pkgwise 0.1.0-alpha.0 → 0.1.0-alpha.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +10 -0
- package/README.md +4 -0
- package/dist/output/renderAnalysisReport.d.ts.map +1 -1
- package/dist/output/renderAnalysisReport.js +22 -1
- package/dist/output/renderAnalysisReport.js.map +1 -1
- package/dist/output/renderMarkdownReport.d.ts.map +1 -1
- package/dist/output/renderMarkdownReport.js +23 -1
- package/dist/output/renderMarkdownReport.js.map +1 -1
- package/dist/output/renderSarifReport.d.ts.map +1 -1
- package/dist/output/renderSarifReport.js +20 -1
- package/dist/output/renderSarifReport.js.map +1 -1
- package/dist/runCli.js +1 -1
- package/package.json +2 -2
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,15 @@
|
|
|
1
1
|
# PkgWise changelog
|
|
2
2
|
|
|
3
|
+
## 0.1.0-alpha.2
|
|
4
|
+
|
|
5
|
+
- Added npm Registry coverage and metadata provenance to terminal, JSON, Markdown, and SARIF scan output.
|
|
6
|
+
- Added six-category remote project scoring plus deprecation and install-script findings to `scan --remote`.
|
|
7
|
+
|
|
8
|
+
## 0.1.0-alpha.1
|
|
9
|
+
|
|
10
|
+
- Added explainable scores to terminal, JSON, Markdown, and SARIF scan reports.
|
|
11
|
+
- Added documentation for scoring formulas, category weights, coverage, confidence, and score policy.
|
|
12
|
+
|
|
3
13
|
## 0.1.0-alpha.0
|
|
4
14
|
|
|
5
15
|
- Initial alpha CLI with scan, inspect, compare, explain, doctor, and cache commands.
|
package/README.md
CHANGED
|
@@ -14,4 +14,8 @@ inspection uses the public npm Registry and OSV API. `scan --remote` queries OSV
|
|
|
14
14
|
package coordinate in the lockfile. Both paths support an owned checksum-validated cache and can be
|
|
15
15
|
run without network access after data has been cached.
|
|
16
16
|
|
|
17
|
+
Scan reports include evidence-backed category scores, overall coverage and confidence, contribution
|
|
18
|
+
explanations, and score-aware policy conditions. Missing provider data is excluded rather than scored as
|
|
19
|
+
zero.
|
|
20
|
+
|
|
17
21
|
Node.js 22 or newer is required. This package is an alpha: report and API contracts may still evolve.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"renderAnalysisReport.d.ts","sourceRoot":"","sources":["../../src/output/renderAnalysisReport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EAEd,eAAe,EACf,eAAe,EAChB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IACxD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,cAAc,EACtB,OAAO,GAAE,2BAAgC,GACxC,MAAM,
|
|
1
|
+
{"version":3,"file":"renderAnalysisReport.d.ts","sourceRoot":"","sources":["../../src/output/renderAnalysisReport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EAEd,eAAe,EACf,eAAe,EAChB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IACxD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,cAAc,EACtB,OAAO,GAAE,2BAAgC,GACxC,MAAM,CAoDR"}
|
|
@@ -10,8 +10,10 @@ export function renderAnalysisReport(report, options = {}) {
|
|
|
10
10
|
`Topology: ${report.graph.duplicateVersionGroupCount} duplicate-version groups · ${report.graph.cycleCount} cycles`,
|
|
11
11
|
` runtime ${report.graph.dependencyCounts.runtime} · development ${report.graph.dependencyCounts.development} · peer ${report.graph.dependencyCounts.peer} · optional ${report.graph.dependencyCounts.optional}`,
|
|
12
12
|
'',
|
|
13
|
-
`Analysis status: ${report.status}
|
|
13
|
+
`Analysis status: ${report.status}`,
|
|
14
|
+
...renderScoreLines(report),
|
|
14
15
|
`Security: OSV ${report.enrichment.osv.status} · ${report.enrichment.osv.evaluatedCoordinateCount}/${report.enrichment.osv.eligibleCoordinateCount} coordinates · ${report.advisories.length} advisories${report.coverage.security === undefined ? '' : ` · ${Math.round(report.coverage.security * 100)}% coverage`}`,
|
|
16
|
+
`Metadata: npm Registry ${report.enrichment.npm.status} · ${report.enrichment.npm.evaluatedCoordinateCount}/${report.enrichment.npm.eligibleCoordinateCount} coordinates`,
|
|
15
17
|
`Configuration: ${report.configuration.source}${report.configuration.relativePath === undefined ? '' : ` (${report.configuration.relativePath})`} · ${report.configuration.enabledRules.length} rules`,
|
|
16
18
|
`Policy: ${report.policy.status}${report.policy.configured ? ` · ${report.policy.violations.length} violations` : ' · not configured'}`,
|
|
17
19
|
];
|
|
@@ -32,6 +34,25 @@ export function renderAnalysisReport(report, options = {}) {
|
|
|
32
34
|
}
|
|
33
35
|
return `${lines.join('\n')}\n`;
|
|
34
36
|
}
|
|
37
|
+
function renderScoreLines(report) {
|
|
38
|
+
const headline = report.scores.overall === undefined
|
|
39
|
+
? `Scores: insufficient data · coverage ${formatPercent(report.scores.coverage)} · confidence ${formatPercent(report.scores.confidence)}`
|
|
40
|
+
: `Scores: ${formatScore(report.scores.overall)}/100${report.scores.label === undefined ? ' · label withheld' : ` · ${report.scores.label.replaceAll('-', ' ')}`} · coverage ${formatPercent(report.scores.coverage)} · confidence ${formatPercent(report.scores.confidence)} · model ${report.scores.modelVersion}`;
|
|
41
|
+
const lines = [headline];
|
|
42
|
+
for (const category of report.scores.categories) {
|
|
43
|
+
lines.push(` ${category.category}: ${category.score === undefined ? category.status : `${formatScore(category.score)}/100`} · coverage ${formatPercent(category.coverage)} · confidence ${formatPercent(category.confidence)}`);
|
|
44
|
+
for (const contribution of category.contributions) {
|
|
45
|
+
lines.push(` ${contribution.ruleId}: ${formatScore(contribution.value)}/100 — ${contribution.explanation}`);
|
|
46
|
+
}
|
|
47
|
+
}
|
|
48
|
+
return lines;
|
|
49
|
+
}
|
|
50
|
+
function formatScore(value) {
|
|
51
|
+
return value.toFixed(2).replace(/\.00$/, '');
|
|
52
|
+
}
|
|
53
|
+
function formatPercent(value) {
|
|
54
|
+
return `${Math.round(value * 100)}%`;
|
|
55
|
+
}
|
|
35
56
|
function filterFindings(findings, options) {
|
|
36
57
|
const severityOrder = ['critical', 'high', 'medium', 'low', 'info'];
|
|
37
58
|
const maximumSeverityIndex = severityOrder.indexOf(options.minimumSeverity ?? 'low');
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"renderAnalysisReport.js","sourceRoot":"","sources":["../../src/output/renderAnalysisReport.ts"],"names":[],"mappings":"AAaA,MAAM,UAAU,oBAAoB,CAClC,MAAsB,EACtB,UAAuC,EAAE;IAEzC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;IACjG,MAAM,KAAK,GAAG;QACZ,WAAW,MAAM,CAAC,IAAI,CAAC,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,MAAM,QAAQ,EAAE;QAC1E,EAAE;QACF,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,GAC/C,MAAM,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,EACxE,EAAE;QACF,wBAAwB,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;QAC5D,sBAAsB,MAAM,CAAC,KAAK,CAAC,YAAY,KAAK,MAAM,CAAC,KAAK,CAAC,yBAAyB,cAAc;QACxG,UAAU,MAAM,CAAC,KAAK,CAAC,SAAS,kBAAkB,MAAM,CAAC,KAAK,CAAC,YAAY,iBAAiB,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;QACpI,aAAa,MAAM,CAAC,KAAK,CAAC,0BAA0B,+BAA+B,MAAM,CAAC,KAAK,CAAC,UAAU,SAAS;QACnH,aAAa,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,kBAAkB,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,WAAW,WAAW,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,eAAe,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,EAAE;QACjN,EAAE;QACF,oBAAoB,MAAM,CAAC,MAAM,
|
|
1
|
+
{"version":3,"file":"renderAnalysisReport.js","sourceRoot":"","sources":["../../src/output/renderAnalysisReport.ts"],"names":[],"mappings":"AAaA,MAAM,UAAU,oBAAoB,CAClC,MAAsB,EACtB,UAAuC,EAAE;IAEzC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;IACjG,MAAM,KAAK,GAAG;QACZ,WAAW,MAAM,CAAC,IAAI,CAAC,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,MAAM,QAAQ,EAAE;QAC1E,EAAE;QACF,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,GAC/C,MAAM,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,EACxE,EAAE;QACF,wBAAwB,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;QAC5D,sBAAsB,MAAM,CAAC,KAAK,CAAC,YAAY,KAAK,MAAM,CAAC,KAAK,CAAC,yBAAyB,cAAc;QACxG,UAAU,MAAM,CAAC,KAAK,CAAC,SAAS,kBAAkB,MAAM,CAAC,KAAK,CAAC,YAAY,iBAAiB,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;QACpI,aAAa,MAAM,CAAC,KAAK,CAAC,0BAA0B,+BAA+B,MAAM,CAAC,KAAK,CAAC,UAAU,SAAS;QACnH,aAAa,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,kBAAkB,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,WAAW,WAAW,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,eAAe,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,EAAE;QACjN,EAAE;QACF,oBAAoB,MAAM,CAAC,MAAM,EAAE;QACnC,GAAG,gBAAgB,CAAC,MAAM,CAAC;QAC3B,iBAAiB,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,MAAM,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,wBAAwB,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,uBAAuB,kBAAkB,MAAM,CAAC,UAAU,CAAC,MAAM,cAAc,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC,YAAY,EAAE;QACtT,0BAA0B,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,MAAM,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,wBAAwB,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,uBAAuB,cAAc;QACzK,kBAAkB,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,aAAa,CAAC,YAAY,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,MAAM,QAAQ;QACtM,WAAW,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,aAAa,CAAC,CAAC,CAAC,mBAAmB,EAAE;KACxI,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,uBAAuB,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,gBAAgB,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClE,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7E,KAAK,CAAC,IAAI,CACR,EAAE,EACF,aAAa,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY,iBAAiB,CAAC,MAAM,YAAY,CACpF,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CACR,EAAE,EACF,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,EAAE,EACxE,KAAK,OAAO,CAAC,OAAO,EAAE,EACtB,qBAAqB,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,EACrD,kBAAkB,OAAO,CAAC,WAAW,EAAE,CACxC,CAAC;IACJ,CAAC;IACD,IAAI,iBAAiB,CAAC,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC;QACvD,KAAK,CAAC,IAAI,CACR,OAAO,gBAAgB,CAAC,MAAM,GAAG,iBAAiB,CAAC,MAAM,wCAAwC,CAClG,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAsB;IAC9C,MAAM,QAAQ,GACZ,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS;QACjC,CAAC,CAAC,wCAAwC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;QACzI,CAAC,CAAC,WAAW,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,eAAe,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;IACzT,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzB,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAChD,KAAK,CAAC,IAAI,CACR,KAAK,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,eAAe,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CACrN,CAAC;QACF,KAAK,MAAM,YAAY,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;YAClD,KAAK,CAAC,IAAI,CACR,OAAO,YAAY,CAAC,MAAM,KAAK,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,YAAY,CAAC,WAAW,EAAE,CACnG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC;AACvC,CAAC;AAED,SAAS,cAAc,CACrB,QAA4B,EAC5B,OAAoC;IAEpC,MAAM,aAAa,GAA+B,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAChG,MAAM,oBAAoB,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,IAAI,KAAK,CAAC,CAAC;IACrF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAkB;QAClD,iBAAiB;QACjB,QAAQ;QACR,eAAe;QACf,GAAG,CAAC,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAC;KACrC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,MAAM,CACpB,CAAC,OAAO,EAAE,EAAE,CACV,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,oBAAoB;QAC/D,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAC3C,CAAC;AACJ,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"renderMarkdownReport.d.ts","sourceRoot":"","sources":["../../src/output/renderMarkdownReport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAW,MAAM,wBAAwB,CAAC;AAEtE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,
|
|
1
|
+
{"version":3,"file":"renderMarkdownReport.d.ts","sourceRoot":"","sources":["../../src/output/renderMarkdownReport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAW,MAAM,wBAAwB,CAAC;AAEtE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAmGnE;AAWD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAmB,GAAG,MAAM,CAMtF"}
|
|
@@ -31,7 +31,19 @@ export function renderMarkdownReport(report) {
|
|
|
31
31
|
`| Cycles | ${report.graph.cycleCount} |`,
|
|
32
32
|
`| Analysis coverage | ${Math.round(report.coverage.overall * 100)}% |`,
|
|
33
33
|
'',
|
|
34
|
-
'##
|
|
34
|
+
'## Scores',
|
|
35
|
+
'',
|
|
36
|
+
`Model: ${escapeMarkdown(report.scores.modelVersion)}. Overall: ${report.scores.overall === undefined ? 'insufficient data' : `**${report.scores.overall.toFixed(2)}/100**`}. Coverage: ${Math.round(report.scores.coverage * 100)}%. Confidence: ${Math.round(report.scores.confidence * 100)}%.${report.scores.label === undefined ? ' The qualitative label is withheld until coverage and confidence are sufficient.' : ` Label: **${escapeMarkdown(report.scores.label)}**.`}`,
|
|
37
|
+
'',
|
|
38
|
+
'| Category | Status | Score | Coverage | Confidence |',
|
|
39
|
+
'| --- | --- | ---: | ---: | ---: |',
|
|
40
|
+
...report.scores.categories.map((category) => `| ${escapeMarkdown(category.category)} | ${escapeMarkdown(category.status)} | ${category.score === undefined ? '—' : category.score.toFixed(2)} | ${Math.round(category.coverage * 100)}% | ${Math.round(category.confidence * 100)}% |`),
|
|
41
|
+
'',
|
|
42
|
+
'### Score contributions',
|
|
43
|
+
'',
|
|
44
|
+
...renderScoreContributions(report),
|
|
45
|
+
'',
|
|
46
|
+
'## Remote enrichment',
|
|
35
47
|
'',
|
|
36
48
|
'| Metric | Value |',
|
|
37
49
|
'| --- | ---: |',
|
|
@@ -41,6 +53,10 @@ export function renderMarkdownReport(report) {
|
|
|
41
53
|
`| Unavailable coordinates | ${report.enrichment.osv.unavailableCoordinateCount} |`,
|
|
42
54
|
`| Security coverage | ${report.coverage.security === undefined ? 'not requested' : `${Math.round(report.coverage.security * 100)}%`} |`,
|
|
43
55
|
`| Advisory records | ${report.advisories.length} |`,
|
|
56
|
+
`| npm Registry status | ${escapeMarkdown(report.enrichment.npm.status)} |`,
|
|
57
|
+
`| npm coordinates eligible | ${report.enrichment.npm.eligibleCoordinateCount} |`,
|
|
58
|
+
`| npm coordinates evaluated | ${report.enrichment.npm.evaluatedCoordinateCount} |`,
|
|
59
|
+
`| npm coordinates unavailable | ${report.enrichment.npm.unavailableCoordinateCount} |`,
|
|
44
60
|
'',
|
|
45
61
|
`## Policy (${report.policy.violations.length} violations)`,
|
|
46
62
|
'',
|
|
@@ -74,6 +90,12 @@ export function renderMarkdownReport(report) {
|
|
|
74
90
|
}
|
|
75
91
|
return `${lines.join('\n')}\n`;
|
|
76
92
|
}
|
|
93
|
+
function renderScoreContributions(report) {
|
|
94
|
+
const contributions = report.scores.categories.flatMap((category) => category.contributions);
|
|
95
|
+
if (contributions.length === 0)
|
|
96
|
+
return ['No score contribution had sufficient evidence.'];
|
|
97
|
+
return contributions.map((contribution) => `- **${escapeMarkdown(contribution.category)} / ${escapeMarkdown(contribution.ruleId)}:** ${contribution.value.toFixed(2)}/100 (weight ${contribution.weight.toFixed(2)}, confidence ${Math.round(contribution.confidence * 100)}%) — ${escapeMarkdown(contribution.explanation)}`);
|
|
98
|
+
}
|
|
77
99
|
export function renderGenericMarkdown(value, title = 'PkgWise result') {
|
|
78
100
|
const json = JSON.stringify(value, null, 2) ?? 'null';
|
|
79
101
|
return `# ${escapeMarkdown(title)}\n\n${json
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"renderMarkdownReport.js","sourceRoot":"","sources":["../../src/output/renderMarkdownReport.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,oBAAoB,CAAC,MAAsB;IACzD,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;IACnE,MAAM,KAAK,GAAG;QACZ,6BAA6B;QAC7B,EAAE;QACF,cAAc,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE;QAClD,EAAE;QACF,YAAY;QACZ,EAAE;QACF,mBAAmB;QACnB,eAAe;QACf,YAAY,cAAc,CAAC,WAAW,CAAC,IAAI;QAC3C,eAAe,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC,IAAI;QACtE,uBAAuB,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI;QACjE,gBAAgB,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI;QACrE,uBAAuB,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI;QACxD,qBAAqB,cAAc,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI;QACpE,cAAc,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI;QACtD,EAAE;QACF,qBAAqB;QACrB,EAAE;QACF,oBAAoB;QACpB,gBAAgB;QAChB,yBAAyB,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI;QACtD,2BAA2B,MAAM,CAAC,KAAK,CAAC,qBAAqB,IAAI;QACjE,+BAA+B,MAAM,CAAC,KAAK,CAAC,yBAAyB,IAAI;QACzE,aAAa,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI;QACvC,qBAAqB,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI;QAClD,4BAA4B,MAAM,CAAC,KAAK,CAAC,yBAAyB,IAAI;QACtE,gCAAgC,MAAM,CAAC,KAAK,CAAC,0BAA0B,IAAI;QAC3E,cAAc,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI;QACzC,yBAAyB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,GAAG,GAAG,CAAC,KAAK;QACvE,EAAE;QACF,wBAAwB;
|
|
1
|
+
{"version":3,"file":"renderMarkdownReport.js","sourceRoot":"","sources":["../../src/output/renderMarkdownReport.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,oBAAoB,CAAC,MAAsB;IACzD,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;IACnE,MAAM,KAAK,GAAG;QACZ,6BAA6B;QAC7B,EAAE;QACF,cAAc,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE;QAClD,EAAE;QACF,YAAY;QACZ,EAAE;QACF,mBAAmB;QACnB,eAAe;QACf,YAAY,cAAc,CAAC,WAAW,CAAC,IAAI;QAC3C,eAAe,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC,IAAI;QACtE,uBAAuB,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI;QACjE,gBAAgB,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI;QACrE,uBAAuB,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI;QACxD,qBAAqB,cAAc,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI;QACpE,cAAc,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI;QACtD,EAAE;QACF,qBAAqB;QACrB,EAAE;QACF,oBAAoB;QACpB,gBAAgB;QAChB,yBAAyB,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI;QACtD,2BAA2B,MAAM,CAAC,KAAK,CAAC,qBAAqB,IAAI;QACjE,+BAA+B,MAAM,CAAC,KAAK,CAAC,yBAAyB,IAAI;QACzE,aAAa,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI;QACvC,qBAAqB,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI;QAClD,4BAA4B,MAAM,CAAC,KAAK,CAAC,yBAAyB,IAAI;QACtE,gCAAgC,MAAM,CAAC,KAAK,CAAC,0BAA0B,IAAI;QAC3E,cAAc,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI;QACzC,yBAAyB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,GAAG,GAAG,CAAC,KAAK;QACvE,EAAE;QACF,WAAW;QACX,EAAE;QACF,UAAU,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,cAAc,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,eAAe,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAC,kBAAkB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,kFAAkF,CAAC,CAAC,CAAC,aAAa,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE;QACnd,EAAE;QACF,uDAAuD;QACvD,oCAAoC;QACpC,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAC7B,CAAC,QAAQ,EAAE,EAAE,CACX,KAAK,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC,KAAK,CAC5O;QACD,EAAE;QACF,yBAAyB;QACzB,EAAE;QACF,GAAG,wBAAwB,CAAC,MAAM,CAAC;QACnC,EAAE;QACF,sBAAsB;QACtB,EAAE;QACF,oBAAoB;QACpB,gBAAgB;QAChB,kBAAkB,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI;QAClE,kCAAkC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,uBAAuB,IAAI;QACnF,mCAAmC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,wBAAwB,IAAI;QACrF,+BAA+B,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,0BAA0B,IAAI;QACnF,yBAAyB,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC,GAAG,IAAI;QACxI,wBAAwB,MAAM,CAAC,UAAU,CAAC,MAAM,IAAI;QACpD,2BAA2B,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI;QAC3E,gCAAgC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,uBAAuB,IAAI;QACjF,iCAAiC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,wBAAwB,IAAI;QACnF,mCAAmC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,0BAA0B,IAAI;QACvF,EAAE;QACF,cAAc,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,cAAc;QAC3D,EAAE;QACF,MAAM,CAAC,MAAM,CAAC,UAAU;YACtB,CAAC,CAAC,wBAAwB,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK;YACnE,CAAC,CAAC,qDAAqD;KAC1D,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,0BAA0B,EAAE,gBAAgB,CAAC,CAAC;QAC7D,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACjD,KAAK,CAAC,IAAI,CACR,KAAK,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,SAAS,CAAC,mBAAmB,CAAC,MAAM,IAAI,CACrF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,gBAAgB,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAE1D,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,iDAAiD,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ;YAAE,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,mBAAmB,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,0BAA0B,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,4BAA4B,EAAE,qBAAqB,CAAC,CAAC;QACpE,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5C,KAAK,CAAC,IAAI,CACR,KAAK,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CACvH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAsB;IACtD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC7F,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,gDAAgD,CAAC,CAAC;IAC1F,OAAO,aAAa,CAAC,GAAG,CACtB,CAAC,YAAY,EAAE,EAAE,CACf,OAAO,cAAc,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,cAAc,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,GAAG,GAAG,CAAC,QAAQ,cAAc,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CACrR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAE,KAAK,GAAG,gBAAgB;IAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC;IACtD,OAAO,KAAK,cAAc,CAAC,KAAK,CAAC,OAAO,IAAI;SACzC,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC;SAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,SAAS,aAAa,CAAC,KAAe,EAAE,OAAgB;IACtD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,OAAO,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EACzF,EAAE,EACF,WAAW,cAAc,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,EACvE,eAAe,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EACjD,iBAAiB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,EACxD,qBAAqB,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,SAAS,CAAC,EAAE,EAC7E,kBAAkB,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EACvD,EAAE,EACF,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,EAC/B,EAAE,EACF,cAAc,EACd,EAAE,CACH,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7F,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,sBAAsB,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAChC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAChF,CAAC;YACF,KAAK,CAAC,IAAI,CACR,KAAK,cAAc,CAAC,UAAU,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,EAAE,CAC/F,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,cAAc;YAAE,KAAK,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAC/E,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,uBAAuB,cAAc,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5F,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,KAAK;SACT,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC;SACtB,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC9B,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"renderSarifReport.d.ts","sourceRoot":"","sources":["../../src/output/renderSarifReport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAA4B,MAAM,wBAAwB,CAAC;AAEvF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,
|
|
1
|
+
{"version":3,"file":"renderSarifReport.d.ts","sourceRoot":"","sources":["../../src/output/renderSarifReport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAA4B,MAAM,wBAAwB,CAAC;AAEvF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAsEhE"}
|
|
@@ -14,7 +14,7 @@ export function renderSarifReport(report) {
|
|
|
14
14
|
...(isSemanticVersion(report.tool.version)
|
|
15
15
|
? { semanticVersion: report.tool.version }
|
|
16
16
|
: {}),
|
|
17
|
-
informationUri: '
|
|
17
|
+
informationUri: 'https://github.com/lovlyDev/pkgWise#readme',
|
|
18
18
|
rules: ruleIds.map((ruleId) => createRuleDescriptor(ruleId, report.findings)),
|
|
19
19
|
},
|
|
20
20
|
},
|
|
@@ -30,7 +30,16 @@ export function renderSarifReport(report) {
|
|
|
30
30
|
properties: {
|
|
31
31
|
analysisStatus: report.status,
|
|
32
32
|
coverage: report.coverage.overall,
|
|
33
|
+
overallScore: report.scores.overall,
|
|
34
|
+
scoreConfidence: report.scores.confidence,
|
|
35
|
+
scoreCoverage: report.scores.coverage,
|
|
33
36
|
policyStatus: report.policy.status,
|
|
37
|
+
osvStatus: report.enrichment.osv.status,
|
|
38
|
+
npmRegistryStatus: report.enrichment.npm.status,
|
|
39
|
+
npmRegistryCoverage: report.enrichment.npm.eligibleCoordinateCount === 0
|
|
40
|
+
? 0
|
|
41
|
+
: report.enrichment.npm.evaluatedCoordinateCount /
|
|
42
|
+
report.enrichment.npm.eligibleCoordinateCount,
|
|
34
43
|
},
|
|
35
44
|
},
|
|
36
45
|
],
|
|
@@ -39,6 +48,16 @@ export function renderSarifReport(report) {
|
|
|
39
48
|
schemaVersion: report.schemaVersion,
|
|
40
49
|
packageManager: report.project.manager,
|
|
41
50
|
packageCount: report.graph.packageCount,
|
|
51
|
+
scoreModelVersion: report.scores.modelVersion,
|
|
52
|
+
categoryScores: Object.fromEntries(report.scores.categories.map((category) => [
|
|
53
|
+
category.category,
|
|
54
|
+
{
|
|
55
|
+
status: category.status,
|
|
56
|
+
score: category.score,
|
|
57
|
+
coverage: category.coverage,
|
|
58
|
+
confidence: category.confidence,
|
|
59
|
+
},
|
|
60
|
+
])),
|
|
42
61
|
},
|
|
43
62
|
},
|
|
44
63
|
],
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"renderSarifReport.js","sourceRoot":"","sources":["../../src/output/renderSarifReport.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,iBAAiB,CAAC,MAAsB;IACtD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,CAAU,CAAC,CAAC,CAAC;IAC9E,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,cAAc,CAAC;IAC9D,MAAM,KAAK,GAAG;QACZ,OAAO,EAAE,+CAA+C;QACxD,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;wBAC5B,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;4BACxC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE;4BAC1C,CAAC,CAAC,EAAE,CAAC;wBACP,cAAc,EAAE,
|
|
1
|
+
{"version":3,"file":"renderSarifReport.js","sourceRoot":"","sources":["../../src/output/renderSarifReport.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,iBAAiB,CAAC,MAAsB;IACtD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,CAAU,CAAC,CAAC,CAAC;IAC9E,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,cAAc,CAAC;IAC9D,MAAM,KAAK,GAAG;QACZ,OAAO,EAAE,+CAA+C;QACxD,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;wBAC5B,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;4BACxC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE;4BAC1C,CAAC,CAAC,EAAE,CAAC;wBACP,cAAc,EAAE,4CAA4C;wBAC5D,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;qBAC9E;iBACF;gBACD,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC;gBAC/C,WAAW,EAAE;oBACX;wBACE,mBAAmB,EAAE,IAAI;wBACzB,0BAA0B,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;4BAClE,UAAU,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,IAAI,EAAE;4BACnC,KAAK,EAAE,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;4BAC1D,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,EAAE;yBACtC,CAAC,CAAC;wBACH,UAAU,EAAE;4BACV,cAAc,EAAE,MAAM,CAAC,MAAM;4BAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;4BACjC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;4BACnC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU;4BACzC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;4BACrC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;4BAClC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM;4BACvC,iBAAiB,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM;4BAC/C,mBAAmB,EACjB,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,uBAAuB,KAAK,CAAC;gCACjD,CAAC,CAAC,CAAC;gCACH,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,wBAAwB;oCAC9C,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,uBAAuB;yBACpD;qBACF;iBACF;gBACD,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACvC,YAAY,CAAC,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAW,EAAE,WAAW,CAAC,CAC9E;gBACD,UAAU,EAAE;oBACV,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO;oBACtC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY;oBACvC,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY;oBAC7C,cAAc,EAAE,MAAM,CAAC,WAAW,CAChC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;wBACzC,QAAQ,CAAC,QAAQ;wBACjB;4BACE,MAAM,EAAE,QAAQ,CAAC,MAAM;4BACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;4BACrB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;4BAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;yBAChC;qBACF,CAAC,CACH;iBACF;aACF;SACF;KACF,CAAC;IACF,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAc,EAAE,QAA4B;IACxE,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAY,CAAC;IACxF,OAAO;QACL,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,gBAAgB,EAAE,GAAG,CAAC;QAC9C,gBAAgB,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE;QAC7C,eAAe,EAAE,EAAE,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE;QAClD,IAAI,EAAE;YACJ,IAAI,EAAE,cAAc,CAAC,cAAc,CAAC,OAAO;YAC3C,QAAQ,EAAE,cAAc,CAAC,cAAc,CAAC,OAAO;SAChD;QACD,oBAAoB,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE;QACzD,UAAU,EAAE;YACV,WAAW,EAAE,cAAc,CAAC,WAAW;YACvC,QAAQ,EAAE,cAAc,CAAC,QAAQ;YACjC,YAAY,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,SAAS;SAC5D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,OAAgB,EAAE,SAAiB,EAAE,WAAmB;IAC5E,MAAM,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzF,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS;QACT,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC;QACnC,OAAO,EAAE;YACP,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,OAAO,oBAAoB,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE;SAC/F;QACD,mBAAmB,EAAE;YACnB,8BAA8B,EAAE,OAAO,CAAC,WAAW;SACpD;QACD,SAAS,EAAE,CAAC,EAAE,gBAAgB,EAAE,EAAE,gBAAgB,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QAC7E,GAAG,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;YAC5B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,SAAS,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBACtC,WAAW,EAAE;wBACX;4BACE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gCACtC,QAAQ,EAAE;oCACR,gBAAgB,EAAE;wCAChB;4CACE,IAAI,EAAE,IAAI,CAAC,IAAI;4CACf,kBAAkB,EAAE,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE;4CACzF,IAAI,EAAE,SAAS;yCAChB;qCACF;iCACF;6BACF,CAAC,CAAC;yBACJ;qBACF;iBACF,CAAC,CAAC;aACJ,CAAC;QACN,UAAU,EAAE;YACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,SAAS;YACpD,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU;YACtC,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAO,MAAM,KAAK,qCAAqC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/E,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,iIAAiI,CAAC,IAAI,CAC3I,KAAK,CACN,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,QAAyB;IAC3C,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC;IACnE,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,MAAc;IAC/B,IAAI,MAAM,KAAK,mCAAmC;QAAE,OAAO,2BAA2B,CAAC;IACvF,IAAI,MAAM,KAAK,8BAA8B;QAAE,OAAO,kBAAkB,CAAC;IACzE,IAAI,MAAM,KAAK,qCAAqC;QAAE,OAAO,uBAAuB,CAAC;IACrF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,IAAI,MAAM,KAAK,mCAAmC,EAAE,CAAC;QACnD,OAAO,wFAAwF,CAAC;IAClG,CAAC;IACD,IAAI,MAAM,KAAK,8BAA8B,EAAE,CAAC;QAC9C,OAAO,yEAAyE,CAAC;IACnF,CAAC;IACD,IAAI,MAAM,KAAK,qCAAqC,EAAE,CAAC;QACrD,OAAO,4EAA4E,CAAC;IACtF,CAAC;IACD,OAAO,mCAAmC,CAAC;AAC7C,CAAC"}
|
package/dist/runCli.js
CHANGED
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "pkgwise",
|
|
3
|
-
"version": "0.1.0-alpha.
|
|
3
|
+
"version": "0.1.0-alpha.2",
|
|
4
4
|
"description": "Explainable dependency analysis for JavaScript and TypeScript projects",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"dependencies",
|
|
@@ -44,7 +44,7 @@
|
|
|
44
44
|
},
|
|
45
45
|
"dependencies": {
|
|
46
46
|
"commander": "^14.0.0",
|
|
47
|
-
"@lovlydev/pkgwise-core": "0.1.0-alpha.
|
|
47
|
+
"@lovlydev/pkgwise-core": "0.1.0-alpha.2"
|
|
48
48
|
},
|
|
49
49
|
"engines": {
|
|
50
50
|
"node": ">=22.0.0"
|