@vltpkg/query 1.5.0 → 1.6.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (211) hide show
  1. package/dist/id.js +12 -5
  2. package/package.json +10 -12
  3. package/skills/dss-query/REFERENCE.md +0 -125
  4. package/skills/dss-query/SKILL.md +0 -190
  5. package/skills/dss-query/evals/README.md +0 -81
  6. package/skills/dss-query/evals/evals.json +0 -89
  7. package/skills/dss-query/evals/grade.mjs +0 -481
  8. package/src/attribute.ts +0 -190
  9. package/src/combinator.ts +0 -135
  10. package/src/error.ts +0 -78
  11. package/src/id.ts +0 -46
  12. package/src/index.ts +0 -670
  13. package/src/parser.ts +0 -122
  14. package/src/pseudo/abandoned.ts +0 -9
  15. package/src/pseudo/attr.ts +0 -92
  16. package/src/pseudo/built.ts +0 -19
  17. package/src/pseudo/confused.ts +0 -29
  18. package/src/pseudo/cve.ts +0 -93
  19. package/src/pseudo/cwe.ts +0 -97
  20. package/src/pseudo/debug.ts +0 -9
  21. package/src/pseudo/deprecated.ts +0 -9
  22. package/src/pseudo/dev.ts +0 -18
  23. package/src/pseudo/diff.ts +0 -90
  24. package/src/pseudo/dist.ts +0 -148
  25. package/src/pseudo/dynamic.ts +0 -9
  26. package/src/pseudo/empty.ts +0 -15
  27. package/src/pseudo/entropic.ts +0 -9
  28. package/src/pseudo/env.ts +0 -6
  29. package/src/pseudo/eval.ts +0 -9
  30. package/src/pseudo/fs.ts +0 -9
  31. package/src/pseudo/helpers.ts +0 -106
  32. package/src/pseudo/host.ts +0 -111
  33. package/src/pseudo/hostname.ts +0 -156
  34. package/src/pseudo/license.ts +0 -134
  35. package/src/pseudo/link.ts +0 -30
  36. package/src/pseudo/malware.ts +0 -41
  37. package/src/pseudo/minified.ts +0 -9
  38. package/src/pseudo/missing.ts +0 -16
  39. package/src/pseudo/native.ts +0 -9
  40. package/src/pseudo/network.ts +0 -9
  41. package/src/pseudo/obfuscated.ts +0 -9
  42. package/src/pseudo/optional.ts +0 -18
  43. package/src/pseudo/outdated.ts +0 -345
  44. package/src/pseudo/overridden.ts +0 -20
  45. package/src/pseudo/path.ts +0 -146
  46. package/src/pseudo/peer.ts +0 -18
  47. package/src/pseudo/prerelease.ts +0 -47
  48. package/src/pseudo/private.ts +0 -19
  49. package/src/pseudo/prod.ts +0 -18
  50. package/src/pseudo/published.ts +0 -250
  51. package/src/pseudo/registry.ts +0 -29
  52. package/src/pseudo/root.ts +0 -19
  53. package/src/pseudo/scanned.ts +0 -20
  54. package/src/pseudo/score.ts +0 -186
  55. package/src/pseudo/scripts.ts +0 -61
  56. package/src/pseudo/semver.ts +0 -320
  57. package/src/pseudo/severity.ts +0 -231
  58. package/src/pseudo/shell.ts +0 -9
  59. package/src/pseudo/shrinkwrap.ts +0 -9
  60. package/src/pseudo/skill.ts +0 -59
  61. package/src/pseudo/skills.ts +0 -29
  62. package/src/pseudo/spec.ts +0 -131
  63. package/src/pseudo/squat.ts +0 -225
  64. package/src/pseudo/suspicious.ts +0 -9
  65. package/src/pseudo/tracker.ts +0 -9
  66. package/src/pseudo/trivial.ts +0 -9
  67. package/src/pseudo/type.ts +0 -26
  68. package/src/pseudo/undesirable.ts +0 -9
  69. package/src/pseudo/unknown.ts +0 -9
  70. package/src/pseudo/unmaintained.ts +0 -9
  71. package/src/pseudo/unpopular.ts +0 -9
  72. package/src/pseudo/unstable.ts +0 -9
  73. package/src/pseudo/vuln.ts +0 -273
  74. package/src/pseudo/workspace.ts +0 -22
  75. package/src/pseudo.ts +0 -440
  76. package/src/types.ts +0 -206
  77. package/tap-snapshots/test/attribute.ts.test.cjs +0 -304
  78. package/tap-snapshots/test/combinator.ts.test.cjs +0 -333
  79. package/tap-snapshots/test/id.ts.test.cjs +0 -118
  80. package/tap-snapshots/test/parser.ts.test.cjs +0 -344
  81. package/tap-snapshots/test/pseudo/abandoned.ts.test.cjs +0 -18
  82. package/tap-snapshots/test/pseudo/attr.ts.test.cjs +0 -161
  83. package/tap-snapshots/test/pseudo/built.ts.test.cjs +0 -70
  84. package/tap-snapshots/test/pseudo/confused.ts.test.cjs +0 -32
  85. package/tap-snapshots/test/pseudo/cve.ts.test.cjs +0 -49
  86. package/tap-snapshots/test/pseudo/cwe.ts.test.cjs +0 -49
  87. package/tap-snapshots/test/pseudo/debug.ts.test.cjs +0 -18
  88. package/tap-snapshots/test/pseudo/deprecated.ts.test.cjs +0 -18
  89. package/tap-snapshots/test/pseudo/dist.ts.test.cjs +0 -30
  90. package/tap-snapshots/test/pseudo/dynamic.ts.test.cjs +0 -18
  91. package/tap-snapshots/test/pseudo/empty.ts.test.cjs +0 -50
  92. package/tap-snapshots/test/pseudo/entropic.ts.test.cjs +0 -18
  93. package/tap-snapshots/test/pseudo/env.ts.test.cjs +0 -18
  94. package/tap-snapshots/test/pseudo/eval.ts.test.cjs +0 -18
  95. package/tap-snapshots/test/pseudo/fs.ts.test.cjs +0 -18
  96. package/tap-snapshots/test/pseudo/helpers.ts.test.cjs +0 -18
  97. package/tap-snapshots/test/pseudo/hostname.ts.test.cjs +0 -148
  98. package/tap-snapshots/test/pseudo/license.ts.test.cjs +0 -41
  99. package/tap-snapshots/test/pseudo/link.ts.test.cjs +0 -36
  100. package/tap-snapshots/test/pseudo/malware.ts.test.cjs +0 -22
  101. package/tap-snapshots/test/pseudo/minified.ts.test.cjs +0 -18
  102. package/tap-snapshots/test/pseudo/missing.ts.test.cjs +0 -30
  103. package/tap-snapshots/test/pseudo/native.ts.test.cjs +0 -18
  104. package/tap-snapshots/test/pseudo/network.ts.test.cjs +0 -18
  105. package/tap-snapshots/test/pseudo/obfuscated.ts.test.cjs +0 -18
  106. package/tap-snapshots/test/pseudo/outdated.ts.test.cjs +0 -132
  107. package/tap-snapshots/test/pseudo/overridden.ts.test.cjs +0 -75
  108. package/tap-snapshots/test/pseudo/prerelease.ts.test.cjs +0 -101
  109. package/tap-snapshots/test/pseudo/private.ts.test.cjs +0 -38
  110. package/tap-snapshots/test/pseudo/published.ts.test.cjs +0 -171
  111. package/tap-snapshots/test/pseudo/registry.ts.test.cjs +0 -68
  112. package/tap-snapshots/test/pseudo/root.ts.test.cjs +0 -24
  113. package/tap-snapshots/test/pseudo/scanned.ts.test.cjs +0 -18
  114. package/tap-snapshots/test/pseudo/score.ts.test.cjs +0 -239
  115. package/tap-snapshots/test/pseudo/scripts.ts.test.cjs +0 -62
  116. package/tap-snapshots/test/pseudo/semver.ts.test.cjs +0 -575
  117. package/tap-snapshots/test/pseudo/severity.ts.test.cjs +0 -122
  118. package/tap-snapshots/test/pseudo/shell.ts.test.cjs +0 -18
  119. package/tap-snapshots/test/pseudo/shrinkwrap.ts.test.cjs +0 -18
  120. package/tap-snapshots/test/pseudo/skills.ts.test.cjs +0 -19
  121. package/tap-snapshots/test/pseudo/spec.ts.test.cjs +0 -148
  122. package/tap-snapshots/test/pseudo/squat.ts.test.cjs +0 -129
  123. package/tap-snapshots/test/pseudo/suspicious.ts.test.cjs +0 -18
  124. package/tap-snapshots/test/pseudo/tracker.ts.test.cjs +0 -18
  125. package/tap-snapshots/test/pseudo/trivial.ts.test.cjs +0 -18
  126. package/tap-snapshots/test/pseudo/type.ts.test.cjs +0 -51
  127. package/tap-snapshots/test/pseudo/undesirable.ts.test.cjs +0 -18
  128. package/tap-snapshots/test/pseudo/unknown.ts.test.cjs +0 -18
  129. package/tap-snapshots/test/pseudo/unmaintained.ts.test.cjs +0 -18
  130. package/tap-snapshots/test/pseudo/unpopular.ts.test.cjs +0 -18
  131. package/tap-snapshots/test/pseudo/unstable.ts.test.cjs +0 -18
  132. package/tap-snapshots/test/pseudo/vuln.ts.test.cjs +0 -208
  133. package/tap-snapshots/test/pseudo/vulnerable.ts.test.cjs +0 -20
  134. package/tap-snapshots/test/pseudo/workspace.ts.test.cjs +0 -19
  135. package/tap-snapshots/test/pseudo.ts.test.cjs +0 -1247
  136. package/test/attribute.ts +0 -273
  137. package/test/combinator.ts +0 -175
  138. package/test/error.ts +0 -60
  139. package/test/fixtures/graph.ts +0 -999
  140. package/test/fixtures/selector.ts +0 -103
  141. package/test/fixtures/types.ts +0 -7
  142. package/test/id.ts +0 -102
  143. package/test/index.ts +0 -1148
  144. package/test/parser.ts +0 -117
  145. package/test/pseudo/abandoned.ts +0 -98
  146. package/test/pseudo/attr.ts +0 -298
  147. package/test/pseudo/built.ts +0 -214
  148. package/test/pseudo/confused.ts +0 -160
  149. package/test/pseudo/cve.ts +0 -249
  150. package/test/pseudo/cwe.ts +0 -255
  151. package/test/pseudo/debug.ts +0 -98
  152. package/test/pseudo/deprecated.ts +0 -98
  153. package/test/pseudo/dev.ts +0 -61
  154. package/test/pseudo/diff.ts +0 -417
  155. package/test/pseudo/dist.ts +0 -215
  156. package/test/pseudo/dynamic.ts +0 -98
  157. package/test/pseudo/empty.ts +0 -108
  158. package/test/pseudo/entropic.ts +0 -101
  159. package/test/pseudo/env.ts +0 -98
  160. package/test/pseudo/eval.ts +0 -98
  161. package/test/pseudo/fs.ts +0 -98
  162. package/test/pseudo/helpers.ts +0 -370
  163. package/test/pseudo/host-context.ts +0 -276
  164. package/test/pseudo/hostname.ts +0 -314
  165. package/test/pseudo/license.ts +0 -265
  166. package/test/pseudo/link.ts +0 -94
  167. package/test/pseudo/malware.ts +0 -184
  168. package/test/pseudo/minified.ts +0 -98
  169. package/test/pseudo/missing.ts +0 -111
  170. package/test/pseudo/native.ts +0 -98
  171. package/test/pseudo/network.ts +0 -98
  172. package/test/pseudo/obfuscated.ts +0 -98
  173. package/test/pseudo/optional.ts +0 -73
  174. package/test/pseudo/outdated.ts +0 -461
  175. package/test/pseudo/overridden.ts +0 -317
  176. package/test/pseudo/path.ts +0 -680
  177. package/test/pseudo/peer.ts +0 -101
  178. package/test/pseudo/prerelease.ts +0 -279
  179. package/test/pseudo/private.ts +0 -108
  180. package/test/pseudo/prod.ts +0 -61
  181. package/test/pseudo/published.ts +0 -557
  182. package/test/pseudo/registry.ts +0 -122
  183. package/test/pseudo/root.ts +0 -66
  184. package/test/pseudo/scanned.ts +0 -144
  185. package/test/pseudo/score.ts +0 -591
  186. package/test/pseudo/scripts.ts +0 -324
  187. package/test/pseudo/semver.ts +0 -822
  188. package/test/pseudo/severity.ts +0 -342
  189. package/test/pseudo/shell.ts +0 -98
  190. package/test/pseudo/shrinkwrap.ts +0 -98
  191. package/test/pseudo/skill.ts +0 -189
  192. package/test/pseudo/skills.ts +0 -90
  193. package/test/pseudo/spec.ts +0 -525
  194. package/test/pseudo/squat.ts +0 -565
  195. package/test/pseudo/suspicious.ts +0 -98
  196. package/test/pseudo/tracker.ts +0 -98
  197. package/test/pseudo/trivial.ts +0 -98
  198. package/test/pseudo/type.ts +0 -105
  199. package/test/pseudo/undesirable.ts +0 -98
  200. package/test/pseudo/unknown.ts +0 -98
  201. package/test/pseudo/unmaintained.ts +0 -98
  202. package/test/pseudo/unpopular.ts +0 -98
  203. package/test/pseudo/unstable.ts +0 -98
  204. package/test/pseudo/vuln.ts +0 -625
  205. package/test/pseudo/vulnerable.ts +0 -137
  206. package/test/pseudo/workspace.ts +0 -111
  207. package/test/pseudo.ts +0 -584
  208. package/tsconfig.json +0 -3
  209. package/tsconfig.publish.json +0 -19
  210. package/tsconfig.publish.tsbuildinfo +0 -1
  211. package/typedoc.mjs +0 -2
@@ -1,66 +0,0 @@
1
- import t from 'tap'
2
- import postcssSelectorParser from 'postcss-selector-parser'
3
- import type { ParserState } from '../../src/types.ts'
4
- import { root } from '../../src/pseudo/root.ts'
5
- import {
6
- getSimpleGraph,
7
- getSingleWorkspaceGraph,
8
- } from '../fixtures/graph.ts'
9
-
10
- t.test('selects the root node of the graph', async t => {
11
- const getState = (query: string, graph = getSimpleGraph()) => {
12
- const ast = postcssSelectorParser().astSync(query)
13
- const current = ast.first.first
14
- const state: ParserState = {
15
- comment: '',
16
- current,
17
- initial: {
18
- edges: new Set(graph.edges.values()),
19
- nodes: new Set(graph.nodes.values()),
20
- },
21
- partial: {
22
- edges: new Set(graph.edges.values()),
23
- nodes: new Set(graph.nodes.values()),
24
- },
25
- collect: {
26
- edges: new Set(),
27
- nodes: new Set(),
28
- },
29
- cancellable: async () => {},
30
- walk: async i => i,
31
- retries: 0,
32
- securityArchive: undefined,
33
- importers: new Set(graph.importers),
34
- signal: new AbortController().signal,
35
- specificity: { idCounter: 0, commonCounter: 0 },
36
- }
37
- return state
38
- }
39
-
40
- await t.test('selects root node in simple graph', async t => {
41
- const res = await root(getState(':root'))
42
- t.strictSame(
43
- [...res.partial.nodes].map(n => n.name),
44
- ['my-project'],
45
- 'should select only the root node',
46
- )
47
- t.matchSnapshot({
48
- nodes: [...res.partial.nodes].map(n => n.name),
49
- edges: [...res.partial.edges].map(e => e.name),
50
- })
51
- })
52
-
53
- await t.test('selects root node in workspace graph', async t => {
54
- const wsGraph = getSingleWorkspaceGraph()
55
- const res = await root(getState(':root', wsGraph))
56
- t.strictSame(
57
- [...res.partial.nodes].map(n => n.name),
58
- ['ws'],
59
- 'should select only the workspace root node',
60
- )
61
- t.matchSnapshot({
62
- nodes: [...res.partial.nodes].map(n => n.name),
63
- edges: [...res.partial.edges].map(e => e.name),
64
- })
65
- })
66
- })
@@ -1,144 +0,0 @@
1
- import t from 'tap'
2
- import { joinDepIDTuple } from '@vltpkg/dep-id'
3
- import { asSecurityArchiveLike } from '@vltpkg/security-archive'
4
- import { SecurityArchive } from '@vltpkg/security-archive/browser'
5
- import type { PackageReportData } from '@vltpkg/security-archive'
6
- import { scanned } from '../../src/pseudo/scanned.ts'
7
- import { getSimpleGraph } from '../fixtures/graph.ts'
8
- import type { ParserState } from '../../src/types.ts'
9
- import { parse } from '../../src/parser.ts'
10
-
11
- t.test('scanned selector', async t => {
12
- const getState = () => {
13
- const graph = getSimpleGraph()
14
- const ast = parse(':scanned')
15
- const current = ast.first.first
16
- const testId = joinDepIDTuple(['registry', '', 'e@1.0.0'])
17
- const securityArchive = asSecurityArchiveLike(
18
- new Map<string, PackageReportData>([
19
- [
20
- testId,
21
- {
22
- id: 'e@1.0.0',
23
- author: [],
24
- size: 0,
25
- type: 'npm',
26
- name: 'e',
27
- version: '1.0.0',
28
- license: 'MIT',
29
- score: {
30
- overall: 0,
31
- license: 0,
32
- maintenance: 0,
33
- quality: 0,
34
- supplyChain: 0,
35
- vulnerability: 0,
36
- },
37
- alerts: [],
38
- },
39
- ],
40
- ]),
41
- )
42
- const state: ParserState = {
43
- comment: '',
44
- current,
45
- initial: {
46
- edges: new Set(graph.edges.values()),
47
- nodes: new Set(graph.nodes.values()),
48
- },
49
- partial: {
50
- edges: new Set(graph.edges.values()),
51
- nodes: new Set(graph.nodes.values()),
52
- },
53
- collect: {
54
- edges: new Set(),
55
- nodes: new Set(),
56
- },
57
- cancellable: async () => {},
58
- walk: async i => i,
59
- securityArchive,
60
- importers: new Set(graph.importers),
61
- retries: 0,
62
- signal: new AbortController().signal,
63
- specificity: { idCounter: 0, commonCounter: 0 },
64
- }
65
- return state
66
- }
67
-
68
- const state = getState()
69
- const result = await scanned(state)
70
- t.matchSnapshot(
71
- {
72
- nodes: [...result.partial.nodes].map(n => n.id),
73
- edges: [...result.partial.edges].map(
74
- e => `${e.from.id}->${e.to?.id}`,
75
- ),
76
- },
77
- 'should return only nodes with security archive data available',
78
- )
79
-
80
- await t.test('matches peer-suffixed node ids', async t => {
81
- const graph = getSimpleGraph()
82
- const e = [...graph.nodes.values()].find(n => n.name === 'e')
83
- if (!e) throw new Error('expected node e')
84
- const baseId = e.id
85
- const peerId = joinDepIDTuple([
86
- 'registry',
87
- '',
88
- 'e@1.0.0',
89
- 'peer.0123456789abcdef',
90
- ])
91
- graph.nodes.delete(baseId)
92
- e.id = peerId
93
- graph.nodes.set(peerId, e)
94
- const ast = parse(':scanned')
95
- const archive = SecurityArchive.load({
96
- [baseId]: {
97
- id: 'e@1.0.0',
98
- author: [],
99
- size: 0,
100
- type: 'npm',
101
- name: 'e',
102
- version: '1.0.0',
103
- license: 'MIT',
104
- score: {
105
- overall: 0,
106
- license: 0,
107
- maintenance: 0,
108
- quality: 0,
109
- supplyChain: 0,
110
- vulnerability: 0,
111
- },
112
- alerts: [],
113
- },
114
- })
115
- const state: ParserState = {
116
- comment: '',
117
- current: ast.first.first,
118
- initial: {
119
- edges: new Set(graph.edges.values()),
120
- nodes: new Set(graph.nodes.values()),
121
- },
122
- partial: {
123
- edges: new Set(graph.edges.values()),
124
- nodes: new Set(graph.nodes.values()),
125
- },
126
- collect: {
127
- edges: new Set(),
128
- nodes: new Set(),
129
- },
130
- cancellable: async () => {},
131
- walk: async i => i,
132
- securityArchive: archive,
133
- importers: new Set(graph.importers),
134
- retries: 0,
135
- signal: new AbortController().signal,
136
- specificity: { idCounter: 0, commonCounter: 0 },
137
- }
138
- const res = await scanned(state)
139
- t.ok(
140
- [...res.partial.nodes].some(n => n.id === peerId),
141
- ':scanned keeps a node whose DepID extra is a peer hash',
142
- )
143
- })
144
- })