@vltpkg/query 1.0.0-rc.32 → 1.0.0-rc.34

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (215) hide show
  1. package/dist/index.js +10 -6
  2. package/dist/parser.js +2 -1
  3. package/dist/pseudo/hostname.js +3 -1
  4. package/dist/pseudo/malware.d.ts +3 -16
  5. package/dist/pseudo/malware.js +11 -171
  6. package/dist/pseudo/scripts.js +1 -1
  7. package/dist/pseudo/vuln.d.ts +22 -0
  8. package/dist/pseudo/vuln.js +220 -0
  9. package/dist/pseudo.js +3 -3
  10. package/dist/types.d.ts +3 -2
  11. package/package.json +19 -10
  12. package/skills/dss-query/REFERENCE.md +123 -0
  13. package/skills/dss-query/SKILL.md +190 -0
  14. package/skills/dss-query/evals/README.md +79 -0
  15. package/skills/dss-query/evals/evals.json +89 -0
  16. package/skills/dss-query/evals/grade.mjs +480 -0
  17. package/src/attribute.ts +186 -0
  18. package/src/combinator.ts +132 -0
  19. package/src/id.ts +46 -0
  20. package/src/index.ts +620 -0
  21. package/src/parser.ts +122 -0
  22. package/src/pseudo/abandoned.ts +9 -0
  23. package/src/pseudo/attr.ts +92 -0
  24. package/src/pseudo/built.ts +19 -0
  25. package/src/pseudo/confused.ts +29 -0
  26. package/src/pseudo/cve.ts +93 -0
  27. package/src/pseudo/cwe.ts +97 -0
  28. package/src/pseudo/debug.ts +9 -0
  29. package/src/pseudo/deprecated.ts +9 -0
  30. package/src/pseudo/dev.ts +18 -0
  31. package/src/pseudo/diff.ts +90 -0
  32. package/src/pseudo/dist.ts +144 -0
  33. package/src/pseudo/dynamic.ts +9 -0
  34. package/src/pseudo/empty.ts +15 -0
  35. package/src/pseudo/entropic.ts +9 -0
  36. package/src/pseudo/env.ts +6 -0
  37. package/src/pseudo/eval.ts +9 -0
  38. package/src/pseudo/fs.ts +9 -0
  39. package/src/pseudo/helpers.ts +106 -0
  40. package/src/pseudo/host.ts +111 -0
  41. package/src/pseudo/hostname.ts +156 -0
  42. package/src/pseudo/license.ts +134 -0
  43. package/src/pseudo/link.ts +30 -0
  44. package/src/pseudo/malware.ts +41 -0
  45. package/src/pseudo/minified.ts +9 -0
  46. package/src/pseudo/missing.ts +16 -0
  47. package/src/pseudo/native.ts +9 -0
  48. package/src/pseudo/network.ts +9 -0
  49. package/src/pseudo/obfuscated.ts +9 -0
  50. package/src/pseudo/optional.ts +18 -0
  51. package/src/pseudo/outdated.ts +305 -0
  52. package/src/pseudo/overridden.ts +20 -0
  53. package/src/pseudo/path.ts +146 -0
  54. package/src/pseudo/peer.ts +18 -0
  55. package/src/pseudo/prerelease.ts +47 -0
  56. package/src/pseudo/private.ts +19 -0
  57. package/src/pseudo/prod.ts +18 -0
  58. package/src/pseudo/published.ts +248 -0
  59. package/src/pseudo/registry.ts +29 -0
  60. package/src/pseudo/root.ts +19 -0
  61. package/src/pseudo/scanned.ts +20 -0
  62. package/src/pseudo/score.ts +186 -0
  63. package/src/pseudo/scripts.ts +54 -0
  64. package/src/pseudo/semver.ts +320 -0
  65. package/src/pseudo/severity.ts +231 -0
  66. package/src/pseudo/shell.ts +9 -0
  67. package/src/pseudo/shrinkwrap.ts +9 -0
  68. package/src/pseudo/spec.ts +131 -0
  69. package/src/pseudo/squat.ts +225 -0
  70. package/src/pseudo/suspicious.ts +9 -0
  71. package/src/pseudo/tracker.ts +9 -0
  72. package/src/pseudo/trivial.ts +9 -0
  73. package/src/pseudo/type.ts +26 -0
  74. package/src/pseudo/undesirable.ts +9 -0
  75. package/src/pseudo/unknown.ts +9 -0
  76. package/src/pseudo/unmaintained.ts +9 -0
  77. package/src/pseudo/unpopular.ts +9 -0
  78. package/src/pseudo/unstable.ts +9 -0
  79. package/src/pseudo/vuln.ts +273 -0
  80. package/src/pseudo/workspace.ts +22 -0
  81. package/src/pseudo.ts +413 -0
  82. package/src/types.ts +165 -0
  83. package/tap-snapshots/test/attribute.ts.test.cjs +304 -0
  84. package/tap-snapshots/test/combinator.ts.test.cjs +333 -0
  85. package/tap-snapshots/test/id.ts.test.cjs +118 -0
  86. package/tap-snapshots/test/parser.ts.test.cjs +344 -0
  87. package/tap-snapshots/test/pseudo/abandoned.ts.test.cjs +18 -0
  88. package/tap-snapshots/test/pseudo/attr.ts.test.cjs +161 -0
  89. package/tap-snapshots/test/pseudo/built.ts.test.cjs +70 -0
  90. package/tap-snapshots/test/pseudo/confused.ts.test.cjs +32 -0
  91. package/tap-snapshots/test/pseudo/cve.ts.test.cjs +49 -0
  92. package/tap-snapshots/test/pseudo/cwe.ts.test.cjs +49 -0
  93. package/tap-snapshots/test/pseudo/debug.ts.test.cjs +18 -0
  94. package/tap-snapshots/test/pseudo/deprecated.ts.test.cjs +18 -0
  95. package/tap-snapshots/test/pseudo/dist.ts.test.cjs +30 -0
  96. package/tap-snapshots/test/pseudo/dynamic.ts.test.cjs +18 -0
  97. package/tap-snapshots/test/pseudo/empty.ts.test.cjs +50 -0
  98. package/tap-snapshots/test/pseudo/entropic.ts.test.cjs +18 -0
  99. package/tap-snapshots/test/pseudo/env.ts.test.cjs +18 -0
  100. package/tap-snapshots/test/pseudo/eval.ts.test.cjs +18 -0
  101. package/tap-snapshots/test/pseudo/fs.ts.test.cjs +18 -0
  102. package/tap-snapshots/test/pseudo/helpers.ts.test.cjs +18 -0
  103. package/tap-snapshots/test/pseudo/hostname.ts.test.cjs +148 -0
  104. package/tap-snapshots/test/pseudo/license.ts.test.cjs +41 -0
  105. package/tap-snapshots/test/pseudo/link.ts.test.cjs +36 -0
  106. package/tap-snapshots/test/pseudo/malware.ts.test.cjs +22 -0
  107. package/tap-snapshots/test/pseudo/minified.ts.test.cjs +18 -0
  108. package/tap-snapshots/test/pseudo/missing.ts.test.cjs +30 -0
  109. package/tap-snapshots/test/pseudo/native.ts.test.cjs +18 -0
  110. package/tap-snapshots/test/pseudo/network.ts.test.cjs +18 -0
  111. package/tap-snapshots/test/pseudo/obfuscated.ts.test.cjs +18 -0
  112. package/tap-snapshots/test/pseudo/outdated.ts.test.cjs +130 -0
  113. package/tap-snapshots/test/pseudo/overridden.ts.test.cjs +75 -0
  114. package/tap-snapshots/test/pseudo/prerelease.ts.test.cjs +101 -0
  115. package/tap-snapshots/test/pseudo/private.ts.test.cjs +38 -0
  116. package/tap-snapshots/test/pseudo/published.ts.test.cjs +171 -0
  117. package/tap-snapshots/test/pseudo/registry.ts.test.cjs +68 -0
  118. package/tap-snapshots/test/pseudo/root.ts.test.cjs +24 -0
  119. package/tap-snapshots/test/pseudo/scanned.ts.test.cjs +18 -0
  120. package/tap-snapshots/test/pseudo/score.ts.test.cjs +239 -0
  121. package/tap-snapshots/test/pseudo/scripts.ts.test.cjs +61 -0
  122. package/tap-snapshots/test/pseudo/semver.ts.test.cjs +575 -0
  123. package/tap-snapshots/test/pseudo/severity.ts.test.cjs +95 -0
  124. package/tap-snapshots/test/pseudo/shell.ts.test.cjs +18 -0
  125. package/tap-snapshots/test/pseudo/shrinkwrap.ts.test.cjs +18 -0
  126. package/tap-snapshots/test/pseudo/spec.ts.test.cjs +148 -0
  127. package/tap-snapshots/test/pseudo/squat.ts.test.cjs +129 -0
  128. package/tap-snapshots/test/pseudo/suspicious.ts.test.cjs +18 -0
  129. package/tap-snapshots/test/pseudo/tracker.ts.test.cjs +18 -0
  130. package/tap-snapshots/test/pseudo/trivial.ts.test.cjs +18 -0
  131. package/tap-snapshots/test/pseudo/type.ts.test.cjs +51 -0
  132. package/tap-snapshots/test/pseudo/undesirable.ts.test.cjs +18 -0
  133. package/tap-snapshots/test/pseudo/unknown.ts.test.cjs +18 -0
  134. package/tap-snapshots/test/pseudo/unmaintained.ts.test.cjs +18 -0
  135. package/tap-snapshots/test/pseudo/unpopular.ts.test.cjs +18 -0
  136. package/tap-snapshots/test/pseudo/unstable.ts.test.cjs +18 -0
  137. package/tap-snapshots/test/pseudo/vuln.ts.test.cjs +208 -0
  138. package/tap-snapshots/test/pseudo/vulnerable.ts.test.cjs +20 -0
  139. package/tap-snapshots/test/pseudo/workspace.ts.test.cjs +19 -0
  140. package/tap-snapshots/test/pseudo.ts.test.cjs +1247 -0
  141. package/test/attribute.ts +266 -0
  142. package/test/combinator.ts +168 -0
  143. package/test/fixtures/graph.ts +999 -0
  144. package/test/fixtures/selector.ts +103 -0
  145. package/test/fixtures/types.ts +7 -0
  146. package/test/id.ts +102 -0
  147. package/test/index.ts +1000 -0
  148. package/test/parser.ts +117 -0
  149. package/test/pseudo/abandoned.ts +98 -0
  150. package/test/pseudo/attr.ts +298 -0
  151. package/test/pseudo/built.ts +214 -0
  152. package/test/pseudo/confused.ts +160 -0
  153. package/test/pseudo/cve.ts +249 -0
  154. package/test/pseudo/cwe.ts +255 -0
  155. package/test/pseudo/debug.ts +98 -0
  156. package/test/pseudo/deprecated.ts +98 -0
  157. package/test/pseudo/dev.ts +61 -0
  158. package/test/pseudo/diff.ts +417 -0
  159. package/test/pseudo/dist.ts +215 -0
  160. package/test/pseudo/dynamic.ts +98 -0
  161. package/test/pseudo/empty.ts +108 -0
  162. package/test/pseudo/entropic.ts +101 -0
  163. package/test/pseudo/env.ts +98 -0
  164. package/test/pseudo/eval.ts +98 -0
  165. package/test/pseudo/fs.ts +98 -0
  166. package/test/pseudo/helpers.ts +370 -0
  167. package/test/pseudo/host-context.ts +276 -0
  168. package/test/pseudo/hostname.ts +314 -0
  169. package/test/pseudo/license.ts +265 -0
  170. package/test/pseudo/link.ts +94 -0
  171. package/test/pseudo/malware.ts +184 -0
  172. package/test/pseudo/minified.ts +98 -0
  173. package/test/pseudo/missing.ts +111 -0
  174. package/test/pseudo/native.ts +98 -0
  175. package/test/pseudo/network.ts +98 -0
  176. package/test/pseudo/obfuscated.ts +98 -0
  177. package/test/pseudo/optional.ts +73 -0
  178. package/test/pseudo/outdated.ts +331 -0
  179. package/test/pseudo/overridden.ts +317 -0
  180. package/test/pseudo/path.ts +680 -0
  181. package/test/pseudo/peer.ts +101 -0
  182. package/test/pseudo/prerelease.ts +279 -0
  183. package/test/pseudo/private.ts +108 -0
  184. package/test/pseudo/prod.ts +61 -0
  185. package/test/pseudo/published.ts +557 -0
  186. package/test/pseudo/registry.ts +122 -0
  187. package/test/pseudo/root.ts +66 -0
  188. package/test/pseudo/scanned.ts +78 -0
  189. package/test/pseudo/score.ts +591 -0
  190. package/test/pseudo/scripts.ts +294 -0
  191. package/test/pseudo/semver.ts +822 -0
  192. package/test/pseudo/severity.ts +310 -0
  193. package/test/pseudo/shell.ts +98 -0
  194. package/test/pseudo/shrinkwrap.ts +98 -0
  195. package/test/pseudo/spec.ts +525 -0
  196. package/test/pseudo/squat.ts +565 -0
  197. package/test/pseudo/suspicious.ts +98 -0
  198. package/test/pseudo/tracker.ts +98 -0
  199. package/test/pseudo/trivial.ts +98 -0
  200. package/test/pseudo/type.ts +105 -0
  201. package/test/pseudo/undesirable.ts +98 -0
  202. package/test/pseudo/unknown.ts +98 -0
  203. package/test/pseudo/unmaintained.ts +98 -0
  204. package/test/pseudo/unpopular.ts +98 -0
  205. package/test/pseudo/unstable.ts +98 -0
  206. package/test/pseudo/vuln.ts +625 -0
  207. package/test/pseudo/vulnerable.ts +137 -0
  208. package/test/pseudo/workspace.ts +111 -0
  209. package/test/pseudo.ts +558 -0
  210. package/tsconfig.json +3 -0
  211. package/tsconfig.publish.json +19 -0
  212. package/tsconfig.publish.tsbuildinfo +1 -0
  213. package/typedoc.mjs +2 -0
  214. package/dist/pseudo/vulnerable.d.ts +0 -8
  215. package/dist/pseudo/vulnerable.js +0 -17
@@ -0,0 +1,98 @@
1
+ import t from 'tap'
2
+ import { joinDepIDTuple } from '@vltpkg/dep-id'
3
+ import { asSecurityArchiveLike } from '@vltpkg/security-archive'
4
+ import { getSimpleGraph } from '../fixtures/graph.ts'
5
+ import type { ParserState } from '../../src/types.ts'
6
+ import { tracker } from '../../src/pseudo/tracker.ts'
7
+ import { parse } from '../../src/parser.ts'
8
+
9
+ t.test('selects packages with a tracker alert', async t => {
10
+ const getState = (query: string, graph = getSimpleGraph()) => {
11
+ const ast = parse(query)
12
+ const current = ast.first.first
13
+ const state: ParserState = {
14
+ comment: '',
15
+ current,
16
+ initial: {
17
+ edges: new Set(graph.edges.values()),
18
+ nodes: new Set(graph.nodes.values()),
19
+ },
20
+ partial: {
21
+ edges: new Set(graph.edges.values()),
22
+ nodes: new Set(graph.nodes.values()),
23
+ },
24
+ collect: {
25
+ edges: new Set(),
26
+ nodes: new Set(),
27
+ },
28
+ cancellable: async () => {},
29
+ walk: async i => i,
30
+ securityArchive: asSecurityArchiveLike(
31
+ new Map([
32
+ [
33
+ joinDepIDTuple(['registry', '', 'e@1.0.0']),
34
+ { alerts: [{ type: 'telemetry' }] },
35
+ ],
36
+ ]),
37
+ ),
38
+ importers: new Set(graph.importers),
39
+ retries: 0,
40
+ signal: new AbortController().signal,
41
+ specificity: { idCounter: 0, commonCounter: 0 },
42
+ }
43
+ return state
44
+ }
45
+
46
+ await t.test(
47
+ 'filter out any node that does not have the alert',
48
+ async t => {
49
+ const res = await tracker(getState(':tracker'))
50
+ t.strictSame(
51
+ [...res.partial.nodes].map(n => n.name),
52
+ ['e'],
53
+ 'should select only tracker packages',
54
+ )
55
+ t.matchSnapshot({
56
+ nodes: [...res.partial.nodes].map(n => n.name),
57
+ edges: [...res.partial.edges].map(e => e.name),
58
+ })
59
+ },
60
+ )
61
+ })
62
+
63
+ t.test('missing security archive', async t => {
64
+ const getState = (query: string) => {
65
+ const ast = parse(query)
66
+ const current = ast.first.first
67
+ const state: ParserState = {
68
+ comment: '',
69
+ current,
70
+ initial: {
71
+ edges: new Set(),
72
+ nodes: new Set(),
73
+ },
74
+ partial: {
75
+ edges: new Set(),
76
+ nodes: new Set(),
77
+ },
78
+ collect: {
79
+ edges: new Set(),
80
+ nodes: new Set(),
81
+ },
82
+ cancellable: async () => {},
83
+ walk: async i => i,
84
+ securityArchive: undefined,
85
+ importers: new Set(),
86
+ retries: 0,
87
+ signal: new AbortController().signal,
88
+ specificity: { idCounter: 0, commonCounter: 0 },
89
+ }
90
+ return state
91
+ }
92
+
93
+ await t.rejects(
94
+ tracker(getState(':tracker')),
95
+ { message: /Missing security archive/ },
96
+ 'should throw an error',
97
+ )
98
+ })
@@ -0,0 +1,98 @@
1
+ import t from 'tap'
2
+ import { joinDepIDTuple } from '@vltpkg/dep-id'
3
+ import { asSecurityArchiveLike } from '@vltpkg/security-archive'
4
+ import { getSimpleGraph } from '../fixtures/graph.ts'
5
+ import type { ParserState } from '../../src/types.ts'
6
+ import { trivial } from '../../src/pseudo/trivial.ts'
7
+ import { parse } from '../../src/parser.ts'
8
+
9
+ t.test('selects packages with a trivial alert', async t => {
10
+ const getState = (query: string, graph = getSimpleGraph()) => {
11
+ const ast = parse(query)
12
+ const current = ast.first.first
13
+ const state: ParserState = {
14
+ comment: '',
15
+ current,
16
+ initial: {
17
+ edges: new Set(graph.edges.values()),
18
+ nodes: new Set(graph.nodes.values()),
19
+ },
20
+ partial: {
21
+ edges: new Set(graph.edges.values()),
22
+ nodes: new Set(graph.nodes.values()),
23
+ },
24
+ collect: {
25
+ edges: new Set(),
26
+ nodes: new Set(),
27
+ },
28
+ cancellable: async () => {},
29
+ walk: async i => i,
30
+ securityArchive: asSecurityArchiveLike(
31
+ new Map([
32
+ [
33
+ joinDepIDTuple(['registry', '', 'e@1.0.0']),
34
+ { alerts: [{ type: 'trivialPackage' }] },
35
+ ],
36
+ ]),
37
+ ),
38
+ importers: new Set(graph.importers),
39
+ retries: 0,
40
+ signal: new AbortController().signal,
41
+ specificity: { idCounter: 0, commonCounter: 0 },
42
+ }
43
+ return state
44
+ }
45
+
46
+ await t.test(
47
+ 'filter out any node that does not have the alert',
48
+ async t => {
49
+ const res = await trivial(getState(':trivial'))
50
+ t.strictSame(
51
+ [...res.partial.nodes].map(n => n.name),
52
+ ['e'],
53
+ 'should select only trivial packages',
54
+ )
55
+ t.matchSnapshot({
56
+ nodes: [...res.partial.nodes].map(n => n.name),
57
+ edges: [...res.partial.edges].map(e => e.name),
58
+ })
59
+ },
60
+ )
61
+ })
62
+
63
+ t.test('missing security archive', async t => {
64
+ const getState = (query: string) => {
65
+ const ast = parse(query)
66
+ const current = ast.first.first
67
+ const state: ParserState = {
68
+ comment: '',
69
+ current,
70
+ initial: {
71
+ edges: new Set(),
72
+ nodes: new Set(),
73
+ },
74
+ partial: {
75
+ edges: new Set(),
76
+ nodes: new Set(),
77
+ },
78
+ collect: {
79
+ edges: new Set(),
80
+ nodes: new Set(),
81
+ },
82
+ cancellable: async () => {},
83
+ walk: async i => i,
84
+ securityArchive: undefined,
85
+ importers: new Set(),
86
+ retries: 0,
87
+ signal: new AbortController().signal,
88
+ specificity: { idCounter: 0, commonCounter: 0 },
89
+ }
90
+ return state
91
+ }
92
+
93
+ await t.rejects(
94
+ trivial(getState(':trivial')),
95
+ { message: /Missing security archive/ },
96
+ 'should throw an error',
97
+ )
98
+ })
@@ -0,0 +1,105 @@
1
+ import t from 'tap'
2
+ import postcssSelectorParser from 'postcss-selector-parser'
3
+ import type { ParserState } from '../../src/types.ts'
4
+ import { type } from '../../src/pseudo/type.ts'
5
+ import {
6
+ getSimpleGraph,
7
+ getSingleWorkspaceGraph,
8
+ } from '../fixtures/graph.ts'
9
+
10
+ t.test('selects nodes by type', async t => {
11
+ const getState = (query: string, graph = getSimpleGraph()) => {
12
+ const ast = postcssSelectorParser().astSync(query)
13
+ const current = ast.first.first
14
+ const state: ParserState = {
15
+ comment: '',
16
+ current,
17
+ initial: {
18
+ edges: new Set(graph.edges.values()),
19
+ nodes: new Set(graph.nodes.values()),
20
+ },
21
+ partial: {
22
+ edges: new Set(graph.edges.values()),
23
+ nodes: new Set(graph.nodes.values()),
24
+ },
25
+ collect: {
26
+ edges: new Set(),
27
+ nodes: new Set(),
28
+ },
29
+ cancellable: async () => {},
30
+ walk: async i => i,
31
+ retries: 0,
32
+ securityArchive: undefined,
33
+ importers: new Set(graph.importers),
34
+ signal: new AbortController().signal,
35
+ specificity: { idCounter: 0, commonCounter: 0 },
36
+ }
37
+ return state
38
+ }
39
+
40
+ await t.test(
41
+ 'selects nodes of specified type in simple graph',
42
+ async t => {
43
+ const res = await type(getState(':type(registry)'))
44
+ t.strictSame(
45
+ [...res.partial.nodes].map(n => n.name).sort(),
46
+ ['a', 'b', 'c', 'd', 'e', 'f'].sort(),
47
+ 'should select only npm packages',
48
+ )
49
+ t.matchSnapshot({
50
+ nodes: [...res.partial.nodes].map(n => n.name).sort(),
51
+ edges: [...res.partial.edges].map(e => e.name).sort(),
52
+ })
53
+ },
54
+ )
55
+
56
+ await t.test(
57
+ 'selects nodes of specified type in workspace graph',
58
+ async t => {
59
+ const wsGraph = getSingleWorkspaceGraph()
60
+ const res = await type(getState(':type(workspace)', wsGraph))
61
+ t.strictSame(
62
+ [...res.partial.nodes].map(n => n.name).sort(),
63
+ ['w'],
64
+ 'should select only workspace packages',
65
+ )
66
+ t.matchSnapshot({
67
+ nodes: [...res.partial.nodes].map(n => n.name).sort(),
68
+ edges: [...res.partial.edges].map(e => e.name).sort(),
69
+ })
70
+ },
71
+ )
72
+
73
+ await t.test(
74
+ 'returns no nodes when type does not match',
75
+ async t => {
76
+ const res = await type(getState(':type(nonexistent)'))
77
+ t.strictSame(
78
+ [...res.partial.nodes].map(n => n.name),
79
+ [],
80
+ 'should not select any packages when type does not match',
81
+ )
82
+ t.matchSnapshot({
83
+ nodes: [...res.partial.nodes].map(n => n.name),
84
+ edges: [...res.partial.edges].map(e => e.name),
85
+ })
86
+ },
87
+ )
88
+
89
+ await t.test('handles an empty partial state', async t => {
90
+ const state = getState(':type(npm)')
91
+ state.partial.nodes.clear()
92
+ state.partial.edges.clear()
93
+
94
+ const res = await type(state)
95
+ t.strictSame(
96
+ [...res.partial.nodes].map(n => n.name),
97
+ [],
98
+ 'should return empty array when starting with empty partial state',
99
+ )
100
+ t.matchSnapshot({
101
+ nodes: [...res.partial.nodes].map(n => n.name),
102
+ edges: [...res.partial.edges].map(e => e.name),
103
+ })
104
+ })
105
+ })
@@ -0,0 +1,98 @@
1
+ import t from 'tap'
2
+ import { joinDepIDTuple } from '@vltpkg/dep-id'
3
+ import { asSecurityArchiveLike } from '@vltpkg/security-archive'
4
+ import { getSimpleGraph } from '../fixtures/graph.ts'
5
+ import type { ParserState } from '../../src/types.ts'
6
+ import { undesirable } from '../../src/pseudo/undesirable.ts'
7
+ import { parse } from '../../src/parser.ts'
8
+
9
+ t.test('selects packages with an undesirable alert', async t => {
10
+ const getState = (query: string, graph = getSimpleGraph()) => {
11
+ const ast = parse(query)
12
+ const current = ast.first.first
13
+ const state: ParserState = {
14
+ comment: '',
15
+ current,
16
+ initial: {
17
+ edges: new Set(graph.edges.values()),
18
+ nodes: new Set(graph.nodes.values()),
19
+ },
20
+ partial: {
21
+ edges: new Set(graph.edges.values()),
22
+ nodes: new Set(graph.nodes.values()),
23
+ },
24
+ collect: {
25
+ edges: new Set(),
26
+ nodes: new Set(),
27
+ },
28
+ cancellable: async () => {},
29
+ walk: async i => i,
30
+ securityArchive: asSecurityArchiveLike(
31
+ new Map([
32
+ [
33
+ joinDepIDTuple(['registry', '', 'e@1.0.0']),
34
+ { alerts: [{ type: 'troll' }] },
35
+ ],
36
+ ]),
37
+ ),
38
+ importers: new Set(graph.importers),
39
+ retries: 0,
40
+ signal: new AbortController().signal,
41
+ specificity: { idCounter: 0, commonCounter: 0 },
42
+ }
43
+ return state
44
+ }
45
+
46
+ await t.test(
47
+ 'filter out any node that does not have the alert',
48
+ async t => {
49
+ const res = await undesirable(getState(':undesirable'))
50
+ t.strictSame(
51
+ [...res.partial.nodes].map(n => n.name),
52
+ ['e'],
53
+ 'should select only undesirable packages',
54
+ )
55
+ t.matchSnapshot({
56
+ nodes: [...res.partial.nodes].map(n => n.name),
57
+ edges: [...res.partial.edges].map(e => e.name),
58
+ })
59
+ },
60
+ )
61
+ })
62
+
63
+ t.test('missing security archive', async t => {
64
+ const getState = (query: string) => {
65
+ const ast = parse(query)
66
+ const current = ast.first.first
67
+ const state: ParserState = {
68
+ comment: '',
69
+ current,
70
+ initial: {
71
+ edges: new Set(),
72
+ nodes: new Set(),
73
+ },
74
+ partial: {
75
+ edges: new Set(),
76
+ nodes: new Set(),
77
+ },
78
+ collect: {
79
+ edges: new Set(),
80
+ nodes: new Set(),
81
+ },
82
+ cancellable: async () => {},
83
+ walk: async i => i,
84
+ securityArchive: undefined,
85
+ importers: new Set(),
86
+ retries: 0,
87
+ signal: new AbortController().signal,
88
+ specificity: { idCounter: 0, commonCounter: 0 },
89
+ }
90
+ return state
91
+ }
92
+
93
+ await t.rejects(
94
+ undesirable(getState(':undesirable')),
95
+ { message: /Missing security archive/ },
96
+ 'should throw an error',
97
+ )
98
+ })
@@ -0,0 +1,98 @@
1
+ import t from 'tap'
2
+ import { joinDepIDTuple } from '@vltpkg/dep-id'
3
+ import { asSecurityArchiveLike } from '@vltpkg/security-archive'
4
+ import { getSimpleGraph } from '../fixtures/graph.ts'
5
+ import type { ParserState } from '../../src/types.ts'
6
+ import { unknown } from '../../src/pseudo/unknown.ts'
7
+ import { parse } from '../../src/parser.ts'
8
+
9
+ t.test('selects packages with an unknown alert', async t => {
10
+ const getState = (query: string, graph = getSimpleGraph()) => {
11
+ const ast = parse(query)
12
+ const current = ast.first.first
13
+ const state: ParserState = {
14
+ comment: '',
15
+ current,
16
+ initial: {
17
+ edges: new Set(graph.edges.values()),
18
+ nodes: new Set(graph.nodes.values()),
19
+ },
20
+ partial: {
21
+ edges: new Set(graph.edges.values()),
22
+ nodes: new Set(graph.nodes.values()),
23
+ },
24
+ collect: {
25
+ edges: new Set(),
26
+ nodes: new Set(),
27
+ },
28
+ cancellable: async () => {},
29
+ walk: async i => i,
30
+ securityArchive: asSecurityArchiveLike(
31
+ new Map([
32
+ [
33
+ joinDepIDTuple(['registry', '', 'e@1.0.0']),
34
+ { alerts: [{ type: 'newAuthor' }] },
35
+ ],
36
+ ]),
37
+ ),
38
+ importers: new Set(graph.importers),
39
+ retries: 0,
40
+ signal: new AbortController().signal,
41
+ specificity: { idCounter: 0, commonCounter: 0 },
42
+ }
43
+ return state
44
+ }
45
+
46
+ await t.test(
47
+ 'filter out any node that does not have the alert',
48
+ async t => {
49
+ const res = await unknown(getState(':unknown'))
50
+ t.strictSame(
51
+ [...res.partial.nodes].map(n => n.name),
52
+ ['e'],
53
+ 'should select only unknown packages',
54
+ )
55
+ t.matchSnapshot({
56
+ nodes: [...res.partial.nodes].map(n => n.name),
57
+ edges: [...res.partial.edges].map(e => e.name),
58
+ })
59
+ },
60
+ )
61
+ })
62
+
63
+ t.test('missing security archive', async t => {
64
+ const getState = (query: string) => {
65
+ const ast = parse(query)
66
+ const current = ast.first.first
67
+ const state: ParserState = {
68
+ comment: '',
69
+ current,
70
+ initial: {
71
+ edges: new Set(),
72
+ nodes: new Set(),
73
+ },
74
+ partial: {
75
+ edges: new Set(),
76
+ nodes: new Set(),
77
+ },
78
+ collect: {
79
+ edges: new Set(),
80
+ nodes: new Set(),
81
+ },
82
+ cancellable: async () => {},
83
+ walk: async i => i,
84
+ securityArchive: undefined,
85
+ importers: new Set(),
86
+ retries: 0,
87
+ signal: new AbortController().signal,
88
+ specificity: { idCounter: 0, commonCounter: 0 },
89
+ }
90
+ return state
91
+ }
92
+
93
+ await t.rejects(
94
+ unknown(getState(':unknown')),
95
+ { message: /Missing security archive/ },
96
+ 'should throw an error',
97
+ )
98
+ })
@@ -0,0 +1,98 @@
1
+ import t from 'tap'
2
+ import { joinDepIDTuple } from '@vltpkg/dep-id'
3
+ import { asSecurityArchiveLike } from '@vltpkg/security-archive'
4
+ import { getSimpleGraph } from '../fixtures/graph.ts'
5
+ import type { ParserState } from '../../src/types.ts'
6
+ import { unmaintained } from '../../src/pseudo/unmaintained.ts'
7
+ import { parse } from '../../src/parser.ts'
8
+
9
+ t.test('selects packages with an unmaintained alert', async t => {
10
+ const getState = (query: string, graph = getSimpleGraph()) => {
11
+ const ast = parse(query)
12
+ const current = ast.first.first
13
+ const state: ParserState = {
14
+ comment: '',
15
+ current,
16
+ initial: {
17
+ edges: new Set(graph.edges.values()),
18
+ nodes: new Set(graph.nodes.values()),
19
+ },
20
+ partial: {
21
+ edges: new Set(graph.edges.values()),
22
+ nodes: new Set(graph.nodes.values()),
23
+ },
24
+ collect: {
25
+ edges: new Set(),
26
+ nodes: new Set(),
27
+ },
28
+ cancellable: async () => {},
29
+ walk: async i => i,
30
+ securityArchive: asSecurityArchiveLike(
31
+ new Map([
32
+ [
33
+ joinDepIDTuple(['registry', '', 'e@1.0.0']),
34
+ { alerts: [{ type: 'unmaintained' }] },
35
+ ],
36
+ ]),
37
+ ),
38
+ importers: new Set(graph.importers),
39
+ retries: 0,
40
+ signal: new AbortController().signal,
41
+ specificity: { idCounter: 0, commonCounter: 0 },
42
+ }
43
+ return state
44
+ }
45
+
46
+ await t.test(
47
+ 'filter out any node that does not have the alert',
48
+ async t => {
49
+ const res = await unmaintained(getState(':unmaintained'))
50
+ t.strictSame(
51
+ [...res.partial.nodes].map(n => n.name),
52
+ ['e'],
53
+ 'should select only unmaintained packages',
54
+ )
55
+ t.matchSnapshot({
56
+ nodes: [...res.partial.nodes].map(n => n.name),
57
+ edges: [...res.partial.edges].map(e => e.name),
58
+ })
59
+ },
60
+ )
61
+ })
62
+
63
+ t.test('missing security archive', async t => {
64
+ const getState = (query: string) => {
65
+ const ast = parse(query)
66
+ const current = ast.first.first
67
+ const state: ParserState = {
68
+ comment: '',
69
+ current,
70
+ initial: {
71
+ edges: new Set(),
72
+ nodes: new Set(),
73
+ },
74
+ partial: {
75
+ edges: new Set(),
76
+ nodes: new Set(),
77
+ },
78
+ collect: {
79
+ edges: new Set(),
80
+ nodes: new Set(),
81
+ },
82
+ cancellable: async () => {},
83
+ walk: async i => i,
84
+ securityArchive: undefined,
85
+ importers: new Set(),
86
+ retries: 0,
87
+ signal: new AbortController().signal,
88
+ specificity: { idCounter: 0, commonCounter: 0 },
89
+ }
90
+ return state
91
+ }
92
+
93
+ await t.rejects(
94
+ unmaintained(getState(':unmaintained')),
95
+ { message: /Missing security archive/ },
96
+ 'should throw an error',
97
+ )
98
+ })
@@ -0,0 +1,98 @@
1
+ import t from 'tap'
2
+ import { joinDepIDTuple } from '@vltpkg/dep-id'
3
+ import { asSecurityArchiveLike } from '@vltpkg/security-archive'
4
+ import { getSimpleGraph } from '../fixtures/graph.ts'
5
+ import type { ParserState } from '../../src/types.ts'
6
+ import { unpopular } from '../../src/pseudo/unpopular.ts'
7
+ import { parse } from '../../src/parser.ts'
8
+
9
+ t.test('selects packages with an unpopular alert', async t => {
10
+ const getState = (query: string, graph = getSimpleGraph()) => {
11
+ const ast = parse(query)
12
+ const current = ast.first.first
13
+ const state: ParserState = {
14
+ comment: '',
15
+ current,
16
+ initial: {
17
+ edges: new Set(graph.edges.values()),
18
+ nodes: new Set(graph.nodes.values()),
19
+ },
20
+ partial: {
21
+ edges: new Set(graph.edges.values()),
22
+ nodes: new Set(graph.nodes.values()),
23
+ },
24
+ collect: {
25
+ edges: new Set(),
26
+ nodes: new Set(),
27
+ },
28
+ cancellable: async () => {},
29
+ walk: async i => i,
30
+ securityArchive: asSecurityArchiveLike(
31
+ new Map([
32
+ [
33
+ joinDepIDTuple(['registry', '', 'e@1.0.0']),
34
+ { alerts: [{ type: 'unpopularPackage' }] },
35
+ ],
36
+ ]),
37
+ ),
38
+ importers: new Set(graph.importers),
39
+ retries: 0,
40
+ signal: new AbortController().signal,
41
+ specificity: { idCounter: 0, commonCounter: 0 },
42
+ }
43
+ return state
44
+ }
45
+
46
+ await t.test(
47
+ 'filter out any node that does not have the alert',
48
+ async t => {
49
+ const res = await unpopular(getState(':unpopular'))
50
+ t.strictSame(
51
+ [...res.partial.nodes].map(n => n.name),
52
+ ['e'],
53
+ 'should select only unpopular packages',
54
+ )
55
+ t.matchSnapshot({
56
+ nodes: [...res.partial.nodes].map(n => n.name),
57
+ edges: [...res.partial.edges].map(e => e.name),
58
+ })
59
+ },
60
+ )
61
+ })
62
+
63
+ t.test('missing security archive', async t => {
64
+ const getState = (query: string) => {
65
+ const ast = parse(query)
66
+ const current = ast.first.first
67
+ const state: ParserState = {
68
+ comment: '',
69
+ current,
70
+ initial: {
71
+ edges: new Set(),
72
+ nodes: new Set(),
73
+ },
74
+ partial: {
75
+ edges: new Set(),
76
+ nodes: new Set(),
77
+ },
78
+ collect: {
79
+ edges: new Set(),
80
+ nodes: new Set(),
81
+ },
82
+ cancellable: async () => {},
83
+ walk: async i => i,
84
+ securityArchive: undefined,
85
+ importers: new Set(),
86
+ retries: 0,
87
+ signal: new AbortController().signal,
88
+ specificity: { idCounter: 0, commonCounter: 0 },
89
+ }
90
+ return state
91
+ }
92
+
93
+ await t.rejects(
94
+ unpopular(getState(':unpopular')),
95
+ { message: /Missing security archive/ },
96
+ 'should throw an error',
97
+ )
98
+ })