@visulima/vis 1.0.0-alpha.22 → 1.0.0-alpha.24
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +77 -0
- package/LICENSE.md +135 -2
- package/README.md +1 -1
- package/dashboard/dist/index.html +152 -0
- package/dist/bin.js +1 -1
- package/dist/binx.js +3 -0
- package/dist/config/index.d.ts +28 -41
- package/dist/config/index.js +1 -1
- package/dist/packem_chunks/bin.js +373 -367
- package/dist/packem_chunks/bloom-status.js +2 -2
- package/dist/packem_chunks/bloom-sync.js +2 -2
- package/dist/packem_chunks/config.js +12 -12
- package/dist/packem_chunks/doctor-probe.js +2 -2
- package/dist/packem_chunks/fix.js +3 -3
- package/dist/packem_chunks/handler.js +1 -1
- package/dist/packem_chunks/handler10.js +1 -1
- package/dist/packem_chunks/handler11.js +1 -1
- package/dist/packem_chunks/handler12.js +3 -3
- package/dist/packem_chunks/handler13.js +1 -1
- package/dist/packem_chunks/handler14.js +10 -10
- package/dist/packem_chunks/handler15.js +2 -2
- package/dist/packem_chunks/handler16.js +1 -1
- package/dist/packem_chunks/handler17.js +1 -1
- package/dist/packem_chunks/handler18.js +1 -1
- package/dist/packem_chunks/handler19.js +1 -1
- package/dist/packem_chunks/handler2.js +1 -1
- package/dist/packem_chunks/handler20.js +1 -1
- package/dist/packem_chunks/handler21.js +2 -2
- package/dist/packem_chunks/handler22.js +2 -2
- package/dist/packem_chunks/handler23.js +2 -2
- package/dist/packem_chunks/handler24.js +1 -18
- package/dist/packem_chunks/handler25.js +1 -1
- package/dist/packem_chunks/handler26.js +5 -1
- package/dist/packem_chunks/handler27.js +1 -5
- package/dist/packem_chunks/handler28.js +3 -1
- package/dist/packem_chunks/handler29.js +1 -3
- package/dist/packem_chunks/handler3.js +1 -1
- package/dist/packem_chunks/handler30.js +7 -1
- package/dist/packem_chunks/handler31.js +32 -6
- package/dist/packem_chunks/handler32.js +3 -33
- package/dist/packem_chunks/handler33.js +1 -3
- package/dist/packem_chunks/handler34.js +28 -1
- package/dist/packem_chunks/handler35.js +5 -26
- package/dist/packem_chunks/handler36.js +22 -5
- package/dist/packem_chunks/handler37.js +60 -21
- package/dist/packem_chunks/handler38.js +6 -428
- package/dist/packem_chunks/handler39.js +708 -61
- package/dist/packem_chunks/handler4.js +1 -1
- package/dist/packem_chunks/handler40.js +24 -6
- package/dist/packem_chunks/handler41.js +237 -166
- package/dist/packem_chunks/handler42.js +153 -24
- package/dist/packem_chunks/handler43.js +10 -153
- package/dist/packem_chunks/handler44.js +25 -10
- package/dist/packem_chunks/handler45.js +24 -25
- package/dist/packem_chunks/handler46.js +3 -24
- package/dist/packem_chunks/handler47.js +27 -3
- package/dist/packem_chunks/handler48.js +173 -21
- package/dist/packem_chunks/handler49.js +33 -173
- package/dist/packem_chunks/handler5.js +6 -6
- package/dist/packem_chunks/handler6.js +1 -1
- package/dist/packem_chunks/handler7.js +1 -1
- package/dist/packem_chunks/handler8.js +1 -1
- package/dist/packem_chunks/handler9.js +1 -1
- package/dist/packem_chunks/heal-accept.js +4 -4
- package/dist/packem_chunks/heal.js +1 -1
- package/dist/packem_chunks/help-command.js +2 -2
- package/dist/packem_chunks/index.js +2 -2
- package/dist/packem_chunks/keys-refresh.js +1 -1
- package/dist/packem_chunks/list.js +2 -2
- package/dist/packem_chunks/loader.js +3 -3
- package/dist/packem_chunks/loader2.js +1 -1
- package/dist/packem_chunks/prune.js +1 -1
- package/dist/packem_chunks/run.js +1 -1
- package/dist/packem_chunks/status.js +2 -2
- package/dist/packem_chunks/sync.js +2 -2
- package/dist/packem_chunks/sync2.js +2 -2
- package/dist/packem_chunks/tripwire.js +2 -2
- package/dist/packem_chunks/verify-lockfile.js +2 -2
- package/dist/packem_shared/{advisories-DS8JEB_g.js → advisories-U1QKY_tg.js} +1 -1
- package/dist/packem_shared/{ai-analysis-DGBZYlxF.js → ai-analysis-B8pDCOuT.js} +2 -2
- package/dist/packem_shared/ai-fix-DiGSrGKv.js +43 -0
- package/dist/packem_shared/anolilab-text-CAM_E6uK.js +13 -0
- package/dist/packem_shared/applyDefaults-KxZkvlp3.js +1 -0
- package/dist/packem_shared/build-scripts-3E2pmscY.js +1 -0
- package/dist/packem_shared/{cyclonedx-CO7-Y1B1.js → cyclonedx-DPEW0nwS.js} +3 -3
- package/dist/packem_shared/dependency-scan-BbtivycX.js +1 -0
- package/dist/packem_shared/docker-_pBC9Loj.js +60 -0
- package/dist/packem_shared/failure-log-B0Uh-65U.js +2 -0
- package/dist/packem_shared/index-B8Ko8mwG.js +29 -0
- package/dist/packem_shared/index-D_tAc2nS.js +1 -0
- package/dist/packem_shared/index.server-B7ETiT4C.js +2 -0
- package/dist/packem_shared/lifecycle-DJDsjoic.js +2 -0
- package/dist/packem_shared/{lockfile-C5DYMHVq.js → lockfile-CQLFNyVa.js} +1 -1
- package/dist/packem_shared/manifests-Z3spBpxv.js +1 -0
- package/dist/packem_shared/{min-release-age-D462DvYM.js → min-release-age-Cz6HbF-I.js} +2 -2
- package/dist/packem_shared/native-config-sync-BOeuyrBj.js +21 -0
- package/dist/packem_shared/{osv-bloom-QSAn2Dcw.js → osv-bloom-CyCDpXBl.js} +2 -2
- package/dist/packem_shared/peer-warnings-EvSJ18gE.js +1 -0
- package/dist/packem_shared/pm-runner-Dnj9J3KF.js +1 -0
- package/dist/packem_shared/provenance-yESbF7Vs.js +1 -0
- package/dist/packem_shared/readFileSync-CGmzMUF2-D6rUjGDn.js +1 -0
- package/dist/packem_shared/registry-keys-pemEkRM9.js +1 -0
- package/dist/packem_shared/{resolve-explicit-BgFQHUEP.js → resolve-explicit-BpxcFRuk.js} +3 -3
- package/dist/packem_shared/runtime-check-DgXsKCsv.js +1 -0
- package/dist/packem_shared/s1ngularity-B_xjP4lC.js +1 -0
- package/dist/packem_shared/scan-progress-EbvmIh4i.js +2 -0
- package/dist/packem_shared/{selectors-B2ISH581.js → selectors-BE2BCnTR.js} +1 -1
- package/dist/packem_shared/{signatures-b-jJYoZd.js → signatures-DBwSnMBB.js} +1 -1
- package/dist/packem_shared/toolchain-Jx2lkAYy.js +5 -0
- package/dist/packem_shared/typosquats-Citu7BRY.js +1 -0
- package/dist/packem_shared/verify-C8EAHql6.js +1 -0
- package/dist/packem_shared/{vis-update-app-Bnu1EIgE.js → vis-update-app-BWA1kA1q.js} +1 -1
- package/index.js +52 -52
- package/package.json +23 -12
- package/schemas/vis-config.schema.json +61 -12
- package/dist/packem_chunks/handler50.js +0 -34
- package/dist/packem_shared/ai-cache-BjlXWJtl.js +0 -1
- package/dist/packem_shared/ai-fix-BhcTrkuW.js +0 -43
- package/dist/packem_shared/applyDefaults-BOVDw1jD.js +0 -1
- package/dist/packem_shared/build-scripts-DsWMSWDs.js +0 -1
- package/dist/packem_shared/cache-directory-DQak1Vjc.js +0 -1
- package/dist/packem_shared/dependency-scan-DPHTzA5r.js +0 -1
- package/dist/packem_shared/docker-lk0-5Z-i.js +0 -60
- package/dist/packem_shared/failure-log-DF7nrFIs.js +0 -2
- package/dist/packem_shared/flakiness-DKCOYwN7.js +0 -1
- package/dist/packem_shared/index-B4gpNmrG.js +0 -1
- package/dist/packem_shared/lifecycle-boYwVQSE.js +0 -2
- package/dist/packem_shared/manifests-B0fMp872.js +0 -1
- package/dist/packem_shared/native-config-sync-B0_ef78M.js +0 -21
- package/dist/packem_shared/provenance-smHa8efI.js +0 -1
- package/dist/packem_shared/registry-keys-3qaVog76.js +0 -1
- package/dist/packem_shared/run-summary-utils-DIJV_dUD.js +0 -1
- package/dist/packem_shared/runtime-check-DrMx4Q9L.js +0 -1
- package/dist/packem_shared/s1ngularity-CwSBPB3I.js +0 -1
- package/dist/packem_shared/scan-progress-CMynp3eA.js +0 -2
- package/dist/packem_shared/toolchain-OH1PXwbZ.js +0 -5
- package/dist/packem_shared/typosquats-CJ4o1l7U.js +0 -1
- package/dist/packem_shared/verify-CQbzknur.js +0 -1
- package/dist/packem_shared/xxh3-DrAUNq4n.js +0 -1
package/dist/bin.js
CHANGED
|
@@ -1,2 +1,2 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
import"./packem_chunks/bin.js";import"./packem_chunks/config.js";
|
|
2
|
+
import"./packem_shared/index-B8Ko8mwG.js";import"./packem_chunks/bin.js";import"./packem_chunks/config.js";import"./packem_shared/readFileSync-CGmzMUF2-D6rUjGDn.js";
|
package/dist/binx.js
ADDED
|
@@ -0,0 +1,3 @@
|
|
|
1
|
+
#!/usr/bin/env node
|
|
2
|
+
import{N as r,m as o,i as c,T as i,w as a,a as n}from"./packem_shared/index-B8Ko8mwG.js";r();process.argv.includes("--no-color")&&(process.env.NO_COLOR="1",process.env.FORCE_COLOR="0");process.argv.slice(2).some(s=>s==="--version"||s==="-v"||s==="-V")&&(process.stdout.write(`${o.version}
|
|
3
|
+
`),process.exit(0));process.argv.splice(2,0,"dlx");c();const e=i("visx",{packageName:"visx",packageVersion:o.version}),p=process.argv.includes("--debug")||!!process.env.DEBUG;e.addPlugin(a({detailed:p,exitOnError:!1}));e.addCommand(n);(async()=>{try{await e.run({shouldExitProcess:!1})}catch{process.exitCode=process.exitCode||1}finally{process.exit(process.exitCode??0)}})();
|
package/dist/config/index.d.ts
CHANGED
|
@@ -1659,14 +1659,6 @@ interface VisConfig {
|
|
|
1659
1659
|
*/
|
|
1660
1660
|
blockExoticSubdeps?: boolean;
|
|
1661
1661
|
/**
|
|
1662
|
-
* Package names exempted from the `blockExoticSubdeps` check.
|
|
1663
|
-
* Bare names and a trailing `*` glob (`@scope/*`) are supported.
|
|
1664
|
-
* Use for an internal package legitimately published as a git or
|
|
1665
|
-
* tarball dependency.
|
|
1666
|
-
* @example ["@myorg/legacy", "internal-*"]
|
|
1667
|
-
*/
|
|
1668
|
-
exoticSubdepsAllow?: string[];
|
|
1669
|
-
/**
|
|
1670
1662
|
* deps.dev (Google Open Source Insights) data-source configuration.
|
|
1671
1663
|
* Public, unauthenticated; pulls Scorecard data + advisories from
|
|
1672
1664
|
* `api.deps.dev`. Complements or replaces Socket.dev. Heavily cached.
|
|
@@ -1674,8 +1666,8 @@ interface VisConfig {
|
|
|
1674
1666
|
*/
|
|
1675
1667
|
depsDev?: {
|
|
1676
1668
|
/**
|
|
1677
|
-
* Cache TTL for advisory entries (immutable once published).
|
|
1678
|
-
* @default
|
|
1669
|
+
* Cache TTL for advisory entries (immutable once published). 7 days.
|
|
1670
|
+
* @default 604800000
|
|
1679
1671
|
*/
|
|
1680
1672
|
advisoryCacheTtlMs?: number;
|
|
1681
1673
|
/**
|
|
@@ -1684,22 +1676,30 @@ interface VisConfig {
|
|
|
1684
1676
|
*/
|
|
1685
1677
|
enabled?: boolean;
|
|
1686
1678
|
/**
|
|
1687
|
-
* Cache TTL for OpenSSF Scorecard project data (refreshes weekly).
|
|
1688
|
-
* @default
|
|
1679
|
+
* Cache TTL for OpenSSF Scorecard project data (refreshes weekly). 24 hours.
|
|
1680
|
+
* @default 86400000
|
|
1689
1681
|
*/
|
|
1690
1682
|
projectCacheTtlMs?: number;
|
|
1691
1683
|
/**
|
|
1692
1684
|
* Request timeout in milliseconds.
|
|
1693
|
-
* @default
|
|
1685
|
+
* @default 15000
|
|
1694
1686
|
*/
|
|
1695
1687
|
timeoutMs?: number;
|
|
1696
1688
|
/**
|
|
1697
|
-
* Cache TTL for npm version metadata (immutable).
|
|
1698
|
-
* @default
|
|
1689
|
+
* Cache TTL for npm version metadata (immutable). 7 days.
|
|
1690
|
+
* @default 604800000
|
|
1699
1691
|
*/
|
|
1700
1692
|
versionCacheTtlMs?: number;
|
|
1701
1693
|
};
|
|
1702
1694
|
/**
|
|
1695
|
+
* Package names exempted from the `blockExoticSubdeps` check.
|
|
1696
|
+
* Bare names and a trailing `*` glob (`@scope/*`) are supported.
|
|
1697
|
+
* Use for an internal package legitimately published as a git or
|
|
1698
|
+
* tarball dependency.
|
|
1699
|
+
* @example ["@myorg/legacy", "internal-*"]
|
|
1700
|
+
*/
|
|
1701
|
+
exoticSubdepsAllow?: string[];
|
|
1702
|
+
/**
|
|
1703
1703
|
* Pre-install marshall pipeline — packument-derived supply-chain
|
|
1704
1704
|
* gates (author, provenance, s1ngularity, new-bin, metadata,
|
|
1705
1705
|
* downloads, expired-domains, signatures, archived-repo) that run before
|
|
@@ -2038,8 +2038,8 @@ interface VisConfig {
|
|
|
2038
2038
|
*/
|
|
2039
2039
|
apiVersion?: string;
|
|
2040
2040
|
/**
|
|
2041
|
-
* Cache TTL in milliseconds for Snyk issue lookups.
|
|
2042
|
-
* @default
|
|
2041
|
+
* Cache TTL in milliseconds for Snyk issue lookups. 6 hours.
|
|
2042
|
+
* @default 21600000
|
|
2043
2043
|
*/
|
|
2044
2044
|
cacheTtlMs?: number;
|
|
2045
2045
|
/**
|
|
@@ -2054,8 +2054,8 @@ interface VisConfig {
|
|
|
2054
2054
|
*/
|
|
2055
2055
|
orgId?: string;
|
|
2056
2056
|
/**
|
|
2057
|
-
* Request timeout in milliseconds for the Snyk API.
|
|
2058
|
-
* @default
|
|
2057
|
+
* Request timeout in milliseconds for the Snyk API. 15 seconds.
|
|
2058
|
+
* @default 15000
|
|
2059
2059
|
*/
|
|
2060
2060
|
timeoutMs?: number;
|
|
2061
2061
|
};
|
|
@@ -2072,8 +2072,8 @@ interface VisConfig {
|
|
|
2072
2072
|
*/
|
|
2073
2073
|
apiToken?: string;
|
|
2074
2074
|
/**
|
|
2075
|
-
* Cache TTL in milliseconds for Socket.dev reports.
|
|
2076
|
-
* @default
|
|
2075
|
+
* Cache TTL in milliseconds for Socket.dev reports. 1 hour.
|
|
2076
|
+
* @default 3600000
|
|
2077
2077
|
*/
|
|
2078
2078
|
cacheTtlMs?: number;
|
|
2079
2079
|
/**
|
|
@@ -2082,8 +2082,8 @@ interface VisConfig {
|
|
|
2082
2082
|
*/
|
|
2083
2083
|
enabled?: boolean;
|
|
2084
2084
|
/**
|
|
2085
|
-
* Request timeout in milliseconds for the Socket.dev API.
|
|
2086
|
-
* @default
|
|
2085
|
+
* Request timeout in milliseconds for the Socket.dev API. 15 seconds.
|
|
2086
|
+
* @default 15000
|
|
2087
2087
|
*/
|
|
2088
2088
|
timeoutMs?: number;
|
|
2089
2089
|
};
|
|
@@ -2946,10 +2946,12 @@ declare const loadVisTaskConfig: (workspaceRoot: string, projectDirectory: strin
|
|
|
2946
2946
|
declare const defineTaskConfig: (config: VisTaskConfig) => VisTaskConfig;
|
|
2947
2947
|
/**
|
|
2948
2948
|
* Type-safe helper for defining vis configuration.
|
|
2949
|
-
* Provides full TypeScript autocomplete when used in `vis.config.ts`.
|
|
2950
2949
|
*
|
|
2951
|
-
*
|
|
2952
|
-
*
|
|
2950
|
+
* Pure typed-identity — returns its argument unchanged. The point is purely
|
|
2951
|
+
* editor autocomplete and structural type-checking on the literal you pass
|
|
2952
|
+
* in. Secure defaults are applied by `loadVisConfig` at load time, not here,
|
|
2953
|
+
* so wrapping vs. using `satisfies VisConfig` produces the exact same
|
|
2954
|
+
* runtime behavior. To see the active defaults, run `vis check --security-config`.
|
|
2953
2955
|
* @example
|
|
2954
2956
|
* ```typescript
|
|
2955
2957
|
* // vis.config.ts — minimal config, fully secured by defaults
|
|
@@ -2968,21 +2970,6 @@ declare const defineTaskConfig: (config: VisTaskConfig) => VisTaskConfig;
|
|
|
2968
2970
|
* },
|
|
2969
2971
|
* });
|
|
2970
2972
|
* ```
|
|
2971
|
-
* @example
|
|
2972
|
-
* ```typescript
|
|
2973
|
-
* // vis.config.ts — override a default
|
|
2974
|
-
* import { defineConfig } from "@visulima/vis/config";
|
|
2975
|
-
*
|
|
2976
|
-
* export default defineConfig({
|
|
2977
|
-
* security: {
|
|
2978
|
-
* policies: {
|
|
2979
|
-
* // Relax cooldown to 24 hours instead of the default 14 days
|
|
2980
|
-
* firstSeen: { minutes: 1440 },
|
|
2981
|
-
* installScripts: { allow: { esbuild: true } },
|
|
2982
|
-
* },
|
|
2983
|
-
* },
|
|
2984
|
-
* });
|
|
2985
|
-
* ```
|
|
2986
2973
|
*/
|
|
2987
2974
|
declare const defineConfig: (config: VisConfig) => VisConfig;
|
|
2988
2975
|
export { CONFIG_FILES, type OtelPluginOptions, SECURITY_DEFAULTS, TASK_CONFIG_FILES, type VisConfig, type VisHooks, type VisPlugin, type VisTaskConfig, applyDefaults, defineConfig, definePlugin, defineTaskConfig, findVisConfigFile, findVisTaskConfigFile, loadVisConfig, loadVisTaskConfig, otelPlugin };
|
package/dist/config/index.js
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
import{h as s,l as f,V as o,
|
|
1
|
+
import{h as s,l as f,V as o,m as e,c as n,a as l,j as C,G as g,e as d,r}from"../packem_chunks/config.js";import{definePlugin as T}from"../packem_shared/definePlugin-CWm4Dv_t.js";import{otelPlugin as t}from"../packem_shared/otelPlugin-CJR2T_lk.js";export{s as CONFIG_FILES,f as SECURITY_DEFAULTS,o as TASK_CONFIG_FILES,e as applyDefaults,n as defineConfig,T as definePlugin,l as defineTaskConfig,C as findVisConfigFile,g as findVisTaskConfigFile,d as loadVisConfig,r as loadVisTaskConfig,t as otelPlugin};
|