@vibgrate/cli 2026.728.5 → 2026.729.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (47) hide show
  1. package/dist/baseline-UOTGTJYT.js +9 -0
  2. package/dist/{baseline-Y5FBYWNJ.js.map → baseline-UOTGTJYT.js.map} +1 -1
  3. package/dist/{chunk-VBVY733D.js → chunk-67YG3R5F.js} +3 -3
  4. package/dist/{chunk-VBVY733D.js.map → chunk-67YG3R5F.js.map} +1 -1
  5. package/dist/{chunk-EVWW3BPM.js → chunk-74ZMAOVF.js} +3 -3
  6. package/dist/{chunk-EVWW3BPM.js.map → chunk-74ZMAOVF.js.map} +1 -1
  7. package/dist/{chunk-RCP2KQGG.js → chunk-CYC3ZI32.js} +5 -5
  8. package/dist/{chunk-RCP2KQGG.js.map → chunk-CYC3ZI32.js.map} +1 -1
  9. package/dist/{chunk-SGI5ZP2Y.js → chunk-F6ZPUKED.js} +3 -3
  10. package/dist/{chunk-SGI5ZP2Y.js.map → chunk-F6ZPUKED.js.map} +1 -1
  11. package/dist/{chunk-4JD63RUR.js → chunk-HDQG3QYV.js} +8 -7
  12. package/dist/chunk-HDQG3QYV.js.map +1 -0
  13. package/dist/{chunk-RYNAK4LK.js → chunk-P3QIO4ZU.js} +178 -39
  14. package/dist/chunk-P3QIO4ZU.js.map +1 -0
  15. package/dist/{chunk-NH5NJ3UO.js → chunk-PXXVLX7K.js} +7 -7
  16. package/dist/chunk-PXXVLX7K.js.map +1 -0
  17. package/dist/{chunk-643KXZ54.js → chunk-QDZ47G45.js} +6 -5
  18. package/dist/chunk-QDZ47G45.js.map +1 -0
  19. package/dist/{chunk-DBOT2ELH.js → chunk-VZRQUI54.js} +3 -3
  20. package/dist/{chunk-DBOT2ELH.js.map → chunk-VZRQUI54.js.map} +1 -1
  21. package/dist/chunk-WQE4OIZS.js +6 -0
  22. package/dist/chunk-WQE4OIZS.js.map +1 -0
  23. package/dist/cli.js +166 -144
  24. package/dist/cli.js.map +1 -1
  25. package/dist/index.d.ts +1 -1
  26. package/dist/index.js +6 -5
  27. package/dist/index.js.map +1 -1
  28. package/dist/{interactive-KVDKRKNK.js → interactive-HLGJJFLI.js} +11 -10
  29. package/dist/interactive-HLGJJFLI.js.map +1 -0
  30. package/dist/load-4MLIHGXF.js +9 -0
  31. package/dist/{load-SEFJA3M5.js.map → load-4MLIHGXF.js.map} +1 -1
  32. package/dist/{runtime-session-4IACVDSY.js → runtime-session-5M6QZZOS.js} +6 -5
  33. package/dist/{runtime-session-4IACVDSY.js.map → runtime-session-5M6QZZOS.js.map} +1 -1
  34. package/dist/{vg-mcp-bridge-B35WCSAS.js → vg-mcp-bridge-ZCKBYQ2D.js} +5 -4
  35. package/dist/vg-mcp-bridge-ZCKBYQ2D.js.map +1 -0
  36. package/dist/{vgd-KDQFS33M.js → vgd-TGGEAGQZ.js} +5 -4
  37. package/dist/vgd-TGGEAGQZ.js.map +1 -0
  38. package/package.json +2 -1
  39. package/dist/baseline-Y5FBYWNJ.js +0 -8
  40. package/dist/chunk-4JD63RUR.js.map +0 -1
  41. package/dist/chunk-643KXZ54.js.map +0 -1
  42. package/dist/chunk-NH5NJ3UO.js.map +0 -1
  43. package/dist/chunk-RYNAK4LK.js.map +0 -1
  44. package/dist/interactive-KVDKRKNK.js.map +0 -1
  45. package/dist/load-SEFJA3M5.js +0 -8
  46. package/dist/vg-mcp-bridge-B35WCSAS.js.map +0 -1
  47. package/dist/vgd-KDQFS33M.js.map +0 -1
@@ -18,8 +18,6 @@ import { mkdirSync, writeFileSync } from 'fs';
18
18
  import * as zlib from 'zlib';
19
19
  import { promisify } from 'util';
20
20
 
21
- // src/version.ts
22
- var VERSION = "2026.728.5";
23
21
  var TOP_LEVEL_NODE_MODULES = /^node_modules\/((?:@[^/]+\/)?[^/]+)$/;
24
22
  function parsePackageLock(json) {
25
23
  const out = /* @__PURE__ */ new Map();
@@ -1416,9 +1414,11 @@ async function scanOnePackageJson(packageJsonPath, rootDir, npmCache, cache, cat
1416
1414
  });
1417
1415
  const resolved = await Promise.all(metaPromises);
1418
1416
  for (const { pkg, section, spec, meta } of resolved) {
1417
+ const latestSatisfying = meta.stableVersions.length > 0 ? semver26.maxSatisfying(meta.stableVersions, spec) ?? null : null;
1419
1418
  const lockedVersion = lockIndex?.resolve(pkg, spec) ?? null;
1420
- const registryResolved = meta.stableVersions.length > 0 ? semver26.maxSatisfying(meta.stableVersions, spec) ?? null : null;
1421
- const resolvedVersion = lockedVersion && semver26.valid(lockedVersion) ? lockedVersion : registryResolved;
1419
+ const range = semver26.validRange(spec);
1420
+ const lockUsable = !!lockedVersion && !!semver26.valid(lockedVersion) && (!range || semver26.satisfies(lockedVersion, range, { includePrerelease: true }));
1421
+ const resolvedVersion = lockUsable ? lockedVersion : latestSatisfying;
1422
1422
  const latestStable2 = meta.latestStableOverall;
1423
1423
  let majorsBehind = null;
1424
1424
  let drift = "unknown";
@@ -1453,6 +1453,7 @@ async function scanOnePackageJson(packageJsonPath, rootDir, npmCache, cache, cat
1453
1453
  currentSpec: spec,
1454
1454
  resolvedVersion,
1455
1455
  latestStable: latestStable2,
1456
+ latestSatisfying,
1456
1457
  majorsBehind,
1457
1458
  drift,
1458
1459
  license: buildDependencyLicense(meta.license, "registry"),
@@ -11670,6 +11671,6 @@ async function computeTreeMetadataHash(rootDir, options) {
11670
11671
  return digest.digest("hex");
11671
11672
  }
11672
11673
 
11673
- export { PROJECT_TYPE_TO_OSV_ECOSYSTEM, VERSION, brandProgressBar, buildVersionTimelines, compactUiPurpose, computeDriftScore, computeRepoFingerprint, computeUpgradeImpact, detectVcs, driftBar, fetchRiskySymbols, fetchScanPreflight, findPackageAnyEcosystem, findPackageTimeline, findVersionCrossings, getChangelogSignals, gitHistoryAvailable, loadConfig, normalizeConstraint, parseDsn, prepareCompressedUpload, projectTypeToVulnEcosystem, resolveHead, resolveRepositoryName, runCoreScan, severityRank, titleBox, versionSatisfies, workingTreeDirty, writeDefaultConfig };
11674
- //# sourceMappingURL=chunk-4JD63RUR.js.map
11675
- //# sourceMappingURL=chunk-4JD63RUR.js.map
11674
+ export { PROJECT_TYPE_TO_OSV_ECOSYSTEM, brandProgressBar, buildVersionTimelines, compactUiPurpose, computeDriftScore, computeRepoFingerprint, computeUpgradeImpact, detectVcs, driftBar, fetchRiskySymbols, fetchScanPreflight, findPackageAnyEcosystem, findPackageTimeline, findVersionCrossings, getChangelogSignals, gitHistoryAvailable, loadConfig, normalizeConstraint, parseDsn, prepareCompressedUpload, projectTypeToVulnEcosystem, resolveHead, resolveRepositoryName, runCoreScan, severityRank, titleBox, versionSatisfies, workingTreeDirty, writeDefaultConfig };
11675
+ //# sourceMappingURL=chunk-HDQG3QYV.js.map
11676
+ //# sourceMappingURL=chunk-HDQG3QYV.js.map