@renovatebot/osv-offline-db 2.5.1 → 3.0.0

package/dist/index.d.ts

@@ -1,3 +1,3 @@
-export { OsvOfflineDb } from './lib/db';
-export { Ecosystem, ecosystems } from './lib/ecosystem';
-export * as Osv from './lib/osv';
+export { OsvOfflineDb } from './lib/db.ts';
+export { Ecosystem, ecosystems } from './lib/ecosystem.ts';
+export * as Osv from './lib/osv.ts';

package/dist/index.js

@@ -1,41 +1,3 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Osv = exports.ecosystems = exports.OsvOfflineDb = void 0;
-var db_1 = require("./lib/db");
-Object.defineProperty(exports, "OsvOfflineDb", { enumerable: true, get: function () { return db_1.OsvOfflineDb; } });
-var ecosystem_1 = require("./lib/ecosystem");
-Object.defineProperty(exports, "ecosystems", { enumerable: true, get: function () { return ecosystem_1.ecosystems; } });
-exports.Osv = __importStar(require("./lib/osv"));
+export { OsvOfflineDb } from "./lib/db.js";
+export { ecosystems } from "./lib/ecosystem.js";
+export * as Osv from "./lib/osv.js";

package/dist/lib/db.d.ts

@@ -1,5 +1,5 @@
-import { Ecosystem } from './ecosystem';
-import type { Vulnerability } from './osv';
+import { Ecosystem } from './ecosystem.ts';
+import type { Vulnerability } from './osv.ts';
 export declare class OsvOfflineDb {
     private disposed;
     static readonly rootDirectory: string;

package/dist/lib/db.js

@@ -1,22 +1,16 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OsvOfflineDb = void 0;
-const promises_1 = require("node:fs/promises");
-const node_fs_1 = require("node:fs");
-const node_util_1 = require("node:util");
-const node_path_1 = __importDefault(require("node:path"));
-const node_os_1 = require("node:os");
-const node_readline_1 = __importDefault(require("node:readline"));
-const purl_helper_1 = require("./purl-helper");
-const debug_1 = __importDefault(require("debug"));
-const logger = (0, debug_1.default)('osv-offline:db');
-const readAsync = (0, node_util_1.promisify)(node_fs_1.read);
-class OsvOfflineDb {
+import { stat } from 'node:fs/promises';
+import { closeSync, createReadStream, read as fsRead, openSync } from 'node:fs';
+import { promisify } from 'node:util';
+import path from 'node:path';
+import { tmpdir } from 'node:os';
+import readline from 'node:readline';
+import { packageToPurl } from "./purl-helper.js";
+import debug from 'debug';
+const logger = debug('osv-offline:db');
+const readAsync = promisify(fsRead);
+export class OsvOfflineDb {
     disposed = false;
-    static rootDirectory = process.env.OSV_OFFLINE_ROOT_DIR ?? node_path_1.default.join((0, node_os_1.tmpdir)(), 'osv-offline');
+    static rootDirectory = process.env.OSV_OFFLINE_ROOT_DIR ?? path.join(tmpdir(), 'osv-offline');
     _data = {};
     _db = {};
     _pendingAcs = new Set();
@@ -33,7 +27,7 @@ class OsvOfflineDb {
     async _load(ecosystem) {
         const cached = this._data[ecosystem];
         if (cached) {
-            const fileStat = await (0, promises_1.stat)(cached.filePath).catch(() => null);
+            const fileStat = await stat(cached.filePath).catch(() => null);
             // Check if the data currently in memory is still the same object we checked against
             // If not, another request has already handled the reload/unload
             if (this._data[ecosystem] !== cached) {
@@ -56,8 +50,8 @@ class OsvOfflineDb {
         const ac = new AbortController();
         this._pendingAcs.add(ac);
         try {
-            const filePath = node_path_1.default.join(OsvOfflineDb.rootDirectory, `${ecosystem.toLowerCase()}.nedb`);
-            const fileStat = await (0, promises_1.stat)(filePath).catch(() => null);
+            const filePath = path.join(OsvOfflineDb.rootDirectory, `${ecosystem.toLowerCase()}.nedb`);
+            const fileStat = await stat(filePath).catch(() => null);
             if (!fileStat) {
                 logger(`Missing data for ecosystem '${ecosystem}'`);
                 delete this._db[ecosystem];
@@ -65,7 +59,7 @@ class OsvOfflineDb {
             }
             const data = {
                 filePath,
-                fd: (0, node_fs_1.openSync)(filePath, 'r'),
+                fd: openSync(filePath, 'r'),
                 index: new Map(),
                 mtime: fileStat.mtimeMs,
             };
@@ -85,8 +79,8 @@ class OsvOfflineDb {
         }
     }
     async _buildIndex(ac, data) {
-        const fileStream = (0, node_fs_1.createReadStream)(data.filePath);
-        const rl = node_readline_1.default.createInterface({
+        const fileStream = createReadStream(data.filePath);
+        const rl = readline.createInterface({
             input: fileStream,
             crlfDelay: Infinity,
         });
@@ -145,7 +139,7 @@ class OsvOfflineDb {
         }));
         if (this.disposed)
             return [];
-        const targetPurl = (0, purl_helper_1.packageToPurl)(ecosystem, packageName);
+        const targetPurl = packageToPurl(ecosystem, packageName);
         return advisories.filter((vuln) => vuln.affected?.some((a) => a.package?.name === packageName &&
             (a.package.ecosystem === ecosystem ||
                 a.package.ecosystem.startsWith(`${ecosystem}:`)) &&
@@ -170,11 +164,10 @@ class OsvOfflineDb {
     }
     _unload(d) {
         try {
-            (0, node_fs_1.closeSync)(d.fd);
+            closeSync(d.fd);
         }
         catch {
             // ignore
         }
     }
 }
-exports.OsvOfflineDb = OsvOfflineDb;

package/dist/lib/ecosystem.js

@@ -1,8 +1,5 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ecosystems = void 0;
 // https://github.com/google/osv.dev/blob/b8ec0096f93f062993dee57f8b902f257993be88/osv/ecosystems/_ecosystems.py#L38-L68
-exports.ecosystems = [
+export const ecosystems = [
     'crates.io',
     'Go',
     'Hackage',

package/dist/lib/osv.js

@@ -1,2 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
+export {};

package/dist/lib/purl-helper.d.ts

@@ -1,2 +1,2 @@
-import type { Ecosystem } from './ecosystem';
+import type { Ecosystem } from './ecosystem.ts';
 export declare function packageToPurl(ecosystem: Ecosystem, packageName: string): string;

package/dist/lib/purl-helper.js

@@ -1,6 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.packageToPurl = packageToPurl;
 // https://github.com/google/osv.dev/blob/edacbd3c32b1d632bad8c5b506a14d0850b2e537/osv/purl_helpers.py#L18-L30
 const PURL_ECOSYSTEMS = {
     'crates.io': 'cargo',
@@ -19,7 +16,7 @@ function urlEncode(packageName) {
     const parts = packageName.split('/');
     return parts.map(encodeURIComponent).join('/');
 }
-function packageToPurl(ecosystem, packageName) {
+export function packageToPurl(ecosystem, packageName) {
     let packageNamePurl = packageName;
     const purlType = PURL_ECOSYSTEMS[ecosystem];
     if (purlType === 'maven') {

package/package.json

@@ -1,10 +1,9 @@
 {
   "name": "@renovatebot/osv-offline-db",
-  "version": "2.5.1",
+  "version": "3.0.0",
   "main": "dist/index.js",
-  "types": "dist/index.d.ts",
   "license": "MIT",
-  "type": "commonjs",
+  "type": "module",
   "publishConfig": {
     "access": "public"
   },
@@ -24,6 +23,7 @@
     "fs-extra": "11.3.4"
   },
   "engines": {
-    "node": ">=22.12.0"
+    "node": ">=22.12.0",
+    "pnpm": ">=10.0.0"
   }
 }