@vibgrate/cli 0.1.2 → 0.1.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +13 -3
- package/dist/{baseline-AENFLFQT.js → baseline-45AWVXG4.js} +2 -2
- package/dist/{chunk-OHAVLM6P.js → chunk-BTIIFIOD.js} +1 -1
- package/dist/chunk-WO6EZ6AF.js +3900 -0
- package/dist/cli.js +3 -3
- package/dist/index.d.ts +134 -0
- package/dist/index.js +1 -1
- package/package.json +1 -1
- package/dist/chunk-DLRBJYO6.js +0 -1077
package/dist/cli.js
CHANGED
|
@@ -4,7 +4,7 @@ import {
|
|
|
4
4
|
} from "./chunk-AMOJCCF5.js";
|
|
5
5
|
import {
|
|
6
6
|
baselineCommand
|
|
7
|
-
} from "./chunk-
|
|
7
|
+
} from "./chunk-BTIIFIOD.js";
|
|
8
8
|
import {
|
|
9
9
|
VERSION,
|
|
10
10
|
ensureDir,
|
|
@@ -15,7 +15,7 @@ import {
|
|
|
15
15
|
scanCommand,
|
|
16
16
|
writeDefaultConfig,
|
|
17
17
|
writeTextFile
|
|
18
|
-
} from "./chunk-
|
|
18
|
+
} from "./chunk-WO6EZ6AF.js";
|
|
19
19
|
|
|
20
20
|
// src/cli.ts
|
|
21
21
|
import { Command as Command6 } from "commander";
|
|
@@ -38,7 +38,7 @@ var initCommand = new Command("init").description("Initialize vibgrate in a proj
|
|
|
38
38
|
console.log(chalk.green("\u2714") + ` Created ${chalk.bold("vibgrate.config.ts")}`);
|
|
39
39
|
}
|
|
40
40
|
if (opts.baseline) {
|
|
41
|
-
const { runBaseline } = await import("./baseline-
|
|
41
|
+
const { runBaseline } = await import("./baseline-45AWVXG4.js");
|
|
42
42
|
await runBaseline(rootDir);
|
|
43
43
|
}
|
|
44
44
|
console.log("");
|
package/dist/index.d.ts
CHANGED
|
@@ -43,6 +43,8 @@ interface DriftScore {
|
|
|
43
43
|
dependencyScore: number;
|
|
44
44
|
eolScore: number;
|
|
45
45
|
};
|
|
46
|
+
/** Which components had sufficient data to score. Missing = no data available. */
|
|
47
|
+
measured?: ('runtime' | 'framework' | 'dependency' | 'eol')[];
|
|
46
48
|
}
|
|
47
49
|
interface Finding {
|
|
48
50
|
ruleId: string;
|
|
@@ -69,6 +71,7 @@ interface ScanArtifact {
|
|
|
69
71
|
findings: Finding[];
|
|
70
72
|
baseline?: string;
|
|
71
73
|
delta?: number;
|
|
74
|
+
extended?: ExtendedScanResults;
|
|
72
75
|
}
|
|
73
76
|
interface ScanOptions {
|
|
74
77
|
out?: string;
|
|
@@ -109,6 +112,137 @@ interface VibgrateConfig {
|
|
|
109
112
|
};
|
|
110
113
|
};
|
|
111
114
|
}
|
|
115
|
+
interface PlatformMatrixResult {
|
|
116
|
+
nodeEngines?: string;
|
|
117
|
+
npmEngines?: string;
|
|
118
|
+
pnpmEngines?: string;
|
|
119
|
+
dotnetTargetFrameworks: string[];
|
|
120
|
+
nativeModules: string[];
|
|
121
|
+
osAssumptions: string[];
|
|
122
|
+
dockerBaseImages: string[];
|
|
123
|
+
nodeVersionFiles: string[];
|
|
124
|
+
}
|
|
125
|
+
interface DependencyRiskResult {
|
|
126
|
+
deprecatedPackages: string[];
|
|
127
|
+
nativeModulePackages: string[];
|
|
128
|
+
totalDependencies: number;
|
|
129
|
+
}
|
|
130
|
+
interface DuplicatedPackage {
|
|
131
|
+
name: string;
|
|
132
|
+
versions: string[];
|
|
133
|
+
consumers: number;
|
|
134
|
+
}
|
|
135
|
+
interface PhantomDependency {
|
|
136
|
+
package: string;
|
|
137
|
+
spec: string;
|
|
138
|
+
sourcePath: string;
|
|
139
|
+
}
|
|
140
|
+
interface DependencyGraphResult {
|
|
141
|
+
lockfileType: string | null;
|
|
142
|
+
totalUnique: number;
|
|
143
|
+
totalInstalled: number;
|
|
144
|
+
duplicatedPackages: DuplicatedPackage[];
|
|
145
|
+
phantomDependencies: string[];
|
|
146
|
+
phantomDependencyDetails?: PhantomDependency[];
|
|
147
|
+
}
|
|
148
|
+
interface InventoryItem {
|
|
149
|
+
name: string;
|
|
150
|
+
package: string;
|
|
151
|
+
version: string | null;
|
|
152
|
+
}
|
|
153
|
+
interface ToolingInventoryResult {
|
|
154
|
+
frontend: InventoryItem[];
|
|
155
|
+
metaFrameworks: InventoryItem[];
|
|
156
|
+
bundlers: InventoryItem[];
|
|
157
|
+
css: InventoryItem[];
|
|
158
|
+
backend: InventoryItem[];
|
|
159
|
+
orm: InventoryItem[];
|
|
160
|
+
testing: InventoryItem[];
|
|
161
|
+
lintFormat: InventoryItem[];
|
|
162
|
+
apiMessaging: InventoryItem[];
|
|
163
|
+
observability: InventoryItem[];
|
|
164
|
+
}
|
|
165
|
+
interface BuildDeployResult {
|
|
166
|
+
ci: string[];
|
|
167
|
+
ciWorkflowCount: number;
|
|
168
|
+
docker: {
|
|
169
|
+
dockerfileCount: number;
|
|
170
|
+
baseImages: string[];
|
|
171
|
+
};
|
|
172
|
+
iac: string[];
|
|
173
|
+
releaseTooling: string[];
|
|
174
|
+
packageManagers: string[];
|
|
175
|
+
monorepoTools: string[];
|
|
176
|
+
}
|
|
177
|
+
interface TsModernityResult {
|
|
178
|
+
typescriptVersion: string | null;
|
|
179
|
+
strict: boolean | null;
|
|
180
|
+
noImplicitAny: boolean | null;
|
|
181
|
+
strictNullChecks: boolean | null;
|
|
182
|
+
module: string | null;
|
|
183
|
+
moduleResolution: string | null;
|
|
184
|
+
target: string | null;
|
|
185
|
+
moduleType: 'esm' | 'cjs' | 'mixed' | null;
|
|
186
|
+
exportsField: boolean;
|
|
187
|
+
}
|
|
188
|
+
interface BreakingChangeExposureResult {
|
|
189
|
+
deprecatedPackages: string[];
|
|
190
|
+
legacyPolyfills: string[];
|
|
191
|
+
peerConflictsDetected: boolean;
|
|
192
|
+
exposureScore: number;
|
|
193
|
+
}
|
|
194
|
+
interface FileHotspot {
|
|
195
|
+
path: string;
|
|
196
|
+
bytes: number;
|
|
197
|
+
}
|
|
198
|
+
interface PackageCentrality {
|
|
199
|
+
name: string;
|
|
200
|
+
referencedInProjects: number;
|
|
201
|
+
}
|
|
202
|
+
interface FileHotspotsResult {
|
|
203
|
+
fileCountByExtension: Record<string, number>;
|
|
204
|
+
largestFiles: FileHotspot[];
|
|
205
|
+
totalFiles: number;
|
|
206
|
+
maxDirectoryDepth: number;
|
|
207
|
+
mostUsedPackages: PackageCentrality[];
|
|
208
|
+
}
|
|
209
|
+
interface SecurityPostureResult {
|
|
210
|
+
lockfilePresent: boolean;
|
|
211
|
+
multipleLockfileTypes: boolean;
|
|
212
|
+
gitignoreCoversEnv: boolean;
|
|
213
|
+
gitignoreCoversNodeModules: boolean;
|
|
214
|
+
envFilesTracked: boolean;
|
|
215
|
+
lockfileTypes: string[];
|
|
216
|
+
}
|
|
217
|
+
interface ServiceDependencyItem {
|
|
218
|
+
name: string;
|
|
219
|
+
package: string;
|
|
220
|
+
version: string | null;
|
|
221
|
+
}
|
|
222
|
+
interface ServiceDependenciesResult {
|
|
223
|
+
payment: ServiceDependencyItem[];
|
|
224
|
+
auth: ServiceDependencyItem[];
|
|
225
|
+
email: ServiceDependencyItem[];
|
|
226
|
+
cloud: ServiceDependencyItem[];
|
|
227
|
+
databases: ServiceDependencyItem[];
|
|
228
|
+
messaging: ServiceDependencyItem[];
|
|
229
|
+
observability: ServiceDependencyItem[];
|
|
230
|
+
crm: ServiceDependencyItem[];
|
|
231
|
+
storage: ServiceDependencyItem[];
|
|
232
|
+
search: ServiceDependencyItem[];
|
|
233
|
+
}
|
|
234
|
+
interface ExtendedScanResults {
|
|
235
|
+
platformMatrix?: PlatformMatrixResult;
|
|
236
|
+
dependencyRisk?: DependencyRiskResult;
|
|
237
|
+
dependencyGraph?: DependencyGraphResult;
|
|
238
|
+
toolingInventory?: ToolingInventoryResult;
|
|
239
|
+
buildDeploy?: BuildDeployResult;
|
|
240
|
+
tsModernity?: TsModernityResult;
|
|
241
|
+
breakingChangeExposure?: BreakingChangeExposureResult;
|
|
242
|
+
fileHotspots?: FileHotspotsResult;
|
|
243
|
+
securityPosture?: SecurityPostureResult;
|
|
244
|
+
serviceDependencies?: ServiceDependenciesResult;
|
|
245
|
+
}
|
|
112
246
|
|
|
113
247
|
declare function runScan(rootDir: string, opts: ScanOptions): Promise<ScanArtifact>;
|
|
114
248
|
|
package/dist/index.js
CHANGED