packtory 0.0.9 → 0.0.10
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/artifacts/artifacts-builder.js +0 -75
- package/artifacts/artifacts-builder.js.map +1 -1
- package/bundle-emitter/emitter.js +0 -34
- package/bundle-emitter/emitter.js.map +1 -1
- package/bundle-emitter/extract-package-tarball.js +0 -11
- package/bundle-emitter/extract-package-tarball.js.map +1 -1
- package/bundle-emitter/registry-client.js +0 -261
- package/bundle-emitter/registry-client.js.map +1 -1
- package/bundle-emitter/repository-url-normalizer.js +0 -36
- package/bundle-emitter/repository-url-normalizer.js.map +1 -1
- package/checks/check-runner.js +0 -5
- package/checks/check-runner.js.map +1 -1
- package/checks/rule.js +0 -8
- package/checks/rule.js.map +1 -1
- package/checks/rules/max-bundle-size.js +0 -35
- package/checks/rules/max-bundle-size.js.map +1 -1
- package/checks/rules/no-dev-dependency-imports.js +0 -28
- package/checks/rules/no-dev-dependency-imports.js.map +1 -1
- package/checks/rules/no-duplicated-files.js +0 -107
- package/checks/rules/no-duplicated-files.js.map +1 -1
- package/checks/rules/no-side-effects.js +0 -42
- package/checks/rules/no-side-effects.js.map +1 -1
- package/checks/rules/no-unused-bundle-dependencies.js +0 -24
- package/checks/rules/no-unused-bundle-dependencies.js.map +1 -1
- package/checks/rules/registry.js +0 -9
- package/checks/rules/registry.js.map +1 -1
- package/checks/rules/required-files.js +0 -31
- package/checks/rules/required-files.js.map +1 -1
- package/checks/rules/unique-target-paths.js +0 -25
- package/checks/rules/unique-target-paths.js.map +1 -1
- package/config/additional-files.js +0 -4
- package/config/additional-files.js.map +1 -1
- package/config/automatic-versioning-settings.js +0 -4
- package/config/automatic-versioning-settings.js.map +1 -1
- package/config/config.js +0 -2
- package/config/config.js.map +1 -1
- package/config/dead-code-elimination-settings.d.ts +6 -0
- package/config/dead-code-elimination-settings.d.ts.map +1 -1
- package/config/dead-code-elimination-settings.js +1 -3
- package/config/dead-code-elimination-settings.js.map +1 -1
- package/config/dependency-policy.js +0 -3
- package/config/dependency-policy.js.map +1 -1
- package/config/main-package-json-schema.js +0 -1
- package/config/main-package-json-schema.js.map +1 -1
- package/config/manual-versioning-settings.js +0 -4
- package/config/manual-versioning-settings.js.map +1 -1
- package/config/package-config.js +0 -6
- package/config/package-config.js.map +1 -1
- package/config/package-interface.d.ts +2 -0
- package/config/package-interface.d.ts.map +1 -1
- package/config/package-interface.js +0 -23
- package/config/package-interface.js.map +1 -1
- package/config/package-json.d.ts +0 -1
- package/config/package-json.d.ts.map +1 -1
- package/config/package-json.js +0 -16
- package/config/package-json.js.map +1 -1
- package/config/packtory-config-schema.js +0 -3
- package/config/packtory-config-schema.js.map +1 -1
- package/config/publish-settings.js +0 -22
- package/config/publish-settings.js.map +1 -1
- package/config/registry-settings.d.ts +0 -20
- package/config/registry-settings.d.ts.map +1 -1
- package/config/registry-settings.js +0 -38
- package/config/registry-settings.js.map +1 -1
- package/config/root.js +0 -4
- package/config/root.js.map +1 -1
- package/config/sbom-settings.js +0 -3
- package/config/sbom-settings.js.map +1 -1
- package/config/validation.d.ts.map +1 -1
- package/config/validation.js +0 -232
- package/config/validation.js.map +1 -1
- package/config/versioning-settings.js +0 -1
- package/config/versioning-settings.js.map +1 -1
- package/dead-code-eliminator/analyzed-bundle.d.ts +2 -0
- package/dead-code-eliminator/analyzed-bundle.d.ts.map +1 -1
- package/dead-code-eliminator/analyzed-bundle.js +0 -7
- package/dead-code-eliminator/analyzed-bundle.js.map +1 -1
- package/dead-code-eliminator/eliminator.js +3 -2
- package/dead-code-eliminator/eliminator.js.map +1 -1
- package/dead-code-eliminator/load-bundle.js +7 -6
- package/dead-code-eliminator/load-bundle.js.map +1 -1
- package/dead-code-eliminator/reachability/impure-statements.js +2 -2
- package/dead-code-eliminator/reachability/impure-statements.js.map +1 -1
- package/dead-code-eliminator/reachability/reachability.js +3 -3
- package/dead-code-eliminator/reachability/reachability.js.map +1 -1
- package/dead-code-eliminator/side-effect-classifier.js +141 -24
- package/dead-code-eliminator/side-effect-classifier.js.map +1 -1
- package/dependency-scanner/dependency-graph.d.ts +0 -2
- package/dependency-scanner/dependency-graph.d.ts.map +1 -1
- package/dependency-scanner/dependency-graph.js +0 -73
- package/dependency-scanner/dependency-graph.js.map +1 -1
- package/dependency-scanner/external-dependencies.d.ts +0 -1
- package/dependency-scanner/external-dependencies.d.ts.map +1 -1
- package/dependency-scanner/external-dependencies.js +0 -16
- package/dependency-scanner/external-dependencies.js.map +1 -1
- package/dependency-scanner/scanner.js +0 -69
- package/dependency-scanner/scanner.js.map +1 -1
- package/dependency-scanner/source-file-references.js +0 -26
- package/dependency-scanner/source-file-references.js.map +1 -1
- package/dependency-scanner/source-map-file-locator.js +0 -27
- package/dependency-scanner/source-map-file-locator.js.map +1 -1
- package/dependency-scanner/typescript-file-host.js +0 -114
- package/dependency-scanner/typescript-file-host.js.map +1 -1
- package/dependency-scanner/typescript-project-analyzer.d.ts +0 -1
- package/dependency-scanner/typescript-project-analyzer.d.ts.map +1 -1
- package/dependency-scanner/typescript-project-analyzer.js +0 -52
- package/dependency-scanner/typescript-project-analyzer.js.map +1 -1
- package/directed-graph/graph.d.ts +0 -1
- package/directed-graph/graph.d.ts.map +1 -1
- package/directed-graph/graph.js +0 -229
- package/directed-graph/graph.js.map +1 -1
- package/file-manager/compare.js +0 -17
- package/file-manager/compare.js.map +1 -1
- package/file-manager/equal.js +0 -5
- package/file-manager/equal.js.map +1 -1
- package/file-manager/file-manager.js +0 -52
- package/file-manager/file-manager.js.map +1 -1
- package/file-manager/permissions.js +0 -26
- package/file-manager/permissions.js.map +1 -1
- package/linker/linker.js +0 -23
- package/linker/linker.js.map +1 -1
- package/linker/resource-graph.js +0 -25
- package/linker/resource-graph.js.map +1 -1
- package/linker/source-modifier/import-paths.js +0 -22
- package/linker/source-modifier/import-paths.js.map +1 -1
- package/linker/substitute-bundles.js +0 -79
- package/linker/substitute-bundles.js.map +1 -1
- package/linker/substituted-resource-graph.js +0 -72
- package/linker/substituted-resource-graph.js.map +1 -1
- package/package-surface/modules.js +12 -230
- package/package-surface/modules.js.map +1 -1
- package/package-surface/surface.d.ts +0 -2
- package/package-surface/surface.d.ts.map +1 -1
- package/package-surface/surface.js +0 -15
- package/package-surface/surface.js.map +1 -1
- package/package.json +41 -3
- package/packtory/map-config.js +0 -14
- package/packtory/map-config.js.map +1 -1
- package/packtory/normalize-paths.js +0 -24
- package/packtory/normalize-paths.js.map +1 -1
- package/packtory/package-processor-build.js +0 -72
- package/packtory/package-processor-build.js.map +1 -1
- package/packtory/package-processor-publish.d.ts +0 -11
- package/packtory/package-processor-publish.d.ts.map +1 -1
- package/packtory/package-processor-publish.js +0 -133
- package/packtory/package-processor-publish.js.map +1 -1
- package/packtory/package-processor.js +0 -8
- package/packtory/package-processor.js.map +1 -1
- package/packtory/packtory-resolve.js +16 -9
- package/packtory/packtory-resolve.js.map +1 -1
- package/packtory/packtory-results.js +0 -15
- package/packtory/packtory-results.js.map +1 -1
- package/packtory/prepare-package-options.d.ts +2 -14
- package/packtory/prepare-package-options.d.ts.map +1 -1
- package/packtory/prepare-package-options.js +1 -118
- package/packtory/prepare-package-options.js.map +1 -1
- package/packtory/resolved-package.js +0 -31
- package/packtory/resolved-package.js.map +1 -1
- package/progress/progress-broadcaster.js +0 -45
- package/progress/progress-broadcaster.js.map +1 -1
- package/report/artifact-entry-merger.js +0 -20
- package/report/artifact-entry-merger.js.map +1 -1
- package/report/inspectors.js +0 -73
- package/report/inspectors.js.map +1 -1
- package/report/report-aggregator.js +0 -185
- package/report/report-aggregator.js.map +1 -1
- package/resource-resolver/content.js +0 -53
- package/resource-resolver/content.js.map +1 -1
- package/resource-resolver/resource-resolve-options.js +0 -12
- package/resource-resolver/resource-resolve-options.js.map +1 -1
- package/resource-resolver/resource-resolver.js +0 -78
- package/resource-resolver/resource-resolver.js.map +1 -1
- package/sbom/extract-license.js +0 -10
- package/sbom/extract-license.js.map +1 -1
- package/sbom/license-resolver.js +0 -19
- package/sbom/license-resolver.js.map +1 -1
- package/sbom/sbom-file.js +0 -54
- package/sbom/sbom-file.js.map +1 -1
- package/sbom/sbom-serializer.js +0 -9
- package/sbom/sbom-serializer.js.map +1 -1
- package/sbom.cdx.json +390 -0
- package/tar/extract-tar.js +0 -38
- package/tar/extract-tar.js.map +1 -1
- package/version-manager/manager.js +0 -46
- package/version-manager/manager.js.map +1 -1
- package/version-manager/manifest/builder.js +0 -56
- package/version-manager/manifest/builder.js.map +1 -1
- package/version-manager/manifest/serialize.js +0 -46
- package/version-manager/manifest/serialize.js.map +1 -1
- package/version-manager/manifest/sort-values.js +0 -16
- package/version-manager/manifest/sort-values.js.map +1 -1
- package/version-manager/specifier-classifier.js +0 -33
- package/version-manager/specifier-classifier.js.map +1 -1
- package/version-manager/specifier-errors.js +0 -43
- package/version-manager/specifier-errors.js.map +1 -1
- package/version-manager/versioned-bundle-dependencies.js +0 -107
- package/version-manager/versioned-bundle-dependencies.js.map +1 -1
- package/version-manager/versioned-bundle-imports.d.ts +0 -1
- package/version-manager/versioned-bundle-imports.d.ts.map +1 -1
- package/version-manager/versioned-bundle-imports.js +0 -72
- package/version-manager/versioned-bundle-imports.js.map +1 -1
- package/version-manager/versioned-bundle.d.ts +0 -1
- package/version-manager/versioned-bundle.d.ts.map +1 -1
- package/version-manager/versioned-bundle.js +0 -60
- package/version-manager/versioned-bundle.js.map +1 -1
package/sbom/sbom-file.js
CHANGED
|
@@ -1,57 +1,3 @@
|
|
|
1
1
|
import { extractLicenseFromManifest } from "./extract-license.js";
|
|
2
2
|
import { buildSbom } from "./sbom-builder.js";
|
|
3
|
-
const sbomFilePath = 'sbom.cdx.json';
|
|
4
|
-
function isSbomEnabled(publishSettings) {
|
|
5
|
-
return publishSettings.sbom?.enabled ?? true;
|
|
6
|
-
}
|
|
7
|
-
function listDependencyEntries(bundle) {
|
|
8
|
-
return [
|
|
9
|
-
...Object.entries(bundle.dependencies).map(([name, specifier]) => {
|
|
10
|
-
return { name, specifier, kind: 'runtime' };
|
|
11
|
-
}),
|
|
12
|
-
...Object.entries(bundle.peerDependencies).map(([name, specifier]) => {
|
|
13
|
-
return { name, specifier, kind: 'peer' };
|
|
14
|
-
})
|
|
15
|
-
];
|
|
16
|
-
}
|
|
17
|
-
export function createSbomFileBuilder(dependencies) {
|
|
18
|
-
const { licenseResolver, sbomSerializer, toolVersionProvider, projectFolder } = dependencies;
|
|
19
|
-
async function resolveDependencyEntries(bundle, siblings) {
|
|
20
|
-
const siblingsByName = new Map(siblings.map((sibling) => {
|
|
21
|
-
return [sibling.name, sibling];
|
|
22
|
-
}));
|
|
23
|
-
const entries = listDependencyEntries(bundle);
|
|
24
|
-
return Promise.all(entries.map(async (entry) => {
|
|
25
|
-
const sibling = siblingsByName.get(entry.name);
|
|
26
|
-
const license = sibling === undefined
|
|
27
|
-
? await licenseResolver.resolveLicense({ projectFolder, dependencyName: entry.name })
|
|
28
|
-
: extractLicenseFromManifest(sibling.packageJson);
|
|
29
|
-
return { ...entry, license };
|
|
30
|
-
}));
|
|
31
|
-
}
|
|
32
|
-
async function buildFile(bundle, siblings) {
|
|
33
|
-
const [resolvedToolVersion, sbomDependencies] = await Promise.all([
|
|
34
|
-
toolVersionProvider(),
|
|
35
|
-
resolveDependencyEntries(bundle, siblings)
|
|
36
|
-
]);
|
|
37
|
-
const bom = buildSbom({
|
|
38
|
-
toolVersion: resolvedToolVersion,
|
|
39
|
-
rootComponent: { name: bundle.packageJson.name, version: bundle.packageJson.version },
|
|
40
|
-
dependencies: sbomDependencies
|
|
41
|
-
});
|
|
42
|
-
return {
|
|
43
|
-
filePath: sbomFilePath,
|
|
44
|
-
content: sbomSerializer.serialize(bom),
|
|
45
|
-
isExecutable: false
|
|
46
|
-
};
|
|
47
|
-
}
|
|
48
|
-
return {
|
|
49
|
-
async generate(bundle, siblings, publishSettings) {
|
|
50
|
-
if (!isSbomEnabled(publishSettings)) {
|
|
51
|
-
return undefined;
|
|
52
|
-
}
|
|
53
|
-
return [await buildFile(bundle, siblings)];
|
|
54
|
-
}
|
|
55
|
-
};
|
|
56
|
-
}
|
|
57
3
|
//# sourceMappingURL=sbom-file.js.map
|
package/sbom/sbom-file.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sbom-file.js","sourceRoot":"","sources":["../../../../source/sbom/sbom-file.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB
|
|
1
|
+
{"version":3,"file":"sbom-file.js","sourceRoot":"","sources":["../../../../source/sbom/sbom-file.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB;AAGjE,OAAO,EAAE,SAAS,EAAgD,MAAM,mBAAmB"}
|
package/sbom/sbom-serializer.js
CHANGED
|
@@ -1,11 +1,2 @@
|
|
|
1
1
|
import * as cdx from '@cyclonedx/cyclonedx-library';
|
|
2
|
-
export function createSbomSerializer() {
|
|
3
|
-
const factory = new cdx.Serialize.JSON.Normalize.Factory(cdx.Spec.Spec1dot6);
|
|
4
|
-
const serializer = new cdx.Serialize.JsonSerializer(factory);
|
|
5
|
-
return {
|
|
6
|
-
serialize(bom) {
|
|
7
|
-
return serializer.serialize(bom, { sortLists: true, space: 4 });
|
|
8
|
-
}
|
|
9
|
-
};
|
|
10
|
-
}
|
|
11
2
|
//# sourceMappingURL=sbom-serializer.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sbom-serializer.js","sourceRoot":"","sources":["../../../../source/sbom/sbom-serializer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,8BAA8B
|
|
1
|
+
{"version":3,"file":"sbom-serializer.js","sourceRoot":"","sources":["../../../../source/sbom/sbom-serializer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,8BAA8B"}
|
package/sbom.cdx.json
ADDED
|
@@ -0,0 +1,390 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
|
|
3
|
+
"bomFormat": "CycloneDX",
|
|
4
|
+
"specVersion": "1.6",
|
|
5
|
+
"version": 1,
|
|
6
|
+
"metadata": {
|
|
7
|
+
"tools": {
|
|
8
|
+
"components": [
|
|
9
|
+
{
|
|
10
|
+
"type": "application",
|
|
11
|
+
"name": "packtory",
|
|
12
|
+
"version": "0.0.9"
|
|
13
|
+
}
|
|
14
|
+
]
|
|
15
|
+
},
|
|
16
|
+
"component": {
|
|
17
|
+
"type": "library",
|
|
18
|
+
"name": "packtory",
|
|
19
|
+
"version": "0.0.10",
|
|
20
|
+
"bom-ref": "pkg:npm/packtory@0.0.10",
|
|
21
|
+
"purl": "pkg:npm/packtory@0.0.10"
|
|
22
|
+
}
|
|
23
|
+
},
|
|
24
|
+
"components": [
|
|
25
|
+
{
|
|
26
|
+
"type": "library",
|
|
27
|
+
"name": "@cyclonedx/cyclonedx-library",
|
|
28
|
+
"version": "10.0.0",
|
|
29
|
+
"bom-ref": "pkg:npm/@cyclonedx/cyclonedx-library@10.0.0",
|
|
30
|
+
"scope": "required",
|
|
31
|
+
"licenses": [
|
|
32
|
+
{
|
|
33
|
+
"expression": "Apache-2.0"
|
|
34
|
+
}
|
|
35
|
+
],
|
|
36
|
+
"purl": "pkg:npm/@cyclonedx/cyclonedx-library@10.0.0"
|
|
37
|
+
},
|
|
38
|
+
{
|
|
39
|
+
"type": "library",
|
|
40
|
+
"name": "@jridgewell/gen-mapping",
|
|
41
|
+
"version": "0.3.13",
|
|
42
|
+
"bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.3.13",
|
|
43
|
+
"scope": "required",
|
|
44
|
+
"licenses": [
|
|
45
|
+
{
|
|
46
|
+
"expression": "MIT"
|
|
47
|
+
}
|
|
48
|
+
],
|
|
49
|
+
"purl": "pkg:npm/@jridgewell/gen-mapping@0.3.13"
|
|
50
|
+
},
|
|
51
|
+
{
|
|
52
|
+
"type": "library",
|
|
53
|
+
"name": "@jridgewell/trace-mapping",
|
|
54
|
+
"version": "0.3.31",
|
|
55
|
+
"bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31",
|
|
56
|
+
"scope": "required",
|
|
57
|
+
"licenses": [
|
|
58
|
+
{
|
|
59
|
+
"expression": "MIT"
|
|
60
|
+
}
|
|
61
|
+
],
|
|
62
|
+
"purl": "pkg:npm/@jridgewell/trace-mapping@0.3.31"
|
|
63
|
+
},
|
|
64
|
+
{
|
|
65
|
+
"type": "library",
|
|
66
|
+
"name": "@schema-hub/zod-error-formatter",
|
|
67
|
+
"version": "0.0.11",
|
|
68
|
+
"bom-ref": "pkg:npm/@schema-hub/zod-error-formatter@0.0.11",
|
|
69
|
+
"scope": "required",
|
|
70
|
+
"licenses": [
|
|
71
|
+
{
|
|
72
|
+
"expression": "MIT"
|
|
73
|
+
}
|
|
74
|
+
],
|
|
75
|
+
"purl": "pkg:npm/@schema-hub/zod-error-formatter@0.0.11"
|
|
76
|
+
},
|
|
77
|
+
{
|
|
78
|
+
"type": "library",
|
|
79
|
+
"name": "@ts-morph/common",
|
|
80
|
+
"version": "0.29.0",
|
|
81
|
+
"bom-ref": "pkg:npm/@ts-morph/common@0.29.0",
|
|
82
|
+
"scope": "required",
|
|
83
|
+
"licenses": [
|
|
84
|
+
{
|
|
85
|
+
"expression": "MIT"
|
|
86
|
+
}
|
|
87
|
+
],
|
|
88
|
+
"purl": "pkg:npm/@ts-morph/common@0.29.0"
|
|
89
|
+
},
|
|
90
|
+
{
|
|
91
|
+
"type": "library",
|
|
92
|
+
"name": "@types/libnpmpublish",
|
|
93
|
+
"version": "9.0.1",
|
|
94
|
+
"bom-ref": "pkg:npm/@types/libnpmpublish@9.0.1",
|
|
95
|
+
"scope": "required",
|
|
96
|
+
"licenses": [
|
|
97
|
+
{
|
|
98
|
+
"expression": "MIT"
|
|
99
|
+
}
|
|
100
|
+
],
|
|
101
|
+
"purl": "pkg:npm/@types/libnpmpublish@9.0.1"
|
|
102
|
+
},
|
|
103
|
+
{
|
|
104
|
+
"type": "library",
|
|
105
|
+
"name": "@types/npm-registry-fetch",
|
|
106
|
+
"version": "8.0.9",
|
|
107
|
+
"bom-ref": "pkg:npm/@types/npm-registry-fetch@8.0.9",
|
|
108
|
+
"scope": "required",
|
|
109
|
+
"licenses": [
|
|
110
|
+
{
|
|
111
|
+
"expression": "MIT"
|
|
112
|
+
}
|
|
113
|
+
],
|
|
114
|
+
"purl": "pkg:npm/@types/npm-registry-fetch@8.0.9"
|
|
115
|
+
},
|
|
116
|
+
{
|
|
117
|
+
"type": "library",
|
|
118
|
+
"name": "common-tags",
|
|
119
|
+
"version": "1.8.2",
|
|
120
|
+
"bom-ref": "pkg:npm/common-tags@1.8.2",
|
|
121
|
+
"scope": "required",
|
|
122
|
+
"licenses": [
|
|
123
|
+
{
|
|
124
|
+
"expression": "MIT"
|
|
125
|
+
}
|
|
126
|
+
],
|
|
127
|
+
"purl": "pkg:npm/common-tags@1.8.2"
|
|
128
|
+
},
|
|
129
|
+
{
|
|
130
|
+
"type": "library",
|
|
131
|
+
"name": "hosted-git-info",
|
|
132
|
+
"version": "10.1.0",
|
|
133
|
+
"bom-ref": "pkg:npm/hosted-git-info@10.1.0",
|
|
134
|
+
"scope": "required",
|
|
135
|
+
"licenses": [
|
|
136
|
+
{
|
|
137
|
+
"expression": "ISC"
|
|
138
|
+
}
|
|
139
|
+
],
|
|
140
|
+
"purl": "pkg:npm/hosted-git-info@10.1.0"
|
|
141
|
+
},
|
|
142
|
+
{
|
|
143
|
+
"type": "library",
|
|
144
|
+
"name": "libnpmpublish",
|
|
145
|
+
"version": "11.1.3",
|
|
146
|
+
"bom-ref": "pkg:npm/libnpmpublish@11.1.3",
|
|
147
|
+
"scope": "required",
|
|
148
|
+
"licenses": [
|
|
149
|
+
{
|
|
150
|
+
"expression": "ISC"
|
|
151
|
+
}
|
|
152
|
+
],
|
|
153
|
+
"purl": "pkg:npm/libnpmpublish@11.1.3"
|
|
154
|
+
},
|
|
155
|
+
{
|
|
156
|
+
"type": "library",
|
|
157
|
+
"name": "npm-package-arg",
|
|
158
|
+
"version": "14.0.0",
|
|
159
|
+
"bom-ref": "pkg:npm/npm-package-arg@14.0.0",
|
|
160
|
+
"scope": "required",
|
|
161
|
+
"licenses": [
|
|
162
|
+
{
|
|
163
|
+
"expression": "ISC"
|
|
164
|
+
}
|
|
165
|
+
],
|
|
166
|
+
"purl": "pkg:npm/npm-package-arg@14.0.0"
|
|
167
|
+
},
|
|
168
|
+
{
|
|
169
|
+
"type": "library",
|
|
170
|
+
"name": "npm-registry-fetch",
|
|
171
|
+
"version": "19.1.1",
|
|
172
|
+
"bom-ref": "pkg:npm/npm-registry-fetch@19.1.1",
|
|
173
|
+
"scope": "required",
|
|
174
|
+
"licenses": [
|
|
175
|
+
{
|
|
176
|
+
"expression": "ISC"
|
|
177
|
+
}
|
|
178
|
+
],
|
|
179
|
+
"purl": "pkg:npm/npm-registry-fetch@19.1.1"
|
|
180
|
+
},
|
|
181
|
+
{
|
|
182
|
+
"type": "library",
|
|
183
|
+
"name": "remeda",
|
|
184
|
+
"version": "2.34.1",
|
|
185
|
+
"bom-ref": "pkg:npm/remeda@2.34.1",
|
|
186
|
+
"scope": "required",
|
|
187
|
+
"licenses": [
|
|
188
|
+
{
|
|
189
|
+
"expression": "MIT"
|
|
190
|
+
}
|
|
191
|
+
],
|
|
192
|
+
"purl": "pkg:npm/remeda@2.34.1"
|
|
193
|
+
},
|
|
194
|
+
{
|
|
195
|
+
"type": "library",
|
|
196
|
+
"name": "semver",
|
|
197
|
+
"version": "7.8.0",
|
|
198
|
+
"bom-ref": "pkg:npm/semver@7.8.0",
|
|
199
|
+
"scope": "required",
|
|
200
|
+
"licenses": [
|
|
201
|
+
{
|
|
202
|
+
"expression": "ISC"
|
|
203
|
+
}
|
|
204
|
+
],
|
|
205
|
+
"purl": "pkg:npm/semver@7.8.0"
|
|
206
|
+
},
|
|
207
|
+
{
|
|
208
|
+
"type": "library",
|
|
209
|
+
"name": "spdx-expression-parse",
|
|
210
|
+
"version": "4.0.0",
|
|
211
|
+
"bom-ref": "pkg:npm/spdx-expression-parse@4.0.0",
|
|
212
|
+
"scope": "required",
|
|
213
|
+
"licenses": [
|
|
214
|
+
{
|
|
215
|
+
"expression": "MIT"
|
|
216
|
+
}
|
|
217
|
+
],
|
|
218
|
+
"purl": "pkg:npm/spdx-expression-parse@4.0.0"
|
|
219
|
+
},
|
|
220
|
+
{
|
|
221
|
+
"type": "library",
|
|
222
|
+
"name": "tar-stream",
|
|
223
|
+
"version": "3.1.8",
|
|
224
|
+
"bom-ref": "pkg:npm/tar-stream@3.1.8",
|
|
225
|
+
"scope": "required",
|
|
226
|
+
"licenses": [
|
|
227
|
+
{
|
|
228
|
+
"expression": "MIT"
|
|
229
|
+
}
|
|
230
|
+
],
|
|
231
|
+
"purl": "pkg:npm/tar-stream@3.1.8"
|
|
232
|
+
},
|
|
233
|
+
{
|
|
234
|
+
"type": "library",
|
|
235
|
+
"name": "true-myth",
|
|
236
|
+
"version": "9.3.1",
|
|
237
|
+
"bom-ref": "pkg:npm/true-myth@9.3.1",
|
|
238
|
+
"scope": "required",
|
|
239
|
+
"licenses": [
|
|
240
|
+
{
|
|
241
|
+
"expression": "MIT"
|
|
242
|
+
}
|
|
243
|
+
],
|
|
244
|
+
"purl": "pkg:npm/true-myth@9.3.1"
|
|
245
|
+
},
|
|
246
|
+
{
|
|
247
|
+
"type": "library",
|
|
248
|
+
"name": "ts-morph",
|
|
249
|
+
"version": "27.0.2",
|
|
250
|
+
"bom-ref": "pkg:npm/ts-morph@27.0.2",
|
|
251
|
+
"scope": "required",
|
|
252
|
+
"licenses": [
|
|
253
|
+
{
|
|
254
|
+
"expression": "MIT"
|
|
255
|
+
}
|
|
256
|
+
],
|
|
257
|
+
"purl": "pkg:npm/ts-morph@27.0.2"
|
|
258
|
+
},
|
|
259
|
+
{
|
|
260
|
+
"type": "library",
|
|
261
|
+
"name": "type-fest",
|
|
262
|
+
"version": "5.6.0",
|
|
263
|
+
"bom-ref": "pkg:npm/type-fest@5.6.0",
|
|
264
|
+
"scope": "required",
|
|
265
|
+
"licenses": [
|
|
266
|
+
{
|
|
267
|
+
"expression": "(MIT OR CC0-1.0)"
|
|
268
|
+
}
|
|
269
|
+
],
|
|
270
|
+
"purl": "pkg:npm/type-fest@5.6.0"
|
|
271
|
+
},
|
|
272
|
+
{
|
|
273
|
+
"type": "library",
|
|
274
|
+
"name": "unix-permissions",
|
|
275
|
+
"version": "6.0.1",
|
|
276
|
+
"bom-ref": "pkg:npm/unix-permissions@6.0.1",
|
|
277
|
+
"scope": "required",
|
|
278
|
+
"licenses": [
|
|
279
|
+
{
|
|
280
|
+
"expression": "Apache-2.0"
|
|
281
|
+
}
|
|
282
|
+
],
|
|
283
|
+
"purl": "pkg:npm/unix-permissions@6.0.1"
|
|
284
|
+
},
|
|
285
|
+
{
|
|
286
|
+
"type": "library",
|
|
287
|
+
"name": "zod",
|
|
288
|
+
"version": "4.4.3",
|
|
289
|
+
"bom-ref": "pkg:npm/zod@4.4.3",
|
|
290
|
+
"scope": "required",
|
|
291
|
+
"licenses": [
|
|
292
|
+
{
|
|
293
|
+
"expression": "MIT"
|
|
294
|
+
}
|
|
295
|
+
],
|
|
296
|
+
"purl": "pkg:npm/zod@4.4.3"
|
|
297
|
+
}
|
|
298
|
+
],
|
|
299
|
+
"dependencies": [
|
|
300
|
+
{
|
|
301
|
+
"ref": "pkg:npm/@cyclonedx/cyclonedx-library@10.0.0"
|
|
302
|
+
},
|
|
303
|
+
{
|
|
304
|
+
"ref": "pkg:npm/@jridgewell/gen-mapping@0.3.13"
|
|
305
|
+
},
|
|
306
|
+
{
|
|
307
|
+
"ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31"
|
|
308
|
+
},
|
|
309
|
+
{
|
|
310
|
+
"ref": "pkg:npm/@schema-hub/zod-error-formatter@0.0.11"
|
|
311
|
+
},
|
|
312
|
+
{
|
|
313
|
+
"ref": "pkg:npm/@ts-morph/common@0.29.0"
|
|
314
|
+
},
|
|
315
|
+
{
|
|
316
|
+
"ref": "pkg:npm/@types/libnpmpublish@9.0.1"
|
|
317
|
+
},
|
|
318
|
+
{
|
|
319
|
+
"ref": "pkg:npm/@types/npm-registry-fetch@8.0.9"
|
|
320
|
+
},
|
|
321
|
+
{
|
|
322
|
+
"ref": "pkg:npm/common-tags@1.8.2"
|
|
323
|
+
},
|
|
324
|
+
{
|
|
325
|
+
"ref": "pkg:npm/hosted-git-info@10.1.0"
|
|
326
|
+
},
|
|
327
|
+
{
|
|
328
|
+
"ref": "pkg:npm/libnpmpublish@11.1.3"
|
|
329
|
+
},
|
|
330
|
+
{
|
|
331
|
+
"ref": "pkg:npm/npm-package-arg@14.0.0"
|
|
332
|
+
},
|
|
333
|
+
{
|
|
334
|
+
"ref": "pkg:npm/npm-registry-fetch@19.1.1"
|
|
335
|
+
},
|
|
336
|
+
{
|
|
337
|
+
"ref": "pkg:npm/packtory@0.0.10",
|
|
338
|
+
"dependsOn": [
|
|
339
|
+
"pkg:npm/@cyclonedx/cyclonedx-library@10.0.0",
|
|
340
|
+
"pkg:npm/@jridgewell/gen-mapping@0.3.13",
|
|
341
|
+
"pkg:npm/@jridgewell/trace-mapping@0.3.31",
|
|
342
|
+
"pkg:npm/@schema-hub/zod-error-formatter@0.0.11",
|
|
343
|
+
"pkg:npm/@ts-morph/common@0.29.0",
|
|
344
|
+
"pkg:npm/@types/libnpmpublish@9.0.1",
|
|
345
|
+
"pkg:npm/@types/npm-registry-fetch@8.0.9",
|
|
346
|
+
"pkg:npm/common-tags@1.8.2",
|
|
347
|
+
"pkg:npm/hosted-git-info@10.1.0",
|
|
348
|
+
"pkg:npm/libnpmpublish@11.1.3",
|
|
349
|
+
"pkg:npm/npm-package-arg@14.0.0",
|
|
350
|
+
"pkg:npm/npm-registry-fetch@19.1.1",
|
|
351
|
+
"pkg:npm/remeda@2.34.1",
|
|
352
|
+
"pkg:npm/semver@7.8.0",
|
|
353
|
+
"pkg:npm/spdx-expression-parse@4.0.0",
|
|
354
|
+
"pkg:npm/tar-stream@3.1.8",
|
|
355
|
+
"pkg:npm/true-myth@9.3.1",
|
|
356
|
+
"pkg:npm/ts-morph@27.0.2",
|
|
357
|
+
"pkg:npm/type-fest@5.6.0",
|
|
358
|
+
"pkg:npm/unix-permissions@6.0.1",
|
|
359
|
+
"pkg:npm/zod@4.4.3"
|
|
360
|
+
]
|
|
361
|
+
},
|
|
362
|
+
{
|
|
363
|
+
"ref": "pkg:npm/remeda@2.34.1"
|
|
364
|
+
},
|
|
365
|
+
{
|
|
366
|
+
"ref": "pkg:npm/semver@7.8.0"
|
|
367
|
+
},
|
|
368
|
+
{
|
|
369
|
+
"ref": "pkg:npm/spdx-expression-parse@4.0.0"
|
|
370
|
+
},
|
|
371
|
+
{
|
|
372
|
+
"ref": "pkg:npm/tar-stream@3.1.8"
|
|
373
|
+
},
|
|
374
|
+
{
|
|
375
|
+
"ref": "pkg:npm/true-myth@9.3.1"
|
|
376
|
+
},
|
|
377
|
+
{
|
|
378
|
+
"ref": "pkg:npm/ts-morph@27.0.2"
|
|
379
|
+
},
|
|
380
|
+
{
|
|
381
|
+
"ref": "pkg:npm/type-fest@5.6.0"
|
|
382
|
+
},
|
|
383
|
+
{
|
|
384
|
+
"ref": "pkg:npm/unix-permissions@6.0.1"
|
|
385
|
+
},
|
|
386
|
+
{
|
|
387
|
+
"ref": "pkg:npm/zod@4.4.3"
|
|
388
|
+
}
|
|
389
|
+
]
|
|
390
|
+
}
|
package/tar/extract-tar.js
CHANGED
|
@@ -1,42 +1,4 @@
|
|
|
1
1
|
import { createGunzip } from 'node:zlib';
|
|
2
2
|
import { Readable } from 'node:stream';
|
|
3
3
|
import { extract } from 'tar-stream';
|
|
4
|
-
function toError(error) {
|
|
5
|
-
return error instanceof Error ? error : new Error(String(error));
|
|
6
|
-
}
|
|
7
|
-
async function collectTarEntries(stream) {
|
|
8
|
-
const entries = [];
|
|
9
|
-
for await (const entry of stream) {
|
|
10
|
-
let result = '';
|
|
11
|
-
for await (const chunk of entry) {
|
|
12
|
-
result += chunk.toString();
|
|
13
|
-
}
|
|
14
|
-
entries.push({ header: entry.header, content: result });
|
|
15
|
-
}
|
|
16
|
-
return entries;
|
|
17
|
-
}
|
|
18
|
-
async function waitForStreamError(stream) {
|
|
19
|
-
return await new Promise((_resolve, reject) => {
|
|
20
|
-
stream.once('error', (error) => {
|
|
21
|
-
reject(toError(error));
|
|
22
|
-
});
|
|
23
|
-
});
|
|
24
|
-
}
|
|
25
|
-
export async function extractTarEntries(buffer) {
|
|
26
|
-
const extractStream = extract();
|
|
27
|
-
const source = Readable.from(buffer);
|
|
28
|
-
const gunzip = createGunzip();
|
|
29
|
-
const stream = source.pipe(gunzip).pipe(extractStream);
|
|
30
|
-
try {
|
|
31
|
-
return await Promise.race([
|
|
32
|
-
collectTarEntries(stream),
|
|
33
|
-
waitForStreamError(source),
|
|
34
|
-
waitForStreamError(gunzip),
|
|
35
|
-
waitForStreamError(extractStream)
|
|
36
|
-
]);
|
|
37
|
-
}
|
|
38
|
-
catch (error) {
|
|
39
|
-
throw toError(error);
|
|
40
|
-
}
|
|
41
|
-
}
|
|
42
4
|
//# sourceMappingURL=extract-tar.js.map
|
package/tar/extract-tar.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"extract-tar.js","sourceRoot":"","sources":["../../../../source/tar/extract-tar.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW
|
|
1
|
+
{"version":3,"file":"extract-tar.js","sourceRoot":"","sources":["../../../../source/tar/extract-tar.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa;AACtC,OAAO,EAAE,OAAO,EAAmC,MAAM,YAAY"}
|
|
@@ -3,50 +3,4 @@ import { inspectPackageJsonProvenance } from "../report/inspectors.js";
|
|
|
3
3
|
import { buildPackageManifest } from "./manifest/builder.js";
|
|
4
4
|
import { serializePackageJson } from "./manifest/serialize.js";
|
|
5
5
|
import { buildVersionedBundle } from "./versioned-bundle.js";
|
|
6
|
-
export function createVersionManager(dependencies) {
|
|
7
|
-
const { progressBroadcaster } = dependencies;
|
|
8
|
-
return {
|
|
9
|
-
addVersion(options) {
|
|
10
|
-
const versionedBundle = buildVersionedBundle(options);
|
|
11
|
-
const manifest = buildPackageManifest(versionedBundle);
|
|
12
|
-
const packageJsonContent = serializePackageJson(manifest);
|
|
13
|
-
if (progressBroadcaster.hasSubscribers('packageJsonAssembled')) {
|
|
14
|
-
progressBroadcaster.emit('packageJsonAssembled', {
|
|
15
|
-
packageName: versionedBundle.name,
|
|
16
|
-
fields: inspectPackageJsonProvenance(manifest, options.mainPackageJson, options.additionalPackageJsonAttributes)
|
|
17
|
-
});
|
|
18
|
-
}
|
|
19
|
-
return {
|
|
20
|
-
...versionedBundle,
|
|
21
|
-
packageJson: manifest,
|
|
22
|
-
manifestFile: {
|
|
23
|
-
content: packageJsonContent,
|
|
24
|
-
isExecutable: false,
|
|
25
|
-
filePath: 'package.json'
|
|
26
|
-
}
|
|
27
|
-
};
|
|
28
|
-
},
|
|
29
|
-
increaseVersion(versionedBundle) {
|
|
30
|
-
const newVersion = semver.inc(versionedBundle.version, 'patch');
|
|
31
|
-
if (newVersion === null) {
|
|
32
|
-
throw new Error('Failed to increase version');
|
|
33
|
-
}
|
|
34
|
-
const newVersionedBundle = {
|
|
35
|
-
...versionedBundle,
|
|
36
|
-
version: newVersion
|
|
37
|
-
};
|
|
38
|
-
const manifest = buildPackageManifest(newVersionedBundle);
|
|
39
|
-
const packageJsonContent = serializePackageJson(manifest);
|
|
40
|
-
return {
|
|
41
|
-
...newVersionedBundle,
|
|
42
|
-
packageJson: manifest,
|
|
43
|
-
manifestFile: {
|
|
44
|
-
content: packageJsonContent,
|
|
45
|
-
isExecutable: false,
|
|
46
|
-
filePath: 'package.json'
|
|
47
|
-
}
|
|
48
|
-
};
|
|
49
|
-
}
|
|
50
|
-
};
|
|
51
|
-
}
|
|
52
6
|
//# sourceMappingURL=manager.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../../../source/version-manager/manager.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ
|
|
1
|
+
{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../../../source/version-manager/manager.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ;AAE3B,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB;AAC9D,OAAO,EACH,oBAAoB,EAIvB,MAAM,uBAAuB"}
|
|
@@ -1,59 +1,3 @@
|
|
|
1
1
|
import { isEmpty } from 'remeda';
|
|
2
2
|
// eslint-disable-next-line sonarjs/function-return-type -- distinct semantics for emit-false, emit-array, and omit
|
|
3
|
-
function resolveSideEffectsValue(bundle) {
|
|
4
|
-
if (Object.hasOwn(bundle.additionalAttributes, 'sideEffects')) {
|
|
5
|
-
return undefined;
|
|
6
|
-
}
|
|
7
|
-
const field = bundle.sideEffectsField;
|
|
8
|
-
if (field === undefined) {
|
|
9
|
-
return undefined;
|
|
10
|
-
}
|
|
11
|
-
if (field === false) {
|
|
12
|
-
return false;
|
|
13
|
-
}
|
|
14
|
-
return Array.from(field);
|
|
15
|
-
}
|
|
16
|
-
function buildSideEffectsEntry(sideEffects) {
|
|
17
|
-
return sideEffects === undefined ? {} : { sideEffects };
|
|
18
|
-
}
|
|
19
|
-
function toPackageJsonImports(importsField) {
|
|
20
|
-
// eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- config validation constrains imports values to JSON-compatible package.json data
|
|
21
|
-
return Object.fromEntries(Object.entries(importsField));
|
|
22
|
-
}
|
|
23
|
-
function buildImportsEntry(importsField) {
|
|
24
|
-
return importsField === undefined ? {} : { imports: toPackageJsonImports(importsField) };
|
|
25
|
-
}
|
|
26
|
-
function toPackageJsonBinTargets(binField) {
|
|
27
|
-
return Object.fromEntries(Object.entries(binField).flatMap(([name, target]) => {
|
|
28
|
-
return target === undefined ? [] : [[name, target]];
|
|
29
|
-
}));
|
|
30
|
-
}
|
|
31
|
-
function buildBinEntry(binField) {
|
|
32
|
-
if (binField === undefined) {
|
|
33
|
-
return {};
|
|
34
|
-
}
|
|
35
|
-
if (typeof binField === 'string') {
|
|
36
|
-
return { bin: binField };
|
|
37
|
-
}
|
|
38
|
-
return { bin: toPackageJsonBinTargets(binField) };
|
|
39
|
-
}
|
|
40
|
-
export function buildPackageManifest(bundle) {
|
|
41
|
-
const sideEffects = resolveSideEffectsValue(bundle);
|
|
42
|
-
const sideEffectsEntry = buildSideEffectsEntry(sideEffects);
|
|
43
|
-
const importsEntry = buildImportsEntry(bundle.importsField);
|
|
44
|
-
const binEntry = buildBinEntry(bundle.binField);
|
|
45
|
-
const packageJson = {
|
|
46
|
-
...bundle.additionalAttributes,
|
|
47
|
-
...sideEffectsEntry,
|
|
48
|
-
...importsEntry,
|
|
49
|
-
...binEntry,
|
|
50
|
-
exports: bundle.exportsField,
|
|
51
|
-
name: bundle.name,
|
|
52
|
-
version: bundle.version,
|
|
53
|
-
type: bundle.packageType,
|
|
54
|
-
...(isEmpty(bundle.dependencies) ? {} : { dependencies: bundle.dependencies }),
|
|
55
|
-
...(isEmpty(bundle.peerDependencies) ? {} : { peerDependencies: bundle.peerDependencies })
|
|
56
|
-
};
|
|
57
|
-
return packageJson;
|
|
58
|
-
}
|
|
59
3
|
//# sourceMappingURL=builder.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"builder.js","sourceRoot":"","sources":["../../../../../source/version-manager/manifest/builder.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ
|
|
1
|
+
{"version":3,"file":"builder.js","sourceRoot":"","sources":["../../../../../source/version-manager/manifest/builder.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ"}
|