@vyuhlabs/dxkit 1.5.1 → 1.6.0

package/dist/analyzers/tools/cvss-v4-lookup.js

@@ -0,0 +1,284 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CVSS_V4_LOOKUP = void 0;
+/**
+ * CVSS v4.0 MacroVector → base score lookup table.
+ * 270 entries, one per valid macrovector.
+ *
+ * Source: https://github.com/FIRSTdotorg/cvss-v4-calculator/blob/main/cvss_lookup.js
+ * Copyright FIRST, Red Hat, and contributors. SPDX-License-Identifier: BSD-2-Clause.
+ * See THIRD_PARTY_NOTICES.md for attribution.
+ */
+exports.CVSS_V4_LOOKUP = {
+    '000000': 10,
+    '000001': 9.9,
+    '000010': 9.8,
+    '000011': 9.5,
+    '000020': 9.5,
+    '000021': 9.2,
+    '000100': 10,
+    '000101': 9.6,
+    '000110': 9.3,
+    '000111': 8.7,
+    '000120': 9.1,
+    '000121': 8.1,
+    '000200': 9.3,
+    '000201': 9,
+    '000210': 8.9,
+    '000211': 8,
+    '000220': 8.1,
+    '000221': 6.8,
+    '001000': 9.8,
+    '001001': 9.5,
+    '001010': 9.5,
+    '001011': 9.2,
+    '001020': 9,
+    '001021': 8.4,
+    '001100': 9.3,
+    '001101': 9.2,
+    '001110': 8.9,
+    '001111': 8.1,
+    '001120': 8.1,
+    '001121': 6.5,
+    '001200': 8.8,
+    '001201': 8,
+    '001210': 7.8,
+    '001211': 7,
+    '001220': 6.9,
+    '001221': 4.8,
+    '002001': 9.2,
+    '002011': 8.2,
+    '002021': 7.2,
+    '002101': 7.9,
+    '002111': 6.9,
+    '002121': 5,
+    '002201': 6.9,
+    '002211': 5.5,
+    '002221': 2.7,
+    '010000': 9.9,
+    '010001': 9.7,
+    '010010': 9.5,
+    '010011': 9.2,
+    '010020': 9.2,
+    '010021': 8.5,
+    '010100': 9.5,
+    '010101': 9.1,
+    '010110': 9,
+    '010111': 8.3,
+    '010120': 8.4,
+    '010121': 7.1,
+    '010200': 9.2,
+    '010201': 8.1,
+    '010210': 8.2,
+    '010211': 7.1,
+    '010220': 7.2,
+    '010221': 5.3,
+    '011000': 9.5,
+    '011001': 9.3,
+    '011010': 9.2,
+    '011011': 8.5,
+    '011020': 8.5,
+    '011021': 7.3,
+    '011100': 9.2,
+    '011101': 8.2,
+    '011110': 8,
+    '011111': 7.2,
+    '011120': 7,
+    '011121': 5.9,
+    '011200': 8.4,
+    '011201': 7,
+    '011210': 7.1,
+    '011211': 5.2,
+    '011220': 5,
+    '011221': 3,
+    '012001': 8.6,
+    '012011': 7.5,
+    '012021': 5.2,
+    '012101': 7.1,
+    '012111': 5.2,
+    '012121': 2.9,
+    '012201': 6.3,
+    '012211': 2.9,
+    '012221': 1.7,
+    '100000': 9.8,
+    '100001': 9.5,
+    '100010': 9.4,
+    '100011': 8.7,
+    '100020': 9.1,
+    '100021': 8.1,
+    '100100': 9.4,
+    '100101': 8.9,
+    '100110': 8.6,
+    '100111': 7.4,
+    '100120': 7.7,
+    '100121': 6.4,
+    '100200': 8.7,
+    '100201': 7.5,
+    '100210': 7.4,
+    '100211': 6.3,
+    '100220': 6.3,
+    '100221': 4.9,
+    '101000': 9.4,
+    '101001': 8.9,
+    '101010': 8.8,
+    '101011': 7.7,
+    '101020': 7.6,
+    '101021': 6.7,
+    '101100': 8.6,
+    '101101': 7.6,
+    '101110': 7.4,
+    '101111': 5.8,
+    '101120': 5.9,
+    '101121': 5,
+    '101200': 7.2,
+    '101201': 5.7,
+    '101210': 5.7,
+    '101211': 5.2,
+    '101220': 5.2,
+    '101221': 2.5,
+    '102001': 8.3,
+    '102011': 7,
+    '102021': 5.4,
+    '102101': 6.5,
+    '102111': 5.8,
+    '102121': 2.6,
+    '102201': 5.3,
+    '102211': 2.1,
+    '102221': 1.3,
+    '110000': 9.5,
+    '110001': 9,
+    '110010': 8.8,
+    '110011': 7.6,
+    '110020': 7.6,
+    '110021': 7,
+    '110100': 9,
+    '110101': 7.7,
+    '110110': 7.5,
+    '110111': 6.2,
+    '110120': 6.1,
+    '110121': 5.3,
+    '110200': 7.7,
+    '110201': 6.6,
+    '110210': 6.8,
+    '110211': 5.9,
+    '110220': 5.2,
+    '110221': 3,
+    '111000': 8.9,
+    '111001': 7.8,
+    '111010': 7.6,
+    '111011': 6.7,
+    '111020': 6.2,
+    '111021': 5.8,
+    '111100': 7.4,
+    '111101': 5.9,
+    '111110': 5.7,
+    '111111': 5.7,
+    '111120': 4.7,
+    '111121': 2.3,
+    '111200': 6.1,
+    '111201': 5.2,
+    '111210': 5.7,
+    '111211': 2.9,
+    '111220': 2.4,
+    '111221': 1.6,
+    '112001': 7.1,
+    '112011': 5.9,
+    '112021': 3,
+    '112101': 5.8,
+    '112111': 2.6,
+    '112121': 1.5,
+    '112201': 2.3,
+    '112211': 1.3,
+    '112221': 0.6,
+    '200000': 9.3,
+    '200001': 8.7,
+    '200010': 8.6,
+    '200011': 7.2,
+    '200020': 7.5,
+    '200021': 5.8,
+    '200100': 8.6,
+    '200101': 7.4,
+    '200110': 7.4,
+    '200111': 6.1,
+    '200120': 5.6,
+    '200121': 3.4,
+    '200200': 7,
+    '200201': 5.4,
+    '200210': 5.2,
+    '200211': 4,
+    '200220': 4,
+    '200221': 2.2,
+    '201000': 8.5,
+    '201001': 7.5,
+    '201010': 7.4,
+    '201011': 5.5,
+    '201020': 6.2,
+    '201021': 5.1,
+    '201100': 7.2,
+    '201101': 5.7,
+    '201110': 5.5,
+    '201111': 4.1,
+    '201120': 4.6,
+    '201121': 1.9,
+    '201200': 5.3,
+    '201201': 3.6,
+    '201210': 3.4,
+    '201211': 1.9,
+    '201220': 1.9,
+    '201221': 0.8,
+    '202001': 6.4,
+    '202011': 5.1,
+    '202021': 2,
+    '202101': 4.7,
+    '202111': 2.1,
+    '202121': 1.1,
+    '202201': 2.4,
+    '202211': 0.9,
+    '202221': 0.4,
+    '210000': 8.8,
+    '210001': 7.5,
+    '210010': 7.3,
+    '210011': 5.3,
+    '210020': 6,
+    '210021': 5,
+    '210100': 7.3,
+    '210101': 5.5,
+    '210110': 5.9,
+    '210111': 4,
+    '210120': 4.1,
+    '210121': 2,
+    '210200': 5.4,
+    '210201': 4.3,
+    '210210': 4.5,
+    '210211': 2.2,
+    '210220': 2,
+    '210221': 1.1,
+    '211000': 7.5,
+    '211001': 5.5,
+    '211010': 5.8,
+    '211011': 4.5,
+    '211020': 4,
+    '211021': 2.1,
+    '211100': 6.1,
+    '211101': 5.1,
+    '211110': 4.8,
+    '211111': 1.8,
+    '211120': 2,
+    '211121': 0.9,
+    '211200': 4.6,
+    '211201': 1.8,
+    '211210': 1.7,
+    '211211': 0.7,
+    '211220': 0.8,
+    '211221': 0.2,
+    '212001': 5.3,
+    '212011': 2.4,
+    '212021': 1.4,
+    '212101': 2.4,
+    '212111': 1.2,
+    '212121': 0.5,
+    '212201': 1,
+    '212211': 0.3,
+    '212221': 0.1,
+};
+//# sourceMappingURL=cvss-v4-lookup.js.map

package/dist/analyzers/tools/cvss-v4-lookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cvss-v4-lookup.js","sourceRoot":"","sources":["../../../src/analyzers/tools/cvss-v4-lookup.ts"],"names":[],"mappings":";;;AAAA;;;;;;;GAOG;AACU,QAAA,cAAc,GAA2B;IACpD,QAAQ,EAAE,EAAE;IACZ,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,EAAE;IACZ,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;CACd,CAAC"}

package/dist/analyzers/tools/cvss-v4.d.ts

@@ -0,0 +1,24 @@
+/**
+ * CVSS v4.0 base score calculator.
+ *
+ * Port of FIRST's reference implementation into deterministic TypeScript.
+ * Source: https://github.com/FIRSTdotorg/cvss-v4-calculator
+ *
+ * The lookup table, max-severity data, and max-composed vectors are taken
+ * verbatim from the upstream project. The scoring algorithm (macrovector
+ * computation + severity-distance refinement) mirrors cvss_score.js.
+ *
+ * Copyright FIRST, Red Hat, and contributors (for embedded data tables
+ * and algorithm shape). SPDX-License-Identifier: BSD-2-Clause.
+ * See THIRD_PARTY_NOTICES.md for full attribution.
+ *
+ * Typical usage:
+ *   const score = parseCvssV4BaseScore('CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N');
+ *   // => 9.3
+ */
+/**
+ * Main entry point: compute a CVSS v4 base score from a vector string.
+ * Returns null on malformed input. Range: 0.0 to 10.0, one decimal.
+ */
+export declare function parseCvssV4BaseScore(vector: string): number | null;
+//# sourceMappingURL=cvss-v4.d.ts.map

package/dist/analyzers/tools/cvss-v4.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cvss-v4.d.ts","sourceRoot":"","sources":["../../../src/analyzers/tools/cvss-v4.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AA0LH;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAwLlE"}

package/dist/analyzers/tools/cvss-v4.js

@@ -0,0 +1,362 @@
+"use strict";
+/**
+ * CVSS v4.0 base score calculator.
+ *
+ * Port of FIRST's reference implementation into deterministic TypeScript.
+ * Source: https://github.com/FIRSTdotorg/cvss-v4-calculator
+ *
+ * The lookup table, max-severity data, and max-composed vectors are taken
+ * verbatim from the upstream project. The scoring algorithm (macrovector
+ * computation + severity-distance refinement) mirrors cvss_score.js.
+ *
+ * Copyright FIRST, Red Hat, and contributors (for embedded data tables
+ * and algorithm shape). SPDX-License-Identifier: BSD-2-Clause.
+ * See THIRD_PARTY_NOTICES.md for full attribution.
+ *
+ * Typical usage:
+ *   const score = parseCvssV4BaseScore('CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N');
+ *   // => 9.3
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseCvssV4BaseScore = parseCvssV4BaseScore;
+const cvss_v4_lookup_1 = require("./cvss-v4-lookup");
+/** Max severity depth per equivalence set (lower macrovector distance). */
+const MAX_SEVERITY = {
+    eq1: { 0: 1, 1: 4, 2: 5 },
+    eq2: { 0: 1, 1: 2 },
+    eq3eq6: {
+        0: { 0: 7, 1: 6 },
+        1: { 0: 8, 1: 8 },
+        2: { 1: 10 },
+    },
+    eq4: { 0: 6, 1: 5, 2: 4 },
+    eq5: { 0: 1, 1: 1, 2: 1 },
+};
+/** Max-composed vectors per (eq, level) — representative highest-severity vectors. */
+const MAX_COMPOSED = {
+    eq1: {
+        0: ['AV:N/PR:N/UI:N/'],
+        1: ['AV:A/PR:N/UI:N/', 'AV:N/PR:L/UI:N/', 'AV:N/PR:N/UI:P/'],
+        2: ['AV:P/PR:N/UI:N/', 'AV:A/PR:L/UI:P/'],
+    },
+    eq2: {
+        0: ['AC:L/AT:N/'],
+        1: ['AC:H/AT:N/', 'AC:L/AT:P/'],
+    },
+    eq3: {
+        0: {
+            '0': ['VC:H/VI:H/VA:H/CR:H/IR:H/AR:H/'],
+            '1': ['VC:H/VI:H/VA:L/CR:M/IR:M/AR:H/', 'VC:H/VI:H/VA:H/CR:M/IR:M/AR:M/'],
+        },
+        1: {
+            '0': ['VC:L/VI:H/VA:H/CR:H/IR:H/AR:H/', 'VC:H/VI:L/VA:H/CR:H/IR:H/AR:H/'],
+            '1': [
+                'VC:L/VI:H/VA:L/CR:H/IR:M/AR:H/',
+                'VC:L/VI:H/VA:H/CR:H/IR:M/AR:M/',
+                'VC:H/VI:L/VA:H/CR:M/IR:H/AR:M/',
+                'VC:H/VI:L/VA:L/CR:M/IR:H/AR:H/',
+                'VC:L/VI:L/VA:H/CR:H/IR:H/AR:M/',
+            ],
+        },
+        2: { '1': ['VC:L/VI:L/VA:L/CR:H/IR:H/AR:H/'] },
+    },
+    eq4: {
+        0: ['SC:H/SI:S/SA:S/'],
+        1: ['SC:H/SI:H/SA:H/'],
+        2: ['SC:L/SI:L/SA:L/'],
+    },
+    eq5: {
+        0: ['E:A/'],
+        1: ['E:P/'],
+        2: ['E:U/'],
+    },
+};
+/** Ordinal weights per metric value — used in severity-distance calculation. */
+const LEVELS = {
+    AV: { N: 0.0, A: 0.1, L: 0.2, P: 0.3 },
+    PR: { N: 0.0, L: 0.1, H: 0.2 },
+    UI: { N: 0.0, P: 0.1, A: 0.2 },
+    AC: { L: 0.0, H: 0.1 },
+    AT: { N: 0.0, P: 0.1 },
+    VC: { H: 0.0, L: 0.1, N: 0.2 },
+    VI: { H: 0.0, L: 0.1, N: 0.2 },
+    VA: { H: 0.0, L: 0.1, N: 0.2 },
+    SC: { H: 0.1, L: 0.2, N: 0.3 },
+    SI: { S: 0.0, H: 0.1, L: 0.2, N: 0.3 },
+    SA: { S: 0.0, H: 0.1, L: 0.2, N: 0.3 },
+    CR: { H: 0.0, M: 0.1, L: 0.2 },
+    IR: { H: 0.0, M: 0.1, L: 0.2 },
+    AR: { H: 0.0, M: 0.1, L: 0.2 },
+};
+const STEP = 0.1;
+/**
+ * Resolve a metric value accounting for "X" (not defined) defaults and
+ * environmental modifiers (M-prefixed metrics override base values).
+ *
+ * Defaults when X:
+ *   E  → A (Attacked)
+ *   CR, IR, AR → H (High)
+ *   Modified metrics (M*) → base metric value
+ */
+function m(metrics, metric) {
+    const selected = metrics.get(metric) ?? 'X';
+    if (metric === 'E' && selected === 'X')
+        return 'A';
+    if ((metric === 'CR' || metric === 'IR' || metric === 'AR') && selected === 'X')
+        return 'H';
+    // For base metrics, check if a Modified override is present
+    const modifiedKey = 'M' + metric;
+    if (metrics.has(modifiedKey)) {
+        const mod = metrics.get(modifiedKey);
+        if (mod && mod !== 'X')
+            return mod;
+    }
+    return selected;
+}
+/** Compute the 6-digit macrovector string for a metrics map. */
+function macroVector(metrics) {
+    // EQ1: 0 = AV:N AND PR:N AND UI:N
+    //      1 = (AV:N OR PR:N OR UI:N) AND NOT (all three N) AND NOT AV:P
+    //      2 = AV:P OR NOT (AV:N OR PR:N OR UI:N)
+    const av = m(metrics, 'AV');
+    const pr = m(metrics, 'PR');
+    const ui = m(metrics, 'UI');
+    let eq1;
+    if (av === 'N' && pr === 'N' && ui === 'N')
+        eq1 = 0;
+    else if ((av === 'N' || pr === 'N' || ui === 'N') &&
+        !(av === 'N' && pr === 'N' && ui === 'N') &&
+        av !== 'P')
+        eq1 = 1;
+    else
+        eq1 = 2; // AV:P OR none of them N
+    // EQ2: 0 = AC:L AND AT:N, else 1
+    const ac = m(metrics, 'AC');
+    const at = m(metrics, 'AT');
+    const eq2 = ac === 'L' && at === 'N' ? 0 : 1;
+    // EQ3: 0 = VC:H AND VI:H
+    //      1 = NOT (VC:H AND VI:H) AND (VC:H OR VI:H OR VA:H)
+    //      2 = NOT (VC:H OR VI:H OR VA:H)
+    const vc = m(metrics, 'VC');
+    const vi = m(metrics, 'VI');
+    const va = m(metrics, 'VA');
+    let eq3;
+    if (vc === 'H' && vi === 'H')
+        eq3 = 0;
+    else if (!(vc === 'H' && vi === 'H') && (vc === 'H' || vi === 'H' || va === 'H'))
+        eq3 = 1;
+    else
+        eq3 = 2;
+    // EQ4: 0 = MSI:S OR MSA:S
+    //      1 = NOT (MSI:S OR MSA:S) AND (SC:H OR SI:H OR SA:H)
+    //      2 = NOT (MSI:S OR MSA:S) AND NOT (SC:H OR SI:H OR SA:H)
+    const msi = m(metrics, 'MSI');
+    const msa = m(metrics, 'MSA');
+    const sc = m(metrics, 'SC');
+    const si = m(metrics, 'SI');
+    const sa = m(metrics, 'SA');
+    let eq4;
+    if (msi === 'S' || msa === 'S')
+        eq4 = 0;
+    else if (sc === 'H' || si === 'H' || sa === 'H')
+        eq4 = 1;
+    else
+        eq4 = 2;
+    // EQ5: 0 = E:A, 1 = E:P, 2 = E:U
+    const e = m(metrics, 'E');
+    const eq5 = e === 'A' ? 0 : e === 'P' ? 1 : 2;
+    // EQ6: 0 = (CR:H AND VC:H) OR (IR:H AND VI:H) OR (AR:H AND VA:H)
+    //      1 = otherwise
+    const cr = m(metrics, 'CR');
+    const ir = m(metrics, 'IR');
+    const ar = m(metrics, 'AR');
+    const eq6 = (cr === 'H' && vc === 'H') || (ir === 'H' && vi === 'H') || (ar === 'H' && va === 'H') ? 0 : 1;
+    return `${eq1}${eq2}${eq3}${eq4}${eq5}${eq6}`;
+}
+/** Pull a metric's value out of a composed-vector fragment like "AV:N/PR:L/UI:N/". */
+function extractValueMetric(metric, str) {
+    const idx = str.indexOf(metric + ':');
+    if (idx < 0)
+        return '';
+    const start = idx + metric.length + 1;
+    const end = str.indexOf('/', start);
+    return end < 0 ? str.slice(start) : str.slice(start, end);
+}
+/** Get max composed vectors for (eq, macrovector). eq=3 is indexed by both eq3 and eq6. */
+function getEqMaxes(mv, eq) {
+    const key = 'eq' + eq;
+    const level = parseInt(mv[eq - 1], 10);
+    const entry = MAX_COMPOSED[key][level];
+    if (Array.isArray(entry))
+        return entry;
+    // eq3 — entry is a map keyed by eq6
+    const eq6 = mv[5];
+    return entry[eq6] ?? [];
+}
+/**
+ * Main entry point: compute a CVSS v4 base score from a vector string.
+ * Returns null on malformed input. Range: 0.0 to 10.0, one decimal.
+ */
+function parseCvssV4BaseScore(vector) {
+    if (!vector.startsWith('CVSS:4.'))
+        return null;
+    const metrics = new Map();
+    for (const kv of vector.split('/').slice(1)) {
+        const [k, v] = kv.split(':');
+        if (k && v)
+            metrics.set(k, v);
+    }
+    // Required base metrics
+    for (const req of ['AV', 'AC', 'AT', 'PR', 'UI', 'VC', 'VI', 'VA', 'SC', 'SI', 'SA']) {
+        if (!metrics.has(req))
+            return null;
+    }
+    // Shortcut: no impact at all → 0
+    const impactMetrics = ['VC', 'VI', 'VA', 'SC', 'SI', 'SA'];
+    if (impactMetrics.every((k) => m(metrics, k) === 'N'))
+        return 0;
+    const mv = macroVector(metrics);
+    const baseScore = cvss_v4_lookup_1.CVSS_V4_LOOKUP[mv];
+    if (baseScore === undefined)
+        return null;
+    // Severity-distance refinement (see cvss_score.js in upstream).
+    const eq1 = parseInt(mv[0], 10);
+    const eq2 = parseInt(mv[1], 10);
+    const eq3 = parseInt(mv[2], 10);
+    const eq4 = parseInt(mv[3], 10);
+    const eq5 = parseInt(mv[4], 10);
+    const eq6 = parseInt(mv[5], 10);
+    // Compute next-lower macrovectors per eq (may not exist).
+    const nextLower = (digits) => digits.join('');
+    const mvEq1Lower = nextLower([eq1 + 1, eq2, eq3, eq4, eq5, eq6]);
+    const mvEq2Lower = nextLower([eq1, eq2 + 1, eq3, eq4, eq5, eq6]);
+    // eq3 and eq6 are entangled (spec quirk).
+    let mvEq3Eq6LowerLeft = null;
+    let mvEq3Eq6LowerRight = null;
+    let mvEq3Eq6Lower = null;
+    if (eq3 === 1 && eq6 === 1) {
+        mvEq3Eq6Lower = nextLower([eq1, eq2, eq3 + 1, eq4, eq5, eq6]);
+    }
+    else if (eq3 === 0 && eq6 === 1) {
+        mvEq3Eq6Lower = nextLower([eq1, eq2, eq3 + 1, eq4, eq5, eq6]);
+    }
+    else if (eq3 === 1 && eq6 === 0) {
+        mvEq3Eq6Lower = nextLower([eq1, eq2, eq3, eq4, eq5, eq6 + 1]);
+    }
+    else if (eq3 === 0 && eq6 === 0) {
+        mvEq3Eq6LowerLeft = nextLower([eq1, eq2, eq3, eq4, eq5, eq6 + 1]);
+        mvEq3Eq6LowerRight = nextLower([eq1, eq2, eq3 + 1, eq4, eq5, eq6]);
+    }
+    else {
+        // 21 → 32 (doesn't exist, produces NaN lookup which is fine)
+        mvEq3Eq6Lower = nextLower([eq1, eq2, eq3 + 1, eq4, eq5, eq6 + 1]);
+    }
+    const mvEq4Lower = nextLower([eq1, eq2, eq3, eq4 + 1, eq5, eq6]);
+    const mvEq5Lower = nextLower([eq1, eq2, eq3, eq4, eq5 + 1, eq6]);
+    const scoreEq1Lower = cvss_v4_lookup_1.CVSS_V4_LOOKUP[mvEq1Lower];
+    const scoreEq2Lower = cvss_v4_lookup_1.CVSS_V4_LOOKUP[mvEq2Lower];
+    let scoreEq3Eq6Lower;
+    if (eq3 === 0 && eq6 === 0) {
+        const left = cvss_v4_lookup_1.CVSS_V4_LOOKUP[mvEq3Eq6LowerLeft];
+        const right = cvss_v4_lookup_1.CVSS_V4_LOOKUP[mvEq3Eq6LowerRight];
+        // Upstream uses the higher — NaN-safe
+        scoreEq3Eq6Lower = (left ?? -Infinity) > (right ?? -Infinity) ? left : right;
+    }
+    else if (mvEq3Eq6Lower !== null) {
+        scoreEq3Eq6Lower = cvss_v4_lookup_1.CVSS_V4_LOOKUP[mvEq3Eq6Lower];
+    }
+    const scoreEq4Lower = cvss_v4_lookup_1.CVSS_V4_LOOKUP[mvEq4Lower];
+    const scoreEq5Lower = cvss_v4_lookup_1.CVSS_V4_LOOKUP[mvEq5Lower];
+    // Find a max-severity composed vector within the current macrovector.
+    const eq1Maxes = getEqMaxes(mv, 1);
+    const eq2Maxes = getEqMaxes(mv, 2);
+    const eq3Eq6Maxes = getEqMaxes(mv, 3);
+    const eq4Maxes = getEqMaxes(mv, 4);
+    const eq5Maxes = getEqMaxes(mv, 5);
+    const maxVectors = [];
+    for (const a of eq1Maxes)
+        for (const b of eq2Maxes)
+            for (const c of eq3Eq6Maxes)
+                for (const d of eq4Maxes)
+                    for (const eMax of eq5Maxes)
+                        maxVectors.push(a + b + c + d + eMax);
+    let distances = null;
+    for (const max of maxVectors) {
+        const d = {
+            AV: LEVELS.AV[m(metrics, 'AV')] - LEVELS.AV[extractValueMetric('AV', max)],
+            PR: LEVELS.PR[m(metrics, 'PR')] - LEVELS.PR[extractValueMetric('PR', max)],
+            UI: LEVELS.UI[m(metrics, 'UI')] - LEVELS.UI[extractValueMetric('UI', max)],
+            AC: LEVELS.AC[m(metrics, 'AC')] - LEVELS.AC[extractValueMetric('AC', max)],
+            AT: LEVELS.AT[m(metrics, 'AT')] - LEVELS.AT[extractValueMetric('AT', max)],
+            VC: LEVELS.VC[m(metrics, 'VC')] - LEVELS.VC[extractValueMetric('VC', max)],
+            VI: LEVELS.VI[m(metrics, 'VI')] - LEVELS.VI[extractValueMetric('VI', max)],
+            VA: LEVELS.VA[m(metrics, 'VA')] - LEVELS.VA[extractValueMetric('VA', max)],
+            SC: LEVELS.SC[m(metrics, 'SC')] - LEVELS.SC[extractValueMetric('SC', max)],
+            SI: LEVELS.SI[m(metrics, 'SI')] - LEVELS.SI[extractValueMetric('SI', max)],
+            SA: LEVELS.SA[m(metrics, 'SA')] - LEVELS.SA[extractValueMetric('SA', max)],
+            CR: LEVELS.CR[m(metrics, 'CR')] - LEVELS.CR[extractValueMetric('CR', max)],
+            IR: LEVELS.IR[m(metrics, 'IR')] - LEVELS.IR[extractValueMetric('IR', max)],
+            AR: LEVELS.AR[m(metrics, 'AR')] - LEVELS.AR[extractValueMetric('AR', max)],
+        };
+        // Any NaN or negative → not the right max
+        const values = Object.values(d);
+        if (values.some((v) => Number.isNaN(v) || v < 0))
+            continue;
+        distances = d;
+        break;
+    }
+    // If no valid max found, treat distances as zero (no refinement).
+    const sevDistEq1 = distances ? distances.AV + distances.PR + distances.UI : 0;
+    const sevDistEq2 = distances ? distances.AC + distances.AT : 0;
+    const sevDistEq3Eq6 = distances
+        ? distances.VC + distances.VI + distances.VA + distances.CR + distances.IR + distances.AR
+        : 0;
+    const sevDistEq4 = distances ? distances.SC + distances.SI + distances.SA : 0;
+    // EQ5 proportion is always 0 in upstream (max severity depth stays flat), so no sevDistEq5.
+    const maxSevEq1 = MAX_SEVERITY.eq1[eq1] * STEP;
+    const maxSevEq2 = MAX_SEVERITY.eq2[eq2] * STEP;
+    const maxSevEq3Eq6 = (MAX_SEVERITY.eq3eq6[eq3]?.[eq6] ?? 0) * STEP;
+    const maxSevEq4 = MAX_SEVERITY.eq4[eq4] * STEP;
+    const availEq1 = baseScore - (scoreEq1Lower ?? NaN);
+    const availEq2 = baseScore - (scoreEq2Lower ?? NaN);
+    const availEq3Eq6 = baseScore - (scoreEq3Eq6Lower ?? NaN);
+    const availEq4 = baseScore - (scoreEq4Lower ?? NaN);
+    const availEq5 = baseScore - (scoreEq5Lower ?? NaN);
+    let nExistingLower = 0;
+    let normEq1 = 0;
+    let normEq2 = 0;
+    let normEq3Eq6 = 0;
+    let normEq4 = 0;
+    let normEq5 = 0;
+    if (!Number.isNaN(availEq1)) {
+        nExistingLower++;
+        normEq1 = maxSevEq1 > 0 ? availEq1 * (sevDistEq1 / maxSevEq1) : 0;
+    }
+    if (!Number.isNaN(availEq2)) {
+        nExistingLower++;
+        normEq2 = maxSevEq2 > 0 ? availEq2 * (sevDistEq2 / maxSevEq2) : 0;
+    }
+    if (!Number.isNaN(availEq3Eq6)) {
+        nExistingLower++;
+        normEq3Eq6 = maxSevEq3Eq6 > 0 ? availEq3Eq6 * (sevDistEq3Eq6 / maxSevEq3Eq6) : 0;
+    }
+    if (!Number.isNaN(availEq4)) {
+        nExistingLower++;
+        normEq4 = maxSevEq4 > 0 ? availEq4 * (sevDistEq4 / maxSevEq4) : 0;
+    }
+    if (!Number.isNaN(availEq5)) {
+        nExistingLower++;
+        // EQ5 proportion is always 0 in upstream (max severity stays flat)
+        normEq5 = availEq5 * 0;
+    }
+    const meanDistance = nExistingLower === 0
+        ? 0
+        : (normEq1 + normEq2 + normEq3Eq6 + normEq4 + normEq5) / nExistingLower;
+    let finalScore = baseScore - meanDistance;
+    if (finalScore < 0)
+        finalScore = 0;
+    if (finalScore > 10)
+        finalScore = 10;
+    return Math.round(finalScore * 10) / 10;
+}
+//# sourceMappingURL=cvss-v4.js.map