fad-checker 2.1.1 → 2.1.2

package/lib/license-policy.js

@@ -14,7 +14,9 @@ const path = require("path");
 
 const POLICY = (() => {
 	try {
-		const raw = JSON.parse(fs.readFileSync(path.join(__dirname, "..", "data", "license-policy.json"), "utf8"));
+		// require() (not fs.readFileSync) so bun --compile bundles the data file
+		// into the standalone binary instead of reading it off disk at runtime.
+		const raw = require("../data/license-policy.json");
 		return { categories: raw.categories || {}, aliases: raw.aliases || {} };
 	} catch { return { categories: {}, aliases: {} }; }
 })();

package/lib/outdated.js

@@ -318,4 +318,7 @@ module.exports = {
 	EOL_MAPPING,
 	EOL_CACHE_PATH,
 	KNOWN_OBSOLETE,
+	loadJsonCache,
+	saveJsonCache,
+	CACHE_DIR,
 };

package/lib/parallel-walk.js

@@ -0,0 +1,47 @@
+/**
+ * lib/parallel-walk.js — bounded-concurrency recursive directory walk.
+ *
+ * A serial readdirSync walk is fine on a fast local disk, but on a high-latency
+ * filesystem (WSL/9p, network mounts, the air-gapped VM in the field) each readdir
+ * pays a round-trip, so a big tree takes tens of seconds per walk — and fad-checker
+ * walks the tree several times (detection, pom discovery, jar discovery, JS manifest
+ * discovery). Issuing many readdirs concurrently turns that latency-bound serial walk
+ * into something close to a single round-trip deep, which is dramatically faster.
+ *
+ * `onDir(absDir, entries)` is called once per visited directory with its Dirent[].
+ * `skipDir(name)` prunes a child directory by basename (caller's own skip policy).
+ *
+ * @author: N.BRAUN
+ * @email: pp9ping@gmail.com
+ */
+const fs = require("fs");
+const path = require("path");
+
+const DEFAULT_CONCURRENCY = 48;
+
+async function walkDirs(root, { skipDir = () => false, concurrency = DEFAULT_CONCURRENCY, onDir } = {}) {
+	const queue = [root];
+	let active = 0;
+	await new Promise(resolve => {
+		let settled = false;
+		const finish = () => { if (!settled) { settled = true; resolve(); } };
+		const pump = () => {
+			if (settled) return;
+			if (queue.length === 0 && active === 0) return finish();
+			while (active < concurrency && queue.length) {
+				const cur = queue.pop();
+				active++;
+				fs.promises.readdir(cur, { withFileTypes: true }).then(entries => {
+					if (onDir) onDir(cur, entries);
+					for (const e of entries) {
+						if (e.isDirectory() && !skipDir(e.name)) queue.push(path.join(cur, e.name));
+					}
+				}).catch(() => { /* unreadable dir → skip, same as readdirSync catch */ })
+					.finally(() => { active--; pump(); });
+			}
+		};
+		pump();
+	});
+}
+
+module.exports = { walkDirs };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fad-checker",
-  "version": "2.1.1",
+  "version": "2.1.2",
   "description": "Scan ALL Maven, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSAF/SARIF/JSON exports, CI gating and fix recos",
   "keywords": [
     "sca",