fad-checker 1.0.6 → 2.0.1

package/test/outdated.test.js

@@ -1,101 +0,0 @@
-const { test } = require("node:test");
-const assert = require("node:assert/strict");
-const { checkObsoleteDeps, checkObsolete, findEolProduct, KNOWN_OBSOLETE } = require("../lib/outdated");
-
-test("known-obsolete.json contains the obvious historical hazards", () => {
-	assert.ok(KNOWN_OBSOLETE["log4j:log4j"], "log4j 1.x must be flagged");
-	assert.ok(KNOWN_OBSOLETE["commons-logging:commons-logging"]);
-	assert.ok(KNOWN_OBSOLETE["org.codehaus.jackson:jackson-databind"] || KNOWN_OBSOLETE["org.codehaus.jackson:jackson-mapper-asl"]);
-});
-
-test("checkObsoleteDeps flags log4j 1.x and jackson 1.x", () => {
-	const deps = new Map([
-		["log4j:log4j", { groupId: "log4j", artifactId: "log4j", version: "1.2.17" }],
-		["org.codehaus.jackson:jackson-mapper-asl", { groupId: "org.codehaus.jackson", artifactId: "jackson-mapper-asl", version: "1.9.13" }],
-		["com.fasterxml.jackson.core:jackson-databind", { groupId: "com.fasterxml.jackson.core", artifactId: "jackson-databind", version: "2.16.0" }],
-	]);
-	const out = checkObsoleteDeps(deps);
-	const ids = out.map(o => `${o.dep.groupId}:${o.dep.artifactId}`);
-	assert.ok(ids.includes("log4j:log4j"));
-	assert.ok(ids.includes("org.codehaus.jackson:jackson-mapper-asl"));
-	assert.ok(!ids.includes("com.fasterxml.jackson.core:jackson-databind"));
-	const log4j = out.find(o => o.dep.artifactId === "log4j");
-	assert.equal(log4j.severity, "CRITICAL");
-});
-
-test("checkObsoleteDeps deduplicates by g:a", () => {
-	const deps = new Map([
-		["log4j:log4j", { groupId: "log4j", artifactId: "log4j", version: "1.2.17" }],
-	]);
-	// Call twice — should still report once
-	const out1 = checkObsoleteDeps(deps);
-	const out2 = checkObsoleteDeps(deps);
-	assert.equal(out1.length, 1);
-	assert.equal(out2.length, 1);
-});
-
-test("checkObsolete single-dep returns details or null", () => {
-	const o = checkObsolete({ groupId: "log4j", artifactId: "log4j", version: "1.2" });
-	assert.ok(o);
-	assert.equal(o.severity, "CRITICAL");
-	assert.equal(checkObsolete({ groupId: "com.fasterxml.jackson.core", artifactId: "jackson-databind" }), null);
-});
-
-test("findEolProduct matches Spring Boot by exact coord and by prefix", () => {
-	const sb = findEolProduct({ groupId: "org.springframework.boot", artifactId: "spring-boot-starter-parent" });
-	assert.equal(sb.product, "spring-boot");
-
-	const sbcustom = findEolProduct({ groupId: "org.springframework.boot", artifactId: "spring-boot-starter-anything" });
-	assert.equal(sbcustom.product, "spring-boot", "prefix-only mapping must still match");
-});
-
-test("findEolProduct picks longest prefix match", () => {
-	const sec = findEolProduct({ groupId: "org.springframework.security", artifactId: "made-up" });
-	assert.equal(sec.product, "spring-framework");
-	assert.equal(sec.label, "Spring Security");
-});
-
-test("findEolProduct maps the npm 'angular' package to AngularJS 1.x", () => {
-	// The literal npm package named "angular" IS AngularJS (1.x), EOL since 2022.
-	const a = findEolProduct({ ecosystem: "npm", groupId: "", artifactId: "angular" });
-	assert.equal(a.product, "angularjs");
-	assert.equal(a.label, "AngularJS");
-});
-
-test("findEolProduct maps @angular/* scoped packages to modern Angular", () => {
-	const core = findEolProduct({ ecosystem: "npm", groupId: "", artifactId: "@angular/core" });
-	assert.equal(core.product, "angular");
-	const router = findEolProduct({ ecosystem: "npm", groupId: "", artifactId: "@angular/router" });
-	assert.equal(router.product, "angular");
-});
-
-test("findEolProduct maps react / react-dom / jquery / vue / bootstrap", () => {
-	assert.equal(findEolProduct({ ecosystem: "npm", artifactId: "react" }).product, "react");
-	assert.equal(findEolProduct({ ecosystem: "npm", artifactId: "react-dom" }).product, "react");
-	assert.equal(findEolProduct({ ecosystem: "npm", artifactId: "jquery" }).product, "jquery");
-	assert.equal(findEolProduct({ ecosystem: "npm", artifactId: "vue" }).product, "vue");
-	assert.equal(findEolProduct({ ecosystem: "npm", artifactId: "bootstrap" }).product, "bootstrap");
-});
-
-test("findEolProduct returns null for an unmapped npm package", () => {
-	assert.equal(findEolProduct({ ecosystem: "npm", artifactId: "left-pad" }), null);
-	// A Maven groupId must never leak into the npm lookup.
-	assert.equal(findEolProduct({ ecosystem: "npm", artifactId: "org.springframework" }), null);
-});
-
-test("findEolProduct maps WebJars (client-side JS shipped as Maven artifacts)", () => {
-	// org.webjars:angularjs:1.8.3 — AngularJS 1.x, EOL since 2021.
-	const ajs = findEolProduct({ groupId: "org.webjars", artifactId: "angularjs", version: "1.8.3" });
-	assert.ok(ajs, "org.webjars:angularjs must map");
-	assert.equal(ajs.product, "angularjs");
-
-	assert.equal(findEolProduct({ groupId: "org.webjars", artifactId: "jquery" }).product, "jquery");
-	assert.equal(findEolProduct({ groupId: "org.webjars", artifactId: "bootstrap" }).product, "bootstrap");
-	// org.webjars.npm mirrors npm names; scope slash is encoded as "__".
-	assert.equal(findEolProduct({ groupId: "org.webjars.npm", artifactId: "vue" }).product, "vue");
-	assert.equal(findEolProduct({ groupId: "org.webjars.npm", artifactId: "angular__core" }).product, "angular");
-});
-
-test("findEolProduct returns null for an unmapped WebJar artifact", () => {
-	assert.equal(findEolProduct({ groupId: "org.webjars", artifactId: "datatables" }), null);
-});

package/test/snyk.test.js

@@ -1,64 +0,0 @@
-const { test } = require("node:test");
-const assert = require("node:assert/strict");
-const { parseSnykResults, parseSnykStdout, mergeWithFadResults } = require("../lib/snyk");
-
-const snykSample = {
-	vulnerabilities: [
-		{
-			id: "SNYK-JAVA-LOG4J-2314720",
-			packageName: "org.apache.logging.log4j:log4j-core",
-			version: "2.14.0",
-			severity: "critical",
-			cvssScore: 10,
-			title: "Remote Code Execution",
-			fixedIn: ["2.15.0", "2.16.0"],
-			identifiers: { CVE: ["CVE-2021-44228"] },
-		},
-		{
-			id: "SNYK-JAVA-JACKSON-2421244",
-			packageName: "com.fasterxml.jackson.core:jackson-databind",
-			version: "2.13.0",
-			severity: "high",
-			cvssScore: 7.5,
-			title: "Denial of Service",
-			fixedIn: ["2.13.5"],
-			identifiers: { CVE: ["CVE-2022-42003"] },
-		},
-	],
-};
-
-test("parseSnykStdout accepts a JSON object or array", () => {
-	assert.deepEqual(parseSnykStdout(""), []);
-	const arr = parseSnykStdout(JSON.stringify([snykSample]));
-	assert.equal(arr.length, 1);
-	const obj = parseSnykStdout(JSON.stringify(snykSample));
-	assert.equal(obj.length, 1);
-});
-
-test("parseSnykResults normalises to fad-checker match shape", () => {
-	const out = parseSnykResults(snykSample);
-	assert.equal(out.length, 2);
-	assert.equal(out[0].dep.groupId, "org.apache.logging.log4j");
-	assert.equal(out[0].dep.artifactId, "log4j-core");
-	assert.equal(out[0].cve.id, "CVE-2021-44228");
-	assert.equal(out[0].cve.severity, "CRITICAL");
-	assert.equal(out[0].cve.fixVersion, "2.15.0");
-	assert.equal(out[0].source, "snyk");
-});
-
-test("mergeWithFadResults tags overlap as 'both' and keeps Snyk-only as 'snyk'", () => {
-	const fadMatches = [
-		{
-			dep: { groupId: "org.apache.logging.log4j", artifactId: "log4j-core", version: "2.14.0" },
-			cve: { id: "CVE-2021-44228", severity: "CRITICAL" },
-			confidence: "exact",
-		},
-	];
-	const snykMatches = parseSnykResults(snykSample);
-	const merged = mergeWithFadResults(fadMatches, snykMatches);
-	assert.equal(merged.length, 2);
-	const log4j = merged.find(m => m.cve.id === "CVE-2021-44228");
-	assert.equal(log4j.source, "both");
-	const jackson = merged.find(m => m.cve.id === "CVE-2022-42003");
-	assert.equal(jackson.source, "snyk");
-});

package/test/transitive.test.js

@@ -1,305 +0,0 @@
-const { test } = require("node:test");
-const assert = require("node:assert/strict");
-const fs = require("fs");
-const os = require("os");
-const path = require("path");
-const { parsePomXml, resolveProps, buildMgmt, SCOPE_MATRIX, resolveTransitiveDeps } = require("../lib/transitive");
-
-// Per-test cache dir so we don't poison ~/.fad-checker/poms-cache during tests
-function freshCache() {
-	const dir = fs.mkdtempSync(path.join(os.tmpdir(), "fad-checker-pom-cache-"));
-	return dir;
-}
-
-// ---------- POM fixtures expressed as XML strings ----------
-
-const POM_A = `<?xml version="1.0"?>
-<project>
-	<modelVersion>4.0.0</modelVersion>
-	<groupId>com.example</groupId>
-	<artifactId>a</artifactId>
-	<version>1.0.0</version>
-	<dependencies>
-		<dependency>
-			<groupId>com.example</groupId>
-			<artifactId>b</artifactId>
-			<version>2.0.0</version>
-		</dependency>
-		<dependency>
-			<groupId>com.example</groupId>
-			<artifactId>test-only</artifactId>
-			<version>3.0.0</version>
-			<scope>test</scope>
-		</dependency>
-		<dependency>
-			<groupId>com.example</groupId>
-			<artifactId>optional-lib</artifactId>
-			<version>4.0.0</version>
-			<optional>true</optional>
-		</dependency>
-	</dependencies>
-</project>`;
-
-const POM_B = `<?xml version="1.0"?>
-<project>
-	<modelVersion>4.0.0</modelVersion>
-	<groupId>com.example</groupId>
-	<artifactId>b</artifactId>
-	<version>2.0.0</version>
-	<dependencies>
-		<dependency>
-			<groupId>com.example</groupId>
-			<artifactId>c</artifactId>
-			<version>5.0.0</version>
-		</dependency>
-	</dependencies>
-</project>`;
-
-const POM_C = `<?xml version="1.0"?>
-<project>
-	<modelVersion>4.0.0</modelVersion>
-	<groupId>com.example</groupId>
-	<artifactId>c</artifactId>
-	<version>5.0.0</version>
-</project>`;
-
-// Build an in-memory fetcher
-function fakeFetcher(responses) {
-	return async (url) => {
-		if (responses[url]) {
-			return { ok: true, status: 200, text: async () => responses[url] };
-		}
-		return { ok: false, status: 404, text: async () => "" };
-	};
-}
-
-const MC = "https://repo1.maven.org/maven2";
-
-// ---------- Tests ----------
-
-test("parsePomXml extracts coords, deps, scope, optional, exclusions", async () => {
-	const xml = `<?xml version="1.0"?>
-		<project>
-			<groupId>g</groupId><artifactId>a</artifactId><version>1</version>
-			<dependencies>
-				<dependency>
-					<groupId>org.foo</groupId><artifactId>bar</artifactId><version>2.0</version>
-					<scope>runtime</scope><optional>true</optional>
-					<exclusions>
-						<exclusion><groupId>x</groupId><artifactId>y</artifactId></exclusion>
-					</exclusions>
-				</dependency>
-			</dependencies>
-		</project>`;
-	const pom = await parsePomXml(xml);
-	assert.equal(pom.groupId, "g");
-	assert.equal(pom.deps[0].scope, "runtime");
-	assert.equal(pom.deps[0].optional, true);
-	assert.deepEqual(pom.deps[0].exclusions, [{ groupId: "x", artifactId: "y" }]);
-});
-
-test("parsePomXml handles parent + inherits groupId/version from it", async () => {
-	const xml = `<?xml version="1.0"?>
-		<project>
-			<parent><groupId>g</groupId><artifactId>p</artifactId><version>3.0</version></parent>
-			<artifactId>child</artifactId>
-		</project>`;
-	const pom = await parsePomXml(xml);
-	assert.equal(pom.groupId, "g");
-	assert.equal(pom.version, "3.0");
-	assert.equal(pom.parent.artifactId, "p");
-});
-
-test("resolveProps substitutes ${prop} including project.* builtins", () => {
-	const props = { "spring.version": "5.3.20", "log4j": "2.20.0" };
-	const builtins = { "project.version": "1.0" };
-	assert.equal(resolveProps("${spring.version}", props, builtins), "5.3.20");
-	assert.equal(resolveProps("${project.version}", props, builtins), "1.0");
-	assert.equal(resolveProps("v=${log4j}", props, builtins), "v=2.20.0");
-	assert.equal(resolveProps("${unknown}", props, builtins), "${unknown}");
-});
-
-test("resolveProps follows chained property references", () => {
-	const props = { a: "${b}", b: "${c}", c: "final" };
-	assert.equal(resolveProps("${a}", props, {}), "final");
-});
-
-test("SCOPE_MATRIX implements Maven's scope-propagation rules", () => {
-	// compile direct + compile transitive → compile
-	assert.equal(SCOPE_MATRIX.compile.compile, "compile");
-	// compile + runtime → runtime
-	assert.equal(SCOPE_MATRIX.compile.runtime, "runtime");
-	// compile + test → not propagated
-	assert.equal(SCOPE_MATRIX.compile.test, null);
-	// test + compile → test
-	assert.equal(SCOPE_MATRIX.test.compile, "test");
-	// provided + runtime → provided
-	assert.equal(SCOPE_MATRIX.provided.runtime, "provided");
-});
-
-test("buildMgmt indexes depMgmt by g:a", () => {
-	const m = buildMgmt([
-		{ groupId: "g", artifactId: "a", version: "1.0" },
-		{ groupId: "h", artifactId: "b", version: "2.0" },
-	]);
-	assert.equal(m.size, 2);
-	assert.equal(m.get("g:a").version, "1.0");
-});
-
-test("resolveTransitiveDeps walks A→B→C, skips test + optional", async () => {
-	const responses = {
-		[`${MC}/com/example/a/1.0.0/a-1.0.0.pom`]: POM_A,
-		[`${MC}/com/example/b/2.0.0/b-2.0.0.pom`]: POM_B,
-		[`${MC}/com/example/c/5.0.0/c-5.0.0.pom`]: POM_C,
-	};
-	const transitives = await resolveTransitiveDeps(
-		[{ groupId: "com.example", artifactId: "a", version: "1.0.0", scope: "compile" }],
-		{ fetcher: fakeFetcher(responses), verbose: false, cacheDir: freshCache() }
-	);
-	// b is the direct dep of a → it IS a transitive (we excluded `a` itself
-	// from the result earlier). c is b's transitive.
-	const keys = [...transitives.keys()];
-	assert.ok(keys.includes("com.example:b"), `expected b in transitives, got ${keys.join(",")}`);
-	assert.ok(keys.includes("com.example:c"), `expected c in transitives, got ${keys.join(",")}`);
-	// test scope must NOT propagate
-	assert.ok(!keys.includes("com.example:test-only"), "test-scope dep should not propagate");
-	// optional must NOT propagate
-	assert.ok(!keys.includes("com.example:optional-lib"), "optional dep should not propagate");
-});
-
-test("resolveTransitiveDeps applies root depMgmt version overrides", async () => {
-	const POM_X = `<?xml version="1.0"?>
-		<project>
-			<groupId>g</groupId><artifactId>x</artifactId><version>1.0</version>
-			<dependencies>
-				<dependency>
-					<groupId>g</groupId><artifactId>y</artifactId><version>5.0</version>
-				</dependency>
-			</dependencies>
-		</project>`;
-	const POM_Y_5 = `<?xml version="1.0"?>
-		<project><groupId>g</groupId><artifactId>y</artifactId><version>5.0</version></project>`;
-	const POM_Y_OVERRIDE = `<?xml version="1.0"?>
-		<project><groupId>g</groupId><artifactId>y</artifactId><version>9.9</version></project>`;
-	const responses = {
-		[`${MC}/g/x/1.0/x-1.0.pom`]: POM_X,
-		[`${MC}/g/y/5.0/y-5.0.pom`]: POM_Y_5,
-		[`${MC}/g/y/9.9/y-9.9.pom`]: POM_Y_OVERRIDE,
-	};
-	const rootMgmt = new Map([["g:y", { version: "9.9" }]]);
-	const transitives = await resolveTransitiveDeps(
-		[{ groupId: "g", artifactId: "x", version: "1.0", scope: "compile" }],
-		{ fetcher: fakeFetcher(responses), rootDepMgmt: rootMgmt, verbose: false, cacheDir: freshCache() }
-	);
-	const y = transitives.get("g:y");
-	assert.ok(y, "y should be resolved");
-	assert.equal(y.version, "9.9", "root depMgmt should override transitive declared version");
-});
-
-test("resolveTransitiveDeps honours <exclusion> blocks", async () => {
-	const POM_ROOT = `<?xml version="1.0"?>
-		<project>
-			<groupId>g</groupId><artifactId>root</artifactId><version>1</version>
-			<dependencies>
-				<dependency>
-					<groupId>g</groupId><artifactId>mid</artifactId><version>1</version>
-					<exclusions>
-						<exclusion><groupId>g</groupId><artifactId>leaf</artifactId></exclusion>
-					</exclusions>
-				</dependency>
-			</dependencies>
-		</project>`;
-	const POM_MID = `<?xml version="1.0"?>
-		<project>
-			<groupId>g</groupId><artifactId>mid</artifactId><version>1</version>
-			<dependencies>
-				<dependency><groupId>g</groupId><artifactId>leaf</artifactId><version>1</version></dependency>
-				<dependency><groupId>g</groupId><artifactId>kept</artifactId><version>1</version></dependency>
-			</dependencies>
-		</project>`;
-	const POM_LEAF = `<?xml version="1.0"?>
-		<project><groupId>g</groupId><artifactId>leaf</artifactId><version>1</version></project>`;
-	const POM_KEPT = `<?xml version="1.0"?>
-		<project><groupId>g</groupId><artifactId>kept</artifactId><version>1</version></project>`;
-	const responses = {
-		[`${MC}/g/root/1/root-1.pom`]: POM_ROOT,
-		[`${MC}/g/mid/1/mid-1.pom`]: POM_MID,
-		[`${MC}/g/leaf/1/leaf-1.pom`]: POM_LEAF,
-		[`${MC}/g/kept/1/kept-1.pom`]: POM_KEPT,
-	};
-	const transitives = await resolveTransitiveDeps(
-		[{ groupId: "g", artifactId: "root", version: "1", scope: "compile", exclusions: [{ groupId: "g", artifactId: "leaf" }] }],
-		{ fetcher: fakeFetcher(responses), verbose: false, cacheDir: freshCache() }
-	);
-	const keys = [...transitives.keys()];
-	assert.ok(keys.includes("g:mid"), "mid should be there");
-	assert.ok(keys.includes("g:kept"), "kept should be there");
-	assert.ok(!keys.includes("g:leaf"), `leaf should be excluded, got ${keys.join(",")}`);
-});
-
-test("resolveTransitiveDeps stops at maxDepth", async () => {
-	const POM_R = `<?xml version="1.0"?><project>
-		<groupId>g</groupId><artifactId>r</artifactId><version>1</version>
-		<dependencies><dependency><groupId>g</groupId><artifactId>l1</artifactId><version>1</version></dependency></dependencies>
-	</project>`;
-	const POM_L1 = `<?xml version="1.0"?><project>
-		<groupId>g</groupId><artifactId>l1</artifactId><version>1</version>
-		<dependencies><dependency><groupId>g</groupId><artifactId>l2</artifactId><version>1</version></dependency></dependencies>
-	</project>`;
-	const POM_L2 = `<?xml version="1.0"?><project>
-		<groupId>g</groupId><artifactId>l2</artifactId><version>1</version>
-		<dependencies><dependency><groupId>g</groupId><artifactId>l3</artifactId><version>1</version></dependency></dependencies>
-	</project>`;
-	const POM_L3 = `<?xml version="1.0"?><project><groupId>g</groupId><artifactId>l3</artifactId><version>1</version></project>`;
-	const responses = {
-		[`${MC}/g/r/1/r-1.pom`]: POM_R,
-		[`${MC}/g/l1/1/l1-1.pom`]: POM_L1,
-		[`${MC}/g/l2/1/l2-1.pom`]: POM_L2,
-		[`${MC}/g/l3/1/l3-1.pom`]: POM_L3,
-	};
-	const transitives = await resolveTransitiveDeps(
-		[{ groupId: "g", artifactId: "r", version: "1", scope: "compile" }],
-		{ fetcher: fakeFetcher(responses), maxDepth: 2, cacheDir: freshCache() }
-	);
-	const keys = [...transitives.keys()];
-	assert.ok(keys.includes("g:l1"));
-	assert.ok(keys.includes("g:l2"));
-	assert.ok(!keys.includes("g:l3"), `l3 is at depth 3, should not be present at maxDepth=2; got ${keys.join(",")}`);
-});
-
-test("resolveTransitiveDeps nearest-wins on version conflict", async () => {
-	// root → a@1 → c@5
-	// root → c@9  (declared directly under root via b path)
-	// Result: c@9 wins because it's at depth 1 vs c@5 at depth 2
-	// But here we're testing the BFS, not the root-direct resolution. Setup:
-	// root has two deps: x@1 (which has y@5), and y@9 directly.
-	const POM_ROOT2 = `<?xml version="1.0"?><project>
-		<groupId>g</groupId><artifactId>root</artifactId><version>1</version>
-		<dependencies>
-			<dependency><groupId>g</groupId><artifactId>x</artifactId><version>1</version></dependency>
-			<dependency><groupId>g</groupId><artifactId>y</artifactId><version>9</version></dependency>
-		</dependencies>
-	</project>`;
-	const POM_X2 = `<?xml version="1.0"?><project>
-		<groupId>g</groupId><artifactId>x</artifactId><version>1</version>
-		<dependencies>
-			<dependency><groupId>g</groupId><artifactId>y</artifactId><version>5</version></dependency>
-		</dependencies>
-	</project>`;
-	const POM_Y_5 = `<?xml version="1.0"?><project><groupId>g</groupId><artifactId>y</artifactId><version>5</version></project>`;
-	const POM_Y_9 = `<?xml version="1.0"?><project><groupId>g</groupId><artifactId>y</artifactId><version>9</version></project>`;
-	const responses = {
-		[`${MC}/g/root/1/root-1.pom`]: POM_ROOT2,
-		[`${MC}/g/x/1/x-1.pom`]: POM_X2,
-		[`${MC}/g/y/5/y-5.pom`]: POM_Y_5,
-		[`${MC}/g/y/9/y-9.pom`]: POM_Y_9,
-	};
-	const transitives = await resolveTransitiveDeps([
-		{ groupId: "g", artifactId: "root", version: "1", scope: "compile" },
-	], { fetcher: fakeFetcher(responses), verbose: false, cacheDir: freshCache() });
-	// When the caller (cve-match) passes root's depMgmt with y@9, that pins y.
-	// Without depMgmt, BFS visits y@9 directly under root first, then sees y again
-	// from x, and skips it (nearest-wins).
-	const y = transitives.get("g:y");
-	assert.ok(y, "y should be in transitives");
-});

package/test/webjar.test.js

@@ -1,33 +0,0 @@
-const { test } = require("node:test");
-const assert = require("node:assert/strict");
-const { webjarToNpm } = require("../lib/npm/collect");
-
-test("webjarToNpm derives the npm name from org.webjars.npm (deterministic mirror)", () => {
-	assert.deepEqual(
-		webjarToNpm({ groupId: "org.webjars.npm", artifactId: "react", version: "18.2.0" }),
-		{ name: "react", version: "18.2.0" },
-	);
-	// Scoped packages encode "@scope/name" as "scope__name".
-	assert.deepEqual(
-		webjarToNpm({ groupId: "org.webjars.npm", artifactId: "angular__core", version: "17.2.3" }),
-		{ name: "@angular/core", version: "17.2.3" },
-	);
-});
-
-test("webjarToNpm passes classic org.webjars artifactIds through as-is", () => {
-	// Classic WebJars are hand-curated; the artifactId is the JS lib name.
-	assert.deepEqual(
-		webjarToNpm({ groupId: "org.webjars", artifactId: "angularjs", version: "1.8.3" }),
-		{ name: "angularjs", version: "1.8.3" },
-	);
-	assert.equal(webjarToNpm({ groupId: "org.webjars", artifactId: "jquery", version: "3.7.1" }).name, "jquery");
-});
-
-test("webjarToNpm handles bower webjars too", () => {
-	assert.equal(webjarToNpm({ groupId: "org.webjars.bowergithub.foo", artifactId: "bar", version: "1.0.0" }).name, "bar");
-});
-
-test("webjarToNpm returns null for non-webjar coordinates", () => {
-	assert.equal(webjarToNpm({ groupId: "org.springframework", artifactId: "spring-core", version: "6.0.0" }), null);
-	assert.equal(webjarToNpm({ ecosystem: "npm", groupId: "", artifactId: "react", version: "18.0.0" }), null);
-});