@vltpkg/query 1.5.0 → 1.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (210) hide show
  1. package/package.json +10 -12
  2. package/skills/dss-query/REFERENCE.md +0 -125
  3. package/skills/dss-query/SKILL.md +0 -190
  4. package/skills/dss-query/evals/README.md +0 -81
  5. package/skills/dss-query/evals/evals.json +0 -89
  6. package/skills/dss-query/evals/grade.mjs +0 -481
  7. package/src/attribute.ts +0 -190
  8. package/src/combinator.ts +0 -135
  9. package/src/error.ts +0 -78
  10. package/src/id.ts +0 -46
  11. package/src/index.ts +0 -670
  12. package/src/parser.ts +0 -122
  13. package/src/pseudo/abandoned.ts +0 -9
  14. package/src/pseudo/attr.ts +0 -92
  15. package/src/pseudo/built.ts +0 -19
  16. package/src/pseudo/confused.ts +0 -29
  17. package/src/pseudo/cve.ts +0 -93
  18. package/src/pseudo/cwe.ts +0 -97
  19. package/src/pseudo/debug.ts +0 -9
  20. package/src/pseudo/deprecated.ts +0 -9
  21. package/src/pseudo/dev.ts +0 -18
  22. package/src/pseudo/diff.ts +0 -90
  23. package/src/pseudo/dist.ts +0 -148
  24. package/src/pseudo/dynamic.ts +0 -9
  25. package/src/pseudo/empty.ts +0 -15
  26. package/src/pseudo/entropic.ts +0 -9
  27. package/src/pseudo/env.ts +0 -6
  28. package/src/pseudo/eval.ts +0 -9
  29. package/src/pseudo/fs.ts +0 -9
  30. package/src/pseudo/helpers.ts +0 -106
  31. package/src/pseudo/host.ts +0 -111
  32. package/src/pseudo/hostname.ts +0 -156
  33. package/src/pseudo/license.ts +0 -134
  34. package/src/pseudo/link.ts +0 -30
  35. package/src/pseudo/malware.ts +0 -41
  36. package/src/pseudo/minified.ts +0 -9
  37. package/src/pseudo/missing.ts +0 -16
  38. package/src/pseudo/native.ts +0 -9
  39. package/src/pseudo/network.ts +0 -9
  40. package/src/pseudo/obfuscated.ts +0 -9
  41. package/src/pseudo/optional.ts +0 -18
  42. package/src/pseudo/outdated.ts +0 -345
  43. package/src/pseudo/overridden.ts +0 -20
  44. package/src/pseudo/path.ts +0 -146
  45. package/src/pseudo/peer.ts +0 -18
  46. package/src/pseudo/prerelease.ts +0 -47
  47. package/src/pseudo/private.ts +0 -19
  48. package/src/pseudo/prod.ts +0 -18
  49. package/src/pseudo/published.ts +0 -250
  50. package/src/pseudo/registry.ts +0 -29
  51. package/src/pseudo/root.ts +0 -19
  52. package/src/pseudo/scanned.ts +0 -20
  53. package/src/pseudo/score.ts +0 -186
  54. package/src/pseudo/scripts.ts +0 -61
  55. package/src/pseudo/semver.ts +0 -320
  56. package/src/pseudo/severity.ts +0 -231
  57. package/src/pseudo/shell.ts +0 -9
  58. package/src/pseudo/shrinkwrap.ts +0 -9
  59. package/src/pseudo/skill.ts +0 -59
  60. package/src/pseudo/skills.ts +0 -29
  61. package/src/pseudo/spec.ts +0 -131
  62. package/src/pseudo/squat.ts +0 -225
  63. package/src/pseudo/suspicious.ts +0 -9
  64. package/src/pseudo/tracker.ts +0 -9
  65. package/src/pseudo/trivial.ts +0 -9
  66. package/src/pseudo/type.ts +0 -26
  67. package/src/pseudo/undesirable.ts +0 -9
  68. package/src/pseudo/unknown.ts +0 -9
  69. package/src/pseudo/unmaintained.ts +0 -9
  70. package/src/pseudo/unpopular.ts +0 -9
  71. package/src/pseudo/unstable.ts +0 -9
  72. package/src/pseudo/vuln.ts +0 -273
  73. package/src/pseudo/workspace.ts +0 -22
  74. package/src/pseudo.ts +0 -440
  75. package/src/types.ts +0 -206
  76. package/tap-snapshots/test/attribute.ts.test.cjs +0 -304
  77. package/tap-snapshots/test/combinator.ts.test.cjs +0 -333
  78. package/tap-snapshots/test/id.ts.test.cjs +0 -118
  79. package/tap-snapshots/test/parser.ts.test.cjs +0 -344
  80. package/tap-snapshots/test/pseudo/abandoned.ts.test.cjs +0 -18
  81. package/tap-snapshots/test/pseudo/attr.ts.test.cjs +0 -161
  82. package/tap-snapshots/test/pseudo/built.ts.test.cjs +0 -70
  83. package/tap-snapshots/test/pseudo/confused.ts.test.cjs +0 -32
  84. package/tap-snapshots/test/pseudo/cve.ts.test.cjs +0 -49
  85. package/tap-snapshots/test/pseudo/cwe.ts.test.cjs +0 -49
  86. package/tap-snapshots/test/pseudo/debug.ts.test.cjs +0 -18
  87. package/tap-snapshots/test/pseudo/deprecated.ts.test.cjs +0 -18
  88. package/tap-snapshots/test/pseudo/dist.ts.test.cjs +0 -30
  89. package/tap-snapshots/test/pseudo/dynamic.ts.test.cjs +0 -18
  90. package/tap-snapshots/test/pseudo/empty.ts.test.cjs +0 -50
  91. package/tap-snapshots/test/pseudo/entropic.ts.test.cjs +0 -18
  92. package/tap-snapshots/test/pseudo/env.ts.test.cjs +0 -18
  93. package/tap-snapshots/test/pseudo/eval.ts.test.cjs +0 -18
  94. package/tap-snapshots/test/pseudo/fs.ts.test.cjs +0 -18
  95. package/tap-snapshots/test/pseudo/helpers.ts.test.cjs +0 -18
  96. package/tap-snapshots/test/pseudo/hostname.ts.test.cjs +0 -148
  97. package/tap-snapshots/test/pseudo/license.ts.test.cjs +0 -41
  98. package/tap-snapshots/test/pseudo/link.ts.test.cjs +0 -36
  99. package/tap-snapshots/test/pseudo/malware.ts.test.cjs +0 -22
  100. package/tap-snapshots/test/pseudo/minified.ts.test.cjs +0 -18
  101. package/tap-snapshots/test/pseudo/missing.ts.test.cjs +0 -30
  102. package/tap-snapshots/test/pseudo/native.ts.test.cjs +0 -18
  103. package/tap-snapshots/test/pseudo/network.ts.test.cjs +0 -18
  104. package/tap-snapshots/test/pseudo/obfuscated.ts.test.cjs +0 -18
  105. package/tap-snapshots/test/pseudo/outdated.ts.test.cjs +0 -132
  106. package/tap-snapshots/test/pseudo/overridden.ts.test.cjs +0 -75
  107. package/tap-snapshots/test/pseudo/prerelease.ts.test.cjs +0 -101
  108. package/tap-snapshots/test/pseudo/private.ts.test.cjs +0 -38
  109. package/tap-snapshots/test/pseudo/published.ts.test.cjs +0 -171
  110. package/tap-snapshots/test/pseudo/registry.ts.test.cjs +0 -68
  111. package/tap-snapshots/test/pseudo/root.ts.test.cjs +0 -24
  112. package/tap-snapshots/test/pseudo/scanned.ts.test.cjs +0 -18
  113. package/tap-snapshots/test/pseudo/score.ts.test.cjs +0 -239
  114. package/tap-snapshots/test/pseudo/scripts.ts.test.cjs +0 -62
  115. package/tap-snapshots/test/pseudo/semver.ts.test.cjs +0 -575
  116. package/tap-snapshots/test/pseudo/severity.ts.test.cjs +0 -122
  117. package/tap-snapshots/test/pseudo/shell.ts.test.cjs +0 -18
  118. package/tap-snapshots/test/pseudo/shrinkwrap.ts.test.cjs +0 -18
  119. package/tap-snapshots/test/pseudo/skills.ts.test.cjs +0 -19
  120. package/tap-snapshots/test/pseudo/spec.ts.test.cjs +0 -148
  121. package/tap-snapshots/test/pseudo/squat.ts.test.cjs +0 -129
  122. package/tap-snapshots/test/pseudo/suspicious.ts.test.cjs +0 -18
  123. package/tap-snapshots/test/pseudo/tracker.ts.test.cjs +0 -18
  124. package/tap-snapshots/test/pseudo/trivial.ts.test.cjs +0 -18
  125. package/tap-snapshots/test/pseudo/type.ts.test.cjs +0 -51
  126. package/tap-snapshots/test/pseudo/undesirable.ts.test.cjs +0 -18
  127. package/tap-snapshots/test/pseudo/unknown.ts.test.cjs +0 -18
  128. package/tap-snapshots/test/pseudo/unmaintained.ts.test.cjs +0 -18
  129. package/tap-snapshots/test/pseudo/unpopular.ts.test.cjs +0 -18
  130. package/tap-snapshots/test/pseudo/unstable.ts.test.cjs +0 -18
  131. package/tap-snapshots/test/pseudo/vuln.ts.test.cjs +0 -208
  132. package/tap-snapshots/test/pseudo/vulnerable.ts.test.cjs +0 -20
  133. package/tap-snapshots/test/pseudo/workspace.ts.test.cjs +0 -19
  134. package/tap-snapshots/test/pseudo.ts.test.cjs +0 -1247
  135. package/test/attribute.ts +0 -273
  136. package/test/combinator.ts +0 -175
  137. package/test/error.ts +0 -60
  138. package/test/fixtures/graph.ts +0 -999
  139. package/test/fixtures/selector.ts +0 -103
  140. package/test/fixtures/types.ts +0 -7
  141. package/test/id.ts +0 -102
  142. package/test/index.ts +0 -1148
  143. package/test/parser.ts +0 -117
  144. package/test/pseudo/abandoned.ts +0 -98
  145. package/test/pseudo/attr.ts +0 -298
  146. package/test/pseudo/built.ts +0 -214
  147. package/test/pseudo/confused.ts +0 -160
  148. package/test/pseudo/cve.ts +0 -249
  149. package/test/pseudo/cwe.ts +0 -255
  150. package/test/pseudo/debug.ts +0 -98
  151. package/test/pseudo/deprecated.ts +0 -98
  152. package/test/pseudo/dev.ts +0 -61
  153. package/test/pseudo/diff.ts +0 -417
  154. package/test/pseudo/dist.ts +0 -215
  155. package/test/pseudo/dynamic.ts +0 -98
  156. package/test/pseudo/empty.ts +0 -108
  157. package/test/pseudo/entropic.ts +0 -101
  158. package/test/pseudo/env.ts +0 -98
  159. package/test/pseudo/eval.ts +0 -98
  160. package/test/pseudo/fs.ts +0 -98
  161. package/test/pseudo/helpers.ts +0 -370
  162. package/test/pseudo/host-context.ts +0 -276
  163. package/test/pseudo/hostname.ts +0 -314
  164. package/test/pseudo/license.ts +0 -265
  165. package/test/pseudo/link.ts +0 -94
  166. package/test/pseudo/malware.ts +0 -184
  167. package/test/pseudo/minified.ts +0 -98
  168. package/test/pseudo/missing.ts +0 -111
  169. package/test/pseudo/native.ts +0 -98
  170. package/test/pseudo/network.ts +0 -98
  171. package/test/pseudo/obfuscated.ts +0 -98
  172. package/test/pseudo/optional.ts +0 -73
  173. package/test/pseudo/outdated.ts +0 -461
  174. package/test/pseudo/overridden.ts +0 -317
  175. package/test/pseudo/path.ts +0 -680
  176. package/test/pseudo/peer.ts +0 -101
  177. package/test/pseudo/prerelease.ts +0 -279
  178. package/test/pseudo/private.ts +0 -108
  179. package/test/pseudo/prod.ts +0 -61
  180. package/test/pseudo/published.ts +0 -557
  181. package/test/pseudo/registry.ts +0 -122
  182. package/test/pseudo/root.ts +0 -66
  183. package/test/pseudo/scanned.ts +0 -144
  184. package/test/pseudo/score.ts +0 -591
  185. package/test/pseudo/scripts.ts +0 -324
  186. package/test/pseudo/semver.ts +0 -822
  187. package/test/pseudo/severity.ts +0 -342
  188. package/test/pseudo/shell.ts +0 -98
  189. package/test/pseudo/shrinkwrap.ts +0 -98
  190. package/test/pseudo/skill.ts +0 -189
  191. package/test/pseudo/skills.ts +0 -90
  192. package/test/pseudo/spec.ts +0 -525
  193. package/test/pseudo/squat.ts +0 -565
  194. package/test/pseudo/suspicious.ts +0 -98
  195. package/test/pseudo/tracker.ts +0 -98
  196. package/test/pseudo/trivial.ts +0 -98
  197. package/test/pseudo/type.ts +0 -105
  198. package/test/pseudo/undesirable.ts +0 -98
  199. package/test/pseudo/unknown.ts +0 -98
  200. package/test/pseudo/unmaintained.ts +0 -98
  201. package/test/pseudo/unpopular.ts +0 -98
  202. package/test/pseudo/unstable.ts +0 -98
  203. package/test/pseudo/vuln.ts +0 -625
  204. package/test/pseudo/vulnerable.ts +0 -137
  205. package/test/pseudo/workspace.ts +0 -111
  206. package/test/pseudo.ts +0 -584
  207. package/tsconfig.json +0 -3
  208. package/tsconfig.publish.json +0 -19
  209. package/tsconfig.publish.tsbuildinfo +0 -1
  210. package/typedoc.mjs +0 -2
@@ -1,66 +0,0 @@
1
- import t from 'tap'
2
- import postcssSelectorParser from 'postcss-selector-parser'
3
- import type { ParserState } from '../../src/types.ts'
4
- import { root } from '../../src/pseudo/root.ts'
5
- import {
6
- getSimpleGraph,
7
- getSingleWorkspaceGraph,
8
- } from '../fixtures/graph.ts'
9
-
10
- t.test('selects the root node of the graph', async t => {
11
- const getState = (query: string, graph = getSimpleGraph()) => {
12
- const ast = postcssSelectorParser().astSync(query)
13
- const current = ast.first.first
14
- const state: ParserState = {
15
- comment: '',
16
- current,
17
- initial: {
18
- edges: new Set(graph.edges.values()),
19
- nodes: new Set(graph.nodes.values()),
20
- },
21
- partial: {
22
- edges: new Set(graph.edges.values()),
23
- nodes: new Set(graph.nodes.values()),
24
- },
25
- collect: {
26
- edges: new Set(),
27
- nodes: new Set(),
28
- },
29
- cancellable: async () => {},
30
- walk: async i => i,
31
- retries: 0,
32
- securityArchive: undefined,
33
- importers: new Set(graph.importers),
34
- signal: new AbortController().signal,
35
- specificity: { idCounter: 0, commonCounter: 0 },
36
- }
37
- return state
38
- }
39
-
40
- await t.test('selects root node in simple graph', async t => {
41
- const res = await root(getState(':root'))
42
- t.strictSame(
43
- [...res.partial.nodes].map(n => n.name),
44
- ['my-project'],
45
- 'should select only the root node',
46
- )
47
- t.matchSnapshot({
48
- nodes: [...res.partial.nodes].map(n => n.name),
49
- edges: [...res.partial.edges].map(e => e.name),
50
- })
51
- })
52
-
53
- await t.test('selects root node in workspace graph', async t => {
54
- const wsGraph = getSingleWorkspaceGraph()
55
- const res = await root(getState(':root', wsGraph))
56
- t.strictSame(
57
- [...res.partial.nodes].map(n => n.name),
58
- ['ws'],
59
- 'should select only the workspace root node',
60
- )
61
- t.matchSnapshot({
62
- nodes: [...res.partial.nodes].map(n => n.name),
63
- edges: [...res.partial.edges].map(e => e.name),
64
- })
65
- })
66
- })
@@ -1,144 +0,0 @@
1
- import t from 'tap'
2
- import { joinDepIDTuple } from '@vltpkg/dep-id'
3
- import { asSecurityArchiveLike } from '@vltpkg/security-archive'
4
- import { SecurityArchive } from '@vltpkg/security-archive/browser'
5
- import type { PackageReportData } from '@vltpkg/security-archive'
6
- import { scanned } from '../../src/pseudo/scanned.ts'
7
- import { getSimpleGraph } from '../fixtures/graph.ts'
8
- import type { ParserState } from '../../src/types.ts'
9
- import { parse } from '../../src/parser.ts'
10
-
11
- t.test('scanned selector', async t => {
12
- const getState = () => {
13
- const graph = getSimpleGraph()
14
- const ast = parse(':scanned')
15
- const current = ast.first.first
16
- const testId = joinDepIDTuple(['registry', '', 'e@1.0.0'])
17
- const securityArchive = asSecurityArchiveLike(
18
- new Map<string, PackageReportData>([
19
- [
20
- testId,
21
- {
22
- id: 'e@1.0.0',
23
- author: [],
24
- size: 0,
25
- type: 'npm',
26
- name: 'e',
27
- version: '1.0.0',
28
- license: 'MIT',
29
- score: {
30
- overall: 0,
31
- license: 0,
32
- maintenance: 0,
33
- quality: 0,
34
- supplyChain: 0,
35
- vulnerability: 0,
36
- },
37
- alerts: [],
38
- },
39
- ],
40
- ]),
41
- )
42
- const state: ParserState = {
43
- comment: '',
44
- current,
45
- initial: {
46
- edges: new Set(graph.edges.values()),
47
- nodes: new Set(graph.nodes.values()),
48
- },
49
- partial: {
50
- edges: new Set(graph.edges.values()),
51
- nodes: new Set(graph.nodes.values()),
52
- },
53
- collect: {
54
- edges: new Set(),
55
- nodes: new Set(),
56
- },
57
- cancellable: async () => {},
58
- walk: async i => i,
59
- securityArchive,
60
- importers: new Set(graph.importers),
61
- retries: 0,
62
- signal: new AbortController().signal,
63
- specificity: { idCounter: 0, commonCounter: 0 },
64
- }
65
- return state
66
- }
67
-
68
- const state = getState()
69
- const result = await scanned(state)
70
- t.matchSnapshot(
71
- {
72
- nodes: [...result.partial.nodes].map(n => n.id),
73
- edges: [...result.partial.edges].map(
74
- e => `${e.from.id}->${e.to?.id}`,
75
- ),
76
- },
77
- 'should return only nodes with security archive data available',
78
- )
79
-
80
- await t.test('matches peer-suffixed node ids', async t => {
81
- const graph = getSimpleGraph()
82
- const e = [...graph.nodes.values()].find(n => n.name === 'e')
83
- if (!e) throw new Error('expected node e')
84
- const baseId = e.id
85
- const peerId = joinDepIDTuple([
86
- 'registry',
87
- '',
88
- 'e@1.0.0',
89
- 'peer.0123456789abcdef',
90
- ])
91
- graph.nodes.delete(baseId)
92
- e.id = peerId
93
- graph.nodes.set(peerId, e)
94
- const ast = parse(':scanned')
95
- const archive = SecurityArchive.load({
96
- [baseId]: {
97
- id: 'e@1.0.0',
98
- author: [],
99
- size: 0,
100
- type: 'npm',
101
- name: 'e',
102
- version: '1.0.0',
103
- license: 'MIT',
104
- score: {
105
- overall: 0,
106
- license: 0,
107
- maintenance: 0,
108
- quality: 0,
109
- supplyChain: 0,
110
- vulnerability: 0,
111
- },
112
- alerts: [],
113
- },
114
- })
115
- const state: ParserState = {
116
- comment: '',
117
- current: ast.first.first,
118
- initial: {
119
- edges: new Set(graph.edges.values()),
120
- nodes: new Set(graph.nodes.values()),
121
- },
122
- partial: {
123
- edges: new Set(graph.edges.values()),
124
- nodes: new Set(graph.nodes.values()),
125
- },
126
- collect: {
127
- edges: new Set(),
128
- nodes: new Set(),
129
- },
130
- cancellable: async () => {},
131
- walk: async i => i,
132
- securityArchive: archive,
133
- importers: new Set(graph.importers),
134
- retries: 0,
135
- signal: new AbortController().signal,
136
- specificity: { idCounter: 0, commonCounter: 0 },
137
- }
138
- const res = await scanned(state)
139
- t.ok(
140
- [...res.partial.nodes].some(n => n.id === peerId),
141
- ':scanned keeps a node whose DepID extra is a peer hash',
142
- )
143
- })
144
- })