@securecode-ai/mcp 0.2.0 → 0.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/dependency/depCache.d.ts +22 -0
- package/dist/dependency/depCache.js +115 -0
- package/dist/dependency/depCache.js.map +1 -0
- package/dist/dependency/dependencyChecker.d.ts +48 -0
- package/dist/dependency/dependencyChecker.js +196 -0
- package/dist/dependency/dependencyChecker.js.map +1 -0
- package/dist/dependency/finding.d.ts +42 -0
- package/dist/dependency/finding.js +13 -0
- package/dist/dependency/finding.js.map +1 -0
- package/dist/dependency/licensePolicy.d.ts +56 -0
- package/dist/dependency/licensePolicy.js +109 -0
- package/dist/dependency/licensePolicy.js.map +1 -0
- package/dist/dependency/minSafeVersion.d.ts +32 -0
- package/dist/dependency/minSafeVersion.js +125 -0
- package/dist/dependency/minSafeVersion.js.map +1 -0
- package/dist/dependency/osvClient.d.ts +45 -0
- package/dist/dependency/osvClient.js +443 -0
- package/dist/dependency/osvClient.js.map +1 -0
- package/dist/dependency/parsers/npm.d.ts +13 -0
- package/dist/dependency/parsers/npm.js +160 -0
- package/dist/dependency/parsers/npm.js.map +1 -0
- package/dist/dependency/parsers/pipfile.d.ts +8 -0
- package/dist/dependency/parsers/pipfile.js +110 -0
- package/dist/dependency/parsers/pipfile.js.map +1 -0
- package/dist/dependency/parsers/pnpm.d.ts +11 -0
- package/dist/dependency/parsers/pnpm.js +148 -0
- package/dist/dependency/parsers/pnpm.js.map +1 -0
- package/dist/dependency/parsers/requirements.d.ts +24 -0
- package/dist/dependency/parsers/requirements.js +153 -0
- package/dist/dependency/parsers/requirements.js.map +1 -0
- package/dist/dependency/parsers/yarn.d.ts +10 -0
- package/dist/dependency/parsers/yarn.js +153 -0
- package/dist/dependency/parsers/yarn.js.map +1 -0
- package/dist/dependency/resolver.d.ts +28 -0
- package/dist/dependency/resolver.js +159 -0
- package/dist/dependency/resolver.js.map +1 -0
- package/dist/dependency/types.d.ts +85 -0
- package/dist/dependency/types.js +11 -0
- package/dist/dependency/types.js.map +1 -0
- package/dist/mcp/server.js +18 -1
- package/dist/mcp/server.js.map +1 -1
- package/dist/mcp/tools.js +8 -0
- package/dist/mcp/tools.js.map +1 -1
- package/dist/project-map/mapBuilder.js +44 -5
- package/dist/project-map/mapBuilder.js.map +1 -1
- package/dist/tools/map.js +13 -1
- package/dist/tools/map.js.map +1 -1
- package/dist/tools/scanDependencies.d.ts +11 -0
- package/dist/tools/scanDependencies.js +37 -0
- package/dist/tools/scanDependencies.js.map +1 -0
- package/package.json +9 -2
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"mapBuilder.js","sourceRoot":"","sources":["../../src/project-map/mapBuilder.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
|
|
1
|
+
{"version":3,"file":"mapBuilder.js","sourceRoot":"","sources":["../../src/project-map/mapBuilder.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8GA,0CAsFC;AApMD,uCAAyB;AACzB,2CAA6B;AAC7B,iDAA6D;AAC7D,qCAAyC;AACzC,qCAAiD;AACjD,6CAAmD;AAEnD,mCAAqD;AAErD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACtB,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS;IACpE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,aAAa;IAC9D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO;CACpE,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACjC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK;CACtD,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,aAAa,GAAG,IAAI,GAAG,IAAI,CAAC;AAElC,wEAAwE;AACxE,SAAS,oBAAoB,CAAC,IAAY;IACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,IAAI,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;QACxD,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACpD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAClD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1B,CAAC;QACL,CAAC;IACL,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC7B,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,yEAAyE;AACzE,SAAS,SAAS,CAAC,OAAe,EAAE,QAAqB;IACrD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC7B,wDAAwD;QACxD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QACpG,CAAC;QACD,cAAc;QACd,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QACrC,wCAAwC;QACxC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACjF,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAgBD,SAAS,aAAa,CAAC,IAAY,EAAE,cAA2B;IAC5D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAa,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QACzB,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACD,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACL,SAAS;QACb,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,KAAK,IAAI,SAAS;gBAAE,MAAM;YAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAE5C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACtB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC5D,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACzB,CAAC;YACL,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBACnD,IAAI,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAClE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC;wBACtC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;wBACvB,KAAK,EAAE,CAAC;oBACZ,CAAC;gBACL,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,OAAe;IAC7C,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC5D,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,IAAkB;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC;IAE5C,MAAM,cAAc,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAE/C,MAAM,eAAe,GAAqB,EAAE,CAAC;IAC7C,MAAM,YAAY,GAAqB,EAAE,CAAC;IAC1C,MAAM,MAAM,GAA2C,EAAE,CAAC;IAC1D,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAE7C,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC,IAAI,GAAG,aAAa,EAAE,CAAC;gBAC5B,OAAO,EAAE,CAAC;gBACV,SAAS;YACb,CAAC;YAED,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAChD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,EAAE,CAAC;gBACV,SAAS;YACb,CAAC;YAED,MAAM,OAAO,GAAG,IAAA,6BAAc,EAAC,OAAO,CAAC,CAAC;YACxC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,EAAE,CAAC;gBACV,SAAS;YACb,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAA,0BAAW,EAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC1B,OAAO,EAAE,CAAC;gBACV,SAAS;YACb,CAAC;YAED,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;YACjC,MAAM,MAAM,GAAG,IAAA,sBAAa,EAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACvD,MAAM,eAAe,GAAG,IAAA,8BAAqB,EAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YAExE,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBAChC,MAAM,UAAU,GAAG,IAAA,gCAAmB,EAAC,EAAE,CAAC,CAAC;gBAC3C,EAAE,CAAC,UAAU,GAAG,UAAU,CAAC;gBAC3B,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;YAED,eAAe,CAAC,IAAI,CAAC;gBACjB,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,OAAO;gBACjB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,eAAe;gBACf,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,KAAK,EAAE,IAAI,CAAC,OAAO;gBACnB,IAAI,EAAE,EAAE;aACX,CAAC,CAAC;YAEH,SAAS,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClE,OAAO,EAAE,CAAC;QACd,CAAC;IACL,CAAC;IAED,MAAM,GAAG,GAAe;QACpB,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAClE,SAAS,EAAE,YAAY;QACvB,eAAe,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC;QAClE,OAAO,EAAE,kCAA0B;QACnC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;IAEF,OAAO;QACH,GAAG;QACH,cAAc,EAAE,SAAS;QACzB,YAAY,EAAE,OAAO;QACrB,MAAM;QACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KACrC,CAAC;AACN,CAAC"}
|
package/dist/tools/map.js
CHANGED
|
@@ -5,8 +5,20 @@ const cache_1 = require("../project-map/cache");
|
|
|
5
5
|
const mapBuilder_1 = require("../project-map/mapBuilder");
|
|
6
6
|
async function toolMap(ctx, args) {
|
|
7
7
|
const action = args.action || 'endpoints';
|
|
8
|
+
const progressFn = args._progress;
|
|
8
9
|
if (action === 'build') {
|
|
9
|
-
|
|
10
|
+
let lastProgress = 0;
|
|
11
|
+
const result = await (0, mapBuilder_1.buildProjectMap)({
|
|
12
|
+
workspaceRoot: ctx.workspaceRoot,
|
|
13
|
+
onProgress: (processed, total, file) => {
|
|
14
|
+
// Send progress at most every 5% or every 25 files
|
|
15
|
+
const pct = Math.floor((processed / total) * 100);
|
|
16
|
+
if (pct >= lastProgress + 5 || processed - lastProgress >= 25 || processed === total) {
|
|
17
|
+
lastProgress = pct;
|
|
18
|
+
progressFn?.(processed, total, `Mapping ${file} (${processed}/${total})`);
|
|
19
|
+
}
|
|
20
|
+
},
|
|
21
|
+
});
|
|
10
22
|
(0, cache_1.writeCache)(ctx.workspaceRoot, result.map);
|
|
11
23
|
return {
|
|
12
24
|
built: true,
|
package/dist/tools/map.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"map.js","sourceRoot":"","sources":["../../src/tools/map.ts"],"names":[],"mappings":";;AAMA,
|
|
1
|
+
{"version":3,"file":"map.js","sourceRoot":"","sources":["../../src/tools/map.ts"],"names":[],"mappings":";;AAMA,0BAuDC;AA1DD,gDAA0E;AAC1E,0DAA4D;AAErD,KAAK,UAAU,OAAO,CAAC,GAAkB,EAAE,IAAS;IACvD,MAAM,MAAM,GAAI,IAAI,CAAC,MAAiB,IAAI,WAAW,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAqF,CAAC;IAE9G,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACrB,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,MAAM,IAAA,4BAAe,EAAC;YACjC,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,UAAU,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACnC,mDAAmD;gBACnD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;gBAClD,IAAI,GAAG,IAAI,YAAY,GAAG,CAAC,IAAI,SAAS,GAAG,YAAY,IAAI,EAAE,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;oBACnF,YAAY,GAAG,GAAG,CAAC;oBACnB,UAAU,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,WAAW,IAAI,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,CAAC;gBAC9E,CAAC;YACL,CAAC;SACJ,CAAC,CAAC;QACH,IAAA,kBAAU,EAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1C,OAAO;YACH,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM;YAC9C,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;SAC9B,CAAC;IACN,CAAC;IAED,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO,IAAA,mBAAW,EAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC1C,CAAC;IAED,oEAAoE;IACpE,IAAI,GAAG,GAAG,IAAA,iBAAS,EAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG,EAAE,CAAC;QACP,MAAM,MAAM,GAAG,MAAM,IAAA,4BAAe,EAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC;QAC3E,IAAA,kBAAU,EAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1C,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACrB,CAAC;IAED,OAAO;QACH,SAAS,EAAE,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,WAAW;YACtB,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,UAAU,EAAE,CAAC,CAAC,UAAU;SAC3B,CAAC,CAAC;QACH,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,OAAO,EAAE,GAAG,CAAC,OAAO;KACvB,CAAC;AACN,CAAC"}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
import type { ServerContext } from '../mcp/types';
|
|
2
|
+
/**
|
|
3
|
+
* securecode.scan-dependencies — scan local lockfiles for known vulnerabilities.
|
|
4
|
+
*
|
|
5
|
+
* Read-only: no approval needed. Runs entirely locally — only package name+version
|
|
6
|
+
* leave the machine (to OSV.dev, GitHub Advisory, NVD). No source code is sent.
|
|
7
|
+
*
|
|
8
|
+
* Supports 5 lockfile types: package-lock.json, yarn.lock, pnpm-lock.yaml,
|
|
9
|
+
* Pipfile.lock, requirements.txt.
|
|
10
|
+
*/
|
|
11
|
+
export declare function toolScanDependencies(ctx: ServerContext, _args: any): Promise<unknown>;
|
|
@@ -0,0 +1,37 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.toolScanDependencies = toolScanDependencies;
|
|
4
|
+
const dependencyChecker_1 = require("../dependency/dependencyChecker");
|
|
5
|
+
const depCache_1 = require("../dependency/depCache");
|
|
6
|
+
/**
|
|
7
|
+
* securecode.scan-dependencies — scan local lockfiles for known vulnerabilities.
|
|
8
|
+
*
|
|
9
|
+
* Read-only: no approval needed. Runs entirely locally — only package name+version
|
|
10
|
+
* leave the machine (to OSV.dev, GitHub Advisory, NVD). No source code is sent.
|
|
11
|
+
*
|
|
12
|
+
* Supports 5 lockfile types: package-lock.json, yarn.lock, pnpm-lock.yaml,
|
|
13
|
+
* Pipfile.lock, requirements.txt.
|
|
14
|
+
*/
|
|
15
|
+
async function toolScanDependencies(ctx, _args) {
|
|
16
|
+
const cache = new depCache_1.FileCacheStore(ctx.workspaceRoot);
|
|
17
|
+
const result = await (0, dependencyChecker_1.scanDependencies)({
|
|
18
|
+
workspaceRoot: ctx.workspaceRoot,
|
|
19
|
+
state: cache,
|
|
20
|
+
licensePolicy: 'warn',
|
|
21
|
+
useGhsa: true,
|
|
22
|
+
});
|
|
23
|
+
return {
|
|
24
|
+
findings: result.findings.map((f) => ({
|
|
25
|
+
check_id: f.check_id,
|
|
26
|
+
severity: f.severity,
|
|
27
|
+
message: f.message,
|
|
28
|
+
source: f.source,
|
|
29
|
+
dependency: f.dependency,
|
|
30
|
+
})),
|
|
31
|
+
packageCount: result.packageCount,
|
|
32
|
+
unresolvedCount: result.unresolvedCount,
|
|
33
|
+
lockfiles: result.lockfiles,
|
|
34
|
+
ghsaSkipped: result.ghsaSkipped ?? false,
|
|
35
|
+
};
|
|
36
|
+
}
|
|
37
|
+
//# sourceMappingURL=scanDependencies.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"scanDependencies.js","sourceRoot":"","sources":["../../src/tools/scanDependencies.ts"],"names":[],"mappings":";;AAaA,oDAuBC;AAnCD,uEAAmE;AACnE,qDAAwD;AAExD;;;;;;;;GAQG;AACI,KAAK,UAAU,oBAAoB,CAAC,GAAkB,EAAE,KAAU;IACrE,MAAM,KAAK,GAAG,IAAI,yBAAc,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAEpD,MAAM,MAAM,GAAG,MAAM,IAAA,oCAAgB,EAAC;QAClC,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,KAAK,EAAE,KAAK;QACZ,aAAa,EAAE,MAAM;QACrB,OAAO,EAAE,IAAI;KAChB,CAAC,CAAC;IAEH,OAAO;QACH,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClC,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,UAAU,EAAE,CAAC,CAAC,UAAU;SAC3B,CAAC,CAAC;QACH,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,KAAK;KAC3C,CAAC;AACN,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@securecode-ai/mcp",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.3.0",
|
|
4
4
|
"description": "Standalone SecureCode MCP server — scan, map, fix, and attack tools for AI coding assistants. Works without the VS Code extension.",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"bin": {
|
|
@@ -43,10 +43,17 @@
|
|
|
43
43
|
"access": "public"
|
|
44
44
|
},
|
|
45
45
|
"dependencies": {
|
|
46
|
-
"
|
|
46
|
+
"@yarnpkg/lockfile": "^1.1.0",
|
|
47
|
+
"semver": "^7.5.4",
|
|
48
|
+
"spdx-correct": "^3.2.0",
|
|
49
|
+
"web-tree-sitter": "0.26.11",
|
|
50
|
+
"yaml": "^2.3.4"
|
|
47
51
|
},
|
|
48
52
|
"devDependencies": {
|
|
49
53
|
"@types/node": "^20.10.0",
|
|
54
|
+
"@types/semver": "^7.5.6",
|
|
55
|
+
"@types/spdx-correct": "^3.1.3",
|
|
56
|
+
"@types/yarnpkg__lockfile": "^1.1.9",
|
|
50
57
|
"typescript": "^5.3.2",
|
|
51
58
|
"vitest": "^2.1.0"
|
|
52
59
|
}
|