dependency-cruiser 13.1.0-beta-3 → 13.1.1

package/bin/depcruise-baseline.mjs

@@ -16,13 +16,13 @@ try {
     .description(
       "Writes all known violations of rules in a .dependency-cruiser.js to a file.\n" +
         "Alias for depcruise -c -T baseline -f .dependency-cruiser-known-violations.json [files-or-directories]\n" +
-        "Details: https://github.com/sverweij/dependency-cruiser"
+        "Details: https://github.com/sverweij/dependency-cruiser",
     )
     .option("-c, --config [file]", "read rules and options from [file]", true)
     .option(
       "-f, --output-to [file]",
       "file to write output to; - for stdout",
-      ".dependency-cruiser-known-violations.json"
+      ".dependency-cruiser-known-violations.json",
     )
     .version(meta.version)
     .arguments("<files-or-directories>")

package/bin/depcruise-fmt.mjs

@@ -15,55 +15,55 @@ try {
 
   program
     .description(
-      "Format dependency-cruiser output json.\nDetails: https://github.com/sverweij/dependency-cruiser"
+      "Format dependency-cruiser output json.\nDetails: https://github.com/sverweij/dependency-cruiser",
     )
     .option(
       "-f, --output-to <file>",
       "file to write output to; - for stdout",
-      "-"
+      "-",
     )
     .option(
       "-T, --output-type <type>",
       "output type; e.g. err, err-html, dot, ddot, archi, flat, baseline or json",
-      "err"
+      "err",
     )
     .option(
       "-I, --include-only <regex>",
-      "only include modules matching the regex"
+      "only include modules matching the regex",
     )
     .option(
       "-F, --focus <regex>",
-      "only include modules matching the regex + their direct neighbours"
+      "only include modules matching the regex + their direct neighbours",
     )
     .option(
       "--focus-depth <number>",
       "the depth to focus on - only applied when --focus is passed too. " +
         "1= direct neighbors, 2=neighbours of neighbours etc.",
-      1
+      1,
     )
     .option(
       "-R, --reaches <regex>",
-      "only include modules matching the regex + all modules that can reach it"
+      "only include modules matching the regex + all modules that can reach it",
     )
     .option(
       "-H, --highlight <regex>",
-      "mark modules matching the regex as 'highlighted'"
+      "mark modules matching the regex as 'highlighted'",
     )
     .option("-x, --exclude <regex>", "exclude all modules matching the regex")
     .option(
       "-S, --collapse <regex>",
       "collapse a to a folder depth by passing a single digit (e.g. 2). Or pass a " +
         "regex to collapse to a pattern E.g. ^packages/[^/]+/ would collapse to " +
-        "modules/ folders directly under your packages folder. "
+        "modules/ folders directly under your packages folder. ",
     )
     .option(
       "-P, --prefix <prefix>",
-      "prefix to use for links in the dot and err-html reporters"
+      "prefix to use for links in the dot and err-html reporters",
     )
     .option(
       "-e, --exit-code",
       "exit with a non-zero exit code when the input json contains error level " +
-        "dependency violations. Works for err, err-long and teamcity output types"
+        "dependency violations. Works for err, err-long and teamcity output types",
     )
     .version(meta.version)
     .arguments("<dependency-cruiser-json>")

package/bin/dependency-cruise.mjs

@@ -10,159 +10,159 @@ try {
 
   program
     .description(
-      `Validate and visualize dependencies.${EOL}Details: https://github.com/sverweij/dependency-cruiser`
+      `Validate and visualize dependencies.${EOL}Details: https://github.com/sverweij/dependency-cruiser`,
     )
     .option(
       "--init [oneshot]",
-      `set up dependency-cruiser for use in your environment (<<< recommended!)${EOL}${EOL}`
+      `set up dependency-cruiser for use in your environment (<<< recommended!)${EOL}${EOL}`,
     )
     .option(
       "-c, --config [file]",
       "read rules and options from [file] (e.g. .dependency-cruiser.js)",
-      true
+      true,
     )
     .addOption(
       new program.Option(
         "--no-config",
         "do not use a configuration file. " +
-          "Overrides any --config option set earlier"
-      ).hideHelp(true)
+          "Overrides any --config option set earlier",
+      ).hideHelp(true),
     )
     .option(
       "-T, --output-type <type>",
       "output type; e.g. err, err-html, dot, ddot, archi, flat, text or json",
-      "err"
+      "err",
     )
     .option("-m, --metrics", "calculate stability metrics", false)
     .addOption(new program.Option("--no-metrics").hideHelp(true))
     .option(
       "-f, --output-to <file>",
       "file to write output to; - for stdout",
-      "-"
+      "-",
     )
     .option(
       "-I, --include-only <regex>",
-      "only include modules matching the regex"
+      "only include modules matching the regex",
     )
     .option(
       "-F, --focus <regex>",
-      "only include modules matching the regex + their direct neighbours"
+      "only include modules matching the regex + their direct neighbours",
     )
     .option(
       "--focus-depth <number>",
       "the depth to focus on - only applied when --focus is passed too. " +
         "1= direct neighbors, 2=neighbours of neighbours etc.",
-      1
+      1,
     )
     .option(
       "-R, --reaches <regex>",
-      "only include modules matching the regex + all modules that can reach it"
+      "only include modules matching the regex + all modules that can reach it",
     )
     .option(
       "-H, --highlight <regex>",
-      "mark modules matching the regex as 'highlighted'"
+      "mark modules matching the regex as 'highlighted'",
     )
     .option("-x, --exclude <regex>", "exclude all modules matching the regex")
     .option(
       "-X, --do-not-follow <regex>",
-      "include modules matching the regex, but don't follow their dependencies"
+      "include modules matching the regex, but don't follow their dependencies",
     )
     .option(
       "--ignore-known [file]",
-      "ignore known violations as saved in [file] (default: .dependency-cruiser-known-violations.json)"
+      "ignore known violations as saved in [file] (default: .dependency-cruiser-known-violations.json)",
     )
     .addOption(new program.Option("--no-ignore-known").hideHelp(true))
     .addOption(
       new program.Option(
         "--ts-config [file]",
-        "use a TypeScript configuration (e.g. tsconfig.json) or it's JavaScript counterpart (e.g. jsconfig.json)"
-      ).hideHelp(true)
+        "use a TypeScript configuration (e.g. tsconfig.json) or it's JavaScript counterpart (e.g. jsconfig.json)",
+      ).hideHelp(true),
     )
     .addOption(
       new program.Option(
         "--webpack-config [file]",
-        "use a webpack configuration (e.g. webpack.config.js)"
-      ).hideHelp(true)
+        "use a webpack configuration (e.g. webpack.config.js)",
+      ).hideHelp(true),
     )
     .addOption(
       new program.Option(
         "--ts-pre-compilation-deps",
         "detect dependencies that only exist before typescript-to-javascript " +
-          "compilation (off by default)"
-      ).hideHelp(true)
+          "compilation (off by default)",
+      ).hideHelp(true),
     )
     .option(
       "-S, --collapse <regex>",
       "collapse a to a folder depth by passing a single digit (e.g. 2). When passed a " +
         'regex collapses to that pattern. E.g. "^packages/[^/]+/" would collapse to ' +
-        "modules/ folders directly under your packages folder. "
+        "modules/ folders directly under your packages folder. ",
     )
     .addOption(
       new program.Option(
         "-p, --progress [type]",
-        "show progress while dependency-cruiser is busy"
-      ).choices(["cli-feedback", "performance-log", "ndjson", "none"])
+        "show progress while dependency-cruiser is busy",
+      ).choices(["cli-feedback", "performance-log", "ndjson", "none"]),
     )
     .addOption(
       new program.Option("--no-progress", "Alias of --progress none").hideHelp(
-        true
-      )
+        true,
+      ),
     )
     .addOption(
       new program.Option(
         "-d, --max-depth <n>",
         "You probably want to use --collapse instead of --max-depth. " +
-          "(max-depth would limit the cruise depth; 0 <= n <= 99 (default: 0 - no limit))."
-      ).hideHelp(true)
+          "(max-depth would limit the cruise depth; 0 <= n <= 99 (default: 0 - no limit)).",
+      ).hideHelp(true),
     )
     .addOption(
       new program.Option(
         "-M, --module-systems <items>",
-        "list of module systems (default: amd, cjs, es6, tsd)"
-      ).hideHelp(true)
+        "list of module systems (default: amd, cjs, es6, tsd)",
+      ).hideHelp(true),
     )
     .option(
       "-P, --prefix <prefix>",
-      `prefix to use for links in the dot and err-html reporters${EOL}${EOL}`
+      `prefix to use for links in the dot and err-html reporters${EOL}${EOL}`,
     )
     .option(
       "-C, --cache [cache-directory]",
       "(experimental) use a cache to speed up execution. " +
-        "The directory defaults to node_modules/.cache/dependency-cruiser"
+        "The directory defaults to node_modules/.cache/dependency-cruiser",
     )
     .addOption(
       new program.Option(
         "--cache-strategy <strategy>",
-        "(experimental) strategy to use for detecting changed files in the cache."
-      ).choices(["metadata", "content"])
+        "(experimental) strategy to use for detecting changed files in the cache.",
+      ).choices(["metadata", "content"]),
     )
     .addOption(
       new program.Option(
         "--no-cache",
         "switch off caching. Overrides the 'cache' key in .dependency-cruiser.js " +
-          "and --cache options set earlier on the command line"
-      ).hideHelp(true)
+          "and --cache options set earlier on the command line",
+      ).hideHelp(true),
     )
     .addOption(
       new program.Option(
         "--preserve-symlinks",
-        "leave symlinks unchanged (off by default)"
-      ).hideHelp(true)
+        "leave symlinks unchanged (off by default)",
+      ).hideHelp(true),
     )
     .addOption(
       new program.Option(
         "-v, --validate [file]",
-        `alias for --config`
-      ).hideHelp(true)
+        `alias for --config`,
+      ).hideHelp(true),
     )
     .option(
       "-i, --info",
-      "shows what languages and extensions dependency-cruiser supports"
+      "shows what languages and extensions dependency-cruiser supports",
     )
     .addHelpText(
       "after",
       `${EOL}Other options:` +
-        `${EOL}  see https://github.com/sverweij/dependency-cruiser/blob/main/doc/cli.md${EOL}`
+        `${EOL}  see https://github.com/sverweij/dependency-cruiser/blob/main/doc/cli.md${EOL}`,
     )
     .version(meta.version)
     .arguments("[files-or-directories]")

package/configs/plugins/3d-reporter-plugin.js

@@ -75,7 +75,7 @@ function formatFileName(pFileName) {
 }
 function formatDependency(pFrom, pTo) {
   return `${formatFileName(pFrom)} ${figures.arrowRight}</br>${formatFileName(
-    pTo
+    pTo,
   )}`;
 }
 
@@ -100,14 +100,14 @@ function render3DThing(pCruiseResult) {
           source: pCurrentModule.source,
           target: pDependency.resolved,
           label: formatDependency(pCurrentModule.source, pDependency.resolved),
-        }))
+        })),
       ),
-    []
+    [],
   );
 
   return TEMPLATE.replace(/@@NODES@@/g, JSON.stringify(lNodes)).replace(
     /@@LINKS@@/g,
-    JSON.stringify(lLinks)
+    JSON.stringify(lLinks),
   );
 }
 

package/configs/plugins/stats-reporter-plugin.js

@@ -76,7 +76,7 @@ module.exports = (pCruiseResult) => ({
   output: JSON.stringify(
     samplePluginReporter(pCruiseResult),
     null,
-    DEFAULT_JSON_INDENT
+    DEFAULT_JSON_INDENT,
   ),
   exitCode: 0,
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dependency-cruiser",
-  "version": "13.1.0-beta-3",
+  "version": "13.1.1",
   "description": "Validate and visualize dependencies. With your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.",
   "keywords": [
     "static analysis",
@@ -108,8 +108,8 @@
     "depcruise:report:view": "node ./bin/dependency-cruise.mjs src bin test configs types --output-type err-html --config configs/.dependency-cruiser-show-metrics-config.mjs --output-to - | browser",
     "depcruise:focus": "node ./bin/dependency-cruise.mjs src bin test configs types tools --progress --no-cache --output-type text --focus",
     "depcruise:reaches": "node ./bin/dependency-cruise.mjs src bin test configs types tools --progress --no-cache --config configs/.dependency-cruiser-unlimited.mjs --output-type text --reaches",
-    "format": "prettier --loglevel warn --write \"src/**/*.js\" \"configs/**/*.js\" \"tools/**/*.mjs\" \"bin/*\" \"types/*.d.ts\" \"test/**/*.spec.{cjs,js}\" \"test/**/*.{spec,utl}.mjs\"",
-    "format:check": "prettier --loglevel warn --check \"src/**/*.js\" \"configs/**/*.js\" \"tools/**/*.mjs\" \"bin/*\" \"types/*.d.ts\" \"test/**/*.spec.{cjs,js}\" \"test/**/*.{spec,utl}.mjs\"",
+    "format": "prettier --log-level warn --write \"src/**/*.js\" \"configs/**/*.js\" \"tools/**/*.mjs\" \"bin/*\" \"types/*.d.ts\" \"test/**/*.spec.{cjs,js}\" \"test/**/*.{spec,utl}.mjs\"",
+    "format:check": "prettier --log-level warn --check \"src/**/*.js\" \"configs/**/*.js\" \"tools/**/*.mjs\" \"bin/*\" \"types/*.d.ts\" \"test/**/*.spec.{cjs,js}\" \"test/**/*.{spec,utl}.mjs\"",
     "lint": "npm-run-all --parallel --aggregate-output lint:eslint format:check lint:types",
     "lint:eslint": "eslint bin/dependency-cruise.mjs bin src test configs tools/**/*.mjs --cache --cache-location node_modules/.cache/eslint/",
     "lint:eslint:fix": "eslint --fix bin src test configs tools/**/*.mjs --cache --cache-location node_modules/.cache/eslint/",
@@ -148,7 +148,7 @@
     "version": "npm-run-all build depcruise:graph:doc scm:stage"
   },
   "dependencies": {
-    "acorn": "8.9.0",
+    "acorn": "8.10.0",
     "acorn-jsx": "5.3.2",
     "acorn-jsx-walk": "2.0.0",
     "acorn-loose": "8.3.0",
@@ -158,7 +158,7 @@
     "commander": "11.0.0",
     "enhanced-resolve": "5.15.0",
     "figures": "5.0.0",
-    "glob": "10.3.1",
+    "glob": "10.3.3",
     "handlebars": "4.7.7",
     "ignore": "5.2.4",
     "indent-string": "5.0.0",
@@ -169,29 +169,29 @@
     "prompts": "2.4.2",
     "rechoir": "^0.8.0",
     "safe-regex": "2.1.1",
-    "semver": "^7.5.3",
+    "semver": "^7.5.4",
     "semver-try-require": "6.2.3",
     "teamcity-service-messages": "0.1.14",
-    "tsconfig-paths-webpack-plugin": "4.0.1",
-    "watskeburt": "0.11.5",
+    "tsconfig-paths-webpack-plugin": "4.1.0",
+    "watskeburt": "0.11.6",
     "wrap-ansi": "8.1.0"
   },
   "devDependencies": {
-    "@babel/core": "7.22.5",
+    "@babel/core": "7.22.9",
     "@babel/plugin-transform-modules-commonjs": "7.22.5",
     "@babel/preset-typescript": "7.22.5",
-    "@swc/core": "1.3.67",
+    "@swc/core": "1.3.69",
     "@types/lodash": "4.14.195",
-    "@types/node": "20.3.3",
+    "@types/node": "20.4.2",
     "@types/prompts": "2.4.4",
-    "@typescript-eslint/eslint-plugin": "5.60.1",
-    "@typescript-eslint/parser": "5.60.1",
+    "@typescript-eslint/eslint-plugin": "6.0.0",
+    "@typescript-eslint/parser": "6.0.0",
     "@vue/compiler-sfc": "3.3.4",
     "c8": "8.0.0",
     "chai": "4.3.7",
     "chai-json-schema": "1.5.1",
     "coffeescript": "2.7.0",
-    "eslint": "8.44.0",
+    "eslint": "8.45.0",
     "eslint-config-moving-meadow": "4.0.2",
     "eslint-config-prettier": "8.8.0",
     "eslint-plugin-budapestian": "5.0.1",
@@ -207,7 +207,7 @@
     "mocha": "10.2.0",
     "normalize-newline": "4.1.0",
     "npm-run-all": "4.1.5",
-    "prettier": "2.8.8",
+    "prettier": "3.0.0",
     "proxyquire": "2.1.3",
     "shx": "0.3.4",
     "svelte": "3.59.1",
@@ -218,10 +218,10 @@
     "yarn": "1.22.19"
   },
   "overrides": {
-    "semver": "^7.5.3"
+    "semver": "^7.5.4"
   },
   "resolutions": {
-    "semver": "^7.5.3"
+    "semver": "^7.5.4"
   },
   "upem": {
     "policies": [

package/src/cli/index.mjs

@@ -81,16 +81,16 @@ async function extractBabelConfigOptions(pCruiseOptions) {
 }
 
 function setUpListener(pCruiseOptions) {
-  const lString2Listener = {
-    "cli-feedback": setUpCliFeedbackListener,
-    "performance-log": setUpPerformanceLogListener,
-    ndjson: setUpNDJSONListener,
-  };
+  const lString2Listener = new Map([
+    ["cli-feedback", setUpCliFeedbackListener],
+    ["performance-log", setUpPerformanceLogListener],
+    ["ndjson", setUpNDJSONListener],
+  ]);
   const lListenerID =
     pCruiseOptions?.progress ??
     pCruiseOptions?.ruleSet?.options?.progress?.type;
-  // eslint-disable-next-line security/detect-object-injection
-  const lListenerFunction = lString2Listener?.[lListenerID];
+
+  const lListenerFunction = lString2Listener.get(lListenerID);
   /* c8 ignore next 6 */
   if (Boolean(lListenerFunction)) {
     lListenerFunction(

package/src/cli/init-config/index.mjs

@@ -44,22 +44,27 @@ function getOneShotConfig(pOneShotConfigId) {
     babelConfig: getBabelConfigCandidates().shift(),
     specifyResolutionExtensions: true,
   };
-  /** @type {Record<import("./types").OneShotConfigIDType, import("./types").IPartialInitConfig>} */
-  const lOneShotConfigs = {
-    preset: {
-      configType: "preset",
-      preset: "dependency-cruiser/configs/recommended-strict",
-      ...lBaseConfig,
-    },
-    yes: lBaseConfig,
-    "experimental-scripts": {
-      updateManifest: fileExists(PACKAGE_MANIFEST),
-      ...lBaseConfig,
-    },
-  };
+  /** @type {Map<import("./types").OneShotConfigIDType, import("./types").IPartialInitConfig>} */
+  const lOneShotConfigs = new Map([
+    [
+      "preset",
+      {
+        configType: "preset",
+        preset: "dependency-cruiser/configs/recommended-strict",
+        ...lBaseConfig,
+      },
+    ],
+    ["yes", lBaseConfig],
+    [
+      "experimental-scripts",
+      {
+        updateManifest: fileExists(PACKAGE_MANIFEST),
+        ...lBaseConfig,
+      },
+    ],
+  ]);
 
-  // eslint-disable-next-line security/detect-object-injection
-  return lOneShotConfigs[pOneShotConfigId] || lBaseConfig;
+  return lOneShotConfigs.get(pOneShotConfigId) || lBaseConfig;
 }
 
 /**

package/src/cli/tools/svg-in-html-snippets/script.snippet.js

@@ -188,7 +188,7 @@ function nodeListToArray(pNodeList) {
 
 function resetNodesAndEdges() {
   nodeListToArray(document.querySelectorAll(".current")).forEach(
-    removeHighlight
+    removeHighlight,
   );
 }
 

package/src/config-utl/extract-babel-config.mjs

@@ -2,7 +2,6 @@ import { readFile } from "node:fs/promises";
 
 import { extname } from "node:path";
 import json5 from "json5";
-import has from "lodash/has.js";
 import tryImport from "semver-try-require";
 import meta from "../meta.js";
 import makeAbsolute from "./make-absolute.mjs";
@@ -54,23 +53,23 @@ async function getJSON5Config(pBabelConfigFileName) {
 }
 
 async function getConfig(pBabelConfigFileName) {
-  const lExtensionToParseFunction = {
-    ".js": getJSConfig,
-    ".cjs": getJSConfig,
-    ".mjs": getJSConfig,
-    "": getJSON5Config,
-    ".json": getJSON5Config,
-    ".json5": getJSON5Config,
-  };
+  const lExtensionToParseFunction = new Map([
+    [".js", getJSConfig],
+    [".cjs", getJSConfig],
+    [".mjs", getJSConfig],
+    ["", getJSON5Config],
+    [".json", getJSON5Config],
+    [".json5", getJSON5Config],
+  ]);
   const lExtension = extname(pBabelConfigFileName);
 
-  if (!has(lExtensionToParseFunction, lExtension)) {
+  if (!lExtensionToParseFunction.has(lExtension)) {
     throw new Error(
       `${`The babel config '${pBabelConfigFileName}' is in a format ('${lExtension}')\n`}         dependency-cruiser doesn't support yet.\n`
     );
   }
-  // eslint-disable-next-line security/detect-object-injection, no-return-await
-  return await lExtensionToParseFunction[lExtension](pBabelConfigFileName);
+  // eslint-disable-next-line no-return-await
+  return await lExtensionToParseFunction.get(lExtension)(pBabelConfigFileName);
 }
 
 /**

package/src/extract/resolve/determine-dependency-types.mjs

@@ -20,12 +20,12 @@ function dependencyKeyHasModuleName(
     has(pPackageDependencies[pKey], join(pPrefix, pModuleName));
 }
 
-const NPM2DEP_TYPE = {
-  dependencies: "npm",
-  devDependencies: "npm-dev",
-  optionalDependencies: "npm-optional",
-  peerDependencies: "npm-peer",
-};
+const NPM2DEP_TYPE = new Map([
+  ["dependencies", "npm"],
+  ["devDependencies", "npm-dev"],
+  ["optionalDependencies", "npm-optional"],
+  ["peerDependencies", "npm-peer"],
+]);
 
 function findModuleInPackageDependencies(
   pPackageDependencies,
@@ -36,7 +36,7 @@ function findModuleInPackageDependencies(
     .filter(
       dependencyKeyHasModuleName(pPackageDependencies, pModuleName, pPrefix)
     )
-    .map((pKey) => NPM2DEP_TYPE[pKey] || "npm-no-pkg");
+    .map((pKey) => NPM2DEP_TYPE.get(pKey) || "npm-no-pkg");
 }
 
 function needToLookAtTypesToo(pResolverModulePaths) {

package/src/extract/resolve/index.mjs

@@ -74,14 +74,14 @@ function resolveYarnVirtual(pPath) {
  * @returns {string}
  */
 function getTypeScriptExtensionsToTry(pJavaScriptExtension) {
-  const lJS2TSMap = {
-    ".js": [".ts", ".tsx", ".d.ts"],
-    ".jsx": [".ts", ".tsx", ".d.ts"],
-    ".cjs": [".cts", ".d.cts"],
-    ".mjs": [".mts", ".d.mts"],
-  };
-  // eslint-disable-next-line security/detect-object-injection
-  return lJS2TSMap[pJavaScriptExtension] ?? [];
+  const lJS2TSMap = new Map([
+    [".js", [".ts", ".tsx", ".d.ts"]],
+    [".jsx", [".ts", ".tsx", ".d.ts"]],
+    [".cjs", [".cts", ".d.cts"]],
+    [".mjs", [".mts", ".d.mts"]],
+  ]);
+
+  return lJS2TSMap.get(pJavaScriptExtension) ?? [];
 }
 
 // eslint-disable-next-line max-lines-per-function

package/src/extract/resolve/resolve-amd.mjs

@@ -4,6 +4,14 @@ import { builtinModules } from "node:module";
 import memoize from "lodash/memoize.js";
 import pathToPosix from "../../utl/path-to-posix.mjs";
 
+// builtinModules does not expose all builtin modules for #reasons -
+// see https://github.com/nodejs/node/issues/42785. In stead we could use
+// isBuiltin, but that is not available in node 16.14, the lowest version
+// of node dependency-cruiser currently supports. So we add the missing
+// modules here.
+// b.t.w. code is duplicated in resolve-cjs.mjs
+const REALLY_BUILTIN_MODULES = builtinModules.concat(["test", "node:test"]);
+
 const fileExists = memoize((pFile) => {
   try {
     accessSync(pFile, R_OK);
@@ -16,7 +24,7 @@ const fileExists = memoize((pFile) => {
 
 function guessPath(pBaseDirectory, pFileDirectory, pStrippedModuleName) {
   return pathToPosix(
-    relative(pBaseDirectory, join(pFileDirectory, pStrippedModuleName))
+    relative(pBaseDirectory, join(pFileDirectory, pStrippedModuleName)),
   );
 }
 
@@ -27,8 +35,8 @@ function guessLikelyPath(pBaseDirectory, pFileDirectory, pStrippedModuleName) {
         guessPath(
           pBaseDirectory,
           pFileDirectory,
-          `${pStrippedModuleName}${pExtension}`
-        )
+          `${pStrippedModuleName}${pExtension}`,
+        ),
       )
       .find(fileExists) || pStrippedModuleName
   );
@@ -37,7 +45,7 @@ function guessLikelyPath(pBaseDirectory, pFileDirectory, pStrippedModuleName) {
 export function resolveAMD(
   pStrippedModuleName,
   pBaseDirectory,
-  pFileDirectory
+  pFileDirectory,
 ) {
   // lookups:
   // - [x] could be relative in the end (implemented)
@@ -48,15 +56,15 @@ export function resolveAMD(
   const lResolvedPath = guessLikelyPath(
     pBaseDirectory,
     pFileDirectory,
-    pStrippedModuleName
+    pStrippedModuleName,
   );
 
   return {
     resolved: lResolvedPath,
-    coreModule: builtinModules.includes(pStrippedModuleName),
+    coreModule: REALLY_BUILTIN_MODULES.includes(pStrippedModuleName),
     followable: fileExists(lResolvedPath) && lResolvedPath.endsWith(".js"),
     couldNotResolve:
-      !builtinModules.includes(pStrippedModuleName) &&
+      !REALLY_BUILTIN_MODULES.includes(pStrippedModuleName) &&
       !fileExists(lResolvedPath),
   };
 }

package/src/extract/resolve/resolve-cjs.mjs

@@ -4,27 +4,35 @@ import pathToPosix from "../../utl/path-to-posix.mjs";
 import { isFollowable } from "./module-classifiers.mjs";
 import { resolve } from "./resolve.mjs";
 
+// builtinModules does not expose all builtin modules for #reasons -
+// see https://github.com/nodejs/node/issues/42785. In stead we could use
+// isBuiltin, but that is not available in node 16.14, the lowest version
+// of node dependency-cruiser currently supports. So we add the missing
+// modules here.
+// b.t.w. code is duplicated in resolve-amd.mjs
+const REALLY_BUILTIN_MODULES = builtinModules.concat(["test", "node:test"]);
+
 function addResolutionAttributes(
   pBaseDirectory,
   pModuleName,
   pFileDirectory,
-  pResolveOptions
+  pResolveOptions,
 ) {
   let lReturnValue = {};
 
-  if (builtinModules.includes(pModuleName)) {
+  if (REALLY_BUILTIN_MODULES.includes(pModuleName)) {
     lReturnValue.coreModule = true;
   } else {
     try {
       lReturnValue.resolved = pathToPosix(
         relative(
           pBaseDirectory,
-          resolve(pModuleName, pFileDirectory, pResolveOptions)
-        )
+          resolve(pModuleName, pFileDirectory, pResolveOptions),
+        ),
       );
       lReturnValue.followable = isFollowable(
         lReturnValue.resolved,
-        pResolveOptions
+        pResolveOptions,
       );
     } catch (pError) {
       lReturnValue.couldNotResolve = true;
@@ -40,7 +48,7 @@ export default function resolveCommonJS(
   pStrippedModuleName,
   pBaseDirectory,
   pFileDirectory,
-  pResolveOptions
+  pResolveOptions,
 ) {
   return {
     resolved: pStrippedModuleName,
@@ -51,7 +59,7 @@ export default function resolveCommonJS(
       pBaseDirectory,
       pStrippedModuleName,
       pFileDirectory,
-      pResolveOptions
+      pResolveOptions,
     ),
   };
 }

package/src/extract/transpile/index.mjs

@@ -1,4 +1,3 @@
-/* eslint security/detect-object-injection : 0*/
 import javaScriptWrap from "./javascript-wrap.mjs";
 import typeScriptWrap from "./typescript-wrap.mjs";
 import liveScriptWrap from "./livescript-wrap.mjs";
@@ -14,27 +13,27 @@ const coffeeVanillaWrap = coffeeWrap();
 const litCoffeeWrap = coffeeWrap(true);
 const svelteWrap = svelteDingus(typeScriptVanillaWrap);
 
-export const EXTENSION2WRAPPER = {
-  ".js": javaScriptWrap,
-  ".cjs": javaScriptWrap,
-  ".mjs": javaScriptWrap,
-  ".jsx": javaScriptWrap,
-  ".ts": typeScriptVanillaWrap,
-  ".tsx": typeScriptTsxWrap,
-  ".d.ts": typeScriptVanillaWrap,
-  ".cts": typeScriptVanillaWrap,
-  ".d.cts": typeScriptVanillaWrap,
-  ".mts": typeScriptESMWrap,
-  ".d.mts": typeScriptESMWrap,
-  ".vue": vueWrap,
-  ".svelte": svelteWrap,
-  ".ls": liveScriptWrap,
-  ".coffee": coffeeVanillaWrap,
-  ".litcoffee": litCoffeeWrap,
-  ".coffee.md": litCoffeeWrap,
-  ".csx": coffeeVanillaWrap,
-  ".cjsx": coffeeVanillaWrap,
-};
+export const EXTENSION2WRAPPER = new Map([
+  [".js", javaScriptWrap],
+  [".cjs", javaScriptWrap],
+  [".mjs", javaScriptWrap],
+  [".jsx", javaScriptWrap],
+  [".ts", typeScriptVanillaWrap],
+  [".tsx", typeScriptTsxWrap],
+  [".d.ts", typeScriptVanillaWrap],
+  [".cts", typeScriptVanillaWrap],
+  [".d.cts", typeScriptVanillaWrap],
+  [".mts", typeScriptESMWrap],
+  [".d.mts", typeScriptESMWrap],
+  [".vue", vueWrap],
+  [".svelte", svelteWrap],
+  [".ls", liveScriptWrap],
+  [".coffee", coffeeVanillaWrap],
+  [".litcoffee", litCoffeeWrap],
+  [".coffee.md", litCoffeeWrap],
+  [".csx", coffeeVanillaWrap],
+  [".cjsx", coffeeVanillaWrap],
+]);
 
 const BABELEABLE_EXTENSIONS = [
   ".js",
@@ -69,7 +68,7 @@ export function getWrapper(pExtension, pTranspilerOptions) {
     return babelWrap;
   }
 
-  return EXTENSION2WRAPPER[pExtension] || javaScriptWrap;
+  return EXTENSION2WRAPPER.get(pExtension) || javaScriptWrap;
 }
 
 /**

package/src/extract/transpile/meta.mjs

@@ -28,29 +28,31 @@ const TRANSPILER2AVAILABLE = {
   ),
 };
 
-export const EXTENSION2AVAILABLE = {
-  ".js": TRANSPILER2AVAILABLE.javascript,
-  ".cjs": TRANSPILER2AVAILABLE.javascript,
-  ".mjs": TRANSPILER2AVAILABLE.javascript,
-  ".jsx": TRANSPILER2AVAILABLE.javascript,
-  ".ts": TRANSPILER2AVAILABLE.typescript,
-  ".tsx": TRANSPILER2AVAILABLE.typescript,
-  ".d.ts": TRANSPILER2AVAILABLE.typescript,
-  ".cts": TRANSPILER2AVAILABLE.typescript,
-  ".d.cts": TRANSPILER2AVAILABLE.typescript,
-  ".mts": TRANSPILER2AVAILABLE.typescript,
-  ".d.mts": TRANSPILER2AVAILABLE.typescript,
-  ".vue":
+export const EXTENSION2AVAILABLE = new Map([
+  [".js", TRANSPILER2AVAILABLE.javascript],
+  [".cjs", TRANSPILER2AVAILABLE.javascript],
+  [".mjs", TRANSPILER2AVAILABLE.javascript],
+  [".jsx", TRANSPILER2AVAILABLE.javascript],
+  [".ts", TRANSPILER2AVAILABLE.typescript],
+  [".tsx", TRANSPILER2AVAILABLE.typescript],
+  [".d.ts", TRANSPILER2AVAILABLE.typescript],
+  [".cts", TRANSPILER2AVAILABLE.typescript],
+  [".d.cts", TRANSPILER2AVAILABLE.typescript],
+  [".mts", TRANSPILER2AVAILABLE.typescript],
+  [".d.mts", TRANSPILER2AVAILABLE.typescript],
+  [
+    ".vue",
     TRANSPILER2AVAILABLE["vue-template-compiler"] ||
-    TRANSPILER2AVAILABLE["@vue/compiler-sfc"],
-  ".svelte": TRANSPILER2AVAILABLE.svelte,
-  ".ls": TRANSPILER2AVAILABLE.livescript,
-  ".coffee": gotCoffee(),
-  ".litcoffee": gotCoffee(),
-  ".coffee.md": gotCoffee(),
-  ".csx": gotCoffee(),
-  ".cjsx": gotCoffee(),
-};
+      TRANSPILER2AVAILABLE["@vue/compiler-sfc"],
+  ],
+  [".svelte", TRANSPILER2AVAILABLE.svelte],
+  [".ls", TRANSPILER2AVAILABLE.livescript],
+  [".coffee", gotCoffee()],
+  [".litcoffee", gotCoffee()],
+  [".coffee.md", gotCoffee()],
+  [".csx", gotCoffee()],
+  [".cjsx", gotCoffee()],
+]);
 
 const EXTENSIONS_PER_PARSER = {
   swc: [".js", ".cjs", ".mjs", ".jsx", ".ts", ".tsx", ".d.ts"],
@@ -60,7 +62,7 @@ const EXTENSIONS_PER_PARSER = {
 
 function extensionIsAvailable(pExtension) {
   return (
-    EXTENSION2AVAILABLE[pExtension] ||
+    EXTENSION2AVAILABLE.get(pExtension) ||
     // should eventually also check whether swc is enabled as a parser?
     (TRANSPILER2AVAILABLE.swc && EXTENSIONS_PER_PARSER.swc.includes(pExtension))
   );
@@ -72,7 +74,7 @@ function extensionIsAvailable(pExtension) {
  *
  * @type {IAvailableExtension[]}
  */
-export const allExtensions = Object.keys(EXTENSION2AVAILABLE).map(
+export const allExtensions = Array.from(EXTENSION2AVAILABLE.keys()).map(
   (pExtension) => ({
     extension: pExtension,
     available: extensionIsAvailable(pExtension),
@@ -85,8 +87,9 @@ export const allExtensions = Object.keys(EXTENSION2AVAILABLE).map(
  *
  * @type {string[]}
  */
-export const scannableExtensions =
-  Object.keys(EXTENSION2AVAILABLE).filter(extensionIsAvailable);
+export const scannableExtensions = Array.from(
+  EXTENSION2AVAILABLE.keys()
+).filter(extensionIsAvailable);
 
 /**
  * returns an array of supported transpilers, with for each transpiler:

package/src/graph-utl/compare.mjs

@@ -1,13 +1,13 @@
+/* eslint-disable no-magic-numbers */
 function severity2number(pSeverity) {
-  const lSeverity2Number = {
-    error: 1,
-    warn: 2,
-    info: 3,
-    ignore: 4,
-  };
+  const lSeverity2Number = new Map([
+    ["error", 1],
+    ["warn", 2],
+    ["info", 3],
+    ["ignore", 4],
+  ]);
 
-  // eslint-disable-next-line security/detect-object-injection
-  return lSeverity2Number[pSeverity] || -1;
+  return lSeverity2Number.get(pSeverity) || -1;
 }
 
 export function severities(pFirstSeverity, pSecondSeverity) {

package/src/meta.js

@@ -1,7 +1,7 @@
 /* generated - don't edit */
 
 module.exports = {
-  version: "13.1.0-beta-3",
+  version: "13.1.1",
   engines: {
     node: "^16.14||>=18",
   },

package/src/report/azure-devops.mjs

@@ -8,7 +8,7 @@ const SEVERITY2VSO_TYPE = new Map([
   // "error" | "warn" | "info" | "ignore"
   ["error", "error"],
   ["warn", "warning"],
-  // azure devops doesn't seem to understand 'info'. We still want to
+  // azure devops doesn't seem to know 'info'. We still want to
   // show them, though, hence:
   ["info", "warning"],
 ]);
@@ -30,7 +30,6 @@ function formatModuleViolation(pViolation) {
 }
 
 /**
- *
  * @param {import("../../types/violations.js").IViolation} pViolation
  * @returns {string}
  */
@@ -93,28 +92,18 @@ function formatViolation(pViolation) {
 }
 
 /**
- *
  * @param {number} pNumberOfErrors
- * @param {number} pNumberOfWarns
- * @param {number} pNumberOfInfos
  *
- * @returns
+ * @returns {string}
  */
-function formatResultStatus(
-  pNumberOfErrors,
-  pNumberOfWarns,
-  pNumberOfInfos,
-  pNumberOfIgnored
-) {
-  if (pNumberOfErrors > 0) {
-    return "Failed";
-  }
-  if (pNumberOfWarns + pNumberOfInfos + pNumberOfIgnored > 0) {
-    return "SucceededWithIssues";
-  }
-  return "Succeeded";
+function formatResultStatus(pNumberOfErrors) {
+  return pNumberOfErrors > 0 ? "Failed" : "Succeeded";
 }
 
+/**
+ * @param {import("../../types/cruise-result.js").ISummary} pMeta
+ * @returns {string}
+ */
 function formatMeta(pMeta) {
   const lWarningCount = pMeta.warn + pMeta.info;
   const lError = `${pMeta.error} error`;
@@ -129,7 +118,6 @@ function sumMeta(pMeta) {
 }
 
 /**
- *
  * @param {number} pNumberOfIgnored
  * @returns {string}
  */
@@ -140,8 +128,8 @@ function formatIgnoreWarning(pNumberOfIgnored) {
 }
 
 /**
- *
  * @param {import("../../types/cruise-result.js").ISummary} pSummary
+ * @returns {string}
  */
 function formatResultMessage(pSummary) {
   let lStatSummary = `${pSummary.totalCruised} modules, ${
@@ -160,15 +148,12 @@ function formatResultMessage(pSummary) {
 }
 
 /**
- *
  * @param {import("../../types/cruise-result.js").ISummary} pSummary
+ * @returns {string}
  */
 function formatSummary(pSummary) {
   return `##vso[task.complete result=${formatResultStatus(
-    pSummary.error,
-    pSummary.warn,
-    pSummary.info,
-    pSummary?.ignore ?? 0
+    pSummary.error
   )};]${formatResultMessage(pSummary)}${EOL}`;
 }
 

package/src/report/dot/index.mjs

@@ -9,12 +9,12 @@ import prepareFlatLevel from "./prepare-flat-level.mjs";
 
 await import("./dot.template.js");
 
-const GRANULARITY2FUNCTION = {
-  module: prepareCustomLevel,
-  folder: prepareFolderLevel,
-  custom: prepareCustomLevel,
-  flat: prepareFlatLevel,
-};
+const GRANULARITY2FUNCTION = new Map([
+  ["module", prepareCustomLevel],
+  ["folder", prepareFolderLevel],
+  ["custom", prepareCustomLevel],
+  ["flat", prepareFlatLevel],
+]);
 
 function report(
   pResults,
@@ -34,8 +34,8 @@ function report(
     nodeAttrs: moduleUtl.attributizeObject(lTheme.node || {}),
     edgeAttrs: moduleUtl.attributizeObject(lTheme.edge || {}),
     clustersHaveOwnNode: "folder" === pGranularity,
-    // eslint-disable-next-line security/detect-object-injection
-    modules: (GRANULARITY2FUNCTION[pGranularity] || prepareCustomLevel)(
+
+    modules: (GRANULARITY2FUNCTION.get(pGranularity) || prepareCustomLevel)(
       lResults,
       lTheme,
       collapsePattern,
@@ -44,12 +44,12 @@ function report(
   });
 }
 
-const GRANULARITY2REPORTER_OPTIONS = {
-  module: "summary.optionsUsed.reporterOptions.dot",
-  folder: "summary.optionsUsed.reporterOptions.ddot",
-  custom: "summary.optionsUsed.reporterOptions.archi",
-  flat: "summary.optionsUsed.reporterOptions.flat",
-};
+const GRANULARITY2REPORTER_OPTIONS = new Map([
+  ["module", "summary.optionsUsed.reporterOptions.dot"],
+  ["folder", "summary.optionsUsed.reporterOptions.ddot"],
+  ["custom", "summary.optionsUsed.reporterOptions.archi"],
+  ["flat", "summary.optionsUsed.reporterOptions.flat"],
+]);
 
 function pryReporterOptionsFromResults(pGranularity, pResults) {
   const lFallbackReporterOptions = get(
@@ -59,8 +59,7 @@ function pryReporterOptionsFromResults(pGranularity, pResults) {
 
   return get(
     pResults,
-    // eslint-disable-next-line security/detect-object-injection
-    GRANULARITY2REPORTER_OPTIONS[pGranularity],
+    GRANULARITY2REPORTER_OPTIONS.get(pGranularity),
     lFallbackReporterOptions
   );
 }

package/src/report/error.mjs

@@ -8,12 +8,12 @@ import {
   formatViolation as _formatViolation,
 } from "./utl/index.mjs";
 
-const SEVERITY2CHALK = {
-  error: chalk.red,
-  warn: chalk.yellow,
-  info: chalk.cyan,
-  ignore: chalk.gray,
-};
+const SEVERITY2CHALK = new Map([
+  ["error", chalk.red],
+  ["warn", chalk.yellow],
+  ["info", chalk.cyan],
+  ["ignore", chalk.gray],
+]);
 
 const EXTRA_PATH_INFORMATION_INDENT = 6;
 
@@ -74,9 +74,9 @@ function formatViolation(pViolation) {
   );
 
   return (
-    `${SEVERITY2CHALK[pViolation.rule.severity](pViolation.rule.severity)} ${
-      pViolation.rule.name
-    }: ${lFormattedViolators}` +
+    `${SEVERITY2CHALK.get(pViolation.rule.severity)(
+      pViolation.rule.severity
+    )} ${pViolation.rule.name}: ${lFormattedViolators}` +
     `${
       pViolation.comment
         ? `${EOL}${wrapAndIndent(chalk.dim(pViolation.comment))}${EOL}`

package/src/report/markdown.mjs

@@ -30,22 +30,22 @@ const REPORT_DEFAULTS = {
 };
 
 /**
- *
  * @param {import("../../types/shared-types.js").SeverityType} pSeverity
+ * @returns {string}
  */
 function severity2Icon(pSeverity) {
-  const lSeverity2IconMap = {
-    error: ":exclamation:",
-    info: ":grey_exclamation:",
-    ignore: ":see_no_evil:",
-  };
-  // eslint-disable-next-line security/detect-object-injection
-  return lSeverity2IconMap[pSeverity] || ":warning:";
+  const lSeverity2IconMap = new Map([
+    ["error", ":exclamation:"],
+    ["info", ":grey_exclamation:"],
+    ["ignore", ":see_no_evil:"],
+  ]);
+
+  return lSeverity2IconMap.get(pSeverity) || ":warning:";
 }
 
 /**
- *
  * @param {import("../../types/cruise-result.js").ISummary} pSummary
+ * @return {string}
  */
 function formatStatsSummary(pSummary) {
   const lSpacerLength = 4;
@@ -54,7 +54,6 @@ function formatStatsSummary(pSummary) {
 }
 
 /**
- *
  * @param {import("../../types/cruise-result.js").ICruiseResult} pCruiseResult
  * @param {Boolean} pIncludeIgnoredInSummary
  * @return {string}
@@ -108,6 +107,7 @@ function formatViolations(pViolations, pIncludeIgnoredInDetails) {
  *
  * @param {import("../../types/cruise-result.js").ICruiseResult} pResults
  * @param {import("../../types/reporter-options.js").IMarkdownReporterOptions} pOptions
+ * @returns {string}
  */
 // eslint-disable-next-line complexity, max-statements
 function report(pResults, pOptions) {

package/src/report/teamcity.mjs

@@ -2,15 +2,14 @@ import tsm from "teamcity-service-messages";
 import { formatPercentage, formatViolation } from "./utl/index.mjs";
 
 const CATEGORY = "dependency-cruiser";
-const SEVERITY2TEAMCITY_SEVERITY = {
-  error: "ERROR",
-  warn: "WARNING",
-  info: "INFO",
-};
+const SEVERITY2TEAMCITY_SEVERITY = new Map([
+  ["error", "ERROR"],
+  ["warn", "WARNING"],
+  ["info", "INFO"],
+]);
 
 function severity2teamcitySeverity(pSeverity) {
-  // eslint-disable-next-line security/detect-object-injection
-  return SEVERITY2TEAMCITY_SEVERITY[pSeverity] || "INFO";
+  return SEVERITY2TEAMCITY_SEVERITY.get(pSeverity) || "INFO";
 }
 
 function reportRules(pRules, pViolations) {

package/types/dependency-cruiser.d.ts

@@ -91,7 +91,7 @@ export function cruise(
   pFileAndDirectoryArray: string[],
   pCruiseOptions?: ICruiseOptions,
   pResolveOptions?: IResolveOptions,
-  pTranspileOptions?: ITranspileOptions
+  pTranspileOptions?: ITranspileOptions,
 ): Promise<IReporterOutput>;
 
 /**
@@ -103,7 +103,7 @@ export function cruise(
  */
 export function format(
   pResult: ICruiseResult,
-  pFormatOptions: IFormatOptions
+  pFormatOptions: IFormatOptions,
 ): Promise<IReporterOutput>;
 
 /**

package/types/extract-babel-config.d.ts

@@ -11,7 +11,7 @@
  *         when dependency-cruiser can't yet process it
  */
 export default function extractBabelConfig(
-  pBabelConfigFileName: string
+  pBabelConfigFileName: string,
 ): Promise<object>;
 
 // regarding the rather unspecific _object_ type - this is what's

package/types/extract-depcruise-config.d.ts

@@ -20,5 +20,5 @@ import { ICruiseOptions } from "./options";
 export default function extractDepcruiseConfig(
   pConfigFileName: string,
   pAlreadyVisited?: Set<string>,
-  pBaseDirectory?: string
+  pBaseDirectory?: string,
 ): Promise<ICruiseOptions>;

package/types/extract-ts-config.d.ts

@@ -12,5 +12,5 @@ import { ParsedCommandLine } from "typescript";
  * @throws {TypeError} when the tsconfig is unreadable
  */
 export default function extractTSConfig(
-  pTSConfigFileName: string
+  pTSConfigFileName: string,
 ): ParsedCommandLine;

package/types/extract-webpack-resolve-config.d.ts

@@ -14,5 +14,5 @@
 export default function extractWebpackResolveConfig(
   pWebpackConfigFilename: string,
   pEnvironment?: string,
-  pArguments?: string | any
+  pArguments?: any, // string or a list of arguments
 ): Promise<any>;

package/types/shared-types.d.ts

@@ -2,6 +2,10 @@
 export type ModuleSystemType = "cjs" | "amd" | "es6" | "tsd";
 
 // cruise options, dependency-cruiser
+/* as we don't care about types beyond code completion, we ignore the
+ * eslint warning that the 'string' type is redundant here.
+ */
+/* eslint-disable @typescript-eslint/no-redundant-type-constituents */
 export type OutputType =
   | "json"
   | "html"