@ploaness/governance 1.6.0 → 1.8.0

package/dist/version-policy.js

@@ -110,9 +110,9 @@ const checkEngines = (packageJson, required) => {
 // the list is imported rather than restated, because two copies of it in one gate will not stay equal.
 const escapeEntries = (packageJson) => OVERRIDE_KEYS.flatMap((key) => [packageJson, asRecord(packageJson['pnpm'])].flatMap((holder) => Object.keys(asRecord(holder[key])).map((entry) => [key, entry])));
 const checkVersionEscapes = (packageJson, expected) => escapeEntries(packageJson)
-    .filter(([, entry]) => Object.hasOwn(expected, packageNameOf(entry ?? '')))
-    .map(([key, entry]) => ({
-    location: `package.json ${key ?? ''}.${entry ?? ''}`,
+    .filter(([, entry = '']) => Object.hasOwn(expected, packageNameOf(entry)))
+    .map(([key = '', entry = '']) => ({
+    location: `package.json ${key}.${entry}`,
     reason: 'changes what a version ploaness pins installs; the pin decides what the gates run ' +
         'against, and a project cannot answer for a version it did not choose',
 }));

package/dist/version-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"version-policy.js","sourceRoot":"","sources":["../src/version-policy.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAE5F,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACxE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAsB,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACrG,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AACjG,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAGvD,sGAAsG;AACtG,oGAAoG;AACpG,kFAAkF;AAClF,MAAM,OAAO,GAAG,CAAC,WAAoC,EAAE,IAAY,EAAsB,EAAE;IACzF,IAAI,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,cAAc,CAAA;IACvB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAA;AAC5G,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAyB,EAAU,EAAE,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAA;AAEpH,sGAAsG;AACtG,wGAAwG;AACxG,mGAAmG;AACnG,mGAAmG;AACnG,uGAAuG;AACvG,sEAAsE;AACtE,MAAM,aAAa,GAAW,YAAY,CAAA;AAC1C,MAAM,cAAc,GAAW,2BAA2B,CAAA;AAE1D,MAAM,gBAAgB,GAAG,CAAC,KAAoB,EAAW,EAAE,CACzD,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;AAE7E,MAAM,iBAAiB,GAAG,CACxB,KAAoB,EACpB,QAA0C,EAC1C,QAAgC,EACJ,EAAE;IAC9B,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,QAAQ,GAAW,uBAAuB,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,WAAW,EAAE,CAAA;IAChF,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/C,OAAO;YACL;gBACE,QAAQ;gBACR,MAAM,EAAE,kGAAkG;aAC3G;SACF,CAAA;IACH,CAAC;IACD,MAAM,GAAG,GAAuB,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IAC3D,OAAO,GAAG,KAAK,SAAS;QACtB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;YACE;gBACE,QAAQ;gBACR,MAAM,EACJ,gDAAgD,GAAG,4BAA4B;oBAC/E,2DAA2D;aAC9D;SACF,CAAA;AACP,CAAC,CAAA;AAED,oGAAoG;AACpG,qGAAqG;AACrG,uGAAuG;AACvG,oGAAoG;AACpG,qGAAqG;AACrG,+FAA+F;AAC/F,mGAAmG;AACnG,uGAAuG;AACvG,uBAAuB;AACvB,MAAM,0BAA0B,GAAG,CACjC,aAAqB,EACrB,QAA0C,EAC1C,qBAAuD,EAC3B,EAAE,CAC9B,aAAa,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,KAAoB,EAA8B,EAAE,CACxF,iBAAiB,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,qBAAqB,EAAE,CAAC,CACjE,CAAA;AAEH,sGAAsG;AACtG,gGAAgG;AAChG,mFAAmF;AACnF,MAAM,mBAAmB,GAAG,CAC1B,WAAoC,EACpC,QAA4B,EACA,EAAE;IAC9B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,QAAQ,GAAY,WAAW,CAAC,gBAAgB,CAAC,CAAA;IACvD,OAAO,QAAQ,KAAK,QAAQ;QAC1B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;YACE;gBACE,QAAQ,EAAE,6BAA6B;gBACvC,MAAM,EAAE,MAAM,aAAa,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,2BAA2B,QAAQ,GAAG;aAC5F;SACF,CAAA;AACP,CAAC,CAAA;AAED,kGAAkG;AAClG,qGAAqG;AACrG,qGAAqG;AACrG,kGAAkG;AAClG,MAAM,iBAAiB,GAAG,CAAC,MAG1B,EAAoC,EAAE;IACrC,MAAM,IAAI,GAAuB,iBAAiB,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAA;IACjF,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,eAAe,EAAE,IAAI,EAAE,CAAA;AAC1F,CAAC,CAAA;AAED,oGAAoG;AACpG,sGAAsG;AACtG,8FAA8F;AAC9F,MAAM,YAAY,GAAG,CACnB,WAAoC,EACpC,QAA0C,EACd,EAAE;IAC9B,MAAM,QAAQ,GAA2B,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAA;IAC/E,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAA4B,EAA8B,EAAE,CAC/G,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK;QACtB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;YACE;gBACE,QAAQ,EAAE,wBAAwB,IAAI,EAAE;gBACxC,MAAM,EAAE,MAAM,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,2BAA2B,KAAK,GAAG;aAC/E;SACF,CACN,CAAA;AACH,CAAC,CAAA;AAED,wGAAwG;AACxG,uGAAuG;AACvG,sGAAsG;AACtG,uGAAuG;AACvG,uGAAuG;AAEvG,MAAM,aAAa,GAAG,CAAC,WAAoC,EAAkC,EAAE,CAC7F,aAAa,CAAC,OAAO,CAAC,CAAC,GAAW,EAAkC,EAAE,CACpE,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAClD,CAAC,MAA+B,EAAkC,EAAE,CAClE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAa,EAAqB,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAC7F,CACF,CAAA;AAEH,MAAM,mBAAmB,GAAG,CAC1B,WAAoC,EACpC,QAA0C,EACd,EAAE,CAC9B,aAAa,CAAC,WAAW,CAAC;KACvB,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAoB,EAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;KACtG,GAAG,CACF,CAAC,CAAC,GAAG,EAAE,KAAK,CAAoB,EAAmB,EAAE,CAAC,CAAC;IACrD,QAAQ,EAAE,gBAAgB,GAAG,IAAI,EAAE,IAAI,KAAK,IAAI,EAAE,EAAE;IACpD,MAAM,EACJ,oFAAoF;QACpF,sEAAsE;CACzE,CAAC,CACH,CAAA;AAEL,qGAAqG;AACrG,qGAAqG;AACrG,sEAAsE;AACtE,MAAM,YAAY,GAAW,qEAAqE,CAAA;AAElG,iGAAiG;AACjG,oGAAoG;AACpG,mGAAmG;AACnG,qGAAqG;AACrG,2DAA2D;AAC3D,MAAM,cAAc,GAAW,qBAAqB,CAAA;AACpD,iGAAiG;AACjG,6FAA6F;AAC7F,mEAAmE;AACnE,MAAM,WAAW,GAAW,oCAAoC,CAAA;AAEhE,+FAA+F;AAC/F,sGAAsG;AACtG,oGAAoG;AACpG,mGAAmG;AACnG,MAAM,aAAa,GAAW,KAAK,CAAA;AAEnC,mGAAmG;AACnG,wGAAwG;AACxG,+EAA+E;AAC/E,MAAM,SAAS,GAAW,MAAM,CAAA;AAEhC,MAAM,cAAc,GAAG,CAAC,SAAiB,EAAW,EAAE;IACpD,IAAI,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,MAAM,OAAO,GAAW,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACzD,MAAM,EAAE,GAAW,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QAC3C,OAAO,EAAE,GAAG,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,CACL,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;QAC5B,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CACpG,CAAA;AACH,CAAC,CAAA;AAED,MAAM,kBAAkB,GAAG,CAAC,WAAoC,EAA8B,EAAE,CAC9F,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;KAC9C,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,CAA4B,EAAW,EAAE,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;KACzF,GAAG,CACF,CAAC,CAAC,IAAI,EAAE,SAAS,CAA4B,EAAmB,EAAE,CAAC,CAAC;IAClE,QAAQ,EAAE,gBAAgB,IAAI,EAAE;IAChC,MAAM,EACJ,OAAO,SAAS,kEAAkE;QAClF,4DAA4D;CAC/D,CAAC,CACH,CAAA;AAEL,oGAAoG;AACpG,uGAAuG;AACvG,kGAAkG;AAClG,0DAA0D;AAC1D,MAAM,aAAa,GAAW,cAAc,CAAA;AAE5C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,WAAmB,EAAW,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,aAAa,CAAC,CAAA;AAE7G;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAW,SAAS,CAAA;AAEhD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAW,MAAM,CAAA;AAE1C,MAAM,kBAAkB,GAAG,CACzB,WAAoC,EACpC,cAAkC,EACN,EAAE;IAC9B,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;SACrD,MAAM,CACL,CAAC,CAAC,IAAI,EAAE,OAAO,CAA4B,EAAW,EAAE,CACtD,sBAAsB,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,cAAc,CAC7D;SACA,GAAG,CACF,CAAC,CAAC,IAAI,EAAE,OAAO,CAA4B,EAAmB,EAAE,CAAC,CAAC;QAChE,QAAQ,EAAE,gBAAgB,IAAI,EAAE;QAChC,MAAM,EACJ,OAAO,OAAO,+BAA+B,cAAc,KAAK;YAChE,yDAAyD;KAC5D,CAAC,CACH,CAAA;AACL,CAAC,CAAA;AAED,mGAAmG;AACnG,mGAAmG;AACnG,mGAAmG;AACnG,qGAAqG;AACrG,uGAAuG;AACvG,0FAA0F;AAC1F,EAAE;AACF,uGAAuG;AACvG,iGAAiG;AACjG,qGAAqG;AACrG,OAAO;AACP,MAAM,kBAAkB,GAAG,CAAC,WAAoC,EAA8B,EAAE;IAC9F,MAAM,QAAQ,GAA2B,oBAAoB,CAAC,WAAW,CAAC,CAAA;IAC1E,MAAM,OAAO,GAAuB,QAAQ,CAAC,eAAe,CAAC,CAAA;IAC7D,iGAAiG;IACjG,gGAAgG;IAChG,qGAAqG;IACrG,mGAAmG;IACnG,wEAAwE;IACxE,IAAI,OAAO,KAAK,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;SAC5B,MAAM,CACL,CAAC,CAAC,IAAI,EAAE,OAAO,CAA4B,EAAW,EAAE,CACtD,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,OAAO,CACvF;SACA,GAAG,CACF,CAAC,CAAC,IAAI,EAAE,OAAO,CAA4B,EAAmB,EAAE,CAAC,CAAC;QAChE,QAAQ,EAAE,gBAAgB,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE;QACpE,MAAM,EACJ,OAAO,OAAO,kCAAkC,OAAO,8BAA8B;YACrF,2EAA2E;KAC9E,CAAC,CACH,CAAA;AACL,CAAC,CAAA;AAED,sGAAsG;AACtG,oGAAoG;AACpG,mGAAmG;AACnG,kGAAkG;AAClG,sEAAsE;AACtE,MAAM,kBAAkB,GAAG,CACzB,WAAoC,EACpC,QAA0C,EAC1C,QAA6B,EACD,EAAE;IAC9B,MAAM,QAAQ,GAA2B,oBAAoB,CAAC,WAAW,CAAC,CAAA;IAC1E,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAA4B,EAA8B,EAAE;QACjH,MAAM,KAAK,GAAuB,QAAQ,CAAC,IAAI,CAAC,CAAA;QAChD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;gBACvB,CAAC,CAAC;oBACE;wBACE,QAAQ,EAAE,gBAAgB,IAAI,EAAE;wBAChC,MAAM,EAAE,gEAAgE,OAAO,EAAE;qBAClF;iBACF;gBACH,CAAC,CAAC,EAAE,CAAA;QACR,CAAC;QACD,OAAO,KAAK,KAAK,OAAO;YACtB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE;oBACE,QAAQ,EAAE,gBAAgB,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE;oBACpE,MAAM,EACJ,OAAO,KAAK,8BAA8B,OAAO,KAAK;wBACtD,mDAAmD;iBACtD;aACF,CAAA;IACP,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAyBD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAC7C,WAAoC,EACpC,MAA+B,EACH,EAAE,CAAC;IAC/B,GAAG,mBAAmB,CAAC,WAAW,EAAE,MAAM,CAAC,sBAAsB,CAAC;IAClE,GAAG,YAAY,CACb,WAAW,EACX,iBAAiB,CAAC;QAChB,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;KACtD,CAAC,CACH;IACD,GAAG,0BAA0B,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,qBAAqB,CAAC;CACnG,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,WAAoC,EACpC,MAA4B,EACA,EAAE,CAAC;IAC/B,GAAG,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IACpE,GAAG,kBAAkB,CAAC,WAAW,CAAC;IAClC,GAAG,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC;IACzD,GAAG,kBAAkB,CAAC,WAAW,CAAC;IAClC,GAAG,mBAAmB,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC;CACrD,CAAA;AAYD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,WAAoC,EACpC,MAAqB,EACO,EAAE,CAAC;IAC/B,GAAG,4BAA4B,CAAC,WAAW,EAAE;QAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,cAAc,EAAE,MAAM,CAAC,cAAc;KACtC,CAAC;IACF,GAAG,+BAA+B,CAAC,WAAW,EAAE;QAC9C,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;QACrD,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,qBAAqB,EAAE,oBAAoB,CAAC,WAAW,CAAC;KACzD,CAAC;CACH,CAAA"}
+{"version":3,"file":"version-policy.js","sourceRoot":"","sources":["../src/version-policy.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAE5F,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACxE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAsB,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACrG,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AACjG,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAGvD,sGAAsG;AACtG,oGAAoG;AACpG,kFAAkF;AAClF,MAAM,OAAO,GAAG,CAAC,WAAoC,EAAE,IAAY,EAAsB,EAAE;IACzF,IAAI,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,cAAc,CAAA;IACvB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAA;AAC5G,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAyB,EAAU,EAAE,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAA;AAEpH,sGAAsG;AACtG,wGAAwG;AACxG,mGAAmG;AACnG,mGAAmG;AACnG,uGAAuG;AACvG,sEAAsE;AACtE,MAAM,aAAa,GAAW,YAAY,CAAA;AAC1C,MAAM,cAAc,GAAW,2BAA2B,CAAA;AAE1D,MAAM,gBAAgB,GAAG,CAAC,KAAoB,EAAW,EAAE,CACzD,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;AAE7E,MAAM,iBAAiB,GAAG,CACxB,KAAoB,EACpB,QAA0C,EAC1C,QAAgC,EACJ,EAAE;IAC9B,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,QAAQ,GAAW,uBAAuB,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,WAAW,EAAE,CAAA;IAChF,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/C,OAAO;YACL;gBACE,QAAQ;gBACR,MAAM,EAAE,kGAAkG;aAC3G;SACF,CAAA;IACH,CAAC;IACD,MAAM,GAAG,GAAuB,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IAC3D,OAAO,GAAG,KAAK,SAAS;QACtB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;YACE;gBACE,QAAQ;gBACR,MAAM,EACJ,gDAAgD,GAAG,4BAA4B;oBAC/E,2DAA2D;aAC9D;SACF,CAAA;AACP,CAAC,CAAA;AAED,oGAAoG;AACpG,qGAAqG;AACrG,uGAAuG;AACvG,oGAAoG;AACpG,qGAAqG;AACrG,+FAA+F;AAC/F,mGAAmG;AACnG,uGAAuG;AACvG,uBAAuB;AACvB,MAAM,0BAA0B,GAAG,CACjC,aAAqB,EACrB,QAA0C,EAC1C,qBAAuD,EAC3B,EAAE,CAC9B,aAAa,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,KAAoB,EAA8B,EAAE,CACxF,iBAAiB,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,qBAAqB,EAAE,CAAC,CACjE,CAAA;AAEH,sGAAsG;AACtG,gGAAgG;AAChG,mFAAmF;AACnF,MAAM,mBAAmB,GAAG,CAC1B,WAAoC,EACpC,QAA4B,EACA,EAAE;IAC9B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,QAAQ,GAAY,WAAW,CAAC,gBAAgB,CAAC,CAAA;IACvD,OAAO,QAAQ,KAAK,QAAQ;QAC1B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;YACE;gBACE,QAAQ,EAAE,6BAA6B;gBACvC,MAAM,EAAE,MAAM,aAAa,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,2BAA2B,QAAQ,GAAG;aAC5F;SACF,CAAA;AACP,CAAC,CAAA;AAED,kGAAkG;AAClG,qGAAqG;AACrG,qGAAqG;AACrG,kGAAkG;AAClG,MAAM,iBAAiB,GAAG,CAAC,MAG1B,EAAoC,EAAE;IACrC,MAAM,IAAI,GAAuB,iBAAiB,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAA;IACjF,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,eAAe,EAAE,IAAI,EAAE,CAAA;AAC1F,CAAC,CAAA;AAED,oGAAoG;AACpG,sGAAsG;AACtG,8FAA8F;AAC9F,MAAM,YAAY,GAAG,CACnB,WAAoC,EACpC,QAA0C,EACd,EAAE;IAC9B,MAAM,QAAQ,GAA2B,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAA;IAC/E,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAA4B,EAA8B,EAAE,CAC/G,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK;QACtB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;YACE;gBACE,QAAQ,EAAE,wBAAwB,IAAI,EAAE;gBACxC,MAAM,EAAE,MAAM,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,2BAA2B,KAAK,GAAG;aAC/E;SACF,CACN,CAAA;AACH,CAAC,CAAA;AAED,wGAAwG;AACxG,uGAAuG;AACvG,sGAAsG;AACtG,uGAAuG;AACvG,uGAAuG;AAEvG,MAAM,aAAa,GAAG,CAAC,WAAoC,EAAkC,EAAE,CAC7F,aAAa,CAAC,OAAO,CAAC,CAAC,GAAW,EAAkC,EAAE,CACpE,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAClD,CAAC,MAA+B,EAAkC,EAAE,CAClE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAa,EAAqB,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAC7F,CACF,CAAA;AAEH,MAAM,mBAAmB,GAAG,CAC1B,WAAoC,EACpC,QAA0C,EACd,EAAE,CAC9B,aAAa,CAAC,WAAW,CAAC;KACvB,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,EAAE,CAAoB,EAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;KACrG,GAAG,CACF,CAAC,CAAC,GAAG,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,CAAoB,EAAmB,EAAE,CAAC,CAAC;IAC/D,QAAQ,EAAE,gBAAgB,GAAG,IAAI,KAAK,EAAE;IACxC,MAAM,EACJ,oFAAoF;QACpF,sEAAsE;CACzE,CAAC,CACH,CAAA;AAEL,qGAAqG;AACrG,qGAAqG;AACrG,sEAAsE;AACtE,MAAM,YAAY,GAAW,qEAAqE,CAAA;AAElG,iGAAiG;AACjG,oGAAoG;AACpG,mGAAmG;AACnG,qGAAqG;AACrG,2DAA2D;AAC3D,MAAM,cAAc,GAAW,qBAAqB,CAAA;AACpD,iGAAiG;AACjG,6FAA6F;AAC7F,mEAAmE;AACnE,MAAM,WAAW,GAAW,oCAAoC,CAAA;AAEhE,+FAA+F;AAC/F,sGAAsG;AACtG,oGAAoG;AACpG,mGAAmG;AACnG,MAAM,aAAa,GAAW,KAAK,CAAA;AAEnC,mGAAmG;AACnG,wGAAwG;AACxG,+EAA+E;AAC/E,MAAM,SAAS,GAAW,MAAM,CAAA;AAEhC,MAAM,cAAc,GAAG,CAAC,SAAiB,EAAW,EAAE;IACpD,IAAI,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,MAAM,OAAO,GAAW,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACzD,MAAM,EAAE,GAAW,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QAC3C,OAAO,EAAE,GAAG,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,CACL,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;QAC5B,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CACpG,CAAA;AACH,CAAC,CAAA;AAED,MAAM,kBAAkB,GAAG,CAAC,WAAoC,EAA8B,EAAE,CAC9F,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;KAC9C,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,CAA4B,EAAW,EAAE,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;KACzF,GAAG,CACF,CAAC,CAAC,IAAI,EAAE,SAAS,CAA4B,EAAmB,EAAE,CAAC,CAAC;IAClE,QAAQ,EAAE,gBAAgB,IAAI,EAAE;IAChC,MAAM,EACJ,OAAO,SAAS,kEAAkE;QAClF,4DAA4D;CAC/D,CAAC,CACH,CAAA;AAEL,oGAAoG;AACpG,uGAAuG;AACvG,kGAAkG;AAClG,0DAA0D;AAC1D,MAAM,aAAa,GAAW,cAAc,CAAA;AAE5C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,WAAmB,EAAW,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,aAAa,CAAC,CAAA;AAE7G;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAW,SAAS,CAAA;AAEhD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAW,MAAM,CAAA;AAE1C,MAAM,kBAAkB,GAAG,CACzB,WAAoC,EACpC,cAAkC,EACN,EAAE;IAC9B,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;SACrD,MAAM,CACL,CAAC,CAAC,IAAI,EAAE,OAAO,CAA4B,EAAW,EAAE,CACtD,sBAAsB,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,cAAc,CAC7D;SACA,GAAG,CACF,CAAC,CAAC,IAAI,EAAE,OAAO,CAA4B,EAAmB,EAAE,CAAC,CAAC;QAChE,QAAQ,EAAE,gBAAgB,IAAI,EAAE;QAChC,MAAM,EACJ,OAAO,OAAO,+BAA+B,cAAc,KAAK;YAChE,yDAAyD;KAC5D,CAAC,CACH,CAAA;AACL,CAAC,CAAA;AAED,mGAAmG;AACnG,mGAAmG;AACnG,mGAAmG;AACnG,qGAAqG;AACrG,uGAAuG;AACvG,0FAA0F;AAC1F,EAAE;AACF,uGAAuG;AACvG,iGAAiG;AACjG,qGAAqG;AACrG,OAAO;AACP,MAAM,kBAAkB,GAAG,CAAC,WAAoC,EAA8B,EAAE;IAC9F,MAAM,QAAQ,GAA2B,oBAAoB,CAAC,WAAW,CAAC,CAAA;IAC1E,MAAM,OAAO,GAAuB,QAAQ,CAAC,eAAe,CAAC,CAAA;IAC7D,iGAAiG;IACjG,gGAAgG;IAChG,qGAAqG;IACrG,mGAAmG;IACnG,wEAAwE;IACxE,IAAI,OAAO,KAAK,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;SAC5B,MAAM,CACL,CAAC,CAAC,IAAI,EAAE,OAAO,CAA4B,EAAW,EAAE,CACtD,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,OAAO,CACvF;SACA,GAAG,CACF,CAAC,CAAC,IAAI,EAAE,OAAO,CAA4B,EAAmB,EAAE,CAAC,CAAC;QAChE,QAAQ,EAAE,gBAAgB,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE;QACpE,MAAM,EACJ,OAAO,OAAO,kCAAkC,OAAO,8BAA8B;YACrF,2EAA2E;KAC9E,CAAC,CACH,CAAA;AACL,CAAC,CAAA;AAED,sGAAsG;AACtG,oGAAoG;AACpG,mGAAmG;AACnG,kGAAkG;AAClG,sEAAsE;AACtE,MAAM,kBAAkB,GAAG,CACzB,WAAoC,EACpC,QAA0C,EAC1C,QAA6B,EACD,EAAE;IAC9B,MAAM,QAAQ,GAA2B,oBAAoB,CAAC,WAAW,CAAC,CAAA;IAC1E,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAA4B,EAA8B,EAAE;QACjH,MAAM,KAAK,GAAuB,QAAQ,CAAC,IAAI,CAAC,CAAA;QAChD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;gBACvB,CAAC,CAAC;oBACE;wBACE,QAAQ,EAAE,gBAAgB,IAAI,EAAE;wBAChC,MAAM,EAAE,gEAAgE,OAAO,EAAE;qBAClF;iBACF;gBACH,CAAC,CAAC,EAAE,CAAA;QACR,CAAC;QACD,OAAO,KAAK,KAAK,OAAO;YACtB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE;oBACE,QAAQ,EAAE,gBAAgB,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE;oBACpE,MAAM,EACJ,OAAO,KAAK,8BAA8B,OAAO,KAAK;wBACtD,mDAAmD;iBACtD;aACF,CAAA;IACP,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAyBD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAC7C,WAAoC,EACpC,MAA+B,EACH,EAAE,CAAC;IAC/B,GAAG,mBAAmB,CAAC,WAAW,EAAE,MAAM,CAAC,sBAAsB,CAAC;IAClE,GAAG,YAAY,CACb,WAAW,EACX,iBAAiB,CAAC;QAChB,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;KACtD,CAAC,CACH;IACD,GAAG,0BAA0B,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,qBAAqB,CAAC;CACnG,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,WAAoC,EACpC,MAA4B,EACA,EAAE,CAAC;IAC/B,GAAG,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IACpE,GAAG,kBAAkB,CAAC,WAAW,CAAC;IAClC,GAAG,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC;IACzD,GAAG,kBAAkB,CAAC,WAAW,CAAC;IAClC,GAAG,mBAAmB,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC;CACrD,CAAA;AAYD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,WAAoC,EACpC,MAAqB,EACO,EAAE,CAAC;IAC/B,GAAG,4BAA4B,CAAC,WAAW,EAAE;QAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,cAAc,EAAE,MAAM,CAAC,cAAc;KACtC,CAAC;IACF,GAAG,+BAA+B,CAAC,WAAW,EAAE;QAC9C,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;QACrD,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,qBAAqB,EAAE,oBAAoB,CAAC,WAAW,CAAC;KACzD,CAAC;CACH,CAAA"}

package/dist/vulnerability-policy.d.ts

@@ -10,6 +10,8 @@ export interface Advisory {
     readonly title: string;
     /** Alternative identifiers the advisory is also known by, such as its CVEs. */
     readonly aliases: readonly string[];
+    /** Where the database publishes the advisory, when the record names it. */
+    readonly url?: string;
 }
 /** A recorded exception for an advisory the repository cannot reach. */
 export interface VulnerabilityException {
@@ -54,6 +56,28 @@ export declare const effectiveSeverity: (declared: string | undefined) => string
  * @returns true when the advisory is at or above the threshold.
  */
 export declare const reachesThreshold: (advisory: Advisory, threshold: string) => boolean;
+/** An advisory a recorded exception excuses, with the exception that excuses it. */
+export interface SuppressedAdvisory {
+    readonly advisory: Advisory;
+    readonly exception: VulnerabilityException;
+    /** Whether ploaness answers for the exception rather than the project. */
+    readonly isHarnessException: boolean;
+}
+/** Every reported advisory, sorted by what the policy decided about it. */
+export interface VulnerabilityClassification extends VulnerabilityReport {
+    readonly suppressed: readonly SuppressedAdvisory[];
+    readonly belowThreshold: readonly Advisory[];
+}
+/**
+ * Sort the advisories the database reported by what the policy decides about each one.
+ * @param advisories every advisory reported for the resolved set.
+ * @param exceptions the recorded exceptions.
+ * @param declaredSeverity the project's declared severity, or undefined.
+ * @param harnessExceptions the advisories ploaness answers for in its own chain.
+ * @returns the advisories that stand, the ones an exception excuses, the ones below the threshold, and
+ * the project exceptions that suppress nothing.
+ */
+export declare const classifyVulnerabilities: (advisories: readonly Advisory[], exceptions: readonly VulnerabilityException[], declaredSeverity: string | undefined, harnessExceptions?: readonly VulnerabilityException[]) => VulnerabilityClassification;
 /**
  * Judge the advisories the database reported against the recorded exceptions.
  * @param advisories every advisory reported for the resolved set.

package/dist/vulnerability-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vulnerability-policy.d.ts","sourceRoot":"","sources":["../src/vulnerability-policy.ts"],"names":[],"mappings":"AAEA,8DAA8D;AAC9D,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAAoD,CAAA;AAEhG,mFAAmF;AACnF,eAAO,MAAM,gBAAgB,EAAE,MAAmB,CAAA;AAElD,6CAA6C;AAC7C,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,+EAA+E;IAC/E,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CACpC;AAED,wEAAwE;AACxE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,sBAAsB,EAU/D,CAAA;AAED,2CAA2C;AAC3C,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,YAAY,EAAE,SAAS,QAAQ,EAAE,CAAA;IAC1C,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAOD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,GAAI,UAAU,MAAM,GAAG,SAAS,KAAG,MAOhE,CAAA;AAKD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,gBAAgB,GAAI,UAAU,QAAQ,EAAE,WAAW,MAAM,KAAG,OAGxE,CAAA;AAKD;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,GAC/B,YAAY,SAAS,QAAQ,EAAE,EAC/B,YAAY,SAAS,sBAAsB,EAAE,EAC7C,kBAAkB,MAAM,GAAG,SAAS,EAIpC,oBAAmB,SAAS,sBAAsB,EAAO,KACxD,mBAqCF,CAAA"}
+{"version":3,"file":"vulnerability-policy.d.ts","sourceRoot":"","sources":["../src/vulnerability-policy.ts"],"names":[],"mappings":"AAEA,8DAA8D;AAC9D,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAAoD,CAAA;AAEhG,mFAAmF;AACnF,eAAO,MAAM,gBAAgB,EAAE,MAAmB,CAAA;AAElD,6CAA6C;AAC7C,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,+EAA+E;IAC/E,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,2EAA2E;IAC3E,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,wEAAwE;AACxE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,sBAAsB,EAU/D,CAAA;AAED,2CAA2C;AAC3C,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,YAAY,EAAE,SAAS,QAAQ,EAAE,CAAA;IAC1C,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAOD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,GAAI,UAAU,MAAM,GAAG,SAAS,KAAG,MAOhE,CAAA;AAKD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,gBAAgB,GAAI,UAAU,QAAQ,EAAE,WAAW,MAAM,KAAG,OAGxE,CAAA;AAED,oFAAoF;AACpF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAA;IAC1C,0EAA0E;IAC1E,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAA;CACrC;AAED,2EAA2E;AAC3E,MAAM,WAAW,2BAA4B,SAAQ,mBAAmB;IACtE,QAAQ,CAAC,UAAU,EAAE,SAAS,kBAAkB,EAAE,CAAA;IAClD,QAAQ,CAAC,cAAc,EAAE,SAAS,QAAQ,EAAE,CAAA;CAC7C;AAeD;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,GAClC,YAAY,SAAS,QAAQ,EAAE,EAC/B,YAAY,SAAS,sBAAsB,EAAE,EAC7C,kBAAkB,MAAM,GAAG,SAAS,EAIpC,oBAAmB,SAAS,sBAAsB,EAAO,KACxD,2BAuCF,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,GAC/B,YAAY,SAAS,QAAQ,EAAE,EAC/B,YAAY,SAAS,sBAAsB,EAAE,EAC7C,kBAAkB,MAAM,GAAG,SAAS,EACpC,oBAAmB,SAAS,sBAAsB,EAAO,KACxD,mBAYF,CAAA"}

package/dist/vulnerability-policy.js

@@ -59,26 +59,37 @@ export const reachesThreshold = (advisory, threshold) => {
     return (severity === NOT_RANKED ? UNKNOWN_SEVERITY_RANK : severity) >= rank(threshold);
 };
 const identifiersOf = (advisory) => [advisory.id, ...advisory.aliases].map((identifier) => identifier.toUpperCase());
+const exceptionFor = (advisory, exceptions) => {
+    const identifiers = identifiersOf(advisory);
+    return exceptions.find((exception) => identifiers.includes(exception.advisory.toUpperCase()));
+};
 /**
- * Judge the advisories the database reported against the recorded exceptions.
+ * Sort the advisories the database reported by what the policy decides about each one.
  * @param advisories every advisory reported for the resolved set.
  * @param exceptions the recorded exceptions.
  * @param declaredSeverity the project's declared severity, or undefined.
  * @param harnessExceptions the advisories ploaness answers for in its own chain.
- * @returns the advisories that stand, and the exceptions that suppress nothing.
+ * @returns the advisories that stand, the ones an exception excuses, the ones below the threshold, and
+ * the project exceptions that suppress nothing.
  */
-export const judgeVulnerabilities = (advisories, exceptions, declaredSeverity, 
+export const classifyVulnerabilities = (advisories, exceptions, declaredSeverity, 
 // Defaulted to none rather than to the shipped list: a pure rule whose behaviour depends on a module
 // constant is one a spec cannot state the inputs of, and the strict end is the right default anyway.
 // The CLI injects HARNESS_EXCEPTIONS, which is the one place that knows it is judging a real project.
 harnessExceptions = []) => {
     const threshold = effectiveSeverity(declaredSeverity);
-    const excused = new Set([...harnessExceptions, ...exceptions].map((exception) => exception.advisory.toUpperCase()));
     const atThreshold = advisories.filter((advisory) => reachesThreshold(advisory, threshold));
-    const matched = new Set(atThreshold.flatMap((advisory) => identifiersOf(advisory).filter((identifier) => excused.has(identifier))));
+    const suppressed = atThreshold.flatMap((advisory) => {
+        const harness = exceptionFor(advisory, harnessExceptions);
+        const exception = harness ?? exceptionFor(advisory, exceptions);
+        return exception === undefined ? [] : [{ advisory, exception, isHarnessException: harness !== undefined }];
+    });
+    const matched = new Set(atThreshold.flatMap((advisory) => identifiersOf(advisory)));
     return {
         threshold,
-        unsuppressed: atThreshold.filter((advisory) => !identifiersOf(advisory).some((identifier) => excused.has(identifier))),
+        unsuppressed: atThreshold.filter((advisory) => !suppressed.some((entry) => entry.advisory === advisory)),
+        suppressed,
+        belowThreshold: advisories.filter((advisory) => !reachesThreshold(advisory, threshold)),
         // An entry that excuses nothing has outlived its advisory. Reporting it is the vulnerability-domain
         // twin of failing on a lint suppression that no longer suppresses anything.
         // The project's own entries only. Whether a HARNESS entry still suppresses anything is a property
@@ -93,4 +104,20 @@ harnessExceptions = []) => {
             'or the advisory withdrawn, so remove the entry'),
     };
 };
+/**
+ * Judge the advisories the database reported against the recorded exceptions.
+ * @param advisories every advisory reported for the resolved set.
+ * @param exceptions the recorded exceptions.
+ * @param declaredSeverity the project's declared severity, or undefined.
+ * @param harnessExceptions the advisories ploaness answers for in its own chain.
+ * @returns the advisories that stand, and the exceptions that suppress nothing.
+ */
+export const judgeVulnerabilities = (advisories, exceptions, declaredSeverity, harnessExceptions = []) => {
+    const classification = classifyVulnerabilities(advisories, exceptions, declaredSeverity, harnessExceptions);
+    return {
+        threshold: classification.threshold,
+        unsuppressed: classification.unsuppressed,
+        deadEntries: classification.deadEntries,
+    };
+};
 //# sourceMappingURL=vulnerability-policy.js.map

package/dist/vulnerability-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"vulnerability-policy.js","sourceRoot":"","sources":["../src/vulnerability-policy.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAElG,8DAA8D;AAC9D,MAAM,CAAC,MAAM,cAAc,GAAsB,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;AAEhG,mFAAmF;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAW,UAAU,CAAA;AAmBlD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAsC;IACnE;QACE,QAAQ,EAAE,qBAAqB;QAC/B,MAAM,EACJ,0FAA0F;YAC1F,0FAA0F;YAC1F,8FAA8F;YAC9F,0FAA0F;QAC5F,OAAO,EAAE,YAAY;KACtB;CACF,CAAA;AASD,uEAAuE;AACvE,MAAM,UAAU,GAAW,CAAC,CAAC,CAAA;AAE7B,MAAM,IAAI,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;AAEzF;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAA4B,EAAU,EAAE;IACxE,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,UAAU,EAAE,CAAC;QAC5D,OAAO,gBAAgB,CAAA;IACzB,CAAC;IACD,oGAAoG;IACpG,2DAA2D;IAC3D,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAA;AAC5F,CAAC,CAAA;AAED,mFAAmF;AACnF,MAAM,qBAAqB,GAAW,cAAc,CAAC,MAAM,CAAA;AAE3D;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,QAAkB,EAAE,SAAiB,EAAW,EAAE;IACjF,MAAM,QAAQ,GAAW,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAChD,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAA;AACxF,CAAC,CAAA;AAED,MAAM,aAAa,GAAG,CAAC,QAAkB,EAAqB,EAAE,CAC9D,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,UAAkB,EAAU,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;AAElG;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,UAA+B,EAC/B,UAA6C,EAC7C,gBAAoC;AACpC,qGAAqG;AACrG,qGAAqG;AACrG,sGAAsG;AACtG,oBAAuD,EAAE,EACpC,EAAE;IACvB,MAAM,SAAS,GAAW,iBAAiB,CAAC,gBAAgB,CAAC,CAAA;IAC7D,MAAM,OAAO,GAAwB,IAAI,GAAG,CAC1C,CAAC,GAAG,iBAAiB,EAAE,GAAG,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,SAAiC,EAAU,EAAE,CACtF,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,CACjC,CACF,CAAA;IACD,MAAM,WAAW,GAAwB,UAAU,CAAC,MAAM,CAAC,CAAC,QAAkB,EAAW,EAAE,CACzF,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC,CACtC,CAAA;IACD,MAAM,OAAO,GAAwB,IAAI,GAAG,CAC1C,WAAW,CAAC,OAAO,CAAC,CAAC,QAAkB,EAAqB,EAAE,CAC5D,aAAa,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,UAAkB,EAAW,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CACzF,CACF,CAAA;IACD,OAAO;QACL,SAAS;QACT,YAAY,EAAE,WAAW,CAAC,MAAM,CAC9B,CAAC,QAAkB,EAAW,EAAE,CAC9B,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,UAAkB,EAAW,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAC1F;QACD,oGAAoG;QACpG,4EAA4E;QAC5E,kGAAkG;QAClG,2FAA2F;QAC3F,oGAAoG;QACpG,oGAAoG;QACpG,kGAAkG;QAClG,2EAA2E;QAC3E,WAAW,EAAE,UAAU;aACpB,MAAM,CAAC,CAAC,SAAiC,EAAW,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;aACtG,GAAG,CACF,CAAC,SAAiC,EAAU,EAAE,CAC5C,GAAG,SAAS,CAAC,QAAQ,2DAA2D;YAChF,gDAAgD,CACnD;KACJ,CAAA;AACH,CAAC,CAAA"}
+{"version":3,"file":"vulnerability-policy.js","sourceRoot":"","sources":["../src/vulnerability-policy.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAElG,8DAA8D;AAC9D,MAAM,CAAC,MAAM,cAAc,GAAsB,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;AAEhG,mFAAmF;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAW,UAAU,CAAA;AAqBlD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAsC;IACnE;QACE,QAAQ,EAAE,qBAAqB;QAC/B,MAAM,EACJ,0FAA0F;YAC1F,0FAA0F;YAC1F,8FAA8F;YAC9F,0FAA0F;QAC5F,OAAO,EAAE,YAAY;KACtB;CACF,CAAA;AASD,uEAAuE;AACvE,MAAM,UAAU,GAAW,CAAC,CAAC,CAAA;AAE7B,MAAM,IAAI,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;AAEzF;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAA4B,EAAU,EAAE;IACxE,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,UAAU,EAAE,CAAC;QAC5D,OAAO,gBAAgB,CAAA;IACzB,CAAC;IACD,oGAAoG;IACpG,2DAA2D;IAC3D,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAA;AAC5F,CAAC,CAAA;AAED,mFAAmF;AACnF,MAAM,qBAAqB,GAAW,cAAc,CAAC,MAAM,CAAA;AAE3D;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,QAAkB,EAAE,SAAiB,EAAW,EAAE;IACjF,MAAM,QAAQ,GAAW,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAChD,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAA;AACxF,CAAC,CAAA;AAgBD,MAAM,aAAa,GAAG,CAAC,QAAkB,EAAqB,EAAE,CAC9D,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,UAAkB,EAAU,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;AAElG,MAAM,YAAY,GAAG,CACnB,QAAkB,EAClB,UAA6C,EACT,EAAE;IACtC,MAAM,WAAW,GAAsB,aAAa,CAAC,QAAQ,CAAC,CAAA;IAC9D,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAiC,EAAW,EAAE,CACpE,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CACvD,CAAA;AACH,CAAC,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,UAA+B,EAC/B,UAA6C,EAC7C,gBAAoC;AACpC,qGAAqG;AACrG,qGAAqG;AACrG,sGAAsG;AACtG,oBAAuD,EAAE,EAC5B,EAAE;IAC/B,MAAM,SAAS,GAAW,iBAAiB,CAAC,gBAAgB,CAAC,CAAA;IAC7D,MAAM,WAAW,GAAwB,UAAU,CAAC,MAAM,CAAC,CAAC,QAAkB,EAAW,EAAE,CACzF,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC,CACtC,CAAA;IACD,MAAM,UAAU,GAAkC,WAAW,CAAC,OAAO,CACnE,CAAC,QAAkB,EAAiC,EAAE;QACpD,MAAM,OAAO,GAAuC,YAAY,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAA;QAC7F,MAAM,SAAS,GAAuC,OAAO,IAAI,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;QACnG,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC,CAAA;IAC5G,CAAC,CACF,CAAA;IACD,MAAM,OAAO,GAAwB,IAAI,GAAG,CAC1C,WAAW,CAAC,OAAO,CAAC,CAAC,QAAkB,EAAqB,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CACxF,CAAA;IACD,OAAO;QACL,SAAS;QACT,YAAY,EAAE,WAAW,CAAC,MAAM,CAC9B,CAAC,QAAkB,EAAW,EAAE,CAC9B,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAyB,EAAW,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CACxF;QACD,UAAU;QACV,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,QAAkB,EAAW,EAAE,CAAC,CAAC,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC1G,oGAAoG;QACpG,4EAA4E;QAC5E,kGAAkG;QAClG,2FAA2F;QAC3F,oGAAoG;QACpG,oGAAoG;QACpG,kGAAkG;QAClG,2EAA2E;QAC3E,WAAW,EAAE,UAAU;aACpB,MAAM,CAAC,CAAC,SAAiC,EAAW,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;aACtG,GAAG,CACF,CAAC,SAAiC,EAAU,EAAE,CAC5C,GAAG,SAAS,CAAC,QAAQ,2DAA2D;YAChF,gDAAgD,CACnD;KACJ,CAAA;AACH,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,UAA+B,EAC/B,UAA6C,EAC7C,gBAAoC,EACpC,oBAAuD,EAAE,EACpC,EAAE;IACvB,MAAM,cAAc,GAAgC,uBAAuB,CACzE,UAAU,EACV,UAAU,EACV,gBAAgB,EAChB,iBAAiB,CAClB,CAAA;IACD,OAAO;QACL,SAAS,EAAE,cAAc,CAAC,SAAS;QACnC,YAAY,EAAE,cAAc,CAAC,YAAY;QACzC,WAAW,EAAE,cAAc,CAAC,WAAW;KACxC,CAAA;AACH,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ploaness/governance",
-  "version": "1.6.0",
+  "version": "1.8.0",
   "description": "Pure, unit-tested governance rules for ploaness. No filesystem, process, or network access.",
   "license": "MIT",
   "author": "Herman Ciechanowiec <herman@ciechanowiec.eu>",