kirograph 0.19.0 → 0.20.0

package/dist/security/manifest/plugins/cargo.test.js

@@ -1,304 +0,0 @@
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var import_vitest = require("vitest");
-var fs = __toESM(require("fs"));
-var path = __toESM(require("path"));
-var os = __toESM(require("os"));
-var import_cargo = require("./cargo");
-(0, import_vitest.describe)("parseCargoManifest", () => {
-  let tmpDir;
-  (0, import_vitest.beforeEach)(() => {
-    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "kirograph-cargo-test-"));
-  });
-  (0, import_vitest.afterEach)(() => {
-    fs.rmSync(tmpDir, { recursive: true, force: true });
-  });
-  function writeCargoToml(content, dir) {
-    const targetDir = dir ?? tmpDir;
-    fs.mkdirSync(targetDir, { recursive: true });
-    const filePath = path.join(targetDir, "Cargo.toml");
-    fs.writeFileSync(filePath, content);
-    return filePath;
-  }
-  (0, import_vitest.it)("extracts simple string dependencies with production scope", async () => {
-    const manifestPath = writeCargoToml(`
-[package]
-name = "my-app"
-version = "0.1.0"
-
-[dependencies]
-serde = "1.0"
-tokio = "1.35"
-`);
-    const deps = await (0, import_cargo.parseCargoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(2);
-    const serde = deps.find((d) => d.name === "serde");
-    (0, import_vitest.expect)(serde).toBeDefined();
-    (0, import_vitest.expect)(serde.declaredConstraint).toBe("1.0");
-    (0, import_vitest.expect)(serde.scope).toBe("production");
-    (0, import_vitest.expect)(serde.ecosystem).toBe("cargo");
-    const tokio = deps.find((d) => d.name === "tokio");
-    (0, import_vitest.expect)(tokio).toBeDefined();
-    (0, import_vitest.expect)(tokio.declaredConstraint).toBe("1.35");
-    (0, import_vitest.expect)(tokio.scope).toBe("production");
-  });
-  (0, import_vitest.it)("extracts table format dependencies with version field", async () => {
-    const manifestPath = writeCargoToml(`
-[package]
-name = "my-app"
-version = "0.1.0"
-
-[dependencies]
-serde = { version = "1.0", features = ["derive"] }
-tokio = { version = "1.35", features = ["full"] }
-`);
-    const deps = await (0, import_cargo.parseCargoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(2);
-    (0, import_vitest.expect)(deps.find((d) => d.name === "serde").declaredConstraint).toBe("1.0");
-    (0, import_vitest.expect)(deps.find((d) => d.name === "tokio").declaredConstraint).toBe("1.35");
-  });
-  (0, import_vitest.it)("extracts dev-dependencies with development scope", async () => {
-    const manifestPath = writeCargoToml(`
-[package]
-name = "my-app"
-version = "0.1.0"
-
-[dev-dependencies]
-criterion = "0.5"
-proptest = "1.4"
-`);
-    const deps = await (0, import_cargo.parseCargoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(2);
-    (0, import_vitest.expect)(deps.every((d) => d.scope === "development")).toBe(true);
-  });
-  (0, import_vitest.it)("extracts build-dependencies with development scope", async () => {
-    const manifestPath = writeCargoToml(`
-[package]
-name = "my-app"
-version = "0.1.0"
-
-[build-dependencies]
-cc = "1.0"
-bindgen = "0.69"
-`);
-    const deps = await (0, import_cargo.parseCargoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(2);
-    (0, import_vitest.expect)(deps.every((d) => d.scope === "development")).toBe(true);
-    (0, import_vitest.expect)(deps.find((d) => d.name === "cc").declaredConstraint).toBe("1.0");
-  });
-  (0, import_vitest.it)("handles all dependency sections together", async () => {
-    const manifestPath = writeCargoToml(`
-[package]
-name = "my-app"
-version = "0.1.0"
-
-[dependencies]
-serde = "1.0"
-
-[dev-dependencies]
-criterion = "0.5"
-
-[build-dependencies]
-cc = "1.0"
-`);
-    const deps = await (0, import_cargo.parseCargoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(3);
-    (0, import_vitest.expect)(deps.find((d) => d.name === "serde").scope).toBe("production");
-    (0, import_vitest.expect)(deps.find((d) => d.name === "criterion").scope).toBe("development");
-    (0, import_vitest.expect)(deps.find((d) => d.name === "cc").scope).toBe("development");
-  });
-  (0, import_vitest.it)("resolves versions from Cargo.lock", async () => {
-    writeCargoToml(`
-[package]
-name = "my-app"
-version = "0.1.0"
-
-[dependencies]
-serde = "1.0"
-tokio = "1"
-`);
-    const lockContent = `# This file is automatically @generated by Cargo.
-# It is not intended for manual editing.
-version = 3
-
-[[package]]
-name = "serde"
-version = "1.0.193"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-
-[[package]]
-name = "tokio"
-version = "1.35.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-`;
-    fs.writeFileSync(path.join(tmpDir, "Cargo.lock"), lockContent);
-    const manifestPath = path.join(tmpDir, "Cargo.toml");
-    const deps = await (0, import_cargo.parseCargoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(2);
-    (0, import_vitest.expect)(deps.find((d) => d.name === "serde").resolvedVersion).toBe("1.0.193");
-    (0, import_vitest.expect)(deps.find((d) => d.name === "tokio").resolvedVersion).toBe("1.35.1");
-  });
-  (0, import_vitest.it)("leaves resolvedVersion undefined when no Cargo.lock exists", async () => {
-    const manifestPath = writeCargoToml(`
-[package]
-name = "my-app"
-version = "0.1.0"
-
-[dependencies]
-serde = "1.0"
-`);
-    const deps = await (0, import_cargo.parseCargoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].resolvedVersion).toBeUndefined();
-  });
-  (0, import_vitest.it)("handles path dependencies with no version (uses * constraint)", async () => {
-    const manifestPath = writeCargoToml(`
-[package]
-name = "my-app"
-version = "0.1.0"
-
-[dependencies]
-my-lib = { path = "../my-lib" }
-`);
-    const deps = await (0, import_cargo.parseCargoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].name).toBe("my-lib");
-    (0, import_vitest.expect)(deps[0].declaredConstraint).toBe("*");
-  });
-  (0, import_vitest.it)("handles git dependencies with no version (uses * constraint)", async () => {
-    const manifestPath = writeCargoToml(`
-[package]
-name = "my-app"
-version = "0.1.0"
-
-[dependencies]
-my-crate = { git = "https://github.com/user/repo" }
-`);
-    const deps = await (0, import_cargo.parseCargoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].name).toBe("my-crate");
-    (0, import_vitest.expect)(deps[0].declaredConstraint).toBe("*");
-  });
-  (0, import_vitest.it)("handles table-style individual dependency sections", async () => {
-    const manifestPath = writeCargoToml(`
-[package]
-name = "my-app"
-version = "0.1.0"
-
-[dependencies.serde]
-version = "1.0"
-features = ["derive"]
-
-[dependencies.tokio]
-version = "1.35"
-features = ["full"]
-`);
-    const deps = await (0, import_cargo.parseCargoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(2);
-    (0, import_vitest.expect)(deps.find((d) => d.name === "serde").declaredConstraint).toBe("1.0");
-    (0, import_vitest.expect)(deps.find((d) => d.name === "tokio").declaredConstraint).toBe("1.35");
-    (0, import_vitest.expect)(deps.every((d) => d.scope === "production")).toBe(true);
-  });
-  (0, import_vitest.it)("returns empty array for unreadable file", async () => {
-    const fakePath = path.join(tmpDir, "nonexistent", "Cargo.toml");
-    const deps = await (0, import_cargo.parseCargoManifest)(fakePath, tmpDir);
-    (0, import_vitest.expect)(deps).toEqual([]);
-  });
-  (0, import_vitest.it)("returns empty array for Cargo.toml with no dependency sections", async () => {
-    const manifestPath = writeCargoToml(`
-[package]
-name = "my-app"
-version = "0.1.0"
-edition = "2021"
-`);
-    const deps = await (0, import_cargo.parseCargoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toEqual([]);
-  });
-  (0, import_vitest.it)("skips comment lines in dependency sections", async () => {
-    const manifestPath = writeCargoToml(`
-[package]
-name = "my-app"
-version = "0.1.0"
-
-[dependencies]
-# This is a comment
-serde = "1.0"
-# Another comment
-tokio = "1.35"
-`);
-    const deps = await (0, import_cargo.parseCargoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(2);
-    (0, import_vitest.expect)(deps.find((d) => d.name === "serde")).toBeDefined();
-    (0, import_vitest.expect)(deps.find((d) => d.name === "tokio")).toBeDefined();
-  });
-  (0, import_vitest.it)("sets sourceManifest as relative path", async () => {
-    const subDir = path.join(tmpDir, "crates", "sub");
-    const manifestPath = writeCargoToml(`
-[package]
-name = "sub-crate"
-version = "0.1.0"
-
-[dependencies]
-serde = "1.0"
-`, subDir);
-    const deps = await (0, import_cargo.parseCargoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].sourceManifest).toBe("crates/sub/Cargo.toml");
-  });
-  (0, import_vitest.it)("handles mixed simple and table format in same section", async () => {
-    const manifestPath = writeCargoToml(`
-[package]
-name = "my-app"
-version = "0.1.0"
-
-[dependencies]
-log = "0.4"
-serde = { version = "1.0", features = ["derive"] }
-rand = "0.8"
-`);
-    const deps = await (0, import_cargo.parseCargoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(3);
-    (0, import_vitest.expect)(deps.find((d) => d.name === "log").declaredConstraint).toBe("0.4");
-    (0, import_vitest.expect)(deps.find((d) => d.name === "serde").declaredConstraint).toBe("1.0");
-    (0, import_vitest.expect)(deps.find((d) => d.name === "rand").declaredConstraint).toBe("0.8");
-  });
-  (0, import_vitest.it)("handles version constraints with operators", async () => {
-    const manifestPath = writeCargoToml(`
-[package]
-name = "my-app"
-version = "0.1.0"
-
-[dependencies]
-serde = ">=1.0, <2.0"
-tokio = "~1.35"
-rand = "^0.8"
-`);
-    const deps = await (0, import_cargo.parseCargoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(3);
-    (0, import_vitest.expect)(deps.find((d) => d.name === "serde").declaredConstraint).toBe(">=1.0, <2.0");
-    (0, import_vitest.expect)(deps.find((d) => d.name === "tokio").declaredConstraint).toBe("~1.35");
-    (0, import_vitest.expect)(deps.find((d) => d.name === "rand").declaredConstraint).toBe("^0.8");
-  });
-});
-//# sourceMappingURL=cargo.test.js.map

package/dist/security/manifest/plugins/cargo.test.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/security/manifest/plugins/cargo.test.ts"],
-  "sourcesContent": ["/**\n * Unit tests for the Cargo security manifest plugin.\n */\nimport { describe, it, expect, beforeEach, afterEach } from 'vitest';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport * as os from 'os';\nimport { parseCargoManifest } from './cargo';\n\ndescribe('parseCargoManifest', () => {\n  let tmpDir: string;\n\n  beforeEach(() => {\n    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'kirograph-cargo-test-'));\n  });\n\n  afterEach(() => {\n    fs.rmSync(tmpDir, { recursive: true, force: true });\n  });\n\n  function writeCargoToml(content: string, dir?: string): string {\n    const targetDir = dir ?? tmpDir;\n    fs.mkdirSync(targetDir, { recursive: true });\n    const filePath = path.join(targetDir, 'Cargo.toml');\n    fs.writeFileSync(filePath, content);\n    return filePath;\n  }\n\n  it('extracts simple string dependencies with production scope', async () => {\n    const manifestPath = writeCargoToml(`\n[package]\nname = \"my-app\"\nversion = \"0.1.0\"\n\n[dependencies]\nserde = \"1.0\"\ntokio = \"1.35\"\n`);\n\n    const deps = await parseCargoManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(2);\n    const serde = deps.find(d => d.name === 'serde');\n    expect(serde).toBeDefined();\n    expect(serde!.declaredConstraint).toBe('1.0');\n    expect(serde!.scope).toBe('production');\n    expect(serde!.ecosystem).toBe('cargo');\n\n    const tokio = deps.find(d => d.name === 'tokio');\n    expect(tokio).toBeDefined();\n    expect(tokio!.declaredConstraint).toBe('1.35');\n    expect(tokio!.scope).toBe('production');\n  });\n\n  it('extracts table format dependencies with version field', async () => {\n    const manifestPath = writeCargoToml(`\n[package]\nname = \"my-app\"\nversion = \"0.1.0\"\n\n[dependencies]\nserde = { version = \"1.0\", features = [\"derive\"] }\ntokio = { version = \"1.35\", features = [\"full\"] }\n`);\n\n    const deps = await parseCargoManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(2);\n    expect(deps.find(d => d.name === 'serde')!.declaredConstraint).toBe('1.0');\n    expect(deps.find(d => d.name === 'tokio')!.declaredConstraint).toBe('1.35');\n  });\n\n  it('extracts dev-dependencies with development scope', async () => {\n    const manifestPath = writeCargoToml(`\n[package]\nname = \"my-app\"\nversion = \"0.1.0\"\n\n[dev-dependencies]\ncriterion = \"0.5\"\nproptest = \"1.4\"\n`);\n\n    const deps = await parseCargoManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(2);\n    expect(deps.every(d => d.scope === 'development')).toBe(true);\n  });\n\n  it('extracts build-dependencies with development scope', async () => {\n    const manifestPath = writeCargoToml(`\n[package]\nname = \"my-app\"\nversion = \"0.1.0\"\n\n[build-dependencies]\ncc = \"1.0\"\nbindgen = \"0.69\"\n`);\n\n    const deps = await parseCargoManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(2);\n    expect(deps.every(d => d.scope === 'development')).toBe(true);\n    expect(deps.find(d => d.name === 'cc')!.declaredConstraint).toBe('1.0');\n  });\n\n  it('handles all dependency sections together', async () => {\n    const manifestPath = writeCargoToml(`\n[package]\nname = \"my-app\"\nversion = \"0.1.0\"\n\n[dependencies]\nserde = \"1.0\"\n\n[dev-dependencies]\ncriterion = \"0.5\"\n\n[build-dependencies]\ncc = \"1.0\"\n`);\n\n    const deps = await parseCargoManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(3);\n    expect(deps.find(d => d.name === 'serde')!.scope).toBe('production');\n    expect(deps.find(d => d.name === 'criterion')!.scope).toBe('development');\n    expect(deps.find(d => d.name === 'cc')!.scope).toBe('development');\n  });\n\n  it('resolves versions from Cargo.lock', async () => {\n    writeCargoToml(`\n[package]\nname = \"my-app\"\nversion = \"0.1.0\"\n\n[dependencies]\nserde = \"1.0\"\ntokio = \"1\"\n`);\n\n    const lockContent = `# This file is automatically @generated by Cargo.\n# It is not intended for manual editing.\nversion = 3\n\n[[package]]\nname = \"serde\"\nversion = \"1.0.193\"\nsource = \"registry+https://github.com/rust-lang/crates.io-index\"\n\n[[package]]\nname = \"tokio\"\nversion = \"1.35.1\"\nsource = \"registry+https://github.com/rust-lang/crates.io-index\"\n`;\n    fs.writeFileSync(path.join(tmpDir, 'Cargo.lock'), lockContent);\n\n    const manifestPath = path.join(tmpDir, 'Cargo.toml');\n    const deps = await parseCargoManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(2);\n    expect(deps.find(d => d.name === 'serde')!.resolvedVersion).toBe('1.0.193');\n    expect(deps.find(d => d.name === 'tokio')!.resolvedVersion).toBe('1.35.1');\n  });\n\n  it('leaves resolvedVersion undefined when no Cargo.lock exists', async () => {\n    const manifestPath = writeCargoToml(`\n[package]\nname = \"my-app\"\nversion = \"0.1.0\"\n\n[dependencies]\nserde = \"1.0\"\n`);\n\n    const deps = await parseCargoManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(1);\n    expect(deps[0].resolvedVersion).toBeUndefined();\n  });\n\n  it('handles path dependencies with no version (uses * constraint)', async () => {\n    const manifestPath = writeCargoToml(`\n[package]\nname = \"my-app\"\nversion = \"0.1.0\"\n\n[dependencies]\nmy-lib = { path = \"../my-lib\" }\n`);\n\n    const deps = await parseCargoManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(1);\n    expect(deps[0].name).toBe('my-lib');\n    expect(deps[0].declaredConstraint).toBe('*');\n  });\n\n  it('handles git dependencies with no version (uses * constraint)', async () => {\n    const manifestPath = writeCargoToml(`\n[package]\nname = \"my-app\"\nversion = \"0.1.0\"\n\n[dependencies]\nmy-crate = { git = \"https://github.com/user/repo\" }\n`);\n\n    const deps = await parseCargoManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(1);\n    expect(deps[0].name).toBe('my-crate');\n    expect(deps[0].declaredConstraint).toBe('*');\n  });\n\n  it('handles table-style individual dependency sections', async () => {\n    const manifestPath = writeCargoToml(`\n[package]\nname = \"my-app\"\nversion = \"0.1.0\"\n\n[dependencies.serde]\nversion = \"1.0\"\nfeatures = [\"derive\"]\n\n[dependencies.tokio]\nversion = \"1.35\"\nfeatures = [\"full\"]\n`);\n\n    const deps = await parseCargoManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(2);\n    expect(deps.find(d => d.name === 'serde')!.declaredConstraint).toBe('1.0');\n    expect(deps.find(d => d.name === 'tokio')!.declaredConstraint).toBe('1.35');\n    expect(deps.every(d => d.scope === 'production')).toBe(true);\n  });\n\n  it('returns empty array for unreadable file', async () => {\n    const fakePath = path.join(tmpDir, 'nonexistent', 'Cargo.toml');\n    const deps = await parseCargoManifest(fakePath, tmpDir);\n    expect(deps).toEqual([]);\n  });\n\n  it('returns empty array for Cargo.toml with no dependency sections', async () => {\n    const manifestPath = writeCargoToml(`\n[package]\nname = \"my-app\"\nversion = \"0.1.0\"\nedition = \"2021\"\n`);\n\n    const deps = await parseCargoManifest(manifestPath, tmpDir);\n    expect(deps).toEqual([]);\n  });\n\n  it('skips comment lines in dependency sections', async () => {\n    const manifestPath = writeCargoToml(`\n[package]\nname = \"my-app\"\nversion = \"0.1.0\"\n\n[dependencies]\n# This is a comment\nserde = \"1.0\"\n# Another comment\ntokio = \"1.35\"\n`);\n\n    const deps = await parseCargoManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(2);\n    expect(deps.find(d => d.name === 'serde')).toBeDefined();\n    expect(deps.find(d => d.name === 'tokio')).toBeDefined();\n  });\n\n  it('sets sourceManifest as relative path', async () => {\n    const subDir = path.join(tmpDir, 'crates', 'sub');\n    const manifestPath = writeCargoToml(`\n[package]\nname = \"sub-crate\"\nversion = \"0.1.0\"\n\n[dependencies]\nserde = \"1.0\"\n`, subDir);\n\n    const deps = await parseCargoManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(1);\n    expect(deps[0].sourceManifest).toBe('crates/sub/Cargo.toml');\n  });\n\n  it('handles mixed simple and table format in same section', async () => {\n    const manifestPath = writeCargoToml(`\n[package]\nname = \"my-app\"\nversion = \"0.1.0\"\n\n[dependencies]\nlog = \"0.4\"\nserde = { version = \"1.0\", features = [\"derive\"] }\nrand = \"0.8\"\n`);\n\n    const deps = await parseCargoManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(3);\n    expect(deps.find(d => d.name === 'log')!.declaredConstraint).toBe('0.4');\n    expect(deps.find(d => d.name === 'serde')!.declaredConstraint).toBe('1.0');\n    expect(deps.find(d => d.name === 'rand')!.declaredConstraint).toBe('0.8');\n  });\n\n  it('handles version constraints with operators', async () => {\n    const manifestPath = writeCargoToml(`\n[package]\nname = \"my-app\"\nversion = \"0.1.0\"\n\n[dependencies]\nserde = \">=1.0, <2.0\"\ntokio = \"~1.35\"\nrand = \"^0.8\"\n`);\n\n    const deps = await parseCargoManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(3);\n    expect(deps.find(d => d.name === 'serde')!.declaredConstraint).toBe('>=1.0, <2.0');\n    expect(deps.find(d => d.name === 'tokio')!.declaredConstraint).toBe('~1.35');\n    expect(deps.find(d => d.name === 'rand')!.declaredConstraint).toBe('^0.8');\n  });\n});\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;AAGA,oBAA4D;AAC5D,SAAoB;AACpB,WAAsB;AACtB,SAAoB;AACpB,mBAAmC;AAAA,IAEnC,wBAAS,sBAAsB,MAAM;AACnC,MAAI;AAEJ,gCAAW,MAAM;AACf,aAAS,GAAG,YAAY,KAAK,KAAK,GAAG,OAAO,GAAG,uBAAuB,CAAC;AAAA,EACzE,CAAC;AAED,+BAAU,MAAM;AACd,OAAG,OAAO,QAAQ,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACpD,CAAC;AAED,WAAS,eAAe,SAAiB,KAAsB;AAC7D,UAAM,YAAY,OAAO;AACzB,OAAG,UAAU,WAAW,EAAE,WAAW,KAAK,CAAC;AAC3C,UAAM,WAAW,KAAK,KAAK,WAAW,YAAY;AAClD,OAAG,cAAc,UAAU,OAAO;AAClC,WAAO;AAAA,EACT;AAEA,wBAAG,6DAA6D,YAAY;AAC1E,UAAM,eAAe,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAQvC;AAEG,UAAM,OAAO,UAAM,iCAAmB,cAAc,MAAM;AAE1D,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,UAAM,QAAQ,KAAK,KAAK,OAAK,EAAE,SAAS,OAAO;AAC/C,8BAAO,KAAK,EAAE,YAAY;AAC1B,8BAAO,MAAO,kBAAkB,EAAE,KAAK,KAAK;AAC5C,8BAAO,MAAO,KAAK,EAAE,KAAK,YAAY;AACtC,8BAAO,MAAO,SAAS,EAAE,KAAK,OAAO;AAErC,UAAM,QAAQ,KAAK,KAAK,OAAK,EAAE,SAAS,OAAO;AAC/C,8BAAO,KAAK,EAAE,YAAY;AAC1B,8BAAO,MAAO,kBAAkB,EAAE,KAAK,MAAM;AAC7C,8BAAO,MAAO,KAAK,EAAE,KAAK,YAAY;AAAA,EACxC,CAAC;AAED,wBAAG,yDAAyD,YAAY;AACtE,UAAM,eAAe,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAQvC;AAEG,UAAM,OAAO,UAAM,iCAAmB,cAAc,MAAM;AAE1D,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,KAAK,OAAK,EAAE,SAAS,OAAO,EAAG,kBAAkB,EAAE,KAAK,KAAK;AACzE,8BAAO,KAAK,KAAK,OAAK,EAAE,SAAS,OAAO,EAAG,kBAAkB,EAAE,KAAK,MAAM;AAAA,EAC5E,CAAC;AAED,wBAAG,oDAAoD,YAAY;AACjE,UAAM,eAAe,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAQvC;AAEG,UAAM,OAAO,UAAM,iCAAmB,cAAc,MAAM;AAE1D,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,MAAM,OAAK,EAAE,UAAU,aAAa,CAAC,EAAE,KAAK,IAAI;AAAA,EAC9D,CAAC;AAED,wBAAG,sDAAsD,YAAY;AACnE,UAAM,eAAe,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAQvC;AAEG,UAAM,OAAO,UAAM,iCAAmB,cAAc,MAAM;AAE1D,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,MAAM,OAAK,EAAE,UAAU,aAAa,CAAC,EAAE,KAAK,IAAI;AAC5D,8BAAO,KAAK,KAAK,OAAK,EAAE,SAAS,IAAI,EAAG,kBAAkB,EAAE,KAAK,KAAK;AAAA,EACxE,CAAC;AAED,wBAAG,4CAA4C,YAAY;AACzD,UAAM,eAAe,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAavC;AAEG,UAAM,OAAO,UAAM,iCAAmB,cAAc,MAAM;AAE1D,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,KAAK,OAAK,EAAE,SAAS,OAAO,EAAG,KAAK,EAAE,KAAK,YAAY;AACnE,8BAAO,KAAK,KAAK,OAAK,EAAE,SAAS,WAAW,EAAG,KAAK,EAAE,KAAK,aAAa;AACxE,8BAAO,KAAK,KAAK,OAAK,EAAE,SAAS,IAAI,EAAG,KAAK,EAAE,KAAK,aAAa;AAAA,EACnE,CAAC;AAED,wBAAG,qCAAqC,YAAY;AAClD,mBAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAQlB;AAEG,UAAM,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAcpB,OAAG,cAAc,KAAK,KAAK,QAAQ,YAAY,GAAG,WAAW;AAE7D,UAAM,eAAe,KAAK,KAAK,QAAQ,YAAY;AACnD,UAAM,OAAO,UAAM,iCAAmB,cAAc,MAAM;AAE1D,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,KAAK,OAAK,EAAE,SAAS,OAAO,EAAG,eAAe,EAAE,KAAK,SAAS;AAC1E,8BAAO,KAAK,KAAK,OAAK,EAAE,SAAS,OAAO,EAAG,eAAe,EAAE,KAAK,QAAQ;AAAA,EAC3E,CAAC;AAED,wBAAG,8DAA8D,YAAY;AAC3E,UAAM,eAAe,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAOvC;AAEG,UAAM,OAAO,UAAM,iCAAmB,cAAc,MAAM;AAE1D,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,eAAe,EAAE,cAAc;AAAA,EAChD,CAAC;AAED,wBAAG,iEAAiE,YAAY;AAC9E,UAAM,eAAe,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAOvC;AAEG,UAAM,OAAO,UAAM,iCAAmB,cAAc,MAAM;AAE1D,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,QAAQ;AAClC,8BAAO,KAAK,CAAC,EAAE,kBAAkB,EAAE,KAAK,GAAG;AAAA,EAC7C,CAAC;AAED,wBAAG,gEAAgE,YAAY;AAC7E,UAAM,eAAe,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAOvC;AAEG,UAAM,OAAO,UAAM,iCAAmB,cAAc,MAAM;AAE1D,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,UAAU;AACpC,8BAAO,KAAK,CAAC,EAAE,kBAAkB,EAAE,KAAK,GAAG;AAAA,EAC7C,CAAC;AAED,wBAAG,sDAAsD,YAAY;AACnE,UAAM,eAAe,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAYvC;AAEG,UAAM,OAAO,UAAM,iCAAmB,cAAc,MAAM;AAE1D,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,KAAK,OAAK,EAAE,SAAS,OAAO,EAAG,kBAAkB,EAAE,KAAK,KAAK;AACzE,8BAAO,KAAK,KAAK,OAAK,EAAE,SAAS,OAAO,EAAG,kBAAkB,EAAE,KAAK,MAAM;AAC1E,8BAAO,KAAK,MAAM,OAAK,EAAE,UAAU,YAAY,CAAC,EAAE,KAAK,IAAI;AAAA,EAC7D,CAAC;AAED,wBAAG,2CAA2C,YAAY;AACxD,UAAM,WAAW,KAAK,KAAK,QAAQ,eAAe,YAAY;AAC9D,UAAM,OAAO,UAAM,iCAAmB,UAAU,MAAM;AACtD,8BAAO,IAAI,EAAE,QAAQ,CAAC,CAAC;AAAA,EACzB,CAAC;AAED,wBAAG,kEAAkE,YAAY;AAC/E,UAAM,eAAe,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA,CAKvC;AAEG,UAAM,OAAO,UAAM,iCAAmB,cAAc,MAAM;AAC1D,8BAAO,IAAI,EAAE,QAAQ,CAAC,CAAC;AAAA,EACzB,CAAC;AAED,wBAAG,8CAA8C,YAAY;AAC3D,UAAM,eAAe,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAUvC;AAEG,UAAM,OAAO,UAAM,iCAAmB,cAAc,MAAM;AAE1D,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,KAAK,OAAK,EAAE,SAAS,OAAO,CAAC,EAAE,YAAY;AACvD,8BAAO,KAAK,KAAK,OAAK,EAAE,SAAS,OAAO,CAAC,EAAE,YAAY;AAAA,EACzD,CAAC;AAED,wBAAG,wCAAwC,YAAY;AACrD,UAAM,SAAS,KAAK,KAAK,QAAQ,UAAU,KAAK;AAChD,UAAM,eAAe,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,GAOrC,MAAM;AAEL,UAAM,OAAO,UAAM,iCAAmB,cAAc,MAAM;AAE1D,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,cAAc,EAAE,KAAK,uBAAuB;AAAA,EAC7D,CAAC;AAED,wBAAG,yDAAyD,YAAY;AACtE,UAAM,eAAe,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CASvC;AAEG,UAAM,OAAO,UAAM,iCAAmB,cAAc,MAAM;AAE1D,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,KAAK,OAAK,EAAE,SAAS,KAAK,EAAG,kBAAkB,EAAE,KAAK,KAAK;AACvE,8BAAO,KAAK,KAAK,OAAK,EAAE,SAAS,OAAO,EAAG,kBAAkB,EAAE,KAAK,KAAK;AACzE,8BAAO,KAAK,KAAK,OAAK,EAAE,SAAS,MAAM,EAAG,kBAAkB,EAAE,KAAK,KAAK;AAAA,EAC1E,CAAC;AAED,wBAAG,8CAA8C,YAAY;AAC3D,UAAM,eAAe,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CASvC;AAEG,UAAM,OAAO,UAAM,iCAAmB,cAAc,MAAM;AAE1D,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,KAAK,OAAK,EAAE,SAAS,OAAO,EAAG,kBAAkB,EAAE,KAAK,aAAa;AACjF,8BAAO,KAAK,KAAK,OAAK,EAAE,SAAS,OAAO,EAAG,kBAAkB,EAAE,KAAK,OAAO;AAC3E,8BAAO,KAAK,KAAK,OAAK,EAAE,SAAS,MAAM,EAAG,kBAAkB,EAAE,KAAK,MAAM;AAAA,EAC3E,CAAC;AACH,CAAC;",
-  "names": []
-}

package/dist/security/manifest/plugins/go.test.js

@@ -1,341 +0,0 @@
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var import_vitest = require("vitest");
-var fs = __toESM(require("fs"));
-var path = __toESM(require("path"));
-var os = __toESM(require("os"));
-var import_go = require("./go");
-(0, import_vitest.describe)("parseGoManifest", () => {
-  let tmpDir;
-  (0, import_vitest.beforeEach)(() => {
-    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "kirograph-go-test-"));
-  });
-  (0, import_vitest.afterEach)(() => {
-    fs.rmSync(tmpDir, { recursive: true, force: true });
-  });
-  function writeGoMod(content, dir) {
-    const targetDir = dir ?? tmpDir;
-    fs.mkdirSync(targetDir, { recursive: true });
-    const filePath = path.join(targetDir, "go.mod");
-    fs.writeFileSync(filePath, content);
-    return filePath;
-  }
-  function writeGoSum(content, dir) {
-    const targetDir = dir ?? tmpDir;
-    fs.mkdirSync(targetDir, { recursive: true });
-    fs.writeFileSync(path.join(targetDir, "go.sum"), content);
-  }
-  (0, import_vitest.it)("extracts dependencies from require block", async () => {
-    const manifestPath = writeGoMod(`
-module github.com/example/myproject
-
-go 1.21
-
-require (
-	github.com/gin-gonic/gin v1.9.1
-	github.com/stretchr/testify v1.8.4
-)
-`);
-    const deps = await (0, import_go.parseGoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(2);
-    const gin = deps.find((d) => d.name === "github.com/gin-gonic/gin");
-    (0, import_vitest.expect)(gin).toBeDefined();
-    (0, import_vitest.expect)(gin.declaredConstraint).toBe("v1.9.1");
-    (0, import_vitest.expect)(gin.resolvedVersion).toBe("v1.9.1");
-    (0, import_vitest.expect)(gin.scope).toBe("production");
-    (0, import_vitest.expect)(gin.ecosystem).toBe("go");
-    const testify = deps.find((d) => d.name === "github.com/stretchr/testify");
-    (0, import_vitest.expect)(testify).toBeDefined();
-    (0, import_vitest.expect)(testify.declaredConstraint).toBe("v1.8.4");
-    (0, import_vitest.expect)(testify.resolvedVersion).toBe("v1.8.4");
-  });
-  (0, import_vitest.it)("extracts single-line require directives", async () => {
-    const manifestPath = writeGoMod(`
-module github.com/example/myproject
-
-go 1.21
-
-require github.com/pkg/errors v0.9.1
-require golang.org/x/text v0.14.0
-`);
-    const deps = await (0, import_go.parseGoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(2);
-    (0, import_vitest.expect)(deps.find((d) => d.name === "github.com/pkg/errors")).toBeDefined();
-    (0, import_vitest.expect)(deps.find((d) => d.name === "golang.org/x/text")).toBeDefined();
-  });
-  (0, import_vitest.it)("handles both block and single-line requires together", async () => {
-    const manifestPath = writeGoMod(`
-module github.com/example/myproject
-
-go 1.21
-
-require github.com/pkg/errors v0.9.1
-
-require (
-	github.com/gin-gonic/gin v1.9.1
-	github.com/stretchr/testify v1.8.4
-)
-`);
-    const deps = await (0, import_go.parseGoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(3);
-    (0, import_vitest.expect)(deps.find((d) => d.name === "github.com/pkg/errors")).toBeDefined();
-    (0, import_vitest.expect)(deps.find((d) => d.name === "github.com/gin-gonic/gin")).toBeDefined();
-    (0, import_vitest.expect)(deps.find((d) => d.name === "github.com/stretchr/testify")).toBeDefined();
-  });
-  (0, import_vitest.it)("all dependencies have production scope", async () => {
-    const manifestPath = writeGoMod(`
-module github.com/example/myproject
-
-go 1.21
-
-require (
-	github.com/gin-gonic/gin v1.9.1
-	github.com/stretchr/testify v1.8.4
-)
-`);
-    const deps = await (0, import_go.parseGoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps.every((d) => d.scope === "production")).toBe(true);
-  });
-  (0, import_vitest.it)("sets declaredConstraint and resolvedVersion to the same value", async () => {
-    const manifestPath = writeGoMod(`
-module github.com/example/myproject
-
-go 1.21
-
-require github.com/gin-gonic/gin v1.9.1
-`);
-    const deps = await (0, import_go.parseGoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].declaredConstraint).toBe("v1.9.1");
-    (0, import_vitest.expect)(deps[0].resolvedVersion).toBe("v1.9.1");
-  });
-  (0, import_vitest.it)("skips comment lines in require block", async () => {
-    const manifestPath = writeGoMod(`
-module github.com/example/myproject
-
-go 1.21
-
-require (
-	// This is a comment
-	github.com/gin-gonic/gin v1.9.1
-	// Another comment
-	github.com/stretchr/testify v1.8.4
-)
-`);
-    const deps = await (0, import_go.parseGoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(2);
-    (0, import_vitest.expect)(deps.find((d) => d.name === "github.com/gin-gonic/gin")).toBeDefined();
-    (0, import_vitest.expect)(deps.find((d) => d.name === "github.com/stretchr/testify")).toBeDefined();
-  });
-  (0, import_vitest.it)("handles indirect dependencies (// indirect comment)", async () => {
-    const manifestPath = writeGoMod(`
-module github.com/example/myproject
-
-go 1.21
-
-require (
-	github.com/gin-gonic/gin v1.9.1
-	golang.org/x/sys v0.15.0 // indirect
-)
-`);
-    const deps = await (0, import_go.parseGoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(2);
-    const sys = deps.find((d) => d.name === "golang.org/x/sys");
-    (0, import_vitest.expect)(sys).toBeDefined();
-    (0, import_vitest.expect)(sys.declaredConstraint).toBe("v0.15.0");
-  });
-  (0, import_vitest.it)("handles pseudo-versions", async () => {
-    const manifestPath = writeGoMod(`
-module github.com/example/myproject
-
-go 1.21
-
-require (
-	github.com/some/module v0.0.0-20230101120000-abcdef123456
-)
-`);
-    const deps = await (0, import_go.parseGoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].declaredConstraint).toBe("v0.0.0-20230101120000-abcdef123456");
-    (0, import_vitest.expect)(deps[0].resolvedVersion).toBe("v0.0.0-20230101120000-abcdef123456");
-  });
-  (0, import_vitest.it)("handles +incompatible versions", async () => {
-    const manifestPath = writeGoMod(`
-module github.com/example/myproject
-
-go 1.21
-
-require github.com/some/legacy v3.2.1+incompatible
-`);
-    const deps = await (0, import_go.parseGoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].declaredConstraint).toBe("v3.2.1+incompatible");
-  });
-  (0, import_vitest.it)("skips entries with invalid module paths", async () => {
-    const manifestPath = writeGoMod(`
-module github.com/example/myproject
-
-go 1.21
-
-require (
-	github.com/valid/module v1.0.0
-	invalidpath v1.0.0
-)
-`);
-    const deps = await (0, import_go.parseGoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].name).toBe("github.com/valid/module");
-  });
-  (0, import_vitest.it)("skips entries with invalid version format", async () => {
-    const manifestPath = writeGoMod(`
-module github.com/example/myproject
-
-go 1.21
-
-require (
-	github.com/valid/module v1.0.0
-	github.com/bad/version 1.0.0
-	github.com/bad/version2 latest
-)
-`);
-    const deps = await (0, import_go.parseGoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].name).toBe("github.com/valid/module");
-  });
-  (0, import_vitest.it)("returns empty array for unreadable file", async () => {
-    const deps = await (0, import_go.parseGoManifest)("/nonexistent/go.mod", tmpDir);
-    (0, import_vitest.expect)(deps).toEqual([]);
-  });
-  (0, import_vitest.it)("returns empty array for go.mod with no require directives", async () => {
-    const manifestPath = writeGoMod(`
-module github.com/example/myproject
-
-go 1.21
-`);
-    const deps = await (0, import_go.parseGoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toEqual([]);
-  });
-  (0, import_vitest.it)("sets sourceManifest as relative path", async () => {
-    const subDir = path.join(tmpDir, "services", "api");
-    const manifestPath = writeGoMod(`
-module github.com/example/api
-
-go 1.21
-
-require github.com/gin-gonic/gin v1.9.1
-`, subDir);
-    const deps = await (0, import_go.parseGoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].sourceManifest).toBe("services/api/go.mod");
-  });
-  (0, import_vitest.it)("reads go.sum for integrity verification", async () => {
-    const manifestPath = writeGoMod(`
-module github.com/example/myproject
-
-go 1.21
-
-require github.com/gin-gonic/gin v1.9.1
-`);
-    writeGoSum(`github.com/gin-gonic/gin v1.9.1 h1:4idEAncQnU5cB7BeOkPtxjfCSye0AAm1R0RVIqFPSKw=
-github.com/gin-gonic/gin v1.9.1/go.mod h1:hPrL/0KcuqOSEXQHxOGZp0Lg2g/4wZIgGMnG3w3gI=
-`);
-    const deps = await (0, import_go.parseGoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].name).toBe("github.com/gin-gonic/gin");
-    (0, import_vitest.expect)(deps[0].resolvedVersion).toBe("v1.9.1");
-  });
-  (0, import_vitest.it)("handles go.mod with multiple require blocks", async () => {
-    const manifestPath = writeGoMod(`
-module github.com/example/myproject
-
-go 1.21
-
-require (
-	github.com/gin-gonic/gin v1.9.1
-)
-
-require (
-	golang.org/x/text v0.14.0
-	golang.org/x/sys v0.15.0
-)
-`);
-    const deps = await (0, import_go.parseGoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(3);
-    (0, import_vitest.expect)(deps.find((d) => d.name === "github.com/gin-gonic/gin")).toBeDefined();
-    (0, import_vitest.expect)(deps.find((d) => d.name === "golang.org/x/text")).toBeDefined();
-    (0, import_vitest.expect)(deps.find((d) => d.name === "golang.org/x/sys")).toBeDefined();
-  });
-  (0, import_vitest.it)("handles empty require block", async () => {
-    const manifestPath = writeGoMod(`
-module github.com/example/myproject
-
-go 1.21
-
-require (
-)
-`);
-    const deps = await (0, import_go.parseGoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toEqual([]);
-  });
-  (0, import_vitest.it)("handles pre-release versions", async () => {
-    const manifestPath = writeGoMod(`
-module github.com/example/myproject
-
-go 1.21
-
-require github.com/some/module v1.2.3-beta.1
-`);
-    const deps = await (0, import_go.parseGoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].declaredConstraint).toBe("v1.2.3-beta.1");
-  });
-  (0, import_vitest.it)("works without go.sum present", async () => {
-    const manifestPath = writeGoMod(`
-module github.com/example/myproject
-
-go 1.21
-
-require github.com/gin-gonic/gin v1.9.1
-`);
-    const deps = await (0, import_go.parseGoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].name).toBe("github.com/gin-gonic/gin");
-    (0, import_vitest.expect)(deps[0].resolvedVersion).toBe("v1.9.1");
-  });
-  (0, import_vitest.it)("sets ecosystem to go for all dependencies", async () => {
-    const manifestPath = writeGoMod(`
-module github.com/example/myproject
-
-go 1.21
-
-require (
-	github.com/gin-gonic/gin v1.9.1
-	golang.org/x/text v0.14.0
-)
-`);
-    const deps = await (0, import_go.parseGoManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps.every((d) => d.ecosystem === "go")).toBe(true);
-  });
-});
-//# sourceMappingURL=go.test.js.map