depguard-cli 1.1.1

package/dist/cli.js

@@ -0,0 +1,148 @@
+#!/usr/bin/env node
+import { parseArgs } from 'node:util';
+import { audit } from './audit.js';
+import { search } from './search.js';
+import { score } from './scorer.js';
+import { shouldUse } from './advisor.js';
+const { values, positionals } = parseArgs({
+    allowPositionals: true,
+    options: {
+        'target-license': { type: 'string', default: 'MIT' },
+        'threshold': { type: 'string', default: '60' },
+        'limit': { type: 'string', default: '10' },
+        'json': { type: 'boolean', default: false },
+        'mcp': { type: 'boolean', default: false },
+        'help': { type: 'boolean', short: 'h', default: false },
+    },
+});
+// Launch MCP server when --mcp flag is passed
+if (values.mcp) {
+    void import('./mcp.js');
+}
+else {
+    const command = positionals[0];
+    if (values.help || !command) {
+        console.log(`
+depguard — Audit npm packages for security, maintenance, and license compatibility
+
+Usage:
+  depguard <command> <args> [options]
+
+Commands:
+  audit <package>          Full audit report for a package
+  search <keywords...>     Search npm for packages by keywords
+  score <package>          Score a package 0-100
+  should-use <intent...>   Recommend install vs write-from-scratch
+
+Options:
+  --target-license <id>    Target project license (default: MIT)
+  --threshold <n>          Score threshold for should-use (default: 60)
+  --limit <n>              Max results for search (default: 10)
+  --json                   Output as JSON
+  --mcp                    Start MCP server (JSON-RPC over stdio)
+  -h, --help               Show this help
+`);
+        process.exit(0);
+    }
+    function output(data, json) {
+        if (json) {
+            console.log(JSON.stringify(data, null, 2));
+        }
+        else if (typeof data === 'object' && data !== null) {
+            printFormatted(data);
+        }
+    }
+    function printFormatted(obj, indent = 0) {
+        const pad = '  '.repeat(indent);
+        for (const [key, val] of Object.entries(obj)) {
+            if (Array.isArray(val)) {
+                if (val.length === 0) {
+                    console.log(`${pad}${key}: (none)`);
+                }
+                else if (typeof val[0] === 'object') {
+                    console.log(`${pad}${key}:`);
+                    for (const item of val) {
+                        printFormatted(item, indent + 1);
+                        console.log();
+                    }
+                }
+                else {
+                    console.log(`${pad}${key}: ${val.join(', ')}`);
+                }
+            }
+            else if (typeof val === 'object' && val !== null) {
+                console.log(`${pad}${key}:`);
+                printFormatted(val, indent + 1);
+            }
+            else {
+                console.log(`${pad}${key}: ${val}`);
+            }
+        }
+    }
+    async function main() {
+        const targetLicense = values['target-license'] ?? 'MIT';
+        const json = values.json ?? false;
+        const limit = parseInt(values.limit ?? '10', 10);
+        const threshold = parseInt(values.threshold ?? '60', 10);
+        switch (command) {
+            case 'audit': {
+                const name = positionals[1];
+                if (!name) {
+                    console.error('Usage: depguard audit <package>');
+                    process.exit(1);
+                }
+                const report = await audit(name, targetLicense);
+                output(report, json);
+                break;
+            }
+            case 'search': {
+                const keywords = positionals.slice(1).join(' ');
+                if (!keywords) {
+                    console.error('Usage: depguard search <keywords...>');
+                    process.exit(1);
+                }
+                const results = await search(keywords, { limit });
+                if (json) {
+                    output(results, true);
+                }
+                else {
+                    for (const entry of results) {
+                        console.log(`  ${String(entry.score).padStart(3)}/100  ${entry.name}@${entry.version}`);
+                        if (entry.description)
+                            console.log(`         ${entry.description}`);
+                        console.log();
+                    }
+                }
+                break;
+            }
+            case 'score': {
+                const name = positionals[1];
+                if (!name) {
+                    console.error('Usage: depguard score <package>');
+                    process.exit(1);
+                }
+                const result = await score(name, { targetLicense });
+                output(result, json);
+                break;
+            }
+            case 'should-use': {
+                const intent = positionals.slice(1).join(' ');
+                if (!intent) {
+                    console.error('Usage: depguard should-use <intent...>');
+                    process.exit(1);
+                }
+                const rec = await shouldUse(intent, { threshold, targetLicense, limit: 5 });
+                output(rec, json);
+                break;
+            }
+            default:
+                console.error(`Unknown command: ${command}. Use: audit, search, score, should-use`);
+                process.exit(1);
+        }
+    }
+    main().catch(err => {
+        console.error(err.message);
+        process.exit(1);
+    });
+} // end else --mcp
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAExC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;IACxC,gBAAgB,EAAE,IAAI;IACtB,OAAO,EAAE;QACP,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE;QACpD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE;QAC9C,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE;QAC1C,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;QAC3C,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;QAC1C,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;KACxD;CACF,CAAC,CAAA;AAEF,8CAA8C;AAC9C,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;IACf,KAAK,MAAM,CAAC,UAAU,CAAC,CAAA;AACzB,CAAC;KAAM,CAAC;IAER,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;IAE9B,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;CAmBb,CAAC,CAAA;QACA,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,SAAS,MAAM,CAAC,IAAa,EAAE,IAAa;QAC1C,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;QAC5C,CAAC;aAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACrD,cAAc,CAAC,IAA+B,CAAC,CAAA;QACjD,CAAC;IACH,CAAC;IAED,SAAS,cAAc,CAAC,GAA4B,EAAE,MAAM,GAAG,CAAC;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACrB,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,GAAG,UAAU,CAAC,CAAA;gBACrC,CAAC;qBAAM,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;oBACtC,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,CAAA;oBAC5B,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;wBACvB,cAAc,CAAC,IAA+B,EAAE,MAAM,GAAG,CAAC,CAAC,CAAA;wBAC3D,OAAO,CAAC,GAAG,EAAE,CAAA;oBACf,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,GAAG,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBAChD,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACnD,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,CAAA;gBAC5B,cAAc,CAAC,GAA8B,EAAE,MAAM,GAAG,CAAC,CAAC,CAAA;YAC5D,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,GAAG,KAAK,GAAG,EAAE,CAAC,CAAA;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,UAAU,IAAI;QACjB,MAAM,aAAa,GAAG,MAAM,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAA;QACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,KAAK,CAAA;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE,EAAE,CAAC,CAAA;QAChD,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,EAAE,EAAE,CAAC,CAAA;QAExD,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;gBAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAA;oBAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACjB,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;gBAC/C,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;gBACpB,MAAK;YACP,CAAC;YAED,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAA;oBACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACjB,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;gBACjD,IAAI,IAAI,EAAE,CAAC;oBACT,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;gBACvB,CAAC;qBAAM,CAAC;oBACN,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;wBAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;wBACvF,IAAI,KAAK,CAAC,WAAW;4BAAE,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;wBACnE,OAAO,CAAC,GAAG,EAAE,CAAA;oBACf,CAAC;gBACH,CAAC;gBACD,MAAK;YACP,CAAC;YAED,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;gBAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAA;oBAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACjB,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,CAAC,CAAA;gBACnD,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;gBACpB,MAAK;YACP,CAAC;YAED,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAA;oBACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACjB,CAAC;gBACD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;gBAC3E,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;gBACjB,MAAK;YACP,CAAC;YAED;gBACE,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,yCAAyC,CAAC,CAAA;gBACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,CAAC;IACH,CAAC;IAED,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;QACjB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC1B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;AACF,CAAC,CAAC,iBAAiB"}

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+export { audit } from './audit.js';
+export { search } from './search.js';
+export { score } from './scorer.js';
+export { shouldUse } from './advisor.js';
+export { checkLicenseCompatibility, knownLicenses } from './license.js';
+export { clearCache } from './registry.js';
+export { calculateSavings, estimateTokens } from './tokens.js';
+export type { AdvisorOptions, AuditReport, CacheEntry, FetchFn, LicenseCompatibility, NpmAdvisory, NpmDownloadsResponse, NpmPackageData, NpmSearchResult, NpmVersionData, Recommendation, ScoreResult, ScoreWeights, SearchEntry, SearchOptions, VulnerabilitySummary, } from './types.js';
+export type { TokenSavings } from './tokens.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,EAAE,yBAAyB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC1C,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC9D,YAAY,EACV,cAAc,EACd,WAAW,EACX,UAAU,EACV,OAAO,EACP,oBAAoB,EACpB,WAAW,EACX,oBAAoB,EACpB,cAAc,EACd,eAAe,EACf,cAAc,EACd,cAAc,EACd,WAAW,EACX,YAAY,EACZ,WAAW,EACX,aAAa,EACb,oBAAoB,GACrB,MAAM,YAAY,CAAA;AACnB,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA"}

package/dist/index.js

@@ -0,0 +1,8 @@
+export { audit } from './audit.js';
+export { search } from './search.js';
+export { score } from './scorer.js';
+export { shouldUse } from './advisor.js';
+export { checkLicenseCompatibility, knownLicenses } from './license.js';
+export { clearCache } from './registry.js';
+export { calculateSavings, estimateTokens } from './tokens.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,EAAE,yBAAyB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC1C,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA"}

package/dist/license.d.ts

@@ -0,0 +1,11 @@
+import type { LicenseCompatibility } from './types.js';
+/**
+ * Check if a dependency's license is compatible with the project's target license.
+ *
+ * Rule: a dependency can be used if its license is equally or more permissive
+ * than the target. Strong copyleft (GPL) deps cannot be used in permissive projects.
+ */
+export declare function checkLicenseCompatibility(depLicense: string | null | undefined, targetLicense: string): LicenseCompatibility;
+/** Get all known license identifiers */
+export declare function knownLicenses(): string[];
+//# sourceMappingURL=license.d.ts.map

package/dist/license.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"license.d.ts","sourceRoot":"","sources":["../src/license.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AA+EtD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACrC,aAAa,EAAE,MAAM,GACpB,oBAAoB,CA2DtB;AAED,wCAAwC;AACxC,wBAAgB,aAAa,IAAI,MAAM,EAAE,CAExC"}

package/dist/license.js

@@ -0,0 +1,133 @@
+/**
+ * License categories from most to least permissive.
+ * Permissive licenses are compatible with everything at their level or above.
+ */
+const LICENSE_CATEGORIES = {
+    // Public domain / ultra-permissive
+    'Unlicense': 0,
+    'CC0-1.0': 0,
+    '0BSD': 0,
+    // Permissive
+    'MIT': 1,
+    'ISC': 1,
+    'BSD-2-Clause': 1,
+    'BSD-3-Clause': 1,
+    'Apache-2.0': 1,
+    'Zlib': 1,
+    // Weak copyleft
+    'LGPL-2.1': 2,
+    'LGPL-2.1-only': 2,
+    'LGPL-2.1-or-later': 2,
+    'LGPL-3.0': 2,
+    'LGPL-3.0-only': 2,
+    'LGPL-3.0-or-later': 2,
+    'MPL-2.0': 2,
+    'EPL-2.0': 2,
+    // Strong copyleft
+    'GPL-2.0': 3,
+    'GPL-2.0-only': 3,
+    'GPL-2.0-or-later': 3,
+    'GPL-3.0': 3,
+    'GPL-3.0-only': 3,
+    'GPL-3.0-or-later': 3,
+    // Network copyleft
+    'AGPL-3.0': 4,
+    'AGPL-3.0-only': 4,
+    'AGPL-3.0-or-later': 4,
+};
+/** Normalize common license strings to SPDX identifiers */
+function normalizeLicense(raw) {
+    const trimmed = raw.trim();
+    const aliases = {
+        'MIT': 'MIT',
+        'ISC': 'ISC',
+        'BSD': 'BSD-2-Clause',
+        'BSD-2': 'BSD-2-Clause',
+        'BSD-3': 'BSD-3-Clause',
+        'Apache 2.0': 'Apache-2.0',
+        'Apache2': 'Apache-2.0',
+        'Apache-2': 'Apache-2.0',
+        'GPL-2': 'GPL-2.0',
+        'GPL-3': 'GPL-3.0',
+        'LGPL-2': 'LGPL-2.1',
+        'LGPL-3': 'LGPL-3.0',
+        'AGPL-3': 'AGPL-3.0',
+        'MPL 2.0': 'MPL-2.0',
+        'Unlicense': 'Unlicense',
+        'UNLICENSED': 'UNLICENSED',
+    };
+    // Try direct match first (case-sensitive for SPDX)
+    if (trimmed in LICENSE_CATEGORIES)
+        return trimmed;
+    // Try case-insensitive alias match
+    const upper = trimmed.toUpperCase();
+    for (const [alias, spdx] of Object.entries(aliases)) {
+        if (alias.toUpperCase() === upper)
+            return spdx;
+    }
+    return trimmed;
+}
+/**
+ * Check if a dependency's license is compatible with the project's target license.
+ *
+ * Rule: a dependency can be used if its license is equally or more permissive
+ * than the target. Strong copyleft (GPL) deps cannot be used in permissive projects.
+ */
+export function checkLicenseCompatibility(depLicense, targetLicense) {
+    if (!depLicense) {
+        return {
+            compatible: false,
+            license: null,
+            targetLicense,
+            reason: 'No license specified — cannot determine compatibility',
+        };
+    }
+    const normalizedDep = normalizeLicense(depLicense);
+    const normalizedTarget = normalizeLicense(targetLicense);
+    if (normalizedDep === 'UNLICENSED') {
+        return {
+            compatible: false,
+            license: normalizedDep,
+            targetLicense: normalizedTarget,
+            reason: 'Package is UNLICENSED — not safe for any project',
+        };
+    }
+    const depCategory = LICENSE_CATEGORIES[normalizedDep];
+    const targetCategory = LICENSE_CATEGORIES[normalizedTarget];
+    if (depCategory === undefined) {
+        return {
+            compatible: false,
+            license: normalizedDep,
+            targetLicense: normalizedTarget,
+            reason: `Unknown license "${normalizedDep}" — manual review required`,
+        };
+    }
+    if (targetCategory === undefined) {
+        return {
+            compatible: false,
+            license: normalizedDep,
+            targetLicense: normalizedTarget,
+            reason: `Unknown target license "${normalizedTarget}" — manual review required`,
+        };
+    }
+    // Dependency must be equally or more permissive (lower or equal category)
+    if (depCategory <= targetCategory) {
+        return {
+            compatible: true,
+            license: normalizedDep,
+            targetLicense: normalizedTarget,
+            reason: `"${normalizedDep}" is compatible with "${normalizedTarget}"`,
+        };
+    }
+    return {
+        compatible: false,
+        license: normalizedDep,
+        targetLicense: normalizedTarget,
+        reason: `"${normalizedDep}" is more restrictive than "${normalizedTarget}"`,
+    };
+}
+/** Get all known license identifiers */
+export function knownLicenses() {
+    return Object.keys(LICENSE_CATEGORIES);
+}
+//# sourceMappingURL=license.js.map

package/dist/license.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"license.js","sourceRoot":"","sources":["../src/license.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,kBAAkB,GAA2B;IACjD,mCAAmC;IACnC,WAAW,EAAE,CAAC;IACd,SAAS,EAAE,CAAC;IACZ,MAAM,EAAE,CAAC;IAET,aAAa;IACb,KAAK,EAAE,CAAC;IACR,KAAK,EAAE,CAAC;IACR,cAAc,EAAE,CAAC;IACjB,cAAc,EAAE,CAAC;IACjB,YAAY,EAAE,CAAC;IACf,MAAM,EAAE,CAAC;IAET,gBAAgB;IAChB,UAAU,EAAE,CAAC;IACb,eAAe,EAAE,CAAC;IAClB,mBAAmB,EAAE,CAAC;IACtB,UAAU,EAAE,CAAC;IACb,eAAe,EAAE,CAAC;IAClB,mBAAmB,EAAE,CAAC;IACtB,SAAS,EAAE,CAAC;IACZ,SAAS,EAAE,CAAC;IAEZ,kBAAkB;IAClB,SAAS,EAAE,CAAC;IACZ,cAAc,EAAE,CAAC;IACjB,kBAAkB,EAAE,CAAC;IACrB,SAAS,EAAE,CAAC;IACZ,cAAc,EAAE,CAAC;IACjB,kBAAkB,EAAE,CAAC;IAErB,mBAAmB;IACnB,UAAU,EAAE,CAAC;IACb,eAAe,EAAE,CAAC;IAClB,mBAAmB,EAAE,CAAC;CACvB,CAAA;AAED,2DAA2D;AAC3D,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IAE1B,MAAM,OAAO,GAA2B;QACtC,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,cAAc;QACrB,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,cAAc;QACvB,YAAY,EAAE,YAAY;QAC1B,SAAS,EAAE,YAAY;QACvB,UAAU,EAAE,YAAY;QACxB,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,WAAW;QACxB,YAAY,EAAE,YAAY;KAC3B,CAAA;IAED,mDAAmD;IACnD,IAAI,OAAO,IAAI,kBAAkB;QAAE,OAAO,OAAO,CAAA;IAEjD,mCAAmC;IACnC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAA;IACnC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK;YAAE,OAAO,IAAI,CAAA;IAChD,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,UAAqC,EACrC,aAAqB;IAErB,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,IAAI;YACb,aAAa;YACb,MAAM,EAAE,uDAAuD;SAChE,CAAA;IACH,CAAC;IAED,MAAM,aAAa,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAA;IAClD,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAA;IAExD,IAAI,aAAa,KAAK,YAAY,EAAE,CAAC;QACnC,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,aAAa;YACtB,aAAa,EAAE,gBAAgB;YAC/B,MAAM,EAAE,kDAAkD;SAC3D,CAAA;IACH,CAAC;IAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAA;IACrD,MAAM,cAAc,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAE3D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,aAAa;YACtB,aAAa,EAAE,gBAAgB;YAC/B,MAAM,EAAE,oBAAoB,aAAa,4BAA4B;SACtE,CAAA;IACH,CAAC;IAED,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,aAAa;YACtB,aAAa,EAAE,gBAAgB;YAC/B,MAAM,EAAE,2BAA2B,gBAAgB,4BAA4B;SAChF,CAAA;IACH,CAAC;IAED,0EAA0E;IAC1E,IAAI,WAAW,IAAI,cAAc,EAAE,CAAC;QAClC,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,aAAa;YACtB,aAAa,EAAE,gBAAgB;YAC/B,MAAM,EAAE,IAAI,aAAa,yBAAyB,gBAAgB,GAAG;SACtE,CAAA;IACH,CAAC;IAED,OAAO;QACL,UAAU,EAAE,KAAK;QACjB,OAAO,EAAE,aAAa;QACtB,aAAa,EAAE,gBAAgB;QAC/B,MAAM,EAAE,IAAI,aAAa,+BAA+B,gBAAgB,GAAG;KAC5E,CAAA;AACH,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,aAAa;IAC3B,OAAO,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;AACxC,CAAC"}

package/dist/mcp.d.ts

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+/**
+ * MCP (Model Context Protocol) server for depguard.
+ *
+ * Exposes depguard functions as MCP tools over stdio transport.
+ * Protocol: JSON-RPC 2.0 over stdin/stdout (one JSON object per line).
+ *
+ * Zero dependencies — implements the MCP subset needed for tool serving.
+ */
+export {};
+//# sourceMappingURL=mcp.d.ts.map

package/dist/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":";AAEA;;;;;;;GAOG"}

package/dist/mcp.js

@@ -0,0 +1,179 @@
+#!/usr/bin/env node
+/**
+ * MCP (Model Context Protocol) server for depguard.
+ *
+ * Exposes depguard functions as MCP tools over stdio transport.
+ * Protocol: JSON-RPC 2.0 over stdin/stdout (one JSON object per line).
+ *
+ * Zero dependencies — implements the MCP subset needed for tool serving.
+ */
+import { audit } from './audit.js';
+import { search } from './search.js';
+import { score } from './scorer.js';
+import { shouldUse } from './advisor.js';
+import { calculateSavings } from './tokens.js';
+const SERVER_INFO = {
+    name: 'depguard',
+    version: '1.1.1',
+};
+const TOOLS = [
+    {
+        name: 'depguard_audit',
+        description: 'Full security audit of an npm package: vulnerabilities, maintenance, license compatibility, dependencies, and install scripts.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                name: { type: 'string', description: 'npm package name' },
+                targetLicense: { type: 'string', description: 'Project license for compatibility check (default: MIT)' },
+            },
+            required: ['name'],
+        },
+    },
+    {
+        name: 'depguard_search',
+        description: 'Search npm for packages matching keywords, sorted by quality score.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                keywords: { type: 'string', description: 'Search keywords' },
+                limit: { type: 'number', description: 'Max results (default: 10)' },
+                minScore: { type: 'number', description: 'Minimum score filter 0-100 (default: 0)' },
+            },
+            required: ['keywords'],
+        },
+    },
+    {
+        name: 'depguard_score',
+        description: 'Score an npm package 0-100 across security, maintenance, popularity, license, and dependencies.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                name: { type: 'string', description: 'npm package name' },
+                targetLicense: { type: 'string', description: 'Project license for compatibility check (default: MIT)' },
+            },
+            required: ['name'],
+        },
+    },
+    {
+        name: 'depguard_should_use',
+        description: 'Given an intent (e.g. "date formatting"), search packages, audit top candidates, and recommend install vs write-from-scratch.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                intent: { type: 'string', description: 'What you want to accomplish (e.g. "http client", "date formatting")' },
+                threshold: { type: 'number', description: 'Score threshold for install recommendation (default: 60)' },
+                targetLicense: { type: 'string', description: 'Project license for compatibility check (default: MIT)' },
+            },
+            required: ['intent'],
+        },
+    },
+];
+function success(id, result) {
+    return { jsonrpc: '2.0', id, result };
+}
+function error(id, code, message) {
+    return { jsonrpc: '2.0', id, error: { code, message } };
+}
+function toolResult(toolName, content, argCount) {
+    const responseJson = JSON.stringify(content, null, 2);
+    const savings = calculateSavings(toolName, responseJson, argCount);
+    const enriched = { ...content, tokenSavings: savings };
+    return {
+        content: [{ type: 'text', text: JSON.stringify(enriched, null, 2) }],
+    };
+}
+async function handleRequest(req) {
+    switch (req.method) {
+        case 'initialize':
+            return success(req.id, {
+                protocolVersion: '2024-11-05',
+                capabilities: { tools: {} },
+                serverInfo: SERVER_INFO,
+            });
+        case 'notifications/initialized':
+            // Client acknowledgment, no response needed but we return anyway
+            return success(req.id, {});
+        case 'tools/list':
+            return success(req.id, { tools: TOOLS });
+        case 'tools/call': {
+            const params = req.params;
+            if (!params?.name) {
+                return error(req.id, -32602, 'Missing tool name');
+            }
+            const args = params.arguments ?? {};
+            try {
+                switch (params.name) {
+                    case 'depguard_audit': {
+                        const result = await audit(args.name, args.targetLicense ?? 'MIT');
+                        return success(req.id, toolResult('depguard_audit', result));
+                    }
+                    case 'depguard_search': {
+                        const result = await search(args.keywords, {
+                            limit: args.limit ?? 10,
+                            minScore: args.minScore ?? 0,
+                        });
+                        return success(req.id, toolResult('depguard_search', result));
+                    }
+                    case 'depguard_score': {
+                        const result = await score(args.name, {
+                            targetLicense: args.targetLicense ?? 'MIT',
+                        });
+                        return success(req.id, toolResult('depguard_score', result));
+                    }
+                    case 'depguard_should_use': {
+                        const limit = args.limit ?? 5;
+                        const result = await shouldUse(args.intent, {
+                            threshold: args.threshold ?? 60,
+                            targetLicense: args.targetLicense ?? 'MIT',
+                        });
+                        return success(req.id, toolResult('depguard_should_use', result, limit));
+                    }
+                    default:
+                        return error(req.id, -32601, `Unknown tool: ${params.name}`);
+                }
+            }
+            catch (err) {
+                const message = err instanceof Error ? err.message : 'Unknown error';
+                return success(req.id, {
+                    content: [{ type: 'text', text: `Error: ${message}` }],
+                    isError: true,
+                });
+            }
+        }
+        default:
+            // Ignore unknown notifications (method starts with notifications/)
+            if (req.method.startsWith('notifications/')) {
+                return success(req.id, {});
+            }
+            return error(req.id, -32601, `Method not found: ${req.method}`);
+    }
+}
+async function main() {
+    const { createInterface } = await import('node:readline');
+    const rl = createInterface({ input: process.stdin });
+    for await (const line of rl) {
+        const trimmed = line.trim();
+        if (!trimmed)
+            continue;
+        try {
+            const req = JSON.parse(trimmed);
+            // Notifications have no id — don't send a response
+            if (req.id === undefined || req.id === null) {
+                // Still handle it (e.g. notifications/initialized) but don't respond
+                await handleRequest({ ...req, id: 0 });
+                continue;
+            }
+            const response = await handleRequest(req);
+            process.stdout.write(JSON.stringify(response) + '\n');
+        }
+        catch {
+            const errResponse = error(null, -32700, 'Parse error');
+            process.stdout.write(JSON.stringify(errResponse) + '\n');
+        }
+    }
+}
+main().catch(err => {
+    process.stderr.write(`MCP server error: ${err.message}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=mcp.js.map

package/dist/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":";AAEA;;;;;;;GAOG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9C,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,OAAO;CACjB,CAAA;AAED,MAAM,KAAK,GAAG;IACZ;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,gIAAgI;QAC7I,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;gBACzD,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wDAAwD,EAAE;aACzG;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB;KACF;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,qEAAqE;QAClF,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE;gBAC5D,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;gBACnE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yCAAyC,EAAE;aACrF;YACD,QAAQ,EAAE,CAAC,UAAU,CAAC;SACvB;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,iGAAiG;QAC9G,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;gBACzD,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wDAAwD,EAAE;aACzG;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB;KACF;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,+HAA+H;QAC5I,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qEAAqE,EAAE;gBAC9G,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0DAA0D,EAAE;gBACtG,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wDAAwD,EAAE;aACzG;YACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;SACrB;KACF;CACF,CAAA;AAgBD,SAAS,OAAO,CAAC,EAAmB,EAAE,MAAe;IACnD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAA;AACvC,CAAC;AAED,SAAS,KAAK,CAAC,EAA0B,EAAE,IAAY,EAAE,OAAe;IACtE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAA;AACzD,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB,EAAE,OAAgB,EAAE,QAAiB;IACvE,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACrD,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAA;IAClE,MAAM,QAAQ,GAAG,EAAE,GAAI,OAAmC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAA;IACnF,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;KACrE,CAAA;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAmB;IAC9C,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,YAAY;YACf,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;gBACrB,eAAe,EAAE,YAAY;gBAC7B,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC3B,UAAU,EAAE,WAAW;aACxB,CAAC,CAAA;QAEJ,KAAK,2BAA2B;YAC9B,iEAAiE;YACjE,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAE5B,KAAK,YAAY;YACf,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;QAE1C,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,MAAM,GAAG,GAAG,CAAC,MAA2E,CAAA;YAC9F,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;gBAClB,OAAO,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAA;YACnD,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAA;YAEnC,IAAI,CAAC;gBACH,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;oBACpB,KAAK,gBAAgB,CAAC,CAAC,CAAC;wBACtB,MAAM,MAAM,GAAG,MAAM,KAAK,CACxB,IAAI,CAAC,IAAc,EAClB,IAAI,CAAC,aAAwB,IAAI,KAAK,CACxC,CAAA;wBACD,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAA;oBAC9D,CAAC;oBAED,KAAK,iBAAiB,CAAC,CAAC,CAAC;wBACvB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,QAAkB,EAAE;4BACnD,KAAK,EAAG,IAAI,CAAC,KAAgB,IAAI,EAAE;4BACnC,QAAQ,EAAG,IAAI,CAAC,QAAmB,IAAI,CAAC;yBACzC,CAAC,CAAA;wBACF,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAA;oBAC/D,CAAC;oBAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;wBACtB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAc,EAAE;4BAC9C,aAAa,EAAG,IAAI,CAAC,aAAwB,IAAI,KAAK;yBACvD,CAAC,CAAA;wBACF,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAA;oBAC9D,CAAC;oBAED,KAAK,qBAAqB,CAAC,CAAC,CAAC;wBAC3B,MAAM,KAAK,GAAI,IAAI,CAAC,KAAgB,IAAI,CAAC,CAAA;wBACzC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,MAAgB,EAAE;4BACpD,SAAS,EAAG,IAAI,CAAC,SAAoB,IAAI,EAAE;4BAC3C,aAAa,EAAG,IAAI,CAAC,aAAwB,IAAI,KAAK;yBACvD,CAAC,CAAA;wBACF,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,qBAAqB,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;oBAC1E,CAAC;oBAED;wBACE,OAAO,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,iBAAiB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;gBAChE,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAA;gBACpE,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;oBACrB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;oBACtD,OAAO,EAAE,IAAI;iBACd,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED;YACE,mEAAmE;YACnE,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC5C,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;YAC5B,CAAC;YACD,OAAO,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;IACnE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAA;IAEzD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;IAEpD,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3B,IAAI,CAAC,OAAO;YAAE,SAAQ;QAEtB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAA;YAEjD,mDAAmD;YACnD,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;gBAC5C,qEAAqE;gBACrE,MAAM,aAAa,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;gBACtC,SAAQ;YACV,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAA;YACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAA;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,aAAa,CAAC,CAAA;YACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAA;QAC1D,CAAC;IACH,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;IACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,GAAG,CAAC,OAAO,IAAI,CAAC,CAAA;IAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}

package/dist/registry.d.ts

@@ -0,0 +1,12 @@
+import type { FetchFn, NpmPackageData, NpmSearchResult, NpmAdvisory } from './types.js';
+/** Clear the in-memory cache */
+export declare function clearCache(): void;
+/** Fetch package metadata from npm registry */
+export declare function fetchPackage(name: string, fetcher?: FetchFn): Promise<NpmPackageData | null>;
+/** Fetch weekly download count */
+export declare function fetchDownloads(name: string, fetcher?: FetchFn): Promise<number>;
+/** Search npm registry */
+export declare function searchPackages(keywords: string, limit?: number, fetcher?: FetchFn): Promise<NpmSearchResult>;
+/** Fetch security advisories for a package via the bulk endpoint */
+export declare function fetchAdvisories(name: string, version: string, fetcher?: FetchFn): Promise<NpmAdvisory[]>;
+//# sourceMappingURL=registry.d.ts.map

package/dist/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,OAAO,EAEP,cAAc,EACd,eAAe,EACf,WAAW,EACZ,MAAM,YAAY,CAAA;AAyBnB,gCAAgC;AAChC,wBAAgB,UAAU,IAAI,IAAI,CAEjC;AAED,+CAA+C;AAC/C,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,OAA0B,GAClC,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAgBhC;AAED,kCAAkC;AAClC,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,OAA0B,GAClC,OAAO,CAAC,MAAM,CAAC,CAgBjB;AAED,0BAA0B;AAC1B,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,KAAK,SAAK,EACV,OAAO,GAAE,OAA0B,GAClC,OAAO,CAAC,eAAe,CAAC,CAmB1B;AAED,oEAAoE;AACpE,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,OAA0B,GAClC,OAAO,CAAC,WAAW,EAAE,CAAC,CAmBxB"}