kaniscope 0.36.0 → 0.37.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +6 -6
- package/types.d.ts +26 -0
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "kaniscope",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.37.0",
|
|
4
4
|
"description": "AI pull-request reviewer — line-anchored inline comments plus a summary, for GitHub, GitLab and Bitbucket. Ships a native binary; no Rust toolchain required.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"code-review",
|
|
@@ -34,10 +34,10 @@
|
|
|
34
34
|
"README.md"
|
|
35
35
|
],
|
|
36
36
|
"optionalDependencies": {
|
|
37
|
-
"@nhatvu148/kaniscope-darwin-arm64": "0.
|
|
38
|
-
"@nhatvu148/kaniscope-darwin-x64": "0.
|
|
39
|
-
"@nhatvu148/kaniscope-linux-arm64": "0.
|
|
40
|
-
"@nhatvu148/kaniscope-linux-x64": "0.
|
|
41
|
-
"@nhatvu148/kaniscope-win32-x64": "0.
|
|
37
|
+
"@nhatvu148/kaniscope-darwin-arm64": "0.37.0",
|
|
38
|
+
"@nhatvu148/kaniscope-darwin-x64": "0.37.0",
|
|
39
|
+
"@nhatvu148/kaniscope-linux-arm64": "0.37.0",
|
|
40
|
+
"@nhatvu148/kaniscope-linux-x64": "0.37.0",
|
|
41
|
+
"@nhatvu148/kaniscope-win32-x64": "0.37.0"
|
|
42
42
|
}
|
|
43
43
|
}
|
package/types.d.ts
CHANGED
|
@@ -3,6 +3,10 @@
|
|
|
3
3
|
|
|
4
4
|
/** Result of one review run (serialized as the HTTP/CLI response). */
|
|
5
5
|
export interface RunReviewOutput {
|
|
6
|
+
/** Vulnerable dependency versions the PR adds, from the OSV scan of its lockfiles. */
|
|
7
|
+
advisories?: DepAdvisory[];
|
|
8
|
+
/** How far the dependency scan got, so an empty `advisories` can be told apart from one that was never checked. */
|
|
9
|
+
advisoryScan?: ScanStatus | null;
|
|
6
10
|
commentUrl?: string | null;
|
|
7
11
|
findings: number;
|
|
8
12
|
/** The post-processed findings that were posted (after self-critique, confidence floor, sort, and cap). */
|
|
@@ -20,6 +24,22 @@ export interface RunReviewOutput {
|
|
|
20
24
|
usage?: Usage | null;
|
|
21
25
|
}
|
|
22
26
|
|
|
27
|
+
/** One vulnerability advisory OSV reported for an added dependency. */
|
|
28
|
+
export interface DepAdvisory {
|
|
29
|
+
ecosystem: string;
|
|
30
|
+
/** First fixed version for this package, when known. */
|
|
31
|
+
fixed?: string | null;
|
|
32
|
+
/** OSV, GHSA or CVE id, such as `RUSTSEC-2021-0079` or `GHSA-xxxx`. */
|
|
33
|
+
id: string;
|
|
34
|
+
package: string;
|
|
35
|
+
/** Coarse severity label (`CRITICAL`/`HIGH`/`MEDIUM`/`LOW`) when OSV reports one. */
|
|
36
|
+
severity?: string | null;
|
|
37
|
+
summary: string;
|
|
38
|
+
/** Human-facing advisory URL. */
|
|
39
|
+
url: string;
|
|
40
|
+
version: string;
|
|
41
|
+
}
|
|
42
|
+
|
|
23
43
|
/** One review finding from the model. */
|
|
24
44
|
export interface Finding {
|
|
25
45
|
body: string;
|
|
@@ -39,10 +59,16 @@ export interface Finding {
|
|
|
39
59
|
/** One inline comment anchored to a file + line on the new side of the diff. */
|
|
40
60
|
export interface InlineComment {
|
|
41
61
|
body: string;
|
|
62
|
+
/** The line the comment attaches to. */
|
|
42
63
|
line: number;
|
|
43
64
|
path: string;
|
|
65
|
+
/** First line of a multi-line comment; `None` for a single line. */
|
|
66
|
+
start_line?: number | null;
|
|
44
67
|
}
|
|
45
68
|
|
|
69
|
+
/** How far a dependency scan got — what an empty advisory list actually means. */
|
|
70
|
+
export type ScanStatus = "disabled" | "no_lockfiles" | "complete" | "truncated" | "failed";
|
|
71
|
+
|
|
46
72
|
/** Token accounting echoed back by OpenRouter. */
|
|
47
73
|
export interface Usage {
|
|
48
74
|
completion_tokens?: number | null;
|