@vyuhlabs/dxkit 2.0.1 → 2.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +223 -0
- package/README.md +21 -15
- package/dist/analyzers/bom/detailed.d.ts +26 -0
- package/dist/analyzers/bom/detailed.d.ts.map +1 -0
- package/dist/analyzers/bom/detailed.js +227 -0
- package/dist/analyzers/bom/detailed.js.map +1 -0
- package/dist/analyzers/bom/gather.d.ts +63 -0
- package/dist/analyzers/bom/gather.d.ts.map +1 -0
- package/dist/analyzers/bom/gather.js +229 -0
- package/dist/analyzers/bom/gather.js.map +1 -0
- package/dist/analyzers/bom/index.d.ts +23 -0
- package/dist/analyzers/bom/index.d.ts.map +1 -0
- package/dist/analyzers/bom/index.js +220 -0
- package/dist/analyzers/bom/index.js.map +1 -0
- package/dist/analyzers/bom/types.d.ts +91 -0
- package/dist/analyzers/bom/types.d.ts.map +1 -0
- package/dist/analyzers/bom/types.js +3 -0
- package/dist/analyzers/bom/types.js.map +1 -0
- package/dist/analyzers/licenses/detailed.d.ts +30 -0
- package/dist/analyzers/licenses/detailed.d.ts.map +1 -0
- package/dist/analyzers/licenses/detailed.js +194 -0
- package/dist/analyzers/licenses/detailed.js.map +1 -0
- package/dist/analyzers/licenses/gather.d.ts +15 -0
- package/dist/analyzers/licenses/gather.d.ts.map +1 -0
- package/dist/analyzers/licenses/gather.js +24 -0
- package/dist/analyzers/licenses/gather.js.map +1 -0
- package/dist/analyzers/licenses/index.d.ts +21 -0
- package/dist/analyzers/licenses/index.d.ts.map +1 -0
- package/dist/analyzers/licenses/index.js +146 -0
- package/dist/analyzers/licenses/index.js.map +1 -0
- package/dist/analyzers/licenses/types.d.ts +30 -0
- package/dist/analyzers/licenses/types.d.ts.map +1 -0
- package/dist/analyzers/licenses/types.js +13 -0
- package/dist/analyzers/licenses/types.js.map +1 -0
- package/dist/analyzers/security/detailed.d.ts +0 -3
- package/dist/analyzers/security/detailed.d.ts.map +1 -1
- package/dist/analyzers/security/detailed.js +37 -6
- package/dist/analyzers/security/detailed.js.map +1 -1
- package/dist/analyzers/security/gather.d.ts.map +1 -1
- package/dist/analyzers/security/gather.js +2 -0
- package/dist/analyzers/security/gather.js.map +1 -1
- package/dist/analyzers/security/index.d.ts.map +1 -1
- package/dist/analyzers/security/index.js +53 -14
- package/dist/analyzers/security/index.js.map +1 -1
- package/dist/analyzers/security/types.d.ts +5 -0
- package/dist/analyzers/security/types.d.ts.map +1 -1
- package/dist/analyzers/security/types.js +0 -3
- package/dist/analyzers/security/types.js.map +1 -1
- package/dist/analyzers/tools/osv.d.ts +49 -5
- package/dist/analyzers/tools/osv.d.ts.map +1 -1
- package/dist/analyzers/tools/osv.js +99 -17
- package/dist/analyzers/tools/osv.js.map +1 -1
- package/dist/analyzers/tools/runner.d.ts +11 -0
- package/dist/analyzers/tools/runner.d.ts.map +1 -1
- package/dist/analyzers/tools/runner.js +54 -0
- package/dist/analyzers/tools/runner.js.map +1 -1
- package/dist/analyzers/tools/tool-registry.d.ts.map +1 -1
- package/dist/analyzers/tools/tool-registry.js +77 -0
- package/dist/analyzers/tools/tool-registry.js.map +1 -1
- package/dist/analyzers/xlsx/bom.d.ts +27 -0
- package/dist/analyzers/xlsx/bom.d.ts.map +1 -0
- package/dist/analyzers/xlsx/bom.js +141 -0
- package/dist/analyzers/xlsx/bom.js.map +1 -0
- package/dist/analyzers/xlsx/index.d.ts +27 -0
- package/dist/analyzers/xlsx/index.d.ts.map +1 -0
- package/dist/analyzers/xlsx/index.js +92 -0
- package/dist/analyzers/xlsx/index.js.map +1 -0
- package/dist/analyzers/xlsx/licenses.d.ts +40 -0
- package/dist/analyzers/xlsx/licenses.d.ts.map +1 -0
- package/dist/analyzers/xlsx/licenses.js +140 -0
- package/dist/analyzers/xlsx/licenses.js.map +1 -0
- package/dist/cli.d.ts.map +1 -1
- package/dist/cli.js +178 -1
- package/dist/cli.js.map +1 -1
- package/dist/languages/capabilities/descriptors.d.ts +4 -1
- package/dist/languages/capabilities/descriptors.d.ts.map +1 -1
- package/dist/languages/capabilities/descriptors.js +20 -1
- package/dist/languages/capabilities/descriptors.js.map +1 -1
- package/dist/languages/capabilities/types.d.ts +60 -3
- package/dist/languages/capabilities/types.d.ts.map +1 -1
- package/dist/languages/csharp.d.ts +48 -0
- package/dist/languages/csharp.d.ts.map +1 -1
- package/dist/languages/csharp.js +418 -33
- package/dist/languages/csharp.js.map +1 -1
- package/dist/languages/go.d.ts +35 -0
- package/dist/languages/go.d.ts.map +1 -1
- package/dist/languages/go.js +367 -26
- package/dist/languages/go.js.map +1 -1
- package/dist/languages/python.d.ts +49 -0
- package/dist/languages/python.d.ts.map +1 -1
- package/dist/languages/python.js +372 -11
- package/dist/languages/python.js.map +1 -1
- package/dist/languages/rust.d.ts +28 -0
- package/dist/languages/rust.d.ts.map +1 -1
- package/dist/languages/rust.js +287 -28
- package/dist/languages/rust.js.map +1 -1
- package/dist/languages/types.d.ts +2 -1
- package/dist/languages/types.d.ts.map +1 -1
- package/dist/languages/typescript.d.ts +17 -0
- package/dist/languages/typescript.d.ts.map +1 -1
- package/dist/languages/typescript.js +358 -1
- package/dist/languages/typescript.js.map +1 -1
- package/package.json +7 -2
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"descriptors.js","sourceRoot":"","sources":["../../../src/languages/capabilities/descriptors.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;
|
|
1
|
+
{"version":3,"file":"descriptors.js","sourceRoot":"","sources":["../../../src/languages/capabilities/descriptors.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAsBH,SAAS,UAAU,CAAC,MAA6B,EAAE,GAAG,GAAG,IAAI;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAEY,QAAA,SAAS,GAAwC;IAC5D,EAAE,EAAE,UAAU;IACd,SAAS,CAAC,OAAO;QACf,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,MAAM,QAAQ,GAA8B,EAAE,CAAC;QAC/C,IAAI,UAAU,GAAgC,IAAI,CAAC;QACnD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC9B,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;YACtB,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YAC1B,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACpB,IAAI,CAAC,CAAC,QAAQ;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,CAAC,CAAC,UAAU;gBAAE,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;QAC9C,CAAC;QACD,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5C,UAAU;YACV,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;YACvC,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SACrD,CAAC;IACJ,CAAC;CACF,CAAC;AAEW,QAAA,IAAI,GAAqC;IACpD,EAAE,EAAE,MAAM;IACV,SAAS,CAAC,OAAO;QACf,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC9B,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;YACtB,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YAC1B,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QACtB,CAAC;QACD,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;SACxC,CAAC;IACJ,CAAC;CACF,CAAC;AAEW,QAAA,QAAQ,GAAyC;IAC5D,EAAE,EAAE,UAAU;IACd,SAAS,CAAC,OAAO;QACf,wEAAwE;QACxE,yEAAyE;QACzE,qEAAqE;QACrE,6CAA6C;QAC7C,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,CAAC;CACF,CAAC;AAEW,QAAA,cAAc,GAA8C;IACvE,EAAE,EAAE,eAAe;IACnB,SAAS,CAAC,OAAO;QACf,kEAAkE;QAClE,iEAAiE;QACjE,oDAAoD;QACpD,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,CAAC;CACF,CAAC;AAEW,QAAA,OAAO,GAAwC;IAC1D,EAAE,EAAE,SAAS;IACb,SAAS,CAAC,OAAO;QACf,kEAAkE;QAClE,+DAA+D;QAC/D,oEAAoE;QACpE,MAAM,QAAQ,GAAwC,EAAE,CAAC;QACzD,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC7B,eAAe,IAAI,CAAC,CAAC,eAAe,CAAC;QACvC,CAAC;QACD,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5C,QAAQ;YACR,eAAe;SAChB,CAAC;IACJ,CAAC;CACF,CAAC;AAEW,QAAA,aAAa,GAA6C;IACrE,EAAE,EAAE,cAAc;IAClB,SAAS,CAAC,OAAO;QACf,qEAAqE;QACrE,qEAAqE;QACrE,MAAM,QAAQ,GAA6C,EAAE,CAAC;QAC9D,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC7B,eAAe,IAAI,CAAC,CAAC,eAAe,CAAC;QACvC,CAAC;QACD,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5C,QAAQ;YACR,eAAe;SAChB,CAAC;IACJ,CAAC;CACF,CAAC;AAEW,QAAA,WAAW,GAA4C;IAClE,EAAE,EAAE,aAAa;IACjB,SAAS,CAAC,OAAO;QACf,iEAAiE;QACjE,6DAA6D;QAC7D,gEAAgE;QAChE,8DAA8D;QAC9D,iEAAiE;QACjE,iBAAiB;QACjB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,SAAS,GAA6C,EAAE,CAAC;QAC/D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC;YAC3B,eAAe,IAAI,CAAC,CAAC,eAAe,CAAC;YACrC,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC;YAC3B,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,UAAU,GACd,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,eAAe,GAAG,UAAU,CAAC,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,mEAAmE;QACnE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,MAAM,GAA6C,EAAE,CAAC;QAC5D,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5D,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACtG,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5C,UAAU;YACV,eAAe;YACf,UAAU;YACV,UAAU;YACV,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SAC/B,CAAC;IACJ,CAAC;CACF,CAAC;AAEW,QAAA,UAAU,GAA2C;IAChE,EAAE,EAAE,YAAY;IAChB,SAAS,CAAC,OAAO;QACf,kEAAkE;QAClE,mEAAmE;QACnE,kEAAkE;QAClE,iEAAiE;QACjE,iEAAiE;QACjE,uDAAuD;QACvD,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,CAAC;CACF,CAAC;AAEW,QAAA,OAAO,GAAwC;IAC1D,EAAE,EAAE,SAAS;IACb,SAAS,CAAC,OAAO;QACf,0EAA0E;QAC1E,wEAAwE;QACxE,sEAAsE;QACtE,gCAAgC;QAChC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAiC,CAAC;QAC3D,MAAM,KAAK,GAAG,IAAI,GAAG,EAA+B,CAAC;QACrD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,gBAAgB;gBAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;gBACxC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACvD,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;gBACtC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5C,gBAAgB,EAAE,CAAC,GAAG,UAAU,CAAC;YACjC,SAAS;YACT,KAAK;SACN,CAAC;IACJ,CAAC;CACF,CAAC;AAEW,QAAA,QAAQ,GAAyC;IAC5D,EAAE,EAAE,UAAU;IACd,SAAS,CAAC,OAAO;QACf,sEAAsE;QACtE,mEAAmE;QACnE,sEAAsE;QACtE,gEAAgE;QAChE,uCAAuC;QACvC,MAAM,QAAQ,GAAyC,EAAE,CAAC;QAC1D,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QACtD,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5C,QAAQ;SACT,CAAC;IACJ,CAAC;CACF,CAAC;AAEF;;;;GAIG;AACU,QAAA,iBAAiB,GAAG;IAC/B,QAAQ,EAAE,iBAAS;IACnB,IAAI,EAAE,YAAI;IACV,QAAQ,EAAE,gBAAQ;IAClB,aAAa,EAAE,sBAAc;IAC7B,OAAO,EAAE,eAAO;IAChB,QAAQ,EAAE,gBAAQ;CACV,CAAC;AAEX;;;;;;GAMG;AACU,QAAA,eAAe,GAAG;IAC7B,OAAO,EAAE,eAAO;IAChB,YAAY,EAAE,qBAAa;IAC3B,WAAW,EAAE,mBAAW;IACxB,UAAU,EAAE,kBAAU;CACd,CAAC;AAEX;;;;;GAKG;AACU,QAAA,mBAAmB,GAAG;IACjC,GAAG,yBAAiB;IACpB,GAAG,uBAAe;CACV,CAAC"}
|
|
@@ -33,14 +33,43 @@ export interface CapabilityEnvelope {
|
|
|
33
33
|
/** Underlying tool name (e.g. 'pip-audit', 'eslint', 'govulncheck'). */
|
|
34
34
|
readonly tool: string;
|
|
35
35
|
}
|
|
36
|
-
/**
|
|
36
|
+
/**
|
|
37
|
+
* Per-finding detail for dep-vuln reports that need more than counts.
|
|
38
|
+
*
|
|
39
|
+
* Field tiers (when each tier populates which fields):
|
|
40
|
+
* Tier 1 (per-pack native tool — npm-audit / pip-audit / govulncheck /
|
|
41
|
+
* cargo-audit / dotnet vulnerable):
|
|
42
|
+
* id, package, installedVersion, severity, tool, fixedVersion?,
|
|
43
|
+
* cvssScore?, aliases?, summary?, references?
|
|
44
|
+
* Tier 2 (per-pack fix-tool — osv-scanner fix / pip-audit --fix /
|
|
45
|
+
* cargo audit fix):
|
|
46
|
+
* upgradeAdvice, breakingUpgrade, reachable (osv-scanner only)
|
|
47
|
+
* Tier 3 (exploitability enrichment — EPSS, CISA KEV):
|
|
48
|
+
* epssScore, kev
|
|
49
|
+
* Tier 4 (snyk opt-in):
|
|
50
|
+
* reachable, riskScore, upgradeAdvice, breakingUpgrade
|
|
51
|
+
*
|
|
52
|
+
* All non-identity fields are optional so higher tiers can extend without
|
|
53
|
+
* changing this contract.
|
|
54
|
+
*/
|
|
37
55
|
export interface DepVulnFinding {
|
|
38
56
|
id: string;
|
|
39
57
|
package: string;
|
|
40
58
|
installedVersion?: string;
|
|
41
|
-
|
|
59
|
+
tool: string;
|
|
42
60
|
severity: keyof SeverityCounts;
|
|
43
|
-
|
|
61
|
+
cvssScore?: number;
|
|
62
|
+
fixedVersion?: string;
|
|
63
|
+
upgradeAdvice?: string;
|
|
64
|
+
breakingUpgrade?: boolean;
|
|
65
|
+
epssScore?: number;
|
|
66
|
+
kev?: boolean;
|
|
67
|
+
reachable?: boolean;
|
|
68
|
+
riskScore?: number;
|
|
69
|
+
aliases?: string[];
|
|
70
|
+
summary?: string;
|
|
71
|
+
references?: string[];
|
|
72
|
+
topLevelDep?: string[];
|
|
44
73
|
}
|
|
45
74
|
/** Dependency vulnerabilities, the depVulns capability. */
|
|
46
75
|
export interface DepVulnResult extends CapabilityEnvelope {
|
|
@@ -89,6 +118,34 @@ export interface ImportsResult extends CapabilityEnvelope {
|
|
|
89
118
|
readonly extracted: ReadonlyMap<string, ReadonlyArray<string>>;
|
|
90
119
|
readonly edges: ReadonlyMap<string, ReadonlySet<string>>;
|
|
91
120
|
}
|
|
121
|
+
/** Per-finding detail for the licenses capability. */
|
|
122
|
+
export interface LicenseFinding {
|
|
123
|
+
package: string;
|
|
124
|
+
version: string;
|
|
125
|
+
/** Canonical SPDX identifier ('MIT', 'Apache-2.0', 'GPL-3.0') or 'UNKNOWN'. */
|
|
126
|
+
licenseType: string;
|
|
127
|
+
/** Full license text; present when the underlying tool ships it. */
|
|
128
|
+
licenseText?: string;
|
|
129
|
+
/** Repository URL from package metadata. */
|
|
130
|
+
sourceUrl?: string;
|
|
131
|
+
/** Short description from the ecosystem registry (npm/PyPI/crates/etc). */
|
|
132
|
+
description?: string;
|
|
133
|
+
/** Author or maintainer string. */
|
|
134
|
+
supplier?: string;
|
|
135
|
+
/** ISO 8601 release date; present when the registry exposes it. */
|
|
136
|
+
releaseDate?: string;
|
|
137
|
+
}
|
|
138
|
+
/**
|
|
139
|
+
* License inventory for one language pack, the licenses capability.
|
|
140
|
+
* Produced by per-pack providers wrapping the ecosystem's native license
|
|
141
|
+
* tool (license-checker-rseidelsohn for npm, pip-licenses for PyPI,
|
|
142
|
+
* go-licenses for Go modules, cargo-license for crates, NuGet metadata
|
|
143
|
+
* for .NET). Aggregate concats findings across packs so polyglot repos
|
|
144
|
+
* report a unified inventory.
|
|
145
|
+
*/
|
|
146
|
+
export interface LicensesResult extends CapabilityEnvelope {
|
|
147
|
+
findings: ReadonlyArray<LicenseFinding>;
|
|
148
|
+
}
|
|
92
149
|
/** Per-finding detail for the secrets capability. */
|
|
93
150
|
export interface SecretFinding {
|
|
94
151
|
file: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/languages/capabilities/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAE/D,8DAA8D;AAC9D,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;CACb;AAED,sDAAsD;AACtD,MAAM,WAAW,kBAAkB;IACjC,iEAAiE;IACjE,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/languages/capabilities/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAE/D,8DAA8D;AAC9D,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;CACb;AAED,sDAAsD;AACtD,MAAM,WAAW,kBAAkB;IACjC,iEAAiE;IACjE,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,cAAc;IAE7B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAI1B,IAAI,EAAE,MAAM,CAAC;IAIb,QAAQ,EAAE,MAAM,cAAc,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IAInB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAK1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IAInB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAWtB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,2DAA2D;AAC3D,MAAM,WAAW,aAAc,SAAQ,kBAAkB;IACvD,6DAA6D;IAC7D,MAAM,EAAE,cAAc,CAAC;IACvB,sEAAsE;IACtE,UAAU,EAAE,SAAS,GAAG,IAAI,CAAC;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,EAAE,cAAc,EAAE,CAAC;CAC7B;AAED,kGAAkG;AAClG,MAAM,WAAW,UAAW,SAAQ,kBAAkB;IACpD,MAAM,EAAE,cAAc,CAAC;CACxB;AAED,gFAAgF;AAChF,MAAM,WAAW,cAAe,SAAQ,kBAAkB;IACxD,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,0DAA0D;AAC1D,MAAM,WAAW,mBAAoB,SAAQ,kBAAkB;IAC7D,mGAAmG;IACnG,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,aAAc,SAAQ,kBAAkB;IACvD,QAAQ,CAAC,gBAAgB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACjD,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;CAC1D;AAED,sDAAsD;AACtD,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,WAAW,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAe,SAAQ,kBAAkB;IACxD,QAAQ,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;CACzC;AAED,qDAAqD;AACrD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,cAAc,CAAC;IAC/B,wFAAwF;IACxF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAc,SAAQ,kBAAkB;IACvD,QAAQ,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;IACvC,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,0DAA0D;AAC1D,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,cAAc,CAAC;IAC/B,mFAAmF;IACnF,KAAK,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,kBAAmB,SAAQ,kBAAkB;IAC5D,QAAQ,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAC;IAC5C,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,kEAAkE;AAClE,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,iEAAiE;AACjE,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,CAAC,EAAE,oBAAoB,CAAC;IACxB,CAAC,EAAE,oBAAoB,CAAC;CACzB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAkB,SAAQ,kBAAkB;IAC3D,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,SAAS,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAC;CAC5C;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,gBAAiB,SAAQ,kBAAkB;IAC1D,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,sFAAsF;IACtF,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,aAAa,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GACxB;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GACvB;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC;AAE1B;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,UAAU,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC"}
|
|
@@ -1,6 +1,54 @@
|
|
|
1
1
|
import type { Coverage } from '../analyzers/tools/coverage';
|
|
2
|
+
import type { DepVulnFinding, SeverityCounts } from './capabilities/types';
|
|
2
3
|
import type { LanguageSupport } from './types';
|
|
3
4
|
export declare function parseCoberturaXml(raw: string, sourceFile: string, cwd: string): Coverage | null;
|
|
5
|
+
/**
|
|
6
|
+
* Pure parser for `dotnet list package --vulnerable --include-transitive
|
|
7
|
+
* --format json`. Extracted from the gather function so it can be
|
|
8
|
+
* unit-tested without a real .NET SDK on the dev machine (10h.5
|
|
9
|
+
* release-time validation runs the full pipeline). Returns null when
|
|
10
|
+
* the input is malformed; otherwise returns counts + findings ready
|
|
11
|
+
* for downstream alias enrichment + top-level attribution.
|
|
12
|
+
*
|
|
13
|
+
* Both top-level and transitive packages are iterated. Top-level
|
|
14
|
+
* findings carry `topLevelDep = [self]` (they ARE manifest deps);
|
|
15
|
+
* transitive findings emit with `topLevelDep` unset — the gather
|
|
16
|
+
* function then fills it from `project.assets.json` if available.
|
|
17
|
+
* Leaving attribution unset on transitives when assets.json is absent
|
|
18
|
+
* matches Python's venv-missing behavior: degrade gracefully rather
|
|
19
|
+
* than invent false parents.
|
|
20
|
+
*/
|
|
21
|
+
export declare function parseDotnetVulnerableOutput(raw: string): {
|
|
22
|
+
counts: SeverityCounts;
|
|
23
|
+
findings: DepVulnFinding[];
|
|
24
|
+
} | null;
|
|
25
|
+
/**
|
|
26
|
+
* Pure parser for `obj/project.assets.json`. Extracts the forward
|
|
27
|
+
* dep graph keyed by package name (collapsing versions — same as
|
|
28
|
+
* TS/Go/Rust packs) plus the set of top-level (direct manifest)
|
|
29
|
+
* package names across every target framework declared in `project`.
|
|
30
|
+
*
|
|
31
|
+
* Multi-framework projects: graphs are merged across target
|
|
32
|
+
* frameworks into a single name-level edge map. Top-level set is
|
|
33
|
+
* the union of declared direct deps across frameworks. This
|
|
34
|
+
* over-attributes slightly if a package is direct in netstandard2.0
|
|
35
|
+
* but transitive in net8.0 — it gets listed as a top-level — but the
|
|
36
|
+
* simplification beats per-framework multi-reporting complexity.
|
|
37
|
+
*/
|
|
38
|
+
export declare function parseProjectAssetsJson(raw: string): {
|
|
39
|
+
topLevels: string[];
|
|
40
|
+
edges: Map<string, Set<string>>;
|
|
41
|
+
} | null;
|
|
42
|
+
/**
|
|
43
|
+
* BFS the parsed asset graph to produce a per-package-name index of
|
|
44
|
+
* its top-level ancestors. Mirrors `buildTsTopLevelDepIndex` /
|
|
45
|
+
* `buildRustTopLevelDepIndex` in shape and semantics; attribution is
|
|
46
|
+
* coarse (name-level) and unions across multiple reachable parents.
|
|
47
|
+
*/
|
|
48
|
+
export declare function buildCsharpTopLevelDepIndex(parsed: {
|
|
49
|
+
topLevels: ReadonlyArray<string>;
|
|
50
|
+
edges: ReadonlyMap<string, ReadonlySet<string>>;
|
|
51
|
+
}): Map<string, string[]>;
|
|
4
52
|
/**
|
|
5
53
|
* Capture C# `using` directives from source text, including
|
|
6
54
|
* `using static Foo`, aliased (`using X = Foo.Bar`), and plain forms.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"csharp.d.ts","sourceRoot":"","sources":["../../src/languages/csharp.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAgB,MAAM,6BAA6B,CAAC;
|
|
1
|
+
{"version":3,"file":"csharp.d.ts","sourceRoot":"","sources":["../../src/languages/csharp.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAgB,MAAM,6BAA6B,CAAC;AAM1E,OAAO,KAAK,EAEV,cAAc,EAQd,cAAc,EAEf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAwD/C,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAoC/F;AAuGD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,MAAM,GACV;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,cAAc,EAAE,CAAA;CAAE,GAAG,IAAI,CA0D/D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,GACV;IAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;CAAE,GAAG,IAAI,CAqCjE;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE;IAClD,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACjC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;CACjD,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAsBxB;AAgPD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAQjE;AAsKD,eAAO,MAAM,MAAM,EAAE,eAsCpB,CAAC"}
|