@westbayberry/dg 1.0.14 → 1.0.17

package/dist/index.mjs

@@ -3296,7 +3296,7 @@ var require_react_development = __commonJS({
           }
           return dispatcher.useContext(Context);
         }
-        function useState6(initialState) {
+        function useState7(initialState) {
           var dispatcher = resolveDispatcher();
           return dispatcher.useState(initialState);
         }
@@ -3304,7 +3304,7 @@ var require_react_development = __commonJS({
           var dispatcher = resolveDispatcher();
           return dispatcher.useReducer(reducer4, initialArg, init);
         }
-        function useRef6(initialValue) {
+        function useRef7(initialValue) {
           var dispatcher = resolveDispatcher();
           return dispatcher.useRef(initialValue);
         }
@@ -4098,8 +4098,8 @@ var require_react_development = __commonJS({
         exports.useLayoutEffect = useLayoutEffect2;
         exports.useMemo = useMemo4;
         exports.useReducer = useReducer5;
-        exports.useRef = useRef6;
-        exports.useState = useState6;
+        exports.useRef = useRef7;
+        exports.useState = useState7;
         exports.useSyncExternalStore = useSyncExternalStore;
         exports.useTransition = useTransition;
         exports.version = ReactVersion;
@@ -40990,14 +40990,14 @@ function useScan(config) {
     started.current = true;
     const projects = discoverProjects(process.cwd());
     if (projects.length > 1) setMultiProjects(projects);
+    if (projects.length > 1) {
+      dispatch({ type: "PROJECTS_FOUND", projects });
+      return;
+    }
     try {
       const discovery = discoverChanges(process.cwd(), config);
       const packages = discovery.packages.filter((p) => !config.allowlist.includes(p.name));
       if (packages.length === 0) {
-        if (discovery.packages.length === 0 && projects.length > 0) {
-          dispatch({ type: "PROJECTS_FOUND", projects });
-          return;
-        }
         const message = discovery.packages.length === 0 ? "No package changes detected." : "All changed packages are allowlisted.";
         dispatch({ type: "DISCOVERY_EMPTY", message });
         return;
@@ -41009,12 +41009,8 @@ function useScan(config) {
         dispatch({ type: "DISCOVERY_EMPTY", message: "No dependency files found." });
         return;
       }
-      if (projects.length === 1) {
-        dispatch({ type: "DISCOVERY_COMPLETE", packages: [], skippedCount: 0 });
-        scanProjects(projects, config, dispatch);
-        return;
-      }
-      dispatch({ type: "PROJECTS_FOUND", projects });
+      dispatch({ type: "DISCOVERY_COMPLETE", packages: [], skippedCount: 0 });
+      scanProjects(projects, config, dispatch);
     }
   }, [config]);
   const scanSelectedProjects = (0, import_react27.useCallback)((projects) => {
@@ -41205,6 +41201,40 @@ var init_useExpandAnimation = __esm({
   }
 });
 
+// src/ui/hooks/useTerminalSize.ts
+function useTerminalSize() {
+  const { stdout } = use_stdout_default();
+  const [size, setSize] = (0, import_react29.useState)({
+    rows: stdout?.rows ?? process.stdout.rows ?? 24,
+    cols: stdout?.columns ?? process.stdout.columns ?? 80
+  });
+  (0, import_react29.useEffect)(() => {
+    const handle = () => {
+      const rows = process.stdout.rows ?? 24;
+      const cols = process.stdout.columns ?? 80;
+      if (process.stdout.isTTY) {
+        process.stdout.write("\x1B[2J\x1B[H");
+      }
+      setSize({ rows, cols });
+    };
+    process.stdout.setMaxListeners(process.stdout.getMaxListeners() + 1);
+    process.stdout.on("resize", handle);
+    return () => {
+      process.stdout.off("resize", handle);
+      process.stdout.setMaxListeners(Math.max(0, process.stdout.getMaxListeners() - 1));
+    };
+  }, []);
+  return size;
+}
+var import_react29;
+var init_useTerminalSize = __esm({
+  async "src/ui/hooks/useTerminalSize.ts"() {
+    "use strict";
+    import_react29 = __toESM(require_react());
+    await init_build2();
+  }
+});
+
 // src/ui/components/InteractiveResultsView.tsx
 function groupPackages3(packages) {
   const map = /* @__PURE__ */ new Map();
@@ -41275,15 +41305,16 @@ function viewReducer(_state, action) {
       return { cursor: action.cursor, expandedIndex: action.expandedIndex, expandLevel: action.expandLevel, viewport: action.viewport };
   }
 }
-var import_react29, import_chalk10, import_jsx_runtime10, SEVERITY_LABELS3, SEVERITY_COLORS, EVIDENCE_LIMIT2, FIXED_CHROME, InteractiveResultsView, T, FindingsSummary, FindingsDetail;
+var import_react30, import_chalk10, import_jsx_runtime10, SEVERITY_LABELS3, SEVERITY_COLORS, EVIDENCE_LIMIT2, FIXED_CHROME, InteractiveResultsView, T, FindingsSummary, FindingsDetail;
 var init_InteractiveResultsView = __esm({
   async "src/ui/components/InteractiveResultsView.tsx"() {
     "use strict";
-    import_react29 = __toESM(require_react());
+    import_react30 = __toESM(require_react());
     await init_build2();
     import_chalk10 = __toESM(require_source());
     await init_ScoreHeader();
     init_useExpandAnimation();
+    await init_useTerminalSize();
     import_jsx_runtime10 = __toESM(require_jsx_runtime());
     SEVERITY_LABELS3 = {
       5: "CRIT",
@@ -41308,40 +41339,31 @@ var init_InteractiveResultsView = __esm({
       onExit,
       onBack
     }) => {
-      (0, import_react29.useEffect)(() => {
-        if (!process.stdout.isTTY) return;
-        process.stdout.write("\x1B[?1049h");
-        return () => {
-          process.stdout.write("\x1B[?1049l");
-        };
-      }, []);
-      const flagged = (0, import_react29.useMemo)(
+      const flagged = (0, import_react30.useMemo)(
         () => result.packages.filter((p) => p.score > 0),
         [result.packages]
       );
-      const clean = (0, import_react29.useMemo)(
+      const clean = (0, import_react30.useMemo)(
         () => result.packages.filter((p) => p.score === 0),
         [result.packages]
       );
       const total = result.packages.length;
-      const groups = (0, import_react29.useMemo)(() => groupPackages3(flagged), [flagged]);
-      const [view, dispatchView] = (0, import_react29.useReducer)(viewReducer, {
+      const groups = (0, import_react30.useMemo)(() => groupPackages3(flagged), [flagged]);
+      const [view, dispatchView] = (0, import_react30.useReducer)(viewReducer, {
         cursor: 0,
         expandLevel: null,
         expandedIndex: null,
         viewport: 0
       });
-      const viewRef = (0, import_react29.useRef)(view);
+      const viewRef = (0, import_react30.useRef)(view);
       viewRef.current = view;
-      const { stdout } = use_stdout_default();
-      const termCols = stdout?.columns ?? process.stdout.columns ?? 80;
-      const termRows = stdout?.rows ?? process.stdout.rows ?? 24;
+      const { rows: termRows, cols: termCols } = useTerminalSize();
       const availableRows = Math.max(5, termRows - FIXED_CHROME);
       const innerWidth = Math.max(40, termCols - 6);
       const getLevel = (idx) => {
         return view.expandedIndex === idx ? view.expandLevel : null;
       };
-      const expandTargetHeight = (0, import_react29.useMemo)(() => {
+      const expandTargetHeight = (0, import_react30.useMemo)(() => {
         if (view.expandedIndex === null || view.expandLevel === null) return 0;
         const group = groups[view.expandedIndex];
         if (!group) return 0;
@@ -41357,7 +41379,7 @@ var init_InteractiveResultsView = __esm({
         if (idx === view.expandedIndex) return 1 + animVisibleLines;
         return groupRowHeight(group, level, result.safeVersions);
       };
-      const visibleEnd = (0, import_react29.useMemo)(() => {
+      const visibleEnd = (0, import_react30.useMemo)(() => {
         let consumed = 0;
         let end = view.viewport;
         while (end < groups.length) {
@@ -41389,6 +41411,13 @@ var init_InteractiveResultsView = __esm({
         }
         return newStart;
       };
+      (0, import_react30.useEffect)(() => {
+        if (groups.length === 0) return;
+        const { cursor, expandedIndex, expandLevel, viewport } = viewRef.current;
+        const clamped = Math.min(viewport, Math.max(0, groups.length - 1));
+        const newVp = adjustViewport(cursor, expandedIndex, expandLevel, clamped);
+        dispatchView({ type: "MOVE", cursor, viewport: newVp });
+      }, [availableRows]);
       use_input_default((input, key) => {
         if (groups.length === 0) {
           if (input === "q" || key.return) onExit();
@@ -41416,13 +41445,12 @@ var init_InteractiveResultsView = __esm({
           const newVp = adjustViewport(cursor, newExpIdx, newExpLvl, vpStart);
           dispatchView({ type: "EXPAND", expandedIndex: newExpIdx, expandLevel: newExpLvl, viewport: newVp });
         } else if (input === "e") {
-          if (expIdx === cursor && expLvl === "detail") return;
-          const newVp = adjustViewport(cursor, cursor, "detail", vpStart);
-          dispatchView({ type: "EXPAND", expandedIndex: cursor, expandLevel: "detail", viewport: newVp });
-        } else if (input === "c") {
-          if (expIdx !== null && expLvl !== null) {
+          if (expIdx === cursor && expLvl === "detail") {
             const newVp = adjustViewport(cursor, null, null, vpStart);
             dispatchView({ type: "EXPAND", expandedIndex: null, expandLevel: null, viewport: newVp });
+          } else {
+            const newVp = adjustViewport(cursor, cursor, "detail", vpStart);
+            dispatchView({ type: "EXPAND", expandedIndex: cursor, expandLevel: "detail", viewport: newVp });
           }
         } else if (input === "b" && onBack) {
           onBack();
@@ -41549,10 +41577,7 @@ var init_InteractiveResultsView = __esm({
             " toggle",
             "  ",
             import_chalk10.default.cyan("e"),
-            " expand",
-            "  ",
-            import_chalk10.default.cyan("c"),
-            " collapse",
+            " expand/collapse",
             "  ",
             onBack && /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_jsx_runtime10.Fragment, { children: [
               import_chalk10.default.cyan("b"),
@@ -41689,19 +41714,16 @@ var init_InteractiveResultsView = __esm({
 });
 
 // src/ui/components/ProjectSelector.tsx
-var import_react30, import_jsx_runtime11, ProjectSelector;
+var import_react31, import_jsx_runtime11, ProjectSelector;
 var init_ProjectSelector = __esm({
   async "src/ui/components/ProjectSelector.tsx"() {
     "use strict";
-    import_react30 = __toESM(require_react());
+    import_react31 = __toESM(require_react());
     await init_build2();
     import_jsx_runtime11 = __toESM(require_jsx_runtime());
     ProjectSelector = ({ projects, onConfirm, onCancel }) => {
-      const [cursor, setCursor] = (0, import_react30.useState)(0);
-      (0, import_react30.useEffect)(() => {
-        process.stdout.write("\x1B[2J\x1B[H");
-      }, []);
-      const [selected, setSelected] = (0, import_react30.useState)(() => new Set(projects.map((_, i) => i)));
+      const [cursor, setCursor] = (0, import_react31.useState)(0);
+      const [selected, setSelected] = (0, import_react31.useState)(() => new Set(projects.map((_, i) => i)));
       use_input_default((input, key) => {
         if (key.upArrow) {
           setCursor((c) => Math.max(0, c - 1));
@@ -41755,11 +41777,11 @@ var App_exports = {};
 __export(App_exports, {
   App: () => App2
 });
-var import_react31, import_jsx_runtime12, App2;
+var import_react32, import_jsx_runtime12, App2;
 var init_App2 = __esm({
   async "src/ui/App.tsx"() {
     "use strict";
-    import_react31 = __toESM(require_react());
+    import_react32 = __toESM(require_react());
     await init_build2();
     init_useScan();
     await init_Spinner();
@@ -41767,11 +41789,31 @@ var init_App2 = __esm({
     await init_InteractiveResultsView();
     await init_ErrorView();
     await init_ProjectSelector();
+    await init_useTerminalSize();
     import_jsx_runtime12 = __toESM(require_jsx_runtime());
     App2 = ({ config }) => {
       const { state, scanSelectedProjects, restartSelection } = useScan(config);
       const { exit } = use_app_default();
-      const handleResultsExit = (0, import_react31.useCallback)(() => {
+      const { rows: termRows } = useTerminalSize();
+      const prevPhaseRef = (0, import_react32.useRef)(state.phase);
+      (0, import_react32.useEffect)(() => {
+        if (!process.stdout.isTTY) return;
+        process.stdout.write("\x1B[?1049h");
+        process.stdout.write("\x1B[?1003h");
+        process.stdout.write("\x1B[2J\x1B[H");
+        return () => {
+          process.stdout.write("\x1B[?1003l");
+          process.stdout.write("\x1B[?1049l");
+          process.stdout.write("\x1B[?25h");
+        };
+      }, []);
+      (0, import_react32.useEffect)(() => {
+        if (prevPhaseRef.current !== state.phase && process.stdout.isTTY) {
+          process.stdout.write("\x1B[2J\x1B[H");
+        }
+        prevPhaseRef.current = state.phase;
+      }, [state.phase]);
+      const handleResultsExit = (0, import_react32.useCallback)(() => {
         if (state.phase === "results") {
           const { result } = state;
           if (result.action === "block" && config.mode === "block") {
@@ -41784,7 +41826,7 @@ var init_App2 = __esm({
         }
         exit();
       }, [state, config, exit]);
-      (0, import_react31.useEffect)(() => {
+      (0, import_react32.useEffect)(() => {
         if (state.phase === "empty") {
           process.exitCode = 0;
           const timer = setTimeout(() => exit(), 0);
@@ -41796,55 +41838,58 @@ var init_App2 = __esm({
           return () => clearTimeout(timer);
         }
       }, [state, config, exit]);
-      switch (state.phase) {
-        case "discovering":
-          return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Spinner2, { label: "Searching for dependencies..." });
-        case "selecting":
-          return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
-            ProjectSelector,
-            {
-              projects: state.projects,
-              onConfirm: scanSelectedProjects,
-              onCancel: () => {
-                process.exitCode = 0;
-                exit();
+      const content = (() => {
+        switch (state.phase) {
+          case "discovering":
+            return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Spinner2, { label: "Searching for dependencies..." });
+          case "selecting":
+            return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+              ProjectSelector,
+              {
+                projects: state.projects,
+                onConfirm: scanSelectedProjects,
+                onCancel: () => {
+                  process.exitCode = 0;
+                  exit();
+                }
               }
-            }
-          );
-        case "scanning":
-          return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(Box_default, { flexDirection: "column", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
-              ProgressBar,
+            );
+          case "scanning":
+            return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(Box_default, { flexDirection: "column", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+                ProgressBar,
+                {
+                  value: state.done,
+                  total: state.total,
+                  label: state.currentBatch.length > 0 ? state.currentBatch[state.currentBatch.length - 1] : void 0
+                }
+              ),
+              /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(Text, { dimColor: true, children: [
+                "Scanning ",
+                state.done,
+                "/",
+                state.total,
+                " packages..."
+              ] })
+            ] });
+          case "results":
+            return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
+              InteractiveResultsView,
               {
-                value: state.done,
-                total: state.total,
-                label: state.currentBatch.length > 0 ? state.currentBatch[state.currentBatch.length - 1] : void 0
+                result: state.result,
+                config,
+                durationMs: state.durationMs,
+                onExit: handleResultsExit,
+                onBack: restartSelection ?? void 0
               }
-            ),
-            /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(Text, { dimColor: true, children: [
-              "Scanning ",
-              state.done,
-              "/",
-              state.total,
-              " packages..."
-            ] })
-          ] });
-        case "results":
-          return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
-            InteractiveResultsView,
-            {
-              result: state.result,
-              config,
-              durationMs: state.durationMs,
-              onExit: handleResultsExit,
-              onBack: restartSelection ?? void 0
-            }
-          );
-        case "empty":
-          return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Text, { dimColor: true, children: state.message });
-        case "error":
-          return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(ErrorView, { error: state.error });
-      }
+            );
+          case "empty":
+            return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Text, { dimColor: true, children: state.message });
+          case "error":
+            return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(ErrorView, { error: state.error });
+        }
+      })();
+      return /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Box_default, { flexDirection: "column", height: termRows, children: content });
     };
   }
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@westbayberry/dg",
-  "version": "1.0.14",
+  "version": "1.0.17",
   "description": "Supply chain security scanner for npm and Python dependencies — detects malicious packages, typosquatting, dependency confusion, and 26+ attack patterns",
   "bin": {
     "dependency-guardian": "dist/index.mjs",
@@ -12,6 +12,10 @@
   "license": "UNLICENSED",
   "author": "WestBayBerry",
   "homepage": "https://westbayberry.com",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/WestBayBerry/dependency-guardian-action.git"
+  },
   "keywords": [
     "security",
     "npm",