depstein 0.1.0

package/dist/core/types.d.ts

@@ -0,0 +1,99 @@
+export type Ecosystem = 'npm' | 'pypi' | 'cargo' | 'golang';
+export type Grade = 'A' | 'B' | 'C' | 'D' | 'F';
+export type FilterMode = 'all' | 'critical' | 'poor' | 'dev' | 'prod';
+export type SortMode = 'score' | 'name' | 'size' | 'updated';
+export type SeverityLevel = 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL';
+export interface RawDependency {
+    name: string;
+    version: string;
+    ecosystem: Ecosystem;
+    isDev: boolean;
+}
+export interface Vulnerability {
+    id: string;
+    summary: string;
+    severity: SeverityLevel;
+    aliases: string[];
+}
+export interface PackageMetadata {
+    name: string;
+    ecosystem: Ecosystem;
+    latestVersion: string;
+    requestedVersion: string;
+    publishedAt: Date | null;
+    description: string;
+    license: string;
+    repositoryUrl: string | null;
+    weeklyDownloads: number | null;
+    monthlyDownloads: number | null;
+    totalDownloads: number | null;
+    unpackedSize: number | null;
+    gzipSize: number | null;
+    minifiedSize: number | null;
+    hasBuiltinTypes: boolean;
+    hasTypesPackage: boolean;
+    vulnerabilities: Vulnerability[];
+    fromCache: boolean;
+    fetchError: string | null;
+}
+export interface ScoreDimension {
+    name: string;
+    score: number;
+    maxScore: number;
+    reason: string;
+}
+export interface ScoredDependency {
+    raw: RawDependency;
+    metadata: PackageMetadata;
+    dimensions: {
+        maintenance: ScoreDimension;
+        popularity: ScoreDimension;
+        bundleSize: ScoreDimension;
+        typescript: ScoreDimension;
+        license: ScoreDimension;
+        vulnerability: ScoreDimension;
+    };
+    totalScore: number;
+    grade: Grade;
+    issues: string[];
+    suggestion: string | null;
+}
+export interface ScanResult {
+    projectPath: string;
+    ecosystem: Ecosystem;
+    dependencies: RawDependency[];
+}
+export interface AuditResult {
+    projectPath: string;
+    ecosystem: Ecosystem;
+    scoredDependencies: ScoredDependency[];
+    averageScore: number;
+    grade: Grade;
+    totalCount: number;
+    criticalCount: number;
+    poorCount: number;
+    fairCount: number;
+    goodCount: number;
+    excellentCount: number;
+    timestamp: string;
+}
+export interface CLIOptions {
+    path: string;
+    ecosystem?: Ecosystem;
+    filter: FilterMode;
+    sort: SortMode;
+    noCache: boolean;
+    json: boolean;
+    top?: number;
+    fix: boolean;
+    minScore?: number;
+    ci: boolean;
+}
+export type CachedMetadata = Omit<PackageMetadata, 'fromCache'> & {
+    publishedAt: string | null;
+};
+export interface CacheEntry {
+    data: CachedMetadata;
+    timestamp: number;
+}
+export type CacheStore = Record<string, CacheEntry>;

package/dist/core/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":""}

package/dist/core/vulnerabilities.d.ts

@@ -0,0 +1,5 @@
+import type { Vulnerability, Ecosystem } from './types.js';
+export declare function fetchVulnerabilities(name: string, ecosystem: Ecosystem, 
+/** Resolved/installed version — enables version-aware filtering so only
+ *  vulns that affect THIS version are returned (not all historical CVEs). */
+version?: string | null): Promise<Vulnerability[]>;

package/dist/core/vulnerabilities.js

@@ -0,0 +1,93 @@
+import { fetchJson } from '../utils/http.js';
+/**
+ * Ecosystem name mappings for OSV API
+ * https://osv.dev/docs/#section/Background
+ */
+const OSV_ECOSYSTEM = {
+    npm: 'npm',
+    pypi: 'PyPI',
+    cargo: 'crates.io',
+    golang: 'Go',
+};
+/** Map a CVSS numeric base score (0–10) to our severity tiers. */
+function cvssScoreToSeverity(score) {
+    if (score >= 9.0)
+        return 'CRITICAL';
+    if (score >= 7.0)
+        return 'HIGH';
+    if (score >= 4.0)
+        return 'MEDIUM';
+    return 'LOW';
+}
+/**
+ * Resolve severity using a three-tier strategy:
+ * 1. Explicit string from database_specific.severity (GitHub Advisory / NVD)
+ * 2. Numeric CVSS score from database_specific.cvss.score
+ * 3. ecosystem_specific.severity string
+ * 4. Fall back to LOW (conservative unknown)
+ */
+function resolveSeverity(v) {
+    // Tier 1: string severity from authoritative database fields
+    for (const raw of [v.database_specific?.severity, v.ecosystem_specific?.severity]) {
+        if (!raw)
+            continue;
+        const s = raw.toUpperCase();
+        if (s === 'CRITICAL')
+            return 'CRITICAL';
+        if (s === 'HIGH')
+            return 'HIGH';
+        if (s === 'MEDIUM' || s === 'MODERATE')
+            return 'MEDIUM';
+        if (s === 'LOW')
+            return 'LOW';
+    }
+    // Tier 2: numeric CVSS score
+    const cvssScore = v.database_specific?.cvss?.score;
+    if (cvssScore != null && cvssScore > 0) {
+        return cvssScoreToSeverity(cvssScore);
+    }
+    return 'LOW';
+}
+/**
+ * Returns true if the version string looks like a concrete resolved version
+ * (i.e. not a semver range like ^1.0, ~1.0, >=1.0, etc.)
+ */
+function isConcreteVersion(version) {
+    return /^\d+\.\d+/.test(version);
+}
+export async function fetchVulnerabilities(name, ecosystem, 
+/** Resolved/installed version — enables version-aware filtering so only
+ *  vulns that affect THIS version are returned (not all historical CVEs). */
+version = null) {
+    try {
+        const pkgQuery = {
+            name,
+            ecosystem: OSV_ECOSYSTEM[ecosystem],
+        };
+        const body = { package: pkgQuery };
+        // Pass the concrete installed version so OSV returns only CVEs that
+        // affect the version the user actually has installed.  Range selectors
+        // (^, ~, >) are not valid OSV version strings — skip them.
+        if (version && isConcreteVersion(version)) {
+            body.version = version;
+        }
+        const res = (await fetchJson('https://api.osv.dev/v1/query', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify(body),
+        }));
+        if (!res.vulns || !Array.isArray(res.vulns))
+            return [];
+        return res.vulns.slice(0, 20).map(v => ({
+            id: v.id,
+            summary: v.summary ?? 'No description available',
+            severity: resolveSeverity(v),
+            aliases: v.aliases ?? [],
+        }));
+    }
+    catch {
+        // Never let vulnerability check crash the whole audit
+        return [];
+    }
+}
+//# sourceMappingURL=vulnerabilities.js.map

package/dist/core/vulnerabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vulnerabilities.js","sourceRoot":"","sources":["../../src/core/vulnerabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAG7C;;;GAGG;AACH,MAAM,aAAa,GAA8B;IAC7C,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,WAAW;IAClB,MAAM,EAAE,IAAI;CACf,CAAC;AAkBF,kEAAkE;AAClE,SAAS,mBAAmB,CAAC,KAAa;IACtC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,UAAU,CAAC;IACpC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,MAAM,CAAC;IAChC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,QAAQ,CAAC;IAClC,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,CAAU;IAC/B,6DAA6D;IAC7D,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,iBAAiB,EAAE,QAAQ,EAAE,CAAC,CAAC,kBAAkB,EAAE,QAAQ,CAAC,EAAE,CAAC;QAChF,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,UAAU;YAAE,OAAO,UAAU,CAAC;QACxC,IAAI,CAAC,KAAK,MAAM;YAAE,OAAO,MAAM,CAAC;QAChC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,UAAU;YAAE,OAAO,QAAQ,CAAC;QACxD,IAAI,CAAC,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;IAClC,CAAC;IACD,6BAA6B;IAC7B,MAAM,SAAS,GAAG,CAAC,CAAC,iBAAiB,EAAE,IAAI,EAAE,KAAK,CAAC;IACnD,IAAI,SAAS,IAAI,IAAI,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,OAAe;IACtC,OAAO,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACtC,IAAY,EACZ,SAAoB;AACpB;6EAC6E;AAC7E,UAAyB,IAAI;IAE7B,IAAI,CAAC;QACD,MAAM,QAAQ,GAA2B;YACrC,IAAI;YACJ,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC;SACtC,CAAC;QAEF,MAAM,IAAI,GAA4B,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAE5D,oEAAoE;QACpE,uEAAuE;QACvE,2DAA2D;QAC3D,IAAI,OAAO,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAC3B,CAAC;QAED,MAAM,GAAG,GAAG,CAAC,MAAM,SAAS,CAAC,8BAA8B,EAAE;YACzD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC7B,CAAC,CAAgB,CAAC;QAEnB,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEvD,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACpC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,0BAA0B;YAChD,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE;SAC3B,CAAC,CAAC,CAAC;IACR,CAAC;IAAC,MAAM,CAAC;QACL,sDAAsD;QACtD,OAAO,EAAE,CAAC;IACd,CAAC;AACL,CAAC"}

package/dist/ecosystems/cargo.d.ts

@@ -0,0 +1,2 @@
+import type { PackageMetadata } from '../core/types.js';
+export declare function fetchCargo(name: string, requestedVersion: string, noCache: boolean): Promise<PackageMetadata>;

package/dist/ecosystems/cargo.js

@@ -0,0 +1,74 @@
+import { fetchJson } from '../utils/http.js';
+import { cache } from '../core/cache.js';
+import { fetchVulnerabilities } from '../core/vulnerabilities.js';
+export async function fetchCargo(name, requestedVersion, noCache) {
+    if (!noCache) {
+        const cached = cache.get('cargo', name);
+        if (cached)
+            return { ...cached, fromCache: true };
+    }
+    try {
+        const data = (await fetchJson(`https://crates.io/api/v1/crates/${encodeURIComponent(name)}`, {
+            headers: {
+                // crates.io requires a descriptive User-Agent
+                'User-Agent': 'depstein/0.1.0 (https://github.com/kstij/DepStein)',
+            },
+        }));
+        if (!data.crate) {
+            throw new Error(`Crate "${name}" not found on crates.io`);
+        }
+        const krate = data.crate;
+        const latestVersion = krate.newest_version;
+        // Extract license from the matching version entry
+        const versionEntry = data.versions?.find(v => v.num === latestVersion);
+        const license = versionEntry?.license ?? 'Unknown';
+        const updatedAt = versionEntry?.updated_at ?? krate.updated_at;
+        const vulnerabilities = await fetchVulnerabilities(name, 'cargo', latestVersion);
+        const metadata = {
+            name,
+            ecosystem: 'cargo',
+            latestVersion,
+            requestedVersion,
+            publishedAt: updatedAt ? new Date(updatedAt) : null,
+            description: krate.description ?? '',
+            license,
+            repositoryUrl: krate.repository ?? krate.homepage ?? krate.documentation ?? null,
+            weeklyDownloads: null,
+            monthlyDownloads: null,
+            totalDownloads: krate.downloads,
+            unpackedSize: null,
+            gzipSize: null,
+            minifiedSize: null,
+            hasBuiltinTypes: false,
+            hasTypesPackage: false,
+            vulnerabilities,
+            fetchError: null,
+        };
+        cache.set('cargo', name, metadata);
+        return { ...metadata, fromCache: false };
+    }
+    catch (err) {
+        return {
+            name,
+            ecosystem: 'cargo',
+            latestVersion: requestedVersion,
+            requestedVersion,
+            publishedAt: null,
+            description: '',
+            license: 'Unknown',
+            repositoryUrl: null,
+            weeklyDownloads: null,
+            monthlyDownloads: null,
+            totalDownloads: null,
+            unpackedSize: null,
+            gzipSize: null,
+            minifiedSize: null,
+            hasBuiltinTypes: false,
+            hasTypesPackage: false,
+            vulnerabilities: [],
+            fromCache: false,
+            fetchError: err.message,
+        };
+    }
+}
+//# sourceMappingURL=cargo.js.map

package/dist/ecosystems/cargo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cargo.js","sourceRoot":"","sources":["../../src/ecosystems/cargo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAsBlE,MAAM,CAAC,KAAK,UAAU,UAAU,CAC5B,IAAY,EACZ,gBAAwB,EACxB,OAAgB;IAEhB,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM;YAAE,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACtD,CAAC;IAED,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,SAAS,CAAC,mCAAmC,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE;YACzF,OAAO,EAAE;gBACL,8CAA8C;gBAC9C,YAAY,EAAE,oDAAoD;aACrE;SACJ,CAAC,CAAmB,CAAC;QAEtB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,0BAA0B,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,MAAM,aAAa,GAAG,KAAK,CAAC,cAAc,CAAC;QAE3C,kDAAkD;QAClD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,YAAY,EAAE,OAAO,IAAI,SAAS,CAAC;QACnD,MAAM,SAAS,GAAG,YAAY,EAAE,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC;QAE/D,MAAM,eAAe,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;QAEjF,MAAM,QAAQ,GAAuC;YACjD,IAAI;YACJ,SAAS,EAAE,OAAO;YAClB,aAAa;YACb,gBAAgB;YAChB,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;YACnD,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;YACpC,OAAO;YACP,aAAa,EAAE,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,aAAa,IAAI,IAAI;YAChF,eAAe,EAAE,IAAI;YACrB,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,KAAK,CAAC,SAAS;YAC/B,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,KAAK;YACtB,eAAe;YACf,UAAU,EAAE,IAAI;SACnB,CAAC;QAEF,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACnC,OAAO,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,OAAO;YACH,IAAI;YACJ,SAAS,EAAE,OAAO;YAClB,aAAa,EAAE,gBAAgB;YAC/B,gBAAgB;YAChB,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,SAAS;YAClB,aAAa,EAAE,IAAI;YACnB,eAAe,EAAE,IAAI;YACrB,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,IAAI;YACpB,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,EAAE;YACnB,SAAS,EAAE,KAAK;YAChB,UAAU,EAAG,GAAa,CAAC,OAAO;SACrC,CAAC;IACN,CAAC;AACL,CAAC"}

package/dist/ecosystems/golang.d.ts

@@ -0,0 +1,2 @@
+import type { PackageMetadata } from '../core/types.js';
+export declare function fetchGolang(name: string, requestedVersion: string, noCache: boolean): Promise<PackageMetadata>;

package/dist/ecosystems/golang.js

@@ -0,0 +1,90 @@
+import { fetchJson } from '../utils/http.js';
+import { cache } from '../core/cache.js';
+import { fetchVulnerabilities } from '../core/vulnerabilities.js';
+function extractGithubPath(module) {
+    const m = module.match(/^github\.com\/([^/]+\/[^/]+)/);
+    return m ? m[1] : null;
+}
+export async function fetchGolang(name, requestedVersion, noCache) {
+    if (!noCache) {
+        const cached = cache.get('golang', name);
+        if (cached)
+            return { ...cached, fromCache: true };
+    }
+    try {
+        // URL-encode the module path for the proxy: '@' and '/' need special handling
+        const encodedModule = name
+            .split('/')
+            .map(s => encodeURIComponent(s))
+            .join('/');
+        // Fetch latest version info from Go module proxy
+        const proxyResult = await fetchJson(`https://proxy.golang.org/${encodedModule}/@latest`).catch(() => null);
+        const specificResult = requestedVersion && requestedVersion !== 'latest'
+            ? await fetchJson(`https://proxy.golang.org/${encodedModule}/@v/${encodeURIComponent(requestedVersion)}.info`).catch(() => null)
+            : null;
+        const latestVersion = proxyResult?.Version ?? specificResult?.version ?? requestedVersion;
+        const rawTime = proxyResult?.Time ?? specificResult?.time ?? null;
+        const publishedAt = rawTime ? new Date(rawTime) : null;
+        // Try GitHub API for richer metadata
+        let description = '';
+        let license = 'Unknown';
+        let repositoryUrl = null;
+        const githubPath = extractGithubPath(name);
+        if (githubPath) {
+            repositoryUrl = `https://github.com/${githubPath}`;
+            const ghResult = await fetchJson(`https://api.github.com/repos/${githubPath}`).catch(() => null);
+            if (ghResult) {
+                description = ghResult.description ?? '';
+                license = ghResult.license?.spdx_id ?? ghResult.license?.name ?? 'Unknown';
+                repositoryUrl = ghResult.html_url ?? repositoryUrl;
+            }
+        }
+        const vulnerabilities = await fetchVulnerabilities(name, 'golang', latestVersion);
+        const metadata = {
+            name,
+            ecosystem: 'golang',
+            latestVersion,
+            requestedVersion,
+            publishedAt,
+            description,
+            license,
+            repositoryUrl,
+            weeklyDownloads: null,
+            monthlyDownloads: null,
+            totalDownloads: null,
+            unpackedSize: null,
+            gzipSize: null,
+            minifiedSize: null,
+            hasBuiltinTypes: false,
+            hasTypesPackage: false,
+            vulnerabilities,
+            fetchError: null,
+        };
+        cache.set('golang', name, metadata);
+        return { ...metadata, fromCache: false };
+    }
+    catch (err) {
+        return {
+            name,
+            ecosystem: 'golang',
+            latestVersion: requestedVersion,
+            requestedVersion,
+            publishedAt: null,
+            description: '',
+            license: 'Unknown',
+            repositoryUrl: null,
+            weeklyDownloads: null,
+            monthlyDownloads: null,
+            totalDownloads: null,
+            unpackedSize: null,
+            gzipSize: null,
+            minifiedSize: null,
+            hasBuiltinTypes: false,
+            hasTypesPackage: false,
+            vulnerabilities: [],
+            fromCache: false,
+            fetchError: err.message,
+        };
+    }
+}
+//# sourceMappingURL=golang.js.map

package/dist/ecosystems/golang.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"golang.js","sourceRoot":"","sources":["../../src/ecosystems/golang.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAwBlE,SAAS,iBAAiB,CAAC,MAAc;IACrC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACvD,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC7B,IAAY,EACZ,gBAAwB,EACxB,OAAgB;IAEhB,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,MAAM;YAAE,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACtD,CAAC;IAED,IAAI,CAAC;QACD,8EAA8E;QAC9E,MAAM,aAAa,GAAG,IAAI;aACrB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;aAC/B,IAAI,CAAC,GAAG,CAAC,CAAC;QAEf,iDAAiD;QACjD,MAAM,WAAW,GAAG,MAAO,SAAS,CAChC,4BAA4B,aAAa,UAAU,CAC3B,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAA4B,CAAC,CAAC;QAEvE,MAAM,cAAc,GAChB,gBAAgB,IAAI,gBAAgB,KAAK,QAAQ;YAC7C,CAAC,CAAC,MAAO,SAAS,CACd,4BAA4B,aAAa,OAAO,kBAAkB,CAAC,gBAAgB,CAAC,OAAO,CACrE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAA0B,CAAC;YAClE,CAAC,CAAC,IAAI,CAAC;QAEf,MAAM,aAAa,GACf,WAAW,EAAE,OAAO,IAAI,cAAc,EAAE,OAAO,IAAI,gBAAgB,CAAC;QACxE,MAAM,OAAO,GAAG,WAAW,EAAE,IAAI,IAAI,cAAc,EAAE,IAAI,IAAI,IAAI,CAAC;QAClE,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEvD,qCAAqC;QACrC,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,OAAO,GAAG,SAAS,CAAC;QACxB,IAAI,aAAa,GAAkB,IAAI,CAAC;QAExC,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,UAAU,EAAE,CAAC;YACb,aAAa,GAAG,sBAAsB,UAAU,EAAE,CAAC;YACnD,MAAM,QAAQ,GAAG,MAAO,SAAS,CAC7B,gCAAgC,UAAU,EAAE,CACvB,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAyB,CAAC,CAAC;YAEjE,IAAI,QAAQ,EAAE,CAAC;gBACX,WAAW,GAAG,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC;gBACzC,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,IAAI,IAAI,SAAS,CAAC;gBAC3E,aAAa,GAAG,QAAQ,CAAC,QAAQ,IAAI,aAAa,CAAC;YACvD,CAAC;QACL,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAElF,MAAM,QAAQ,GAAuC;YACjD,IAAI;YACJ,SAAS,EAAE,QAAQ;YACnB,aAAa;YACb,gBAAgB;YAChB,WAAW;YACX,WAAW;YACX,OAAO;YACP,aAAa;YACb,eAAe,EAAE,IAAI;YACrB,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,IAAI;YACpB,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,KAAK;YACtB,eAAe;YACf,UAAU,EAAE,IAAI;SACnB,CAAC;QAEF,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACpC,OAAO,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,OAAO;YACH,IAAI;YACJ,SAAS,EAAE,QAAQ;YACnB,aAAa,EAAE,gBAAgB;YAC/B,gBAAgB;YAChB,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,SAAS;YAClB,aAAa,EAAE,IAAI;YACnB,eAAe,EAAE,IAAI;YACrB,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,IAAI;YACpB,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,EAAE;YACnB,SAAS,EAAE,KAAK;YAChB,UAAU,EAAG,GAAa,CAAC,OAAO;SACrC,CAAC;IACN,CAAC;AACL,CAAC"}

package/dist/ecosystems/npm.d.ts

@@ -0,0 +1,2 @@
+import type { PackageMetadata } from '../core/types.js';
+export declare function fetchNpm(name: string, requestedVersion: string, noCache: boolean): Promise<PackageMetadata>;

package/dist/ecosystems/npm.js

@@ -0,0 +1,92 @@
+import { fetchJson } from '../utils/http.js';
+import { cache } from '../core/cache.js';
+import { fetchVulnerabilities } from '../core/vulnerabilities.js';
+import { fetchHead } from '../utils/http.js';
+export async function fetchNpm(name, requestedVersion, noCache) {
+    if (!noCache) {
+        const cached = cache.get('npm', name);
+        if (cached)
+            return { ...cached, fromCache: true };
+    }
+    try {
+        const encodedName = encodeURIComponent(name).replace('%40', '@');
+        const [registryResult, downloadsResult] = await Promise.allSettled([
+            fetchJson(`https://registry.npmjs.org/${encodedName}`),
+            fetchJson(`https://api.npmjs.org/downloads/point/last-week/${encodedName}`),
+        ]);
+        if (registryResult.status === 'rejected') {
+            throw new Error(String(registryResult.reason));
+        }
+        const registry = registryResult.value;
+        const downloads = downloadsResult.status === 'fulfilled' ? downloadsResult.value : null;
+        const latestVersion = registry['dist-tags']?.latest ?? requestedVersion;
+        const versionData = registry.versions?.[latestVersion] ?? {};
+        const publishedAt = registry.time?.[latestVersion] ? new Date(registry.time[latestVersion]) : null;
+        const hasBuiltinTypes = !!(versionData.types || versionData.typings);
+        // Check for @types/{name} on npm (strip scope prefix for scoped packages)
+        const unscoped = name.startsWith('@') ? name.split('/')[1] : name;
+        const hasTypesPackage = hasBuiltinTypes
+            ? false
+            : await fetchHead(`https://registry.npmjs.org/@types%2F${encodeURIComponent(unscoped ?? name)}`);
+        const rawRepo = versionData.repository?.url ?? registry.repository?.url ?? null;
+        const repositoryUrl = rawRepo
+            ? rawRepo.replace(/^git\+/, '').replace(/\.git$/, '')
+            : null;
+        // Fetch real bundle sizes from bundlephobia (minified + gzip).
+        // Bundlephobia gives the actual browser-visible weight, which is far
+        // smaller than npm's unpackedSize (total extracted file bytes).
+        const bundleResult = await fetchJson(`https://bundlephobia.com/api/size?package=${encodedName}@${latestVersion}`).catch(() => null);
+        const gzipSize = bundleResult?.gzip ?? null;
+        const minifiedSize = bundleResult?.size ?? null;
+        const vulnerabilities = await fetchVulnerabilities(name, 'npm', latestVersion);
+        const metadata = {
+            name,
+            ecosystem: 'npm',
+            latestVersion,
+            requestedVersion,
+            publishedAt,
+            description: registry.description ?? '',
+            license: versionData.license ?? registry.license ?? 'Unknown',
+            repositoryUrl,
+            weeklyDownloads: downloads?.downloads ?? null,
+            monthlyDownloads: null,
+            totalDownloads: null,
+            unpackedSize: versionData.dist?.unpackedSize ?? null,
+            gzipSize,
+            minifiedSize,
+            hasBuiltinTypes,
+            hasTypesPackage,
+            vulnerabilities,
+            fetchError: null,
+        };
+        cache.set('npm', name, metadata);
+        return { ...metadata, fromCache: false };
+    }
+    catch (err) {
+        return failedMetadata(name, 'npm', requestedVersion, err.message);
+    }
+}
+function failedMetadata(name, ecosystem, requestedVersion, error) {
+    return {
+        name,
+        ecosystem,
+        latestVersion: requestedVersion,
+        requestedVersion,
+        publishedAt: null,
+        description: '',
+        license: 'Unknown',
+        repositoryUrl: null,
+        weeklyDownloads: null,
+        monthlyDownloads: null,
+        totalDownloads: null,
+        unpackedSize: null,
+        gzipSize: null,
+        minifiedSize: null,
+        hasBuiltinTypes: false,
+        hasTypesPackage: false,
+        vulnerabilities: [],
+        fromCache: false,
+        fetchError: error,
+    };
+}
+//# sourceMappingURL=npm.js.map

package/dist/ecosystems/npm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm.js","sourceRoot":"","sources":["../../src/ecosystems/npm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAkC7C,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC1B,IAAY,EACZ,gBAAwB,EACxB,OAAgB;IAEhB,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM;YAAE,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACtD,CAAC;IAED,IAAI,CAAC;QACD,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAEjE,MAAM,CAAC,cAAc,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;YAC/D,SAAS,CAAC,8BAA8B,WAAW,EAAE,CAAgC;YACrF,SAAS,CAAC,mDAAmD,WAAW,EAAE,CAA0B;SACvG,CAAC,CAAC;QAEH,IAAI,cAAc,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC;QACtC,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAExF,MAAM,aAAa,GAAG,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,IAAI,gBAAgB,CAAC;QACxE,MAAM,WAAW,GAAmB,QAAQ,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QAC7E,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEnG,MAAM,eAAe,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;QAErE,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClE,MAAM,eAAe,GAAG,eAAe;YACnC,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,MAAM,SAAS,CAAC,uCAAuC,kBAAkB,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;QAErG,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,EAAE,GAAG,IAAI,QAAQ,CAAC,UAAU,EAAE,GAAG,IAAI,IAAI,CAAC;QAChF,MAAM,aAAa,GAAG,OAAO;YACzB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;YACrD,CAAC,CAAC,IAAI,CAAC;QAEX,+DAA+D;QAC/D,qEAAqE;QACrE,gEAAgE;QAChE,MAAM,YAAY,GAAG,MACjB,SAAS,CACL,6CAA6C,WAAW,IAAI,aAAa,EAAE,CAElF,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAiC,CAAC,CAAC;QAEjD,MAAM,QAAQ,GAAG,YAAY,EAAE,IAAI,IAAI,IAAI,CAAC;QAC5C,MAAM,YAAY,GAAG,YAAY,EAAE,IAAI,IAAI,IAAI,CAAC;QAEhD,MAAM,eAAe,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAE/E,MAAM,QAAQ,GAAuC;YACjD,IAAI;YACJ,SAAS,EAAE,KAAK;YAChB,aAAa;YACb,gBAAgB;YAChB,WAAW;YACX,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;YACvC,OAAO,EAAE,WAAW,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,IAAI,SAAS;YAC7D,aAAa;YACb,eAAe,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI;YAC7C,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,IAAI;YACpB,YAAY,EAAE,WAAW,CAAC,IAAI,EAAE,YAAY,IAAI,IAAI;YACpD,QAAQ;YACR,YAAY;YACZ,eAAe;YACf,eAAe;YACf,eAAe;YACf,UAAU,EAAE,IAAI;SACnB,CAAC;QAEF,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACjC,OAAO,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,OAAO,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;IACjF,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CACnB,IAAY,EACZ,SAAuC,EACvC,gBAAwB,EACxB,KAAa;IAEb,OAAO;QACH,IAAI;QACJ,SAAS;QACT,aAAa,EAAE,gBAAgB;QAC/B,gBAAgB;QAChB,WAAW,EAAE,IAAI;QACjB,WAAW,EAAE,EAAE;QACf,OAAO,EAAE,SAAS;QAClB,aAAa,EAAE,IAAI;QACnB,eAAe,EAAE,IAAI;QACrB,gBAAgB,EAAE,IAAI;QACtB,cAAc,EAAE,IAAI;QACpB,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,eAAe,EAAE,KAAK;QACtB,eAAe,EAAE,EAAE;QACnB,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,KAAK;KACpB,CAAC;AACN,CAAC"}

package/dist/ecosystems/pypi.d.ts

@@ -0,0 +1,2 @@
+import type { PackageMetadata } from '../core/types.js';
+export declare function fetchPypi(name: string, requestedVersion: string, noCache: boolean): Promise<PackageMetadata>;

package/dist/ecosystems/pypi.js

@@ -0,0 +1,80 @@
+import { fetchJson } from '../utils/http.js';
+import { cache } from '../core/cache.js';
+import { fetchVulnerabilities } from '../core/vulnerabilities.js';
+export async function fetchPypi(name, requestedVersion, noCache) {
+    if (!noCache) {
+        const cached = cache.get('pypi', name);
+        if (cached)
+            return { ...cached, fromCache: true };
+    }
+    try {
+        const [infoResult, statsResult] = await Promise.allSettled([
+            fetchJson(`https://pypi.org/pypi/${encodeURIComponent(name)}/json`),
+            fetchJson(`https://pypistats.org/api/packages/${encodeURIComponent(name.toLowerCase())}/recent`),
+        ]);
+        if (infoResult.status === 'rejected') {
+            throw new Error(String(infoResult.reason));
+        }
+        const pkg = infoResult.value;
+        const stats = statsResult.status === 'fulfilled' ? statsResult.value : null;
+        const latestVersion = pkg.info.version;
+        const latestReleases = pkg.releases?.[latestVersion] ?? pkg.urls ?? [];
+        const lastRelease = latestReleases[latestReleases.length - 1];
+        const publishedAt = lastRelease?.upload_time ? new Date(lastRelease.upload_time + 'Z') : null;
+        const urls = pkg.info.project_urls ?? {};
+        const repositoryUrl = urls['Source Code'] ??
+            urls['Source'] ??
+            urls['Repository'] ??
+            urls['GitHub'] ??
+            urls['Homepage'] ??
+            pkg.info.home_page ??
+            null;
+        const vulnerabilities = await fetchVulnerabilities(name, 'pypi', latestVersion);
+        const metadata = {
+            name,
+            ecosystem: 'pypi',
+            latestVersion,
+            requestedVersion,
+            publishedAt,
+            description: pkg.info.summary ?? '',
+            license: pkg.info.license ?? 'Unknown',
+            repositoryUrl,
+            weeklyDownloads: null,
+            monthlyDownloads: stats?.data?.last_month ?? null,
+            totalDownloads: null,
+            unpackedSize: null,
+            gzipSize: null,
+            minifiedSize: null,
+            hasBuiltinTypes: false,
+            hasTypesPackage: false,
+            vulnerabilities,
+            fetchError: null,
+        };
+        cache.set('pypi', name, metadata);
+        return { ...metadata, fromCache: false };
+    }
+    catch (err) {
+        return {
+            name,
+            ecosystem: 'pypi',
+            latestVersion: requestedVersion,
+            requestedVersion,
+            publishedAt: null,
+            description: '',
+            license: 'Unknown',
+            repositoryUrl: null,
+            weeklyDownloads: null,
+            monthlyDownloads: null,
+            totalDownloads: null,
+            unpackedSize: null,
+            gzipSize: null,
+            minifiedSize: null,
+            hasBuiltinTypes: false,
+            hasTypesPackage: false,
+            vulnerabilities: [],
+            fromCache: false,
+            fetchError: err.message,
+        };
+    }
+}
+//# sourceMappingURL=pypi.js.map

package/dist/ecosystems/pypi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pypi.js","sourceRoot":"","sources":["../../src/ecosystems/pypi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AA0BlE,MAAM,CAAC,KAAK,UAAU,SAAS,CAC3B,IAAY,EACZ,gBAAwB,EACxB,OAAgB;IAEhB,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,MAAM;YAAE,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACtD,CAAC;IAED,IAAI,CAAC;QACD,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;YACvD,SAAS,CAAC,yBAAyB,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAsB;YACxF,SAAS,CACL,sCAAsC,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,SAAS,CAClE;SAC1B,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC;QAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAE5E,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;QACvC,MAAM,cAAc,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACvE,MAAM,WAAW,GAAG,cAAc,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAE9F,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;QACzC,MAAM,aAAa,GACf,IAAI,CAAC,aAAa,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC;YACd,IAAI,CAAC,YAAY,CAAC;YAClB,IAAI,CAAC,QAAQ,CAAC;YACd,IAAI,CAAC,UAAU,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC,SAAS;YAClB,IAAI,CAAC;QAET,MAAM,eAAe,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QAEhF,MAAM,QAAQ,GAAuC;YACjD,IAAI;YACJ,SAAS,EAAE,MAAM;YACjB,aAAa;YACb,gBAAgB;YAChB,WAAW;YACX,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE;YACnC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,SAAS;YACtC,aAAa;YACb,eAAe,EAAE,IAAI;YACrB,gBAAgB,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,IAAI,IAAI;YACjD,cAAc,EAAE,IAAI;YACpB,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,KAAK;YACtB,eAAe;YACf,UAAU,EAAE,IAAI;SACnB,CAAC;QAEF,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAClC,OAAO,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,OAAO;YACH,IAAI;YACJ,SAAS,EAAE,MAAM;YACjB,aAAa,EAAE,gBAAgB;YAC/B,gBAAgB;YAChB,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,SAAS;YAClB,aAAa,EAAE,IAAI;YACnB,eAAe,EAAE,IAAI;YACrB,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,IAAI;YACpB,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,EAAE;YACnB,SAAS,EAAE,KAAK;YAChB,UAAU,EAAG,GAAa,CAAC,OAAO;SACrC,CAAC;IACN,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};