circle-ir-ai 2.8.1 → 2.8.3

package/dist/trust/passes/dependency-staleness.d.ts

@@ -1,14 +1,16 @@
 /**
- * T3: Dependency Staleness Trust Pass
+ * T3: Dependency Staleness & Vulnerability Trust Pass
  *
- * Checks last publish date of each dependency via the npm registry API.
- * Flags packages that haven't been updated in over a year.
+ * Checks dependencies for:
+ * 1. Staleness: last publish date via npm registry API
+ * 2. Known vulnerabilities: via OSV (Open Source Vulnerabilities) API
  *
  * Uses native fetch() (Node 18+) with p-queue for concurrency limiting.
  * Network errors are handled gracefully (skip, don't penalize).
  */
 import { type TrustPassResult, type TrustSeverity } from '../types.js';
 declare const NPM_REGISTRY_BASE = "https://registry.npmjs.org";
+declare const OSV_API_BASE = "https://api.osv.dev/v1";
 interface StalenessTier {
     thresholdDays: number;
     severity: TrustSeverity;
@@ -23,13 +25,37 @@ export interface DependencyStalenessOptions {
     includeDevDeps?: boolean;
     /** Packages to skip */
     skipPackages?: string[];
+    /** Check for known vulnerabilities via OSV (default: false for speed) */
+    checkVulnerabilities?: boolean;
 }
 declare function isLocalDep(version: string): boolean;
 interface RegistryResult {
     lastPublishDate: Date | null;
+    latestVersion: string | null;
     maintainerCount: number;
 }
 declare function fetchPackageInfo(packageName: string, timeout: number): Promise<RegistryResult>;
+interface OSVVulnerability {
+    id: string;
+    summary?: string;
+    severity?: Array<{
+        type: string;
+        score: string;
+    }>;
+    aliases?: string[];
+}
+/**
+ * Normalize a semver version for OSV query (strip leading ^ ~ etc.)
+ */
+declare function normalizeVersion(version: string): string;
+/**
+ * Query OSV API for vulnerabilities affecting a package version.
+ */
+declare function fetchVulnerabilities(packageName: string, version: string, timeout: number): Promise<OSVVulnerability[]>;
+/**
+ * Map CVSS score to severity level.
+ */
+declare function cvssToSeverity(cvss: number): TrustSeverity;
 export declare function dependencyStalenessPass(projectPath: string, options?: DependencyStalenessOptions): Promise<TrustPassResult>;
-export { isLocalDep, STALENESS_TIERS, NPM_REGISTRY_BASE, fetchPackageInfo };
+export { isLocalDep, STALENESS_TIERS, NPM_REGISTRY_BASE, OSV_API_BASE, fetchPackageInfo, fetchVulnerabilities, normalizeVersion, cvssToSeverity, };
 //# sourceMappingURL=dependency-staleness.d.ts.map

package/dist/trust/passes/dependency-staleness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dependency-staleness.d.ts","sourceRoot":"","sources":["../../../src/trust/passes/dependency-staleness.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,EACL,KAAK,eAAe,EAEpB,KAAK,aAAa,EAEnB,MAAM,aAAa,CAAC;AAMrB,QAAA,MAAM,iBAAiB,+BAA+B,CAAC;AAIvD,UAAU,aAAa;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,aAAa,CAAC;CACzB;AAED,QAAA,MAAM,eAAe,EAAE,aAAa,EAInC,CAAC;AAMF,MAAM,WAAW,0BAA0B;IACzC,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,uBAAuB;IACvB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAMD,iBAAS,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE5C;AAED,UAAU,cAAc;IACtB,eAAe,EAAE,IAAI,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,iBAAe,gBAAgB,CAC7B,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,cAAc,CAAC,CAiCzB;AAeD,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,eAAe,CAAC,CAsF1B;AAGD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC"}
+{"version":3,"file":"dependency-staleness.d.ts","sourceRoot":"","sources":["../../../src/trust/passes/dependency-staleness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,EACL,KAAK,eAAe,EAEpB,KAAK,aAAa,EAEnB,MAAM,aAAa,CAAC;AAMrB,QAAA,MAAM,iBAAiB,+BAA+B,CAAC;AACvD,QAAA,MAAM,YAAY,2BAA2B,CAAC;AAI9C,UAAU,aAAa;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,aAAa,CAAC;CACzB;AAED,QAAA,MAAM,eAAe,EAAE,aAAa,EAInC,CAAC;AAMF,MAAM,WAAW,0BAA0B;IACzC,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,uBAAuB;IACvB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,yEAAyE;IACzE,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAMD,iBAAS,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE5C;AAED,UAAU,cAAc;IACtB,eAAe,EAAE,IAAI,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,iBAAe,gBAAgB,CAC7B,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,cAAc,CAAC,CAmCzB;AAeD,UAAU,gBAAgB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAMD;;GAEG;AACH,iBAAS,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED;;GAEG;AACH,iBAAe,oBAAoB,CACjC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAkC7B;AAED;;GAEG;AACH,iBAAS,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAKnD;AAiCD,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,eAAe,CAAC,CA6H1B;AAGD,OAAO,EACL,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,GACf,CAAC"}

package/dist/trust/passes/dependency-staleness.js

@@ -1,8 +1,9 @@
 /**
- * T3: Dependency Staleness Trust Pass
+ * T3: Dependency Staleness & Vulnerability Trust Pass
  *
- * Checks last publish date of each dependency via the npm registry API.
- * Flags packages that haven't been updated in over a year.
+ * Checks dependencies for:
+ * 1. Staleness: last publish date via npm registry API
+ * 2. Known vulnerabilities: via OSV (Open Source Vulnerabilities) API
  *
  * Uses native fetch() (Node 18+) with p-queue for concurrency limiting.
  * Network errors are handled gracefully (skip, don't penalize).
@@ -15,6 +16,7 @@ import { SEVERITY_WEIGHTS, } from '../types.js';
 // Constants
 // ---------------------------------------------------------------------------
 const NPM_REGISTRY_BASE = 'https://registry.npmjs.org';
+const OSV_API_BASE = 'https://api.osv.dev/v1';
 const LOCAL_PREFIXES = ['file:', 'link:', 'git:', 'git+', 'github:', 'workspace:'];
 const STALENESS_TIERS = [
     { thresholdDays: 1095, severity: 'high' }, // >3 years
@@ -38,19 +40,20 @@ async function fetchPackageInfo(packageName, timeout) {
         });
         clearTimeout(timeoutId);
         if (!response.ok) {
-            return { lastPublishDate: null, maintainerCount: -1 };
+            return { lastPublishDate: null, latestVersion: null, maintainerCount: -1 };
         }
         const data = (await response.json());
         const modified = data.time?.modified;
         const lastPublishDate = modified ? new Date(modified) : null;
+        const latestVersion = data['dist-tags']?.latest ?? null;
         const maintainerCount = Array.isArray(data.maintainers)
             ? data.maintainers.length
             : -1;
-        return { lastPublishDate, maintainerCount };
+        return { lastPublishDate, latestVersion, maintainerCount };
     }
     catch {
         clearTimeout(timeoutId);
-        return { lastPublishDate: null, maintainerCount: -1 };
+        return { lastPublishDate: null, latestVersion: null, maintainerCount: -1 };
     }
 }
 function classifyStaleness(daysSincePublish) {
@@ -61,6 +64,86 @@ function classifyStaleness(daysSincePublish) {
     }
     return null;
 }
+/**
+ * Normalize a semver version for OSV query (strip leading ^ ~ etc.)
+ */
+function normalizeVersion(version) {
+    return version.replace(/^[\^~>=<]+/, '').split(' ')[0];
+}
+/**
+ * Query OSV API for vulnerabilities affecting a package version.
+ */
+async function fetchVulnerabilities(packageName, version, timeout) {
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), timeout);
+    try {
+        const url = `${OSV_API_BASE}/query`;
+        const response = await fetch(url, {
+            method: 'POST',
+            signal: controller.signal,
+            headers: {
+                'Content-Type': 'application/json',
+                Accept: 'application/json',
+            },
+            body: JSON.stringify({
+                package: {
+                    name: packageName,
+                    ecosystem: 'npm',
+                },
+                version: normalizeVersion(version),
+            }),
+        });
+        clearTimeout(timeoutId);
+        if (!response.ok) {
+            return [];
+        }
+        const data = (await response.json());
+        return data.vulns ?? [];
+    }
+    catch {
+        clearTimeout(timeoutId);
+        return [];
+    }
+}
+/**
+ * Map CVSS score to severity level.
+ */
+function cvssToSeverity(cvss) {
+    if (cvss >= 9.0)
+        return 'critical';
+    if (cvss >= 7.0)
+        return 'high';
+    if (cvss >= 4.0)
+        return 'medium';
+    return 'low';
+}
+/**
+ * Extract the highest CVSS score from OSV severity data.
+ */
+function extractCVSS(vuln) {
+    if (!vuln.severity)
+        return null;
+    for (const sev of vuln.severity) {
+        if (sev.type === 'CVSS_V3' || sev.type === 'CVSS_V2') {
+            const score = parseFloat(sev.score);
+            if (!isNaN(score))
+                return score;
+        }
+    }
+    return null;
+}
+/**
+ * Get CVE ID from aliases if available.
+ */
+function getCVE(vuln) {
+    if (vuln.aliases) {
+        for (const alias of vuln.aliases) {
+            if (alias.startsWith('CVE-'))
+                return alias;
+        }
+    }
+    return null;
+}
 // ---------------------------------------------------------------------------
 // Main pass
 // ---------------------------------------------------------------------------
@@ -70,6 +153,7 @@ export async function dependencyStalenessPass(projectPath, options = {}) {
     const concurrency = options.concurrency ?? 5;
     const timeout = options.timeout ?? 5000;
     const skipSet = new Set(options.skipPackages ?? []);
+    const checkVulnerabilities = options.checkVulnerabilities ?? false;
     // Read package.json
     const rootPkgPath = path.join(projectPath, 'package.json');
     let deps = {};
@@ -93,8 +177,9 @@ export async function dependencyStalenessPass(projectPath, options = {}) {
     const depEntries = Object.entries(deps).filter(([name, version]) => !isLocalDep(version) && !skipSet.has(name));
     // Fetch with concurrency limiting
     const queue = new PQueue({ concurrency });
-    const tasks = depEntries.map(([depName]) => queue.add(async () => {
+    const tasks = depEntries.map(([depName, currentVersion]) => queue.add(async () => {
         const info = await fetchPackageInfo(depName, timeout);
+        // Staleness check
         if (info.lastPublishDate) {
             const daysSince = (Date.now() - info.lastPublishDate.getTime()) / (1000 * 60 * 60 * 24);
             const tier = classifyStaleness(daysSince);
@@ -107,12 +192,16 @@ export async function dependencyStalenessPass(projectPath, options = {}) {
                     location: { file: 'package.json' },
                     meta: {
                         dependency: depName,
+                        currentVersion,
+                        latestVersion: info.latestVersion,
                         daysSincePublish: Math.floor(daysSince),
                         lastPublishDate: info.lastPublishDate.toISOString(),
+                        findingType: 'staleness',
                     },
                 });
             }
         }
+        // Maintainer check
         if (info.maintainerCount === 0) {
             findings.push({
                 pass: 'dependency-staleness',
@@ -120,9 +209,40 @@ export async function dependencyStalenessPass(projectPath, options = {}) {
                 severity: 'high',
                 message: `"${depName}" has zero maintainers`,
                 location: { file: 'package.json' },
-                meta: { dependency: depName, maintainerCount: 0 },
+                meta: {
+                    dependency: depName,
+                    currentVersion,
+                    maintainerCount: 0,
+                    findingType: 'maintainer',
+                },
             });
         }
+        // Vulnerability check (if enabled)
+        if (checkVulnerabilities) {
+            const vulns = await fetchVulnerabilities(depName, currentVersion, timeout);
+            for (const vuln of vulns) {
+                const cvss = extractCVSS(vuln);
+                const severity = cvss !== null ? cvssToSeverity(cvss) : 'medium';
+                const cve = getCVE(vuln);
+                findings.push({
+                    pass: 'dependency-staleness',
+                    ruleId: 'dep-vulnerability',
+                    severity,
+                    message: `"${depName}@${normalizeVersion(currentVersion)}" has known vulnerability ${vuln.id}${cve ? ` (${cve})` : ''}`,
+                    location: { file: 'package.json' },
+                    meta: {
+                        dependency: depName,
+                        currentVersion: normalizeVersion(currentVersion),
+                        latestVersion: info.latestVersion,
+                        vulnId: vuln.id,
+                        cve: cve ?? undefined,
+                        cvss: cvss ?? undefined,
+                        summary: vuln.summary ?? undefined,
+                        findingType: 'vulnerability',
+                    },
+                });
+            }
+        }
     }));
     await Promise.allSettled(tasks);
     let deduction = 0;
@@ -138,5 +258,5 @@ export async function dependencyStalenessPass(projectPath, options = {}) {
     };
 }
 // Exports for testing
-export { isLocalDep, STALENESS_TIERS, NPM_REGISTRY_BASE, fetchPackageInfo };
+export { isLocalDep, STALENESS_TIERS, NPM_REGISTRY_BASE, OSV_API_BASE, fetchPackageInfo, fetchVulnerabilities, normalizeVersion, cvssToSeverity, };
 //# sourceMappingURL=dependency-staleness.js.map

package/dist/trust/passes/dependency-staleness.js.map

@@ -1 +1 @@
-{"version":3,"file":"dependency-staleness.js","sourceRoot":"","sources":["../../../src/trust/passes/dependency-staleness.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,MAAM,MAAM,SAAS,CAAC;AAC7B,OAAO,EAIL,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAErB,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AAEvD,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AAOnF,MAAM,eAAe,GAAoB;IACvC,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAI,WAAW;IACxD,EAAE,aAAa,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAI,WAAW;IACzD,EAAE,aAAa,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAO,UAAU;CACzD,CAAC;AAiBF,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACrE,CAAC;AAOD,KAAK,UAAU,gBAAgB,CAC7B,WAAmB,EACnB,OAAe;IAEf,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;IAEhE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,iBAAiB,IAAI,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAC;QAEH,YAAY,CAAC,SAAS,CAAC,CAAC;QAExB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,CAAC;QACxD,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGlC,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QACrC,MAAM,eAAe,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7D,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;YACrD,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM;YACzB,CAAC,CAAC,CAAC,CAAC,CAAC;QAEP,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,CAAC;IACxD,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,gBAAwB;IACjD,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,gBAAgB,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAmB,EACnB,UAAsC,EAAE;IAExC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAEpD,oBAAoB;IACpB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC3D,IAAI,IAAI,GAA2B,EAAE,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;QACvC,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3B,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,CAAC;QACrD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,sBAAsB;YAC5B,KAAK,EAAE,GAAG;YACV,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAC/B,CAAC;IACJ,CAAC;IAED,cAAc;IACd,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAC5C,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAChE,CAAC;IAEF,kCAAkC;IAClC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CACzC,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEtD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,MAAM,SAAS,GACb,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACxE,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAE1C,IAAI,IAAI,EAAE,CAAC;gBACT,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,sBAAsB;oBAC5B,MAAM,EAAE,iBAAiB,IAAI,CAAC,QAAQ,EAAE;oBACxC,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,OAAO,EAAE,IAAI,OAAO,oBAAoB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW;oBACxE,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;oBAClC,IAAI,EAAE;wBACJ,UAAU,EAAE,OAAO;wBACnB,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;wBACvC,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE;qBACpD;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,eAAe,KAAK,CAAC,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,sBAAsB;gBAC5B,MAAM,EAAE,oBAAoB;gBAC5B,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,IAAI,OAAO,wBAAwB;gBAC5C,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;gBAClC,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,EAAE;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAEhC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,SAAS,IAAI,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC;IAE1D,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,KAAK;QACL,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KAC/B,CAAC;AACJ,CAAC;AAED,sBAAsB;AACtB,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC"}
+{"version":3,"file":"dependency-staleness.js","sourceRoot":"","sources":["../../../src/trust/passes/dependency-staleness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,MAAM,MAAM,SAAS,CAAC;AAC7B,OAAO,EAIL,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAErB,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AACvD,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAE9C,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AAOnF,MAAM,eAAe,GAAoB;IACvC,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAI,WAAW;IACxD,EAAE,aAAa,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAI,WAAW;IACzD,EAAE,aAAa,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAO,UAAU;CACzD,CAAC;AAmBF,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACrE,CAAC;AAQD,KAAK,UAAU,gBAAgB,CAC7B,WAAmB,EACnB,OAAe;IAEf,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;IAEhE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,iBAAiB,IAAI,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAC;QAEH,YAAY,CAAC,SAAS,CAAC,CAAC;QAExB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,CAAC;QAC7E,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QACrC,MAAM,eAAe,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7D,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,IAAI,IAAI,CAAC;QACxD,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;YACrD,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM;YACzB,CAAC,CAAC,CAAC,CAAC,CAAC;QAEP,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,gBAAwB;IACjD,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,gBAAgB,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAiBD;;GAEG;AACH,SAAS,gBAAgB,CAAC,OAAe;IACvC,OAAO,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,oBAAoB,CACjC,WAAmB,EACnB,OAAe,EACf,OAAe;IAEf,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;IAEhE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,YAAY,QAAQ,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO,EAAE;oBACP,IAAI,EAAE,WAAW;oBACjB,SAAS,EAAE,KAAK;iBACjB;gBACD,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC;aACnC,CAAC;SACH,CAAC,CAAC;QAEH,YAAY,CAAC,SAAS,CAAC,CAAC;QAExB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqB,CAAC;QACzD,OAAO,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,UAAU,CAAC;IACnC,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,MAAM,CAAC;IAC/B,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,QAAQ,CAAC;IACjC,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,IAAsB;IACzC,IAAI,CAAC,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEhC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACrD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,MAAM,CAAC,IAAsB;IACpC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAmB,EACnB,UAAsC,EAAE;IAExC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,IAAI,KAAK,CAAC;IAEnE,oBAAoB;IACpB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC3D,IAAI,IAAI,GAA2B,EAAE,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;QACvC,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3B,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,CAAC;QACrD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,sBAAsB;YAC5B,KAAK,EAAE,GAAG;YACV,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAC/B,CAAC;IACJ,CAAC;IAED,cAAc;IACd,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAC5C,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAChE,CAAC;IAEF,kCAAkC;IAClC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,EAAE,CACzD,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEtD,kBAAkB;QAClB,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,MAAM,SAAS,GACb,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACxE,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAE1C,IAAI,IAAI,EAAE,CAAC;gBACT,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,sBAAsB;oBAC5B,MAAM,EAAE,iBAAiB,IAAI,CAAC,QAAQ,EAAE;oBACxC,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,OAAO,EAAE,IAAI,OAAO,oBAAoB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW;oBACxE,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;oBAClC,IAAI,EAAE;wBACJ,UAAU,EAAE,OAAO;wBACnB,cAAc;wBACd,aAAa,EAAE,IAAI,CAAC,aAAa;wBACjC,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;wBACvC,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE;wBACnD,WAAW,EAAE,WAAW;qBACzB;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,IAAI,IAAI,CAAC,eAAe,KAAK,CAAC,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,sBAAsB;gBAC5B,MAAM,EAAE,oBAAoB;gBAC5B,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,IAAI,OAAO,wBAAwB;gBAC5C,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;gBAClC,IAAI,EAAE;oBACJ,UAAU,EAAE,OAAO;oBACnB,cAAc;oBACd,eAAe,EAAE,CAAC;oBAClB,WAAW,EAAE,YAAY;iBAC1B;aACF,CAAC,CAAC;QACL,CAAC;QAED,mCAAmC;QACnC,IAAI,oBAAoB,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;YAC3E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;gBAC/B,MAAM,QAAQ,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;gBACjE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;gBAEzB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,sBAAsB;oBAC5B,MAAM,EAAE,mBAAmB;oBAC3B,QAAQ;oBACR,OAAO,EAAE,IAAI,OAAO,IAAI,gBAAgB,CAAC,cAAc,CAAC,6BAA6B,IAAI,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBACvH,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;oBAClC,IAAI,EAAE;wBACJ,UAAU,EAAE,OAAO;wBACnB,cAAc,EAAE,gBAAgB,CAAC,cAAc,CAAC;wBAChD,aAAa,EAAE,IAAI,CAAC,aAAa;wBACjC,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,GAAG,EAAE,GAAG,IAAI,SAAS;wBACrB,IAAI,EAAE,IAAI,IAAI,SAAS;wBACvB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS;wBAClC,WAAW,EAAE,eAAe;qBAC7B;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAEhC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,SAAS,IAAI,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC;IAE1D,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,KAAK;QACL,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KAC/B,CAAC;AACJ,CAAC;AAED,sBAAsB;AACtB,OAAO,EACL,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,GACf,CAAC"}

package/dist/trust/passes/typosquat-detection.d.ts

@@ -1,16 +1,38 @@
 /**
  * T5: Typosquat Detection Trust Pass
  *
- * Compares dependency names against a set of popular npm packages.
- * Flags any dependency whose Levenshtein distance to a popular package is 1 or 2.
+ * Compares dependency names against popular npm packages using:
+ * - Levenshtein distance (edit distance 1-2)
+ * - Homoglyph detection (rn→m, 1→l, 0→O, etc.)
+ * - npm registry popularity check (weekly downloads)
  *
  * Score: 100 − Σ(deduction), clamped [0, 100].
- *   distance 1 → severity=high  (−25 points)
+ *   distance 1 / homoglyph → severity=high  (−25 points)
  *   distance 2 → severity=medium (−10 points)
  */
 import { type TrustPassResult } from '../types.js';
 declare const TOP_PACKAGES: Set<string>;
 declare function levenshtein(a: string, b: string): number;
+/**
+ * Common homoglyph substitutions used in typosquatting attacks.
+ * Maps visually similar character sequences.
+ */
+declare const HOMOGLYPH_MAP: Array<[string, string]>;
+/**
+ * Check if `candidate` could be a homoglyph attack on `target`.
+ * Returns the matched homoglyph substitution or null.
+ */
+declare function detectHomoglyph(candidate: string, target: string): string | null;
+/** Minimum weekly downloads to be considered "popular" */
+declare const POPULARITY_THRESHOLD = 100000;
+interface PopularityResult {
+    downloads: number;
+    isPopular: boolean;
+}
+/**
+ * Query npm downloads API for a package's weekly download count.
+ */
+declare function fetchPackagePopularity(packageName: string, timeout: number): Promise<PopularityResult | null>;
 export interface TyposquatDetectionOptions {
     /** Maximum edit distance to flag (default: 2) */
     maxDistance?: number;
@@ -18,6 +40,14 @@ export interface TyposquatDetectionOptions {
     additionalKnownPackages?: string[];
     /** Include devDependencies (default: true) */
     includeDevDeps?: boolean;
+    /** Enable homoglyph detection (default: true) */
+    checkHomoglyphs?: boolean;
+    /** Query npm for popularity data (default: false for speed) */
+    checkPopularity?: boolean;
+    /** Concurrency for npm registry requests (default: 5) */
+    concurrency?: number;
+    /** Timeout per request in ms (default: 3000) */
+    timeout?: number;
 }
 /**
  * Strip npm scope prefix for comparison.
@@ -29,5 +59,5 @@ declare function stripScope(name: string): string;
  * Run the typosquat-detection trust pass.
  */
 export declare function typosquatDetectionPass(projectPath: string, options?: TyposquatDetectionOptions): Promise<TrustPassResult>;
-export { levenshtein, stripScope, TOP_PACKAGES };
+export { levenshtein, stripScope, detectHomoglyph, fetchPackagePopularity, TOP_PACKAGES, HOMOGLYPH_MAP, POPULARITY_THRESHOLD, };
 //# sourceMappingURL=typosquat-detection.d.ts.map

package/dist/trust/passes/typosquat-detection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"typosquat-detection.d.ts","sourceRoot":"","sources":["../../../src/trust/passes/typosquat-detection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EACL,KAAK,eAAe,EAErB,MAAM,aAAa,CAAC;AAMrB,QAAA,MAAM,YAAY,aAqBhB,CAAC;AAMH,iBAAS,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAsBjD;AAMD,MAAM,WAAW,yBAAyB;IACxC,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,8CAA8C;IAC9C,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAgBD;;;;GAIG;AACH,iBAAS,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAExC;AAcD;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,eAAe,CAAC,CA6F1B;AAGD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC"}
+{"version":3,"file":"typosquat-detection.d.ts","sourceRoot":"","sources":["../../../src/trust/passes/typosquat-detection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EACL,KAAK,eAAe,EAErB,MAAM,aAAa,CAAC;AAMrB,QAAA,MAAM,YAAY,aAqBhB,CAAC;AAMH,iBAAS,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAsBjD;AAMD;;;GAGG;AACH,QAAA,MAAM,aAAa,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAW1C,CAAC;AAEF;;;GAGG;AACH,iBAAS,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAoBzE;AAQD,0DAA0D;AAC1D,QAAA,MAAM,oBAAoB,SAAU,CAAC;AAErC,UAAU,gBAAgB;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,iBAAe,sBAAsB,CACnC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CA4BlC;AAMD,MAAM,WAAW,yBAAyB;IACxC,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,8CAA8C;IAC9C,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,iDAAiD;IACjD,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,+DAA+D;IAC/D,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAgBD;;;;GAIG;AACH,iBAAS,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAExC;AAcD;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,eAAe,CAAC,CA0K1B;AAGD,OAAO,EACL,WAAW,EACX,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,YAAY,EACZ,aAAa,EACb,oBAAoB,GACrB,CAAC"}

package/dist/trust/passes/typosquat-detection.js

@@ -1,15 +1,18 @@
 /**
  * T5: Typosquat Detection Trust Pass
  *
- * Compares dependency names against a set of popular npm packages.
- * Flags any dependency whose Levenshtein distance to a popular package is 1 or 2.
+ * Compares dependency names against popular npm packages using:
+ * - Levenshtein distance (edit distance 1-2)
+ * - Homoglyph detection (rn→m, 1→l, 0→O, etc.)
+ * - npm registry popularity check (weekly downloads)
  *
  * Score: 100 − Σ(deduction), clamped [0, 100].
- *   distance 1 → severity=high  (−25 points)
+ *   distance 1 / homoglyph → severity=high  (−25 points)
  *   distance 2 → severity=medium (−10 points)
  */
 import * as fs from 'fs';
 import * as path from 'path';
+import PQueue from 'p-queue';
 // ---------------------------------------------------------------------------
 // Top npm packages (popular targets for typosquatting)
 // ---------------------------------------------------------------------------
@@ -59,6 +62,81 @@ function levenshtein(a, b) {
     }
     return prev[b.length];
 }
+// ---------------------------------------------------------------------------
+// Homoglyph Detection
+// ---------------------------------------------------------------------------
+/**
+ * Common homoglyph substitutions used in typosquatting attacks.
+ * Maps visually similar character sequences.
+ */
+const HOMOGLYPH_MAP = [
+    ['rn', 'm'], // Most common: "rn" looks like "m"
+    ['cl', 'd'], // "cl" looks like "d"
+    ['vv', 'w'], // "vv" looks like "w"
+    ['1', 'l'], // Number 1 looks like lowercase L
+    ['l', '1'], // Reverse
+    ['0', 'o'], // Number 0 looks like letter O
+    ['o', '0'], // Reverse
+    ['i', 'j'], // i and j are similar
+    ['nn', 'm'], // "nn" looks like "m"
+    ['ii', 'u'], // "ii" can look like "u"
+];
+/**
+ * Check if `candidate` could be a homoglyph attack on `target`.
+ * Returns the matched homoglyph substitution or null.
+ */
+function detectHomoglyph(candidate, target) {
+    const candidateLower = candidate.toLowerCase();
+    const targetLower = target.toLowerCase();
+    // Try each homoglyph substitution
+    for (const [from, to] of HOMOGLYPH_MAP) {
+        // Forward: candidate has `from`, target has `to`
+        const candidateNormalized = candidateLower.replace(new RegExp(from, 'g'), to);
+        if (candidateNormalized === targetLower && candidateLower !== targetLower) {
+            return `${from}→${to}`;
+        }
+        // Reverse: candidate has `to`, target has `from`
+        const candidateReverse = candidateLower.replace(new RegExp(to, 'g'), from);
+        if (candidateReverse === targetLower && candidateLower !== targetLower) {
+            return `${to}→${from}`;
+        }
+    }
+    return null;
+}
+// ---------------------------------------------------------------------------
+// npm Registry Popularity Check
+// ---------------------------------------------------------------------------
+const NPM_DOWNLOADS_API = 'https://api.npmjs.org/downloads/point/last-week';
+/** Minimum weekly downloads to be considered "popular" */
+const POPULARITY_THRESHOLD = 100_000;
+/**
+ * Query npm downloads API for a package's weekly download count.
+ */
+async function fetchPackagePopularity(packageName, timeout) {
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), timeout);
+    try {
+        const url = `${NPM_DOWNLOADS_API}/${encodeURIComponent(packageName)}`;
+        const response = await fetch(url, {
+            signal: controller.signal,
+            headers: { Accept: 'application/json' },
+        });
+        clearTimeout(timeoutId);
+        if (!response.ok) {
+            return null;
+        }
+        const data = (await response.json());
+        const downloads = data.downloads ?? 0;
+        return {
+            downloads,
+            isPopular: downloads >= POPULARITY_THRESHOLD,
+        };
+    }
+    catch {
+        clearTimeout(timeoutId);
+        return null;
+    }
+}
 /**
  * Well-known scope prefixes that are not typosquatting vectors.
  * Packages under these scopes compare the full scoped name, not just the bare part.
@@ -98,7 +176,11 @@ export async function typosquatDetectionPass(projectPath, options = {}) {
     const findings = [];
     const maxDist = options.maxDistance ?? 2;
     const includeDevDeps = options.includeDevDeps ?? true;
-    // Build known-good set
+    const checkHomoglyphs = options.checkHomoglyphs ?? true;
+    const checkPopularity = options.checkPopularity ?? false;
+    const concurrency = options.concurrency ?? 5;
+    const timeout = options.timeout ?? 3000;
+    // Build known-good set from hardcoded list
     const knownGood = new Set(TOP_PACKAGES);
     for (const pkg of options.additionalKnownPackages ?? []) {
         knownGood.add(pkg);
@@ -122,6 +204,41 @@ export async function typosquatDetectionPass(projectPath, options = {}) {
             durationMs: Date.now() - start,
         };
     }
+    // If checking popularity, fetch download counts for potential matches
+    const popularityCache = new Map();
+    if (checkPopularity) {
+        const queue = new PQueue({ concurrency });
+        const packagesToCheck = new Set();
+        // Collect packages that might be typosquats (similar to deps)
+        for (const depName of Object.keys(deps)) {
+            const bare = stripScope(depName);
+            if (knownGood.has(bare) || knownGood.has(depName))
+                continue;
+            const scope = getScope(depName);
+            if (scope && TRUSTED_SCOPES.has(scope))
+                continue;
+            if (bare.length < MIN_NAME_LENGTH)
+                continue;
+            // Find similar packages to check popularity
+            for (const known of knownGood) {
+                if (Math.abs(bare.length - known.length) <= maxDist) {
+                    const dist = levenshtein(bare, known);
+                    if (dist >= 1 && dist <= maxDist) {
+                        packagesToCheck.add(known);
+                    }
+                }
+            }
+        }
+        // Fetch popularity for similar packages
+        const tasks = [...packagesToCheck].map((pkg) => queue.add(async () => {
+            const result = await fetchPackagePopularity(pkg, timeout);
+            if (result) {
+                popularityCache.set(pkg, result);
+            }
+        }));
+        await Promise.allSettled(tasks);
+    }
+    // Check each dependency
     for (const depName of Object.keys(deps)) {
         const bare = stripScope(depName);
         // Skip exact matches (they ARE the popular package)
@@ -134,7 +251,36 @@ export async function typosquatDetectionPass(projectPath, options = {}) {
         // Skip very short bare names (too many false positives)
         if (bare.length < MIN_NAME_LENGTH)
             continue;
-        // Compare against all known-good packages
+        // Check for homoglyph attacks first (higher priority)
+        if (checkHomoglyphs) {
+            for (const known of knownGood) {
+                const homoglyph = detectHomoglyph(bare, known);
+                if (homoglyph) {
+                    const popularity = popularityCache.get(known);
+                    findings.push({
+                        pass: 'typosquat-detection',
+                        ruleId: 'typosquat-homoglyph',
+                        severity: 'high',
+                        message: `"${depName}" uses homoglyph substitution (${homoglyph}) to mimic "${known}"`,
+                        location: { file: 'package.json' },
+                        meta: {
+                            dependency: depName,
+                            similarTo: known,
+                            homoglyph,
+                            detectionMethod: 'homoglyph',
+                            deductionPoints: 25,
+                            ...(popularity && { targetDownloads: popularity.downloads }),
+                        },
+                    });
+                    break; // Only report first homoglyph match
+                }
+            }
+        }
+        // Skip Levenshtein check if already flagged as homoglyph
+        const alreadyFlagged = findings.some((f) => f.meta?.dependency === depName);
+        if (alreadyFlagged)
+            continue;
+        // Compare against all known-good packages using Levenshtein
         let bestDist = Infinity;
         let bestMatch = '';
         for (const known of knownGood) {
@@ -152,6 +298,7 @@ export async function typosquatDetectionPass(projectPath, options = {}) {
         if (bestDist >= 1 && bestDist <= maxDist) {
             const severity = bestDist === 1 ? 'high' : 'medium';
             const deductionPoints = bestDist === 1 ? 25 : 10;
+            const popularity = popularityCache.get(bestMatch);
             findings.push({
                 pass: 'typosquat-detection',
                 ruleId: `typosquat-distance-${bestDist}`,
@@ -160,9 +307,11 @@ export async function typosquatDetectionPass(projectPath, options = {}) {
                 location: { file: 'package.json' },
                 meta: {
                     dependency: depName,
-                    closestPopular: bestMatch,
-                    editDistance: bestDist,
+                    similarTo: bestMatch,
+                    distance: bestDist,
+                    detectionMethod: 'levenshtein',
                     deductionPoints,
+                    ...(popularity && { targetDownloads: popularity.downloads }),
                 },
             });
         }
@@ -181,5 +330,5 @@ export async function typosquatDetectionPass(projectPath, options = {}) {
     };
 }
 // Export for testing
-export { levenshtein, stripScope, TOP_PACKAGES };
+export { levenshtein, stripScope, detectHomoglyph, fetchPackagePopularity, TOP_PACKAGES, HOMOGLYPH_MAP, POPULARITY_THRESHOLD, };
 //# sourceMappingURL=typosquat-detection.js.map

package/dist/trust/passes/typosquat-detection.js.map

@@ -1 +1 @@
-{"version":3,"file":"typosquat-detection.js","sourceRoot":"","sources":["../../../src/trust/passes/typosquat-detection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAM7B,8EAA8E;AAC9E,uDAAuD;AACvD,8EAA8E;AAE9E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS;IACzD,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO;IAC3D,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ;IAC7D,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW;IACnE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO;IAC/D,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM;IACvD,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW;IACzD,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc;IAC/D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU;IACpD,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO;IAClD,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ;IACtD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO;IAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ;IAC9C,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU;IAClD,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;IACjD,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB;IAC7D,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO;IACjD,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ;IAC5C,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;IAC1B,MAAM,EAAE,QAAQ,EAAE,KAAK;CACxB,CAAC,CAAC;AAEH,8EAA8E;AAC9E,mDAAmD;AACnD,8EAA8E;AAE9E,SAAS,WAAW,CAAC,CAAS,EAAE,CAAS;IACvC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC;IAEpC,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7D,IAAI,IAAI,GAAG,IAAI,KAAK,CAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAChB,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAQ,WAAW;YAC9B,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAI,YAAY;YAC/B,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CACnB,CAAC;QACJ,CAAC;QACD,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAeD;;;GAGG;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;IACnD,kBAAkB,EAAE,oBAAoB,EAAE,SAAS;IACnD,UAAU,EAAE,QAAQ,EAAE,eAAe;IACrC,UAAU,EAAE,SAAS,EAAE,OAAO;IAC9B,MAAM,EAAE,YAAY,EAAE,WAAW;IACjC,WAAW,EAAE,OAAO,EAAE,SAAS;IAC/B,SAAS,EAAE,SAAS;CACrB,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,oEAAoE;AACpE,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,WAAmB,EACnB,UAAqC,EAAE;IAEvC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC;IACzC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC;IAEtD,uBAAuB;IACvB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,uBAAuB,IAAI,EAAE,EAAE,CAAC;QACxD,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,yBAAyB;IACzB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC3D,IAAI,IAAI,GAA2B,EAAE,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;QACvC,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,CAAC;QACrD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,KAAK,EAAE,GAAG;YACV,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAC/B,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAEjC,oDAAoD;QACpD,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QAE5D,2CAA2C;QAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,KAAK,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAEjD,wDAAwD;QACxD,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe;YAAE,SAAS;QAE5C,0CAA0C;QAC1C,IAAI,QAAQ,GAAG,QAAQ,CAAC;QACxB,IAAI,SAAS,GAAG,EAAE,CAAC;QAEnB,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,4BAA4B;YAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,OAAO;gBAAE,SAAS;YAE7D,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACtC,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACpB,QAAQ,GAAG,IAAI,CAAC;gBAChB,SAAS,GAAG,KAAK,CAAC;YACpB,CAAC;YACD,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM,CAAC,2CAA2C;QACpE,CAAC;QAED,IAAI,QAAQ,IAAI,CAAC,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,MAAe,CAAC,CAAC,CAAC,QAAiB,CAAC;YACtE,MAAM,eAAe,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAEjD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAqB;gBAC3B,MAAM,EAAE,sBAAsB,QAAQ,EAAE;gBACxC,QAAQ;gBACR,OAAO,EAAE,IAAI,OAAO,QAAQ,QAAQ,uCAAuC,SAAS,GAAG;gBACvF,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;gBAClC,IAAI,EAAE;oBACJ,UAAU,EAAE,OAAO;oBACnB,cAAc,EAAE,SAAS;oBACzB,YAAY,EAAE,QAAQ;oBACtB,eAAe;iBAChB;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,SAAS,IAAK,CAAC,CAAC,IAAI,EAAE,eAA0B,IAAI,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC;IAE1D,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,KAAK;QACL,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KAC/B,CAAC;AACJ,CAAC;AAED,qBAAqB;AACrB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC"}
+{"version":3,"file":"typosquat-detection.js","sourceRoot":"","sources":["../../../src/trust/passes/typosquat-detection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,MAAM,MAAM,SAAS,CAAC;AAM7B,8EAA8E;AAC9E,uDAAuD;AACvD,8EAA8E;AAE9E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS;IACzD,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO;IAC3D,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ;IAC7D,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW;IACnE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO;IAC/D,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM;IACvD,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW;IACzD,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc;IAC/D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU;IACpD,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO;IAClD,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ;IACtD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO;IAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ;IAC9C,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU;IAClD,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;IACjD,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB;IAC7D,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO;IACjD,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ;IAC5C,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;IAC1B,MAAM,EAAE,QAAQ,EAAE,KAAK;CACxB,CAAC,CAAC;AAEH,8EAA8E;AAC9E,mDAAmD;AACnD,8EAA8E;AAE9E,SAAS,WAAW,CAAC,CAAS,EAAE,CAAS;IACvC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC;IAEpC,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7D,IAAI,IAAI,GAAG,IAAI,KAAK,CAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAChB,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAQ,WAAW;YAC9B,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAI,YAAY;YAC/B,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CACnB,CAAC;QACJ,CAAC;QACD,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,aAAa,GAA4B;IAC7C,CAAC,IAAI,EAAE,GAAG,CAAC,EAAI,mCAAmC;IAClD,CAAC,IAAI,EAAE,GAAG,CAAC,EAAI,sBAAsB;IACrC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAI,sBAAsB;IACrC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAK,kCAAkC;IACjD,CAAC,GAAG,EAAE,GAAG,CAAC,EAAK,UAAU;IACzB,CAAC,GAAG,EAAE,GAAG,CAAC,EAAK,+BAA+B;IAC9C,CAAC,GAAG,EAAE,GAAG,CAAC,EAAK,UAAU;IACzB,CAAC,GAAG,EAAE,GAAG,CAAC,EAAK,sBAAsB;IACrC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAI,sBAAsB;IACrC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAI,yBAAyB;CACzC,CAAC;AAEF;;;GAGG;AACH,SAAS,eAAe,CAAC,SAAiB,EAAE,MAAc;IACxD,MAAM,cAAc,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IAEzC,kCAAkC;IAClC,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,aAAa,EAAE,CAAC;QACvC,iDAAiD;QACjD,MAAM,mBAAmB,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9E,IAAI,mBAAmB,KAAK,WAAW,IAAI,cAAc,KAAK,WAAW,EAAE,CAAC;YAC1E,OAAO,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;QACzB,CAAC;QAED,iDAAiD;QACjD,MAAM,gBAAgB,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3E,IAAI,gBAAgB,KAAK,WAAW,IAAI,cAAc,KAAK,WAAW,EAAE,CAAC;YACvE,OAAO,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,gCAAgC;AAChC,8EAA8E;AAE9E,MAAM,iBAAiB,GAAG,iDAAiD,CAAC;AAE5E,0DAA0D;AAC1D,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAOrC;;GAEG;AACH,KAAK,UAAU,sBAAsB,CACnC,WAAmB,EACnB,OAAe;IAEf,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;IAEhE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,iBAAiB,IAAI,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAC;QAEH,YAAY,CAAC,SAAS,CAAC,CAAC;QAExB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2B,CAAC;QAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QAEtC,OAAO;YACL,SAAS;YACT,SAAS,EAAE,SAAS,IAAI,oBAAoB;SAC7C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAuBD;;;GAGG;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;IACnD,kBAAkB,EAAE,oBAAoB,EAAE,SAAS;IACnD,UAAU,EAAE,QAAQ,EAAE,eAAe;IACrC,UAAU,EAAE,SAAS,EAAE,OAAO;IAC9B,MAAM,EAAE,YAAY,EAAE,WAAW;IACjC,WAAW,EAAE,OAAO,EAAE,SAAS;IAC/B,SAAS,EAAE,SAAS;CACrB,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,oEAAoE;AACpE,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,WAAmB,EACnB,UAAqC,EAAE;IAEvC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC;IACzC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC;IACtD,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC;IACxD,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,KAAK,CAAC;IACzD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC;IAExC,2CAA2C;IAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,uBAAuB,IAAI,EAAE,EAAE,CAAC;QACxD,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,yBAAyB;IACzB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC3D,IAAI,IAAI,GAA2B,EAAE,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;QACvC,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,CAAC;QACrD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,KAAK,EAAE,GAAG;YACV,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAC/B,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,MAAM,eAAe,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC5D,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1C,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;QAE1C,8DAA8D;QAC9D,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,SAAS;YAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,KAAK,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS;YACjD,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe;gBAAE,SAAS;YAE5C,4CAA4C;YAC5C,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;gBAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;oBACpD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;oBACtC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;wBACjC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBAC7B,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,MAAM,KAAK,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7C,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACnB,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC1D,IAAI,MAAM,EAAE,CAAC;gBACX,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACnC,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QACF,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,wBAAwB;IACxB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAEjC,oDAAoD;QACpD,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QAE5D,2CAA2C;QAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,KAAK,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAEjD,wDAAwD;QACxD,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe;YAAE,SAAS;QAE5C,sDAAsD;QACtD,IAAI,eAAe,EAAE,CAAC;YACpB,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;gBAC9B,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC/C,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBAC9C,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,qBAAqB;wBAC3B,MAAM,EAAE,qBAAqB;wBAC7B,QAAQ,EAAE,MAAM;wBAChB,OAAO,EAAE,IAAI,OAAO,kCAAkC,SAAS,eAAe,KAAK,GAAG;wBACtF,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;wBAClC,IAAI,EAAE;4BACJ,UAAU,EAAE,OAAO;4BACnB,SAAS,EAAE,KAAK;4BAChB,SAAS;4BACT,eAAe,EAAE,WAAW;4BAC5B,eAAe,EAAE,EAAE;4BACnB,GAAG,CAAC,UAAU,IAAI,EAAE,eAAe,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC;yBAC7D;qBACF,CAAC,CAAC;oBACH,MAAM,CAAC,oCAAoC;gBAC7C,CAAC;YACH,CAAC;QACH,CAAC;QAED,yDAAyD;QACzD,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAClC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC,IAAI,EAAE,UAAqB,KAAK,OAAO,CAClD,CAAC;QACF,IAAI,cAAc;YAAE,SAAS;QAE7B,4DAA4D;QAC5D,IAAI,QAAQ,GAAG,QAAQ,CAAC;QACxB,IAAI,SAAS,GAAG,EAAE,CAAC;QAEnB,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,4BAA4B;YAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,OAAO;gBAAE,SAAS;YAE7D,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACtC,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACpB,QAAQ,GAAG,IAAI,CAAC;gBAChB,SAAS,GAAG,KAAK,CAAC;YACpB,CAAC;YACD,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM,CAAC,2CAA2C;QACpE,CAAC;QAED,IAAI,QAAQ,IAAI,CAAC,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,MAAe,CAAC,CAAC,CAAC,QAAiB,CAAC;YACtE,MAAM,eAAe,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAElD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAqB;gBAC3B,MAAM,EAAE,sBAAsB,QAAQ,EAAE;gBACxC,QAAQ;gBACR,OAAO,EAAE,IAAI,OAAO,QAAQ,QAAQ,uCAAuC,SAAS,GAAG;gBACvF,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;gBAClC,IAAI,EAAE;oBACJ,UAAU,EAAE,OAAO;oBACnB,SAAS,EAAE,SAAS;oBACpB,QAAQ,EAAE,QAAQ;oBAClB,eAAe,EAAE,aAAa;oBAC9B,eAAe;oBACf,GAAG,CAAC,UAAU,IAAI,EAAE,eAAe,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC;iBAC7D;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,SAAS,IAAK,CAAC,CAAC,IAAI,EAAE,eAA0B,IAAI,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC;IAE1D,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,KAAK;QACL,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KAC/B,CAAC;AACJ,CAAC;AAED,qBAAqB;AACrB,OAAO,EACL,WAAW,EACX,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,YAAY,EACZ,aAAa,EACb,oBAAoB,GACrB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "circle-ir-ai",
-  "version": "2.8.1",
+  "version": "2.8.3",
   "description": "LLM-enhanced SAST analysis built on circle-ir",
   "main": "dist/index.js",
   "module": "dist/index.js",