@westbayberry/dg 1.0.20 → 1.0.22

package/dist/index.mjs

@@ -41143,21 +41143,35 @@ async function scanProjects(projects, config, dispatch) {
   try {
     const npmProjects = projects.filter((p) => p.ecosystem === "npm");
     const pypiProjects = projects.filter((p) => p.ecosystem === "pypi");
+    const fullScanConfig = { ...config, scanAll: true };
     const npmPackages = [];
     const pypiPackages = [];
+    const seenNpm = /* @__PURE__ */ new Set();
+    const seenPypi = /* @__PURE__ */ new Set();
     for (const proj of npmProjects) {
       try {
-        const discovery = discoverChanges(proj.path, config);
+        const discovery = discoverChanges(proj.path, fullScanConfig);
         for (const pkg of discovery.packages) {
-          if (!config.allowlist.includes(pkg.name)) npmPackages.push(pkg);
+          const key = `${pkg.name}@${pkg.version}`;
+          if (!config.allowlist.includes(pkg.name) && !seenNpm.has(key)) {
+            seenNpm.add(key);
+            npmPackages.push(pkg);
+          }
         }
       } catch {
       }
     }
     for (const proj of pypiProjects) {
-      const packages = parsePythonDepFile(proj.path, proj.depFile);
-      for (const pkg of packages) {
-        if (!config.allowlist.includes(pkg.name)) pypiPackages.push(pkg);
+      try {
+        const packages = parsePythonDepFile(proj.path, proj.depFile);
+        for (const pkg of packages) {
+          const key = `${pkg.name}@${pkg.version}`;
+          if (!config.allowlist.includes(pkg.name) && !seenPypi.has(key)) {
+            seenPypi.add(key);
+            pypiPackages.push(pkg);
+          }
+        }
+      } catch {
       }
     }
     const totalPackages = npmPackages.length + pypiPackages.length;
@@ -41930,16 +41944,21 @@ var init_App2 = __esm({
       (0, import_react32.useEffect)(() => {
         if (state.phase === "empty") {
           process.exitCode = 0;
+          process.stderr.write(`${state.message}
+`);
           const timer = setTimeout(() => exit(), 0);
           return () => clearTimeout(timer);
         }
         if (state.phase === "error") {
           process.exitCode = 3;
+          process.stderr.write(`Error: ${state.error.message}
+`);
           const timer = setTimeout(() => exit(), 0);
           return () => clearTimeout(timer);
         }
         if (state.phase === "trial_exhausted") {
           process.exitCode = 1;
+          process.stderr.write("Free trial scans used up. Run `dg login` to create a free account and continue scanning.\n");
           const timer = setTimeout(() => exit(), 0);
           return () => clearTimeout(timer);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@westbayberry/dg",
-  "version": "1.0.20",
+  "version": "1.0.22",
   "description": "Supply chain security scanner for npm and Python dependencies — detects malicious packages, typosquatting, dependency confusion, and 26+ attack patterns",
   "bin": {
     "dependency-guardian": "dist/index.mjs",