@vltpkg/query 1.0.0-rc.33 → 1.0.0-rc.34

package/tap-snapshots/test/pseudo/malware.ts.test.cjs

@@ -5,187 +5,18 @@
  * Make sure to inspect the output below.  Do not ignore changes!
  */
 'use strict'
-exports[`test/pseudo/malware.ts > TAP > selects packages with a specific malware kind > filter out any node that does not have the malware alert > must match snapshot 1`] = `
-Object {
-  "edges": Array [
-    "a",
-    "e",
-    "e",
-  ],
-  "nodes": Array [
-    "a",
-    "e",
-  ],
-}
-`
-
-exports[`test/pseudo/malware.ts > TAP > selects packages with a specific malware kind > filter out using unquoted param > must match snapshot 1`] = `
-Object {
-  "edges": Array [
-    "b",
-    "f",
-  ],
-  "nodes": Array [
-    "b",
-    "f",
-  ],
-}
-`
-
-exports[`test/pseudo/malware.ts > TAP > selects packages with a specific malware kind > filter using numbered param > must match snapshot 1`] = `
-Object {
-  "edges": Array [
-    "a",
-    "e",
-    "e",
-  ],
-  "nodes": Array [
-    "a",
-    "e",
-  ],
-}
-`
-
-exports[`test/pseudo/malware.ts > TAP > selects packages with a specific malware kind > greater than comparator with number (unquoted) > must match snapshot 1`] = `
-Object {
-  "edges": Array [
-    "c",
-    "d",
-  ],
-  "nodes": Array [
-    "c",
-    "d",
-  ],
-}
-`
-
-exports[`test/pseudo/malware.ts > TAP > selects packages with a specific malware kind > greater than comparator with string kind (quoted) > must match snapshot 1`] = `
-Object {
-  "edges": Array [
-    "c",
-    "d",
-  ],
-  "nodes": Array [
-    "c",
-    "d",
-  ],
-}
-`
-
-exports[`test/pseudo/malware.ts > TAP > selects packages with a specific malware kind > greater than or equal to comparator with number (unquoted) > must match snapshot 1`] = `
-Object {
-  "edges": Array [
-    "c",
-    "d",
-  ],
-  "nodes": Array [
-    "c",
-    "d",
-  ],
-}
-`
-
-exports[`test/pseudo/malware.ts > TAP > selects packages with a specific malware kind > greater than or equal to comparator with string kind (quoted) > must match snapshot 1`] = `
-Object {
-  "edges": Array [
-    "c",
-    "d",
-  ],
-  "nodes": Array [
-    "c",
-    "d",
-  ],
-}
-`
-
-exports[`test/pseudo/malware.ts > TAP > selects packages with a specific malware kind > less than comparator with number (unquoted) > must match snapshot 1`] = `
-Object {
-  "edges": Array [
-    "a",
-    "b",
-    "e",
-    "e",
-    "f",
-  ],
-  "nodes": Array [
-    "a",
-    "b",
-    "e",
-    "f",
-  ],
-}
-`
-
-exports[`test/pseudo/malware.ts > TAP > selects packages with a specific malware kind > less than comparator with string kind (quoted) > must match snapshot 1`] = `
-Object {
-  "edges": Array [
-    "a",
-    "b",
-    "e",
-    "e",
-    "f",
-  ],
-  "nodes": Array [
-    "a",
-    "b",
-    "e",
-    "f",
-  ],
-}
-`
-
-exports[`test/pseudo/malware.ts > TAP > selects packages with a specific malware kind > less than or equal to comparator with number (unquoted) > must match snapshot 1`] = `
-Object {
-  "edges": Array [
-    "a",
-    "b",
-    "e",
-    "e",
-    "f",
-  ],
-  "nodes": Array [
-    "a",
-    "b",
-    "e",
-    "f",
-  ],
-}
-`
-
-exports[`test/pseudo/malware.ts > TAP > selects packages with a specific malware kind > less than or equal to comparator with string kind (quoted) > must match snapshot 1`] = `
-Object {
-  "edges": Array [
-    "a",
-    "b",
-    "e",
-    "e",
-    "f",
-  ],
-  "nodes": Array [
-    "a",
-    "b",
-    "e",
-    "f",
-  ],
-}
-`
-
-exports[`test/pseudo/malware.ts > TAP > selects packages with a specific malware kind > parameterless :malware matches medium+ severity > must match snapshot 1`] = `
+exports[`test/pseudo/malware.ts > TAP > selects packages with malware alerts > matches nodes with malware or gptMalware alerts > must match snapshot 1`] = `
 Object {
   "edges": Array [
     "a",
     "b",
-    "c",
     "e",
     "e",
-    "f",
   ],
   "nodes": Array [
     "a",
     "b",
-    "c",
     "e",
-    "f",
   ],
 }
 `

package/tap-snapshots/test/pseudo/vuln.ts.test.cjs

@@ -0,0 +1,208 @@
+/* IMPORTANT
+ * This snapshot file is auto-generated, but designed for humans.
+ * It should be checked into source control and tracked carefully.
+ * Re-generate by setting TAP_SNAPSHOT=1 and running tests.
+ * Make sure to inspect the output below.  Do not ignore changes!
+ */
+'use strict'
+exports[`test/pseudo/vuln.ts > TAP > selects packages with vulnerability alerts > filter out any node that does not have the vuln alert > must match snapshot 1`] = `
+Object {
+  "edges": Array [
+    "a",
+  ],
+  "nodes": Array [
+    "a",
+  ],
+}
+`
+
+exports[`test/pseudo/vuln.ts > TAP > selects packages with vulnerability alerts > filter out using unquoted param > must match snapshot 1`] = `
+Object {
+  "edges": Array [
+    "b",
+  ],
+  "nodes": Array [
+    "b",
+  ],
+}
+`
+
+exports[`test/pseudo/vuln.ts > TAP > selects packages with vulnerability alerts > filter using numbered param > must match snapshot 1`] = `
+Object {
+  "edges": Array [
+    "a",
+  ],
+  "nodes": Array [
+    "a",
+  ],
+}
+`
+
+exports[`test/pseudo/vuln.ts > TAP > selects packages with vulnerability alerts > greater than comparator with number (unquoted) > must match snapshot 1`] = `
+Object {
+  "edges": Array [
+    "c",
+    "d",
+    "e",
+    "e",
+    "f",
+  ],
+  "nodes": Array [
+    "c",
+    "d",
+    "e",
+    "f",
+  ],
+}
+`
+
+exports[`test/pseudo/vuln.ts > TAP > selects packages with vulnerability alerts > greater than comparator with string kind (quoted) > must match snapshot 1`] = `
+Object {
+  "edges": Array [
+    "c",
+    "d",
+    "e",
+    "e",
+    "f",
+  ],
+  "nodes": Array [
+    "c",
+    "d",
+    "e",
+    "f",
+  ],
+}
+`
+
+exports[`test/pseudo/vuln.ts > TAP > selects packages with vulnerability alerts > greater than or equal to comparator with number (unquoted) > must match snapshot 1`] = `
+Object {
+  "edges": Array [
+    "c",
+    "d",
+    "e",
+    "e",
+    "f",
+  ],
+  "nodes": Array [
+    "c",
+    "d",
+    "e",
+    "f",
+  ],
+}
+`
+
+exports[`test/pseudo/vuln.ts > TAP > selects packages with vulnerability alerts > greater than or equal to comparator with string kind (quoted) > must match snapshot 1`] = `
+Object {
+  "edges": Array [
+    "c",
+    "d",
+    "e",
+    "e",
+    "f",
+  ],
+  "nodes": Array [
+    "c",
+    "d",
+    "e",
+    "f",
+  ],
+}
+`
+
+exports[`test/pseudo/vuln.ts > TAP > selects packages with vulnerability alerts > less than comparator with number (unquoted) > must match snapshot 1`] = `
+Object {
+  "edges": Array [
+    "a",
+    "b",
+  ],
+  "nodes": Array [
+    "a",
+    "b",
+  ],
+}
+`
+
+exports[`test/pseudo/vuln.ts > TAP > selects packages with vulnerability alerts > less than comparator with string kind (quoted) > must match snapshot 1`] = `
+Object {
+  "edges": Array [
+    "a",
+    "b",
+  ],
+  "nodes": Array [
+    "a",
+    "b",
+  ],
+}
+`
+
+exports[`test/pseudo/vuln.ts > TAP > selects packages with vulnerability alerts > less than or equal to comparator with number (unquoted) > must match snapshot 1`] = `
+Object {
+  "edges": Array [
+    "a",
+    "b",
+  ],
+  "nodes": Array [
+    "a",
+    "b",
+  ],
+}
+`
+
+exports[`test/pseudo/vuln.ts > TAP > selects packages with vulnerability alerts > less than or equal to comparator with string kind (quoted) > must match snapshot 1`] = `
+Object {
+  "edges": Array [
+    "a",
+    "b",
+  ],
+  "nodes": Array [
+    "a",
+    "b",
+  ],
+}
+`
+
+exports[`test/pseudo/vuln.ts > TAP > selects packages with vulnerability alerts > low matches both mildCVE and gptAnomaly > must match snapshot 1`] = `
+Object {
+  "edges": Array [
+    "d",
+    "f",
+  ],
+  "nodes": Array [
+    "d",
+    "f",
+  ],
+}
+`
+
+exports[`test/pseudo/vuln.ts > TAP > selects packages with vulnerability alerts > medium matches both potentialVulnerability and gptSecurity > must match snapshot 1`] = `
+Object {
+  "edges": Array [
+    "c",
+    "e",
+    "e",
+  ],
+  "nodes": Array [
+    "c",
+    "e",
+  ],
+}
+`
+
+exports[`test/pseudo/vuln.ts > TAP > selects packages with vulnerability alerts > parameterless :vuln matches medium+ severity > must match snapshot 1`] = `
+Object {
+  "edges": Array [
+    "a",
+    "b",
+    "c",
+    "e",
+    "e",
+  ],
+  "nodes": Array [
+    "a",
+    "b",
+    "c",
+    "e",
+  ],
+}
+`

package/tap-snapshots/test/pseudo/vulnerable.ts.test.cjs

@@ -5,13 +5,15 @@
  * Make sure to inspect the output below.  Do not ignore changes!
  */
 'use strict'
-exports[`test/pseudo/vulnerable.ts > TAP > selects packages with any CVE > filter out nodes without CVE alerts > must match snapshot 1`] = `
+exports[`test/pseudo/vulnerable.ts > TAP > :vulnerable alias works the same as :vuln > parameterless :vulnerable matches severity >= medium > must match snapshot 1`] = `
 Object {
   "edges": Array [
+    "a",
     "e",
     "e",
   ],
   "nodes": Array [
+    "a",
     "e",
   ],
 }

package/test/index.ts

@@ -374,6 +374,14 @@ t.test('Query.hasSecuritySelectors', async t => {
     Query.hasSecuritySelectors(':unmaintained'),
     'should return true',
   )
+  t.ok(
+    Query.hasSecuritySelectors(':vuln'),
+    'should return true for :vuln',
+  )
+  t.ok(
+    Query.hasSecuritySelectors(':vulnerable'),
+    'should return true for :vulnerable',
+  )
   t.notOk(Query.hasSecuritySelectors(':foo'), 'should return false')
   t.notOk(Query.hasSecuritySelectors(':has'), 'should return false')
 })