, get: function () { return engine_1.inspectOfficeSource; } });
+var findings_1 = require("./findings");
+Object.defineProperty(exports, "allFindingSpecs", { enumerable: true, get: function () { return findings_1.allFindingSpecs; } });
+var io_1 = require("./io");
+Object.defineProperty(exports, "bufferSource", { enumerable: true, get: function () { return io_1.bufferSource; } });
+Object.defineProperty(exports, "fileSource", { enumerable: true, get: function () { return io_1.fileSource; } });
+var score_1 = require("./score");
+Object.defineProperty(exports, "COMBINATIONS", { enumerable: true, get: function () { return score_1.COMBINATIONS; } });
+Object.defineProperty(exports, "DEFAULT_BANDS", { enumerable: true, get: function () { return score_1.DEFAULT_BANDS; } });
+Object.defineProperty(exports, "scoreFindings", { enumerable: true, get: function () { return score_1.scoreFindings; } });
+__exportStar(require("./types"), exports);

package/dist/index.mjs

@@ -0,0 +1,3 @@
+import cjs from './index.js';
+export const { inspectOffice, inspectOfficeSource, allFindingSpecs, bufferSource, fileSource, COMBINATIONS, DEFAULT_BANDS, scoreFindings, OfficeCategory, OfficeDetail, OfficeRisk } = cjs;
+export default cjs;

package/dist/io.d.ts

@@ -0,0 +1,23 @@
+import type { ByteSource } from './types';
+/** A source over bytes already in memory. Reads return views, not copies. */
+export declare function bufferSource(bytes: Uint8Array): ByteSource;
+/** A source over a local file, read at offsets through one file handle. */
+export declare function fileSource(filePath: string): ByteSource;
+/**
+ * Random-access reader with a small block cache, so the ZIP reader can ask for small overlapping windows cheaply. Its
+ * reads span at most a few blocks: a header, a name and its extra field, or the end of the file.
+ */
+export declare class Reader {
+    readonly source: ByteSource;
+    readonly size: number;
+    private readonly blockSize;
+    private readonly maxBlocks;
+    /** Blocks by index, oldest first. */
+    private readonly cache;
+    constructor(source: ByteSource, size: number, blockSize?: number, maxBlocks?: number);
+    private block;
+    /** Reads up to `length` bytes at `offset`; shorter only at the end of the source. */
+    read(offset: number, length: number): Promise<Uint8Array>;
+    /** Yields the range in chunks without caching them. */
+    chunks(offset: number, length: number, chunkSize?: number): AsyncGenerator<Uint8Array>;
+}

package/dist/io.js

@@ -0,0 +1,139 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Reader = void 0;
+exports.bufferSource = bufferSource;
+exports.fileSource = fileSource;
+const fsp = __importStar(require("node:fs/promises"));
+/** A source over bytes already in memory. Reads return views, not copies. */
+function bufferSource(bytes) {
+    return {
+        size: async () => bytes.length,
+        read: async (offset, length) => bytes.subarray(Math.max(0, offset), Math.min(bytes.length, offset + length)),
+    };
+}
+/** A source over a local file, read at offsets through one file handle. */
+function fileSource(filePath) {
+    // The pending open is shared, so concurrent first calls get one handle and close() closes it.
+    let opening;
+    let size;
+    const open = () => {
+        opening ??= fsp.open(filePath, 'r');
+        return opening;
+    };
+    const getSize = async () => {
+        size ??= (await (await open()).stat()).size;
+        return size;
+    };
+    return {
+        size: getSize,
+        async read(offset, length) {
+            const h = await open();
+            const total = await getSize();
+            const n = Math.max(0, Math.min(length, total - offset));
+            const buf = Buffer.allocUnsafe(n);
+            let done = 0;
+            while (done < n) {
+                const { bytesRead } = await h.read(buf, done, n - done, offset + done);
+                if (bytesRead === 0)
+                    break;
+                done += bytesRead;
+            }
+            return buf.subarray(0, done);
+        },
+        async close() {
+            const p = opening;
+            opening = undefined;
+            await p?.then(h => h.close(), () => {
+                // An open that failed left nothing to close.
+            });
+        },
+    };
+}
+/**
+ * Random-access reader with a small block cache, so the ZIP reader can ask for small overlapping windows cheaply. Its
+ * reads span at most a few blocks: a header, a name and its extra field, or the end of the file.
+ */
+class Reader {
+    source;
+    size;
+    blockSize;
+    maxBlocks;
+    /** Blocks by index, oldest first. */
+    cache = new Map();
+    constructor(source, size, blockSize = 65536, maxBlocks = 16) {
+        this.source = source;
+        this.size = size;
+        this.blockSize = blockSize;
+        this.maxBlocks = maxBlocks;
+    }
+    async block(index) {
+        const hit = this.cache.get(index);
+        if (hit)
+            return hit;
+        const data = await this.source.read(index * this.blockSize, Math.min(this.blockSize, this.size - index * this.blockSize));
+        if (this.cache.size >= this.maxBlocks) {
+            for (const oldest of this.cache.keys()) {
+                this.cache.delete(oldest);
+                break;
+            }
+        }
+        this.cache.set(index, data);
+        return data;
+    }
+    /** Reads up to `length` bytes at `offset`; shorter only at the end of the source. */
+    async read(offset, length) {
+        const end = Math.min(this.size, offset + length);
+        if (end <= offset)
+            return new Uint8Array(0);
+        const first = Math.floor(offset / this.blockSize);
+        const last = Math.floor((end - 1) / this.blockSize);
+        const out = new Uint8Array(end - offset);
+        for (let i = first; i <= last; i++) {
+            const b = await this.block(i);
+            const from = i === first ? offset - first * this.blockSize : 0;
+            const to = i === last ? end - i * this.blockSize : b.length;
+            out.set(b.subarray(from, to), i === first ? 0 : i * this.blockSize - offset);
+        }
+        return out;
+    }
+    /** Yields the range in chunks without caching them. */
+    async *chunks(offset, length, chunkSize = 262144) {
+        const end = Math.min(this.size, offset + length);
+        for (let pos = offset; pos < end; pos += chunkSize)
+            yield this.source.read(pos, Math.min(chunkSize, end - pos));
+    }
+}
+exports.Reader = Reader;

package/dist/links.d.ts

@@ -0,0 +1,26 @@
+import { OfficeCategory as C, OfficeDetail as D } from './types';
+export interface LinkVerdict {
+    /** LINK, or MACRO for a link that runs a macro or script. */
+    category: C.Link | C.Macro;
+    detail: D;
+    host?: string;
+}
+/** A target that names the same document or a place in it. RFC 3986 reads an empty reference as the document itself. */
+export declare const isFragment: (target: string) => boolean;
+/**
+ * Classifies a hyperlink target with pdf-defuse's checks, without the comparison of the target with the link's text.
+ * Call it only for targets that are more than a fragment. A target that holds the content of an external entity
+ * cannot be read, and reads as the empty string: a relative link, which is what pdf-defuse makes of a URI it cannot
+ * resolve.
+ */
+export declare function checkLink(rawTarget: string): LinkVerdict;
+/**
+ * Whether a target outside the file is on this machine: a drive path, a file: URL without a host, an absolute path or
+ * a relative one. A UNC path, a file: URL with a host and every other scheme reach elsewhere, and so can a target that
+ * holds the content of an external entity.
+ */
+export declare const isLocalTarget: (rawTarget: string) => boolean;
+/** Whether an ODF reference names an entry inside the package: a relative path that does not climb out of it. */
+export declare const isInsidePackage: (rawHref: string) => boolean;
+/** Whether an OOXML relationship target is not a part name, whatever TargetMode says: a scheme, a drive or a network path. */
+export declare const isAbsoluteTarget: (rawTarget: string) => boolean;