@vltpkg/query 1.5.0 → 1.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (210) hide show
  1. package/package.json +10 -12
  2. package/skills/dss-query/REFERENCE.md +0 -125
  3. package/skills/dss-query/SKILL.md +0 -190
  4. package/skills/dss-query/evals/README.md +0 -81
  5. package/skills/dss-query/evals/evals.json +0 -89
  6. package/skills/dss-query/evals/grade.mjs +0 -481
  7. package/src/attribute.ts +0 -190
  8. package/src/combinator.ts +0 -135
  9. package/src/error.ts +0 -78
  10. package/src/id.ts +0 -46
  11. package/src/index.ts +0 -670
  12. package/src/parser.ts +0 -122
  13. package/src/pseudo/abandoned.ts +0 -9
  14. package/src/pseudo/attr.ts +0 -92
  15. package/src/pseudo/built.ts +0 -19
  16. package/src/pseudo/confused.ts +0 -29
  17. package/src/pseudo/cve.ts +0 -93
  18. package/src/pseudo/cwe.ts +0 -97
  19. package/src/pseudo/debug.ts +0 -9
  20. package/src/pseudo/deprecated.ts +0 -9
  21. package/src/pseudo/dev.ts +0 -18
  22. package/src/pseudo/diff.ts +0 -90
  23. package/src/pseudo/dist.ts +0 -148
  24. package/src/pseudo/dynamic.ts +0 -9
  25. package/src/pseudo/empty.ts +0 -15
  26. package/src/pseudo/entropic.ts +0 -9
  27. package/src/pseudo/env.ts +0 -6
  28. package/src/pseudo/eval.ts +0 -9
  29. package/src/pseudo/fs.ts +0 -9
  30. package/src/pseudo/helpers.ts +0 -106
  31. package/src/pseudo/host.ts +0 -111
  32. package/src/pseudo/hostname.ts +0 -156
  33. package/src/pseudo/license.ts +0 -134
  34. package/src/pseudo/link.ts +0 -30
  35. package/src/pseudo/malware.ts +0 -41
  36. package/src/pseudo/minified.ts +0 -9
  37. package/src/pseudo/missing.ts +0 -16
  38. package/src/pseudo/native.ts +0 -9
  39. package/src/pseudo/network.ts +0 -9
  40. package/src/pseudo/obfuscated.ts +0 -9
  41. package/src/pseudo/optional.ts +0 -18
  42. package/src/pseudo/outdated.ts +0 -345
  43. package/src/pseudo/overridden.ts +0 -20
  44. package/src/pseudo/path.ts +0 -146
  45. package/src/pseudo/peer.ts +0 -18
  46. package/src/pseudo/prerelease.ts +0 -47
  47. package/src/pseudo/private.ts +0 -19
  48. package/src/pseudo/prod.ts +0 -18
  49. package/src/pseudo/published.ts +0 -250
  50. package/src/pseudo/registry.ts +0 -29
  51. package/src/pseudo/root.ts +0 -19
  52. package/src/pseudo/scanned.ts +0 -20
  53. package/src/pseudo/score.ts +0 -186
  54. package/src/pseudo/scripts.ts +0 -61
  55. package/src/pseudo/semver.ts +0 -320
  56. package/src/pseudo/severity.ts +0 -231
  57. package/src/pseudo/shell.ts +0 -9
  58. package/src/pseudo/shrinkwrap.ts +0 -9
  59. package/src/pseudo/skill.ts +0 -59
  60. package/src/pseudo/skills.ts +0 -29
  61. package/src/pseudo/spec.ts +0 -131
  62. package/src/pseudo/squat.ts +0 -225
  63. package/src/pseudo/suspicious.ts +0 -9
  64. package/src/pseudo/tracker.ts +0 -9
  65. package/src/pseudo/trivial.ts +0 -9
  66. package/src/pseudo/type.ts +0 -26
  67. package/src/pseudo/undesirable.ts +0 -9
  68. package/src/pseudo/unknown.ts +0 -9
  69. package/src/pseudo/unmaintained.ts +0 -9
  70. package/src/pseudo/unpopular.ts +0 -9
  71. package/src/pseudo/unstable.ts +0 -9
  72. package/src/pseudo/vuln.ts +0 -273
  73. package/src/pseudo/workspace.ts +0 -22
  74. package/src/pseudo.ts +0 -440
  75. package/src/types.ts +0 -206
  76. package/tap-snapshots/test/attribute.ts.test.cjs +0 -304
  77. package/tap-snapshots/test/combinator.ts.test.cjs +0 -333
  78. package/tap-snapshots/test/id.ts.test.cjs +0 -118
  79. package/tap-snapshots/test/parser.ts.test.cjs +0 -344
  80. package/tap-snapshots/test/pseudo/abandoned.ts.test.cjs +0 -18
  81. package/tap-snapshots/test/pseudo/attr.ts.test.cjs +0 -161
  82. package/tap-snapshots/test/pseudo/built.ts.test.cjs +0 -70
  83. package/tap-snapshots/test/pseudo/confused.ts.test.cjs +0 -32
  84. package/tap-snapshots/test/pseudo/cve.ts.test.cjs +0 -49
  85. package/tap-snapshots/test/pseudo/cwe.ts.test.cjs +0 -49
  86. package/tap-snapshots/test/pseudo/debug.ts.test.cjs +0 -18
  87. package/tap-snapshots/test/pseudo/deprecated.ts.test.cjs +0 -18
  88. package/tap-snapshots/test/pseudo/dist.ts.test.cjs +0 -30
  89. package/tap-snapshots/test/pseudo/dynamic.ts.test.cjs +0 -18
  90. package/tap-snapshots/test/pseudo/empty.ts.test.cjs +0 -50
  91. package/tap-snapshots/test/pseudo/entropic.ts.test.cjs +0 -18
  92. package/tap-snapshots/test/pseudo/env.ts.test.cjs +0 -18
  93. package/tap-snapshots/test/pseudo/eval.ts.test.cjs +0 -18
  94. package/tap-snapshots/test/pseudo/fs.ts.test.cjs +0 -18
  95. package/tap-snapshots/test/pseudo/helpers.ts.test.cjs +0 -18
  96. package/tap-snapshots/test/pseudo/hostname.ts.test.cjs +0 -148
  97. package/tap-snapshots/test/pseudo/license.ts.test.cjs +0 -41
  98. package/tap-snapshots/test/pseudo/link.ts.test.cjs +0 -36
  99. package/tap-snapshots/test/pseudo/malware.ts.test.cjs +0 -22
  100. package/tap-snapshots/test/pseudo/minified.ts.test.cjs +0 -18
  101. package/tap-snapshots/test/pseudo/missing.ts.test.cjs +0 -30
  102. package/tap-snapshots/test/pseudo/native.ts.test.cjs +0 -18
  103. package/tap-snapshots/test/pseudo/network.ts.test.cjs +0 -18
  104. package/tap-snapshots/test/pseudo/obfuscated.ts.test.cjs +0 -18
  105. package/tap-snapshots/test/pseudo/outdated.ts.test.cjs +0 -132
  106. package/tap-snapshots/test/pseudo/overridden.ts.test.cjs +0 -75
  107. package/tap-snapshots/test/pseudo/prerelease.ts.test.cjs +0 -101
  108. package/tap-snapshots/test/pseudo/private.ts.test.cjs +0 -38
  109. package/tap-snapshots/test/pseudo/published.ts.test.cjs +0 -171
  110. package/tap-snapshots/test/pseudo/registry.ts.test.cjs +0 -68
  111. package/tap-snapshots/test/pseudo/root.ts.test.cjs +0 -24
  112. package/tap-snapshots/test/pseudo/scanned.ts.test.cjs +0 -18
  113. package/tap-snapshots/test/pseudo/score.ts.test.cjs +0 -239
  114. package/tap-snapshots/test/pseudo/scripts.ts.test.cjs +0 -62
  115. package/tap-snapshots/test/pseudo/semver.ts.test.cjs +0 -575
  116. package/tap-snapshots/test/pseudo/severity.ts.test.cjs +0 -122
  117. package/tap-snapshots/test/pseudo/shell.ts.test.cjs +0 -18
  118. package/tap-snapshots/test/pseudo/shrinkwrap.ts.test.cjs +0 -18
  119. package/tap-snapshots/test/pseudo/skills.ts.test.cjs +0 -19
  120. package/tap-snapshots/test/pseudo/spec.ts.test.cjs +0 -148
  121. package/tap-snapshots/test/pseudo/squat.ts.test.cjs +0 -129
  122. package/tap-snapshots/test/pseudo/suspicious.ts.test.cjs +0 -18
  123. package/tap-snapshots/test/pseudo/tracker.ts.test.cjs +0 -18
  124. package/tap-snapshots/test/pseudo/trivial.ts.test.cjs +0 -18
  125. package/tap-snapshots/test/pseudo/type.ts.test.cjs +0 -51
  126. package/tap-snapshots/test/pseudo/undesirable.ts.test.cjs +0 -18
  127. package/tap-snapshots/test/pseudo/unknown.ts.test.cjs +0 -18
  128. package/tap-snapshots/test/pseudo/unmaintained.ts.test.cjs +0 -18
  129. package/tap-snapshots/test/pseudo/unpopular.ts.test.cjs +0 -18
  130. package/tap-snapshots/test/pseudo/unstable.ts.test.cjs +0 -18
  131. package/tap-snapshots/test/pseudo/vuln.ts.test.cjs +0 -208
  132. package/tap-snapshots/test/pseudo/vulnerable.ts.test.cjs +0 -20
  133. package/tap-snapshots/test/pseudo/workspace.ts.test.cjs +0 -19
  134. package/tap-snapshots/test/pseudo.ts.test.cjs +0 -1247
  135. package/test/attribute.ts +0 -273
  136. package/test/combinator.ts +0 -175
  137. package/test/error.ts +0 -60
  138. package/test/fixtures/graph.ts +0 -999
  139. package/test/fixtures/selector.ts +0 -103
  140. package/test/fixtures/types.ts +0 -7
  141. package/test/id.ts +0 -102
  142. package/test/index.ts +0 -1148
  143. package/test/parser.ts +0 -117
  144. package/test/pseudo/abandoned.ts +0 -98
  145. package/test/pseudo/attr.ts +0 -298
  146. package/test/pseudo/built.ts +0 -214
  147. package/test/pseudo/confused.ts +0 -160
  148. package/test/pseudo/cve.ts +0 -249
  149. package/test/pseudo/cwe.ts +0 -255
  150. package/test/pseudo/debug.ts +0 -98
  151. package/test/pseudo/deprecated.ts +0 -98
  152. package/test/pseudo/dev.ts +0 -61
  153. package/test/pseudo/diff.ts +0 -417
  154. package/test/pseudo/dist.ts +0 -215
  155. package/test/pseudo/dynamic.ts +0 -98
  156. package/test/pseudo/empty.ts +0 -108
  157. package/test/pseudo/entropic.ts +0 -101
  158. package/test/pseudo/env.ts +0 -98
  159. package/test/pseudo/eval.ts +0 -98
  160. package/test/pseudo/fs.ts +0 -98
  161. package/test/pseudo/helpers.ts +0 -370
  162. package/test/pseudo/host-context.ts +0 -276
  163. package/test/pseudo/hostname.ts +0 -314
  164. package/test/pseudo/license.ts +0 -265
  165. package/test/pseudo/link.ts +0 -94
  166. package/test/pseudo/malware.ts +0 -184
  167. package/test/pseudo/minified.ts +0 -98
  168. package/test/pseudo/missing.ts +0 -111
  169. package/test/pseudo/native.ts +0 -98
  170. package/test/pseudo/network.ts +0 -98
  171. package/test/pseudo/obfuscated.ts +0 -98
  172. package/test/pseudo/optional.ts +0 -73
  173. package/test/pseudo/outdated.ts +0 -461
  174. package/test/pseudo/overridden.ts +0 -317
  175. package/test/pseudo/path.ts +0 -680
  176. package/test/pseudo/peer.ts +0 -101
  177. package/test/pseudo/prerelease.ts +0 -279
  178. package/test/pseudo/private.ts +0 -108
  179. package/test/pseudo/prod.ts +0 -61
  180. package/test/pseudo/published.ts +0 -557
  181. package/test/pseudo/registry.ts +0 -122
  182. package/test/pseudo/root.ts +0 -66
  183. package/test/pseudo/scanned.ts +0 -144
  184. package/test/pseudo/score.ts +0 -591
  185. package/test/pseudo/scripts.ts +0 -324
  186. package/test/pseudo/semver.ts +0 -822
  187. package/test/pseudo/severity.ts +0 -342
  188. package/test/pseudo/shell.ts +0 -98
  189. package/test/pseudo/shrinkwrap.ts +0 -98
  190. package/test/pseudo/skill.ts +0 -189
  191. package/test/pseudo/skills.ts +0 -90
  192. package/test/pseudo/spec.ts +0 -525
  193. package/test/pseudo/squat.ts +0 -565
  194. package/test/pseudo/suspicious.ts +0 -98
  195. package/test/pseudo/tracker.ts +0 -98
  196. package/test/pseudo/trivial.ts +0 -98
  197. package/test/pseudo/type.ts +0 -105
  198. package/test/pseudo/undesirable.ts +0 -98
  199. package/test/pseudo/unknown.ts +0 -98
  200. package/test/pseudo/unmaintained.ts +0 -98
  201. package/test/pseudo/unpopular.ts +0 -98
  202. package/test/pseudo/unstable.ts +0 -98
  203. package/test/pseudo/vuln.ts +0 -625
  204. package/test/pseudo/vulnerable.ts +0 -137
  205. package/test/pseudo/workspace.ts +0 -111
  206. package/test/pseudo.ts +0 -584
  207. package/tsconfig.json +0 -3
  208. package/tsconfig.publish.json +0 -19
  209. package/tsconfig.publish.tsbuildinfo +0 -1
  210. package/typedoc.mjs +0 -2
@@ -1,565 +0,0 @@
1
- import t from 'tap'
2
- import { joinDepIDTuple } from '@vltpkg/dep-id'
3
- import { asPostcssNodeWithChildren, parse } from '@vltpkg/dss-parser'
4
- import { asSecurityArchiveLike } from '@vltpkg/security-archive'
5
- import { getSimpleGraph } from '../fixtures/graph.ts'
6
- import {
7
- squat,
8
- isSquatKind,
9
- asSquatKind,
10
- parseInternals,
11
- } from '../../src/pseudo/squat.ts'
12
- import type { ParserState } from '../../src/types.ts'
13
-
14
- t.test('selects packages with a specific squat kind', async t => {
15
- const getState = (query: string, graph = getSimpleGraph()) => {
16
- const ast = parse(query)
17
- const current = ast.first.first
18
- const state: ParserState = {
19
- comment: '',
20
- current,
21
- initial: {
22
- edges: new Set(graph.edges.values()),
23
- nodes: new Set(graph.nodes.values()),
24
- },
25
- partial: {
26
- edges: new Set(graph.edges.values()),
27
- nodes: new Set(graph.nodes.values()),
28
- },
29
- collect: {
30
- edges: new Set(),
31
- nodes: new Set(),
32
- },
33
- cancellable: async () => {},
34
- walk: async i => i,
35
- securityArchive: asSecurityArchiveLike(
36
- new Map([
37
- [
38
- joinDepIDTuple(['registry', '', 'e@1.0.0']),
39
- {
40
- id: joinDepIDTuple(['registry', '', 'e@1.0.0']),
41
- alerts: [{ type: 'didYouMean' }],
42
- },
43
- ],
44
- [
45
- joinDepIDTuple(['registry', '', 'f@1.0.0']),
46
- {
47
- id: joinDepIDTuple(['registry', '', 'f@1.0.0']),
48
- alerts: [{ type: 'gptDidYouMean' }],
49
- },
50
- ],
51
- ]),
52
- ),
53
- importers: new Set(graph.importers),
54
- retries: 0,
55
- signal: new AbortController().signal,
56
- specificity: { idCounter: 0, commonCounter: 0 },
57
- }
58
- return state
59
- }
60
-
61
- await t.test(
62
- 'filter out any node that does not have the squat alert',
63
- async t => {
64
- const res = await squat(getState(':squat("critical")'))
65
- t.strictSame(
66
- [...res.partial.nodes].map(n => n.name),
67
- ['e'],
68
- 'should select only packages with the specified squat alert',
69
- )
70
- t.matchSnapshot({
71
- nodes: [...res.partial.nodes].map(n => n.name),
72
- edges: [...res.partial.edges].map(e => e.name),
73
- })
74
- },
75
- )
76
-
77
- await t.test('filter out using unquoted param', async t => {
78
- const res = await squat(getState(':squat(medium)'))
79
- t.strictSame(
80
- [...res.partial.nodes].map(n => n.name),
81
- ['f'],
82
- 'should select only packages with the specified squat alert',
83
- )
84
- t.matchSnapshot({
85
- nodes: [...res.partial.nodes].map(n => n.name),
86
- edges: [...res.partial.edges].map(e => e.name),
87
- })
88
- })
89
-
90
- await t.test('filter using numbered param', async t => {
91
- const res = await squat(getState(':squat(0)'))
92
- t.strictSame(
93
- [...res.partial.nodes].map(n => n.name),
94
- ['e'],
95
- 'should select only packages with the specified squat alert',
96
- )
97
- t.matchSnapshot({
98
- nodes: [...res.partial.nodes].map(n => n.name),
99
- edges: [...res.partial.edges].map(e => e.name),
100
- })
101
- })
102
-
103
- await t.test(
104
- 'greater than comparator with number (unquoted)',
105
- async t => {
106
- const res = await squat(getState(':squat(>0)'))
107
- t.strictSame(
108
- [...res.partial.nodes].map(n => n.name).sort(),
109
- ['f'],
110
- 'should select packages with squat greater than critical/0',
111
- )
112
- t.matchSnapshot({
113
- nodes: [...res.partial.nodes].map(n => n.name).sort(),
114
- edges: [...res.partial.edges].map(e => e.name).sort(),
115
- })
116
- },
117
- )
118
-
119
- await t.test(
120
- 'less than comparator with number (quoted)',
121
- async t => {
122
- const res = await squat(getState(':squat("<2")'))
123
- t.strictSame(
124
- [...res.partial.nodes].map(n => n.name).sort(),
125
- ['e'],
126
- 'should select packages with squat less than medium/2',
127
- )
128
- t.matchSnapshot({
129
- nodes: [...res.partial.nodes].map(n => n.name).sort(),
130
- edges: [...res.partial.edges].map(e => e.name).sort(),
131
- })
132
- },
133
- )
134
-
135
- await t.test(
136
- 'greater than or equal to comparator with number (quoted)',
137
- async t => {
138
- const res = await squat(getState(':squat(">=2")'))
139
- t.strictSame(
140
- [...res.partial.nodes].map(n => n.name).sort(),
141
- ['f'],
142
- 'should select packages with squat greater than or equal to medium/2',
143
- )
144
- t.matchSnapshot({
145
- nodes: [...res.partial.nodes].map(n => n.name).sort(),
146
- edges: [...res.partial.edges].map(e => e.name).sort(),
147
- })
148
- },
149
- )
150
-
151
- await t.test(
152
- 'greater than or equal to comparator - exact match (unquoted)',
153
- async t => {
154
- const res = await squat(getState(':squat(>=0)'))
155
- t.strictSame(
156
- [...res.partial.nodes].map(n => n.name).sort(),
157
- ['e', 'f'],
158
- 'should select packages with squat greater than or equal to critical/0 (including exact matches)',
159
- )
160
- t.matchSnapshot({
161
- nodes: [...res.partial.nodes].map(n => n.name).sort(),
162
- edges: [...res.partial.edges].map(e => e.name).sort(),
163
- })
164
- },
165
- )
166
-
167
- await t.test(
168
- 'less than or equal to comparator with number (unquoted)',
169
- async t => {
170
- const res = await squat(getState(':squat(<=0)'))
171
- t.strictSame(
172
- [...res.partial.nodes].map(n => n.name).sort(),
173
- ['e'],
174
- 'should select packages with squat less than or equal to critical/0',
175
- )
176
- t.matchSnapshot({
177
- nodes: [...res.partial.nodes].map(n => n.name).sort(),
178
- edges: [...res.partial.edges].map(e => e.name).sort(),
179
- })
180
- },
181
- )
182
-
183
- await t.test(
184
- 'less than or equal to comparator - exact match (quoted)',
185
- async t => {
186
- const res = await squat(getState(':squat("<=2")'))
187
- t.strictSame(
188
- [...res.partial.nodes].map(n => n.name).sort(),
189
- ['e', 'f'],
190
- 'should select packages with squat less than or equal to medium/2 (including exact matches)',
191
- )
192
- t.matchSnapshot({
193
- nodes: [...res.partial.nodes].map(n => n.name).sort(),
194
- edges: [...res.partial.edges].map(e => e.name).sort(),
195
- })
196
- },
197
- )
198
-
199
- await t.test('empty alerts array', async t => {
200
- const getCustomState = (
201
- query: string,
202
- graph = getSimpleGraph(),
203
- ) => {
204
- const ast = parse(query)
205
- const current = ast.first.first
206
- const state: ParserState = {
207
- comment: '',
208
- current,
209
- initial: {
210
- edges: new Set(graph.edges.values()),
211
- nodes: new Set(graph.nodes.values()),
212
- },
213
- partial: {
214
- edges: new Set(graph.edges.values()),
215
- nodes: new Set(graph.nodes.values()),
216
- },
217
- collect: {
218
- edges: new Set(),
219
- nodes: new Set(),
220
- },
221
- cancellable: async () => {},
222
- walk: async i => i,
223
- securityArchive: asSecurityArchiveLike(
224
- new Map([
225
- [
226
- joinDepIDTuple(['registry', '', 'e@1.0.0']),
227
- {
228
- id: joinDepIDTuple(['registry', '', 'e@1.0.0']),
229
- alerts: [{ type: 'didYouMean' }],
230
- },
231
- ],
232
- [
233
- joinDepIDTuple(['registry', '', 'f@1.0.0']),
234
- {
235
- id: joinDepIDTuple(['registry', '', 'f@1.0.0']),
236
- alerts: [{ type: 'gptDidYouMean' }],
237
- },
238
- ],
239
- [
240
- joinDepIDTuple(['registry', '', 'c@1.0.0']),
241
- {
242
- id: joinDepIDTuple(['registry', '', 'c@1.0.0']),
243
- alerts: [], // Empty alerts array
244
- },
245
- ],
246
- ]),
247
- ),
248
- importers: new Set(graph.importers),
249
- retries: 0,
250
- signal: new AbortController().signal,
251
- specificity: { idCounter: 0, commonCounter: 0 },
252
- }
253
- return state
254
- }
255
-
256
- const res = await squat(getCustomState(':squat(>0)'))
257
- t.strictSame(
258
- [...res.partial.nodes].map(n => n.name).sort(),
259
- ['f'],
260
- 'should exclude nodes with empty alerts array',
261
- )
262
- })
263
-
264
- await t.test('node with unknown alert type', async t => {
265
- const getCustomState = (
266
- query: string,
267
- graph = getSimpleGraph(),
268
- ) => {
269
- const ast = parse(query)
270
- const current = ast.first.first
271
- const state: ParserState = {
272
- comment: '',
273
- current,
274
- initial: {
275
- edges: new Set(graph.edges.values()),
276
- nodes: new Set(graph.nodes.values()),
277
- },
278
- partial: {
279
- edges: new Set(graph.edges.values()),
280
- nodes: new Set(graph.nodes.values()),
281
- },
282
- collect: {
283
- edges: new Set(),
284
- nodes: new Set(),
285
- },
286
- cancellable: async () => {},
287
- walk: async i => i,
288
- securityArchive: asSecurityArchiveLike(
289
- new Map([
290
- [
291
- joinDepIDTuple(['registry', '', 'e@1.0.0']),
292
- {
293
- id: joinDepIDTuple(['registry', '', 'e@1.0.0']),
294
- alerts: [{ type: 'didYouMean' }],
295
- },
296
- ],
297
- [
298
- joinDepIDTuple(['registry', '', 'f@1.0.0']),
299
- {
300
- id: joinDepIDTuple(['registry', '', 'f@1.0.0']),
301
- alerts: [{ type: 'gptDidYouMean' }],
302
- },
303
- ],
304
- [
305
- joinDepIDTuple(['registry', '', 'c@1.0.0']),
306
- {
307
- id: joinDepIDTuple(['registry', '', 'c@1.0.0']),
308
- // Use an unknown alert type that won't have a matching level
309
- alerts: [{ type: 'unknownAlertType' }],
310
- },
311
- ],
312
- ]),
313
- ),
314
- importers: new Set(graph.importers),
315
- retries: 0,
316
- signal: new AbortController().signal,
317
- specificity: { idCounter: 0, commonCounter: 0 },
318
- }
319
- return state
320
- }
321
-
322
- const res = await squat(getCustomState(':squat(>0)'))
323
- t.strictSame(
324
- [...res.partial.nodes].map(n => n.name).sort(),
325
- ['f'],
326
- 'should exclude nodes with unknown alert types',
327
- )
328
- })
329
-
330
- await t.test('pseudo state form works', async t => {
331
- // :squat without parameters should now work as pseudo state
332
- const result = await squat(getState(':squat'))
333
- t.ok(result, 'should not throw an error for pseudo state form')
334
- })
335
- })
336
-
337
- t.test('missing security archive', async t => {
338
- const getState = (query: string) => {
339
- const ast = parse(query)
340
- const current = ast.first.first
341
- const state: ParserState = {
342
- comment: '',
343
- current,
344
- initial: {
345
- edges: new Set(),
346
- nodes: new Set(),
347
- },
348
- partial: {
349
- edges: new Set(),
350
- nodes: new Set(),
351
- },
352
- collect: {
353
- edges: new Set(),
354
- nodes: new Set(),
355
- },
356
- cancellable: async () => {},
357
- walk: async i => i,
358
- securityArchive: undefined,
359
- importers: new Set(),
360
- retries: 0,
361
- signal: new AbortController().signal,
362
- specificity: { idCounter: 0, commonCounter: 0 },
363
- }
364
- return state
365
- }
366
-
367
- await t.rejects(
368
- squat(getState(':squat(critical)')),
369
- { message: /Missing security archive/ },
370
- 'should throw an error',
371
- )
372
- })
373
-
374
- t.test('isSquatKind', async t => {
375
- t.ok(
376
- isSquatKind('critical'),
377
- 'should return true for valid squat kinds',
378
- )
379
- t.notOk(
380
- isSquatKind('invalid'),
381
- 'should return false for invalid squat kinds',
382
- )
383
- })
384
-
385
- t.test('asSquatKind', async t => {
386
- t.equal(
387
- asSquatKind('critical'),
388
- 'critical',
389
- 'should return the squat kind',
390
- )
391
- t.throws(
392
- () => asSquatKind('invalid'),
393
- { message: /Expected a valid squat kind/ },
394
- 'should throw an error for invalid squat kinds',
395
- )
396
- })
397
-
398
- t.test('parseInternals', async t => {
399
- const testParseInternals = (query: string) => {
400
- const ast = parse(query)
401
- return parseInternals(
402
- asPostcssNodeWithChildren(ast.first.first).nodes,
403
- )
404
- }
405
-
406
- t.strictSame(
407
- testParseInternals(':squat(critical)'),
408
- { kind: 'critical', comparator: undefined },
409
- 'should parse exact squat kind',
410
- )
411
-
412
- t.strictSame(
413
- testParseInternals(':squat(>medium)'),
414
- { kind: 'medium', comparator: '>' },
415
- 'should parse squat kind with > comparator',
416
- )
417
-
418
- t.strictSame(
419
- testParseInternals(':squat(<critical)'),
420
- { kind: 'critical', comparator: '<' },
421
- 'should parse squat kind with < comparator',
422
- )
423
-
424
- t.strictSame(
425
- testParseInternals(':squat(>=2)'),
426
- { kind: '2', comparator: '>=' },
427
- 'should parse squat kind with >= comparator',
428
- )
429
-
430
- t.strictSame(
431
- testParseInternals(':squat(<=0)'),
432
- { kind: '0', comparator: '<=' },
433
- 'should parse squat kind with <= comparator',
434
- )
435
-
436
- t.throws(
437
- () => testParseInternals(':squat'),
438
- /Expected a query node/,
439
- 'should throw for missing parameter',
440
- )
441
-
442
- t.throws(
443
- () => testParseInternals(':squat(>invalid)'),
444
- {
445
- message: /Expected a valid squat kind for comparison/,
446
- },
447
- 'should throw for invalid kind with comparator',
448
- )
449
-
450
- t.throws(
451
- () => testParseInternals(':squat(>3)'),
452
- {
453
- message: /Expected a valid squat kind for comparison/,
454
- },
455
- 'should throw for out of range number with comparator',
456
- )
457
- })
458
-
459
- t.test('pseudo state form - :squat without parameters', async t => {
460
- const getState = (graph = getSimpleGraph()) => {
461
- const ast = parse(':squat')
462
- const current = ast.first.first
463
- const state: ParserState = {
464
- comment: '',
465
- current,
466
- initial: {
467
- edges: new Set(graph.edges.values()),
468
- nodes: new Set(graph.nodes.values()),
469
- },
470
- partial: {
471
- edges: new Set(graph.edges.values()),
472
- nodes: new Set(graph.nodes.values()),
473
- },
474
- collect: {
475
- edges: new Set(),
476
- nodes: new Set(),
477
- },
478
- cancellable: async () => {},
479
- walk: async i => i,
480
- securityArchive: asSecurityArchiveLike(
481
- new Map([
482
- [
483
- joinDepIDTuple(['registry', '', 'e@1.0.0']),
484
- {
485
- id: joinDepIDTuple(['registry', '', 'e@1.0.0']),
486
- alerts: [{ type: 'didYouMean' }],
487
- },
488
- ],
489
- [
490
- joinDepIDTuple(['registry', '', 'f@1.0.0']),
491
- {
492
- id: joinDepIDTuple(['registry', '', 'f@1.0.0']),
493
- alerts: [{ type: 'gptDidYouMean' }],
494
- },
495
- ],
496
- ]),
497
- ),
498
- importers: new Set(graph.importers),
499
- retries: 0,
500
- signal: new AbortController().signal,
501
- specificity: { idCounter: 0, commonCounter: 0 },
502
- }
503
- return state
504
- }
505
-
506
- const state = getState()
507
- const result = await squat(state)
508
- t.matchSnapshot(
509
- {
510
- nodes: [...result.partial.nodes].map(n => n.id),
511
- edges: [...result.partial.edges].map(
512
- e => `${e.from.id}->${e.to?.id}`,
513
- ),
514
- },
515
- 'should match any packages with squat alerts',
516
- )
517
- })
518
-
519
- t.test('error handling for non-query node errors', async t => {
520
- // Create a state that will trigger a non-"Expected a query node" error
521
- const ast = parse(':squat(invalid)')
522
- const current = ast.first.first
523
-
524
- // Create a corrupted current node that will cause parsing to fail differently
525
- const corruptedCurrent = {
526
- ...current,
527
- nodes: [
528
- {
529
- type: 'function',
530
- value: 'squat',
531
- nodes: null, // This will cause asPostcssNodeWithChildren to fail differently
532
- },
533
- ],
534
- }
535
-
536
- const state: ParserState = {
537
- comment: '',
538
- current: corruptedCurrent as any,
539
- initial: {
540
- edges: new Set(),
541
- nodes: new Set(),
542
- },
543
- partial: {
544
- edges: new Set(),
545
- nodes: new Set(),
546
- },
547
- collect: {
548
- edges: new Set(),
549
- nodes: new Set(),
550
- },
551
- cancellable: async () => {},
552
- walk: async i => i,
553
- securityArchive: asSecurityArchiveLike(new Map()),
554
- importers: new Set(),
555
- retries: 0,
556
- signal: new AbortController().signal,
557
- specificity: { idCounter: 0, commonCounter: 0 },
558
- }
559
-
560
- await t.rejects(
561
- squat(state),
562
- { message: /Failed to parse :squat selector/ },
563
- 'should throw error for parsing failures other than missing query node',
564
- )
565
- })
@@ -1,98 +0,0 @@
1
- import t from 'tap'
2
- import { joinDepIDTuple } from '@vltpkg/dep-id'
3
- import { asSecurityArchiveLike } from '@vltpkg/security-archive'
4
- import { getSimpleGraph } from '../fixtures/graph.ts'
5
- import type { ParserState } from '../../src/types.ts'
6
- import { suspicious } from '../../src/pseudo/suspicious.ts'
7
- import { parse } from '../../src/parser.ts'
8
-
9
- t.test('selects packages with a suspicious alert', async t => {
10
- const getState = (query: string, graph = getSimpleGraph()) => {
11
- const ast = parse(query)
12
- const current = ast.first.first
13
- const state: ParserState = {
14
- comment: '',
15
- current,
16
- initial: {
17
- edges: new Set(graph.edges.values()),
18
- nodes: new Set(graph.nodes.values()),
19
- },
20
- partial: {
21
- edges: new Set(graph.edges.values()),
22
- nodes: new Set(graph.nodes.values()),
23
- },
24
- collect: {
25
- edges: new Set(),
26
- nodes: new Set(),
27
- },
28
- cancellable: async () => {},
29
- walk: async i => i,
30
- securityArchive: asSecurityArchiveLike(
31
- new Map([
32
- [
33
- joinDepIDTuple(['registry', '', 'e@1.0.0']),
34
- { alerts: [{ type: 'suspiciousStarActivity' }] },
35
- ],
36
- ]),
37
- ),
38
- importers: new Set(graph.importers),
39
- retries: 0,
40
- signal: new AbortController().signal,
41
- specificity: { idCounter: 0, commonCounter: 0 },
42
- }
43
- return state
44
- }
45
-
46
- await t.test(
47
- 'filter out any node that does not have the alert',
48
- async t => {
49
- const res = await suspicious(getState(':suspicious'))
50
- t.strictSame(
51
- [...res.partial.nodes].map(n => n.name),
52
- ['e'],
53
- 'should select only suspicious packages',
54
- )
55
- t.matchSnapshot({
56
- nodes: [...res.partial.nodes].map(n => n.name),
57
- edges: [...res.partial.edges].map(e => e.name),
58
- })
59
- },
60
- )
61
- })
62
-
63
- t.test('missing security archive', async t => {
64
- const getState = (query: string) => {
65
- const ast = parse(query)
66
- const current = ast.first.first
67
- const state: ParserState = {
68
- comment: '',
69
- current,
70
- initial: {
71
- edges: new Set(),
72
- nodes: new Set(),
73
- },
74
- partial: {
75
- edges: new Set(),
76
- nodes: new Set(),
77
- },
78
- collect: {
79
- edges: new Set(),
80
- nodes: new Set(),
81
- },
82
- cancellable: async () => {},
83
- walk: async i => i,
84
- securityArchive: undefined,
85
- importers: new Set(),
86
- retries: 0,
87
- signal: new AbortController().signal,
88
- specificity: { idCounter: 0, commonCounter: 0 },
89
- }
90
- return state
91
- }
92
-
93
- await t.rejects(
94
- suspicious(getState(':suspicious')),
95
- { message: /Missing security archive/ },
96
- 'should throw an error',
97
- )
98
- })