mobbdev 1.0.87 → 1.0.88

package/dist/index.mjs

@@ -7300,8 +7300,8 @@ var CliError = class extends Error {
 };
 
 // src/commands/convert_to_sarif.ts
-import AdmZip from "adm-zip";
 import multimatch from "multimatch";
+import StreamZip from "node-stream-zip";
 import tmp from "tmp";
 async function convertToSarif(options) {
   switch (options.inputFileFormat) {
@@ -7315,8 +7315,9 @@ async function convertToSarif(options) {
   }
 }
 async function convertFprToSarif(inputFilePath, outputFilePath, codePathPatterns) {
-  const zipIn = new AdmZip(inputFilePath);
-  if (!zipIn.getEntry("audit.fvdl")) {
+  const zipIn = new StreamZip.async({ file: inputFilePath });
+  const zipInEntries = await zipIn.entries();
+  if (!("audit.fvdl" in zipInEntries)) {
     throw new CliError(
       "\nError: the input file should be in a valid Fortify FPR format."
     );
@@ -7325,10 +7326,9 @@ async function convertFprToSarif(inputFilePath, outputFilePath, codePathPatterns
     unsafeCleanup: true
   });
   try {
-    zipIn.extractEntryTo("audit.fvdl", tmpObj.name);
-    const auditFvdlSaxParser = initSaxParser(
-      path3.join(tmpObj.name, "audit.fvdl")
-    );
+    const auditFvdlPath = path3.join(tmpObj.name, "audit.fvdl");
+    await zipIn.extract("audit.fvdl", auditFvdlPath);
+    const auditFvdlSaxParser = initSaxParser(auditFvdlPath);
     const vulnerabilityParser = new VulnerabilityParser(
       auditFvdlSaxParser.parser
     );
@@ -7340,14 +7340,14 @@ async function convertFprToSarif(inputFilePath, outputFilePath, codePathPatterns
     );
     let auditMetadataParser = null;
     await auditFvdlSaxParser.parse();
-    if (zipIn.getEntry("audit.xml")) {
-      zipIn.extractEntryTo("audit.xml", tmpObj.name);
-      const auditXmlSaxParser = initSaxParser(
-        path3.join(tmpObj.name, "audit.xml")
-      );
+    if ("audit.xml" in zipInEntries) {
+      const auditXmlPath = path3.join(tmpObj.name, "audit.xml");
+      await zipIn.extract("audit.xml", auditXmlPath);
+      const auditXmlSaxParser = initSaxParser(auditXmlPath);
       auditMetadataParser = new AuditMetadataParser(auditXmlSaxParser.parser);
       await auditXmlSaxParser.parse();
     }
+    await zipIn.close();
     fs3.writeFileSync(
       outputFilePath,
       `{
@@ -8907,7 +8907,7 @@ var GQLClient = class {
 // src/features/analysis/pack.ts
 import fs5 from "node:fs";
 import path5 from "node:path";
-import AdmZip2 from "adm-zip";
+import AdmZip from "adm-zip";
 import Debug13 from "debug";
 import { globby } from "globby";
 import { isBinary } from "istextorbinary";
@@ -8969,7 +8969,7 @@ async function pack(srcDirPath, vulnFiles, isIncludeAllFiles = false) {
     dot: true
   });
   debug13("files found %d", filepaths.length);
-  const zip = new AdmZip2();
+  const zip = new AdmZip();
   debug13("compressing files");
   for (const filepath of filepaths) {
     const absFilepath = path5.join(srcDirPath, filepath.toString());
@@ -8999,8 +8999,8 @@ async function pack(srcDirPath, vulnFiles, isIncludeAllFiles = false) {
 }
 async function repackFpr(fprPath) {
   debug13("repack fpr file %s", fprPath);
-  const zipIn = new AdmZip2(fprPath);
-  const zipOut = new AdmZip2();
+  const zipIn = new AdmZip(fprPath);
+  const zipOut = new AdmZip();
   const mappingXML = zipIn.readAsText("src-archive/index.xml", "utf-8");
   const filesMapping = FPR_SOURCE_CODE_FILE_MAPPING_SCHEMA.parse(
     await parseStringPromise(mappingXML)
@@ -10709,7 +10709,7 @@ var PathValidation = class {
 // src/mcp/services/FilePacking.ts
 import fs9 from "node:fs";
 import path11 from "node:path";
-import AdmZip3 from "adm-zip";
+import AdmZip2 from "adm-zip";
 import { isBinary as isBinary2 } from "istextorbinary";
 var MAX_FILE_SIZE2 = 1024 * 1024 * 5;
 var EXCLUDED_FILE_PATTERNS = [
@@ -10895,7 +10895,7 @@ var FilePacking = class {
   }
   async packFiles(sourceDirectoryPath, filesToPack) {
     logInfo(`FilePacking: packing files from ${sourceDirectoryPath}`);
-    const zip = new AdmZip3();
+    const zip = new AdmZip2();
     let packedFilesCount = 0;
     logInfo("FilePacking: compressing files");
     for (const filepath of filesToPack) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mobbdev",
-  "version": "1.0.87",
+  "version": "1.0.88",
   "description": "Automated secure code remediation tool",
   "repository": "git+https://github.com/mobb-dev/bugsy.git",
   "main": "dist/index.js",
@@ -71,6 +71,7 @@
     "multimatch": "7.0.0",
     "nanospinner": "1.1.0",
     "node-fetch": "3.3.2",
+    "node-stream-zip": "1.15.0",
     "octokit": "3.2.1",
     "open": "8.4.2",
     "parse-diff": "0.11.1",