@vltpkg/query 1.4.0 → 1.6.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.d.ts +7 -2
- package/dist/index.js +23 -4
- package/dist/pseudo/skill.d.ts +7 -0
- package/dist/pseudo/skill.js +52 -0
- package/dist/pseudo/skills.d.ts +6 -0
- package/dist/pseudo/skills.js +26 -0
- package/dist/pseudo.js +7 -0
- package/dist/types.d.ts +29 -1
- package/package.json +10 -12
- package/skills/dss-query/REFERENCE.md +0 -123
- package/skills/dss-query/SKILL.md +0 -190
- package/skills/dss-query/evals/README.md +0 -81
- package/skills/dss-query/evals/evals.json +0 -89
- package/skills/dss-query/evals/grade.mjs +0 -481
- package/src/attribute.ts +0 -190
- package/src/combinator.ts +0 -135
- package/src/error.ts +0 -78
- package/src/id.ts +0 -46
- package/src/index.ts +0 -640
- package/src/parser.ts +0 -122
- package/src/pseudo/abandoned.ts +0 -9
- package/src/pseudo/attr.ts +0 -92
- package/src/pseudo/built.ts +0 -19
- package/src/pseudo/confused.ts +0 -29
- package/src/pseudo/cve.ts +0 -93
- package/src/pseudo/cwe.ts +0 -97
- package/src/pseudo/debug.ts +0 -9
- package/src/pseudo/deprecated.ts +0 -9
- package/src/pseudo/dev.ts +0 -18
- package/src/pseudo/diff.ts +0 -90
- package/src/pseudo/dist.ts +0 -148
- package/src/pseudo/dynamic.ts +0 -9
- package/src/pseudo/empty.ts +0 -15
- package/src/pseudo/entropic.ts +0 -9
- package/src/pseudo/env.ts +0 -6
- package/src/pseudo/eval.ts +0 -9
- package/src/pseudo/fs.ts +0 -9
- package/src/pseudo/helpers.ts +0 -106
- package/src/pseudo/host.ts +0 -111
- package/src/pseudo/hostname.ts +0 -156
- package/src/pseudo/license.ts +0 -134
- package/src/pseudo/link.ts +0 -30
- package/src/pseudo/malware.ts +0 -41
- package/src/pseudo/minified.ts +0 -9
- package/src/pseudo/missing.ts +0 -16
- package/src/pseudo/native.ts +0 -9
- package/src/pseudo/network.ts +0 -9
- package/src/pseudo/obfuscated.ts +0 -9
- package/src/pseudo/optional.ts +0 -18
- package/src/pseudo/outdated.ts +0 -345
- package/src/pseudo/overridden.ts +0 -20
- package/src/pseudo/path.ts +0 -146
- package/src/pseudo/peer.ts +0 -18
- package/src/pseudo/prerelease.ts +0 -47
- package/src/pseudo/private.ts +0 -19
- package/src/pseudo/prod.ts +0 -18
- package/src/pseudo/published.ts +0 -250
- package/src/pseudo/registry.ts +0 -29
- package/src/pseudo/root.ts +0 -19
- package/src/pseudo/scanned.ts +0 -20
- package/src/pseudo/score.ts +0 -186
- package/src/pseudo/scripts.ts +0 -61
- package/src/pseudo/semver.ts +0 -320
- package/src/pseudo/severity.ts +0 -231
- package/src/pseudo/shell.ts +0 -9
- package/src/pseudo/shrinkwrap.ts +0 -9
- package/src/pseudo/spec.ts +0 -131
- package/src/pseudo/squat.ts +0 -225
- package/src/pseudo/suspicious.ts +0 -9
- package/src/pseudo/tracker.ts +0 -9
- package/src/pseudo/trivial.ts +0 -9
- package/src/pseudo/type.ts +0 -26
- package/src/pseudo/undesirable.ts +0 -9
- package/src/pseudo/unknown.ts +0 -9
- package/src/pseudo/unmaintained.ts +0 -9
- package/src/pseudo/unpopular.ts +0 -9
- package/src/pseudo/unstable.ts +0 -9
- package/src/pseudo/vuln.ts +0 -273
- package/src/pseudo/workspace.ts +0 -22
- package/src/pseudo.ts +0 -433
- package/src/types.ts +0 -176
- package/tap-snapshots/test/attribute.ts.test.cjs +0 -304
- package/tap-snapshots/test/combinator.ts.test.cjs +0 -333
- package/tap-snapshots/test/id.ts.test.cjs +0 -118
- package/tap-snapshots/test/parser.ts.test.cjs +0 -344
- package/tap-snapshots/test/pseudo/abandoned.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/attr.ts.test.cjs +0 -161
- package/tap-snapshots/test/pseudo/built.ts.test.cjs +0 -70
- package/tap-snapshots/test/pseudo/confused.ts.test.cjs +0 -32
- package/tap-snapshots/test/pseudo/cve.ts.test.cjs +0 -49
- package/tap-snapshots/test/pseudo/cwe.ts.test.cjs +0 -49
- package/tap-snapshots/test/pseudo/debug.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/deprecated.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/dist.ts.test.cjs +0 -30
- package/tap-snapshots/test/pseudo/dynamic.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/empty.ts.test.cjs +0 -50
- package/tap-snapshots/test/pseudo/entropic.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/env.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/eval.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/fs.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/helpers.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/hostname.ts.test.cjs +0 -148
- package/tap-snapshots/test/pseudo/license.ts.test.cjs +0 -41
- package/tap-snapshots/test/pseudo/link.ts.test.cjs +0 -36
- package/tap-snapshots/test/pseudo/malware.ts.test.cjs +0 -22
- package/tap-snapshots/test/pseudo/minified.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/missing.ts.test.cjs +0 -30
- package/tap-snapshots/test/pseudo/native.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/network.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/obfuscated.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/outdated.ts.test.cjs +0 -132
- package/tap-snapshots/test/pseudo/overridden.ts.test.cjs +0 -75
- package/tap-snapshots/test/pseudo/prerelease.ts.test.cjs +0 -101
- package/tap-snapshots/test/pseudo/private.ts.test.cjs +0 -38
- package/tap-snapshots/test/pseudo/published.ts.test.cjs +0 -171
- package/tap-snapshots/test/pseudo/registry.ts.test.cjs +0 -68
- package/tap-snapshots/test/pseudo/root.ts.test.cjs +0 -24
- package/tap-snapshots/test/pseudo/scanned.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/score.ts.test.cjs +0 -239
- package/tap-snapshots/test/pseudo/scripts.ts.test.cjs +0 -62
- package/tap-snapshots/test/pseudo/semver.ts.test.cjs +0 -575
- package/tap-snapshots/test/pseudo/severity.ts.test.cjs +0 -122
- package/tap-snapshots/test/pseudo/shell.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/shrinkwrap.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/spec.ts.test.cjs +0 -148
- package/tap-snapshots/test/pseudo/squat.ts.test.cjs +0 -129
- package/tap-snapshots/test/pseudo/suspicious.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/tracker.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/trivial.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/type.ts.test.cjs +0 -51
- package/tap-snapshots/test/pseudo/undesirable.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/unknown.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/unmaintained.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/unpopular.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/unstable.ts.test.cjs +0 -18
- package/tap-snapshots/test/pseudo/vuln.ts.test.cjs +0 -208
- package/tap-snapshots/test/pseudo/vulnerable.ts.test.cjs +0 -20
- package/tap-snapshots/test/pseudo/workspace.ts.test.cjs +0 -19
- package/tap-snapshots/test/pseudo.ts.test.cjs +0 -1247
- package/test/attribute.ts +0 -273
- package/test/combinator.ts +0 -175
- package/test/error.ts +0 -60
- package/test/fixtures/graph.ts +0 -999
- package/test/fixtures/selector.ts +0 -103
- package/test/fixtures/types.ts +0 -7
- package/test/id.ts +0 -102
- package/test/index.ts +0 -1049
- package/test/parser.ts +0 -117
- package/test/pseudo/abandoned.ts +0 -98
- package/test/pseudo/attr.ts +0 -298
- package/test/pseudo/built.ts +0 -214
- package/test/pseudo/confused.ts +0 -160
- package/test/pseudo/cve.ts +0 -249
- package/test/pseudo/cwe.ts +0 -255
- package/test/pseudo/debug.ts +0 -98
- package/test/pseudo/deprecated.ts +0 -98
- package/test/pseudo/dev.ts +0 -61
- package/test/pseudo/diff.ts +0 -417
- package/test/pseudo/dist.ts +0 -215
- package/test/pseudo/dynamic.ts +0 -98
- package/test/pseudo/empty.ts +0 -108
- package/test/pseudo/entropic.ts +0 -101
- package/test/pseudo/env.ts +0 -98
- package/test/pseudo/eval.ts +0 -98
- package/test/pseudo/fs.ts +0 -98
- package/test/pseudo/helpers.ts +0 -370
- package/test/pseudo/host-context.ts +0 -276
- package/test/pseudo/hostname.ts +0 -314
- package/test/pseudo/license.ts +0 -265
- package/test/pseudo/link.ts +0 -94
- package/test/pseudo/malware.ts +0 -184
- package/test/pseudo/minified.ts +0 -98
- package/test/pseudo/missing.ts +0 -111
- package/test/pseudo/native.ts +0 -98
- package/test/pseudo/network.ts +0 -98
- package/test/pseudo/obfuscated.ts +0 -98
- package/test/pseudo/optional.ts +0 -73
- package/test/pseudo/outdated.ts +0 -461
- package/test/pseudo/overridden.ts +0 -317
- package/test/pseudo/path.ts +0 -680
- package/test/pseudo/peer.ts +0 -101
- package/test/pseudo/prerelease.ts +0 -279
- package/test/pseudo/private.ts +0 -108
- package/test/pseudo/prod.ts +0 -61
- package/test/pseudo/published.ts +0 -557
- package/test/pseudo/registry.ts +0 -122
- package/test/pseudo/root.ts +0 -66
- package/test/pseudo/scanned.ts +0 -144
- package/test/pseudo/score.ts +0 -591
- package/test/pseudo/scripts.ts +0 -324
- package/test/pseudo/semver.ts +0 -822
- package/test/pseudo/severity.ts +0 -342
- package/test/pseudo/shell.ts +0 -98
- package/test/pseudo/shrinkwrap.ts +0 -98
- package/test/pseudo/spec.ts +0 -525
- package/test/pseudo/squat.ts +0 -565
- package/test/pseudo/suspicious.ts +0 -98
- package/test/pseudo/tracker.ts +0 -98
- package/test/pseudo/trivial.ts +0 -98
- package/test/pseudo/type.ts +0 -105
- package/test/pseudo/undesirable.ts +0 -98
- package/test/pseudo/unknown.ts +0 -98
- package/test/pseudo/unmaintained.ts +0 -98
- package/test/pseudo/unpopular.ts +0 -98
- package/test/pseudo/unstable.ts +0 -98
- package/test/pseudo/vuln.ts +0 -625
- package/test/pseudo/vulnerable.ts +0 -137
- package/test/pseudo/workspace.ts +0 -111
- package/test/pseudo.ts +0 -584
- package/tsconfig.json +0 -3
- package/tsconfig.publish.json +0 -19
- package/tsconfig.publish.tsbuildinfo +0 -1
- package/typedoc.mjs +0 -2
package/test/pseudo/root.ts
DELETED
|
@@ -1,66 +0,0 @@
|
|
|
1
|
-
import t from 'tap'
|
|
2
|
-
import postcssSelectorParser from 'postcss-selector-parser'
|
|
3
|
-
import type { ParserState } from '../../src/types.ts'
|
|
4
|
-
import { root } from '../../src/pseudo/root.ts'
|
|
5
|
-
import {
|
|
6
|
-
getSimpleGraph,
|
|
7
|
-
getSingleWorkspaceGraph,
|
|
8
|
-
} from '../fixtures/graph.ts'
|
|
9
|
-
|
|
10
|
-
t.test('selects the root node of the graph', async t => {
|
|
11
|
-
const getState = (query: string, graph = getSimpleGraph()) => {
|
|
12
|
-
const ast = postcssSelectorParser().astSync(query)
|
|
13
|
-
const current = ast.first.first
|
|
14
|
-
const state: ParserState = {
|
|
15
|
-
comment: '',
|
|
16
|
-
current,
|
|
17
|
-
initial: {
|
|
18
|
-
edges: new Set(graph.edges.values()),
|
|
19
|
-
nodes: new Set(graph.nodes.values()),
|
|
20
|
-
},
|
|
21
|
-
partial: {
|
|
22
|
-
edges: new Set(graph.edges.values()),
|
|
23
|
-
nodes: new Set(graph.nodes.values()),
|
|
24
|
-
},
|
|
25
|
-
collect: {
|
|
26
|
-
edges: new Set(),
|
|
27
|
-
nodes: new Set(),
|
|
28
|
-
},
|
|
29
|
-
cancellable: async () => {},
|
|
30
|
-
walk: async i => i,
|
|
31
|
-
retries: 0,
|
|
32
|
-
securityArchive: undefined,
|
|
33
|
-
importers: new Set(graph.importers),
|
|
34
|
-
signal: new AbortController().signal,
|
|
35
|
-
specificity: { idCounter: 0, commonCounter: 0 },
|
|
36
|
-
}
|
|
37
|
-
return state
|
|
38
|
-
}
|
|
39
|
-
|
|
40
|
-
await t.test('selects root node in simple graph', async t => {
|
|
41
|
-
const res = await root(getState(':root'))
|
|
42
|
-
t.strictSame(
|
|
43
|
-
[...res.partial.nodes].map(n => n.name),
|
|
44
|
-
['my-project'],
|
|
45
|
-
'should select only the root node',
|
|
46
|
-
)
|
|
47
|
-
t.matchSnapshot({
|
|
48
|
-
nodes: [...res.partial.nodes].map(n => n.name),
|
|
49
|
-
edges: [...res.partial.edges].map(e => e.name),
|
|
50
|
-
})
|
|
51
|
-
})
|
|
52
|
-
|
|
53
|
-
await t.test('selects root node in workspace graph', async t => {
|
|
54
|
-
const wsGraph = getSingleWorkspaceGraph()
|
|
55
|
-
const res = await root(getState(':root', wsGraph))
|
|
56
|
-
t.strictSame(
|
|
57
|
-
[...res.partial.nodes].map(n => n.name),
|
|
58
|
-
['ws'],
|
|
59
|
-
'should select only the workspace root node',
|
|
60
|
-
)
|
|
61
|
-
t.matchSnapshot({
|
|
62
|
-
nodes: [...res.partial.nodes].map(n => n.name),
|
|
63
|
-
edges: [...res.partial.edges].map(e => e.name),
|
|
64
|
-
})
|
|
65
|
-
})
|
|
66
|
-
})
|
package/test/pseudo/scanned.ts
DELETED
|
@@ -1,144 +0,0 @@
|
|
|
1
|
-
import t from 'tap'
|
|
2
|
-
import { joinDepIDTuple } from '@vltpkg/dep-id'
|
|
3
|
-
import { asSecurityArchiveLike } from '@vltpkg/security-archive'
|
|
4
|
-
import { SecurityArchive } from '@vltpkg/security-archive/browser'
|
|
5
|
-
import type { PackageReportData } from '@vltpkg/security-archive'
|
|
6
|
-
import { scanned } from '../../src/pseudo/scanned.ts'
|
|
7
|
-
import { getSimpleGraph } from '../fixtures/graph.ts'
|
|
8
|
-
import type { ParserState } from '../../src/types.ts'
|
|
9
|
-
import { parse } from '../../src/parser.ts'
|
|
10
|
-
|
|
11
|
-
t.test('scanned selector', async t => {
|
|
12
|
-
const getState = () => {
|
|
13
|
-
const graph = getSimpleGraph()
|
|
14
|
-
const ast = parse(':scanned')
|
|
15
|
-
const current = ast.first.first
|
|
16
|
-
const testId = joinDepIDTuple(['registry', '', 'e@1.0.0'])
|
|
17
|
-
const securityArchive = asSecurityArchiveLike(
|
|
18
|
-
new Map<string, PackageReportData>([
|
|
19
|
-
[
|
|
20
|
-
testId,
|
|
21
|
-
{
|
|
22
|
-
id: 'e@1.0.0',
|
|
23
|
-
author: [],
|
|
24
|
-
size: 0,
|
|
25
|
-
type: 'npm',
|
|
26
|
-
name: 'e',
|
|
27
|
-
version: '1.0.0',
|
|
28
|
-
license: 'MIT',
|
|
29
|
-
score: {
|
|
30
|
-
overall: 0,
|
|
31
|
-
license: 0,
|
|
32
|
-
maintenance: 0,
|
|
33
|
-
quality: 0,
|
|
34
|
-
supplyChain: 0,
|
|
35
|
-
vulnerability: 0,
|
|
36
|
-
},
|
|
37
|
-
alerts: [],
|
|
38
|
-
},
|
|
39
|
-
],
|
|
40
|
-
]),
|
|
41
|
-
)
|
|
42
|
-
const state: ParserState = {
|
|
43
|
-
comment: '',
|
|
44
|
-
current,
|
|
45
|
-
initial: {
|
|
46
|
-
edges: new Set(graph.edges.values()),
|
|
47
|
-
nodes: new Set(graph.nodes.values()),
|
|
48
|
-
},
|
|
49
|
-
partial: {
|
|
50
|
-
edges: new Set(graph.edges.values()),
|
|
51
|
-
nodes: new Set(graph.nodes.values()),
|
|
52
|
-
},
|
|
53
|
-
collect: {
|
|
54
|
-
edges: new Set(),
|
|
55
|
-
nodes: new Set(),
|
|
56
|
-
},
|
|
57
|
-
cancellable: async () => {},
|
|
58
|
-
walk: async i => i,
|
|
59
|
-
securityArchive,
|
|
60
|
-
importers: new Set(graph.importers),
|
|
61
|
-
retries: 0,
|
|
62
|
-
signal: new AbortController().signal,
|
|
63
|
-
specificity: { idCounter: 0, commonCounter: 0 },
|
|
64
|
-
}
|
|
65
|
-
return state
|
|
66
|
-
}
|
|
67
|
-
|
|
68
|
-
const state = getState()
|
|
69
|
-
const result = await scanned(state)
|
|
70
|
-
t.matchSnapshot(
|
|
71
|
-
{
|
|
72
|
-
nodes: [...result.partial.nodes].map(n => n.id),
|
|
73
|
-
edges: [...result.partial.edges].map(
|
|
74
|
-
e => `${e.from.id}->${e.to?.id}`,
|
|
75
|
-
),
|
|
76
|
-
},
|
|
77
|
-
'should return only nodes with security archive data available',
|
|
78
|
-
)
|
|
79
|
-
|
|
80
|
-
await t.test('matches peer-suffixed node ids', async t => {
|
|
81
|
-
const graph = getSimpleGraph()
|
|
82
|
-
const e = [...graph.nodes.values()].find(n => n.name === 'e')
|
|
83
|
-
if (!e) throw new Error('expected node e')
|
|
84
|
-
const baseId = e.id
|
|
85
|
-
const peerId = joinDepIDTuple([
|
|
86
|
-
'registry',
|
|
87
|
-
'',
|
|
88
|
-
'e@1.0.0',
|
|
89
|
-
'peer.0123456789abcdef',
|
|
90
|
-
])
|
|
91
|
-
graph.nodes.delete(baseId)
|
|
92
|
-
e.id = peerId
|
|
93
|
-
graph.nodes.set(peerId, e)
|
|
94
|
-
const ast = parse(':scanned')
|
|
95
|
-
const archive = SecurityArchive.load({
|
|
96
|
-
[baseId]: {
|
|
97
|
-
id: 'e@1.0.0',
|
|
98
|
-
author: [],
|
|
99
|
-
size: 0,
|
|
100
|
-
type: 'npm',
|
|
101
|
-
name: 'e',
|
|
102
|
-
version: '1.0.0',
|
|
103
|
-
license: 'MIT',
|
|
104
|
-
score: {
|
|
105
|
-
overall: 0,
|
|
106
|
-
license: 0,
|
|
107
|
-
maintenance: 0,
|
|
108
|
-
quality: 0,
|
|
109
|
-
supplyChain: 0,
|
|
110
|
-
vulnerability: 0,
|
|
111
|
-
},
|
|
112
|
-
alerts: [],
|
|
113
|
-
},
|
|
114
|
-
})
|
|
115
|
-
const state: ParserState = {
|
|
116
|
-
comment: '',
|
|
117
|
-
current: ast.first.first,
|
|
118
|
-
initial: {
|
|
119
|
-
edges: new Set(graph.edges.values()),
|
|
120
|
-
nodes: new Set(graph.nodes.values()),
|
|
121
|
-
},
|
|
122
|
-
partial: {
|
|
123
|
-
edges: new Set(graph.edges.values()),
|
|
124
|
-
nodes: new Set(graph.nodes.values()),
|
|
125
|
-
},
|
|
126
|
-
collect: {
|
|
127
|
-
edges: new Set(),
|
|
128
|
-
nodes: new Set(),
|
|
129
|
-
},
|
|
130
|
-
cancellable: async () => {},
|
|
131
|
-
walk: async i => i,
|
|
132
|
-
securityArchive: archive,
|
|
133
|
-
importers: new Set(graph.importers),
|
|
134
|
-
retries: 0,
|
|
135
|
-
signal: new AbortController().signal,
|
|
136
|
-
specificity: { idCounter: 0, commonCounter: 0 },
|
|
137
|
-
}
|
|
138
|
-
const res = await scanned(state)
|
|
139
|
-
t.ok(
|
|
140
|
-
[...res.partial.nodes].some(n => n.id === peerId),
|
|
141
|
-
':scanned keeps a node whose DepID extra is a peer hash',
|
|
142
|
-
)
|
|
143
|
-
})
|
|
144
|
-
})
|