@visulima/vis 4.2.0 → 4.3.0

package/dist/packem_chunks/handler73.js

@@ -1,4 +1,4 @@
-import{createRequire as Tt}from"node:module";import{X as ye,F as T,b as be,q as ft,T as ut}from"../packem_shared/index.server-sXNQYpsl.js";import{e as F,U as Mt}from"../packem_shared/path-CxEa27Rz-pjheKk6v.js";import{i as je}from"../packem_shared/index-BjdW45xX.js";import{whichBin as Vt}from"#native";import{b as Ut,a as Wt,e as zt}from"../packem_shared/ai-analysis-DSQQDFU9.js";import{a3 as Bt,u as Ht,s as Gt,t as Kt,p as u,c as Qe}from"./cli-main.js";import{z as xe,l as Ve}from"../packem_shared/index-CVBR-Kit.js";import{y as X}from"../packem_shared/isAccessibleSync-DYKTrrvc-K2xhg6sV.js";import{U as et}from"../packem_shared/writeFileSync-DJoHk3Ks-O9zOKqeM.js";import{L as qt,i as Yt,j as Jt,G as Xt,c as Zt,a as Qt,h as en,d as tn,b as nn}from"./catalog.js";import{d as an,c as rn}from"../packem_shared/pm-runner-9L6ocnu2.js";import{s as _}from"../packem_shared/index-B4AjSxHU.js";import{c as gt,s as ve,g as on,p as sn,e as cn}from"../packem_shared/index-onibYJkv.js";import{d as ln}from"../packem_shared/anolilab-text-CAM_E6uK.js";import{t as pn,b as dn}from"../packem_shared/cyclonedx-CT1rtKxV.js";import{s as gn}from"../packem_shared/scan-progress-BGB9hIrD.js";import{r as mn,A as tt,q as nt}from"../packem_shared/advisories-BSpzRIXP.js";import{p as ht}from"../packem_shared/readJsonSync-CbryXYxN-BxKjDZnF.js";import{l as hn,f as vn,a as wn}from"../packem_shared/dependency-scan-W9b2X0a1.js";import{r as yn}from"../packem_shared/manifests-D671Sb1T.js";import{l as Sn,p as An,O as En}from"../packem_shared/osv-bloom-BRacgzs7.js";import{D as Cn,f as it,e as Nn,i as On}from"../packem_shared/formatBytes-BHAzNIrn-CLYsxlUj.js";let jt;const Lt=e=>(jt??=Tt(import.meta.url))(e),te=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,Z=e=>{if(typeof te<"u"&&te.versions&&te.versions.node){const[t,n]=te.versions.node.split(".").map(Number);if(t>22||t===22&&n>=3||t===20&&n>=16)return te.getBuiltinModule(e)}return Lt(e)},{spawnSync:_t}=Z("node:child_process"),{createInterface:Dt}=Z("node:readline"),{stripVTControlCharacters:Ft}=Z("node:util"),{createHash:fn}=Z("node:crypto"),{relative:mt,join:un}=Z("node:path"),{readFileSync:vt,existsSync:bn,writeFileSync:xn,renameSync:kn,unlinkSync:$n}=Z("node:fs"),at=(e,t={})=>{Array.isArray(t.extensions)||(t.extensions=["js","mjs","cjs","ts"]);const n=[];for(const i of qt(e,t))n.push(i.path);return n},ke=e=>`${e.packageName}@${e.packageVersion}:${e.vulnerability.id}`,In=e=>e==null||e===!0||e===""||e==="true"||e.toString().toLowerCase()==="all",Rn=(e,t)=>{if(In(t))return e;const n=String(t).trim();if(/^\d+$/.test(n)){const a=Number.parseInt(n,10)-1,r=e[a];return r?[r]:[]}const i=n.toLowerCase();return e.filter(a=>{const{aliases:r,id:o}=a.vulnerability;return o.toLowerCase()===i||(r??[]).some(s=>s.toLowerCase()===i)})},Pn=e=>{const{packageName:t,packageVersion:n,vulnerability:i}=e,a=(i.aliases??[]).join(", ")||"none",r=(i.fixedVersions??[]).join(", ")||"no fixed version published";return`You are a security engineer. Explain this dependency vulnerability for a developer triaging it.
+import{createRequire as Vt}from"node:module";import{X as ke,F as P,b as $e,q as yt,T as bt}from"../packem_shared/index.server-sXNQYpsl.js";import{e as V,z as Se,U as Ht}from"../packem_shared/index-BzhrR_iC.js";import{i as _e}from"../packem_shared/index-BjdW45xX.js";import{whichBin as Bt}from"#native";import{b as Kt,a as qt,e as Yt}from"../packem_shared/ai-analysis-Cfj24UAy.js";import{a3 as Jt,u as Xt,s as Zt,t as Qt,p as g,c as it}from"./cli-main.js";import{l as ze}from"./ts-loader.js";import{y as Z}from"../packem_shared/isAccessibleSync-DYKTrrvc-C-_5cgwu.js";import{U as at}from"../packem_shared/writeFileSync-DJoHk3Ks-BPRoepNw.js";import{L as en,k as tn,l as nn,P as an,r as rn,Q as on,S as rt,i as sn,U as ot,h as cn,j as ln,N as st,d as pn,b as dn}from"./catalog.js";import{d as fn,c as gn}from"../packem_shared/pm-runner-CMSml1Bj.js";import{s as D}from"../packem_shared/index-B4AjSxHU.js";import{c as xt,s as be,g as un,p as mn,e as hn}from"../packem_shared/index-BO8qIogg.js";import{d as vn}from"../packem_shared/anolilab-text-CAM_E6uK.js";import{t as wn,b as yn,G as bn}from"../packem_shared/ecosystem-gate-1M3wnsTr.js";import{s as $n}from"../packem_shared/scan-progress-C_zaZjyY.js";import{p as $t}from"../packem_shared/readJsonSync-CbryXYxN-EWl7_7KX.js";import{r as Sn,l as An,f as Nn,a as Cn}from"../packem_shared/dependency-scan-B8jroa1D.js";import{r as En}from"../packem_shared/manifests-Du4yKlf_.js";import{c as oe,h as On,i as In,l as Rn,m as jn}from"../packem_shared/multi-eco-lockfiles-CUUxUjHK.js";import{l as Pn,p as Tn,O as Ln}from"../packem_shared/osv-bloom-BCAX5ARR.js";import{D as Fn,f as ct,e as Un,i as zn}from"../packem_shared/formatBytes-BHAzNIrn-CrusHOew.js";let Ft;const Ut=e=>(Ft??=Vt(import.meta.url))(e),ne=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,Q=e=>{if(typeof ne<"u"&&ne.versions&&ne.versions.node){const[t,n]=ne.versions.node.split(".").map(Number);if(t>22||t===22&&n>=3||t===20&&n>=16)return ne.getBuiltinModule(e)}return Ut(e)},{spawnSync:zt}=Q("node:child_process"),{createInterface:Wt}=Q("node:readline"),{stripVTControlCharacters:Gt}=Q("node:util"),{createHash:xn}=Q("node:crypto"),{relative:kt,join:kn}=Q("node:path"),{readFileSync:Dn,writeFileSync:Mn,renameSync:_n,unlinkSync:Vn}=Q("node:fs"),lt=(e,t={})=>{Array.isArray(t.extensions)||(t.extensions=["js","mjs","cjs","ts"]);const n=[];for(const i of en(e,t))n.push(i.path);return n},Ae=e=>`${e.packageName}@${e.packageVersion}:${e.vulnerability.id}`,Wn=e=>e==null||e===!0||e===""||e==="true"||e.toString().toLowerCase()==="all",Hn=(e,t)=>{if(Wn(t))return e;const n=String(t).trim();if(/^\d+$/.test(n)){const a=Number.parseInt(n,10)-1,r=e[a];return r?[r]:[]}const i=n.toLowerCase();return e.filter(a=>{const{aliases:r,id:o}=a.vulnerability;return o.toLowerCase()===i||(r??[]).some(c=>c.toLowerCase()===i)})},Bn=e=>{const{packageName:t,packageVersion:n,vulnerability:i}=e,a=(i.aliases??[]).join(", ")||"none",r=(i.fixedVersions??[]).join(", ")||"no fixed version published";return`You are a security engineer. Explain this dependency vulnerability for a developer triaging it.
 
 Package: ${t}@${n}
 Advisory: ${i.id} (aliases: ${a})
@@ -11,51 +11,51 @@ Respond ONLY with valid JSON in this exact structure, each value 1-3 plain sente
   "whatItIs": "what the vulnerability is and how it is exploited",
   "areYouAtRisk": "what usage pattern makes an app actually exposed; be honest that lockfile presence alone is not exploitation",
   "whatToDo": "the concrete remediation step"
-}`},he=e=>Ft(e).replaceAll(/[\u0000-\u0008\u000B-\u001F\u007F]/gu,"").trim(),Tn=e=>`What it is: ${e.whatItIs}
+}`},ye=e=>Gt(e).replaceAll(/[\u0000-\u0008\u000B-\u001F\u007F]/gu,"").trim(),Gn=e=>`What it is: ${e.whatItIs}
 Are you at risk: ${e.areYouAtRisk}
-What to do: ${e.whatToDo}`,jn=e=>{const t=zt(e);if(t&&typeof t=="object"){const n=t,i=typeof n.whatItIs=="string"?he(n.whatItIs):"",a=typeof n.areYouAtRisk=="string"?he(n.areYouAtRisk):"",r=typeof n.whatToDo=="string"?he(n.whatToDo):"";if(i||a||r)return Tn({areYouAtRisk:a,whatItIs:i,whatToDo:r})}return he(e)},Ln=async(e,t,n)=>{let i=0;const a=Array.from({length:Math.min(t,e.length)},async()=>{for(;i<e.length;){const r=i;i+=1;const o=e[r];o!==void 0&&await n(o)}});await Promise.all(a)},_n=3,Dn={resolveProvider:Wt,runWithRetry:Ut},Mn=async(e,t,n,i=Dn)=>{const a=new Map;if(e.length===0)return a;const r=i.resolveProvider(t);if(!r)return n?.info?.("No AI CLI provider found on PATH — skipping --explain."),a;const o=Bt("security",t?.cacheTtl);return await Ln(e,_n,async s=>{const l=ke(s),p=Ht({id:s.vulnerability.id,kind:"audit-explain",name:s.packageName,provider:r.name,version:s.packageVersion}),g=Gt(p);if(typeof g=="string"){a.set(l,g);return}try{const w=await i.runWithRetry(r,Pn(s)),h=jn(w);h&&(a.set(l,h),Kt(p,h,o))}catch(w){const h=w instanceof Error?w.message:String(w);n?.warn?.(`Explain failed for ${s.vulnerability.id} (${h}).`)}}),a},$e=e=>Array.isArray(e)?e.filter(t=>typeof t=="string"):[],Le=(e,t)=>{for(const n of t)if(n===e||n.endsWith("*")&&e.startsWith(n.slice(0,-1)))return!0;return!1},wt=e=>{const t=F(e,"pnpm-workspace.yaml");if(!X(t))return{excludedPackages:[],ignoredAdvisories:[]};try{const n=Ve(t);return{excludedPackages:[],ignoredAdvisories:[...$e(n?.auditConfig?.ignoreCves),...$e(n?.auditConfig?.ignoreGhsas)]}}catch{return{excludedPackages:[],ignoredAdvisories:[]}}},yt=e=>{const t=F(e,".yarnrc.yml");if(!X(t))return{excludedPackages:[],ignoredAdvisories:[]};try{const n=Ve(t);return{excludedPackages:$e(n?.npmAuditExcludePackages),ignoredAdvisories:$e(n?.npmAuditIgnoreAdvisories)}}catch{return{excludedPackages:[],ignoredAdvisories:[]}}},Vn=(e,t)=>{switch(t){case"pnpm":return wt(e);case"yarn":return yt(e);default:return{excludedPackages:[],ignoredAdvisories:[]}}},ae=(e,t,n)=>{if(Le(e,t.ignoredAdvisories))return!0;if(n){for(const i of n)if(Le(i,t.ignoredAdvisories))return!0}return!1},Fn=(e,t)=>Le(e,t.excludedPackages),Un=(e,t,n)=>{if(n.length===0)return["No advisory IDs to sync."];const i=[];switch(e){case"bun":{i.push(`bun has no audit config file. Use CLI flags: bun audit ${n.map(a=>`--ignore ${a}`).join(" ")}`);break}case"npm":{i.push("npm has no native audit exclusion config. vis accepted risks are the only layer.");break}case"pnpm":{const a=F(t,"pnpm-workspace.yaml");if(!X(a)){i.push("pnpm-workspace.yaml not found. Cannot sync.");break}const r=wt(t),o=new Set(r.ignoredAdvisories.filter(m=>m.startsWith("CVE-"))),s=new Set(r.ignoredAdvisories.filter(m=>m.startsWith("GHSA-"))),l=n.filter(m=>m.startsWith("CVE-")),p=n.filter(m=>m.startsWith("GHSA-")),g=[...new Set([...o,...l])],w=[...new Set([...s,...p])],h=l.filter(m=>!o.has(m)).length,b=p.filter(m=>!s.has(m)).length;if(h===0&&b===0){i.push("All advisory IDs already present in pnpm-workspace.yaml.");break}let x=xe(a);if(g.length>0){const m=`  ignoreCves:
-${g.map($=>`    - ${$}`).join(`
+What to do: ${e.whatToDo}`,Kn=e=>{const t=Yt(e);if(t&&typeof t=="object"){const n=t,i=typeof n.whatItIs=="string"?ye(n.whatItIs):"",a=typeof n.areYouAtRisk=="string"?ye(n.areYouAtRisk):"",r=typeof n.whatToDo=="string"?ye(n.whatToDo):"";if(i||a||r)return Gn({areYouAtRisk:a,whatItIs:i,whatToDo:r})}return ye(e)},qn=async(e,t,n)=>{let i=0;const a=Array.from({length:Math.min(t,e.length)},async()=>{for(;i<e.length;){const r=i;i+=1;const o=e[r];o!==void 0&&await n(o)}});await Promise.all(a)},Yn=3,Jn={resolveProvider:qt,runWithRetry:Kt},Xn=async(e,t,n,i=Jn)=>{const a=new Map;if(e.length===0)return a;const r=i.resolveProvider(t);if(!r)return n?.info?.("No AI CLI provider found on PATH — skipping --explain."),a;const o=Jt("security",t?.cacheTtl);return await qn(e,Yn,async c=>{const l=Ae(c),p=Xt({id:c.vulnerability.id,kind:"audit-explain",name:c.packageName,provider:r.name,version:c.packageVersion}),m=Zt(p);if(typeof m=="string"){a.set(l,m);return}try{const w=await i.runWithRetry(r,Bn(c)),h=Kn(w);h&&(a.set(l,h),Qt(p,h,o))}catch(w){const h=w instanceof Error?w.message:String(w);n?.warn?.(`Explain failed for ${c.vulnerability.id} (${h}).`)}}),a},Ne=e=>Array.isArray(e)?e.filter(t=>typeof t=="string"):[],Ve=(e,t)=>{for(const n of t)if(n===e||n.endsWith("*")&&e.startsWith(n.slice(0,-1)))return!0;return!1},St=e=>{const t=V(e,"pnpm-workspace.yaml");if(!Z(t))return{excludedPackages:[],ignoredAdvisories:[]};try{const n=ze(t);return{excludedPackages:[],ignoredAdvisories:[...Ne(n?.auditConfig?.ignoreCves),...Ne(n?.auditConfig?.ignoreGhsas)]}}catch{return{excludedPackages:[],ignoredAdvisories:[]}}},At=e=>{const t=V(e,".yarnrc.yml");if(!Z(t))return{excludedPackages:[],ignoredAdvisories:[]};try{const n=ze(t);return{excludedPackages:Ne(n?.npmAuditExcludePackages),ignoredAdvisories:Ne(n?.npmAuditIgnoreAdvisories)}}catch{return{excludedPackages:[],ignoredAdvisories:[]}}},Zn=(e,t)=>{switch(t){case"pnpm":return St(e);case"yarn":return At(e);default:return{excludedPackages:[],ignoredAdvisories:[]}}},re=(e,t,n)=>{if(Ve(e,t.ignoredAdvisories))return!0;if(n){for(const i of n)if(Ve(i,t.ignoredAdvisories))return!0}return!1},Qn=(e,t)=>Ve(e,t.excludedPackages),ei=(e,t,n)=>{if(n.length===0)return["No advisory IDs to sync."];const i=[];switch(e){case"bun":{i.push(`bun has no audit config file. Use CLI flags: bun audit ${n.map(a=>`--ignore ${a}`).join(" ")}`);break}case"npm":{i.push("npm has no native audit exclusion config. vis accepted risks are the only layer.");break}case"pnpm":{const a=V(t,"pnpm-workspace.yaml");if(!Z(a)){i.push("pnpm-workspace.yaml not found. Cannot sync.");break}const r=St(t),o=new Set(r.ignoredAdvisories.filter(u=>u.startsWith("CVE-"))),c=new Set(r.ignoredAdvisories.filter(u=>u.startsWith("GHSA-"))),l=n.filter(u=>u.startsWith("CVE-")),p=n.filter(u=>u.startsWith("GHSA-")),m=[...new Set([...o,...l])],w=[...new Set([...c,...p])],h=l.filter(u=>!o.has(u)).length,y=p.filter(u=>!c.has(u)).length;if(h===0&&y===0){i.push("All advisory IDs already present in pnpm-workspace.yaml.");break}let x=Se(a);if(m.length>0){const u=`  ignoreCves:
+${m.map($=>`    - ${$}`).join(`
 `)}
-`;/auditConfig:/.test(x)?x=/ignoreCves:/.test(x)?x.replace(/ignoreCves:\s*\n(?:\s+-\s+(?:\S.*|[\t\v\f \u00A0\u1680\u2000-\u200A\u202F\u205F\u3000\uFEFF])\n)*/,m):x.replace(/auditConfig:\s*\n/,`auditConfig:
-${m}`):x=`${x.trimEnd()}
+`;/auditConfig:/.test(x)?x=/ignoreCves:/.test(x)?x.replace(/ignoreCves:\s*\n(?:\s+-\s+(?:\S.*|[\t\v\f \u00A0\u1680\u2000-\u200A\u202F\u205F\u3000\uFEFF])\n)*/,u):x.replace(/auditConfig:\s*\n/,`auditConfig:
+${u}`):x=`${x.trimEnd()}
 
 auditConfig:
-${m}`,h>0&&i.push(`Added ${String(h)} new CVE${h===1?"":"s"} to pnpm-workspace.yaml (${String(g.length)} total)`)}if(w.length>0){const m=`  ignoreGhsas:
+${u}`,h>0&&i.push(`Added ${String(h)} new CVE${h===1?"":"s"} to pnpm-workspace.yaml (${String(m.length)} total)`)}if(w.length>0){const u=`  ignoreGhsas:
 ${w.map($=>`    - ${$}`).join(`
 `)}
-`;/auditConfig:/.test(x)&&(x=/ignoreGhsas:/.test(x)?x.replace(/ignoreGhsas:\s*\n(?:\s+-\s+(?:\S.*|[\t\v\f \u00A0\u1680\u2000-\u200A\u202F\u205F\u3000\uFEFF])\n)*/,m):x.replace(/(auditConfig:[\s\S]*?)(\n\S|\n?$)/m,`$1${m}$2`)),b>0&&i.push(`Added ${String(b)} new GHSA${b===1?"":"s"} to pnpm-workspace.yaml (${String(w.length)} total)`)}et(a,x);break}case"yarn":{const a=F(t,".yarnrc.yml");if(!X(a)){i.push(".yarnrc.yml not found. Cannot sync.");break}const r=yt(t),o=new Set(r.ignoredAdvisories),s=[...new Set([...o,...n])],l=n.filter(w=>!o.has(w)).length;if(l===0){i.push("All advisory IDs already present in .yarnrc.yml.");break}let p=xe(a);const g=`npmAuditIgnoreAdvisories:
-${s.map(w=>`  - "${w}"`).join(`
+`;/auditConfig:/.test(x)&&(x=/ignoreGhsas:/.test(x)?x.replace(/ignoreGhsas:\s*\n(?:\s+-\s+(?:\S.*|[\t\v\f \u00A0\u1680\u2000-\u200A\u202F\u205F\u3000\uFEFF])\n)*/,u):x.replace(/(auditConfig:[\s\S]*?)(\n\S|\n?$)/m,`$1${u}$2`)),y>0&&i.push(`Added ${String(y)} new GHSA${y===1?"":"s"} to pnpm-workspace.yaml (${String(w.length)} total)`)}at(a,x);break}case"yarn":{const a=V(t,".yarnrc.yml");if(!Z(a)){i.push(".yarnrc.yml not found. Cannot sync.");break}const r=At(t),o=new Set(r.ignoredAdvisories),c=[...new Set([...o,...n])],l=n.filter(w=>!o.has(w)).length;if(l===0){i.push("All advisory IDs already present in .yarnrc.yml.");break}let p=Se(a);const m=`npmAuditIgnoreAdvisories:
+${c.map(w=>`  - "${w}"`).join(`
 `)}
-`;p=/npmAuditIgnoreAdvisories:/.test(p)?p.replace(/npmAuditIgnoreAdvisories:\s*\n(?:\s+-\s+(?:\S.*|[\t\v\f \u00A0\u1680\u2000-\u200A\u202F\u205F\u3000\uFEFF])\n)*/,g):`${p.trimEnd()}
+`;p=/npmAuditIgnoreAdvisories:/.test(p)?p.replace(/npmAuditIgnoreAdvisories:\s*\n(?:\s+-\s+(?:\S.*|[\t\v\f \u00A0\u1680\u2000-\u200A\u202F\u205F\u3000\uFEFF])\n)*/,m):`${p.trimEnd()}
 
-${g}`,et(a,p),i.push(`Synced ${String(l)} advisor${l===1?"y":"ies"} to .yarnrc.yml (${String(s.length)} total)`);break}default:i.push(`Unknown package manager: ${e}`)}return i},Wn="1.0",zn=e=>{const{bloomHits:t,duplicates:n,explanations:i,filtered:a,now:r,packagesScanned:o,policyDecisions:s,tool:l,unknownPolicyTokens:p,workspaceRoot:g}=e,w=a.map(m=>({acceptedRisk:m.acceptedRisk??null,dependencyPaths:m.dependencyPaths?m.dependencyPaths.map($=>$.map(y=>({name:y.name,version:y.version}))):[],name:m.name,socketAlerts:m.socketReport?.alerts??[],socketScore:m.socketReport?.score.overall??null,version:m.version,vulnerabilities:m.vulnerabilities.map($=>{const y=i.get(ke({packageName:m.name,packageVersion:m.version,vulnerability:$}));return y?{...$,explanation:y}:{...$}})})),h=s.map(m=>({acceptedRisk:m.acceptedRisk??null,data:m.data??null,packageName:m.packageName,policy:m.policy,reason:m.reason,severity:m.severity,version:m.version})),b={accepted:w.filter(m=>m.acceptedRisk!==null).length,duplicatePackages:n.length,issues:w.filter(m=>m.acceptedRisk===null).length,policyBlocks:h.filter(m=>m.severity==="block"&&m.acceptedRisk===null).length,policyDecisions:h.length,total:w.length},x=p.map(m=>({kind:"unknown-policy",token:m}));return{bloomHits:t.map(m=>({name:m.name,version:m.version})),duplicates:n.map(m=>({name:m.name,versionCount:m.versions.length,versions:[...m.versions]})),generatedAt:(r??new Date).toISOString(),packages:o,policies:h,results:w,schemaVersion:Wn,summary:b,tool:l,warnings:x,workspaceRoot:g}},Bn=["CRITICAL","HIGH","MODERATE","LOW","UNKNOWN"],Hn={CRITICAL:"error",HIGH:"error",LOW:"note",MODERATE:"warning",UNKNOWN:"none"},Gn={CRITICAL:"critical",HIGH:"high",LOW:"low",MODERATE:"medium",UNKNOWN:"none"},Kn={CRITICAL:9.5,HIGH:8,LOW:2.5,MODERATE:5.5,UNKNOWN:0},qn=e=>Hn[e],_e=e=>Gn[e],Yn=e=>Kn[e],Fe=e=>typeof e.cvssScore=="number"&&Number.isFinite(e.cvssScore)?e.cvssScore:Yn(e.severity),Jn=e=>Fe(e).toFixed(1),D=e=>e.startsWith("CVE-")?`https://nvd.nist.gov/vuln/detail/${e}`:e.startsWith("GHSA-")?`https://github.com/advisories/${e}`:`https://osv.dev/vulnerability/${e}`,we=e=>e.startsWith("CVE-")?"NVD":e.startsWith("GHSA-")?"GitHub Advisory Database":"OSV";var Xn=`/*! tailwindcss v4.3.3 | MIT License | https://tailwindcss.com */
-@layer properties{@supports (((-webkit-hyphens:none)) and (not (margin-trim:inline))) or ((-moz-orient:inline) and (not (color:rgb(from red r g b)))){*,:before,:after,::backdrop{--tw-rotate-x:initial;--tw-rotate-y:initial;--tw-rotate-z:initial;--tw-skew-x:initial;--tw-skew-y:initial;--tw-space-y-reverse:0;--tw-border-style:solid;--tw-leading:initial;--tw-font-weight:initial;--tw-tracking:initial;--tw-ordinal:initial;--tw-slashed-zero:initial;--tw-numeric-figure:initial;--tw-numeric-spacing:initial;--tw-numeric-fraction:initial;--tw-shadow:0 0 #0000;--tw-shadow-color:initial;--tw-shadow-alpha:100%;--tw-inset-shadow:0 0 #0000;--tw-inset-shadow-color:initial;--tw-inset-shadow-alpha:100%;--tw-ring-color:initial;--tw-ring-shadow:0 0 #0000;--tw-inset-ring-color:initial;--tw-inset-ring-shadow:0 0 #0000;--tw-ring-inset:initial;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-offset-shadow:0 0 #0000;--tw-outline-style:solid;--tw-blur:initial;--tw-brightness:initial;--tw-contrast:initial;--tw-grayscale:initial;--tw-hue-rotate:initial;--tw-invert:initial;--tw-opacity:initial;--tw-saturate:initial;--tw-sepia:initial;--tw-drop-shadow:initial;--tw-drop-shadow-color:initial;--tw-drop-shadow-alpha:100%;--tw-drop-shadow-size:initial;--tw-backdrop-blur:initial;--tw-backdrop-brightness:initial;--tw-backdrop-contrast:initial;--tw-backdrop-grayscale:initial;--tw-backdrop-hue-rotate:initial;--tw-backdrop-invert:initial;--tw-backdrop-opacity:initial;--tw-backdrop-saturate:initial;--tw-backdrop-sepia:initial;--tw-duration:initial;--tw-content:""}}}@layer theme{:root,:host{--font-sans:-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", "Noto Sans", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";--font-mono:ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;--color-white:#fff;--spacing:.25rem;--text-sm:.875rem;--text-sm--line-height:calc(1.25 / .875);--font-weight-light:300;--font-weight-medium:500;--font-weight-semibold:600;--font-weight-bold:700;--tracking-tight:-.025em;--tracking-normal:0em;--leading-tight:1.25;--leading-snug:1.375;--radius-sm:.25rem;--ease-out:cubic-bezier(0, 0, .2, 1);--blur-sm:8px;--default-transition-duration:.15s;--default-transition-timing-function:cubic-bezier(.4, 0, .2, 1);--default-font-family:var(--font-sans);--default-mono-font-family:var(--font-mono)}}@layer base{*,:after,:before,::backdrop{box-sizing:border-box;border:0 solid;margin:0;padding:0}::file-selector-button{box-sizing:border-box;border:0 solid;margin:0;padding:0}html,:host{-webkit-text-size-adjust:100%;tab-size:4;line-height:1.5;font-family:var(--default-font-family,-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", "Noto Sans", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji");font-feature-settings:var(--default-font-feature-settings,normal);font-variation-settings:var(--default-font-variation-settings,normal);-webkit-tap-highlight-color:transparent}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;-webkit-text-decoration:inherit;-webkit-text-decoration:inherit;-webkit-text-decoration:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,samp,pre{font-family:var(--default-mono-font-family,ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace);font-feature-settings:var(--default-mono-font-feature-settings,normal);font-variation-settings:var(--default-mono-font-variation-settings,normal);font-size:1em}small{font-size:80%}sub,sup{vertical-align:baseline;font-size:75%;line-height:0;position:relative}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}:-moz-focusring:where(:not(iframe)){outline:auto}progress{vertical-align:baseline}summary{display:list-item}ol,ul,menu{list-style:none}img,svg,video,canvas,audio,iframe,embed,object{vertical-align:middle;display:block}img,video{max-width:100%;height:auto}button,input,select,optgroup,textarea{font:inherit;font-feature-settings:inherit;font-variation-settings:inherit;letter-spacing:inherit;color:inherit;opacity:1;background-color:#0000;border-radius:0}::file-selector-button{font:inherit;font-feature-settings:inherit;font-variation-settings:inherit;letter-spacing:inherit;color:inherit;opacity:1;background-color:#0000;border-radius:0}:where(select:is([multiple],[size])) optgroup{font-weight:bolder}:where(select:is([multiple],[size])) optgroup option{padding-inline-start:20px}::file-selector-button{margin-inline-end:4px}::placeholder{opacity:1}@supports (not ((-webkit-appearance:-apple-pay-button))) or (contain-intrinsic-size:1px){::placeholder{color:currentColor}@supports (color:color-mix(in lab, red, red)){::placeholder{color:color-mix(in oklab, currentcolor 50%, transparent)}}}textarea{resize:vertical}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-datetime-edit{padding-block:0}::-webkit-datetime-edit-year-field{padding-block:0}::-webkit-datetime-edit-month-field{padding-block:0}::-webkit-datetime-edit-day-field{padding-block:0}::-webkit-datetime-edit-hour-field{padding-block:0}::-webkit-datetime-edit-minute-field{padding-block:0}::-webkit-datetime-edit-second-field{padding-block:0}::-webkit-datetime-edit-millisecond-field{padding-block:0}::-webkit-datetime-edit-meridiem-field{padding-block:0}::-webkit-calendar-picker-indicator{line-height:1}:-moz-ui-invalid{box-shadow:none}button,input:where([type=button],[type=reset],[type=submit]){appearance:button}::file-selector-button{appearance:button}::-webkit-inner-spin-button{height:auto}::-webkit-outer-spin-button{height:auto}[hidden]:where(:not([hidden=until-found])){display:none!important}:root{--bg:#f5f5f5;--panel:#fff;--panel2:#f0f0f0;--fg:#000;--muted:#555;--faint:#707070;--border:#e0e0e0;--border2:#bdbdbd;--row-hover:#f0f0f0;--accent:#d71921;--accent-soft:#d719210d;--link:#0050c0;--critical:#d71921;--high:#8a5a00;--medium:#555;--low:#707070;--unknown:#707070;--major:#d71921;--minor:#1f7a3d;--mono:ui-monospace, "SF Mono", "JetBrains Mono", "Cascadia Mono", "Roboto Mono", Menlo, Consolas, monospace;--sans:system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", sans-serif}@media (prefers-color-scheme:dark){:root{--bg:#141414;--panel:#1c1c1c;--panel2:#242424;--fg:#fff;--muted:#b8b8b8;--faint:#8a8a8a;--border:#2e2e2e;--border2:#3e3e3e;--row-hover:#1f1f1f;--accent:#ff4d54;--accent-soft:#ff4d5414;--link:#7eb0f9;--critical:#ff4d54;--high:#e0b860;--medium:#b8b8b8;--low:#8a8a8a;--unknown:#8a8a8a;--major:#ff4d54;--minor:#6dbf80}}html[data-theme=light]{--bg:#f5f5f5;--panel:#fff;--panel2:#f0f0f0;--fg:#000;--muted:#555;--faint:#707070;--border:#e0e0e0;--border2:#bdbdbd;--row-hover:#f0f0f0;--accent:#d71921;--accent-soft:#d719210d;--link:#0050c0;--critical:#d71921;--high:#8a5a00;--medium:#555;--low:#707070;--unknown:#707070;--major:#d71921;--minor:#1f7a3d}html[data-theme=dark]{--bg:#141414;--panel:#1c1c1c;--panel2:#242424;--fg:#fff;--muted:#b8b8b8;--faint:#8a8a8a;--border:#2e2e2e;--border2:#3e3e3e;--row-hover:#1f1f1f;--accent:#ff4d54;--accent-soft:#ff4d5414;--link:#7eb0f9;--critical:#ff4d54;--high:#e0b860;--medium:#b8b8b8;--low:#8a8a8a;--unknown:#8a8a8a;--major:#ff4d54;--minor:#6dbf80}*{box-sizing:border-box}html{-webkit-text-size-adjust:100%}body{font-family:var(--sans);background-color:var(--bg);background-image:radial-gradient(circle, var(--border) .5px, transparent .5px);color:var(--fg);-webkit-font-smoothing:antialiased;font-feature-settings:"ss01";background-size:14px 14px;margin:0;padding:24px;line-height:1.5}a{color:var(--link);text-decoration:none}code{font-family:var(--mono);font-size:12px}h2{font-family:var(--mono);letter-spacing:.16em;text-transform:uppercase;color:var(--muted);margin:48px 0 14px;font-size:11px;font-weight:500}input:where([type=text]),input:where(:not([type])),input:where([type=email]),input:where([type=url]),input:where([type=password]),input:where([type=number]),input:where([type=date]),input:where([type=datetime-local]),input:where([type=month]),input:where([type=search]),input:where([type=tel]),input:where([type=time]),input:where([type=week]),select:where([multiple]),textarea,select{appearance:none;--tw-shadow:0 0 #0000;background-color:#fff;border-width:1px;border-color:oklch(55.1% .027 264.364);border-radius:0;padding:.5rem .75rem;font-size:1rem;line-height:1.5rem}:is(input:where([type=text]),input:where(:not([type])),input:where([type=email]),input:where([type=url]),input:where([type=password]),input:where([type=number]),input:where([type=date]),input:where([type=datetime-local]),input:where([type=month]),input:where([type=search]),input:where([type=tel]),input:where([type=time]),input:where([type=week]),select:where([multiple]),textarea,select):focus{outline-offset:2px;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:oklch(54.6% .245 262.881);--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow);border-color:oklch(54.6% .245 262.881);outline:2px solid #0000}input::placeholder,textarea::placeholder{color:oklch(55.1% .027 264.364);opacity:1}::-webkit-datetime-edit-fields-wrapper{padding:0}::-webkit-date-and-time-value{min-height:1.5em;text-align:inherit}::-webkit-datetime-edit{display:inline-flex}::-webkit-datetime-edit{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-year-field{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-month-field{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-day-field{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-hour-field{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-minute-field{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-second-field{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-millisecond-field{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-meridiem-field{padding-top:0;padding-bottom:0}select{-webkit-print-color-adjust:exact;print-color-adjust:exact;background-image:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' fill='none' viewBox='0 0 20 20'%3e%3cpath stroke='oklch(55.1%25 0.027 264.364)' stroke-linecap='round' stroke-linejoin='round' stroke-width='1.5' d='M6 8l4 4 4-4'/%3e%3c/svg%3e");background-position:right .5rem center;background-repeat:no-repeat;background-size:1.5em 1.5em;padding-right:2.5rem}select:where([multiple]),select:where([size]:not([size="1"])){background-image:initial;background-position:initial;background-repeat:unset;background-size:initial;print-color-adjust:unset;padding-right:.75rem}input:where([type=checkbox]),input:where([type=radio]){appearance:none;-webkit-print-color-adjust:exact;print-color-adjust:exact;vertical-align:middle;-webkit-user-select:none;user-select:none;color:oklch(54.6% .245 262.881);--tw-shadow:0 0 #0000;background-color:#fff;background-origin:border-box;border-width:1px;border-color:oklch(55.1% .027 264.364);flex-shrink:0;width:1rem;height:1rem;padding:0;display:inline-block}input:where([type=checkbox]){border-radius:0}input:where([type=radio]){border-radius:100%}input:where([type=checkbox]):focus,input:where([type=radio]):focus{outline-offset:2px;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:2px;--tw-ring-offset-color:#fff;--tw-ring-color:oklch(54.6% .245 262.881);--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(2px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow);outline:2px solid #0000}input:where([type=checkbox]):checked,input:where([type=radio]):checked{background-color:currentColor;background-position:50%;background-repeat:no-repeat;background-size:100% 100%;border-color:#0000}input:where([type=checkbox]):checked{background-image:url("data:image/svg+xml,%3csvg viewBox='0 0 16 16' fill='white' xmlns='http://www.w3.org/2000/svg'%3e%3cpath d='M12.207 4.793a1 1 0 010 1.414l-5 5a1 1 0 01-1.414 0l-2-2a1 1 0 011.414-1.414L6.5 9.086l4.293-4.293a1 1 0 011.414 0z'/%3e%3c/svg%3e")}@media (forced-colors:active){input:where([type=checkbox]):checked{appearance:auto}}input:where([type=radio]):checked{background-image:url("data:image/svg+xml,%3csvg viewBox='0 0 16 16' fill='white' xmlns='http://www.w3.org/2000/svg'%3e%3ccircle cx='8' cy='8' r='3'/%3e%3c/svg%3e")}@media (forced-colors:active){input:where([type=radio]):checked{appearance:auto}}input:where([type=checkbox]):checked:hover,input:where([type=checkbox]):checked:focus,input:where([type=radio]):checked:hover,input:where([type=radio]):checked:focus{background-color:currentColor;border-color:#0000}input:where([type=checkbox]):indeterminate{background-color:currentColor;background-image:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' fill='none' viewBox='0 0 16 16'%3e%3cpath stroke='white' stroke-linecap='round' stroke-linejoin='round' stroke-width='2' d='M4 8h8'/%3e%3c/svg%3e");background-position:50%;background-repeat:no-repeat;background-size:100% 100%;border-color:#0000}@media (forced-colors:active){input:where([type=checkbox]):indeterminate{appearance:auto}}input:where([type=checkbox]):indeterminate:hover,input:where([type=checkbox]):indeterminate:focus{background-color:currentColor;border-color:#0000}input:where([type=file]){background:unset;border-color:inherit;font-size:unset;line-height:inherit;border-width:0;border-radius:0;padding:0}input:where([type=file]):focus{outline:1px solid buttontext;outline:1px auto -webkit-focus-ring-color}}@layer components{.masthead{border-bottom:1px solid var(--border)}.brand{font-family:var(--sans);color:var(--fg);font-size:clamp(30px,5vw,52px);font-weight:600}.brand .slash{color:var(--accent)}.brand .sub{font-family:var(--mono);letter-spacing:.22em;color:var(--faint)}.chip{font-family:var(--mono);letter-spacing:.08em;color:var(--muted);border:1px solid var(--border2)}.tbtn{font-family:var(--mono);letter-spacing:.08em;color:var(--muted);border:1px solid var(--border2);transition:border-color .2s,color .2s}.tbtn:hover{color:var(--fg);border-color:var(--fg)}.tbtn-theme{min-width:28px}.tbtn-theme .ticon{line-height:0}.tbtn-theme .ticon-sun{display:none}@media (prefers-color-scheme:dark){.tbtn-theme .ticon-moon{display:none}.tbtn-theme .ticon-sun{display:inline-flex}}html[data-theme=light] .tbtn-theme .ticon-moon{display:inline-flex}html[data-theme=light] .tbtn-theme .ticon-sun,html[data-theme=dark] .tbtn-theme .ticon-moon{display:none}html[data-theme=dark] .tbtn-theme .ticon-sun{display:inline-flex}.verdict{padding:56px 0 36px}.verdict .vnum{font-family:var(--mono);letter-spacing:-.04em;color:var(--fg);font-variant-numeric:tabular-nums;font-size:clamp(64px,14vw,148px);line-height:.85}.verdict .vsub{font-family:var(--mono);letter-spacing:.16em;color:var(--faint)}.verdict-crit .vnum{color:var(--accent)}.verdict-high .vnum{color:var(--high)}.debugbar{border-bottom:1px solid var(--border)}.dseg+.dseg{border-left:1px solid var(--border);padding-left:1.75rem}.dseg .dk{font-family:var(--mono);letter-spacing:.13em;color:var(--faint)}.dseg .dv{font-family:var(--mono);color:var(--fg);font-variant-numeric:tabular-nums;letter-spacing:-.01em;font-weight:400}.dseg .dvsep{color:var(--faint)}.dseg .dot{background:var(--unknown)}.dseg-critical .dv{color:var(--critical)}.dseg-high .dv{color:var(--high)}.dseg-moderate .dv{color:var(--medium)}.dseg-low .dv{color:var(--low)}.dseg-ok .dot{background:var(--minor)}.dseg-ok .dv,.dseg-fixable .dv{color:var(--minor)}.field{border-bottom:1px solid var(--border2);background:0 0;transition:border-color .2s}.field:focus-within{border-bottom-color:var(--fg)}.field .prompt{font-family:var(--mono);letter-spacing:.12em;color:var(--faint)}.field input,.field select{font-family:var(--mono);color:var(--fg)}.field.sel{margin-left:32px}.field select{text-transform:uppercase;letter-spacing:.06em;font-size:11px}.field select option{background:var(--panel);color:var(--fg);text-transform:none;letter-spacing:0}.field input::placeholder{color:var(--faint);text-transform:uppercase;letter-spacing:.06em;font-size:11px}#findings{border-collapse:collapse}#findings thead th{font-family:var(--mono);letter-spacing:.11em;color:var(--faint);background:var(--bg);border-bottom:1px solid var(--border2)}#findings td,#findings tbody tr:last-child td{border-bottom:1px solid var(--border)}.finding-row:hover td{background:var(--row-hover)}.sev-cell{box-shadow:inset 2px 0 0 var(--border2)}tr[data-severity=CRITICAL] .sev-cell{box-shadow:inset 2px 0 0 var(--critical)}tr[data-severity=HIGH] .sev-cell{box-shadow:inset 2px 0 0 var(--high)}tr[data-severity=MODERATE] .sev-cell{box-shadow:inset 2px 0 0 var(--medium)}tr[data-severity=LOW] .sev-cell{box-shadow:inset 2px 0 0 var(--low)}tr[data-severity=UNKNOWN] .sev-cell{box-shadow:inset 2px 0 0 var(--unknown)}.ack-row td{opacity:.4}.ack-row .summary-cell,.ack-row a{color:var(--muted)}code.pkg{color:var(--fg)}code.ver,code.fix{color:var(--muted)}code.fix{color:var(--minor)}code.copyable{cursor:copy;padding-inline:calc(var(--spacing) * 2);padding-block:var(--spacing);white-space:nowrap;color:var(--fg);border:1px solid var(--border2);background:0 0;border-radius:3px;font-size:12px;transition:border-color .2s,color .2s;display:inline-block}code.copyable:hover{border-color:var(--fg)}code.copyable.copied{color:var(--minor);border-color:var(--minor)}.adv-cell a{font-family:var(--mono);color:var(--link);border-bottom:1px solid #0000;transition:border-color .2s}.adv-cell a:hover{border-bottom-color:var(--link)}.summary-cell{font-family:var(--sans);color:var(--muted);line-height:1.5}.muted{font-family:var(--mono);letter-spacing:.06em;color:var(--faint)}.ack{font-family:var(--mono);letter-spacing:.12em;color:var(--faint);border:1px solid var(--border2)}.badge{font-family:var(--mono);letter-spacing:.1em;border:1px solid}.badge:before{content:"";background:currentColor;width:5px;height:5px}.badge-critical{color:var(--critical)}.badge-high{color:var(--high)}.badge-moderate{color:var(--medium)}.badge-low{color:var(--low)}.badge-unknown{color:var(--unknown)}.marker{font-family:var(--mono);letter-spacing:.09em}.marker-major{color:var(--major)}.marker-minor-patch{color:var(--minor)}.marker-unknown{color:var(--unknown)}.empty{font-family:var(--mono);letter-spacing:.1em;color:var(--faint);border-top:1px solid var(--border);border-bottom:1px solid var(--border)}.clean{padding-top:96px;padding-bottom:96px}.clean .big{font-family:var(--mono);letter-spacing:-.03em;color:var(--fg);font-size:clamp(56px,12vw,128px);line-height:1}.clean .sub{font-family:var(--mono);letter-spacing:.16em;color:var(--faint)}#policies{border-collapse:collapse}#policies th{font-family:var(--mono);letter-spacing:.12em;color:var(--faint);background:var(--bg);border-bottom:1px solid var(--border2)}#policies td,#policies tr:last-child td{border-bottom:1px solid var(--border)}#policies code{letter-spacing:.04em;color:var(--muted)}.policy-badge{font-family:var(--mono);letter-spacing:.1em;border:1px solid}.policy-badge:before{content:"";background:currentColor;width:5px;height:5px}.policy-block{color:var(--accent)}.policy-warn{color:var(--high)}.policy-info{color:var(--muted)}.hint{font-family:var(--mono);letter-spacing:.1em;color:var(--faint)}.kbd{font-family:var(--mono);letter-spacing:.06em;color:var(--muted);background:var(--panel2);border:1px solid var(--border2)}.explain-row td{border-top:1px dotted var(--accent);border-bottom:1px solid var(--border);box-shadow:inset 2px 0 0 var(--accent);background:0 0}.finding-row:has(+.explain-row) td{border-bottom:none}.explain-row details{background:0 0}.explain-row summary::-webkit-details-marker{display:none}.intel-tag{font-family:var(--mono);letter-spacing:.16em;color:var(--accent)}.intel-hint{font-family:var(--mono);letter-spacing:.1em;color:var(--muted)}.explain-row details[open] summary .intel-hint:after{content:" [-]"}.explain-row details:not([open]) summary .intel-hint:after{content:" [+]"}.explain-body{animation:.2s both rise}.intel-key{font-family:var(--mono);letter-spacing:.12em;color:var(--accent)}.intel-val{font-family:var(--sans);color:var(--fg);line-height:1.55}.intel-prose{color:var(--muted);grid-template-columns:1fr}.intel-prose .intel-val{color:var(--muted)}.sig{font-family:var(--mono);letter-spacing:.1em;color:var(--faint);border-top:1px solid var(--border)}.sig b{color:var(--muted);font-weight:500}.sig-by{color:var(--muted)}.anolilab-logo{width:auto;height:13px;fill:var(--fg)}.anolilab-accent{fill:#dfff1b}@keyframes rise{0%{opacity:0;transform:translateY(4px)}to{opacity:1;transform:none}}@media (prefers-reduced-motion:reduce){.explain-body{animation:none}}}@layer utilities{.pointer-events-auto{pointer-events:auto}.pointer-events-none{pointer-events:none}.collapse{visibility:collapse}.invisible{visibility:hidden}.visible{visibility:visible}.absolute{position:absolute}.fixed{position:fixed}.relative{position:relative}.static{position:static}.sticky{position:sticky}.inset-0{inset:0}.inset-x-0{inset-inline:0}.top-0{top:0}.top-3{top:calc(var(--spacing) * 3)}.top-4{top:calc(var(--spacing) * 4)}.top-full{top:100%}.right-0{right:0}.right-4{right:calc(var(--spacing) * 4)}.bottom-4{bottom:calc(var(--spacing) * 4)}.bottom-5{bottom:calc(var(--spacing) * 5)}.left-0{left:0}.left-4{left:calc(var(--spacing) * 4)}.isolate{isolation:isolate}.z-20{z-index:20}.z-30{z-index:30}.z-\\[2\\]{z-index:2}.container{width:100%}@media (min-width:40rem){.container{max-width:40rem}}@media (min-width:48rem){.container{max-width:48rem}}@media (min-width:64rem){.container{max-width:64rem}}@media (min-width:80rem){.container{max-width:80rem}}@media (min-width:96rem){.container{max-width:96rem}}.m-8{margin:calc(var(--spacing) * 8)}.m-9{margin:calc(var(--spacing) * 9)}.mx-1{margin-inline:var(--spacing)}.mx-12{margin-inline:calc(var(--spacing) * 12)}.mx-\\[0\\.12em\\]{margin-inline:.12em}.mx-auto{margin-inline:auto}.mt-1{margin-top:var(--spacing)}.mt-2{margin-top:calc(var(--spacing) * 2)}.mt-3{margin-top:calc(var(--spacing) * 3)}.mt-4{margin-top:calc(var(--spacing) * 4)}.mt-6{margin-top:calc(var(--spacing) * 6)}.mt-12{margin-top:calc(var(--spacing) * 12)}.mb-1{margin-bottom:var(--spacing)}.mb-2{margin-bottom:calc(var(--spacing) * 2)}.mb-3{margin-bottom:calc(var(--spacing) * 3)}.mb-4{margin-bottom:calc(var(--spacing) * 4)}.mb-6{margin-bottom:calc(var(--spacing) * 6)}.mb-10{margin-bottom:calc(var(--spacing) * 10)}.ml-2{margin-left:calc(var(--spacing) * 2)}.ml-8{margin-left:calc(var(--spacing) * 8)}.ml-auto{margin-left:auto}.block{display:block}.contents{display:contents}.flex{display:flex}.grid{display:grid}.hidden{display:none}.inline{display:inline}.inline-block{display:inline-block}.inline-flex{display:inline-flex}.table{display:table}.size-\\[7px\\]{width:7px;height:7px}.h-2{height:calc(var(--spacing) * 2)}.h-5{height:calc(var(--spacing) * 5)}.h-7{height:calc(var(--spacing) * 7)}.h-9{height:calc(var(--spacing) * 9)}.h-10{height:calc(var(--spacing) * 10)}.h-11{height:calc(var(--spacing) * 11)}.h-\\[6px\\]{height:6px}.h-\\[7px\\]{height:7px}.h-\\[8px\\]{height:8px}.h-\\[10px\\]{height:10px}.h-\\[18px\\]{height:18px}.h-full{height:100%}.h-px{height:1px}.max-h-72{max-height:calc(var(--spacing) * 72)}.min-h-\\[400px\\]{min-height:400px}.min-h-\\[480px\\]{min-height:480px}.min-h-screen{min-height:100vh}.w-2{width:calc(var(--spacing) * 2)}.w-3{width:calc(var(--spacing) * 3)}.w-4{width:calc(var(--spacing) * 4)}.w-7{width:calc(var(--spacing) * 7)}.w-9{width:calc(var(--spacing) * 9)}.w-\\[7px\\]{width:7px}.w-\\[8px\\]{width:8px}.w-full{width:100%}.w-px{width:1px}.max-w-\\[380px\\]{max-width:380px}.max-w-\\[1080px\\]{max-width:1080px}.min-w-0{min-width:0}.min-w-5{min-width:calc(var(--spacing) * 5)}.min-w-\\[200px\\]{min-width:200px}.min-w-\\[220px\\]{min-width:220px}.min-w-\\[260px\\]{min-width:260px}.flex-1{flex:1}.flex-\\[1_1_280px\\]{flex:280px}.flex-auto{flex:auto}.flex-none{flex:none}.shrink{flex-shrink:1}.shrink-0{flex-shrink:0}.grow{flex-grow:1}.caption-bottom{caption-side:bottom}.border-collapse{border-collapse:collapse}.transform{transform:var(--tw-rotate-x,) var(--tw-rotate-y,) var(--tw-rotate-z,) var(--tw-skew-x,) var(--tw-skew-y,)}.cursor-move{cursor:move}.cursor-pointer{cursor:pointer}.resize{resize:both}.grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.grid-cols-\\[72px_1fr\\]{grid-template-columns:72px 1fr}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-baseline{align-items:baseline}.items-center{align-items:center}.items-end{align-items:flex-end}.items-start{align-items:flex-start}.items-stretch{align-items:stretch}.justify-between{justify-content:space-between}.justify-center{justify-content:center}.gap-0{gap:0}.gap-1{gap:var(--spacing)}.gap-1\\.5{gap:calc(var(--spacing) * 1.5)}.gap-2{gap:calc(var(--spacing) * 2)}.gap-3{gap:calc(var(--spacing) * 3)}.gap-4{gap:calc(var(--spacing) * 4)}.gap-6{gap:calc(var(--spacing) * 6)}.gap-8{gap:calc(var(--spacing) * 8)}.gap-12{gap:calc(var(--spacing) * 12)}.gap-16{gap:calc(var(--spacing) * 16)}.gap-\\[0\\.65rem\\]{gap:.65rem}.gap-\\[2px\\]{gap:2px}.gap-\\[7px\\]{gap:7px}.gap-px{gap:1px}:where(.space-y-0\\.5>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * .5) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * .5) * calc(1 - var(--tw-space-y-reverse)))}.gap-x-3{column-gap:calc(var(--spacing) * 3)}.gap-x-6{column-gap:calc(var(--spacing) * 6)}.gap-y-1{row-gap:var(--spacing)}.gap-y-2{row-gap:calc(var(--spacing) * 2)}.gap-y-3{row-gap:calc(var(--spacing) * 3)}.self-center{align-self:center}.truncate{text-overflow:ellipsis;white-space:nowrap;overflow:hidden}.overflow-auto{overflow:auto}.overflow-y-auto{overflow-y:auto}.rounded{border-radius:.25rem}.rounded-\\[3px\\]{border-radius:3px}.rounded-\\[4px\\]{border-radius:4px}.rounded-full{border-radius:3.40282e38px}.rounded-sm{border-radius:var(--radius-sm)}.border{border-style:var(--tw-border-style);border-width:1px}.border-0{border-style:var(--tw-border-style);border-width:0}.border-t{border-top-style:var(--tw-border-style);border-top-width:1px}.border-b{border-bottom-style:var(--tw-border-style);border-bottom-width:1px}.border-l-2{border-left-style:var(--tw-border-style);border-left-width:2px}.border-dashed{--tw-border-style:dashed;border-style:dashed}.bg-transparent{background-color:#0000}.p-0{padding:0}.p-5{padding:calc(var(--spacing) * 5)}.p-6{padding:calc(var(--spacing) * 6)}.px-0{padding-inline:0}.px-0\\.5{padding-inline:calc(var(--spacing) * .5)}.px-1{padding-inline:var(--spacing)}.px-1\\.5{padding-inline:calc(var(--spacing) * 1.5)}.px-2{padding-inline:calc(var(--spacing) * 2)}.px-3{padding-inline:calc(var(--spacing) * 3)}.px-4{padding-inline:calc(var(--spacing) * 4)}.px-5{padding-inline:calc(var(--spacing) * 5)}.px-6{padding-inline:calc(var(--spacing) * 6)}.px-8{padding-inline:calc(var(--spacing) * 8)}.px-12{padding-inline:calc(var(--spacing) * 12)}.px-\\[5px\\]{padding-inline:5px}.px-\\[6px\\]{padding-inline:6px}.py-0\\.5{padding-block:calc(var(--spacing) * .5)}.py-1{padding-block:var(--spacing)}.py-2{padding-block:calc(var(--spacing) * 2)}.py-2\\.5{padding-block:calc(var(--spacing) * 2.5)}.py-3{padding-block:calc(var(--spacing) * 3)}.py-4{padding-block:calc(var(--spacing) * 4)}.py-5{padding-block:calc(var(--spacing) * 5)}.py-6{padding-block:calc(var(--spacing) * 6)}.py-8{padding-block:calc(var(--spacing) * 8)}.py-12{padding-block:calc(var(--spacing) * 12)}.py-16{padding-block:calc(var(--spacing) * 16)}.py-\\[3px\\]{padding-block:3px}.py-px{padding-block:1px}.pt-0\\.5{padding-top:calc(var(--spacing) * .5)}.pt-1{padding-top:var(--spacing)}.pt-2{padding-top:calc(var(--spacing) * 2)}.pt-5{padding-top:calc(var(--spacing) * 5)}.pt-7{padding-top:calc(var(--spacing) * 7)}.pt-8{padding-top:calc(var(--spacing) * 8)}.pt-12{padding-top:calc(var(--spacing) * 12)}.pr-0{padding-right:0}.pr-1{padding-right:var(--spacing)}.pr-2{padding-right:calc(var(--spacing) * 2)}.pr-3{padding-right:calc(var(--spacing) * 3)}.pr-6{padding-right:calc(var(--spacing) * 6)}.pr-1234{padding-right:calc(var(--spacing) * 1234)}.pb-1{padding-bottom:var(--spacing)}.pb-1\\.5{padding-bottom:calc(var(--spacing) * 1.5)}.pb-4{padding-bottom:calc(var(--spacing) * 4)}.pb-5{padding-bottom:calc(var(--spacing) * 5)}.pb-6{padding-bottom:calc(var(--spacing) * 6)}.pb-8{padding-bottom:calc(var(--spacing) * 8)}.pb-12{padding-bottom:calc(var(--spacing) * 12)}.pl-0{padding-left:0}.pl-3{padding-left:calc(var(--spacing) * 3)}.pl-4{padding-left:calc(var(--spacing) * 4)}.pl-\\[7px\\]{padding-left:7px}.text-center{text-align:center}.text-left{text-align:left}.text-right{text-align:right}.align-middle{vertical-align:middle}.align-top{vertical-align:top}.font-mono{font-family:var(--font-mono)}.font-sans{font-family:var(--font-sans)}.text-sm{font-size:var(--text-sm);line-height:var(--tw-leading,var(--text-sm--line-height))}.text-\\[9px\\]{font-size:9px}.text-\\[10px\\]{font-size:10px}.text-\\[11px\\]{font-size:11px}.text-\\[12px\\]{font-size:12px}.text-\\[13px\\]{font-size:13px}.text-\\[14px\\]{font-size:14px}.text-\\[15px\\]{font-size:15px}.text-\\[22px\\]{font-size:22px}.text-\\[28px\\]{font-size:28px}.text-\\[44px\\]{font-size:44px}.text-\\[72px\\]{font-size:72px}.text-\\[clamp\\(28px\\,5vw\\,52px\\)\\]{font-size:clamp(28px,5vw,52px)}.leading-\\[0\\.9\\]{--tw-leading:.9;line-height:.9}.leading-none{--tw-leading:1;line-height:1}.leading-snug{--tw-leading:var(--leading-snug);line-height:var(--leading-snug)}.leading-tight{--tw-leading:var(--leading-tight);line-height:var(--leading-tight)}.font-bold{--tw-font-weight:var(--font-weight-bold);font-weight:var(--font-weight-bold)}.font-light{--tw-font-weight:var(--font-weight-light);font-weight:var(--font-weight-light)}.font-medium{--tw-font-weight:var(--font-weight-medium);font-weight:var(--font-weight-medium)}.font-semibold{--tw-font-weight:var(--font-weight-semibold);font-weight:var(--font-weight-semibold)}.tracking-\\[-0\\.02em\\]{--tw-tracking:-.02em;letter-spacing:-.02em}.tracking-\\[0\\.1em\\]{--tw-tracking:.1em;letter-spacing:.1em}.tracking-\\[0\\.05em\\]{--tw-tracking:.05em;letter-spacing:.05em}.tracking-\\[0\\.08em\\]{--tw-tracking:.08em;letter-spacing:.08em}.tracking-\\[0\\.11em\\]{--tw-tracking:.11em;letter-spacing:.11em}.tracking-\\[0\\.12em\\]{--tw-tracking:.12em;letter-spacing:.12em}.tracking-\\[0\\.15em\\]{--tw-tracking:.15em;letter-spacing:.15em}.tracking-\\[0\\.16em\\]{--tw-tracking:.16em;letter-spacing:.16em}.tracking-\\[0\\.22em\\]{--tw-tracking:.22em;letter-spacing:.22em}.tracking-normal{--tw-tracking:var(--tracking-normal);letter-spacing:var(--tracking-normal)}.tracking-tight{--tw-tracking:var(--tracking-tight);letter-spacing:var(--tracking-tight)}.break-words{overflow-wrap:break-word}.break-all{word-break:break-all}.whitespace-nowrap{white-space:nowrap}.capitalize{text-transform:capitalize}.lowercase{text-transform:lowercase}.normal-case{text-transform:none}.uppercase{text-transform:uppercase}.italic{font-style:italic}.tabular-nums{--tw-numeric-spacing:tabular-nums;font-variant-numeric:var(--tw-ordinal,) var(--tw-slashed-zero,) var(--tw-numeric-figure,) var(--tw-numeric-spacing,) var(--tw-numeric-fraction,)}.no-underline{text-decoration-line:none}.opacity-40{opacity:.4}.opacity-70{opacity:.7}.shadow{--tw-shadow:0 1px 3px 0 var(--tw-shadow-color,#0000001a), 0 1px 2px -1px var(--tw-shadow-color,#0000001a);box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow)}.shadow-\\[0_4px_12px_rgba\\(0\\,0\\,0\\,0\\.08\\)\\]{--tw-shadow:0 4px 12px var(--tw-shadow-color,#00000014);box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow)}.shadow-\\[0_8px_24px_rgba\\(0\\,0\\,0\\,0\\.12\\)\\]{--tw-shadow:0 8px 24px var(--tw-shadow-color,#0000001f);box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow)}.ring{--tw-ring-shadow:var(--tw-ring-inset,) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color,currentcolor);box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow)}.outline{outline-style:var(--tw-outline-style);outline-width:1px}.outline-0{outline-style:var(--tw-outline-style);outline-width:0}.blur{--tw-blur:blur(8px);filter:var(--tw-blur,) var(--tw-brightness,) var(--tw-contrast,) var(--tw-grayscale,) var(--tw-hue-rotate,) var(--tw-invert,) var(--tw-saturate,) var(--tw-sepia,) var(--tw-drop-shadow,)}.invert{--tw-invert:invert(100%);filter:var(--tw-blur,) var(--tw-brightness,) var(--tw-contrast,) var(--tw-grayscale,) var(--tw-hue-rotate,) var(--tw-invert,) var(--tw-saturate,) var(--tw-sepia,) var(--tw-drop-shadow,)}.filter{filter:var(--tw-blur,) var(--tw-brightness,) var(--tw-contrast,) var(--tw-grayscale,) var(--tw-hue-rotate,) var(--tw-invert,) var(--tw-saturate,) var(--tw-sepia,) var(--tw-drop-shadow,)}.backdrop-blur-sm{--tw-backdrop-blur:blur(var(--blur-sm));-webkit-backdrop-filter:var(--tw-backdrop-blur,) var(--tw-backdrop-brightness,) var(--tw-backdrop-contrast,) var(--tw-backdrop-grayscale,) var(--tw-backdrop-hue-rotate,) var(--tw-backdrop-invert,) var(--tw-backdrop-opacity,) var(--tw-backdrop-saturate,) var(--tw-backdrop-sepia,);backdrop-filter:var(--tw-backdrop-blur,) var(--tw-backdrop-brightness,) var(--tw-backdrop-contrast,) var(--tw-backdrop-grayscale,) var(--tw-backdrop-hue-rotate,) var(--tw-backdrop-invert,) var(--tw-backdrop-opacity,) var(--tw-backdrop-saturate,) var(--tw-backdrop-sepia,)}.transition{transition-property:color,background-color,border-color,outline-color,text-decoration-color,fill,stroke,--tw-gradient-from,--tw-gradient-via,--tw-gradient-to,opacity,box-shadow,transform,translate,scale,rotate,filter,-webkit-backdrop-filter,backdrop-filter,display,content-visibility,overlay,pointer-events;transition-timing-function:var(--tw-ease,var(--default-transition-timing-function));transition-duration:var(--tw-duration,var(--default-transition-duration))}.transition-colors{transition-property:color,background-color,border-color,outline-color,text-decoration-color,fill,stroke,--tw-gradient-from,--tw-gradient-via,--tw-gradient-to;transition-timing-function:var(--tw-ease,var(--default-transition-timing-function));transition-duration:var(--tw-duration,var(--default-transition-duration))}.duration-150{--tw-duration:.15s;transition-duration:.15s}.select-none{-webkit-user-select:none;user-select:none}.\\[notifications\\:\\<id\\>\\]{notifications:<id>}.\\[notifications\\:slack\\]{notifications:slack}.\\[notifications\\:teams\\]{notifications:teams}.\\[verdaccio\\:dry-run\\]{verdaccio:dry-run}.group-data-\\[state\\=off\\]\\:opacity-30:is(:where(.group)[data-state=off] *){opacity:.3}.before\\:absolute:before{content:var(--tw-content);position:absolute}.before\\:left-0:before{content:var(--tw-content);left:0}.before\\:content-\\[\\'→\\'\\]:before{--tw-content:"→";content:var(--tw-content)}.after\\:ml-auto:after{content:var(--tw-content);margin-left:auto}.after\\:font-mono:after{content:var(--tw-content);font-family:var(--font-mono)}.after\\:text-\\[9px\\]:after{content:var(--tw-content);font-size:9px}.after\\:tracking-\\[0\\.1em\\]:after{content:var(--tw-content);--tw-tracking:.1em;letter-spacing:.1em}.after\\:content-\\[\\'ON\\'\\]:after{--tw-content:"ON";content:var(--tw-content)}.last\\:border-b-0:last-child{border-bottom-style:var(--tw-border-style);border-bottom-width:0}@media (hover:hover){.hover\\:text-white:hover{color:var(--color-white)}.hover\\:opacity-90:hover{opacity:.9}}.focus-visible\\:ring-1:focus-visible{--tw-ring-shadow:var(--tw-ring-inset,) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color,currentcolor);box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow)}.focus-visible\\:outline-none:focus-visible{--tw-outline-style:none;outline-style:none}.disabled\\:pointer-events-none:disabled{pointer-events:none}.disabled\\:opacity-40:disabled{opacity:.4}.data-\\[open\\=false\\]\\:hidden[data-open=false]{display:none}.data-\\[pinned\\=true\\]\\:pointer-events-auto[data-pinned=true]{pointer-events:auto}.data-\\[state\\=off\\]\\:line-through[data-state=off]{text-decoration-line:line-through}.data-\\[state\\=off\\]\\:after\\:content-\\[\\'OFF\\'\\][data-state=off]:after{--tw-content:"OFF";content:var(--tw-content)}@media (min-width:40rem){.sm\\:min-w-\\[320px\\]{min-width:320px}}@media (min-width:48rem){.md\\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.md\\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}.md\\:grid-cols-\\[1\\.4fr_1fr\\]{grid-template-columns:1.4fr 1fr}}.\\[\\&_svg\\]\\:size-\\[14px\\] svg{width:14px;height:14px}.\\[\\&_svg\\]\\:shrink-0 svg{flex-shrink:0}.\\[\\&_tr\\]\\:border-b-0 tr{border-bottom-style:var(--tw-border-style);border-bottom-width:0}.\\[\\&\\>\\*\\+\\*\\]\\:ml-6>*+*{margin-left:calc(var(--spacing) * 6)}.\\[\\&\\>\\*\\+\\*\\]\\:border-l>*+*{border-left-style:var(--tw-border-style);border-left-width:1px}.\\[\\&\\>\\*\\+\\*\\]\\:pl-6>*+*{padding-left:calc(var(--spacing) * 6)}.\\[\\&\\>td\\]\\:border-b>td{border-bottom-style:var(--tw-border-style);border-bottom-width:1px}}@property --tw-rotate-x{syntax:"*";inherits:false}@property --tw-rotate-y{syntax:"*";inherits:false}@property --tw-rotate-z{syntax:"*";inherits:false}@property --tw-skew-x{syntax:"*";inherits:false}@property --tw-skew-y{syntax:"*";inherits:false}@property --tw-space-y-reverse{syntax:"*";inherits:false;initial-value:0}@property --tw-border-style{syntax:"*";inherits:false;initial-value:solid}@property --tw-leading{syntax:"*";inherits:false}@property --tw-font-weight{syntax:"*";inherits:false}@property --tw-tracking{syntax:"*";inherits:false}@property --tw-ordinal{syntax:"*";inherits:false}@property --tw-slashed-zero{syntax:"*";inherits:false}@property --tw-numeric-figure{syntax:"*";inherits:false}@property --tw-numeric-spacing{syntax:"*";inherits:false}@property --tw-numeric-fraction{syntax:"*";inherits:false}@property --tw-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-shadow-color{syntax:"*";inherits:false}@property --tw-shadow-alpha{syntax:"<percentage>";inherits:false;initial-value:100%}@property --tw-inset-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-inset-shadow-color{syntax:"*";inherits:false}@property --tw-inset-shadow-alpha{syntax:"<percentage>";inherits:false;initial-value:100%}@property --tw-ring-color{syntax:"*";inherits:false}@property --tw-ring-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-inset-ring-color{syntax:"*";inherits:false}@property --tw-inset-ring-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-ring-inset{syntax:"*";inherits:false}@property --tw-ring-offset-width{syntax:"<length>";inherits:false;initial-value:0}@property --tw-ring-offset-color{syntax:"*";inherits:false;initial-value:#fff}@property --tw-ring-offset-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-outline-style{syntax:"*";inherits:false;initial-value:solid}@property --tw-blur{syntax:"*";inherits:false}@property --tw-brightness{syntax:"*";inherits:false}@property --tw-contrast{syntax:"*";inherits:false}@property --tw-grayscale{syntax:"*";inherits:false}@property --tw-hue-rotate{syntax:"*";inherits:false}@property --tw-invert{syntax:"*";inherits:false}@property --tw-opacity{syntax:"*";inherits:false}@property --tw-saturate{syntax:"*";inherits:false}@property --tw-sepia{syntax:"*";inherits:false}@property --tw-drop-shadow{syntax:"*";inherits:false}@property --tw-drop-shadow-color{syntax:"*";inherits:false}@property --tw-drop-shadow-alpha{syntax:"<percentage>";inherits:false;initial-value:100%}@property --tw-drop-shadow-size{syntax:"*";inherits:false}@property --tw-backdrop-blur{syntax:"*";inherits:false}@property --tw-backdrop-brightness{syntax:"*";inherits:false}@property --tw-backdrop-contrast{syntax:"*";inherits:false}@property --tw-backdrop-grayscale{syntax:"*";inherits:false}@property --tw-backdrop-hue-rotate{syntax:"*";inherits:false}@property --tw-backdrop-invert{syntax:"*";inherits:false}@property --tw-backdrop-opacity{syntax:"*";inherits:false}@property --tw-backdrop-saturate{syntax:"*";inherits:false}@property --tw-backdrop-sepia{syntax:"*";inherits:false}@property --tw-duration{syntax:"*";inherits:false}@property --tw-content{syntax:"*";inherits:false;initial-value:""}`;const Zn=Xn,S=e=>e.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;").replaceAll("'","&#39;"),Qn={major:"major bump","minor-patch":"safe",unknown:"no fix"},ei=(e,t)=>{if(t.length===0)return{kind:"unknown",label:"no fix"};const n=_.coerce(e);if(!n)return{kind:"unknown",label:"non-semver"};let i,a;for(const r of t){const o=_.coerce(r);if(!o)continue;const s=_.diff(n,o);s==="major"||s==="premajor"?i||(i=r):(s==="minor"||s==="patch"||s==="preminor"||s==="prepatch")&&!a&&(a=r)}return a?{kind:"minor-patch",label:`safe to ${a}`}:i?{kind:"major",label:`requires major bump to ${i}`}:{kind:"unknown",label:"no usable fix"}},ti=new Map([["are you at risk","RISK"],["what it is","VECTOR"],["what to do","ACTION"]]),ni=e=>e.split(`
-`).map(t=>{const n=t.trim();if(!n)return"";const i=n.match(/^([^:]{2,40}):\s*(.+)$/u);if(i?.[1]&&i[2]){const a=ti.get(i[1].trim().toLowerCase())??i[1].trim().toUpperCase();return`<div class="intel-line grid grid-cols-[72px_1fr] items-start gap-4"><span class="intel-key pt-0.5 text-[9px] font-bold uppercase">${S(a)}</span><span class="intel-val text-[13px]">${S(i[2].trim())}</span></div>`}return`<div class="intel-line intel-prose grid items-start gap-4"><span class="intel-val text-[13px]">${S(n)}</span></div>`}).join(""),ii='<svg class="ticon-svg" viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" focusable="false"><path d="M21 12.79A9 9 0 1 1 11.21 3 7 7 0 0 0 21 12.79z"/></svg>',ai='<svg class="ticon-svg" viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" focusable="false"><circle cx="12" cy="12" r="4"/><path d="M12 2v2m0 16v2M4.93 4.93l1.41 1.41m11.32 11.32 1.41 1.41M2 12h2m16 0h2M4.93 19.07l1.41-1.41m11.32-11.32 1.41-1.41"/></svg>',z="px-3 py-3 text-left align-middle",B="sticky top-0 z-[2] px-3 py-3 text-left text-[10px] font-medium uppercase whitespace-nowrap select-none",H="px-3 py-3 text-left text-[10px] font-medium uppercase",ri=e=>`<ul class="dep-paths flex flex-col gap-2 px-3 py-3">${e.map(n=>`<li class="dep-path flex flex-wrap items-center gap-y-1">${n.map((a,r)=>{const o=`${a.name}@${a.version}`,s=r<n.length-1?'<span class="dep-arrow muted px-1">→</span>':"";return`<code class="dep-node text-[12px]">${S(o)}</code>${s}`}).join("")}</li>`).join("")}</ul>`,oi=e=>{const{acknowledged:t,dependencyPaths:n,explanation:i,packageName:a,packageVersion:r,remediation:o,vulnerability:s}=e,{severity:l}=s,p=ei(r,s.fixedVersions),g=s.fixedVersions.length>0?s.fixedVersions.join(", "):"—",w=o?`<code class="copyable" data-cmd="${S(o)}" title="Click to copy">${S(o)}</code>`:'<span class="muted">advisory only</span>',h=`data-severity="${l}" data-package="${S(a)}" data-advisory="${S(s.id)}"`,x=`<tr class="${t?"finding-row ack-row":"finding-row"}" ${h}>
-  <td class="sev-cell whitespace-nowrap ${z}"><span class="badge badge-${l.toLowerCase()} inline-flex items-center gap-[7px] rounded-[3px] py-1 pr-2 pl-[7px] text-[9px] font-bold uppercase">${l}</span></td>
-  <td class="${z}"><span class="marker marker-${p.kind} inline-block whitespace-nowrap align-middle text-[9px] font-bold uppercase" title="${S(p.label)}">${Qn[p.kind]}</span></td>
-  <td class="${z}"><code class="pkg font-medium">${S(a)}</code></td>
-  <td class="${z}"><code class="ver whitespace-nowrap">${S(r)}</code></td>
-  <td class="adv-cell whitespace-nowrap ${z}"><a href="${S(D(s.id))}" class="text-[12px] no-underline" rel="noreferrer noopener" target="_blank">${S(s.id)}</a>${t?' <span class="ack ml-2 inline-block px-[5px] py-px text-[9px] uppercase">acknowledged</span>':""}</td>
-  <td class="summary-cell ${z} min-w-[220px] text-[13px]">${S(s.summary)}</td>
-  <td class="${z}"><code class="fix whitespace-nowrap">${S(g)}</code></td>
-  <td class="${z}">${w}</td>
-</tr>`,m=n&&n.length>0?`<tr class="paths-row" ${h}>
-  <td colspan="8" class="p-0"><details><summary class="flex cursor-pointer items-center gap-3 px-3 py-2 select-none"><span class="intel-tag text-[9px] font-bold uppercase">[ DEPENDENCY PATHS ]</span><span class="intel-hint text-[9px] uppercase">${String(n.length)} root${n.length===1?"":"s"} reach this finding · click to expand</span></summary>${ri(n)}</details></td>
-</tr>`:"";return i?`${x}${m}
+${m}`,at(a,p),i.push(`Synced ${String(l)} advisor${l===1?"y":"ies"} to .yarnrc.yml (${String(c.length)} total)`);break}default:i.push(`Unknown package manager: ${e}`)}return i},ti="1.0",ni=e=>{const{bloomHits:t,duplicates:n,explanations:i,filtered:a,now:r,packagesScanned:o,policyDecisions:c,tool:l,unknownPolicyTokens:p,workspaceRoot:m}=e,w=a.map(u=>({acceptedRisk:u.acceptedRisk??null,dependencyPaths:u.dependencyPaths?u.dependencyPaths.map($=>$.map(b=>({name:b.name,version:b.version}))):[],name:u.name,socketAlerts:u.socketReport?.alerts??[],socketScore:u.socketReport?.score.overall??null,version:u.version,vulnerabilities:u.vulnerabilities.map($=>{const b=i.get(Ae({packageName:u.name,packageVersion:u.version,vulnerability:$}));return b?{...$,explanation:b}:{...$}})})),h=c.map(u=>({acceptedRisk:u.acceptedRisk??null,data:u.data??null,packageName:u.packageName,policy:u.policy,reason:u.reason,severity:u.severity,version:u.version})),y={accepted:w.filter(u=>u.acceptedRisk!==null).length,duplicatePackages:n.length,issues:w.filter(u=>u.acceptedRisk===null).length,policyBlocks:h.filter(u=>u.severity==="block"&&u.acceptedRisk===null).length,policyDecisions:h.length,total:w.length},x=p.map(u=>({kind:"unknown-policy",token:u}));return{bloomHits:t.map(u=>({name:u.name,version:u.version})),duplicates:n.map(u=>({name:u.name,versionCount:u.versions.length,versions:[...u.versions]})),generatedAt:(r??new Date).toISOString(),packages:o,policies:h,results:w,schemaVersion:ti,summary:y,tool:l,warnings:x,workspaceRoot:m}},ii=["CRITICAL","HIGH","MODERATE","LOW","UNKNOWN"],ai={CRITICAL:"error",HIGH:"error",LOW:"note",MODERATE:"warning",UNKNOWN:"none"},ri={CRITICAL:"critical",HIGH:"high",LOW:"low",MODERATE:"medium",UNKNOWN:"none"},oi={CRITICAL:9.5,HIGH:8,LOW:2.5,MODERATE:5.5,UNKNOWN:0},si=e=>ai[e],Fe=e=>ri[e],ci=e=>oi[e],We=e=>typeof e.cvssScore=="number"&&Number.isFinite(e.cvssScore)?e.cvssScore:ci(e.severity),li=e=>We(e).toFixed(1),M=e=>e.startsWith("CVE-")?`https://nvd.nist.gov/vuln/detail/${e}`:e.startsWith("GHSA-")?`https://github.com/advisories/${e}`:`https://osv.dev/vulnerability/${e}`,xe=e=>e.startsWith("CVE-")?"NVD":e.startsWith("GHSA-")?"GitHub Advisory Database":"OSV";var pi=`/*! tailwindcss v4.3.3 | MIT License | https://tailwindcss.com */
+@layer properties{@supports (((-webkit-hyphens:none)) and (not (margin-trim:inline))) or ((-moz-orient:inline) and (not (color:rgb(from red r g b)))){*,:before,:after,::backdrop{--tw-rotate-x:initial;--tw-rotate-y:initial;--tw-rotate-z:initial;--tw-skew-x:initial;--tw-skew-y:initial;--tw-space-y-reverse:0;--tw-border-style:solid;--tw-leading:initial;--tw-font-weight:initial;--tw-tracking:initial;--tw-ordinal:initial;--tw-slashed-zero:initial;--tw-numeric-figure:initial;--tw-numeric-spacing:initial;--tw-numeric-fraction:initial;--tw-shadow:0 0 #0000;--tw-shadow-color:initial;--tw-shadow-alpha:100%;--tw-inset-shadow:0 0 #0000;--tw-inset-shadow-color:initial;--tw-inset-shadow-alpha:100%;--tw-ring-color:initial;--tw-ring-shadow:0 0 #0000;--tw-inset-ring-color:initial;--tw-inset-ring-shadow:0 0 #0000;--tw-ring-inset:initial;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-offset-shadow:0 0 #0000;--tw-outline-style:solid;--tw-blur:initial;--tw-brightness:initial;--tw-contrast:initial;--tw-grayscale:initial;--tw-hue-rotate:initial;--tw-invert:initial;--tw-opacity:initial;--tw-saturate:initial;--tw-sepia:initial;--tw-drop-shadow:initial;--tw-drop-shadow-color:initial;--tw-drop-shadow-alpha:100%;--tw-drop-shadow-size:initial;--tw-backdrop-blur:initial;--tw-backdrop-brightness:initial;--tw-backdrop-contrast:initial;--tw-backdrop-grayscale:initial;--tw-backdrop-hue-rotate:initial;--tw-backdrop-invert:initial;--tw-backdrop-opacity:initial;--tw-backdrop-saturate:initial;--tw-backdrop-sepia:initial;--tw-duration:initial;--tw-content:""}}}@layer theme{:root,:host{--font-sans:-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", "Noto Sans", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";--font-mono:ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;--color-white:#fff;--spacing:.25rem;--text-sm:.875rem;--text-sm--line-height:calc(1.25 / .875);--font-weight-light:300;--font-weight-medium:500;--font-weight-semibold:600;--font-weight-bold:700;--tracking-tight:-.025em;--tracking-normal:0em;--leading-tight:1.25;--leading-snug:1.375;--radius-sm:.25rem;--ease-out:cubic-bezier(0, 0, .2, 1);--blur-sm:8px;--default-transition-duration:.15s;--default-transition-timing-function:cubic-bezier(.4, 0, .2, 1);--default-font-family:var(--font-sans);--default-mono-font-family:var(--font-mono)}}@layer base{*,:after,:before,::backdrop{box-sizing:border-box;border:0 solid;margin:0;padding:0}::file-selector-button{box-sizing:border-box;border:0 solid;margin:0;padding:0}html,:host{-webkit-text-size-adjust:100%;tab-size:4;line-height:1.5;font-family:var(--default-font-family,-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", "Noto Sans", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji");font-feature-settings:var(--default-font-feature-settings,normal);font-variation-settings:var(--default-font-variation-settings,normal);-webkit-tap-highlight-color:transparent}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;-webkit-text-decoration:inherit;-webkit-text-decoration:inherit;-webkit-text-decoration:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,samp,pre{font-family:var(--default-mono-font-family,ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace);font-feature-settings:var(--default-mono-font-feature-settings,normal);font-variation-settings:var(--default-mono-font-variation-settings,normal);font-size:1em}small{font-size:80%}sub,sup{vertical-align:baseline;font-size:75%;line-height:0;position:relative}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}:-moz-focusring:where(:not(iframe)){outline:auto}progress{vertical-align:baseline}summary{display:list-item}ol,ul,menu{list-style:none}img,svg,video,canvas,audio,iframe,embed,object{vertical-align:middle;display:block}img,video{max-width:100%;height:auto}button,input,select,optgroup,textarea{font:inherit;font-feature-settings:inherit;font-variation-settings:inherit;letter-spacing:inherit;color:inherit;opacity:1;background-color:#0000;border-radius:0}::file-selector-button{font:inherit;font-feature-settings:inherit;font-variation-settings:inherit;letter-spacing:inherit;color:inherit;opacity:1;background-color:#0000;border-radius:0}:where(select:is([multiple],[size])) optgroup{font-weight:bolder}:where(select:is([multiple],[size])) optgroup option{padding-inline-start:20px}::file-selector-button{margin-inline-end:4px}::placeholder{opacity:1}@supports (not ((-webkit-appearance:-apple-pay-button))) or (contain-intrinsic-size:1px){::placeholder{color:currentColor}@supports (color:color-mix(in lab, red, red)){::placeholder{color:color-mix(in oklab, currentcolor 50%, transparent)}}}textarea{resize:vertical}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-datetime-edit{padding-block:0}::-webkit-datetime-edit-year-field{padding-block:0}::-webkit-datetime-edit-month-field{padding-block:0}::-webkit-datetime-edit-day-field{padding-block:0}::-webkit-datetime-edit-hour-field{padding-block:0}::-webkit-datetime-edit-minute-field{padding-block:0}::-webkit-datetime-edit-second-field{padding-block:0}::-webkit-datetime-edit-millisecond-field{padding-block:0}::-webkit-datetime-edit-meridiem-field{padding-block:0}::-webkit-calendar-picker-indicator{line-height:1}:-moz-ui-invalid{box-shadow:none}button,input:where([type=button],[type=reset],[type=submit]){appearance:button}::file-selector-button{appearance:button}::-webkit-inner-spin-button{height:auto}::-webkit-outer-spin-button{height:auto}[hidden]:where(:not([hidden=until-found])){display:none!important}:root{--bg:#f5f5f5;--panel:#fff;--panel2:#f0f0f0;--fg:#000;--muted:#555;--faint:#707070;--border:#e0e0e0;--border2:#bdbdbd;--row-hover:#f0f0f0;--accent:#d71921;--accent-soft:#d719210d;--link:#0050c0;--critical:#d71921;--high:#8a5a00;--medium:#555;--low:#707070;--unknown:#707070;--major:#d71921;--minor:#1f7a3d;--mono:ui-monospace, "SF Mono", "JetBrains Mono", "Cascadia Mono", "Roboto Mono", Menlo, Consolas, monospace;--sans:system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", sans-serif}@media (prefers-color-scheme:dark){:root{--bg:#141414;--panel:#1c1c1c;--panel2:#242424;--fg:#fff;--muted:#b8b8b8;--faint:#8a8a8a;--border:#2e2e2e;--border2:#3e3e3e;--row-hover:#1f1f1f;--accent:#ff4d54;--accent-soft:#ff4d5414;--link:#7eb0f9;--critical:#ff4d54;--high:#e0b860;--medium:#b8b8b8;--low:#8a8a8a;--unknown:#8a8a8a;--major:#ff4d54;--minor:#6dbf80}}html[data-theme=light]{--bg:#f5f5f5;--panel:#fff;--panel2:#f0f0f0;--fg:#000;--muted:#555;--faint:#707070;--border:#e0e0e0;--border2:#bdbdbd;--row-hover:#f0f0f0;--accent:#d71921;--accent-soft:#d719210d;--link:#0050c0;--critical:#d71921;--high:#8a5a00;--medium:#555;--low:#707070;--unknown:#707070;--major:#d71921;--minor:#1f7a3d}html[data-theme=dark]{--bg:#141414;--panel:#1c1c1c;--panel2:#242424;--fg:#fff;--muted:#b8b8b8;--faint:#8a8a8a;--border:#2e2e2e;--border2:#3e3e3e;--row-hover:#1f1f1f;--accent:#ff4d54;--accent-soft:#ff4d5414;--link:#7eb0f9;--critical:#ff4d54;--high:#e0b860;--medium:#b8b8b8;--low:#8a8a8a;--unknown:#8a8a8a;--major:#ff4d54;--minor:#6dbf80}*{box-sizing:border-box}html{-webkit-text-size-adjust:100%}body{font-family:var(--sans);background-color:var(--bg);background-image:radial-gradient(circle, var(--border) .5px, transparent .5px);color:var(--fg);-webkit-font-smoothing:antialiased;font-feature-settings:"ss01";background-size:14px 14px;margin:0;padding:24px;line-height:1.5}a{color:var(--link);text-decoration:none}code{font-family:var(--mono);font-size:12px}h2{font-family:var(--mono);letter-spacing:.16em;text-transform:uppercase;color:var(--muted);margin:48px 0 14px;font-size:11px;font-weight:500}input:where([type=text]),input:where(:not([type])),input:where([type=email]),input:where([type=url]),input:where([type=password]),input:where([type=number]),input:where([type=date]),input:where([type=datetime-local]),input:where([type=month]),input:where([type=search]),input:where([type=tel]),input:where([type=time]),input:where([type=week]),select:where([multiple]),textarea,select{appearance:none;--tw-shadow:0 0 #0000;background-color:#fff;border-width:1px;border-color:oklch(55.1% .027 264.364);border-radius:0;padding:.5rem .75rem;font-size:1rem;line-height:1.5rem}:is(input:where([type=text]),input:where(:not([type])),input:where([type=email]),input:where([type=url]),input:where([type=password]),input:where([type=number]),input:where([type=date]),input:where([type=datetime-local]),input:where([type=month]),input:where([type=search]),input:where([type=tel]),input:where([type=time]),input:where([type=week]),select:where([multiple]),textarea,select):focus{outline-offset:2px;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:oklch(54.6% .245 262.881);--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow);border-color:oklch(54.6% .245 262.881);outline:2px solid #0000}input::placeholder,textarea::placeholder{color:oklch(55.1% .027 264.364);opacity:1}::-webkit-datetime-edit-fields-wrapper{padding:0}::-webkit-date-and-time-value{min-height:1.5em;text-align:inherit}::-webkit-datetime-edit{display:inline-flex}::-webkit-datetime-edit{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-year-field{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-month-field{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-day-field{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-hour-field{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-minute-field{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-second-field{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-millisecond-field{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-meridiem-field{padding-top:0;padding-bottom:0}select{-webkit-print-color-adjust:exact;print-color-adjust:exact;background-image:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' fill='none' viewBox='0 0 20 20'%3e%3cpath stroke='oklch(55.1%25 0.027 264.364)' stroke-linecap='round' stroke-linejoin='round' stroke-width='1.5' d='M6 8l4 4 4-4'/%3e%3c/svg%3e");background-position:right .5rem center;background-repeat:no-repeat;background-size:1.5em 1.5em;padding-right:2.5rem}select:where([multiple]),select:where([size]:not([size="1"])){background-image:initial;background-position:initial;background-repeat:unset;background-size:initial;print-color-adjust:unset;padding-right:.75rem}input:where([type=checkbox]),input:where([type=radio]){appearance:none;-webkit-print-color-adjust:exact;print-color-adjust:exact;vertical-align:middle;-webkit-user-select:none;user-select:none;color:oklch(54.6% .245 262.881);--tw-shadow:0 0 #0000;background-color:#fff;background-origin:border-box;border-width:1px;border-color:oklch(55.1% .027 264.364);flex-shrink:0;width:1rem;height:1rem;padding:0;display:inline-block}input:where([type=checkbox]){border-radius:0}input:where([type=radio]){border-radius:100%}input:where([type=checkbox]):focus,input:where([type=radio]):focus{outline-offset:2px;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:2px;--tw-ring-offset-color:#fff;--tw-ring-color:oklch(54.6% .245 262.881);--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(2px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow);outline:2px solid #0000}input:where([type=checkbox]):checked,input:where([type=radio]):checked{background-color:currentColor;background-position:50%;background-repeat:no-repeat;background-size:100% 100%;border-color:#0000}input:where([type=checkbox]):checked{background-image:url("data:image/svg+xml,%3csvg viewBox='0 0 16 16' fill='white' xmlns='http://www.w3.org/2000/svg'%3e%3cpath d='M12.207 4.793a1 1 0 010 1.414l-5 5a1 1 0 01-1.414 0l-2-2a1 1 0 011.414-1.414L6.5 9.086l4.293-4.293a1 1 0 011.414 0z'/%3e%3c/svg%3e")}@media (forced-colors:active){input:where([type=checkbox]):checked{appearance:auto}}input:where([type=radio]):checked{background-image:url("data:image/svg+xml,%3csvg viewBox='0 0 16 16' fill='white' xmlns='http://www.w3.org/2000/svg'%3e%3ccircle cx='8' cy='8' r='3'/%3e%3c/svg%3e")}@media (forced-colors:active){input:where([type=radio]):checked{appearance:auto}}input:where([type=checkbox]):checked:hover,input:where([type=checkbox]):checked:focus,input:where([type=radio]):checked:hover,input:where([type=radio]):checked:focus{background-color:currentColor;border-color:#0000}input:where([type=checkbox]):indeterminate{background-color:currentColor;background-image:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' fill='none' viewBox='0 0 16 16'%3e%3cpath stroke='white' stroke-linecap='round' stroke-linejoin='round' stroke-width='2' d='M4 8h8'/%3e%3c/svg%3e");background-position:50%;background-repeat:no-repeat;background-size:100% 100%;border-color:#0000}@media (forced-colors:active){input:where([type=checkbox]):indeterminate{appearance:auto}}input:where([type=checkbox]):indeterminate:hover,input:where([type=checkbox]):indeterminate:focus{background-color:currentColor;border-color:#0000}input:where([type=file]){background:unset;border-color:inherit;font-size:unset;line-height:inherit;border-width:0;border-radius:0;padding:0}input:where([type=file]):focus{outline:1px solid buttontext;outline:1px auto -webkit-focus-ring-color}}@layer components{.masthead{border-bottom:1px solid var(--border)}.brand{font-family:var(--sans);color:var(--fg);font-size:clamp(30px,5vw,52px);font-weight:600}.brand .slash{color:var(--accent)}.brand .sub{font-family:var(--mono);letter-spacing:.22em;color:var(--faint)}.chip{font-family:var(--mono);letter-spacing:.08em;color:var(--muted);border:1px solid var(--border2)}.tbtn{font-family:var(--mono);letter-spacing:.08em;color:var(--muted);border:1px solid var(--border2);transition:border-color .2s,color .2s}.tbtn:hover{color:var(--fg);border-color:var(--fg)}.tbtn-theme{min-width:28px}.tbtn-theme .ticon{line-height:0}.tbtn-theme .ticon-sun{display:none}@media (prefers-color-scheme:dark){.tbtn-theme .ticon-moon{display:none}.tbtn-theme .ticon-sun{display:inline-flex}}html[data-theme=light] .tbtn-theme .ticon-moon{display:inline-flex}html[data-theme=light] .tbtn-theme .ticon-sun,html[data-theme=dark] .tbtn-theme .ticon-moon{display:none}html[data-theme=dark] .tbtn-theme .ticon-sun{display:inline-flex}.verdict{padding:56px 0 36px}.verdict .vnum{font-family:var(--mono);letter-spacing:-.04em;color:var(--fg);font-variant-numeric:tabular-nums;font-size:clamp(64px,14vw,148px);line-height:.85}.verdict .vsub{font-family:var(--mono);letter-spacing:.16em;color:var(--faint)}.verdict-crit .vnum{color:var(--accent)}.verdict-high .vnum{color:var(--high)}.debugbar{border-bottom:1px solid var(--border)}.dseg+.dseg{border-left:1px solid var(--border);padding-left:1.75rem}.dseg .dk{font-family:var(--mono);letter-spacing:.13em;color:var(--faint)}.dseg .dv{font-family:var(--mono);color:var(--fg);font-variant-numeric:tabular-nums;letter-spacing:-.01em;font-weight:400}.dseg .dvsep{color:var(--faint)}.dseg .dot{background:var(--unknown)}.dseg-critical .dv{color:var(--critical)}.dseg-high .dv{color:var(--high)}.dseg-moderate .dv{color:var(--medium)}.dseg-low .dv{color:var(--low)}.dseg-ok .dot{background:var(--minor)}.dseg-ok .dv,.dseg-fixable .dv{color:var(--minor)}.field{border-bottom:1px solid var(--border2);background:0 0;transition:border-color .2s}.field:focus-within{border-bottom-color:var(--fg)}.field .prompt{font-family:var(--mono);letter-spacing:.12em;color:var(--faint)}.field input,.field select{font-family:var(--mono);color:var(--fg)}.field.sel{margin-left:32px}.field select{text-transform:uppercase;letter-spacing:.06em;font-size:11px}.field select option{background:var(--panel);color:var(--fg);text-transform:none;letter-spacing:0}.field input::placeholder{color:var(--faint);text-transform:uppercase;letter-spacing:.06em;font-size:11px}#findings{border-collapse:collapse}#findings thead th{font-family:var(--mono);letter-spacing:.11em;color:var(--faint);background:var(--bg);border-bottom:1px solid var(--border2)}#findings td,#findings tbody tr:last-child td{border-bottom:1px solid var(--border)}.finding-row:hover td{background:var(--row-hover)}.sev-cell{box-shadow:inset 2px 0 0 var(--border2)}tr[data-severity=CRITICAL] .sev-cell{box-shadow:inset 2px 0 0 var(--critical)}tr[data-severity=HIGH] .sev-cell{box-shadow:inset 2px 0 0 var(--high)}tr[data-severity=MODERATE] .sev-cell{box-shadow:inset 2px 0 0 var(--medium)}tr[data-severity=LOW] .sev-cell{box-shadow:inset 2px 0 0 var(--low)}tr[data-severity=UNKNOWN] .sev-cell{box-shadow:inset 2px 0 0 var(--unknown)}.ack-row td{opacity:.4}.ack-row .summary-cell,.ack-row a{color:var(--muted)}code.pkg{color:var(--fg)}code.ver,code.fix{color:var(--muted)}code.fix{color:var(--minor)}code.copyable{cursor:copy;padding-inline:calc(var(--spacing) * 2);padding-block:var(--spacing);white-space:nowrap;color:var(--fg);border:1px solid var(--border2);background:0 0;border-radius:3px;font-size:12px;transition:border-color .2s,color .2s;display:inline-block}code.copyable:hover{border-color:var(--fg)}code.copyable.copied{color:var(--minor);border-color:var(--minor)}.adv-cell a{font-family:var(--mono);color:var(--link);border-bottom:1px solid #0000;transition:border-color .2s}.adv-cell a:hover{border-bottom-color:var(--link)}.summary-cell{font-family:var(--sans);color:var(--muted);line-height:1.5}.muted{font-family:var(--mono);letter-spacing:.06em;color:var(--faint)}.ack{font-family:var(--mono);letter-spacing:.12em;color:var(--faint);border:1px solid var(--border2)}.badge{font-family:var(--mono);letter-spacing:.1em;border:1px solid}.badge:before{content:"";background:currentColor;width:5px;height:5px}.badge-critical{color:var(--critical)}.badge-high{color:var(--high)}.badge-moderate{color:var(--medium)}.badge-low{color:var(--low)}.badge-unknown{color:var(--unknown)}.marker{font-family:var(--mono);letter-spacing:.09em}.marker-major{color:var(--major)}.marker-minor-patch{color:var(--minor)}.marker-unknown{color:var(--unknown)}.empty{font-family:var(--mono);letter-spacing:.1em;color:var(--faint);border-top:1px solid var(--border);border-bottom:1px solid var(--border)}.clean{padding-top:96px;padding-bottom:96px}.clean .big{font-family:var(--mono);letter-spacing:-.03em;color:var(--fg);font-size:clamp(56px,12vw,128px);line-height:1}.clean .sub{font-family:var(--mono);letter-spacing:.16em;color:var(--faint)}#policies{border-collapse:collapse}#policies th{font-family:var(--mono);letter-spacing:.12em;color:var(--faint);background:var(--bg);border-bottom:1px solid var(--border2)}#policies td,#policies tr:last-child td{border-bottom:1px solid var(--border)}#policies code{letter-spacing:.04em;color:var(--muted)}.policy-badge{font-family:var(--mono);letter-spacing:.1em;border:1px solid}.policy-badge:before{content:"";background:currentColor;width:5px;height:5px}.policy-block{color:var(--accent)}.policy-warn{color:var(--high)}.policy-info{color:var(--muted)}.hint{font-family:var(--mono);letter-spacing:.1em;color:var(--faint)}.kbd{font-family:var(--mono);letter-spacing:.06em;color:var(--muted);background:var(--panel2);border:1px solid var(--border2)}.explain-row td{border-top:1px dotted var(--accent);border-bottom:1px solid var(--border);box-shadow:inset 2px 0 0 var(--accent);background:0 0}.finding-row:has(+.explain-row) td{border-bottom:none}.explain-row details{background:0 0}.explain-row summary::-webkit-details-marker{display:none}.intel-tag{font-family:var(--mono);letter-spacing:.16em;color:var(--accent)}.intel-hint{font-family:var(--mono);letter-spacing:.1em;color:var(--muted)}.explain-row details[open] summary .intel-hint:after{content:" [-]"}.explain-row details:not([open]) summary .intel-hint:after{content:" [+]"}.explain-body{animation:.2s both rise}.intel-key{font-family:var(--mono);letter-spacing:.12em;color:var(--accent)}.intel-val{font-family:var(--sans);color:var(--fg);line-height:1.55}.intel-prose{color:var(--muted);grid-template-columns:1fr}.intel-prose .intel-val{color:var(--muted)}.sig{font-family:var(--mono);letter-spacing:.1em;color:var(--faint);border-top:1px solid var(--border)}.sig b{color:var(--muted);font-weight:500}.sig-by{color:var(--muted)}.anolilab-logo{width:auto;height:13px;fill:var(--fg)}.anolilab-accent{fill:#dfff1b}@keyframes rise{0%{opacity:0;transform:translateY(4px)}to{opacity:1;transform:none}}@media (prefers-reduced-motion:reduce){.explain-body{animation:none}}}@layer utilities{.pointer-events-auto{pointer-events:auto}.pointer-events-none{pointer-events:none}.collapse{visibility:collapse}.invisible{visibility:hidden}.visible{visibility:visible}.absolute{position:absolute}.fixed{position:fixed}.relative{position:relative}.static{position:static}.sticky{position:sticky}.inset-0{inset:0}.inset-x-0{inset-inline:0}.top-0{top:0}.top-3{top:calc(var(--spacing) * 3)}.top-4{top:calc(var(--spacing) * 4)}.top-full{top:100%}.right-0{right:0}.right-4{right:calc(var(--spacing) * 4)}.bottom-4{bottom:calc(var(--spacing) * 4)}.bottom-5{bottom:calc(var(--spacing) * 5)}.left-0{left:0}.left-4{left:calc(var(--spacing) * 4)}.isolate{isolation:isolate}.z-20{z-index:20}.z-30{z-index:30}.z-\\[2\\]{z-index:2}.container{width:100%}@media (min-width:40rem){.container{max-width:40rem}}@media (min-width:48rem){.container{max-width:48rem}}@media (min-width:64rem){.container{max-width:64rem}}@media (min-width:80rem){.container{max-width:80rem}}@media (min-width:96rem){.container{max-width:96rem}}.m-8{margin:calc(var(--spacing) * 8)}.m-9{margin:calc(var(--spacing) * 9)}.mx-1{margin-inline:var(--spacing)}.mx-12{margin-inline:calc(var(--spacing) * 12)}.mx-\\[0\\.12em\\]{margin-inline:.12em}.mx-auto{margin-inline:auto}.mt-1{margin-top:var(--spacing)}.mt-2{margin-top:calc(var(--spacing) * 2)}.mt-3{margin-top:calc(var(--spacing) * 3)}.mt-4{margin-top:calc(var(--spacing) * 4)}.mt-6{margin-top:calc(var(--spacing) * 6)}.mt-12{margin-top:calc(var(--spacing) * 12)}.mb-1{margin-bottom:var(--spacing)}.mb-2{margin-bottom:calc(var(--spacing) * 2)}.mb-3{margin-bottom:calc(var(--spacing) * 3)}.mb-4{margin-bottom:calc(var(--spacing) * 4)}.mb-6{margin-bottom:calc(var(--spacing) * 6)}.mb-10{margin-bottom:calc(var(--spacing) * 10)}.ml-2{margin-left:calc(var(--spacing) * 2)}.ml-8{margin-left:calc(var(--spacing) * 8)}.ml-auto{margin-left:auto}.block{display:block}.contents{display:contents}.flex{display:flex}.grid{display:grid}.hidden{display:none}.inline{display:inline}.inline-block{display:inline-block}.inline-flex{display:inline-flex}.table{display:table}.size-\\[7px\\]{width:7px;height:7px}.h-2{height:calc(var(--spacing) * 2)}.h-5{height:calc(var(--spacing) * 5)}.h-7{height:calc(var(--spacing) * 7)}.h-9{height:calc(var(--spacing) * 9)}.h-10{height:calc(var(--spacing) * 10)}.h-11{height:calc(var(--spacing) * 11)}.h-\\[6px\\]{height:6px}.h-\\[7px\\]{height:7px}.h-\\[8px\\]{height:8px}.h-\\[10px\\]{height:10px}.h-\\[18px\\]{height:18px}.h-full{height:100%}.h-px{height:1px}.max-h-72{max-height:calc(var(--spacing) * 72)}.min-h-\\[400px\\]{min-height:400px}.min-h-\\[480px\\]{min-height:480px}.min-h-screen{min-height:100vh}.w-2{width:calc(var(--spacing) * 2)}.w-3{width:calc(var(--spacing) * 3)}.w-4{width:calc(var(--spacing) * 4)}.w-7{width:calc(var(--spacing) * 7)}.w-9{width:calc(var(--spacing) * 9)}.w-\\[7px\\]{width:7px}.w-\\[8px\\]{width:8px}.w-full{width:100%}.w-px{width:1px}.max-w-\\[380px\\]{max-width:380px}.max-w-\\[1080px\\]{max-width:1080px}.min-w-0{min-width:0}.min-w-5{min-width:calc(var(--spacing) * 5)}.min-w-\\[200px\\]{min-width:200px}.min-w-\\[220px\\]{min-width:220px}.min-w-\\[260px\\]{min-width:260px}.flex-1{flex:1}.flex-\\[1_1_280px\\]{flex:280px}.flex-auto{flex:auto}.flex-none{flex:none}.shrink{flex-shrink:1}.shrink-0{flex-shrink:0}.grow{flex-grow:1}.caption-bottom{caption-side:bottom}.border-collapse{border-collapse:collapse}.transform{transform:var(--tw-rotate-x,) var(--tw-rotate-y,) var(--tw-rotate-z,) var(--tw-skew-x,) var(--tw-skew-y,)}.cursor-move{cursor:move}.cursor-pointer{cursor:pointer}.resize{resize:both}.grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.grid-cols-\\[72px_1fr\\]{grid-template-columns:72px 1fr}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-baseline{align-items:baseline}.items-center{align-items:center}.items-end{align-items:flex-end}.items-start{align-items:flex-start}.items-stretch{align-items:stretch}.justify-between{justify-content:space-between}.justify-center{justify-content:center}.gap-0{gap:0}.gap-1{gap:var(--spacing)}.gap-1\\.5{gap:calc(var(--spacing) * 1.5)}.gap-2{gap:calc(var(--spacing) * 2)}.gap-3{gap:calc(var(--spacing) * 3)}.gap-4{gap:calc(var(--spacing) * 4)}.gap-6{gap:calc(var(--spacing) * 6)}.gap-8{gap:calc(var(--spacing) * 8)}.gap-12{gap:calc(var(--spacing) * 12)}.gap-16{gap:calc(var(--spacing) * 16)}.gap-\\[0\\.65rem\\]{gap:.65rem}.gap-\\[2px\\]{gap:2px}.gap-\\[7px\\]{gap:7px}.gap-px{gap:1px}:where(.space-y-0\\.5>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * .5) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * .5) * calc(1 - var(--tw-space-y-reverse)))}.gap-x-3{column-gap:calc(var(--spacing) * 3)}.gap-x-6{column-gap:calc(var(--spacing) * 6)}.gap-y-1{row-gap:var(--spacing)}.gap-y-2{row-gap:calc(var(--spacing) * 2)}.gap-y-3{row-gap:calc(var(--spacing) * 3)}.self-center{align-self:center}.truncate{text-overflow:ellipsis;white-space:nowrap;overflow:hidden}.overflow-auto{overflow:auto}.overflow-y-auto{overflow-y:auto}.rounded{border-radius:.25rem}.rounded-\\[3px\\]{border-radius:3px}.rounded-\\[4px\\]{border-radius:4px}.rounded-full{border-radius:3.40282e38px}.rounded-sm{border-radius:var(--radius-sm)}.border{border-style:var(--tw-border-style);border-width:1px}.border-0{border-style:var(--tw-border-style);border-width:0}.border-t{border-top-style:var(--tw-border-style);border-top-width:1px}.border-b{border-bottom-style:var(--tw-border-style);border-bottom-width:1px}.border-l-2{border-left-style:var(--tw-border-style);border-left-width:2px}.border-dashed{--tw-border-style:dashed;border-style:dashed}.bg-transparent{background-color:#0000}.p-0{padding:0}.p-5{padding:calc(var(--spacing) * 5)}.p-6{padding:calc(var(--spacing) * 6)}.px-0{padding-inline:0}.px-0\\.5{padding-inline:calc(var(--spacing) * .5)}.px-1{padding-inline:var(--spacing)}.px-1\\.5{padding-inline:calc(var(--spacing) * 1.5)}.px-2{padding-inline:calc(var(--spacing) * 2)}.px-3{padding-inline:calc(var(--spacing) * 3)}.px-4{padding-inline:calc(var(--spacing) * 4)}.px-5{padding-inline:calc(var(--spacing) * 5)}.px-6{padding-inline:calc(var(--spacing) * 6)}.px-8{padding-inline:calc(var(--spacing) * 8)}.px-12{padding-inline:calc(var(--spacing) * 12)}.px-\\[5px\\]{padding-inline:5px}.px-\\[6px\\]{padding-inline:6px}.py-0\\.5{padding-block:calc(var(--spacing) * .5)}.py-1{padding-block:var(--spacing)}.py-2{padding-block:calc(var(--spacing) * 2)}.py-2\\.5{padding-block:calc(var(--spacing) * 2.5)}.py-3{padding-block:calc(var(--spacing) * 3)}.py-4{padding-block:calc(var(--spacing) * 4)}.py-5{padding-block:calc(var(--spacing) * 5)}.py-6{padding-block:calc(var(--spacing) * 6)}.py-8{padding-block:calc(var(--spacing) * 8)}.py-12{padding-block:calc(var(--spacing) * 12)}.py-16{padding-block:calc(var(--spacing) * 16)}.py-\\[3px\\]{padding-block:3px}.py-px{padding-block:1px}.pt-0\\.5{padding-top:calc(var(--spacing) * .5)}.pt-1{padding-top:var(--spacing)}.pt-2{padding-top:calc(var(--spacing) * 2)}.pt-5{padding-top:calc(var(--spacing) * 5)}.pt-7{padding-top:calc(var(--spacing) * 7)}.pt-8{padding-top:calc(var(--spacing) * 8)}.pt-12{padding-top:calc(var(--spacing) * 12)}.pr-0{padding-right:0}.pr-1{padding-right:var(--spacing)}.pr-2{padding-right:calc(var(--spacing) * 2)}.pr-3{padding-right:calc(var(--spacing) * 3)}.pr-6{padding-right:calc(var(--spacing) * 6)}.pr-1234{padding-right:calc(var(--spacing) * 1234)}.pb-1{padding-bottom:var(--spacing)}.pb-1\\.5{padding-bottom:calc(var(--spacing) * 1.5)}.pb-4{padding-bottom:calc(var(--spacing) * 4)}.pb-5{padding-bottom:calc(var(--spacing) * 5)}.pb-6{padding-bottom:calc(var(--spacing) * 6)}.pb-8{padding-bottom:calc(var(--spacing) * 8)}.pb-12{padding-bottom:calc(var(--spacing) * 12)}.pl-0{padding-left:0}.pl-3{padding-left:calc(var(--spacing) * 3)}.pl-4{padding-left:calc(var(--spacing) * 4)}.pl-\\[7px\\]{padding-left:7px}.text-center{text-align:center}.text-left{text-align:left}.text-right{text-align:right}.align-middle{vertical-align:middle}.align-top{vertical-align:top}.font-mono{font-family:var(--font-mono)}.font-sans{font-family:var(--font-sans)}.text-sm{font-size:var(--text-sm);line-height:var(--tw-leading,var(--text-sm--line-height))}.text-\\[9px\\]{font-size:9px}.text-\\[10px\\]{font-size:10px}.text-\\[11px\\]{font-size:11px}.text-\\[12px\\]{font-size:12px}.text-\\[13px\\]{font-size:13px}.text-\\[14px\\]{font-size:14px}.text-\\[15px\\]{font-size:15px}.text-\\[22px\\]{font-size:22px}.text-\\[28px\\]{font-size:28px}.text-\\[44px\\]{font-size:44px}.text-\\[72px\\]{font-size:72px}.text-\\[clamp\\(28px\\,5vw\\,52px\\)\\]{font-size:clamp(28px,5vw,52px)}.leading-\\[0\\.9\\]{--tw-leading:.9;line-height:.9}.leading-none{--tw-leading:1;line-height:1}.leading-snug{--tw-leading:var(--leading-snug);line-height:var(--leading-snug)}.leading-tight{--tw-leading:var(--leading-tight);line-height:var(--leading-tight)}.font-bold{--tw-font-weight:var(--font-weight-bold);font-weight:var(--font-weight-bold)}.font-light{--tw-font-weight:var(--font-weight-light);font-weight:var(--font-weight-light)}.font-medium{--tw-font-weight:var(--font-weight-medium);font-weight:var(--font-weight-medium)}.font-semibold{--tw-font-weight:var(--font-weight-semibold);font-weight:var(--font-weight-semibold)}.tracking-\\[-0\\.02em\\]{--tw-tracking:-.02em;letter-spacing:-.02em}.tracking-\\[0\\.1em\\]{--tw-tracking:.1em;letter-spacing:.1em}.tracking-\\[0\\.05em\\]{--tw-tracking:.05em;letter-spacing:.05em}.tracking-\\[0\\.08em\\]{--tw-tracking:.08em;letter-spacing:.08em}.tracking-\\[0\\.11em\\]{--tw-tracking:.11em;letter-spacing:.11em}.tracking-\\[0\\.12em\\]{--tw-tracking:.12em;letter-spacing:.12em}.tracking-\\[0\\.15em\\]{--tw-tracking:.15em;letter-spacing:.15em}.tracking-\\[0\\.16em\\]{--tw-tracking:.16em;letter-spacing:.16em}.tracking-\\[0\\.22em\\]{--tw-tracking:.22em;letter-spacing:.22em}.tracking-normal{--tw-tracking:var(--tracking-normal);letter-spacing:var(--tracking-normal)}.tracking-tight{--tw-tracking:var(--tracking-tight);letter-spacing:var(--tracking-tight)}.break-words{overflow-wrap:break-word}.break-all{word-break:break-all}.whitespace-nowrap{white-space:nowrap}.capitalize{text-transform:capitalize}.lowercase{text-transform:lowercase}.normal-case{text-transform:none}.uppercase{text-transform:uppercase}.italic{font-style:italic}.tabular-nums{--tw-numeric-spacing:tabular-nums;font-variant-numeric:var(--tw-ordinal,) var(--tw-slashed-zero,) var(--tw-numeric-figure,) var(--tw-numeric-spacing,) var(--tw-numeric-fraction,)}.no-underline{text-decoration-line:none}.opacity-40{opacity:.4}.opacity-70{opacity:.7}.shadow{--tw-shadow:0 1px 3px 0 var(--tw-shadow-color,#0000001a), 0 1px 2px -1px var(--tw-shadow-color,#0000001a);box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow)}.shadow-\\[0_4px_12px_rgba\\(0\\,0\\,0\\,0\\.08\\)\\]{--tw-shadow:0 4px 12px var(--tw-shadow-color,#00000014);box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow)}.shadow-\\[0_8px_24px_rgba\\(0\\,0\\,0\\,0\\.12\\)\\]{--tw-shadow:0 8px 24px var(--tw-shadow-color,#0000001f);box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow)}.ring{--tw-ring-shadow:var(--tw-ring-inset,) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color,currentcolor);box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow)}.outline{outline-style:var(--tw-outline-style);outline-width:1px}.outline-0{outline-style:var(--tw-outline-style);outline-width:0}.blur{--tw-blur:blur(8px);filter:var(--tw-blur,) var(--tw-brightness,) var(--tw-contrast,) var(--tw-grayscale,) var(--tw-hue-rotate,) var(--tw-invert,) var(--tw-saturate,) var(--tw-sepia,) var(--tw-drop-shadow,)}.invert{--tw-invert:invert(100%);filter:var(--tw-blur,) var(--tw-brightness,) var(--tw-contrast,) var(--tw-grayscale,) var(--tw-hue-rotate,) var(--tw-invert,) var(--tw-saturate,) var(--tw-sepia,) var(--tw-drop-shadow,)}.filter{filter:var(--tw-blur,) var(--tw-brightness,) var(--tw-contrast,) var(--tw-grayscale,) var(--tw-hue-rotate,) var(--tw-invert,) var(--tw-saturate,) var(--tw-sepia,) var(--tw-drop-shadow,)}.backdrop-blur-sm{--tw-backdrop-blur:blur(var(--blur-sm));-webkit-backdrop-filter:var(--tw-backdrop-blur,) var(--tw-backdrop-brightness,) var(--tw-backdrop-contrast,) var(--tw-backdrop-grayscale,) var(--tw-backdrop-hue-rotate,) var(--tw-backdrop-invert,) var(--tw-backdrop-opacity,) var(--tw-backdrop-saturate,) var(--tw-backdrop-sepia,);backdrop-filter:var(--tw-backdrop-blur,) var(--tw-backdrop-brightness,) var(--tw-backdrop-contrast,) var(--tw-backdrop-grayscale,) var(--tw-backdrop-hue-rotate,) var(--tw-backdrop-invert,) var(--tw-backdrop-opacity,) var(--tw-backdrop-saturate,) var(--tw-backdrop-sepia,)}.transition{transition-property:color,background-color,border-color,outline-color,text-decoration-color,fill,stroke,--tw-gradient-from,--tw-gradient-via,--tw-gradient-to,opacity,box-shadow,transform,translate,scale,rotate,filter,-webkit-backdrop-filter,backdrop-filter,display,content-visibility,overlay,pointer-events;transition-timing-function:var(--tw-ease,var(--default-transition-timing-function));transition-duration:var(--tw-duration,var(--default-transition-duration))}.transition-colors{transition-property:color,background-color,border-color,outline-color,text-decoration-color,fill,stroke,--tw-gradient-from,--tw-gradient-via,--tw-gradient-to;transition-timing-function:var(--tw-ease,var(--default-transition-timing-function));transition-duration:var(--tw-duration,var(--default-transition-duration))}.duration-150{--tw-duration:.15s;transition-duration:.15s}.select-none{-webkit-user-select:none;user-select:none}.\\[notifications\\:\\<id\\>\\]{notifications:<id>}.\\[notifications\\:slack\\]{notifications:slack}.\\[notifications\\:teams\\]{notifications:teams}.\\[verdaccio\\:dry-run\\]{verdaccio:dry-run}.group-data-\\[state\\=off\\]\\:opacity-30:is(:where(.group)[data-state=off] *){opacity:.3}.before\\:absolute:before{content:var(--tw-content);position:absolute}.before\\:left-0:before{content:var(--tw-content);left:0}.before\\:content-\\[\\'→\\'\\]:before{--tw-content:"→";content:var(--tw-content)}.after\\:ml-auto:after{content:var(--tw-content);margin-left:auto}.after\\:font-mono:after{content:var(--tw-content);font-family:var(--font-mono)}.after\\:text-\\[9px\\]:after{content:var(--tw-content);font-size:9px}.after\\:tracking-\\[0\\.1em\\]:after{content:var(--tw-content);--tw-tracking:.1em;letter-spacing:.1em}.after\\:content-\\[\\'ON\\'\\]:after{--tw-content:"ON";content:var(--tw-content)}.last\\:border-b-0:last-child{border-bottom-style:var(--tw-border-style);border-bottom-width:0}@media (hover:hover){.hover\\:text-white:hover{color:var(--color-white)}.hover\\:opacity-90:hover{opacity:.9}}.focus-visible\\:ring-1:focus-visible{--tw-ring-shadow:var(--tw-ring-inset,) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color,currentcolor);box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow)}.focus-visible\\:outline-none:focus-visible{--tw-outline-style:none;outline-style:none}.disabled\\:pointer-events-none:disabled{pointer-events:none}.disabled\\:opacity-40:disabled{opacity:.4}.data-\\[open\\=false\\]\\:hidden[data-open=false]{display:none}.data-\\[pinned\\=true\\]\\:pointer-events-auto[data-pinned=true]{pointer-events:auto}.data-\\[state\\=off\\]\\:line-through[data-state=off]{text-decoration-line:line-through}.data-\\[state\\=off\\]\\:after\\:content-\\[\\'OFF\\'\\][data-state=off]:after{--tw-content:"OFF";content:var(--tw-content)}@media (min-width:40rem){.sm\\:min-w-\\[320px\\]{min-width:320px}}@media (min-width:48rem){.md\\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.md\\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}.md\\:grid-cols-\\[1\\.4fr_1fr\\]{grid-template-columns:1.4fr 1fr}}.\\[\\&_svg\\]\\:size-\\[14px\\] svg{width:14px;height:14px}.\\[\\&_svg\\]\\:shrink-0 svg{flex-shrink:0}.\\[\\&_tr\\]\\:border-b-0 tr{border-bottom-style:var(--tw-border-style);border-bottom-width:0}.\\[\\&\\>\\*\\+\\*\\]\\:ml-6>*+*{margin-left:calc(var(--spacing) * 6)}.\\[\\&\\>\\*\\+\\*\\]\\:border-l>*+*{border-left-style:var(--tw-border-style);border-left-width:1px}.\\[\\&\\>\\*\\+\\*\\]\\:pl-6>*+*{padding-left:calc(var(--spacing) * 6)}.\\[\\&\\>td\\]\\:border-b>td{border-bottom-style:var(--tw-border-style);border-bottom-width:1px}}@property --tw-rotate-x{syntax:"*";inherits:false}@property --tw-rotate-y{syntax:"*";inherits:false}@property --tw-rotate-z{syntax:"*";inherits:false}@property --tw-skew-x{syntax:"*";inherits:false}@property --tw-skew-y{syntax:"*";inherits:false}@property --tw-space-y-reverse{syntax:"*";inherits:false;initial-value:0}@property --tw-border-style{syntax:"*";inherits:false;initial-value:solid}@property --tw-leading{syntax:"*";inherits:false}@property --tw-font-weight{syntax:"*";inherits:false}@property --tw-tracking{syntax:"*";inherits:false}@property --tw-ordinal{syntax:"*";inherits:false}@property --tw-slashed-zero{syntax:"*";inherits:false}@property --tw-numeric-figure{syntax:"*";inherits:false}@property --tw-numeric-spacing{syntax:"*";inherits:false}@property --tw-numeric-fraction{syntax:"*";inherits:false}@property --tw-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-shadow-color{syntax:"*";inherits:false}@property --tw-shadow-alpha{syntax:"<percentage>";inherits:false;initial-value:100%}@property --tw-inset-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-inset-shadow-color{syntax:"*";inherits:false}@property --tw-inset-shadow-alpha{syntax:"<percentage>";inherits:false;initial-value:100%}@property --tw-ring-color{syntax:"*";inherits:false}@property --tw-ring-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-inset-ring-color{syntax:"*";inherits:false}@property --tw-inset-ring-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-ring-inset{syntax:"*";inherits:false}@property --tw-ring-offset-width{syntax:"<length>";inherits:false;initial-value:0}@property --tw-ring-offset-color{syntax:"*";inherits:false;initial-value:#fff}@property --tw-ring-offset-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-outline-style{syntax:"*";inherits:false;initial-value:solid}@property --tw-blur{syntax:"*";inherits:false}@property --tw-brightness{syntax:"*";inherits:false}@property --tw-contrast{syntax:"*";inherits:false}@property --tw-grayscale{syntax:"*";inherits:false}@property --tw-hue-rotate{syntax:"*";inherits:false}@property --tw-invert{syntax:"*";inherits:false}@property --tw-opacity{syntax:"*";inherits:false}@property --tw-saturate{syntax:"*";inherits:false}@property --tw-sepia{syntax:"*";inherits:false}@property --tw-drop-shadow{syntax:"*";inherits:false}@property --tw-drop-shadow-color{syntax:"*";inherits:false}@property --tw-drop-shadow-alpha{syntax:"<percentage>";inherits:false;initial-value:100%}@property --tw-drop-shadow-size{syntax:"*";inherits:false}@property --tw-backdrop-blur{syntax:"*";inherits:false}@property --tw-backdrop-brightness{syntax:"*";inherits:false}@property --tw-backdrop-contrast{syntax:"*";inherits:false}@property --tw-backdrop-grayscale{syntax:"*";inherits:false}@property --tw-backdrop-hue-rotate{syntax:"*";inherits:false}@property --tw-backdrop-invert{syntax:"*";inherits:false}@property --tw-backdrop-opacity{syntax:"*";inherits:false}@property --tw-backdrop-saturate{syntax:"*";inherits:false}@property --tw-backdrop-sepia{syntax:"*";inherits:false}@property --tw-duration{syntax:"*";inherits:false}@property --tw-content{syntax:"*";inherits:false;initial-value:""}`;const di=pi,S=e=>e.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;").replaceAll("'","&#39;"),fi={major:"major bump","minor-patch":"safe",unknown:"no fix"},gi=(e,t)=>{if(t.length===0)return{kind:"unknown",label:"no fix"};const n=D.coerce(e);if(!n)return{kind:"unknown",label:"non-semver"};let i,a;for(const r of t){const o=D.coerce(r);if(!o)continue;const c=D.diff(n,o);c==="major"||c==="premajor"?i||(i=r):(c==="minor"||c==="patch"||c==="preminor"||c==="prepatch")&&!a&&(a=r)}return a?{kind:"minor-patch",label:`safe to ${a}`}:i?{kind:"major",label:`requires major bump to ${i}`}:{kind:"unknown",label:"no usable fix"}},ui=new Map([["are you at risk","RISK"],["what it is","VECTOR"],["what to do","ACTION"]]),mi=e=>e.split(`
+`).map(t=>{const n=t.trim();if(!n)return"";const i=n.match(/^([^:]{2,40}):\s*(.+)$/u);if(i?.[1]&&i[2]){const a=ui.get(i[1].trim().toLowerCase())??i[1].trim().toUpperCase();return`<div class="intel-line grid grid-cols-[72px_1fr] items-start gap-4"><span class="intel-key pt-0.5 text-[9px] font-bold uppercase">${S(a)}</span><span class="intel-val text-[13px]">${S(i[2].trim())}</span></div>`}return`<div class="intel-line intel-prose grid items-start gap-4"><span class="intel-val text-[13px]">${S(n)}</span></div>`}).join(""),hi='<svg class="ticon-svg" viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" focusable="false"><path d="M21 12.79A9 9 0 1 1 11.21 3 7 7 0 0 0 21 12.79z"/></svg>',vi='<svg class="ticon-svg" viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" focusable="false"><circle cx="12" cy="12" r="4"/><path d="M12 2v2m0 16v2M4.93 4.93l1.41 1.41m11.32 11.32 1.41 1.41M2 12h2m16 0h2M4.93 19.07l1.41-1.41m11.32-11.32 1.41-1.41"/></svg>',H="px-3 py-3 text-left align-middle",B="sticky top-0 z-[2] px-3 py-3 text-left text-[10px] font-medium uppercase whitespace-nowrap select-none",G="px-3 py-3 text-left text-[10px] font-medium uppercase",wi=e=>`<ul class="dep-paths flex flex-col gap-2 px-3 py-3">${e.map(n=>`<li class="dep-path flex flex-wrap items-center gap-y-1">${n.map((a,r)=>{const o=`${a.name}@${a.version}`,c=r<n.length-1?'<span class="dep-arrow muted px-1">→</span>':"";return`<code class="dep-node text-[12px]">${S(o)}</code>${c}`}).join("")}</li>`).join("")}</ul>`,yi=e=>{const{acknowledged:t,dependencyPaths:n,explanation:i,packageName:a,packageVersion:r,remediation:o,vulnerability:c}=e,{severity:l}=c,p=gi(r,c.fixedVersions),m=c.fixedVersions.length>0?c.fixedVersions.join(", "):"—",w=o?`<code class="copyable" data-cmd="${S(o)}" title="Click to copy">${S(o)}</code>`:'<span class="muted">advisory only</span>',h=`data-severity="${l}" data-package="${S(a)}" data-advisory="${S(c.id)}"`,x=`<tr class="${t?"finding-row ack-row":"finding-row"}" ${h}>
+  <td class="sev-cell whitespace-nowrap ${H}"><span class="badge badge-${l.toLowerCase()} inline-flex items-center gap-[7px] rounded-[3px] py-1 pr-2 pl-[7px] text-[9px] font-bold uppercase">${l}</span></td>
+  <td class="${H}"><span class="marker marker-${p.kind} inline-block whitespace-nowrap align-middle text-[9px] font-bold uppercase" title="${S(p.label)}">${fi[p.kind]}</span></td>
+  <td class="${H}"><code class="pkg font-medium">${S(a)}</code></td>
+  <td class="${H}"><code class="ver whitespace-nowrap">${S(r)}</code></td>
+  <td class="adv-cell whitespace-nowrap ${H}"><a href="${S(M(c.id))}" class="text-[12px] no-underline" rel="noreferrer noopener" target="_blank">${S(c.id)}</a>${t?' <span class="ack ml-2 inline-block px-[5px] py-px text-[9px] uppercase">acknowledged</span>':""}</td>
+  <td class="summary-cell ${H} min-w-[220px] text-[13px]">${S(c.summary)}</td>
+  <td class="${H}"><code class="fix whitespace-nowrap">${S(m)}</code></td>
+  <td class="${H}">${w}</td>
+</tr>`,u=n&&n.length>0?`<tr class="paths-row" ${h}>
+  <td colspan="8" class="p-0"><details><summary class="flex cursor-pointer items-center gap-3 px-3 py-2 select-none"><span class="intel-tag text-[9px] font-bold uppercase">[ DEPENDENCY PATHS ]</span><span class="intel-hint text-[9px] uppercase">${String(n.length)} root${n.length===1?"":"s"} reach this finding · click to expand</span></summary>${wi(n)}</details></td>
+</tr>`:"";return i?`${x}${u}
 <tr class="explain-row" ${h}>
-  <td colspan="8" class="p-0"><details><summary class="flex cursor-pointer items-center gap-3 px-3 py-2 select-none"><span class="intel-tag text-[9px] font-bold uppercase">[ AI INTEL ]</span><span class="intel-hint text-[9px] uppercase">threat analysis · click to expand</span></summary><div class="explain-body grid gap-3 px-3 pt-1 pb-4">${ni(i)}</div></details></td>
-</tr>`:`${x}${m}`},si=e=>{const t=e.now??new Date,n=[...e.findings].sort(gt),i={CRITICAL:0,HIGH:0,LOW:0,MODERATE:0,UNKNOWN:0};let a=0,r=0;for(const y of n)i[y.vulnerability.severity??"UNKNOWN"]+=1,y.acknowledged||(r+=1,y.vulnerability.fixedVersions.length>0&&(a+=1));const o=n.map(y=>oi(y)).join(`
-`),s=n.length===0,l=Bn.filter(y=>i[y]>0).map(y=>`<div class="dseg dseg-sev dseg-${y.toLowerCase()}"><span class="dk text-[10px] font-medium uppercase">${y}</span><span class="dv text-[22px]">${String(i[y])}</span></div>`),p=!s&&r>0?`<div class="dseg dseg-fixable"><span class="dk text-[10px] font-medium uppercase">fixable</span><span class="dv text-[22px]">${String(a)}<span class="dvsep mx-1 font-light">/</span>${String(r)}</span></div>`:"",g=[`<div class="dseg"><span class="dk text-[10px] font-medium uppercase">scanned</span><span class="dv text-[22px]">${String(e.packagesScanned)}</span></div>`,`<div class="dseg"><span class="dk text-[10px] font-medium uppercase">findings</span><span class="dv text-[22px]"><span id="shown">${String(n.length)}</span>${s?"":`<span class="dvsep mx-1 font-light">/</span>${String(n.length)}`}</span></div>`,p,l.length>0?'<span class="flex-auto"></span>':"",...l,s?'<div class="dseg dseg-ok"><span class="dot inline-block size-[7px] self-center"></span><span class="dk text-[10px] font-medium uppercase">status</span><span class="dv text-[22px]">CLEAN</span></div>':""].join(""),w=s?"ok":i.CRITICAL>0?"crit":i.HIGH>0?"high":"warn",h=[...e.report?.duplicates??[]].sort((y,C)=>y.name.localeCompare(C.name)),b=h.map(y=>`<tr>
-  <td class="px-3 py-3 align-top"><code class="font-medium">${S(y.name)}</code></td>
-  <td class="px-3 py-3 align-top text-[12px] font-medium tabular-nums">${String(y.versionCount)}</td>
-  <td class="px-3 py-3 align-top"><code class="text-[12px]">${y.versions.map(C=>S(C)).join(", ")}</code></td>
+  <td colspan="8" class="p-0"><details><summary class="flex cursor-pointer items-center gap-3 px-3 py-2 select-none"><span class="intel-tag text-[9px] font-bold uppercase">[ AI INTEL ]</span><span class="intel-hint text-[9px] uppercase">threat analysis · click to expand</span></summary><div class="explain-body grid gap-3 px-3 pt-1 pb-4">${mi(i)}</div></details></td>
+</tr>`:`${x}${u}`},bi=e=>{const t=e.now??new Date,n=[...e.findings].sort(xt),i={CRITICAL:0,HIGH:0,LOW:0,MODERATE:0,UNKNOWN:0};let a=0,r=0;for(const b of n)i[b.vulnerability.severity??"UNKNOWN"]+=1,b.acknowledged||(r+=1,b.vulnerability.fixedVersions.length>0&&(a+=1));const o=n.map(b=>yi(b)).join(`
+`),c=n.length===0,l=ii.filter(b=>i[b]>0).map(b=>`<div class="dseg dseg-sev dseg-${b.toLowerCase()}"><span class="dk text-[10px] font-medium uppercase">${b}</span><span class="dv text-[22px]">${String(i[b])}</span></div>`),p=!c&&r>0?`<div class="dseg dseg-fixable"><span class="dk text-[10px] font-medium uppercase">fixable</span><span class="dv text-[22px]">${String(a)}<span class="dvsep mx-1 font-light">/</span>${String(r)}</span></div>`:"",m=[`<div class="dseg"><span class="dk text-[10px] font-medium uppercase">scanned</span><span class="dv text-[22px]">${String(e.packagesScanned)}</span></div>`,`<div class="dseg"><span class="dk text-[10px] font-medium uppercase">findings</span><span class="dv text-[22px]"><span id="shown">${String(n.length)}</span>${c?"":`<span class="dvsep mx-1 font-light">/</span>${String(n.length)}`}</span></div>`,p,l.length>0?'<span class="flex-auto"></span>':"",...l,c?'<div class="dseg dseg-ok"><span class="dot inline-block size-[7px] self-center"></span><span class="dk text-[10px] font-medium uppercase">status</span><span class="dv text-[22px]">CLEAN</span></div>':""].join(""),w=c?"ok":i.CRITICAL>0?"crit":i.HIGH>0?"high":"warn",h=[...e.report?.duplicates??[]].sort((b,N)=>b.name.localeCompare(N.name)),y=h.map(b=>`<tr>
+  <td class="px-3 py-3 align-top"><code class="font-medium">${S(b.name)}</code></td>
+  <td class="px-3 py-3 align-top text-[12px] font-medium tabular-nums">${String(b.versionCount)}</td>
+  <td class="px-3 py-3 align-top"><code class="text-[12px]">${b.versions.map(N=>S(N)).join(", ")}</code></td>
 </tr>`).join(`
-`),x=(e.policyDecisions??[]).filter(y=>y.policy!=="vulnerability"),m=[...x].sort((y,C)=>{const A=L=>L==="block"?0:L==="warn"?1:2;return A(y.severity)-A(C.severity)||y.policy.localeCompare(C.policy)||y.packageName.localeCompare(C.packageName)}).map(y=>{const C=y.acceptedRisk?' <span class="ack ml-2 inline-block px-[5px] py-px text-[9px] uppercase">[acknowledged]</span>':"";return`<tr>
-  <td class="px-3 py-3 align-top"><span class="policy-badge policy-${y.severity} inline-flex items-center gap-[7px] rounded-[3px] py-1 pr-2 pl-[7px] text-[10px] font-bold uppercase">${y.severity.toUpperCase()}</span></td>
-  <td class="px-3 py-3 align-top"><code class="uppercase">${S(y.policy)}</code></td>
-  <td class="px-3 py-3 align-top"><code class="uppercase">${S(y.packageName)}</code></td>
-  <td class="px-3 py-3 align-top"><code class="uppercase">${S(y.version)}</code></td>
-  <td class="px-3 py-3 align-top">${S(y.reason)}${C}</td>
+`),x=(e.policyDecisions??[]).filter(b=>b.policy!=="vulnerability"),u=[...x].sort((b,N)=>{const A=T=>T==="block"?0:T==="warn"?1:2;return A(b.severity)-A(N.severity)||b.policy.localeCompare(N.policy)||b.packageName.localeCompare(N.packageName)}).map(b=>{const N=b.acceptedRisk?' <span class="ack ml-2 inline-block px-[5px] py-px text-[9px] uppercase">[acknowledged]</span>':"";return`<tr>
+  <td class="px-3 py-3 align-top"><span class="policy-badge policy-${b.severity} inline-flex items-center gap-[7px] rounded-[3px] py-1 pr-2 pl-[7px] text-[10px] font-bold uppercase">${b.severity.toUpperCase()}</span></td>
+  <td class="px-3 py-3 align-top"><code class="uppercase">${S(b.policy)}</code></td>
+  <td class="px-3 py-3 align-top"><code class="uppercase">${S(b.packageName)}</code></td>
+  <td class="px-3 py-3 align-top"><code class="uppercase">${S(b.version)}</code></td>
+  <td class="px-3 py-3 align-top">${S(b.reason)}${N}</td>
 </tr>`}).join(`
 `),$=e.report?`
 <script type="application/json" id="vis-audit-report">${JSON.stringify(e.report).replaceAll("</",String.raw`<\/`)}<\/script>`:"";return`<!doctype html>
@@ -64,20 +64,20 @@ ${g}`,et(a,p),i.push(`Synced ${String(l)} advisor${l===1?"y":"ies"} to .yarnrc.y
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <title>vis audit · ${S(t.toISOString().slice(0,10))}</title>
-<style>${Zn}</style>${$}
+<style>${di}</style>${$}
 </head>
 <body>
 <main class="mx-auto max-w-[1080px]">
 <header class="masthead flex flex-wrap items-end gap-4 px-0 pt-8 pb-5">
-  <div class="brand leading-none tracking-tight">${(()=>{const[y,...C]=e.tool.name.split("-");return C.length>0?`${S(y??e.tool.name)}<span class="slash mx-[0.12em] font-light">/</span>${S(C.join("-"))}`:S(e.tool.name)})()}<span class="sub mt-3 block text-[11px] font-medium uppercase">dependency security report</span></div>
+  <div class="brand leading-none tracking-tight">${(()=>{const[b,...N]=e.tool.name.split("-");return N.length>0?`${S(b??e.tool.name)}<span class="slash mx-[0.12em] font-light">/</span>${S(N.join("-"))}`:S(e.tool.name)})()}<span class="sub mt-3 block text-[11px] font-medium uppercase">dependency security report</span></div>
   <span class="flex-auto"></span>
   <span class="chip inline-flex h-7 items-center justify-center rounded-[4px] px-3 text-[11px] font-medium uppercase">v${S(e.tool.version)}</span>
-  <button id="theme" class="tbtn tbtn-theme inline-flex h-7 cursor-pointer items-center justify-center rounded-[4px] bg-transparent px-3 text-[11px] font-medium uppercase" type="button" aria-label="Toggle color theme" title="Toggle color theme"><span class="ticon ticon-moon inline-flex items-center justify-center">${ii}</span><span class="ticon ticon-sun inline-flex items-center justify-center">${ai}</span></button>
+  <button id="theme" class="tbtn tbtn-theme inline-flex h-7 cursor-pointer items-center justify-center rounded-[4px] bg-transparent px-3 text-[11px] font-medium uppercase" type="button" aria-label="Toggle color theme" title="Toggle color theme"><span class="ticon ticon-moon inline-flex items-center justify-center">${hi}</span><span class="ticon ticon-sun inline-flex items-center justify-center">${vi}</span></button>
 </header>
-${s?"":`<section class="verdict verdict-${w} flex flex-wrap items-baseline gap-x-6 gap-y-1"><span class="vnum font-light">${String(n.length)}</span><span class="vsub text-[12px] uppercase">${n.length===1?"vulnerability detected":"vulnerabilities detected"}</span></section>`}
-<div class="debugbar flex flex-wrap items-stretch gap-0 pt-7 pb-1">${g}</div>
+${c?"":`<section class="verdict verdict-${w} flex flex-wrap items-baseline gap-x-6 gap-y-1"><span class="vnum font-light">${String(n.length)}</span><span class="vsub text-[12px] uppercase">${n.length===1?"vulnerability detected":"vulnerabilities detected"}</span></section>`}
+<div class="debugbar flex flex-wrap items-stretch gap-0 pt-7 pb-1">${m}</div>
 <div class="pt-8">
-${s?'<div class="clean px-6 text-center"><div class="big font-light">CLEAN</div><div class="sub mt-6 text-[12px] uppercase">No security issues found.</div></div>':`
+${c?'<div class="clean px-6 text-center"><div class="big font-light">CLEAN</div><div class="sub mt-6 text-[12px] uppercase">No security issues found.</div></div>':`
 <div class="mb-6 flex flex-wrap items-center gap-0">
   <label class="field flex flex-[1_1_280px] items-center"><span class="prompt pr-3 text-[10px] uppercase select-none">filter:</span><input id="filter" type="search" class="w-full border-0 bg-transparent py-2.5 pr-0 pl-0 text-[13px] outline-0" placeholder="package or advisory id…" aria-label="Filter findings" /></label>
   <label class="field sel flex flex-none items-center"><span class="prompt pr-3 text-[10px] uppercase select-none">sev</span><select id="severity" class="w-full cursor-pointer border-0 bg-transparent py-2.5 pr-6 pl-0 text-[13px] outline-0" aria-label="Filter by severity">
@@ -112,15 +112,15 @@ ${x.length>0?`
 <table id="policies" class="w-full text-[13px]">
 <thead>
 <tr>
-  <th class="${H}">Severity</th>
-  <th class="${H}">Policy</th>
-  <th class="${H}">Package</th>
-  <th class="${H}">Version</th>
-  <th class="${H}">Reason</th>
+  <th class="${G}">Severity</th>
+  <th class="${G}">Policy</th>
+  <th class="${G}">Package</th>
+  <th class="${G}">Version</th>
+  <th class="${G}">Reason</th>
 </tr>
 </thead>
 <tbody>
-${m}
+${u}
 </tbody>
 </table>`:""}
 ${h.length>0?`
@@ -129,16 +129,16 @@ ${h.length>0?`
 <table id="duplicates" class="w-full text-[13px]">
 <thead>
 <tr>
-  <th class="${H}">Package</th>
-  <th class="${H}">Versions</th>
-  <th class="${H}">Installed</th>
+  <th class="${G}">Package</th>
+  <th class="${G}">Versions</th>
+  <th class="${G}">Installed</th>
 </tr>
 </thead>
 <tbody>
-${b}
+${y}
 </tbody>
 </table>`:""}
-<footer class="sig mt-12 flex flex-wrap items-center justify-between gap-x-6 gap-y-3 pt-5 text-[10px] uppercase"><span class="sig-meta"><b>${S(e.tool.name)}</b> ${S(e.tool.version)} · generated ${S(t.toISOString())} · powered by OSV.dev</span><span class="sig-by inline-flex items-center gap-2"><span class="sig-by-label">built by</span><a class="sig-by-link inline-flex items-center" href="https://anolilab.com" rel="noreferrer noopener" target="_blank" aria-label="Anolilab">${ln}</a></span></footer>
+<footer class="sig mt-12 flex flex-wrap items-center justify-between gap-x-6 gap-y-3 pt-5 text-[10px] uppercase"><span class="sig-meta"><b>${S(e.tool.name)}</b> ${S(e.tool.version)} · generated ${S(t.toISOString())} · powered by OSV.dev</span><span class="sig-by inline-flex items-center gap-2"><span class="sig-by-label">built by</span><a class="sig-by-link inline-flex items-center" href="https://anolilab.com" rel="noreferrer noopener" target="_blank" aria-label="Anolilab">${vn}</a></span></footer>
 </div>
 </main>
 <script>
@@ -278,23 +278,23 @@ ${b}
 <\/script>
 </body>
 </html>
-`},ci={CRITICAL:"CRITICAL",HIGH:"HIGH",LOW:"LOW",MODERATE:"MEDIUM",UNKNOWN:"NONE"},Te=(e,t)=>`pkg:npm/${e}@${t}`,rt=(e,t)=>{const n=new Map;for(const i of e){const a=t(i),r=n.get(a);r?r.push(i):n.set(a,[i])}return n},li=e=>{const t=e.now??new Date,n=t.toISOString(),i=e.trackingId??`vis-audit-${t.toISOString().slice(0,10)}`,r=[...rt(e.findings,l=>l.packageName).entries()].sort(([l],[p])=>l.localeCompare(p)).map(([l,p])=>({branches:[...new Set(p.map(w=>w.packageVersion))].sort().map(w=>{const h=Te(l,w);return{category:"product_version",name:w,product:{name:`${l}@${w}`,product_id:h,product_identification_helper:{purl:h}}}}),category:"product_name",name:l})),s=[...rt(e.findings,l=>l.vulnerability.id).entries()].sort(([l],[p])=>l.localeCompare(p)).map(([l,p])=>{const g=p[0].vulnerability,w=[...new Set(p.map(A=>Te(A.packageName,A.packageVersion)))].sort(),h=l.startsWith("CVE-"),b=[l,...g.aliases??[]],x=h?l:b.find(A=>A.startsWith("CVE-")),m=b.filter(A=>A!==x).map(A=>({system_name:A.startsWith("GHSA-")?"GitHub Security Advisory":"OSV",text:A})),$=Fe(g),y=p.filter(A=>A.acknowledged).map(A=>Te(A.packageName,A.packageVersion));return{...x?{cve:x}:{},...m.length>0?{ids:m}:{},notes:[{category:"description",text:g.summary||`Advisory ${l}`,title:"Advisory description"}],product_status:{known_affected:w},references:[{category:"external",summary:`${l} advisory record`,url:D(l)}],scores:[{cvss_v3:{baseScore:$,baseSeverity:ci[g.severity]??"NONE",vectorString:"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",version:"3.1"},products:w}],title:g.summary.split(`
-`)[0]?.slice(0,200)||l,...y.length>0?{flags:[{label:"inline_mitigations_already_exist",product_ids:y}]}:{}}});return{document:{category:"csaf_vex",csaf_version:"2.0",distribution:{tlp:{label:"WHITE"}},publisher:{category:"vendor",name:e.tool.name,namespace:e.tool.informationUri},title:`vis audit · ${i}`,tracking:{current_release_date:n,id:i,initial_release_date:n,revision_history:[{date:n,number:"1",summary:"Initial audit emission"}],status:"final",version:"1"}},...r.length>0?{product_tree:{branches:r}}:{},...s.length>0?{vulnerabilities:s}:{}}},pi={CRITICAL:"critical",HIGH:"high",LOW:"low",MODERATE:"medium",UNKNOWN:"unknown"},ot=(e,t)=>{const n=new Map;for(const i of e){const a=t(i),r=n.get(a);r?r.push(i):n.set(a,[i])}return n},di=(e,t=new Date)=>{const n=ot(e,a=>a.vulnerability.id),i=t.toISOString();return[...n.entries()].sort(([a],[r])=>a.localeCompare(r)).map(([a,r])=>{const o=r[0].vulnerability,s=pi[o.severity]??"unknown",l=Fe(o),g=[...ot(r,$=>$.packageName).entries()].sort(([$],[y])=>$.localeCompare(y)).map(([$,y])=>{const C=[...new Set(y.map(L=>L.packageVersion))].sort();return{ref:pn($,C[0]),versions:C.map(L=>({status:"affected",version:L}))}}),w=(o.aliases??[]).filter($=>$!==a).map($=>({id:$,source:{name:we($),url:D($)}})),h=r.some($=>$.acknowledged),x=r.every($=>$.acknowledged)?{justification:"code_not_reachable",response:["will_not_fix"],state:"not_affected"}:h?{state:"in_triage"}:void 0,m=o.fixedVersions??[];return{"bom-ref":`vuln:${a}`,id:a,source:{name:we(a),url:D(a)},...w.length>0?{references:w}:{},description:o.summary||`Advisory ${a}`,ratings:[{method:"CVSSv31",score:l,severity:s,source:{name:we(a),url:D(a)}}],...m.length>0?{recommendation:`Upgrade to one of: ${m.join(", ")}`}:{},affects:g,created:i,published:i,...x?{analysis:x}:{}}})},fi=e=>{const t=di(e.findings,e.now);return{...e.bom,vulnerabilities:t}},bt="15.2.1",ui=`https://gitlab.com/gitlab-org/security-products/security-report-schemas/-/raw/v${bt}/dist/dependency-scanning-report-format.json`,gi={CRITICAL:"Critical",HIGH:"High",LOW:"Low",MODERATE:"Medium",UNKNOWN:"Unknown"},mi={block:"High",info:"Info",warn:"Medium"},hi=Uint8Array.from([107,167,184,18,157,173,17,209,128,180,0,192,79,212,48,200]),st=e=>{const t=fn("sha1");t.update(hi),t.update(e,"utf8");const n=t.digest();n[6]=(n[6]??0)&15|80,n[8]=(n[8]??0)&63|128;const i=n.subarray(0,16).toString("hex");return`${i.slice(0,8)}-${i.slice(8,12)}-${i.slice(12,16)}-${i.slice(16,20)}-${i.slice(20,32)}`},ct=e=>e.startsWith("CVE-")?{name:e,type:"cve",url:D(e),value:e}:e.startsWith("GHSA-")?{name:e,type:"ghsa",url:D(e),value:e}:{name:e,type:"osv",url:D(e),value:e},vi=e=>{const n=(e.now??new Date).toISOString().replace(/\.\d{3}Z$/,""),i=e.artifactUri??(mt(e.workspaceRoot,`${e.workspaceRoot}/package.json`)||"package.json"),a=[];for(const r of e.findings){const{acknowledged:o,packageName:s,packageVersion:l,vulnerability:p}=r,g=[ct(p.id)];for(const x of p.aliases??[])x!==p.id&&g.push(ct(x));const w=[{name:`${we(p.id)} advisory`,url:D(p.id)}],h=p.summary||`Advisory ${p.id}`,b=p.fixedVersions.length>0?`Upgrade ${s} to ${p.fixedVersions.join(" or ")}`:void 0;a.push({description:h,...o?{flags:[{description:"Acknowledged via vis accepted-risks",origin:"vis",type:"flagged-as-likely-false-positive"}]}:{},id:st(`vis-audit|${p.id}|${s}@${l}`),identifiers:g,links:w,location:{dependency:{package:{name:s},version:l},file:i},name:`${p.id}: ${s}@${l}`,severity:gi[p.severity],...b?{solution:b}:{}})}for(const r of e.policyDecisions??[]){if(r.policy==="vulnerability")continue;const o=`vis.policy.${r.policy}`;a.push({description:r.reason,...r.acceptedRisk?{flags:[{description:"Acknowledged via vis accepted-risks",origin:"vis",type:"flagged-as-likely-false-positive"}]}:{},id:st(`vis-audit|${o}|${r.packageName}@${r.version}`),identifiers:[{name:o,type:"vis_policy",url:`https://visulima.com/packages/vis/commands/audit#policy-${r.policy}`,value:o}],links:[{name:`vis policy: ${r.policy}`,url:`https://visulima.com/packages/vis/commands/audit#policy-${r.policy}`}],location:{dependency:{package:{name:r.packageName},version:r.version},file:i},name:`vis policy '${r.policy}': ${r.packageName}@${r.version}`,severity:mi[r.severity]})}return{scan:{analyzer:{id:e.tool.name,name:e.tool.name,url:e.tool.informationUri,vendor:{name:"Visulima"},version:e.tool.version},end_time:n,scanner:{id:e.tool.name,name:e.tool.name,url:e.tool.informationUri,vendor:{name:"Visulima"},version:e.tool.version},start_time:n,status:"success",type:"dependency_scanning"},schema:ui,version:bt,vulnerabilities:a}},J=e=>e.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;").replaceAll("'","&apos;"),lt=e=>`<![CDATA[${e.replaceAll("]]>","]]]]><![CDATA[>")}]]>`,wi=e=>{let t="";return e.status==="skipped"?t=`      <skipped/>
-`:e.status==="failure"?t=`      <failure type="${J(e.failureType)}" message="${J(e.failureMessage)}">${lt(e.failureText)}</failure>
-`:e.systemOut!==void 0&&(t=`      <system-out>${lt(e.systemOut)}</system-out>
-`),`    <testcase classname="${J(e.classname)}" name="${J(e.name)}">
+`},xi={CRITICAL:"CRITICAL",HIGH:"HIGH",LOW:"LOW",MODERATE:"MEDIUM",UNKNOWN:"NONE"},Me=(e,t)=>`pkg:npm/${e}@${t}`,pt=(e,t)=>{const n=new Map;for(const i of e){const a=t(i),r=n.get(a);r?r.push(i):n.set(a,[i])}return n},ki=e=>{const t=e.now??new Date,n=t.toISOString(),i=e.trackingId??`vis-audit-${t.toISOString().slice(0,10)}`,r=[...pt(e.findings,l=>l.packageName).entries()].sort(([l],[p])=>l.localeCompare(p)).map(([l,p])=>({branches:[...new Set(p.map(w=>w.packageVersion))].sort().map(w=>{const h=Me(l,w);return{category:"product_version",name:w,product:{name:`${l}@${w}`,product_id:h,product_identification_helper:{purl:h}}}}),category:"product_name",name:l})),c=[...pt(e.findings,l=>l.vulnerability.id).entries()].sort(([l],[p])=>l.localeCompare(p)).map(([l,p])=>{const m=p[0].vulnerability,w=[...new Set(p.map(A=>Me(A.packageName,A.packageVersion)))].sort(),h=l.startsWith("CVE-"),y=[l,...m.aliases??[]],x=h?l:y.find(A=>A.startsWith("CVE-")),u=y.filter(A=>A!==x).map(A=>({system_name:A.startsWith("GHSA-")?"GitHub Security Advisory":"OSV",text:A})),$=We(m),b=p.filter(A=>A.acknowledged).map(A=>Me(A.packageName,A.packageVersion));return{...x?{cve:x}:{},...u.length>0?{ids:u}:{},notes:[{category:"description",text:m.summary||`Advisory ${l}`,title:"Advisory description"}],product_status:{known_affected:w},references:[{category:"external",summary:`${l} advisory record`,url:M(l)}],scores:[{cvss_v3:{baseScore:$,baseSeverity:xi[m.severity]??"NONE",vectorString:"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",version:"3.1"},products:w}],title:m.summary.split(`
+`)[0]?.slice(0,200)||l,...b.length>0?{flags:[{label:"inline_mitigations_already_exist",product_ids:b}]}:{}}});return{document:{category:"csaf_vex",csaf_version:"2.0",distribution:{tlp:{label:"WHITE"}},publisher:{category:"vendor",name:e.tool.name,namespace:e.tool.informationUri},title:`vis audit · ${i}`,tracking:{current_release_date:n,id:i,initial_release_date:n,revision_history:[{date:n,number:"1",summary:"Initial audit emission"}],status:"final",version:"1"}},...r.length>0?{product_tree:{branches:r}}:{},...c.length>0?{vulnerabilities:c}:{}}},$i={CRITICAL:"critical",HIGH:"high",LOW:"low",MODERATE:"medium",UNKNOWN:"unknown"},dt=(e,t)=>{const n=new Map;for(const i of e){const a=t(i),r=n.get(a);r?r.push(i):n.set(a,[i])}return n},Si=(e,t=new Date)=>{const n=dt(e,a=>a.vulnerability.id),i=t.toISOString();return[...n.entries()].sort(([a],[r])=>a.localeCompare(r)).map(([a,r])=>{const o=r[0].vulnerability,c=$i[o.severity]??"unknown",l=We(o),m=[...dt(r,$=>$.packageName).entries()].sort(([$],[b])=>$.localeCompare(b)).map(([$,b])=>{const N=[...new Set(b.map(T=>T.packageVersion))].sort();return{ref:wn($,N[0]),versions:N.map(T=>({status:"affected",version:T}))}}),w=(o.aliases??[]).filter($=>$!==a).map($=>({id:$,source:{name:xe($),url:M($)}})),h=r.some($=>$.acknowledged),x=r.every($=>$.acknowledged)?{justification:"code_not_reachable",response:["will_not_fix"],state:"not_affected"}:h?{state:"in_triage"}:void 0,u=o.fixedVersions??[];return{"bom-ref":`vuln:${a}`,id:a,source:{name:xe(a),url:M(a)},...w.length>0?{references:w}:{},description:o.summary||`Advisory ${a}`,ratings:[{method:"CVSSv31",score:l,severity:c,source:{name:xe(a),url:M(a)}}],...u.length>0?{recommendation:`Upgrade to one of: ${u.join(", ")}`}:{},affects:m,created:i,published:i,...x?{analysis:x}:{}}})},Ai=e=>{const t=Si(e.findings,e.now);return{...e.bom,vulnerabilities:t}},Nt="15.2.1",Ni=`https://gitlab.com/gitlab-org/security-products/security-report-schemas/-/raw/v${Nt}/dist/dependency-scanning-report-format.json`,Ci={CRITICAL:"Critical",HIGH:"High",LOW:"Low",MODERATE:"Medium",UNKNOWN:"Unknown"},Ei={block:"High",info:"Info",warn:"Medium"},Oi=Uint8Array.from([107,167,184,18,157,173,17,209,128,180,0,192,79,212,48,200]),ft=e=>{const t=xn("sha1");t.update(Oi),t.update(e,"utf8");const n=t.digest();n[6]=(n[6]??0)&15|80,n[8]=(n[8]??0)&63|128;const i=n.subarray(0,16).toString("hex");return`${i.slice(0,8)}-${i.slice(8,12)}-${i.slice(12,16)}-${i.slice(16,20)}-${i.slice(20,32)}`},gt=e=>e.startsWith("CVE-")?{name:e,type:"cve",url:M(e),value:e}:e.startsWith("GHSA-")?{name:e,type:"ghsa",url:M(e),value:e}:{name:e,type:"osv",url:M(e),value:e},Ii=e=>{const n=(e.now??new Date).toISOString().replace(/\.\d{3}Z$/,""),i=e.artifactUri??(kt(e.workspaceRoot,`${e.workspaceRoot}/package.json`)||"package.json"),a=[];for(const r of e.findings){const{acknowledged:o,packageName:c,packageVersion:l,vulnerability:p}=r,m=[gt(p.id)];for(const x of p.aliases??[])x!==p.id&&m.push(gt(x));const w=[{name:`${xe(p.id)} advisory`,url:M(p.id)}],h=p.summary||`Advisory ${p.id}`,y=p.fixedVersions.length>0?`Upgrade ${c} to ${p.fixedVersions.join(" or ")}`:void 0;a.push({description:h,...o?{flags:[{description:"Acknowledged via vis accepted-risks",origin:"vis",type:"flagged-as-likely-false-positive"}]}:{},id:ft(`vis-audit|${p.id}|${c}@${l}`),identifiers:m,links:w,location:{dependency:{package:{name:c},version:l},file:i},name:`${p.id}: ${c}@${l}`,severity:Ci[p.severity],...y?{solution:y}:{}})}for(const r of e.policyDecisions??[]){if(r.policy==="vulnerability")continue;const o=`vis.policy.${r.policy}`;a.push({description:r.reason,...r.acceptedRisk?{flags:[{description:"Acknowledged via vis accepted-risks",origin:"vis",type:"flagged-as-likely-false-positive"}]}:{},id:ft(`vis-audit|${o}|${r.packageName}@${r.version}`),identifiers:[{name:o,type:"vis_policy",url:`https://visulima.com/packages/vis/commands/audit#policy-${r.policy}`,value:o}],links:[{name:`vis policy: ${r.policy}`,url:`https://visulima.com/packages/vis/commands/audit#policy-${r.policy}`}],location:{dependency:{package:{name:r.packageName},version:r.version},file:i},name:`vis policy '${r.policy}': ${r.packageName}@${r.version}`,severity:Ei[r.severity]})}return{scan:{analyzer:{id:e.tool.name,name:e.tool.name,url:e.tool.informationUri,vendor:{name:"Visulima"},version:e.tool.version},end_time:n,scanner:{id:e.tool.name,name:e.tool.name,url:e.tool.informationUri,vendor:{name:"Visulima"},version:e.tool.version},start_time:n,status:"success",type:"dependency_scanning"},schema:Ni,version:Nt,vulnerabilities:a}},X=e=>e.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;").replaceAll("'","&apos;"),ut=e=>`<![CDATA[${e.replaceAll("]]>","]]]]><![CDATA[>")}]]>`,Ri=e=>{let t="";return e.status==="skipped"?t=`      <skipped/>
+`:e.status==="failure"?t=`      <failure type="${X(e.failureType)}" message="${X(e.failureMessage)}">${ut(e.failureText)}</failure>
+`:e.systemOut!==void 0&&(t=`      <system-out>${ut(e.systemOut)}</system-out>
+`),`    <testcase classname="${X(e.classname)}" name="${X(e.name)}">
 ${t}    </testcase>
-`},pt=(e,t,n)=>{const i=t.filter(s=>s.status==="failure").length,a=t.filter(s=>s.status==="skipped").length,r=t.length,o=t.map(s=>wi(s)).join("");return`  <testsuite name="${J(e)}" tests="${String(r)}" failures="${String(i)}" skipped="${String(a)}" errors="0" timestamp="${J(n)}" time="0">
+`},mt=(e,t,n)=>{const i=t.filter(c=>c.status==="failure").length,a=t.filter(c=>c.status==="skipped").length,r=t.length,o=t.map(c=>Ri(c)).join("");return`  <testsuite name="${X(e)}" tests="${String(r)}" failures="${String(i)}" skipped="${String(a)}" errors="0" timestamp="${X(n)}" time="0">
 ${o}  </testsuite>
-`},yi=e=>{const t=(e.now??new Date).toISOString().replace(/\.\d{3}Z$/,""),n=e.suiteName??"vis-audit",i=e.findings.map(p=>{const{acknowledged:g,packageName:w,packageVersion:h,vulnerability:b}=p,x=b.fixedVersions.length>0?` (fix: ${b.fixedVersions.join(", ")})`:"";return{classname:`${w}@${h}`,failureMessage:`${_e(b.severity).toUpperCase()} ${b.id} — ${b.summary.split(`
-`)[0]?.slice(0,200)??b.id}`,failureText:`${b.id}: ${w}@${h}
-${b.summary||`Advisory ${b.id}`}${x}`,failureType:_e(b.severity).toUpperCase(),name:b.id,status:g?"skipped":"failure"}}),a=(e.policyDecisions??[]).filter(p=>p.policy!=="vulnerability").map(p=>{let g;return p.acceptedRisk?g="skipped":p.severity==="info"?g="passing":g="failure",{classname:`${p.packageName}@${p.version}`,failureMessage:`${p.severity.toUpperCase()} vis.policy.${p.policy}`,failureText:p.reason,failureType:p.severity.toUpperCase(),name:`vis.policy.${p.policy}`,status:g,...g==="passing"?{systemOut:p.reason}:{}}}),r=i.length+a.length,o=i.filter(p=>p.status==="failure").length+a.filter(p=>p.status==="failure").length,s=i.filter(p=>p.status==="skipped").length+a.filter(p=>p.status==="skipped").length;let l=`<?xml version="1.0" encoding="UTF-8"?>
-<testsuites name="${J(n)}" tests="${String(r)}" failures="${String(o)}" skipped="${String(s)}" errors="0" time="0">
-`;return l+=pt("vulnerabilities",i,t),a.length>0&&(l+=pt("policies",a,t)),l+=`</testsuites>
-`,l},bi=e=>{const t=new Map,n=[],i=e.artifactUri??(mt(e.workspaceRoot,un(e.workspaceRoot,"package.json"))||"package.json");for(const o of e.findings){const{acknowledged:s,packageName:l,packageVersion:p,vulnerability:g}=o,w=qn(g.severity),h=_e(g.severity);t.has(g.id)||t.set(g.id,{defaultConfiguration:{level:w},fullDescription:{text:g.summary||`Advisory ${g.id}`},helpUri:D(g.id),id:g.id,name:g.id,properties:{precision:"very-high","security-severity":Jn(g),"severity-label":h,tags:["security","vulnerability","supply-chain",`severity:${h}`]},shortDescription:{text:(g.summary.split(`
-`)[0]??g.id).slice(0,200)}}),n.push({level:w,locations:[{logicalLocations:[{kind:"package",name:`${l}@${p}`}],physicalLocation:{artifactLocation:{uri:i}}}],message:{text:`${g.id}: ${l}@${p} — ${g.summary||"no summary"}${g.fixedVersions.length>0?` (fix: ${g.fixedVersions.join(", ")})`:""}`},partialFingerprints:{advisoryId:g.id,package:l,version:p},properties:{...s?{acknowledged:!0}:{},...g.aliases&&g.aliases.length>0?{aliases:g.aliases}:{},...typeof g.cvssScore=="number"?{cvssScore:g.cvssScore}:{},...g.fixedVersions.length>0?{fixedVersions:g.fixedVersions}:{},packageName:l,packageVersion:p,severityLabel:h},ruleId:g.id})}const a={block:"error",info:"note",warn:"warning"},r={block:"high",info:"none",warn:"medium"};for(const o of e.policyDecisions??[]){if(o.policy==="vulnerability")continue;const s=`vis.policy.${o.policy}`,l=a[o.severity],p=r[o.severity];t.has(s)||t.set(s,{defaultConfiguration:{level:l},fullDescription:{text:`vis policy '${o.policy}' (Socket.dev-style supply-chain gate)`},helpUri:`https://visulima.com/packages/vis/commands/audit#policy-${o.policy}`,id:s,name:s,properties:{precision:"high","security-severity":o.severity==="block"?"8.0":o.severity==="warn"?"5.5":"0.0","severity-label":p,tags:["security","supply-chain","policy",`policy:${o.policy}`]},shortDescription:{text:`vis policy: ${o.policy}`}}),n.push({level:l,locations:[{logicalLocations:[{kind:"package",name:`${o.packageName}@${o.version}`}],physicalLocation:{artifactLocation:{uri:i}}}],message:{text:o.reason},partialFingerprints:{package:o.packageName,policy:o.policy,version:o.version},properties:{...o.acceptedRisk?{acknowledged:!0}:{},packageName:o.packageName,packageVersion:o.version,severityLabel:p},ruleId:s})}return{$schema:"https://json.schemastore.org/sarif-2.1.0.json",runs:[{results:n,tool:{driver:{informationUri:e.tool.informationUri,name:e.tool.name,rules:[...t.values()],version:e.tool.version}}}],version:"2.1.0"}},xi=["dependencies","devDependencies","optionalDependencies","peerDependencies"],dt=e=>{try{return{path:e,pkg:ht(e)}}catch{return}},ki=e=>{const t=[],n=dt(F(e,"package.json"));n&&t.push({path:n.path,pkg:n.pkg,workspaceName:n.pkg.name});const i=Yt(e);let a;if(i?a=i:n?.pkg.workspaces&&(Array.isArray(n.pkg.workspaces)?a=n.pkg.workspaces:n.pkg.workspaces.packages&&(a=n.pkg.workspaces.packages)),!a)return t;for(const r of Jt(e,a)){const o=dt(F(e,r,"package.json"));o&&t.push({path:o.path,pkg:o.pkg,workspaceName:o.pkg.name})}return t},$i=(e,t)=>{const n=[];for(const i of e)for(const a of xi){const r=i.pkg[a]?.[t];typeof r=="string"&&n.push({field:a,manifest:i,range:r})}return n},xt=e=>{const t=ki(e.workspaceRoot),n=[],i=[],a=[],r=new Set;for(const o of e.findings){const s=o.vulnerability.fixedVersions[0];if(!s){a.push({packageName:o.packageName,reason:"no-fixed-version"});continue}const l=$i(t,o.packageName);if(l.length===0){a.push({packageName:o.packageName,reason:"transitive-only"});continue}const p=_.coerce(s),g=p?`^${p.version}`:s,w=p?p.version:s;for(const h of l){const b=`${h.manifest.path}::${h.field}::${o.packageName}::${w}`;if(r.has(b))continue;r.add(b);const x=Ai(w,h.range),m={currentRange:h.range,field:h.field,inRange:x,manifestPath:h.manifest.path,packageName:o.packageName,targetSpec:g,targetVersion:w,workspaceName:h.manifest.workspaceName};x||e.allowMajor===!0?n.push(m):i.push(m)}}return{apply:n,skippedMajor:i,unmatched:a}},Si=/^(?:workspace|file|link|portal|patch|git\+|git:|github:|npm:|catalog|jsr|http|https):/i,Ai=(e,t)=>{if(Si.test(t))return!0;const n=_.coerce(e)?.version??e;try{return _.satisfies(n,t)}catch{return!0}},Ei=e=>{const t=[];if(e.apply.length>0){t.push(`Apply (${String(e.apply.length)}):`);for(const n of e.apply){const i=n.workspaceName?` [${n.workspaceName}]`:"";t.push(`  + ${n.packageName}: ${n.currentRange} → ${n.targetSpec}${i}`)}}if(e.skippedMajor.length>0){t.push(`Skipped — major bump (${String(e.skippedMajor.length)}, requires --allow-major):`);for(const n of e.skippedMajor){const i=n.workspaceName?` [${n.workspaceName}]`:"";t.push(`  ! ${n.packageName}: ${n.currentRange} → ${n.targetSpec}${i}`)}}if(e.unmatched.length>0){const n=e.unmatched.filter(a=>a.reason==="transitive-only"),i=e.unmatched.filter(a=>a.reason==="no-fixed-version");if(n.length>0){t.push(`Transitive only (${String(n.length)}, requires --fix-transitive):`);for(const a of n)t.push(`  · ${a.packageName}`)}if(i.length>0){t.push(`No fixed version available (${String(i.length)}):`);for(const a of i)t.push(`  · ${a.packageName}`)}}return t.length===0?"No direct-dep fixes to apply.":t.join(`
-`)},Ci=5,Ni=64,Oi=(e,t)=>{if(t.length===0)return[];const n=new Set;for(const i of e){if(t.includes(i)){n.add(i);continue}let a=!1;for(const r of t)try{_.satisfies(r,i)&&(n.add(r),a=!0)}catch{}!a&&t.length===1&&n.add(t[0])}return[...n]},Ii=e=>{const t=new Map;for(const a of e.entries){let r=t.get(a.name);r||(r=[],t.set(a.name,r)),r.includes(a.version)||r.push(a.version)}const n=new Map;for(const a of e.entries){const r=`${a.name}@${a.version}`;let o=n.get(r);o||(o=new Map,n.set(r,o));for(const s of[a.dependencies,a.peerDependencies,a.optionalDependencies])if(s)for(const[l,p]of Object.entries(s)){const g=t.get(l)??[],w=Oi(p,g);for(const h of w){const b=`${l}@${h}`;o.has(b)||o.set(b,{name:l,version:h})}}}const i=new Map;for(const[a,r]of n)i.set(a,{children:[...r.values()]});return{adjacency:i,versionsByName:t}},Ri=(e,t)=>{const n=t.get(e.name);if(!(!n||n.length===0)){if(n.includes(e.version))return{name:e.name,version:e.version};for(const i of n)try{if(_.satisfies(i,e.version))return{name:e.name,version:i}}catch{}if(n.length===1)return{name:e.name,version:n[0]}}},Pi=(e,t,n={})=>{const i=n.maxPathsPerTarget??Ci,a=n.maxDepth??Ni;if(i<=0)return[];const{adjacency:r,versionsByName:o}=Ii(e),s=`${t.name}@${t.version}`,l=[],p=[],g=new Set;for(const b of e.roots){const x=Ri(b,o);if(!x)continue;const m=`${x.name}@${x.version}`;g.has(m)||(g.add(m),p.push(x))}const w=[];for(const b of p){const x=`${b.name}@${b.version}`;if(x===s){if(l.push([b]),l.length>=i)return l;continue}w.push({node:b,path:[b],visited:new Set([x])})}let h=0;for(;h<w.length&&l.length<i;){const b=w[h];if(h+=1,b.path.length>=a)continue;const m=r.get(`${b.node.name}@${b.node.version}`)?.children??[];for(const $ of m){const y=`${$.name}@${$.version}`;if(b.visited.has(y))continue;const C=[...b.path,$];if(y===s){if(l.push(C),l.length>=i)return l;continue}const A=new Set(b.visited);A.add(y),w.push({node:$,path:C,visited:A})}}return l},Ti={"crates.io":["Cargo.lock"],Go:["go.sum"],Maven:["gradle.lockfile","pom.xml"],PyPI:["uv.lock","poetry.lock","Pipfile.lock"],RubyGems:["Gemfile.lock"]},ji={cargo:"crates.io","crates.io":"crates.io",go:"Go",maven:"Maven",npm:"npm",pypi:"PyPI",rubygems:"RubyGems"},kt=e=>ji[e.toLowerCase()]??e,Li=(e,t)=>{const n=kt(t),i=Ti[n]??[];for(const a of i){const r=F(e,a);if(bn(r))return r}},_i=e=>{const t=new Set,n=[];for(const i of e){const a=`${i.name}@${i.version}`;t.has(a)||(t.add(a),n.push(i))}return n},Di=/\[\[package\]\]([\s\S]*?)(?=\[\[|$)/g,Mi=/^\s*name\s*=\s*"([^"]+)"\s*$/m,Vi=/^\s*version\s*=\s*"([^"]+)"\s*$/m,Fi=e=>{const t=[];for(const n of e.matchAll(Di)){const i=n[1]??"",a=Mi.exec(i)?.[1],r=Vi.exec(i)?.[1];a&&r&&t.push({isDev:!1,name:a,version:r})}return t},Ui=e=>{let t;try{t=JSON.parse(e)}catch{return[]}if(typeof t!="object"||t===null)return[];const n=[];for(const i of["default","develop"]){const a=t[i];if(!(typeof a!="object"||a===null))for(const[r,o]of Object.entries(a)){if(typeof o!="object"||o===null)continue;const s=o.version;if(typeof s!="string")continue;const l=s.replace(/^==/,"").trim();l.length>0&&n.push({isDev:!1,name:r,version:l})}}return n},Wi=/<dependency>([\s\S]*?)<\/dependency>/g,zi=/<groupId>\s*([^<\s]+)\s*<\/groupId>/,Bi=/<artifactId>\s*([^<\s]+)\s*<\/artifactId>/,Hi=/<version>\s*([^<\s]+)\s*<\/version>/,Gi=e=>{const t=[];for(const n of e.matchAll(Wi)){const i=n[1]??"",a=zi.exec(i)?.[1],r=Bi.exec(i)?.[1],o=Hi.exec(i)?.[1];!a||!r||!o||o.startsWith("${")||t.push({isDev:!1,name:`${a}:${r}`,version:o})}return t},Ki=e=>{const t=[];for(const n of e.split(/\r?\n/)){const i=n.trim();if(i.length===0||i.startsWith("#"))continue;const a=i.indexOf("="),o=(a===-1?i:i.slice(0,a)).split(":");if(o.length<3)continue;const[s,l,p]=o;!s||!l||!p||t.push({isDev:!1,name:`${s}:${l}`,version:p})}return t},qi=e=>{const t=[];for(const n of e.split(/\r?\n/)){const i=n.trim();if(i.length===0)continue;const a=i.split(/\s+/);if(a.length<3)continue;const[r,o]=a;if(!r||!o?.endsWith("/go.mod"))continue;const s=o.slice(0,-7);s.length!==0&&t.push({isDev:!1,name:r,version:s})}return t},Yi=/^ {4}([^ ()]+) \(([^()]+)\)\s*$/,Ji=e=>{const t=[];let n=!1,i=!1;for(const a of e.split(/\r?\n/)){if(a.startsWith("GEM")){n=!0,i=!1;continue}if(n&&/^[A-Z]/.test(a)){n=!1,i=!1;continue}if(n&&a.trim()==="specs:"){i=!0;continue}if(i){const r=Yi.exec(a);if(r){const[,o,s]=r;o&&s&&t.push({isDev:!1,name:o,version:s})}}}return t},Xi=(e,t)=>{const n=Li(e,t);if(!n)return[];let i;try{i=vt(n,"utf8")}catch{return[]}const a=n.split(/[/\\]/).pop()??"";let r;switch(a){case"Cargo.lock":case"poetry.lock":case"uv.lock":{r=Fi(i);break}case"Gemfile.lock":{r=Ji(i);break}case"go.sum":{r=qi(i);break}case"gradle.lockfile":{r=Ki(i);break}case"Pipfile.lock":{r=Ui(i);break}case"pom.xml":{r=Gi(i);break}default:return[]}return _i(r)},Zi=["ts","tsx","js","jsx","mjs","cjs","mts","cts"],Qi=[/node_modules/,/\.git/,/\.next/,/\.cache/,/dist/,/build/,/coverage/,/\.turbo/,/\.nx/,/\.parcel-cache/],ea=["dependencies","devDependencies","peerDependencies","optionalDependencies"],ta=/(?:import|export)\s+(?:[\s\S]*?from\s+)?["']([^"'\n]+)["']/g,na=/(?:^|[^.\w$])require\s*\(\s*["']([^"'\n]+)["']\s*\)/g,ia=/\bimport\s*\(\s*["']([^"'\n]+)["']\s*\)/g,aa=e=>{if(e.startsWith(".")||e.startsWith("/")||/^[a-z][a-z0-9+.-]*:/i.test(e))return;const t=e.trim();if(t.length!==0){if(t.startsWith("@")){const n=t.split("/");return n.length<2?void 0:`${n[0]}/${n[1]}`}return t.split("/")[0]}},ra=e=>{const t=new Set,n=e.replaceAll(/\/\*[\s\S]*?\*\//g,"").replaceAll(/(^|[^:])\/\/.*$/gm,"$1"),i=a=>{a.lastIndex=0;let r;for(;(r=a.exec(n))!==null;){const o=aa(r[1]);o&&t.add(o)}};return i(ta),i(na),i(ia),t},oa=e=>{const t=new Set;try{const n=ht(e);for(const i of ea){const a=n[i];if(a&&typeof a=="object"&&!Array.isArray(a))for(const r of Object.keys(a))t.add(r)}}catch{}return t},sa=e=>{const t=e.skip??Qi,n=e.extensions??Zi,i=new Set;let a=0;const r=at(e.workspaceRoot,{extensions:n,includeDirs:!1,skip:t});for(const l of r){a+=1;try{const p=vt(l,"utf8");for(const g of ra(p))i.add(g)}catch{}}const o=at(e.workspaceRoot,{extensions:["json"],includeDirs:!1,skip:t}).filter(l=>l.endsWith("/package.json")||l.endsWith(String.raw`\package.json`)||l.endsWith("package.json"));for(const l of o)for(const p of oa(l))i.add(p);if(e.alwaysAssumeUsed)for(const l of e.alwaysAssumeUsed)i.add(l);const s=new Set;for(const l of e.vulnerablePackages)i.has(l)&&s.add(l);return{filesScanned:a,importedTotal:i,reachable:s}},ca=e=>{const t=_.coerce(e)?.major;return t!==void 0&&t>=10},la=e=>Object.fromEntries(Object.entries(e).sort(([t],[n])=>t.localeCompare(n))),pa=(e,t)=>`${JSON.stringify(e,void 0,t)}
-`,$t=(e,t)=>{if(t.name==="pnpm"&&ca(t.version))return{filePath:F(e,"pnpm-workspace.yaml"),surface:"pnpm-workspace.yaml"};const n=F(e,"package.json");return t.name==="pnpm"?{filePath:n,surface:"package.json#pnpm.overrides"}:t.name==="yarn"?{filePath:n,surface:"package.json#resolutions"}:{filePath:n,surface:"package.json#overrides"}},da=(e,t)=>{const{filePath:n,surface:i}=$t(e,t);if(!X(n))return{};if(i==="pnpm-workspace.yaml")try{return Ve(n)?.overrides??{}}catch{return{}}try{const a=JSON.parse(xe(n));return i==="package.json#pnpm.overrides"?(a.pnpm??{}).overrides??{}:i==="package.json#resolutions"?a.resolutions??{}:a.overrides??{}}catch{return{}}},fa=(e,t)=>{const n=Object.keys(t).sort();if(n.length===0&&!/^overrides\s*:/m.test(e))return e;const i=`overrides:
+`},ji=e=>{const t=(e.now??new Date).toISOString().replace(/\.\d{3}Z$/,""),n=e.suiteName??"vis-audit",i=e.findings.map(p=>{const{acknowledged:m,packageName:w,packageVersion:h,vulnerability:y}=p,x=y.fixedVersions.length>0?` (fix: ${y.fixedVersions.join(", ")})`:"";return{classname:`${w}@${h}`,failureMessage:`${Fe(y.severity).toUpperCase()} ${y.id} — ${y.summary.split(`
+`)[0]?.slice(0,200)??y.id}`,failureText:`${y.id}: ${w}@${h}
+${y.summary||`Advisory ${y.id}`}${x}`,failureType:Fe(y.severity).toUpperCase(),name:y.id,status:m?"skipped":"failure"}}),a=(e.policyDecisions??[]).filter(p=>p.policy!=="vulnerability").map(p=>{let m;return p.acceptedRisk?m="skipped":p.severity==="info"?m="passing":m="failure",{classname:`${p.packageName}@${p.version}`,failureMessage:`${p.severity.toUpperCase()} vis.policy.${p.policy}`,failureText:p.reason,failureType:p.severity.toUpperCase(),name:`vis.policy.${p.policy}`,status:m,...m==="passing"?{systemOut:p.reason}:{}}}),r=i.length+a.length,o=i.filter(p=>p.status==="failure").length+a.filter(p=>p.status==="failure").length,c=i.filter(p=>p.status==="skipped").length+a.filter(p=>p.status==="skipped").length;let l=`<?xml version="1.0" encoding="UTF-8"?>
+<testsuites name="${X(n)}" tests="${String(r)}" failures="${String(o)}" skipped="${String(c)}" errors="0" time="0">
+`;return l+=mt("vulnerabilities",i,t),a.length>0&&(l+=mt("policies",a,t)),l+=`</testsuites>
+`,l},Pi=e=>{const t=new Map,n=[],i=e.artifactUri??(kt(e.workspaceRoot,kn(e.workspaceRoot,"package.json"))||"package.json");for(const o of e.findings){const{acknowledged:c,packageName:l,packageVersion:p,vulnerability:m}=o,w=si(m.severity),h=Fe(m.severity);t.has(m.id)||t.set(m.id,{defaultConfiguration:{level:w},fullDescription:{text:m.summary||`Advisory ${m.id}`},helpUri:M(m.id),id:m.id,name:m.id,properties:{precision:"very-high","security-severity":li(m),"severity-label":h,tags:["security","vulnerability","supply-chain",`severity:${h}`]},shortDescription:{text:(m.summary.split(`
+`)[0]??m.id).slice(0,200)}}),n.push({level:w,locations:[{logicalLocations:[{kind:"package",name:`${l}@${p}`}],physicalLocation:{artifactLocation:{uri:i}}}],message:{text:`${m.id}: ${l}@${p} — ${m.summary||"no summary"}${m.fixedVersions.length>0?` (fix: ${m.fixedVersions.join(", ")})`:""}`},partialFingerprints:{advisoryId:m.id,package:l,version:p},properties:{...c?{acknowledged:!0}:{},...m.aliases&&m.aliases.length>0?{aliases:m.aliases}:{},...typeof m.cvssScore=="number"?{cvssScore:m.cvssScore}:{},...m.fixedVersions.length>0?{fixedVersions:m.fixedVersions}:{},packageName:l,packageVersion:p,severityLabel:h},ruleId:m.id})}const a={block:"error",info:"note",warn:"warning"},r={block:"high",info:"none",warn:"medium"};for(const o of e.policyDecisions??[]){if(o.policy==="vulnerability")continue;const c=`vis.policy.${o.policy}`,l=a[o.severity],p=r[o.severity];t.has(c)||t.set(c,{defaultConfiguration:{level:l},fullDescription:{text:`vis policy '${o.policy}' (Socket.dev-style supply-chain gate)`},helpUri:`https://visulima.com/packages/vis/commands/audit#policy-${o.policy}`,id:c,name:c,properties:{precision:"high","security-severity":o.severity==="block"?"8.0":o.severity==="warn"?"5.5":"0.0","severity-label":p,tags:["security","supply-chain","policy",`policy:${o.policy}`]},shortDescription:{text:`vis policy: ${o.policy}`}}),n.push({level:l,locations:[{logicalLocations:[{kind:"package",name:`${o.packageName}@${o.version}`}],physicalLocation:{artifactLocation:{uri:i}}}],message:{text:o.reason},partialFingerprints:{package:o.packageName,policy:o.policy,version:o.version},properties:{...o.acceptedRisk?{acknowledged:!0}:{},packageName:o.packageName,packageVersion:o.version,severityLabel:p},ruleId:c})}return{$schema:"https://json.schemastore.org/sarif-2.1.0.json",runs:[{results:n,tool:{driver:{informationUri:e.tool.informationUri,name:e.tool.name,rules:[...t.values()],version:e.tool.version}}}],version:"2.1.0"}},Ti=["dependencies","devDependencies","optionalDependencies","peerDependencies"],ht=e=>{try{return{path:e,pkg:$t(e)}}catch{return}},Li=e=>{const t=[],n=ht(V(e,"package.json"));n&&t.push({path:n.path,pkg:n.pkg,workspaceName:n.pkg.name});const i=tn(e);let a;if(i?a=i:n?.pkg.workspaces&&(Array.isArray(n.pkg.workspaces)?a=n.pkg.workspaces:n.pkg.workspaces.packages&&(a=n.pkg.workspaces.packages)),!a)return t;for(const r of nn(e,a)){const o=ht(V(e,r,"package.json"));o&&t.push({path:o.path,pkg:o.pkg,workspaceName:o.pkg.name})}return t},Di=(e,t)=>{const n=[];for(const i of e)for(const a of Ti){const r=i.pkg[a]?.[t];typeof r=="string"&&n.push({field:a,manifest:i,range:r})}return n},Ct=e=>{const t=Li(e.workspaceRoot),n=[],i=[],a=[],r=new Set;for(const o of e.findings){const c=o.vulnerability.fixedVersions[0];if(!c){a.push({packageName:o.packageName,reason:"no-fixed-version"});continue}const l=Di(t,o.packageName);if(l.length===0){a.push({packageName:o.packageName,reason:"transitive-only"});continue}const p=D.coerce(c),m=p?`^${p.version}`:c,w=p?p.version:c;for(const h of l){const y=`${h.manifest.path}::${h.field}::${o.packageName}::${w}`;if(r.has(y))continue;r.add(y);const x=_i(w,h.range),u={currentRange:h.range,field:h.field,inRange:x,manifestPath:h.manifest.path,packageName:o.packageName,targetSpec:m,targetVersion:w,workspaceName:h.manifest.workspaceName};x||e.allowMajor===!0?n.push(u):i.push(u)}}return{apply:n,skippedMajor:i,unmatched:a}},Mi=/^(?:workspace|file|link|portal|patch|git\+|git:|github:|npm:|catalog|jsr|http|https):/i,_i=(e,t)=>{if(Mi.test(t))return!0;const n=D.coerce(e)?.version??e;try{return D.satisfies(n,t)}catch{return!0}},Vi=e=>{const t=[];if(e.apply.length>0){t.push(`Apply (${String(e.apply.length)}):`);for(const n of e.apply){const i=n.workspaceName?` [${n.workspaceName}]`:"";t.push(`  + ${n.packageName}: ${n.currentRange} → ${n.targetSpec}${i}`)}}if(e.skippedMajor.length>0){t.push(`Skipped — major bump (${String(e.skippedMajor.length)}, requires --allow-major):`);for(const n of e.skippedMajor){const i=n.workspaceName?` [${n.workspaceName}]`:"";t.push(`  ! ${n.packageName}: ${n.currentRange} → ${n.targetSpec}${i}`)}}if(e.unmatched.length>0){const n=e.unmatched.filter(a=>a.reason==="transitive-only"),i=e.unmatched.filter(a=>a.reason==="no-fixed-version");if(n.length>0){t.push(`Transitive only (${String(n.length)}, requires --fix-transitive):`);for(const a of n)t.push(`  · ${a.packageName}`)}if(i.length>0){t.push(`No fixed version available (${String(i.length)}):`);for(const a of i)t.push(`  · ${a.packageName}`)}}return t.length===0?"No direct-dep fixes to apply.":t.join(`
+`)},Fi=5,Ui=64,zi=(e,t)=>{if(t.length===0)return[];const n=new Set;for(const i of e){if(t.includes(i)){n.add(i);continue}let a=!1;for(const r of t)try{D.satisfies(r,i)&&(n.add(r),a=!0)}catch{}!a&&t.length===1&&n.add(t[0])}return[...n]},Wi=e=>{const t=new Map;for(const a of e.entries){let r=t.get(a.name);r||(r=[],t.set(a.name,r)),r.includes(a.version)||r.push(a.version)}const n=new Map;for(const a of e.entries){const r=`${a.name}@${a.version}`;let o=n.get(r);o||(o=new Map,n.set(r,o));for(const c of[a.dependencies,a.peerDependencies,a.optionalDependencies])if(c)for(const[l,p]of Object.entries(c)){const m=t.get(l)??[],w=zi(p,m);for(const h of w){const y=`${l}@${h}`;o.has(y)||o.set(y,{name:l,version:h})}}}const i=new Map;for(const[a,r]of n)i.set(a,{children:[...r.values()]});return{adjacency:i,versionsByName:t}},Hi=(e,t)=>{const n=t.get(e.name);if(!(!n||n.length===0)){if(n.includes(e.version))return{name:e.name,version:e.version};for(const i of n)try{if(D.satisfies(i,e.version))return{name:e.name,version:i}}catch{}if(n.length===1)return{name:e.name,version:n[0]}}},Bi=(e,t,n={})=>{const i=n.maxPathsPerTarget??Fi,a=n.maxDepth??Ui;if(i<=0)return[];const{adjacency:r,versionsByName:o}=Wi(e),c=`${t.name}@${t.version}`,l=[],p=[],m=new Set;for(const y of e.roots){const x=Hi(y,o);if(!x)continue;const u=`${x.name}@${x.version}`;m.has(u)||(m.add(u),p.push(x))}const w=[];for(const y of p){const x=`${y.name}@${y.version}`;if(x===c){if(l.push([y]),l.length>=i)return l;continue}w.push({node:y,path:[y],visited:new Set([x])})}let h=0;for(;h<w.length&&l.length<i;){const y=w[h];if(h+=1,y.path.length>=a)continue;const u=r.get(`${y.node.name}@${y.node.version}`)?.children??[];for(const $ of u){const b=`${$.name}@${$.version}`;if(y.visited.has(b))continue;const N=[...y.path,$];if(b===c){if(l.push(N),l.length>=i)return l;continue}const A=new Set(y.visited);A.add(b),w.push({node:$,path:N,visited:A})}}return l},Gi=["ts","tsx","js","jsx","mjs","cjs","mts","cts"],Ki=[/node_modules/,/\.git/,/\.next/,/\.cache/,/dist/,/build/,/coverage/,/\.turbo/,/\.nx/,/\.parcel-cache/],qi=["dependencies","devDependencies","peerDependencies","optionalDependencies"],Yi=/(?:import|export)\s+(?:[\s\S]*?from\s+)?["']([^"'\n]+)["']/g,Ji=/(?:^|[^.\w$])require\s*\(\s*["']([^"'\n]+)["']\s*\)/g,Xi=/\bimport\s*\(\s*["']([^"'\n]+)["']\s*\)/g,Zi=e=>{if(e.startsWith(".")||e.startsWith("/")||/^[a-z][a-z0-9+.-]*:/i.test(e))return;const t=e.trim();if(t.length!==0){if(t.startsWith("@")){const n=t.split("/");return n.length<2?void 0:`${n[0]}/${n[1]}`}return t.split("/")[0]}},Qi=e=>{const t=new Set,n=e.replaceAll(/\/\*[\s\S]*?\*\//g,"").replaceAll(/(^|[^:])\/\/.*$/gm,"$1"),i=a=>{a.lastIndex=0;let r;for(;(r=a.exec(n))!==null;){const o=Zi(r[1]);o&&t.add(o)}};return i(Yi),i(Ji),i(Xi),t},ea=e=>{const t=new Set;try{const n=$t(e);for(const i of qi){const a=n[i];if(a&&typeof a=="object"&&!Array.isArray(a))for(const r of Object.keys(a))t.add(r)}}catch{}return t},ta=e=>{const t=e.skip??Ki,n=e.extensions??Gi,i=new Set;let a=0;const r=lt(e.workspaceRoot,{extensions:n,includeDirs:!1,skip:t});for(const l of r){a+=1;try{const p=Dn(l,"utf8");for(const m of Qi(p))i.add(m)}catch{}}const o=lt(e.workspaceRoot,{extensions:["json"],includeDirs:!1,skip:t}).filter(l=>l.endsWith("/package.json")||l.endsWith(String.raw`\package.json`)||l.endsWith("package.json"));for(const l of o)for(const p of ea(l))i.add(p);if(e.alwaysAssumeUsed)for(const l of e.alwaysAssumeUsed)i.add(l);const c=new Set;for(const l of e.vulnerablePackages)i.has(l)&&c.add(l);return{filesScanned:a,importedTotal:i,reachable:c}},na=e=>{const t=D.coerce(e)?.major;return t!==void 0&&t>=10},ia=e=>Object.fromEntries(Object.entries(e).sort(([t],[n])=>t.localeCompare(n))),aa=(e,t)=>`${JSON.stringify(e,void 0,t)}
+`,Et=(e,t)=>{if(t.name==="pnpm"&&na(t.version))return{filePath:V(e,"pnpm-workspace.yaml"),surface:"pnpm-workspace.yaml"};const n=V(e,"package.json");return t.name==="pnpm"?{filePath:n,surface:"package.json#pnpm.overrides"}:t.name==="yarn"?{filePath:n,surface:"package.json#resolutions"}:{filePath:n,surface:"package.json#overrides"}},ra=(e,t)=>{const{filePath:n,surface:i}=Et(e,t);if(!Z(n))return{};if(i==="pnpm-workspace.yaml")try{return ze(n)?.overrides??{}}catch{return{}}try{const a=JSON.parse(Se(n));return i==="package.json#pnpm.overrides"?(a.pnpm??{}).overrides??{}:i==="package.json#resolutions"?a.resolutions??{}:a.overrides??{}}catch{return{}}},oa=(e,t)=>{const n=Object.keys(t).sort();if(n.length===0&&!/^overrides\s*:/m.test(e))return e;const i=`overrides:
 ${n.map(r=>`  '${r}': '${t[r]}'`).join(`
 `)}
 `;if(e.length===0)return i;if(/^overrides\s*:/m.test(e)){const r=e.replace(/^overrides\s*:[^\n]*\n(?:[ \t][^\n]*\n)*/m,i);return r.endsWith(`
@@ -302,21 +302,22 @@ ${n.map(r=>`  '${r}': '${t[r]}'`).join(`
 `}return`${e.endsWith(`
 `)?e:`${e}
 `}
-${i}`},ua=(e,t,n,i)=>{const a=Xt(e,t.length>0?t:void 0),r=t.length>0?JSON.parse(t):{};if(n==="package.json#pnpm.overrides"){const o=r.pnpm??{};o.overrides=i,r.pnpm=o}else n==="package.json#resolutions"?r.resolutions=i:r.overrides=i;return pa(r,a)},ga=(e,t,n)=>{const{filePath:i,surface:a}=$t(e,n),r=da(e,n),o=X(i)?xe(i):"",s=[],l={...r};for(const h of t.entries){const b=r[h.packageName];if(b===h.spec){s.push({...h,previousSpec:b,status:"unchanged"});continue}b===void 0?s.push({...h,status:"added"}):s.push({...h,previousSpec:b,status:"updated"}),l[h.packageName]=h.spec}const p=la(l),g=s.some(h=>h.status!=="unchanged"),w=a==="pnpm-workspace.yaml"?fa(o,p):ua(i,o,a,p);return{changed:g,entries:s,filePath:i,nextContent:w,previousContent:o,surface:a}},ma=e=>{if(!e.changed)return e;if(e.surface==="pnpm-workspace.yaml"&&e.previousContent.length===0)throw new Error(`${e.filePath} not found. Run \`pnpm init\` or create pnpm-workspace.yaml before applying overrides for pnpm v10+.`);const t=`${e.filePath}.tmp`;try{xn(t,e.nextContent),kn(t,e.filePath)}catch(n){try{$n(t)}catch{}throw n}return e},ha=e=>{const t=new Map;for(const i of e){const a=i.vulnerability.fixedVersions[0];if(!a)continue;const r=_.coerce(a),o=r?`^${r.version}`:a;t.set(i.packageName,o)}return{entries:[...t.entries()].sort(([i],[a])=>i.localeCompare(a)).map(([i,a])=>({packageName:i,spec:a}))}},va={critical:ye,high:ut,low:ft,medium:be},De=new Set(["cargo","crates.io","go","maven","npm","pypi","rubygems"]),wa=e=>{const t=(e??"npm").split(",").map(a=>a.trim()).filter(a=>a.length>0),n=t.length>0?t:["npm"],i=n.filter(a=>!De.has(a.toLowerCase()));return{all:n,unsupported:i}},ya={CRITICAL:ye,HIGH:ut,LOW:ft,MODERATE:be,UNKNOWN:T},ba=(e,t,n,i)=>{const a=ya[n.severity]??T,r=i?` ${T("[acknowledged]")}`:"",o=n.fixedVersions??[],s=o.length>0?` (fix: ${o.join(", ")})`:"";return`  ${a(n.severity)} ${n.id} — ${e}@${t}${r}
-    ${n.summary}${s}`},xa=(e,t)=>{const n=Nn(e),i=`${String(Math.round(e.score.overall*100))}%`,a=t?` ${T("[acknowledged]")}`:"",r=e.alerts.length>0?`, ${String(e.alerts.length)} alert${e.alerts.length===1?"":"s"}`:"";return`  ${i} ${n}@${e.version} (${On(e.score.overall)}${r})${a}`},ka=new Set(["aube","auto","vis"]),ne=e=>e!==void 0&&ka.has(e),$a=(e,t,n)=>{if(e!==void 0&&!ne(e))throw new Error(`Invalid --backend value '${e}'. Expected one of: aube, auto, vis.`);const i=process.env.VIS_AUDIT_BACKEND;if(i!==void 0&&i!==""&&!ne(i))throw new Error(`Invalid VIS_AUDIT_BACKEND value '${i}'. Expected one of: aube, auto, vis.`);const a=ne(i)?i:void 0,r=ne(t)?t:void 0,s=(ne(e)?e:void 0)??a??r??"auto";return s==="aube"?"aube":s==="vis"?"vis":(n?.install?.backend??process.env.VIS_INSTALLER)==="aube"&&Vt("aube")!==null?"aube":"vis"},Sa=e=>{if(e!==void 0)switch(e){case"critical":return"critical";case"high":return"high";case"low":return"low";case"medium":return"moderate";default:return e}},Aa=(e,t,n)=>{const i=["audit"],a=Sa(t.severity);a!==void 0&&i.push("--audit-level",a),(t.prodOnly===!0||t.prod===!0)&&i.push("--prod"),(t.json===!0||t.format==="json")&&i.push("--json");const r=t.fix===!0;t["fix-transitive"]===!0||t.fixTransitive===!0?i.push("--fix=override"):r&&i.push("--fix=update");const s=[];t.offline===!0&&s.push("--offline (aube has its own offline cache)"),(t.format==="sarif"||t.format==="csaf"||t.format==="cyclonedx"||t.format==="cyclonedx-vex"||t.format==="gitlab"||t.format==="junit")&&s.push(`--format=${String(t.format)} (only json/text is forwarded to aube)`),s.length>0&&u.warn(`Delegating to 'aube audit'. Skipping vis-only flags: ${s.join(", ")}`);const l=_t("aube",i,{cwd:e,stdio:"inherit"});if(l.error){const{code:p}=l.error;return p==="ENOENT"?u.error("Backend 'aube' selected but the 'aube' binary was not found on PATH. Install aube or run with --backend vis."):u.error(`Failed to spawn aube: ${l.error.message}`),1}return l.status??1},Ea=async(e,t,n,i,a)=>{if($a(n.backend,i?.security?.audit?.backend,i)==="aube"){process.exitCode=Aa(t,n);return}const o=n.severity??"low",s=n.format??"table",l=s==="sarif",p=s==="csaf",g=s==="cyclonedx-vex"||s==="cyclonedx",w=s==="gitlab",h=s==="junit",b=s==="json"||!!n.json,x=n.report,m=i?.security?.audit,$=i?.security?.policies,y=n.offline===void 0?!!m?.offlineByDefault:!!n.offline,C=n.db,A=wa(n.ecosystem),L=!!n.prodOnly,G=n.failOn??$?.vulnerability?.failOn,Et=!!n.showFixes,re=!!n.showAccepted,Se=i?.security?.acceptedRisks,Ue=$?.vulnerability?.usage,Ct=n.usage===void 0?!!Ue?.enabled:n.usage,I=b||l||p||g||w||h,We=n.explain,Ae=We!==void 0,ze=Ae&&!l&&!p&&!g&&!w&&!h;if(Ae&&y){u.error("`--explain` needs network access and cannot run in offline mode (--offline or security.audit.offlineByDefault)."),process.exitCode=1;return}Ae&&!ze&&u.warn(`\`--explain\` has no effect with --format=${s}; explanations are only rendered in table, json, and HTML output.`);const P=an(t),N=Vn(t,P.name);if(y){const c=C??mn(t);if(!await e.access(c).then(()=>!0).catch(()=>!1)){const f=new tt(c);I?process.stderr.write(`${f.message}
-`):u.error(f.message),process.exitCode=1;return}}!I&&(N.ignoredAdvisories.length>0||N.excludedPackages.length>0)&&u.info(`Loaded ${String(N.ignoredAdvisories.length)} ignored advisor${N.ignoredAdvisories.length===1?"y":"ies"} and ${String(N.excludedPackages.length)} excluded package${N.excludedPackages.length===1?"":"s"} from ${P.name} config.`),!I&&A.unsupported.length>0&&u.warn(`Ecosystems ${A.unsupported.map(c=>`'${c}'`).join(", ")} are not yet supported by the audit matcher. Supported: npm, pypi, crates.io, cargo, maven, go, rubygems.`);const M=hn(t,P.name,{includeDev:!L});if(M.length===0){u.info(`No ${P.name} lockfile entries found. Run ${P.name} install first.`);return}if(!I){const c=L?"production-only packages":"installed packages";u.info(`Scanning ${String(M.length)} ${c}${y?" (offline)":""}…`)}const oe=M.map(c=>({name:c.name,version:c.version})),se=i?.security?.audit?.advisories?.bloom?.mode??"off";let U=[];if(se!=="off")try{const c=await Sn(t,{softFail:se==="on"});if(c){if(U=An(c,oe).map(d=>({name:d.name,version:d.version})),!I&&U.length>0){u.warn(`osv-bloom prefilter flagged ${String(U.length)} package${U.length===1?"":"s"} as possibly malicious (MAL-*). Confirming via the advisory query path…`);const d=10;for(const f of U.slice(0,d))u.warn(`  ${ye("[bloom]")} ${f.name}@${f.version}`);U.length>d&&u.warn(`  …and ${String(U.length-d)} more (full list in --format json output)`)}}else I||u.info(T("osv-bloom cache absent — skipping prefilter (run `vis advisories bloom sync` to enable)."))}catch(c){if(c instanceof En&&se==="required"){const f=`${c.message} (security.audit.advisories.bloom.mode = "required")`;I?process.stderr.write(`${f}
-`):u.error(f),process.exitCode=1;return}const d=c instanceof Error?c.message:String(c);if(se==="required"){I?process.stderr.write(`osv-bloom prefilter failed: ${d}
-`):u.error(`osv-bloom prefilter failed: ${d}`),process.exitCode=1;return}I||u.warn(`osv-bloom prefilter failed (continuing): ${d}`)}const ce=new Set;y?ce.add("socket").add("deps-dev"):(Qe("socket")&&ce.add("socket"),Qe("depsDev")&&ce.add("deps-dev"));const Ee=Zt(i?.security,{disabled:ce,minimumScore:$?.score?.minimum}),Ce=Ee.length>0,Nt=Ee.map(c=>c.displayName).join(" + "),le=$?.score?.minimum??Cn,K=vn(t,P.name),Ot=[{id:"vulnerabilities",label:y?"Known vulnerabilities (offline OSV cache)":"Known vulnerabilities (OSV)"},...Ce?[{id:"security",label:`Supply-chain reports (${Nt})`}]:[]],V=gn(Ot,{live:!I}),It=Date.now(),q=c=>{const d=Date.now()-c;return d>=1e3?`${(d/1e3).toFixed(1)}s`:`${String(Math.round(d))}ms`};let Ne,Oe;try{const c=Date.now(),d=Date.now();V.start("vulnerabilities"),Ce&&V.start("security");const f=y?Promise.resolve().then(()=>nt(oe,{dbPath:C,ecosystem:A.all.find(v=>De.has(v.toLowerCase()))??"npm",workspaceRoot:t})).then(v=>{let k=0;for(const E of v.values())k+=E.length;return V.finish("vulnerabilities",k>0?"warn":"ok",k>0?`${String(k)} found · ${q(c)}`:`none found · ${q(c)}`),v}).catch(v=>{const k=v instanceof Error?v.message:String(v);if(V.finish("vulnerabilities","error",k),v instanceof tt)throw v;return new Map}):Qt(oe).then(v=>{let k=0;for(const E of v.values())k+=E.length;return V.finish("vulnerabilities",k>0?"warn":"ok",k>0?`${String(k)} found · ${q(c)}`:`none found · ${q(c)}`),v}).catch(v=>{const k=v instanceof Error?v.message:String(v);return V.finish("vulnerabilities","error",k),new Map});[Ne,Oe]=await Promise.all([f,Ce?en(Ee,oe).then(v=>{let k=0,E=0;for(const Y of v.values())k+=Y.alerts.length,Y.score.overall<le&&(E+=1);const j=k+E;return V.finish("security",j>0?"warn":"ok",j>0?`${String(k)} alert${k===1?"":"s"}, ${String(E)} low-score · ${q(d)}`:`clean · ${q(d)}`),v}).catch(v=>{const k=v instanceof Error?v.message:String(v);return V.finish("security","error",k),new Map}):Promise.resolve(new Map)])}finally{V.stop()}b||u.info(T(`Scan completed in ${q(It)}`));const pe=[];for(const c of M){if(Fn(c.name,N))continue;const d=Ne.get(c.name)??[],f=Oe.get(`${c.name}@${c.version}`),v=it(c.name,c.version,Se),k=d.length>0,E=f?f.score.overall<le:!1,j=f?f.alerts.length>0:!1;(k||E||j)&&pe.push({acceptedRisk:v,name:c.name,socketReport:f,version:c.version,vulnerabilities:d})}if(y){const c=A.all.filter(d=>De.has(d.toLowerCase())&&d.toLowerCase()!=="npm");for(const d of c){const f=kt(d),v=Xi(t,f);if(v.length!==0){I||u.info(T(`Scanning ${String(v.length)} ${f} packages…`));try{const k=nt(v.map(E=>({name:E.name,version:E.version})),{dbPath:C,ecosystem:f,workspaceRoot:t});for(const E of v){const j=k.get(E.name)??[];j.length!==0&&pe.push({acceptedRisk:it(E.name,E.version,Se),name:E.name,version:E.version,vulnerabilities:j})}}catch(k){const E=k instanceof Error?k.message:String(k);u.warn(`Failed to scan ${f}: ${E}`)}}}}let O=pe.filter(c=>{const d=c.vulnerabilities.some(k=>ve(k.severity,o)),f=c.socketReport?.alerts.some(k=>ve(k.severity==="medium"?"MODERATE":k.severity.toUpperCase(),o)),v=c.socketReport&&c.socketReport.score.overall<le;return d||f||v});const Rt=n.policies,Be=[],R=await(async()=>{const d=on().map(Y=>`'${Y}'`).join(", "),f=sn(Rt,Y=>{Be.push(Y);const Ze=`Unknown policy '${Y}' — ignoring. Available: ${d}.`;I?process.stderr.write(`vis audit: ${Ze}
-`):u.warn(Ze)});if(f?.size===0)return[];const v=i?.security?.policies?.license,k=!!(v&&((v.allow?.length??0)>0||(v.deny?.length??0)>0)),E=f===void 0||f.has("license"),j=k&&E?yn(t):void 0;return cn({manifestData:j,offline:y,osvFindings:Ne,packageManager:P.name,packages:M,socketReports:Oe,workspaceRoot:t},"audit",{enabledPolicies:f,visConfig:i??{}})})();if(Ct){const c=new Set(O.filter(f=>f.vulnerabilities.length>0).map(f=>f.name)),d=sa({alwaysAssumeUsed:Ue?.alwaysAssumeUsed,vulnerablePackages:c,workspaceRoot:t});O=O.filter(f=>f.vulnerabilities.length===0?!0:d.reachable.has(f.name)),I||u.info(T(`Reachability filter: ${String(d.reachable.size)}/${String(c.size)} vulnerable packages reachable (${String(d.filesScanned)} files scanned).`))}const He=wn(t,P.name),Ge=He?O.map(c=>{const d=Pi(He,{name:c.name,version:c.version});return{...c,dependencyPaths:d}}):O.map(c=>({...c,dependencyPaths:[]})),W=()=>Ge.flatMap(c=>c.vulnerabilities.map(d=>({acknowledged:!!c.acceptedRisk||ae(d.id,N,d.aliases),dependencyPaths:c.dependencyPaths,packageName:c.name,packageVersion:c.version,vulnerability:d}))),Ke=!!n.fix,qe=!!n.fixTransitive,Ye=!!n.yes,Pt=!!n.allowMajor;if(Ke||qe){const c=W().filter(d=>!d.acknowledged);if(Ke){const d=await Na({actionableFindings:c,allowMajor:Pt,pm:P,workspaceRoot:t,yes:Ye});if(d!==void 0){process.exitCode=d;return}}if(qe){const d=await Oa({actionableFindings:c,pm:P,visConfig:i,workspaceRoot:t,yes:Ye});if(d!==void 0){process.exitCode=d;return}}}const de=new Map;if(ze){const c=Rn(W().filter(f=>!f.acknowledged).map(f=>({packageName:f.packageName,packageVersion:f.packageVersion,vulnerability:f.vulnerability})).sort(gt),We),d=await Mn(c,i?.ai,{info:f=>{u.info(f)},warn:f=>{u.warn(f)}});for(const[f,v]of d)de.set(f,v)}if(l){const c=bi({findings:W(),policyDecisions:R,tool:{informationUri:"https://github.com/visulima/visulima",name:"vis-audit",version:"alpha"},workspaceRoot:t});process.stdout.write(`${JSON.stringify(c,void 0,2)}
-`),ie(O,N,n.exitCode,G,R);return}if(p){const c=li({findings:W(),tool:{informationUri:"https://github.com/visulima/visulima",name:"vis-audit",version:"alpha"}});process.stdout.write(`${JSON.stringify(c,void 0,2)}
-`),ie(O,N,n.exitCode,G,R);return}if(g){const{packageJsons:c,workspace:d}=tn(t,i),f=nn(t,d,c),v=dn({includeDev:!L,projectGraph:f,workspace:d,workspaceRoot:t}),k=fi({bom:v,findings:W()});process.stdout.write(`${JSON.stringify(k,void 0,2)}
-`),ie(O,N,n.exitCode,G,R);return}if(w){const c=vi({findings:W(),policyDecisions:R,tool:{informationUri:"https://github.com/visulima/visulima",name:"vis-audit",version:"alpha"},workspaceRoot:t});process.stdout.write(`${JSON.stringify(c,void 0,2)}
-`),ie(O,N,n.exitCode,G,R);return}if(h){const c=yi({findings:W(),policyDecisions:R});process.stdout.write(c),ie(O,N,n.exitCode,G,R);return}const Ie={informationUri:"https://github.com/visulima/visulima",name:"vis-audit",version:"alpha"},fe=zn({bloomHits:U,duplicates:K,explanations:de,filtered:Ge,packagesScanned:M.length,policyDecisions:R,tool:Ie,unknownPolicyTokens:Be,workspaceRoot:t});if(x){const c=si({findings:W().map(f=>{const v=de.get(ke({packageName:f.packageName,packageVersion:f.packageVersion,vulnerability:f.vulnerability}));return v?{...f,explanation:v}:f}),packagesScanned:M.length,policyDecisions:R,report:fe,tool:{name:Ie.name,version:Ie.version}}),d=Mt(t,x);await e.writeFile(d,c,"utf8"),I||u.success(`HTML report written to ${d}`)}if(b){process.stdout.write(`${JSON.stringify(fe,void 0,2)}
-`),n.exitCode&&(fe.summary.issues>0||fe.summary.policyBlocks>0)&&(process.exitCode=1),Me(O,N,G,R);return}if(O.length===0){u.success(`No security issues found across ${String(M.length)} packages.`);return}const Q={CRITICAL:[],HIGH:[],LOW:[],MODERATE:[]};for(const c of O)for(const d of c.vulnerabilities)if(ve(d.severity,o)){const f=d.severity==="UNKNOWN"?"LOW":d.severity;Q[f]?.push({entry:c,vuln:d})}let ue=0,Re=0;for(const c of["CRITICAL","HIGH","MODERATE","LOW"]){const d=Q[c];if(!(!d||d.length===0)){u.info(`
-── ${c} (${String(d.length)}) ──`);for(const{entry:f,vuln:v}of d){const k=!!f.acceptedRisk||ae(v.id,N,v.aliases);if(k&&(Re++,!re))continue;ue++,u.info(ba(f.name,f.version,v,k)),Et&&(v.fixedVersions??[]).length>0&&u.notice(`    Fix: update to ${v.fixedVersions.at(-1)}`);const E=de.get(ke({packageName:f.name,packageVersion:f.version,vulnerability:v}));if(E)for(const j of E.split(`
-`))u.info(`    ${j}`)}}}const ee=O.filter(c=>c.socketReport&&(c.socketReport.score.overall<le||c.socketReport.alerts.length>0));if(ee.length>0){u.info(`
-── Socket.dev Supply Chain (${String(ee.length)}) ──`);for(const c of ee){if(!c.socketReport)continue;const d=!!c.acceptedRisk;if(!(d&&!re)){u.info(xa(c.socketReport,d));for(const f of c.socketReport.alerts){const v=va[f.severity]??T;u.info(`    ${v(`[${f.severity.toUpperCase()}]`)} ${f.type} — ${f.category}`)}}}}if(K.length>0){u.info(`
-── Duplicate Dependencies (${String(K.length)}) ──`);for(const c of K){const d=c.versions.join(", ");u.info(`  ${c.name} — ${String(c.versions.length)} versions: ${be(d)}`)}}const Je=new Set;for(const c of["CRITICAL","HIGH","MODERATE","LOW"]){const d=Q[c];if(d)for(const{vuln:f}of d)Je.add(f.id)}const Pe=R.filter(c=>{if(c.policy!=="vulnerability")return!0;const d=typeof c.data?.advisoryId=="string"?c.data.advisoryId:void 0;return c.severity==="block"&&d!==void 0&&!Je.has(d)});if(Pe.length>0){u.info(`
-── Policy Decisions (${String(Pe.length)}) ──`);for(const c of Pe){const d=!!c.acceptedRisk;if(d&&!re)continue;const f=c.severity==="block"?ye:c.severity==="warn"?be:T,v=d?` ${T("[acknowledged]")}`:"";u.info(`  ${f(`[${c.severity}]`)} ${c.policy} — ${c.reason}${v}`)}}const ge=c=>!!c.acceptedRisk||c.vulnerabilities.length>0&&c.vulnerabilities.every(d=>ae(d.id,N,d.aliases)),Xe=O.filter(c=>!ge(c)).length;if(u.info(""),u.info("─ Audit Summary"),u.info(`  ${String(M.length)} packages scanned`),N.ignoredAdvisories.length>0&&u.info(`  ${String(N.ignoredAdvisories.length)} ${P.name} audit exclusion${N.ignoredAdvisories.length===1?"":"s"} applied`),ue>0){const c=Q.CRITICAL?.filter(f=>!ge(f.entry)).length??0,d=Q.HIGH?.filter(f=>!ge(f.entry)).length??0;u.error(`  ${String(ue)} vulnerabilit${ue===1?"y":"ies"} found`),c>0&&u.error(`    ${String(c)} critical`),d>0&&u.warn(`    ${String(d)} high`)}else u.success("  No vulnerabilities found");if(ee.length>0){const c=ee.filter(d=>!ge(d)).length;u.warn(`  ${String(c)} package${c===1?"":"s"} with Socket.dev supply chain issues`)}K.length>0&&(u.warn(`  ${String(K.length)} package${K.length===1?"":"s"} with duplicate versions`),u.notice("  Run 'vis dedupe' or your package manager's dedupe command to reduce duplicates."));const me=R.filter(c=>c.severity==="block"&&!c.acceptedRisk);if(me.length>0&&u.error(`  ${String(me.length)} policy block${me.length===1?"":"s"}`),Re>0&&(u.info(`  ${String(Re)} acknowledged (accepted risks)`),re||u.notice("  Use --show-accepted to see acknowledged issues.")),Xe===0&&u.success(`
-  All issues are acknowledged. No action required.`),n.sync&&Se){const c=new Set;for(const f of pe)if(f.acceptedRisk){for(const v of f.vulnerabilities)if((v.id.startsWith("CVE-")||v.id.startsWith("GHSA-"))&&c.add(v.id),v.aliases)for(const k of v.aliases)(k.startsWith("CVE-")||k.startsWith("GHSA-"))&&c.add(k)}const d=[...c];if(d.length>0){u.info("");const f=Un(P.name,t,d);for(const v of f)u.success(`  ${v}`)}else u.info(`
-No advisory IDs to sync to native PM config.`)}n.exitCode&&(Xe>0||me.length>0)&&(process.exitCode=1),Me(O,N,G,R)},St=e=>!e||e.length===0?!1:e.some(t=>t.severity==="block"&&!t.acceptedRisk),Me=(e,t,n,i)=>{if(St(i)&&(process.exitCode=1),!n)return;e.some(r=>r.vulnerabilities.some(o=>r.acceptedRisk||ae(o.id,t,o.aliases)?!1:ve(o.severity,n)))&&(process.exitCode=1)},ie=(e,t,n,i,a)=>{n&&(e.filter(o=>!o.acceptedRisk&&o.vulnerabilities.some(s=>!ae(s.id,t,s.aliases))).length>0||St(a))&&(process.exitCode=1),Me(e,t,i,a)},At=async(e,t)=>{if(!process.stdin.isTTY)return t;const n=Dt({input:process.stdin,output:process.stderr});try{const i=t?"[Y/n]":"[y/N]",a=await new Promise(r=>{n.question(`${e} ${T(i)} `,o=>{r(o.trim())})});return a.length===0?t:a.toLowerCase().startsWith("y")}finally{n.close()}},Ca=e=>e==="pnpm"||e==="npm"||e==="yarn"||e==="bun",Na=async e=>{const t=xt({allowMajor:e.allowMajor,findings:e.actionableFindings,workspaceRoot:e.workspaceRoot});if(u.info(""),u.info("─ Apply (direct deps)"),u.info(Ei(t)),t.apply.length===0){u.info("Nothing to apply for direct deps.");return}if(je&&!e.yes)return u.error("Refusing to run --fix in CI without --yes. Re-run with --yes once the plan above looks right."),1;if(!e.yes&&!await At("Apply these direct-dep upgrades?",!1))return u.info("Aborted — no changes made."),0;const n=new Map;for(const i of t.apply){const a=i.workspaceName??"",r=n.get(a);r?r.push(i):n.set(a,[i])}for(const[i,a]of n){const r=a.map(l=>`${l.packageName}@${l.targetSpec}`),o=i.length>0?[i]:[];u.info(`Running ${e.pm.name} add ${r.join(" ")}${i.length>0?` --filter ${i}`:""}`);const s=rn(e.pm,{exact:!1,filter:o,global:!1,optional:!1,packages:r,peer:!1,saveDev:!1,workspace:!1,workspaceRoot:!1},e.workspaceRoot,console);if(s!==0)return u.error(`${e.pm.name} add exited ${String(s)} — aborting before rescan.`),s}return u.success("Direct-dep upgrades applied. Re-run `vis audit` to confirm the fixes landed."),0},Oa=async e=>{if(!Ca(e.pm.name))return u.error(`--fix-transitive is not supported for package manager "${e.pm.name}". Use pnpm, npm, yarn, or bun.`),1;const t=!!e.visConfig?.security?.audit?.apply?.transitive?.enabled;if(je&&(!e.yes||!t))return u.error("Refusing to run --fix-transitive in CI without both --yes and security.audit.apply.transitive.enabled = true. Overrides have a higher blast radius than direct bumps — gate on config."),1;const n=new Set(xt({findings:e.actionableFindings,workspaceRoot:e.workspaceRoot}).apply.map(o=>o.packageName)),i=e.actionableFindings.filter(o=>!n.has(o.packageName)),a=ha(i);if(a.entries.length===0){u.info(""),u.info("─ Apply transitive (overrides)"),u.info("Nothing to override — all vulnerable packages are direct deps or have no fixed version.");return}const r=ga(e.workspaceRoot,a,{name:e.pm.name,version:e.pm.version});u.info(""),u.info("─ Apply transitive (overrides)"),u.info(`Target: ${r.filePath} (${r.surface})`);for(const o of r.entries){const s=o.status==="added"?"+":o.status==="updated"?"~":"·",l=o.previousSpec?` (was ${o.previousSpec})`:"";u.info(`  ${s} ${o.packageName}: ${o.spec}${l}`)}if(!r.changed){u.info("No changes — overrides already match the plan.");return}if(!e.yes){if(je)return 1;if(!await At("Write these overrides?",!1))return u.info("Aborted — no changes made."),0}try{ma(r)}catch(o){const s=o instanceof Error?o.message:String(o);return u.error(`Failed to write overrides: ${s}`),1}return u.success(`Wrote ${String(r.entries.filter(o=>o.status!=="unchanged").length)} override${r.entries.length===1?"":"s"}. Run \`${e.pm.name} install\` then re-run \`vis audit\` to confirm the fixes landed.`),0},er=async({fs:e,logger:t,options:n,visConfig:i,workspaceRoot:a})=>{if(!a)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");await Ea(e,a,n,i)};export{er as default,Sa as mapSeverityToAube,$a as resolveAuditBackend};
+${i}`},sa=(e,t,n,i)=>{const a=an(e,t.length>0?t:void 0),r=t.length>0?JSON.parse(t):{};if(n==="package.json#pnpm.overrides"){const o=r.pnpm??{};o.overrides=i,r.pnpm=o}else n==="package.json#resolutions"?r.resolutions=i:r.overrides=i;return aa(r,a)},ca=(e,t,n)=>{const{filePath:i,surface:a}=Et(e,n),r=ra(e,n),o=Z(i)?Se(i):"",c=[],l={...r};for(const h of t.entries){const y=r[h.packageName];if(y===h.spec){c.push({...h,previousSpec:y,status:"unchanged"});continue}y===void 0?c.push({...h,status:"added"}):c.push({...h,previousSpec:y,status:"updated"}),l[h.packageName]=h.spec}const p=ia(l),m=c.some(h=>h.status!=="unchanged"),w=a==="pnpm-workspace.yaml"?oa(o,p):sa(i,o,a,p);return{changed:m,entries:c,filePath:i,nextContent:w,previousContent:o,surface:a}},la=e=>{if(!e.changed)return e;if(e.surface==="pnpm-workspace.yaml"&&e.previousContent.length===0)throw new Error(`${e.filePath} not found. Run \`pnpm init\` or create pnpm-workspace.yaml before applying overrides for pnpm v10+.`);const t=`${e.filePath}.tmp`;try{Mn(t,e.nextContent),_n(t,e.filePath)}catch(n){try{Vn(t)}catch{}throw n}return e},pa=e=>{const t=new Map;for(const i of e){const a=i.vulnerability.fixedVersions[0];if(!a)continue;const r=D.coerce(a),o=r?`^${r.version}`:a;t.set(i.packageName,o)}return{entries:[...t.entries()].sort(([i],[a])=>i.localeCompare(a)).map(([i,a])=>({packageName:i,spec:a}))}},da={critical:ke,high:bt,low:yt,medium:$e},Ot=new Set(["cargo","composer","crates.io","dart","go","gradle","hex","maven","npm","nuget","packagist","pub","pypi","rubygems","swift","swifturl"]),fa=(e,t)=>t?[]:e.filter(n=>oe(n)!=="npm"),ga=e=>{const t=(e??"npm").split(",").map(a=>a.trim()).filter(a=>a.length>0),n=t.length>0?t:["npm"],i=n.filter(a=>!Ot.has(a.toLowerCase()));return{all:n,unsupported:i}},vt=e=>e.some(t=>oe(t)==="npm"),wt=e=>[...new Set(e.filter(t=>Ot.has(t.toLowerCase())&&oe(t)!=="npm").map(t=>oe(t)))],ua=(e,t,n)=>{const i=[];for(const a of new Set(t.map(r=>oe(r)))){if(a==="npm"){const r=Sn(e,n);(!r||!Z(V(e,r.file)))&&i.push(`npm: no ${r?.file??`${n} lock file`} in ${e}`);continue}if(On(e,a)===void 0){const r=In(a);i.push(r.length>0?`${a}: no ${r.join(" or ")} in ${e}`:`${a}: vis has no lock file reader for this ecosystem`)}}return i},ma=new Map([["zig",e=>`--ecosystem ${e} is not supported: OSV has no Zig ecosystem and vis finds no Zig lockfile with versions, so the audit cannot check Zig packages. Remove ${e} from --ecosystem.`]]),ha=e=>{for(const t of e){const n=ma.get(t.toLowerCase());if(n)return n(t)}},va={CRITICAL:ke,HIGH:bt,LOW:yt,MODERATE:$e,UNKNOWN:P},wa=(e,t,n,i)=>{const a=va[n.severity]??P,r=i?` ${P("[acknowledged]")}`:"",o=n.fixedVersions??[],c=o.length>0?` (fix: ${o.join(", ")})`:"";return`  ${a(n.severity)} ${n.id} — ${e}@${t}${r}
+    ${n.summary}${c}`},ya=(e,t)=>{const n=Un(e),i=`${String(Math.round(e.score.overall*100))}%`,a=t?` ${P("[acknowledged]")}`:"",r=e.alerts.length>0?`, ${String(e.alerts.length)} alert${e.alerts.length===1?"":"s"}`:"";return`  ${i} ${n}@${e.version} (${zn(e.score.overall)}${r})${a}`},ba=new Set(["aube","auto","vis"]),ie=e=>e!==void 0&&ba.has(e),xa=(e,t,n)=>{if(e!==void 0&&!ie(e))throw new Error(`Invalid --backend value '${e}'. Expected one of: aube, auto, vis.`);const i=process.env.VIS_AUDIT_BACKEND;if(i!==void 0&&i!==""&&!ie(i))throw new Error(`Invalid VIS_AUDIT_BACKEND value '${i}'. Expected one of: aube, auto, vis.`);const a=ie(i)?i:void 0,r=ie(t)?t:void 0,c=(ie(e)?e:void 0)??a??r??"auto";return c==="aube"?"aube":c==="vis"?"vis":(n?.install?.backend??process.env.VIS_INSTALLER)==="aube"&&Bt("aube")!==null?"aube":"vis"},ka=e=>{if(e!==void 0)switch(e){case"critical":return"critical";case"high":return"high";case"low":return"low";case"medium":return"moderate";default:return e}},$a=(e,t,n)=>{const i=["audit"],a=ka(t.severity);a!==void 0&&i.push("--audit-level",a),(t.prodOnly===!0||t.prod===!0)&&i.push("--prod"),(t.json===!0||t.format==="json")&&i.push("--json");const r=t.fix===!0;t["fix-transitive"]===!0||t.fixTransitive===!0?i.push("--fix=override"):r&&i.push("--fix=update");const c=[];t.offline===!0&&c.push("--offline (aube has its own offline cache)"),(t.format==="sarif"||t.format==="csaf"||t.format==="cyclonedx"||t.format==="cyclonedx-vex"||t.format==="gitlab"||t.format==="junit")&&c.push(`--format=${String(t.format)} (only json/text is forwarded to aube)`),c.length>0&&g.warn(`Delegating to 'aube audit'. Skipping vis-only flags: ${c.join(", ")}`);const l=zt("aube",i,{cwd:e,stdio:"inherit"});if(l.error){const{code:p}=l.error;return p==="ENOENT"?g.error("Backend 'aube' selected but the 'aube' binary was not found on PATH. Install aube or run with --backend vis."):g.error(`Failed to spawn aube: ${l.error.message}`),1}return l.status??1},Sa=async(e,t,n,i,a)=>{const r=i?.security?.audit,o=n.offline===void 0?!!r?.offlineByDefault:!!n.offline,c=ga(n.ecosystem),l=ha(c.all);if(l){g.error(l),process.exitCode=1;return}const p=fa(c.all,o);if(p.length>0){g.error(`--ecosystem ${p.join(",")} needs --offline: the online advisory catalog only covers npm, so these would be skipped. Pass --offline, or drop them from --ecosystem.`),process.exitCode=1;return}if(xa(n.backend,r?.backend,i)==="aube"){process.exitCode=$a(t,n);return}const w=n.severity??"low",h=n.format??"table",y=h==="sarif",x=h==="csaf",u=h==="cyclonedx-vex"||h==="cyclonedx",$=h==="gitlab",b=h==="junit",N=h==="json"||!!n.json,A=n.report,T=i?.security?.policies,Ce=n.db,Ee=!!n.prodOnly,K=n.failOn??T?.vulnerability?.failOn,jt=!!n.showFixes,se=!!n.showAccepted,Oe=i?.security?.acceptedRisks,He=T?.vulnerability?.usage,Pt=n.usage===void 0?!!He?.enabled:n.usage,E=N||y||x||u||$||b,Be=n.explain,Ie=Be!==void 0,Ge=Ie&&!y&&!x&&!u&&!$&&!b;if(Ie&&o){g.error("`--explain` needs network access and cannot run in offline mode (--offline or security.audit.offlineByDefault)."),process.exitCode=1;return}Ie&&!Ge&&g.warn(`\`--explain\` has no effect with --format=${h}; explanations are only rendered in table, json, and HTML output.`);const j=fn(t),C=Zn(t,j.name);if(o){const s=Ce??rn(t),f=await e.access(s).then(()=>!0).catch(()=>!1)?on(s):new rt(s);if(f){E?process.stderr.write(`${f.message}
+`):g.error(f.message),process.exitCode=1;return}}if(!E&&(C.ignoredAdvisories.length>0||C.excludedPackages.length>0)&&g.info(`Loaded ${String(C.ignoredAdvisories.length)} ignored advisor${C.ignoredAdvisories.length===1?"y":"ies"} and ${String(C.excludedPackages.length)} excluded package${C.excludedPackages.length===1?"":"s"} from ${j.name} config.`),!E&&c.unsupported.length>0&&g.warn(`Ecosystems ${c.unsupported.map(s=>`'${s}'`).join(", ")} are not yet supported by the audit matcher. Supported: npm, pypi, crates.io, cargo, maven, gradle, go, rubygems.`),o){const s=ua(t,c.all,j.name);if(s.length>0){const d=`--offline has nothing to scan: ${s.join("; ")}. Run the install that writes the lock file, or drop the ecosystem from --ecosystem.`;E?process.stderr.write(`${d}
+`):g.error(d),process.exitCode=1;return}}const L=!o||vt(c.all)?An(t,j.name,{includeDev:!Ee}):[],Ke=o?wt(c.all).map(s=>({ecosystem:s,packages:Rn(t,s)})).filter(s=>s.packages.length>0):[],F=o&&wt(c.all).includes("Maven")?jn(t):[];if(!E&&F.length>0){const s=F.slice(0,5).join(", "),d=F.length>5?`, and ${String(F.length-5)} more`:"";g.warn(`${String(F.length)} Maven ${F.length===1?"dependency has":"dependencies have"} no pinned version in the pom and ${F.length===1?"was":"were"} not checked: ${s}${d}. Pin the version to audit ${F.length===1?"it":"them"}.`)}if(L.length===0&&Ke.length===0){g.info(o&&!vt(c.all)?`No dependencies found in the lock files for ${c.all.join(", ")}. Nothing to scan.`:`No ${j.name} lockfile entries found. Run ${j.name} install first.`);return}if(!E&&L.length>0){const s=Ee?"production-only packages":"installed packages";g.info(`Scanning ${String(L.length)} ${s}${o?" (offline)":""}…`)}const ce=L.map(s=>({name:s.name,version:s.version})),le=i?.security?.audit?.advisories?.bloom?.mode??"off";let U=[];if(le!=="off")try{const s=await Pn(t,{softFail:le==="on"});if(s){if(U=Tn(s,ce).map(d=>({name:d.name,version:d.version})),!E&&U.length>0){g.warn(`osv-bloom prefilter flagged ${String(U.length)} package${U.length===1?"":"s"} as possibly malicious (MAL-*). Confirming via the advisory query path…`);const d=10;for(const f of U.slice(0,d))g.warn(`  ${ke("[bloom]")} ${f.name}@${f.version}`);U.length>d&&g.warn(`  …and ${String(U.length-d)} more (full list in --format json output)`)}}else E||g.info(P("osv-bloom cache absent — skipping prefilter (run `vis advisories bloom sync` to enable)."))}catch(s){if(s instanceof Ln&&le==="required"){const f=`${s.message} (security.audit.advisories.bloom.mode = "required")`;E?process.stderr.write(`${f}
+`):g.error(f),process.exitCode=1;return}const d=s instanceof Error?s.message:String(s);if(le==="required"){E?process.stderr.write(`osv-bloom prefilter failed: ${d}
+`):g.error(`osv-bloom prefilter failed: ${d}`),process.exitCode=1;return}E||g.warn(`osv-bloom prefilter failed (continuing): ${d}`)}const pe=new Set;o?pe.add("socket").add("deps-dev"):(it("socket")&&pe.add("socket"),it("depsDev")&&pe.add("deps-dev"));const Re=sn(i?.security,{disabled:pe,minimumScore:T?.score?.minimum}),je=Re.length>0,Tt=Re.map(s=>s.displayName).join(" + "),de=T?.score?.minimum??Fn,q=Nn(t,j.name),Lt=[{id:"vulnerabilities",label:o?"Known vulnerabilities (offline OSV cache)":"Known vulnerabilities (OSV)"},...je?[{id:"security",label:`Supply-chain reports (${Tt})`}]:[]],_=$n(Lt,{live:!E}),Dt=Date.now(),Y=s=>{const d=Date.now()-s;return d>=1e3?`${(d/1e3).toFixed(1)}s`:`${String(Math.round(d))}ms`};let fe,Pe;try{const s=Date.now(),d=Date.now();_.start("vulnerabilities"),je&&_.start("security");const f=o?Promise.resolve().then(()=>ot(ce,{dbPath:Ce,ecosystem:"npm",workspaceRoot:t})).then(v=>{let k=0;for(const R of v.values())k+=R.length;return _.finish("vulnerabilities",k>0?"warn":"ok",k>0?`${String(k)} found · ${Y(s)}`:`none found · ${Y(s)}`),v}).catch(v=>{const k=v instanceof Error?v.message:String(v);if(_.finish("vulnerabilities","error",k),v instanceof rt)throw v;return new Map}):cn(ce).then(v=>{let k=0;for(const R of v.values())k+=R.length;return _.finish("vulnerabilities",k>0?"warn":"ok",k>0?`${String(k)} found · ${Y(s)}`:`none found · ${Y(s)}`),v}).catch(v=>{const k=v instanceof Error?v.message:String(v);return _.finish("vulnerabilities","error",k),new Map});[fe,Pe]=await Promise.all([f,je?ln(Re,ce).then(v=>{let k=0,R=0;for(const J of v.values())k+=J.alerts.length,J.score.overall<de&&(R+=1);const W=k+R;return _.finish("security",W>0?"warn":"ok",W>0?`${String(k)} alert${k===1?"":"s"}, ${String(R)} low-score · ${Y(d)}`:`clean · ${Y(d)}`),v}).catch(v=>{const k=v instanceof Error?v.message:String(v);return _.finish("security","error",k),new Map}):Promise.resolve(new Map)])}finally{_.stop()}N||g.info(P(`Scan completed in ${Y(Dt)}`));const ge=[];for(const s of L){if(Qn(s.name,C))continue;const d=(o?fe.get(st(s.name,s.version)):fe.get(s.name))??[],f=Pe.get(`${s.name}@${s.version}`),v=ct(s.name,s.version,Oe),k=d.length>0,R=f?f.score.overall<de:!1,W=f?f.alerts.length>0:!1;(k||R||W)&&ge.push({acceptedRisk:v,name:s.name,socketReport:f,version:s.version,vulnerabilities:d})}if(o)for(const{ecosystem:s,packages:d}of Ke){E||g.info(P(`Scanning ${String(d.length)} ${s} packages…`));try{const f=ot(d.map(v=>({name:v.name,version:v.version})),{dbPath:Ce,ecosystem:s,workspaceRoot:t});for(const v of d){const k=f.get(st(v.name,v.version))??[];k.length!==0&&ge.push({acceptedRisk:ct(v.name,v.version,Oe),name:v.name,version:v.version,vulnerabilities:k})}}catch(f){const v=f instanceof Error?f.message:String(f);g.warn(`Failed to scan ${s}: ${v}`)}}let O=ge.filter(s=>{const d=s.vulnerabilities.some(k=>be(k.severity,w)),f=s.socketReport?.alerts.some(k=>be(k.severity==="medium"?"MODERATE":k.severity.toUpperCase(),w)),v=s.socketReport&&s.socketReport.score.overall<de;return d||f||v});const Mt=n.policies,qe=[],I=await(async()=>{const d=un().map(J=>`'${J}'`).join(", "),f=mn(Mt,J=>{qe.push(J);const nt=`Unknown policy '${J}' — ignoring. Available: ${d}.`;E?process.stderr.write(`vis audit: ${nt}
+`):g.warn(nt)});if(f?.size===0)return[];const v=i?.security?.policies?.license,k=!!(v&&((v.allow?.length??0)>0||(v.deny?.length??0)>0)),R=f===void 0||f.has("license"),W=k&&R?En(t):void 0;return hn({manifestData:W,offline:o,osvFindings:fe,packageManager:j.name,packages:L,socketReports:Pe,workspaceRoot:t},"audit",{enabledPolicies:f,visConfig:i??{}})})();if(Pt){const s=new Set(O.filter(f=>f.vulnerabilities.length>0).map(f=>f.name)),d=ta({alwaysAssumeUsed:He?.alwaysAssumeUsed,vulnerablePackages:s,workspaceRoot:t});O=O.filter(f=>f.vulnerabilities.length===0?!0:d.reachable.has(f.name)),E||g.info(P(`Reachability filter: ${String(d.reachable.size)}/${String(s.size)} vulnerable packages reachable (${String(d.filesScanned)} files scanned).`))}const Ye=Cn(t,j.name),Je=Ye?O.map(s=>{const d=Bi(Ye,{name:s.name,version:s.version});return{...s,dependencyPaths:d}}):O.map(s=>({...s,dependencyPaths:[]})),z=()=>Je.flatMap(s=>s.vulnerabilities.map(d=>({acknowledged:!!s.acceptedRisk||re(d.id,C,d.aliases),dependencyPaths:s.dependencyPaths,packageName:s.name,packageVersion:s.version,vulnerability:d}))),Xe=!!n.fix,Ze=!!n.fixTransitive,Qe=!!n.yes,_t=!!n.allowMajor;if(Xe||Ze){const s=z().filter(d=>!d.acknowledged);if(Xe){const d=await Na({actionableFindings:s,allowMajor:_t,pm:j,workspaceRoot:t,yes:Qe});if(d!==void 0){process.exitCode=d;return}}if(Ze){const d=await Ca({actionableFindings:s,pm:j,visConfig:i,workspaceRoot:t,yes:Qe});if(d!==void 0){process.exitCode=d;return}}}const ue=new Map;if(Ge){const s=Hn(z().filter(f=>!f.acknowledged).map(f=>({packageName:f.packageName,packageVersion:f.packageVersion,vulnerability:f.vulnerability})).sort(xt),Be),d=await Xn(s,i?.ai,{info:f=>{g.info(f)},warn:f=>{g.warn(f)}});for(const[f,v]of d)ue.set(f,v)}if(y){const s=Pi({findings:z(),policyDecisions:I,tool:{informationUri:"https://github.com/visulima/visulima",name:"vis-audit",version:"alpha"},workspaceRoot:t});process.stdout.write(`${JSON.stringify(s,void 0,2)}
+`),ae(O,C,n.exitCode,K,I);return}if(x){const s=ki({findings:z(),tool:{informationUri:"https://github.com/visulima/visulima",name:"vis-audit",version:"alpha"}});process.stdout.write(`${JSON.stringify(s,void 0,2)}
+`),ae(O,C,n.exitCode,K,I);return}if(u){const{packageJsons:s,workspace:d}=pn(t,i),f=dn(t,d,s),v=yn({ecosystems:new Set(bn),includeDev:!Ee,projectGraph:f,workspace:d,workspaceRoot:t}),k=Ai({bom:v,findings:z()});process.stdout.write(`${JSON.stringify(k,void 0,2)}
+`),ae(O,C,n.exitCode,K,I);return}if($){const s=Ii({findings:z(),policyDecisions:I,tool:{informationUri:"https://github.com/visulima/visulima",name:"vis-audit",version:"alpha"},workspaceRoot:t});process.stdout.write(`${JSON.stringify(s,void 0,2)}
+`),ae(O,C,n.exitCode,K,I);return}if(b){const s=ji({findings:z(),policyDecisions:I});process.stdout.write(s),ae(O,C,n.exitCode,K,I);return}const Te={informationUri:"https://github.com/visulima/visulima",name:"vis-audit",version:"alpha"},me=ni({bloomHits:U,duplicates:q,explanations:ue,filtered:Je,packagesScanned:L.length,policyDecisions:I,tool:Te,unknownPolicyTokens:qe,workspaceRoot:t});if(A){const s=bi({findings:z().map(f=>{const v=ue.get(Ae({packageName:f.packageName,packageVersion:f.packageVersion,vulnerability:f.vulnerability}));return v?{...f,explanation:v}:f}),packagesScanned:L.length,policyDecisions:I,report:me,tool:{name:Te.name,version:Te.version}}),d=Ht(t,A);await e.writeFile(d,s,"utf8"),E||g.success(`HTML report written to ${d}`)}if(N){process.stdout.write(`${JSON.stringify(me,void 0,2)}
+`),n.exitCode&&(me.summary.issues>0||me.summary.policyBlocks>0)&&(process.exitCode=1),Ue(O,C,K,I);return}if(O.length===0){g.success(`No security issues found across ${String(L.length)} packages.`);return}const ee={CRITICAL:[],HIGH:[],LOW:[],MODERATE:[]};for(const s of O)for(const d of s.vulnerabilities)if(be(d.severity,w)){const f=d.severity==="UNKNOWN"?"LOW":d.severity;ee[f]?.push({entry:s,vuln:d})}let he=0,Le=0;for(const s of["CRITICAL","HIGH","MODERATE","LOW"]){const d=ee[s];if(!(!d||d.length===0)){g.info(`
+── ${s} (${String(d.length)}) ──`);for(const{entry:f,vuln:v}of d){const k=!!f.acceptedRisk||re(v.id,C,v.aliases);if(k&&(Le++,!se))continue;he++,g.info(wa(f.name,f.version,v,k)),jt&&(v.fixedVersions??[]).length>0&&g.notice(`    Fix: update to ${v.fixedVersions.at(-1)}`);const R=ue.get(Ae({packageName:f.name,packageVersion:f.version,vulnerability:v}));if(R)for(const W of R.split(`
+`))g.info(`    ${W}`)}}}const te=O.filter(s=>s.socketReport&&(s.socketReport.score.overall<de||s.socketReport.alerts.length>0));if(te.length>0){g.info(`
+── Socket.dev Supply Chain (${String(te.length)}) ──`);for(const s of te){if(!s.socketReport)continue;const d=!!s.acceptedRisk;if(!(d&&!se)){g.info(ya(s.socketReport,d));for(const f of s.socketReport.alerts){const v=da[f.severity]??P;g.info(`    ${v(`[${f.severity.toUpperCase()}]`)} ${f.type} — ${f.category}`)}}}}if(q.length>0){g.info(`
+── Duplicate Dependencies (${String(q.length)}) ──`);for(const s of q){const d=s.versions.join(", ");g.info(`  ${s.name} — ${String(s.versions.length)} versions: ${$e(d)}`)}}const et=new Set;for(const s of["CRITICAL","HIGH","MODERATE","LOW"]){const d=ee[s];if(d)for(const{vuln:f}of d)et.add(f.id)}const De=I.filter(s=>{if(s.policy!=="vulnerability")return!0;const d=typeof s.data?.advisoryId=="string"?s.data.advisoryId:void 0;return s.severity==="block"&&d!==void 0&&!et.has(d)});if(De.length>0){g.info(`
+── Policy Decisions (${String(De.length)}) ──`);for(const s of De){const d=!!s.acceptedRisk;if(d&&!se)continue;const f=s.severity==="block"?ke:s.severity==="warn"?$e:P,v=d?` ${P("[acknowledged]")}`:"";g.info(`  ${f(`[${s.severity}]`)} ${s.policy} — ${s.reason}${v}`)}}const ve=s=>!!s.acceptedRisk||s.vulnerabilities.length>0&&s.vulnerabilities.every(d=>re(d.id,C,d.aliases)),tt=O.filter(s=>!ve(s)).length;if(g.info(""),g.info("─ Audit Summary"),g.info(`  ${String(L.length)} packages scanned`),C.ignoredAdvisories.length>0&&g.info(`  ${String(C.ignoredAdvisories.length)} ${j.name} audit exclusion${C.ignoredAdvisories.length===1?"":"s"} applied`),he>0){const s=ee.CRITICAL?.filter(f=>!ve(f.entry)).length??0,d=ee.HIGH?.filter(f=>!ve(f.entry)).length??0;g.error(`  ${String(he)} vulnerabilit${he===1?"y":"ies"} found`),s>0&&g.error(`    ${String(s)} critical`),d>0&&g.warn(`    ${String(d)} high`)}else g.success("  No vulnerabilities found");if(te.length>0){const s=te.filter(d=>!ve(d)).length;g.warn(`  ${String(s)} package${s===1?"":"s"} with Socket.dev supply chain issues`)}q.length>0&&(g.warn(`  ${String(q.length)} package${q.length===1?"":"s"} with duplicate versions`),g.notice("  Run 'vis dedupe' or your package manager's dedupe command to reduce duplicates."));const we=I.filter(s=>s.severity==="block"&&!s.acceptedRisk);if(we.length>0&&g.error(`  ${String(we.length)} policy block${we.length===1?"":"s"}`),Le>0&&(g.info(`  ${String(Le)} acknowledged (accepted risks)`),se||g.notice("  Use --show-accepted to see acknowledged issues.")),tt===0&&g.success(`
+  All issues are acknowledged. No action required.`),n.sync&&Oe){const s=new Set;for(const f of ge)if(f.acceptedRisk){for(const v of f.vulnerabilities)if((v.id.startsWith("CVE-")||v.id.startsWith("GHSA-"))&&s.add(v.id),v.aliases)for(const k of v.aliases)(k.startsWith("CVE-")||k.startsWith("GHSA-"))&&s.add(k)}const d=[...s];if(d.length>0){g.info("");const f=ei(j.name,t,d);for(const v of f)g.success(`  ${v}`)}else g.info(`
+No advisory IDs to sync to native PM config.`)}n.exitCode&&(tt>0||we.length>0)&&(process.exitCode=1),Ue(O,C,K,I)},It=e=>!e||e.length===0?!1:e.some(t=>t.severity==="block"&&!t.acceptedRisk),Ue=(e,t,n,i)=>{if(It(i)&&(process.exitCode=1),!n)return;e.some(r=>r.vulnerabilities.some(o=>r.acceptedRisk||re(o.id,t,o.aliases)?!1:be(o.severity,n)))&&(process.exitCode=1)},ae=(e,t,n,i,a)=>{n&&(e.filter(o=>!o.acceptedRisk&&o.vulnerabilities.some(c=>!re(c.id,t,c.aliases))).length>0||It(a))&&(process.exitCode=1),Ue(e,t,i,a)},Rt=async(e,t)=>{if(!process.stdin.isTTY)return t;const n=Wt({input:process.stdin,output:process.stderr});try{const i=t?"[Y/n]":"[y/N]",a=await new Promise(r=>{n.question(`${e} ${P(i)} `,o=>{r(o.trim())})});return a.length===0?t:a.toLowerCase().startsWith("y")}finally{n.close()}},Aa=e=>e==="pnpm"||e==="npm"||e==="yarn"||e==="bun",Na=async e=>{const t=Ct({allowMajor:e.allowMajor,findings:e.actionableFindings,workspaceRoot:e.workspaceRoot});if(g.info(""),g.info("─ Apply (direct deps)"),g.info(Vi(t)),t.apply.length===0){g.info("Nothing to apply for direct deps.");return}if(_e&&!e.yes)return g.error("Refusing to run --fix in CI without --yes. Re-run with --yes once the plan above looks right."),1;if(!e.yes&&!await Rt("Apply these direct-dep upgrades?",!1))return g.info("Aborted — no changes made."),0;const n=new Map;for(const i of t.apply){const a=i.workspaceName??"",r=n.get(a);r?r.push(i):n.set(a,[i])}for(const[i,a]of n){const r=a.map(l=>`${l.packageName}@${l.targetSpec}`),o=i.length>0?[i]:[];g.info(`Running ${e.pm.name} add ${r.join(" ")}${i.length>0?` --filter ${i}`:""}`);const c=gn(e.pm,{exact:!1,filter:o,global:!1,optional:!1,packages:r,peer:!1,saveDev:!1,workspace:!1,workspaceRoot:!1},e.workspaceRoot,console);if(c!==0)return g.error(`${e.pm.name} add exited ${String(c)} — aborting before rescan.`),c}return g.success("Direct-dep upgrades applied. Re-run `vis audit` to confirm the fixes landed."),0},Ca=async e=>{if(!Aa(e.pm.name))return g.error(`--fix-transitive is not supported for package manager "${e.pm.name}". Use pnpm, npm, yarn, or bun.`),1;const t=!!e.visConfig?.security?.audit?.apply?.transitive?.enabled;if(_e&&(!e.yes||!t))return g.error("Refusing to run --fix-transitive in CI without both --yes and security.audit.apply.transitive.enabled = true. Overrides have a higher blast radius than direct bumps — gate on config."),1;const n=new Set(Ct({findings:e.actionableFindings,workspaceRoot:e.workspaceRoot}).apply.map(o=>o.packageName)),i=e.actionableFindings.filter(o=>!n.has(o.packageName)),a=pa(i);if(a.entries.length===0){g.info(""),g.info("─ Apply transitive (overrides)"),g.info("Nothing to override — all vulnerable packages are direct deps or have no fixed version.");return}const r=ca(e.workspaceRoot,a,{name:e.pm.name,version:e.pm.version});g.info(""),g.info("─ Apply transitive (overrides)"),g.info(`Target: ${r.filePath} (${r.surface})`);for(const o of r.entries){const c=o.status==="added"?"+":o.status==="updated"?"~":"·",l=o.previousSpec?` (was ${o.previousSpec})`:"";g.info(`  ${c} ${o.packageName}: ${o.spec}${l}`)}if(!r.changed){g.info("No changes — overrides already match the plan.");return}if(!e.yes){if(_e)return 1;if(!await Rt("Write these overrides?",!1))return g.info("Aborted — no changes made."),0}try{la(r)}catch(o){const c=o instanceof Error?o.message:String(o);return g.error(`Failed to write overrides: ${c}`),1}return g.success(`Wrote ${String(r.entries.filter(o=>o.status!=="unchanged").length)} override${r.entries.length===1?"":"s"}. Run \`${e.pm.name} install\` then re-run \`vis audit\` to confirm the fixes landed.`),0},Za=async({fs:e,logger:t,options:n,visConfig:i,workspaceRoot:a})=>{if(!a)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");await Sa(e,a,n,i)};export{Za as default,ka as mapSeverityToAube,fa as nonNpmEcosystemsWithoutOffline,vt as npmRequested,ua as offlineLockfileGaps,wt as offlineNonNpmEcosystems,ha as refusedEcosystemMessage,xa as resolveAuditBackend};