depvitals 0.1.1 → 0.2.0

package/dist/scanner/scriptUsage.js

@@ -9,8 +9,8 @@
  * It deliberately does not:
  * - execute, expand, substitute, resolve, spawn, source or evaluate anything;
  * - shell-out, read the filesystem or consult `node_modules`;
- * - map arbitrary shell binaries to packages; only the small, explicit `BINARY_TO_PACKAGE` list
- *   (currently `tsc` -> `typescript`) is ever translated, and only against declared packages;
+ * - map arbitrary shell binaries to packages; only the small, explicit `BINARY_TO_PACKAGE` list is
+ *   ever translated, and only against declared packages;
  * - report missing dependencies (undeclared command tokens are ignored);
  * - inspect installed `bin` metadata, config, workspaces or framework detectors.
  *
@@ -20,8 +20,13 @@
  * - a shell segment's first effective command token counts only when that token is exactly a package
  *   name, so paths and package subpaths (`scripts/build.js`, `eslint/bin/cli`) are never usage
  *   evidence for the package they point into;
- * - the small explicit `BINARY_TO_PACKAGE` list translates a recognized direct executable (currently
- *   `tsc` -> `typescript`) to its declared package; every other command keeps exact-name matching.
+ * - the explicit `BINARY_TO_PACKAGE` allowlist translates a recognized direct executable (for
+ *   example `tsc` -> `typescript`) to its declared package; every other command keeps exact-name
+ *   matching. Collision-sensitive entries keep exact-name precedence instead (see
+ *   `COLLISION_SENSITIVE_BINARIES`), so one executable never marks two competing providers as used.
+ * - the catalog is a static allowlist of known executable aliases: every entry was verified against
+ *   the published `bin` metadata of its package before being added. It is not auto-discovery of npm
+ *   `bin` fields and it is not framework support - any other executable keeps exact-name matching;
  * - the five documented package-runner forms count (`npx`, `npm exec`, `pnpm exec`, `pnpm dlx`,
  *   `yarn dlx`) with the package in its immediate position;
  * - leading POSIX environment assignments (`NODE_ENV=test`, `FOO=1 BAR=2`) are skipped;
@@ -58,8 +63,160 @@ const ASSIGNMENT_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*=/;
  * - `tsc` is the compiler front-end of the `typescript` package; the deprecated standalone `tsc`
  *   npm package is intentionally NOT treated as providing the TypeScript compiler.
  * - `docsify` is the executable provided by the `docsify-cli` package.
- * Only lowercase `tsc` and `docsify` map; runner forms such as `npx tsc` or `npx docsify` keep their
- * own (unmapped) semantics for now.
+ * - `ng` is the executable provided by the `@angular/cli` package.
+ * - `nest` is the executable provided by the `@nestjs/cli` package.
+ * - `babel` is the executable provided by the `@babel/cli` package.
+ * - `swc` is one of the executables provided by the `@swc/cli` package; the sibling `spack`
+ *   executable is deliberately not mapped.
+ * - `postcss` is the executable provided by the `postcss-cli` package, and `dotenv` the one provided
+ *   by `dotenv-cli`. Both are collision-sensitive: a real unrelated package with the exact same name
+ *   exists, so they are listed in `COLLISION_SENSITIVE_BINARIES` and keep exact-name precedence.
+ * - `changeset` (singular only) is the executable provided by the `@changesets/cli` package; the
+ *   plural `changesets` is not a published bin and is deliberately not matched.
+ * - `commitlint` is the executable provided by the `@commitlint/cli` package.
+ * - `graphql-codegen`, `gql-gen` and `graphql-code-generator` are three published executables of the
+ *   same `@graphql-codegen/cli` package; several commands may map to one package, and the result is
+ *   still a single usage classification. The additional `graphql-codegen-cjs` / `graphql-codegen-esm`
+ *   bins are not candidates and stay unmapped.
+ * - `openapi-generator-cli` is the executable provided by
+ *   `@openapitools/openapi-generator-cli`.
+ * - `run-p` and `run-s` are the executables provided by `npm-run-all`, `conc` by `concurrently`, and
+ *   `ncu` by `npm-check-updates`. These are runners: they are recognized as the tool that runs, never
+ *   followed into their arguments, so `run-p vite` never marks a declared `vite` as used and `conc
+ *   "vite" "tsc"` never marks `vite` or `typescript` as used.
+ * - `gulp` is the executable provided by `gulp-cli`, `grunt` by `grunt-cli`, and `sequelize` by
+ *   `sequelize-cli`. All three names are also plausible declared packages, so each is
+ *   collision-sensitive: the same-name package keeps precedence when declared, and a single command
+ *   never marks a CLI and its library as used together. Task runners and database CLIs are never
+ *   executed and their task names are never interpreted.
+ * - `ngc` and `ng-xi18n` are executables provided by `@angular/compiler-cli` (verified for the published
+ *   17.x/20.x/22.x line). They are unrelated to the `ng` command, which keeps mapping to `@angular/cli`
+ *   alone: `ng build` never credits `@angular/compiler-cli`, and the older `ngcc` executable is not a
+ *   candidate and stays unmapped. `ngc` is itself a published package, so it is collision-sensitive and
+ *   keeps exact-name precedence; `ng-xi18n` is not published under that name.
+ * - `biome` is the executable provided by `@biomejs/biome`. The platform-specific `@biomejs/cli-*`
+ *   packages are optional dependencies of that package and are never inferred from the command: only the
+ *   declared `@biomejs/biome` receives evidence. `biome` is also an unrelated published package, so it is
+ *   collision-sensitive and keeps exact-name precedence. No lint or format run is executed.
+ * - `markdownlint`, `remark` and `rehype` are the executables provided by `markdownlint-cli`,
+ *   `remark-cli` and `rehype-cli`. All three names are also published as unrelated library packages with
+ *   no bin at all, so all three are collision-sensitive and keep exact-name precedence: a project that
+ *   declares the `markdownlint` library and runs `markdownlint README.md` credits the library, not
+ *   `markdownlint-cli`. The libraries, their plugins (`remark-parse`, `rehype-stringify`, ...) and the
+ *   separate `markdownlint-cli2` package are never inferred from these commands, and nothing is executed.
+ * - `depcruise`, `depcruise-baseline` and `depcruise-fmt` are three published executables of the
+ *   `dependency-cruiser` package (verified against the published `bin` metadata, latest 18.6.0). `depcruise` is the
+ *   primary shorthand; the other two are the baseline and formatting helper binaries. The bare
+ *   `depcruise` name is also published as a defensive placeholder package (1.0.0, no bin) whose only
+ *   purpose is to prevent dependency confusion, so it is collision-sensitive and keeps exact-name
+ *   precedence, while `depcruise-baseline` and `depcruise-fmt` are not published under their own names
+ *   and simply credit `dependency-cruiser`. None of the three runs a real dependency-cruiser report and
+ *   no config is evaluated.
+ * - `tsserver` is the language-server executable shipped by the `typescript` package next to `tsc`
+ *   (verified for the published 4.x/5.x/6.x line; the 7.x package no longer lists this bin, which is
+ *   irrelevant here because no version resolution is performed and `typescript` is the only provider of
+ *   that executable name). It is not collision-sensitive: no `tsserver` package exists on the registry.
+ *   The language server is never started, only recognized as a command token.
+ * - `ts-node-cwd`, `ts-node-esm`, `ts-node-script` and `ts-node-transpile-only` are additional
+ *   executables provided by `ts-node`. Each name is also published as a separate package (a wrapper for
+ *   the same binary, or an unrelated example package), so all four are collision-sensitive and keep
+ *   exact-name precedence. The plain `ts-node` command keeps its existing exact-name match and is not a
+ *   mapping, and `ts-script` is not a candidate.
+ * - `vue-cli-service` is the executable provided by `@vue/cli-service`, and `babel-node` by
+ *   `@babel/node`. Both names are also published as separate packages, so they are collision-sensitive
+ *   and keep exact-name precedence. Neither command implies the runtime libraries: `vue` and
+ *   `@babel/core` receive no evidence from `vue-cli-service` or `babel-node`, and no build or
+ *   transpilation is executed.
+ * - `cross-env-shell` is the executable provided by the `cross-env` package alongside the plain
+ *   `cross-env`. `lessc` is the Less compiler executable provided by the `less` package, and
+ *   `coffee`/`cake` (the task runner) are the executables provided by the modern `coffeescript`
+ *   package. All four names are also published as separate packages (`cross-env-shell@7.0.3` a legacy
+ *   wrapper, `lessc@1.0.2` a no-op npx shim, `coffee@5.5.1` an unrelated CLI, `cake@0.1.1` a legacy
+ *   CoffeeScript make), so all four are collision-sensitive and keep exact-name precedence: a project
+ *   that declares the same-named package credits it, and only when that exact-name package is absent
+ *   does the command credit `cross-env`, `less` or `coffeescript`. The legacy `coffee-script` package
+ *   is never inferred, `cross-env-shell`'s nested shell string is never parsed, and nothing is
+ *   compiled or executed.
+ * - `uglifyjs` is the minifier executable provided by the `uglify-js` package, and `css-beautify`
+ *   /`html-beautify` are two of the three executables provided by the `js-beautify` package (the
+ *   third is the plain `js-beautify`). `uglifyjs` and `html-beautify` are also published as separate
+ *   packages (`uglifyjs@2.4.11` a legacy redirect to `uglify-js`, `html-beautify@1.0.4` an unrelated
+ *   formatter), so those two are collision-sensitive and keep exact-name precedence, while `css-beautify`
+ *   is not published under its own name and simply credits `js-beautify`. The plain `js-beautify`
+ *   command keeps its existing exact-name match, and nothing is minified or formatted.
+ * - `esparse` and `esvalidate` are the two auxiliary CLIs provided by the legacy `esprima` package
+ *   (verified in the published 4.0.1 `bin` map). Both names are also published as separate packages
+ *   (`esparse@0.6.11` an older ECMAScript parser, `esvalidate@0.1.3` a validation CLI), so both are
+ *   collision-sensitive and keep exact-name precedence: a project that declares the same-named package
+ *   credits it, and only when that exact-name package is absent does the command credit `esprima`. The
+ *   parser is never run, only recognized as a command token.
+ * - `cap` and `capacitor` are the two executables provided by the hybrid-app CLI `@capacitor/cli`
+ *   (verified in the published 8.5.3 `bin` map). `tauri` is the desktop-app CLI of `@tauri-apps/cli`
+ *   (2.12.3) and `ionic` the mobile-app CLI of `@ionic/cli` (7.2.1). Every one of these four names is
+ *   also published as a separate, unrelated package (`cap@0.2.1` packet capture, `capacitor@0.5.6`
+ *   an old Flux library, `tauri@0.15.0` a multi-binding toolkit, `ionic@5.4.16` an old framework
+ *   tool), so all four are collision-sensitive and keep exact-name precedence: a project that declares
+ *   the same-named package credits it, and only when that exact-name package is absent does the command
+ *   credit `@capacitor/cli`, `@tauri-apps/cli` or `@ionic/cli`. These mappings never imply the
+ *   companion runtime packages (`@tauri-apps/api`, `@ionic/core`); the apps are never built.
+ * - `vue` is the legacy Vue CLI executable of `@vue/cli` (5.0.9). `eas` the Expo EAS CLI of
+ *   `eas-cli` (25.2.0). Neither `vue@3.5.44` nor `eas@0.1.0` publishes those executable names, so
+ *   both mappings are ordinary (Category B) and always credit the real CLI package when declared:
+ *   `vue create` credits `@vue/cli` and `eas build` credits `eas-cli`. These mappings never imply
+ *   companion packages (`vue` never implies the framework, `eas` never implies `expo`).
+ * - `electron-forge` is the desktop tooling CLI of `@electron-forge/cli` (8.0.1). Unlike the two
+ *   names above, `electron-forge@5.2.4` does publish an `electron-forge` executable, so the exact-name
+ *   package is a real competing provider: `electron-forge` is collision-sensitive and keeps exact-name
+ *   precedence, crediting `@electron-forge/cli` only when the `electron-forge` package is absent.
+ *   Neither command implies the core `electron` runtime; the apps are never built.
+ * - `firebase`, `netlify` and `cdk` are the Firebase CLI (`firebase-tools`), the Netlify CLI
+ *   (`netlify-cli`) and the AWS CDK toolkit (`aws-cdk`) executables. Verified in the published `bin`
+ *   maps: `firebase-tools@15.34.0` (2026-10-14, unchanged in `firebase-tools@14.25.0`) publishes
+ *   `firebase`, `netlify-cli@27.13.0` (2026-10-16, unchanged in `netlify-cli@17.38.1`) publishes `netlify`
+ *   next to its `ntl` alias, and `aws-cdk@2.1145.0` (2026-10-08, unchanged in `aws-cdk@1.204.0`) publishes
+ *   `cdk`. `cdk` alone needs the collision rule because `cdk@2.1145.0` is the published wrapper of the same
+ *   toolkit (it depends on `aws-cdk@2.1145.0`) and ships the identical executable, so it is registered
+ *   below and keeps exact-name precedence. The `firebase` SDK and the `netlify` client library never
+ *   publish their homonymous executables (`firebase@8.10.1`, `11.10.0` and `13.0.0` publish no bin, and
+ *   `netlify@0.3.3`, `2.4.8`, `8.0.0`, `12.0.0` and `13.0.0` publish none while `netlify@22.0.0`, `23.0.0`
+ *   and `27.13.0` publish only `npxnetlify`), so those two mappings are ordinary and a declared `firebase`
+ *   or `netlify` runtime package is never credited from a CLI command. `aws-cdk-lib@2.273.0` publishes no
+ *   bin at all, so `cdk` never credits the CDK construct library; no cloud project is contacted or
+ *   deployed.
+ * - `sls`, `cz` and `manypkg` are the short command names of the Serverless Framework CLI
+ *   (`serverless`), the Commitizen CLI (`commitizen`) and the monorepo package-lint CLI (`@manypkg/cli`).
+ *   Verified in the published `bin` maps: `serverless@4.44.0` (2026-10-14, unchanged in
+ *   `serverless@3.38.0` and `2.72.4`) publishes `sls` next to `serverless`, `commitizen@4.3.2`
+ *   (2026-06-12) publishes `cz` next to `git-cz`/`commitizen`, and `@manypkg/cli@0.25.1` (2025-08-28,
+ *   unchanged in `0.19.0` and `0.21.1`) publishes `manypkg`. Only `sls` needs the collision rule: the
+ *   unrelated `sls@0.1.0` directory-listing tool ships its own `bin/sls`, so a declared `sls` keeps
+ *   exact-name precedence and `serverless` is not additionally credited from the same command.
+ *   `cz@1.8.2` is a config utility with no bin and `manypkg` is not a published package at all, so those
+ *   two mappings are ordinary and a declared `cz` package never receives evidence from a `cz` command.
+ *   The `cz` bin itself only exists since `commitizen@4.2.0` (the older lines published `git-cz` and
+ *   `commitizen`), which is accepted here because no version resolution is performed: the declared
+ *   `commitizen` package is the only provider of the `cz` name. The Commitizen adapters
+ *   (`cz-conventional-changelog`) and the `@manypkg/*` libraries stay uncalled, and nothing is
+ *   committed, deployed or rewritten.
+ * - `dotenvx` is the CLI of the scoped `@dotenvx/dotenvx` package. Verified in the published `bin` maps:
+ *   `@dotenvx/dotenvx@2.38.0` (2026-10-16) publishes `dotenvx` next to its `dx` alias, and the same
+ *   `dotenvx` key is published by `@dotenvx/dotenvx@1.24.2` and `1.0.0`, so the executable is stable across
+ *   the major lines. The mapping is ordinary because the bare `dotenvx` name is not published at all
+ *   (registry 404) and therefore is not a competing provider. Its short `dx` alias is deliberately not
+ *   mapped: `dx@1.1.6` is an unrelated published package that ships its own `bin/dx`, which would need the
+ *   collision rule. A `dotenvx` command never credits the `dotenv` library (`dotenv@18.0.8`, a separate
+ *   collision-sensitive mapping key), `dotenv-cli`, or `dotenv-flow@4.1.0`, and `dotenv` never credits
+ *   `@dotenvx/dotenvx`; no environment file is read, loaded or written.
+ *
+ * Ambiguous providers are deliberately absent from the list. `tailwindcss` is the published executable
+ * of `tailwindcss` in v3 and of `@tailwindcss/cli` in v4, `playwright` is published by both `playwright`
+ * and `@playwright/test`, and `webpack-cli` publishes no `webpack` bin at all. Choosing one provider
+ * statically would invent usage, so those commands only ever credit an exactly declared same-name
+ * package and otherwise produce no evidence.
+ *
+ * Only these lowercase executables map; runner forms such as `npx tsc` keep their own (unmapped)
+ * semantics. A CLI executable never stands in for a related library package: `@babel/core` and
+ * `@swc/core` are separate declarations and receive no evidence from `babel`/`swc`.
  *
  * The mapping is applied after safe command extraction and can only match a package that is actually
  * declared, so it can never create a missing-dependency finding. When both a bare package name and
@@ -70,6 +227,108 @@ const ASSIGNMENT_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*=/;
 const BINARY_TO_PACKAGE = new Map([
     ['tsc', 'typescript'],
     ['docsify', 'docsify-cli'],
+    ['ng', '@angular/cli'],
+    ['nest', '@nestjs/cli'],
+    ['babel', '@babel/cli'],
+    ['swc', '@swc/cli'],
+    ['postcss', 'postcss-cli'],
+    ['dotenv', 'dotenv-cli'],
+    ['changeset', '@changesets/cli'],
+    ['commitlint', '@commitlint/cli'],
+    ['graphql-codegen', '@graphql-codegen/cli'],
+    ['gql-gen', '@graphql-codegen/cli'],
+    ['graphql-code-generator', '@graphql-codegen/cli'],
+    ['openapi-generator-cli', '@openapitools/openapi-generator-cli'],
+    ['run-p', 'npm-run-all'],
+    ['run-s', 'npm-run-all'],
+    ['conc', 'concurrently'],
+    ['ncu', 'npm-check-updates'],
+    ['gulp', 'gulp-cli'],
+    ['grunt', 'grunt-cli'],
+    ['sequelize', 'sequelize-cli'],
+    ['vue-cli-service', '@vue/cli-service'],
+    ['babel-node', '@babel/node'],
+    ['tsserver', 'typescript'],
+    ['ts-node-cwd', 'ts-node'],
+    ['ts-node-esm', 'ts-node'],
+    ['ts-node-script', 'ts-node'],
+    ['ts-node-transpile-only', 'ts-node'],
+    ['ngc', '@angular/compiler-cli'],
+    ['ng-xi18n', '@angular/compiler-cli'],
+    ['biome', '@biomejs/biome'],
+    ['markdownlint', 'markdownlint-cli'],
+    ['remark', 'remark-cli'],
+    ['rehype', 'rehype-cli'],
+    ['depcruise', 'dependency-cruiser'],
+    ['depcruise-baseline', 'dependency-cruiser'],
+    ['depcruise-fmt', 'dependency-cruiser'],
+    ['cross-env-shell', 'cross-env'],
+    ['lessc', 'less'],
+    ['coffee', 'coffeescript'],
+    ['cake', 'coffeescript'],
+    ['uglifyjs', 'uglify-js'],
+    ['css-beautify', 'js-beautify'],
+    ['html-beautify', 'js-beautify'],
+    ['esparse', 'esprima'],
+    ['esvalidate', 'esprima'],
+    ['cap', '@capacitor/cli'],
+    ['capacitor', '@capacitor/cli'],
+    ['tauri', '@tauri-apps/cli'],
+    ['ionic', '@ionic/cli'],
+    ['vue', '@vue/cli'],
+    ['electron-forge', '@electron-forge/cli'],
+    ['eas', 'eas-cli'],
+    ['firebase', 'firebase-tools'],
+    ['netlify', 'netlify-cli'],
+    ['cdk', 'aws-cdk'],
+    ['sls', 'serverless'],
+    ['cz', 'commitizen'],
+    ['manypkg', '@manypkg/cli'],
+    ['dotenvx', '@dotenvx/dotenvx'],
+]);
+/**
+ * Mapped executables whose package name is also a real, unrelated published package.
+ *
+ * For these, the exact-name package keeps precedence whenever it is declared, so a single command
+ * such as `postcss src/index.css -o dist/index.css` never marks both `postcss` and `postcss-cli` as
+ * used. Only when the exact-name package is absent may the mapping provide evidence for the declared
+ * CLI package. A same-named package may also be the wrapper of the very same CLI (`cdk@2.1145.0`); the
+ * rule is unchanged and the declared exact-name package wins. Every other mapped executable keeps the
+ * opposite (Category A) precedence described on {@link BINARY_TO_PACKAGE}.
+ */
+const COLLISION_SENSITIVE_BINARIES = new Set([
+    'postcss',
+    'dotenv',
+    'gulp',
+    'grunt',
+    'sequelize',
+    'vue-cli-service',
+    'babel-node',
+    'ts-node-cwd',
+    'ts-node-esm',
+    'ts-node-script',
+    'ts-node-transpile-only',
+    'ngc',
+    'biome',
+    'markdownlint',
+    'remark',
+    'rehype',
+    'depcruise',
+    'cross-env-shell',
+    'lessc',
+    'coffee',
+    'cake',
+    'uglifyjs',
+    'html-beautify',
+    'esparse',
+    'esvalidate',
+    'cap',
+    'capacitor',
+    'tauri',
+    'ionic',
+    'electron-forge',
+    'cdk',
+    'sls',
 ]);
 /**
  * Recognize the declared dependencies that `package.json` scripts clearly reference.
@@ -78,7 +337,8 @@ const BINARY_TO_PACKAGE = new Map([
  * evidence (a command token, a recognized executable mapped through `BINARY_TO_PACKAGE`, or a
  * supported runner package position) and keeps only those that are present in
  * {@link declaredPackageNames}. Undeclared command tokens and undeclared mapped packages are ignored:
- * this module never creates missing-dependency findings.
+ * this module never creates missing-dependency findings. The declared names are also consulted when
+ * resolving a collision-sensitive executable, which needs them to keep exact-name precedence.
  *
  * The result is built in alphabetical package-name order so iteration is deterministic. Neither
  * {@link scripts} nor {@link declaredPackageNames} is mutated.
@@ -89,7 +349,7 @@ const BINARY_TO_PACKAGE = new Map([
 export function findPackageScriptUsage(scripts, declaredPackageNames) {
     const used = new Set();
     for (const command of Object.values(scripts)) {
-        for (const candidate of collectScriptCandidates(command)) {
+        for (const candidate of collectScriptCandidates(command, declaredPackageNames)) {
             if (declaredPackageNames.has(candidate)) {
                 used.add(candidate);
             }
@@ -103,8 +363,11 @@ export function findPackageScriptUsage(scripts, declaredPackageNames) {
  * Each shell segment contributes at most one candidate: the package supplied to a supported runner
  * form, or the segment's first effective command token when that token is exactly a package name.
  * Segments containing unsupported shell syntax contribute nothing.
+ *
+ * `declaredPackageNames` is only used to resolve collision-sensitive executables, which need to know
+ * whether the exact-name package is declared before choosing the candidate.
  */
-function collectScriptCandidates(command) {
+function collectScriptCandidates(command, declaredPackageNames) {
     const candidates = [];
     for (const segment of splitSegments(command)) {
         // An unsupported segment is never partially trusted, not even its leading command.
@@ -134,11 +397,20 @@ function collectScriptCandidates(command) {
         // `eslint/bin/cli` or a script path such as `scripts/build.js` is never usage evidence.
         const classification = classifyPackageSpecifier(commandName);
         if (classification.kind === 'external' && commandName === classification.packageName) {
-            // An explicit executable mapping takes precedence over same-name matching: `tsc` resolves to
-            // the declared `typescript` package only, never to a hypothetical `tsc` package, so a single
-            // executable yields at most one piece of usage evidence.
+            // A single executable always yields at most one piece of usage evidence. Unmapped commands and
+            // Category A mappings resolve to the mapped package (`tsc` is `typescript`, never a
+            // hypothetical `tsc` package). Collision-sensitive executables keep exact-name precedence, so
+            // the same command never marks two competing providers as used.
             const mapped = BINARY_TO_PACKAGE.get(commandName);
-            candidates.push(mapped ?? commandName);
+            if (mapped === undefined) {
+                candidates.push(commandName);
+            }
+            else if (COLLISION_SENSITIVE_BINARIES.has(commandName)) {
+                candidates.push(declaredPackageNames.has(commandName) ? commandName : mapped);
+            }
+            else {
+                candidates.push(mapped);
+            }
         }
     }
     return candidates;
@@ -189,9 +461,12 @@ function matchRunnerPackage(significant) {
  * text inside quotes from being misread, and to detect the syntax it refuses to interpret. It never
  * executes, expands or substitutes anything.
  *
- * Unsupported constructs (single `&`, redirection, `$(...)`, `${...}`, quotes left open at the end of
- * the script) mark the current segment as unsupported instead of guessing tokens from inside it. The
- * marker is reset by the next real separator, so invalidation stays local to the affected segment.
+ * A `#` at a word boundary starts a POSIX comment that runs to the next line terminator; its body is
+ * skipped before any separator inside it can be interpreted, so a commented command is never credited
+ * (Step 68.1). Unsupported constructs (single `&`, redirection, `$(...)`, `${...}`, quotes left open
+ * at the end of the script) mark the current segment as unsupported instead of guessing tokens from
+ * inside it. The marker is reset by the next real separator, so invalidation stays local to the
+ * affected segment.
  */
 function splitSegments(script) {
     const segments = [];
@@ -215,6 +490,18 @@ function splitSegments(script) {
             i += 1;
             continue;
         }
+        // A `#` at a word boundary (start of script, after a separator, or after whitespace) starts a
+        // POSIX comment. Everything up to the next LF is inert: separators inside it (`;`, `&&`, ...) are
+        // skipped with the comment, so they never reach the segment logic and cannot split a segment or be
+        // misread as commands. The line terminator that ends the comment then flushes the segment that
+        // preceded it, so commands before the comment keep their evidence and commands on later lines are
+        // still analyzed. This is detected here, before any separator inside the comment could run, and
+        // never inside a token: `abc#def` and quoted `"#"` stay ordinary words, and `${#foo}` is consumed
+        // as an unsupported expansion by `scanToken` before the `#` could be seen at the loop boundary.
+        if (ch === '#') {
+            i = skipCommentToEndOfLine(script, i);
+            continue;
+        }
         // Supported separators. `&&`/`||` are two-character; `;`, `|` and newline are single-character.
         if (ch === ';' || ch === '\n') {
             i += 1;
@@ -254,6 +541,23 @@ function splitSegments(script) {
     segments.push({ tokens, unsupported });
     return segments;
 }
+/**
+ * Skip a POSIX comment that starts at `start`, which must point at a `#`, and return the index just
+ * at the next LF, or the end of the script when none follows.
+ *
+ * Only the terminator that ends the comment is left for the loop: it is then treated as a separator
+ * that flushes the preceding segment. A lone CR (no LF) is left for the loop to skip as whitespace,
+ * so both LF and CRLF line endings end the comment and let the next line be analyzed. The comment
+ * body is never tokenized, so no separator or command inside it is ever interpreted.
+ */
+function skipCommentToEndOfLine(script, start) {
+    let i = start + 1;
+    const length = script.length;
+    while (i < length && script[i] !== '\n') {
+        i += 1;
+    }
+    return i;
+}
 /**
  * Scan a single unquoted token starting at `start`.
  *

package/dist/scanner/scriptUsage.js.map

@@ -1 +1 @@
-{"version":3,"file":"scriptUsage.js","sourceRoot":"","sources":["../../src/scanner/scriptUsage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAsBjE;;;;;;GAMG;AACH,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAE9F;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AAEtD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,iBAAiB,GAAgC,IAAI,GAAG,CAAC;IAC7D,CAAC,KAAK,EAAE,YAAY,CAAC;IACrB,CAAC,SAAS,EAAE,aAAa,CAAC;CAC3B,CAAC,CAAC;AAEH;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAyC,EACzC,oBAAyC;IAEzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,KAAK,MAAM,SAAS,IAAI,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,IAAI,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;GAMG;AACH,SAAS,uBAAuB,CAAC,OAAe;IAC9C,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,KAAK,MAAM,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,mFAAmF;QACnF,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QAED,MAAM,WAAW,GAAG,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAE3D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,SAAS;QACX,CAAC;QAED,MAAM,aAAa,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QAED,+FAA+F;QAC/F,+BAA+B;QAC/B,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QAC1C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QAED,IAAI,wBAAwB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9C,SAAS;QACX,CAAC;QAED,gGAAgG;QAChG,uFAAuF;QACvF,wFAAwF;QACxF,MAAM,cAAc,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;QAC7D,IAAI,cAAc,CAAC,IAAI,KAAK,UAAU,IAAI,WAAW,KAAK,cAAc,CAAC,WAAW,EAAE,CAAC;YACrF,6FAA6F;YAC7F,6FAA6F;YAC7F,yDAAyD;YACzD,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAClD,UAAU,CAAC,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,OAAyB;IACvD,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,OAAO,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACjE,MAAM;QACR,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,WAA6B;IACvD,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IAEtC,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IAC/B,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,CAAC;IAED,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QACzC,OAAO,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,CAAC;IAED,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,IAAI,MAAM,GAAqB,EAAE,CAAC;IAClC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAE7B,+EAA+E;IAC/E,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACvC,MAAM,GAAG,EAAE,CAAC;QACZ,WAAW,GAAG,KAAK,CAAC;IACtB,CAAC,CAAC;IAEF,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC;QAClB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM;QACR,CAAC;QAED,gDAAgD;QAChD,IAAI,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC;YACrB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,gGAAgG;QAChG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAC9B,CAAC,IAAI,CAAC,CAAC;YACP,KAAK,EAAE,CAAC;YACR,SAAS;QACX,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,CAAC,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,KAAK,EAAE,CAAC;YACR,SAAS;QACX,CAAC;QAED,iGAAiG;QACjG,gGAAgG;QAChG,oEAAoE;QACpE,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC1B,CAAC,IAAI,CAAC,CAAC;gBACP,KAAK,EAAE,CAAC;YACV,CAAC;iBAAM,CAAC;gBACN,CAAC,IAAI,CAAC,CAAC;gBACP,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC;YACD,SAAS;QACX,CAAC;QAED,iGAAiG;QACjG,kEAAkE;QAClE,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,GAAG,CAAC,GAAG,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACvC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAWD;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,MAAc,EAAE,KAAa;IAC9C,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,CAAC,GAAG,KAAK,CAAC;IAEd,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM;QACR,CAAC;QAED,IAAI,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC9E,MAAM;QACR,CAAC;QAED,mFAAmF;QACnF,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,WAAW,GAAG,IAAI,CAAC;YACnB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,0FAA0F;QAC1F,+FAA+F;QAC/F,qEAAqE;QACrE,IAAI,wBAAwB,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;YACxC,WAAW,GAAG,IAAI,CAAC;YACnB,CAAC,GAAG,qBAAqB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACrC,SAAS;QACX,CAAC;QAED,iGAAiG;QACjG,2FAA2F;QAC3F,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,WAAW,GAAG,IAAI,CAAC;YACnB,KAAK,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACpC,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1C,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBACb,wFAAwF;gBACxF,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YACzD,CAAC;YACD,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBAChB,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC;YACD,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC;YAClB,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;YACb,SAAS;QACX,CAAC;QAED,KAAK,IAAI,EAAE,CAAC;QACZ,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC;AAC/C,CAAC;AAeD;;;;;;;;GAQG;AACH,SAAS,UAAU,CAAC,MAAc,EAAE,KAAa,EAAE,KAAa;IAC9D,MAAM,YAAY,GAAG,KAAK,KAAK,GAAG,CAAC;IACnC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC,GAAG,KAAK,CAAC;IAEd,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM;QACR,CAAC;QAED,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;YACjB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACrD,CAAC;QAED,IAAI,YAAY,IAAI,wBAAwB,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;YACxD,2FAA2F;YAC3F,+FAA+F;YAC/F,kDAAkD;YAClD,OAAO,GAAG,IAAI,CAAC;YACf,CAAC,GAAG,qBAAqB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACrC,SAAS;QACX,CAAC;QAED,gGAAgG;QAChG,mFAAmF;QACnF,IAAI,YAAY,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChC,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACnC,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,IAAI,IAAI,EAAE,CAAC;QACX,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,IAAwB;IAC9C,OAAO,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,SAAS,wBAAwB,CAAC,MAAc,EAAE,KAAa;IAC7D,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,EAAE,KAAK,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAQD;;;;;;;;;;;;;;;GAeG;AACH,SAAS,qBAAqB,CAAC,MAAc,EAAE,KAAa;IAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,KAAK,GAAsB,EAAE,CAAC;IAEpC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACjC,IAAI,CAAS,CAAC;IACd,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAChB,CAAC;SAAM,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAChB,CAAC;SAAM,CAAC;QACN,0EAA0E;QAC1E,OAAO,KAAK,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,OAAO,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM;QACR,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAEzB,2FAA2F;QAC3F,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YAChB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACf,KAAK,CAAC,GAAG,EAAE,CAAC;YACd,CAAC;YACD,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,wFAAwF;QACxF,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,+FAA+F;YAC/F,6FAA6F;YAC7F,kBAAkB;YAClB,IAAI,EAAE,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAC9B,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,4FAA4F;YAC5F,IAAI,EAAE,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAC9B,KAAK,CAAC,GAAG,EAAE,CAAC;YACd,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjB,CAAC;YACD,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,IAAI,EAAE,KAAK,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACrC,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAChB,KAAK,CAAC,GAAG,EAAE,CAAC;YACd,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;YACD,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,qFAAqF;QACrF,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7C,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,CAAC;QACD,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IAED,iGAAiG;IACjG,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,CAAC;AAChF,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,CAAS,EAAE,CAAS;IACxC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACV,OAAO,CAAC,CAAC,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACV,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"scriptUsage.js","sourceRoot":"","sources":["../../src/scanner/scriptUsage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAsBjE;;;;;;GAMG;AACH,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAE9F;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AAEtD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwKG;AACH,MAAM,iBAAiB,GAAgC,IAAI,GAAG,CAAC;IAC7D,CAAC,KAAK,EAAE,YAAY,CAAC;IACrB,CAAC,SAAS,EAAE,aAAa,CAAC;IAC1B,CAAC,IAAI,EAAE,cAAc,CAAC;IACtB,CAAC,MAAM,EAAE,aAAa,CAAC;IACvB,CAAC,OAAO,EAAE,YAAY,CAAC;IACvB,CAAC,KAAK,EAAE,UAAU,CAAC;IACnB,CAAC,SAAS,EAAE,aAAa,CAAC;IAC1B,CAAC,QAAQ,EAAE,YAAY,CAAC;IACxB,CAAC,WAAW,EAAE,iBAAiB,CAAC;IAChC,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACjC,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;IAC3C,CAAC,SAAS,EAAE,sBAAsB,CAAC;IACnC,CAAC,wBAAwB,EAAE,sBAAsB,CAAC;IAClD,CAAC,uBAAuB,EAAE,qCAAqC,CAAC;IAChE,CAAC,OAAO,EAAE,aAAa,CAAC;IACxB,CAAC,OAAO,EAAE,aAAa,CAAC;IACxB,CAAC,MAAM,EAAE,cAAc,CAAC;IACxB,CAAC,KAAK,EAAE,mBAAmB,CAAC;IAC5B,CAAC,MAAM,EAAE,UAAU,CAAC;IACpB,CAAC,OAAO,EAAE,WAAW,CAAC;IACtB,CAAC,WAAW,EAAE,eAAe,CAAC;IAC9B,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;IACvC,CAAC,YAAY,EAAE,aAAa,CAAC;IAC7B,CAAC,UAAU,EAAE,YAAY,CAAC;IAC1B,CAAC,aAAa,EAAE,SAAS,CAAC;IAC1B,CAAC,aAAa,EAAE,SAAS,CAAC;IAC1B,CAAC,gBAAgB,EAAE,SAAS,CAAC;IAC7B,CAAC,wBAAwB,EAAE,SAAS,CAAC;IACrC,CAAC,KAAK,EAAE,uBAAuB,CAAC;IAChC,CAAC,UAAU,EAAE,uBAAuB,CAAC;IACrC,CAAC,OAAO,EAAE,gBAAgB,CAAC;IAC3B,CAAC,cAAc,EAAE,kBAAkB,CAAC;IACpC,CAAC,QAAQ,EAAE,YAAY,CAAC;IACxB,CAAC,QAAQ,EAAE,YAAY,CAAC;IACxB,CAAC,WAAW,EAAE,oBAAoB,CAAC;IACnC,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IAC5C,CAAC,eAAe,EAAE,oBAAoB,CAAC;IACvC,CAAC,iBAAiB,EAAE,WAAW,CAAC;IAChC,CAAC,OAAO,EAAE,MAAM,CAAC;IACjB,CAAC,QAAQ,EAAE,cAAc,CAAC;IAC1B,CAAC,MAAM,EAAE,cAAc,CAAC;IACxB,CAAC,UAAU,EAAE,WAAW,CAAC;IACzB,CAAC,cAAc,EAAE,aAAa,CAAC;IAC/B,CAAC,eAAe,EAAE,aAAa,CAAC;IAChC,CAAC,SAAS,EAAE,SAAS,CAAC;IACtB,CAAC,YAAY,EAAE,SAAS,CAAC;IACzB,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACzB,CAAC,WAAW,EAAE,gBAAgB,CAAC;IAC/B,CAAC,OAAO,EAAE,iBAAiB,CAAC;IAC5B,CAAC,OAAO,EAAE,YAAY,CAAC;IACvB,CAAC,KAAK,EAAE,UAAU,CAAC;IACnB,CAAC,gBAAgB,EAAE,qBAAqB,CAAC;IACzC,CAAC,KAAK,EAAE,SAAS,CAAC;IAClB,CAAC,UAAU,EAAE,gBAAgB,CAAC;IAC9B,CAAC,SAAS,EAAE,aAAa,CAAC;IAC1B,CAAC,KAAK,EAAE,SAAS,CAAC;IAClB,CAAC,KAAK,EAAE,YAAY,CAAC;IACrB,CAAC,IAAI,EAAE,YAAY,CAAC;IACpB,CAAC,SAAS,EAAE,cAAc,CAAC;IAC3B,CAAC,SAAS,EAAE,kBAAkB,CAAC;CAChC,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,4BAA4B,GAAwB,IAAI,GAAG,CAAC;IAChE,SAAS;IACT,QAAQ;IACR,MAAM;IACN,OAAO;IACP,WAAW;IACX,iBAAiB;IACjB,YAAY;IACZ,aAAa;IACb,aAAa;IACb,gBAAgB;IAChB,wBAAwB;IACxB,KAAK;IACL,OAAO;IACP,cAAc;IACd,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,iBAAiB;IACjB,OAAO;IACP,QAAQ;IACR,MAAM;IACN,UAAU;IACV,eAAe;IACf,SAAS;IACT,YAAY;IACZ,KAAK;IACL,WAAW;IACX,OAAO;IACP,OAAO;IACP,gBAAgB;IAChB,KAAK;IACL,KAAK;CACN,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAyC,EACzC,oBAAyC;IAEzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,KAAK,MAAM,SAAS,IAAI,uBAAuB,CAAC,OAAO,EAAE,oBAAoB,CAAC,EAAE,CAAC;YAC/E,IAAI,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,uBAAuB,CAC9B,OAAe,EACf,oBAAyC;IAEzC,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,KAAK,MAAM,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,mFAAmF;QACnF,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QAED,MAAM,WAAW,GAAG,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAE3D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,SAAS;QACX,CAAC;QAED,MAAM,aAAa,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QAED,+FAA+F;QAC/F,+BAA+B;QAC/B,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QAC1C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QAED,IAAI,wBAAwB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9C,SAAS;QACX,CAAC;QAED,gGAAgG;QAChG,uFAAuF;QACvF,wFAAwF;QACxF,MAAM,cAAc,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;QAC7D,IAAI,cAAc,CAAC,IAAI,KAAK,UAAU,IAAI,WAAW,KAAK,cAAc,CAAC,WAAW,EAAE,CAAC;YACrF,+FAA+F;YAC/F,oFAAoF;YACpF,8FAA8F;YAC9F,gEAAgE;YAChE,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAClD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC/B,CAAC;iBAAM,IAAI,4BAA4B,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBACzD,UAAU,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAChF,CAAC;iBAAM,CAAC;gBACN,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,OAAyB;IACvD,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,OAAO,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACjE,MAAM;QACR,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,WAA6B;IACvD,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IAEtC,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IAC/B,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,CAAC;IAED,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QACzC,OAAO,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,CAAC;IAED,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,IAAI,MAAM,GAAqB,EAAE,CAAC;IAClC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAE7B,+EAA+E;IAC/E,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACvC,MAAM,GAAG,EAAE,CAAC;QACZ,WAAW,GAAG,KAAK,CAAC;IACtB,CAAC,CAAC;IAEF,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC;QAClB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM;QACR,CAAC;QAED,gDAAgD;QAChD,IAAI,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC;YACrB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,8FAA8F;QAC9F,kGAAkG;QAClG,mGAAmG;QACnG,+FAA+F;QAC/F,kGAAkG;QAClG,gGAAgG;QAChG,kGAAkG;QAClG,gGAAgG;QAChG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,CAAC,GAAG,sBAAsB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACtC,SAAS;QACX,CAAC;QAED,gGAAgG;QAChG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAC9B,CAAC,IAAI,CAAC,CAAC;YACP,KAAK,EAAE,CAAC;YACR,SAAS;QACX,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,CAAC,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,KAAK,EAAE,CAAC;YACR,SAAS;QACX,CAAC;QAED,iGAAiG;QACjG,gGAAgG;QAChG,oEAAoE;QACpE,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC1B,CAAC,IAAI,CAAC,CAAC;gBACP,KAAK,EAAE,CAAC;YACV,CAAC;iBAAM,CAAC;gBACN,CAAC,IAAI,CAAC,CAAC;gBACP,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC;YACD,SAAS;QACX,CAAC;QAED,iGAAiG;QACjG,kEAAkE;QAClE,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,GAAG,CAAC,GAAG,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACvC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,sBAAsB,CAAC,MAAc,EAAE,KAAa;IAC3D,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAClB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,OAAO,CAAC,GAAG,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAWD;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,MAAc,EAAE,KAAa;IAC9C,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,CAAC,GAAG,KAAK,CAAC;IAEd,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM;QACR,CAAC;QAED,IAAI,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC9E,MAAM;QACR,CAAC;QAED,mFAAmF;QACnF,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,WAAW,GAAG,IAAI,CAAC;YACnB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,0FAA0F;QAC1F,+FAA+F;QAC/F,qEAAqE;QACrE,IAAI,wBAAwB,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;YACxC,WAAW,GAAG,IAAI,CAAC;YACnB,CAAC,GAAG,qBAAqB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACrC,SAAS;QACX,CAAC;QAED,iGAAiG;QACjG,2FAA2F;QAC3F,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,WAAW,GAAG,IAAI,CAAC;YACnB,KAAK,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACpC,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1C,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBACb,wFAAwF;gBACxF,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YACzD,CAAC;YACD,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBAChB,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC;YACD,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC;YAClB,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;YACb,SAAS;QACX,CAAC;QAED,KAAK,IAAI,EAAE,CAAC;QACZ,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC;AAC/C,CAAC;AAeD;;;;;;;;GAQG;AACH,SAAS,UAAU,CAAC,MAAc,EAAE,KAAa,EAAE,KAAa;IAC9D,MAAM,YAAY,GAAG,KAAK,KAAK,GAAG,CAAC;IACnC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC,GAAG,KAAK,CAAC;IAEd,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM;QACR,CAAC;QAED,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;YACjB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACrD,CAAC;QAED,IAAI,YAAY,IAAI,wBAAwB,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;YACxD,2FAA2F;YAC3F,+FAA+F;YAC/F,kDAAkD;YAClD,OAAO,GAAG,IAAI,CAAC;YACf,CAAC,GAAG,qBAAqB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACrC,SAAS;QACX,CAAC;QAED,gGAAgG;QAChG,mFAAmF;QACnF,IAAI,YAAY,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChC,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACnC,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,IAAI,IAAI,EAAE,CAAC;QACX,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,IAAwB;IAC9C,OAAO,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,SAAS,wBAAwB,CAAC,MAAc,EAAE,KAAa;IAC7D,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,EAAE,KAAK,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAQD;;;;;;;;;;;;;;;GAeG;AACH,SAAS,qBAAqB,CAAC,MAAc,EAAE,KAAa;IAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,KAAK,GAAsB,EAAE,CAAC;IAEpC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACjC,IAAI,CAAS,CAAC;IACd,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAChB,CAAC;SAAM,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAChB,CAAC;SAAM,CAAC;QACN,0EAA0E;QAC1E,OAAO,KAAK,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,OAAO,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM;QACR,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAEzB,2FAA2F;QAC3F,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YAChB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACf,KAAK,CAAC,GAAG,EAAE,CAAC;YACd,CAAC;YACD,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,wFAAwF;QACxF,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,+FAA+F;YAC/F,6FAA6F;YAC7F,kBAAkB;YAClB,IAAI,EAAE,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAC9B,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,4FAA4F;YAC5F,IAAI,EAAE,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAC9B,KAAK,CAAC,GAAG,EAAE,CAAC;YACd,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjB,CAAC;YACD,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,IAAI,EAAE,KAAK,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACrC,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAChB,KAAK,CAAC,GAAG,EAAE,CAAC;YACd,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;YACD,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,qFAAqF;QACrF,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7C,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,CAAC;QACD,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IAED,iGAAiG;IACjG,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,CAAC;AAChF,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,CAAS,EAAE,CAAS;IACxC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACV,OAAO,CAAC,CAAC,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACV,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC"}

package/package.json

@@ -1,18 +1,18 @@
 {
   "name": "depvitals",
-  "version": "0.1.1",
-  "description": "A simple, lightweight dependency health checker for Node.js projects.",
+  "version": "0.2.0",
+  "description": "Find unused and undeclared npm dependencies in JavaScript and TypeScript projects with a zero-config CLI and no runtime dependencies.",
   "keywords": [
     "nodejs",
+    "javascript",
     "typescript",
-    "dependencies",
-    "dependency-analysis",
+    "npm",
+    "cli",
     "dependency-checker",
-    "dependency-health",
+    "static-analysis",
     "unused-dependencies",
     "missing-dependencies",
-    "depcheck",
-    "cli"
+    "depcheck"
   ],
   "license": "MIT",
   "type": "module",