@sudoplatform/sudo-common 7.1.2 → 7.1.3

package/.yarnrc

@@ -1,5 +0,0 @@
-# THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
-# yarn lockfile v1
-
-
-yarn-path ".yarn/releases/yarn-1.22.19.cjs"

package/bin/outdated-with-suppression.sh

@@ -1,203 +0,0 @@
-#!/bin/sh
-
-set -e
-d="$(dirname "$0")"
-
-version_diff_type() {
-  v1="$1"
-  v2="$2"
-  v1_major=$(echo "$v1" | sed -E -e 's/^([^.]+)\..*/\1/')
-  v2_major=$(echo "$v2" | sed -E -e 's/^([^.]+)\..*/\1/')
-  v1_minor=$(echo "$v1" | sed -E -e 's/^([^.]+)\.([^.]+)\..*/\2/')
-  v2_minor=$(echo "$v2" | sed -E -e 's/^([^.]+)\.([^.]+)\..*/\2/')
-  if [ "${v1_major}" != "${v2_major}" ]; then echo 'major'; return 0; fi
-  if [ "${v1_minor}" != "${v2_minor}" ]; then echo 'minor'; return 0; fi
-  if [ "${v1}" != "${v2}" ]; then echo 'patch'; return 0; fi
-  echo 'equal'
-  return 0
-}
-
-suppression_from_diff_type() {
-  diff_type="$1"
-  majorSuppression="$2"
-  minorSuppression="$3"
-  patchSuppression="$4"
-
-  case "${diff_type}" in
-    major)
-      if [ -n "${majorSuppression}" ]; then
-        echo "major ${majorSuppression}"
-      elif [ -n "${minorSuppression}" ]; then
-        echo "minor ${minorSuppression}"
-      elif [ -n "${patchSuppression}" ]; then
-        echo "patch ${patchSuppression}"
-      fi
-      ;;
-    minor)
-      if [ -n "${minorSuppression}" ]; then
-        echo "minor ${minorSuppression}"
-      elif [ -n "${patchSuppression}" ]; then
-        echo "patch ${patchSuppression}"
-      fi
-      ;;
-    patch)
-      if [ -n "${patchSuppression}" ]; then
-        echo "patch ${patchSuppression}"
-      fi
-      ;;
-  esac
-}
-
-# Number of days to suppress if accepting or refreshing and cadence to run if --last specified
-cadence=30
-
-# If set, accept any outdated packages. Has the effect of refreshing existing suppressions
-# as well.
-accept=""
-
-# If set, refresh any existing suppressions
-refresh=""
-
-# If set, records/references last success in the specified directory.
-# Only run the dependency check every cadence days if a last success
-# timestamp is found
-last=""
-
-while [ -n "${1}" ]; do
-  case "${1}" in
-    --cadence)
-      if [ -z "$2" ]; then
-        echo "ERROR: --cadence requires number of days argument" 1>&2
-        exit 1
-      fi
-      shift
-      cadence="$1"
-      ;;
-    --accept) accept="1" ;;
-    --refresh) refresh="1" ;;
-    --last)
-      if [ -z "$2" ]; then
-        echo "ERROR: --last requires directory argument in which last successful run timestamp is to be store" 1>&2
-        exit 1
-      fi
-      shift
-      last="$1"
-      ;;
-    *)
-      echo "ERROR: Unrecognized argument '${1}'" 1>&2
-      exit 1
-  esac
-  shift
-done
-
-dateFromSeconds() {
-  s="$1"
-  case $(uname) in
-    Darwin)
-      date -Iseconds -r"${s}"
-      ;;
-    *)
-      date -Iseconds "-d@${s}"
-      ;;
-  esac
-}
-
-within_cadence=""
-if [ -r "${last}/last_success" ]; then
-  cadence_seconds=$((cadence * 24 * 3600))
-  now="$(date +%s)"
-  last_run="$(cat "${last}/last_success")"
-  due="$((last_run + cadence_seconds))"
-  if [ "$((due > now))" = "1" ]; then
-    echo "Last success: $(dateFromSeconds "${last_run}")"
-    echo "Now:          $(date -Iseconds)"
-    echo "Due from:     $(dateFromSeconds "${due}")"
-    within_cadence="1"
-  else
-    echo "Last success: $(dateFromSeconds "${last_run}")"
-    echo "Now:          $(date -Iseconds)"
-    echo "Due since:    $(dateFromSeconds "${due}")"
-  fi
-fi
-
-
-yarn outdated --json | jq -r -s -c 'map(select(.type == "table").data.body) | .[] | unique_by(.[0]) | .[] | .[0] + " " + .[1] + " " + .[2] + " " + .[3]' | (new=""; while read -r package_name current wanted latest; do
-  majorSuppression=$(jq ".outdatedSuppressions.major[\"${package_name}\"] | select (. != null)" package.json)
-  minorSuppression=$(jq ".outdatedSuppressions.minor[\"${package_name}\"] | select (. != null)" package.json)
-  patchSuppression=$(jq ".outdatedSuppressions[\"${package_name}\"] | select (. != null)" package.json)
-  latest_diff_type=$(version_diff_type "${current}" "${latest}")
-  wanted_diff_type=$(version_diff_type "${current}" "${wanted}")
-
-  # shellcheck disable=SC2046
-  set -- $(suppression_from_diff_type "${latest_diff_type}" "${majorSuppression}" "${minorSuppression}" "${patchSuppression}")
-  latest_suppression_type="$1"
-  latest_suppression="$2"
-
-  # shellcheck disable=SC2046
-  set -- $(suppression_from_diff_type "${wanted_diff_type}" "${majorSuppression}" "${minorSuppression}" "${patchSuppression}")
-  wanted_suppression_type="$1"
-  wanted_suppression="$2"
-
-  # If package has major update but isn't suppre
-  suppression=""
-  suppression_type=""
-  outdated_diff_type="${latest_diff_type}"
-  if [ -n "${latest_suppression_type}" ]; then
-    if [ "${wanted_diff_type}" != "equal" ]; then
-      outdated_diff_type="${wanted_diff_type}"
-      if [ -n "${wanted_suppression_type}" ]; then
-        suppression_type="${wanted_suppression_type}"
-        suppression="${wanted_suppression}"
-      else
-        # Only suppressed at major level and we have minor or patch
-        # updates available - do not suppress
-        :
-      fi
-    else
-      suppression_type="${latest_suppression_type}"
-      suppression="${latest_suppression}"
-    fi
-  fi
-
-  suppress_outdated=""
-  if [ -e "${d}/suppress-outdated" ]; then
-    suppress_outdated="${d}/suppress-outdated"
-  elif [ -e "${d}/suppress-outdated.sh" ]; then
-    suppress_outdated="${d}/suppress-outdated.sh"
-  fi
-  if [ -z "${suppress_outdated}" ]; then
-    echo "ERROR: Unable to find suppress-outdated" 1>&2
-    exit 1
-  fi
-  if [ -z "${suppression}" ]; then
-    if [ -n "${accept}" ]; then
-      echo "${package_name}: current: ${current} wanted: ${wanted} latest: ${latest} [${latest_diff_type} accepted]"
-      "${suppress_outdated}" --suppression "${cadence}" --"${latest_diff_type}" "${package_name}"
-    else
-      echo "${package_name}: current: ${current} wanted: ${wanted} latest: ${latest} [${outdated_diff_type} outdated]"
-      new=1
-    fi
-  elif [ -n "${accept}${refresh}" ]; then
-    echo "${package_name}: current: ${current} wanted: ${wanted} latest: ${latest} [${suppression_type} suppression refreshed]"
-    "${suppress_outdated}" --suppression "${cadence}" --"${suppression_type}" "${package_name}"
-  elif [ "$(date '+%s')" -gt "${suppression}" ]; then
-    echo "${package_name}: current: ${current} wanted: ${wanted} latest: ${latest} [${outdated_diff_type} suppression expired]"
-    new=1
-  else
-    echo "${package_name}: current: ${current} wanted: ${wanted} latest: ${latest} [${outdated_diff_type} suppressed]"
-  fi
-done
-
-# If we're not within cadence and there are new outdated dependencies
-# then fail
-if [ -z "${within_cadence}" -a -n "${new}" ]; then
-  exit 1
-fi
-
-# If there a no outdated dependencies and we're tracking last success then
-# refresh the last success timestamp.
-if [ -z "${new}" -a -n "${last}" ]; then
-  mkdir -p "${last}"
-  date +%s > "${last}/last_success"
-fi
-)

package/bin/suppress-audit.sh

@@ -1,15 +0,0 @@
-#!/bin/sh
-#
-# Insert a audit identifier to suppress in verification proccess.
-#
-
-auditid=$1
-PACKAGE_JSON="package.json"
-
-if [ -z $auditid ]; then
-  echo "Usage: yarn suppress-audit <audit id>"
-  exit 1
-fi
-cp $PACKAGE_JSON $PACKAGE_JSON.old
-cat $PACKAGE_JSON | jq ".auditSuppressions.\"$auditid\" = (now | floor | . + 1209600)" > $PACKAGE_JSON.staging
-mv $PACKAGE_JSON.staging $PACKAGE_JSON

package/bin/suppress-outdated.sh

@@ -1,60 +0,0 @@
-#!/bin/sh
-#
-# Insert a package name to suppress in outdated checks.
-#
-
-set -e
-
-usage() {
-  echo "Usage: suppress-outdated.sh [--suppression <number-of-days>] {--major|--minor|--patch} <package name> ..."
-}
-
-suppression=30
-if [ "$1" = "--suppression" ]; then
-  if [ -z "$2" ]; then
-    echo "ERROR: --suppression argument must specify a number of days argument" 1>&2
-    usage 1>&2
-    exit 1
-  fi
-  shift
-  suppression="$1"
-  shift
-fi
-
-case "$1" in
-  --major)
-    root=".outdatedSuppressions.major"
-    ;;
-  --minor)
-    root=".outdatedSuppressions.minor"
-    ;;
-  --patch)
-    root=".outdatedSuppressions"
-    ;;
-  *)
-    echo "suppress-outdated.sh: Unrecognized option: '$1'" 1>&2
-    usage 1>&2
-    exit 1
-    ;;
-esac
-shift
-
-if [ -z "$1" ]; then
-  echo "suppress-outdated.sh: No package names specified" 1>&2
-  usage 1>&2
-  exit 1
-fi
-
-suppression_seconds=$((suppression * 24 * 3600))
-
-PACKAGE_JSON="package.json"
-cp "$PACKAGE_JSON" "$PACKAGE_JSON.old"
-
-while [ -n "$1" ]; do
-  package_name="$1"
-
-  jq < "$PACKAGE_JSON" "${root}.\"${package_name}\" = (now | floor | . + ${suppression_seconds})" > "$PACKAGE_JSON.staging"
-  mv "$PACKAGE_JSON.staging" "$PACKAGE_JSON"
-
-  shift
-done

package/bin/yarn-audit-with-suppression.sh

@@ -1,19 +0,0 @@
-#!/bin/sh
-
-yarn audit --json --groups "dependencies devDependencies" | jq -s -c 'map(select(.type == "auditAdvisory").data.advisory) | unique_by(.id) | .[] | {id, title, module_name, vulnerable_versions, patched_versions, severity, findings}' | (new=""; while read advisory ; do
-  id=$(echo "${advisory}" | jq '.id')
-  suppression=$(jq ".auditSuppressions[\"$id\"] | select (. != null)" package.json)
-  if [ -z "$suppression" ]; then
-    echo "New advisory ${id}:"
-    echo "${advisory}" | jq .
-    new=1
-  elif [ $(date '+%s') -gt "$suppression" ]; then
-    echo "Suppression for advisory ${id} has expired. Please revisit:"
-    echo "${advisory}" | jq .
-    new=1
-  fi
-done
-if [ -n "${new}" ]; then
-  exit 1
-fi
-)