pkgwise 0.1.0-alpha.0

package/dist/output/renderPackageComparison.js

@@ -0,0 +1,41 @@
+export function renderPackageComparison(comparison) {
+    const lines = [
+        `PkgWise compare · ${comparison.selectors[0]} ↔ ${comparison.selectors[1]}`,
+        `${comparison.report.project.manager} · ${comparison.report.project.lockfile ?? 'no lockfile'}`,
+    ];
+    comparison.candidates.forEach((candidate, index) => {
+        lines.push('', `Candidate ${index === 0 ? 'A' : 'B'}: ${candidate.selector}`);
+        for (const item of candidate.packages) {
+            lines.push(`  ${item.name}${item.version === undefined ? '' : `@${item.version}`}`, `    direct ${item.direct ? 'yes' : 'no'} · depth ${item.minimumDepth} · immediate dependencies ${item.resolvedDependencyCount}`, `    scopes ${item.directScopes.join(', ') || 'none'} · locator ${item.id}`);
+        }
+        lines.push(`  Related findings: ${candidate.findings.length}`);
+    });
+    lines.push('', 'Metric comparison:');
+    for (const metric of comparison.metrics) {
+        lines.push(`  ${metric.status === 'equal' ? '=' : '≠'} ${metric.name}: ${formatValue(metric.candidateA)} | ${formatValue(metric.candidateB)}`, `    ${metric.summary}`);
+    }
+    lines.push('', `Conclusion: ${comparison.conclusion.summary}`);
+    if (comparison.recommendation !== undefined) {
+        lines.push(`Recommendation: ${comparison.recommendation.summary}`);
+        for (const action of comparison.recommendation.actions)
+            lines.push(`  - ${action}`);
+    }
+    if (comparison.context.unavailableData.length > 0) {
+        lines.push('', 'Unavailable data:');
+        for (const item of comparison.context.unavailableData)
+            lines.push(`  - ${item}`);
+    }
+    lines.push('', `Analysis status: ${comparison.report.status}`);
+    for (const diagnostic of comparison.report.diagnostics) {
+        lines.push(`${diagnostic.level.toUpperCase()}: ${diagnostic.message}`);
+    }
+    return `${lines.join('\n')}\n`;
+}
+function formatValue(value) {
+    if (value === undefined)
+        return 'unavailable';
+    if (Array.isArray(value))
+        return value.join(', ') || 'none';
+    return String(value);
+}
+//# sourceMappingURL=renderPackageComparison.js.map

package/dist/output/renderPackageComparison.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderPackageComparison.js","sourceRoot":"","sources":["../../src/output/renderPackageComparison.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,uBAAuB,CAAC,UAA6B;IACnE,MAAM,KAAK,GAAG;QACZ,qBAAqB,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;QAC3E,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,aAAa,EAAE;KAChG,CAAC;IAEF,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QACjD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9E,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CACR,KAAK,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,EACvE,cAAc,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,YAAY,IAAI,CAAC,YAAY,6BAA6B,IAAI,CAAC,uBAAuB,EAAE,EAChI,cAAc,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,cAAc,IAAI,CAAC,EAAE,EAAE,CAC5E,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,uBAAuB,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;IACrC,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CACR,KAAK,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,EAClI,OAAO,MAAM,CAAC,OAAO,EAAE,CACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,eAAe,UAAU,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/D,IAAI,UAAU,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,mBAAmB,UAAU,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,cAAc,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,UAAU,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,OAAO,CAAC,eAAe;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,oBAAoB,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/D,KAAK,MAAM,UAAU,IAAI,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAAC,KAAgE;IACnF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;IAC5D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/dist/output/renderPackageInspection.d.ts

@@ -0,0 +1,3 @@
+import type { PackageInspection } from '@lovlydev/pkgwise-core';
+export declare function renderPackageInspection(inspection: PackageInspection): string;
+//# sourceMappingURL=renderPackageInspection.d.ts.map

package/dist/output/renderPackageInspection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderPackageInspection.d.ts","sourceRoot":"","sources":["../../src/output/renderPackageInspection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,iBAAiB,GAAG,MAAM,CAqE7E"}

package/dist/output/renderPackageInspection.js

@@ -0,0 +1,58 @@
+export function renderPackageInspection(inspection) {
+    const lines = [
+        `PkgWise inspect · ${inspection.selector}`,
+        `${inspection.report.project.manager} · ${inspection.report.project.lockfile ?? 'no lockfile'}`,
+        formatAvailableVersions(inspection.availableVersions),
+    ];
+    for (const item of inspection.packages) {
+        lines.push('', `${item.name}${item.version === undefined ? '' : `@${item.version}`}`, `  Locator ID: ${item.id}`, `  Direct: ${item.direct ? 'yes' : 'no'}${item.directScopes.length === 0 ? '' : ` · scopes ${item.directScopes.join(', ')}`}`, `  Minimum depth: ${item.minimumDepth}`, '  Dependency paths:');
+        if (item.dependencyPaths.length === 0) {
+            lines.push('    Paths were not requested or are unavailable.');
+        }
+        else {
+            for (const path of item.dependencyPaths) {
+                lines.push(`    project -> ${path.packages
+                    .map((step) => `${step.name}${step.version === undefined ? '' : `@${step.version}`}`)
+                    .join(' -> ')}`);
+            }
+        }
+    }
+    if (inspection.remote !== undefined) {
+        lines.push('', `npm Registry: ${inspection.remote.status} · cache ${inspection.remote.source.cache}`);
+        if (inspection.remote.status === 'available') {
+            lines.push(`  Selected: ${inspection.remote.name}${inspection.remote.selectedVersion === undefined ? '' : `@${inspection.remote.selectedVersion}`}`, `  License: ${inspection.remote.license ?? 'unknown'}`, `  Node engines: ${inspection.remote.engines?.node ?? 'unknown'}`);
+            if (inspection.remote.description !== undefined) {
+                lines.push(`  ${inspection.remote.description}`);
+            }
+            if (inspection.remote.deprecated !== undefined) {
+                lines.push(`  DEPRECATED: ${inspection.remote.deprecated}`);
+            }
+        }
+    }
+    lines.push('', `Security advisories: ${inspection.advisories.length}`);
+    for (const advisory of [...inspection.advisories].sort(compareAdvisories)) {
+        lines.push(`  ${advisory.severity.toUpperCase()} ${advisory.id}${advisory.active ? '' : ' · withdrawn'}`, ...(advisory.summary === undefined ? [] : [`    ${advisory.summary}`]));
+    }
+    lines.push('', `Related findings: ${inspection.findings.length}`);
+    for (const finding of inspection.findings) {
+        lines.push(`  ${finding.severity.toUpperCase()} [${finding.ruleId}] ${finding.title}`, `    ${finding.fingerprint}`);
+    }
+    lines.push('', `Analysis status: ${inspection.report.status}`);
+    for (const diagnostic of inspection.report.diagnostics) {
+        lines.push(`${diagnostic.level.toUpperCase()}: ${diagnostic.message}`);
+    }
+    return `${lines.join('\n')}\n`;
+}
+function formatAvailableVersions(versions) {
+    if (versions.length === 0)
+        return 'Available versions: unknown';
+    if (versions.length <= 12)
+        return `Available versions: ${versions.join(', ')}`;
+    return `Available versions (${versions.length}): …, ${versions.slice(-10).join(', ')}`;
+}
+function compareAdvisories(left, right) {
+    const severity = ['critical', 'high', 'medium', 'low', 'info', 'unknown'];
+    return (severity.indexOf(left.severity) - severity.indexOf(right.severity) ||
+        left.id.localeCompare(right.id));
+}
+//# sourceMappingURL=renderPackageInspection.js.map

package/dist/output/renderPackageInspection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderPackageInspection.js","sourceRoot":"","sources":["../../src/output/renderPackageInspection.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,uBAAuB,CAAC,UAA6B;IACnE,MAAM,KAAK,GAAG;QACZ,qBAAqB,UAAU,CAAC,QAAQ,EAAE;QAC1C,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,aAAa,EAAE;QAC/F,uBAAuB,CAAC,UAAU,CAAC,iBAAiB,CAAC;KACtD,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CACR,EAAE,EACF,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,EACrE,iBAAiB,IAAI,CAAC,EAAE,EAAE,EAC1B,aAAa,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAC7H,oBAAoB,IAAI,CAAC,YAAY,EAAE,EACvC,qBAAqB,CACtB,CAAC;QACF,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACxC,KAAK,CAAC,IAAI,CACR,kBAAkB,IAAI,CAAC,QAAQ;qBAC5B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;qBACpF,IAAI,CAAC,MAAM,CAAC,EAAE,CAClB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CACR,EAAE,EACF,iBAAiB,UAAU,CAAC,MAAM,CAAC,MAAM,YAAY,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CACtF,CAAC;QACF,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC7C,KAAK,CAAC,IAAI,CACR,eAAe,UAAU,CAAC,MAAM,CAAC,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,EACxI,cAAc,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,SAAS,EAAE,EACtD,mBAAmB,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,SAAS,EAAE,CAClE,CAAC;YACF,IAAI,UAAU,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBAChD,KAAK,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,UAAU,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC/C,KAAK,CAAC,IAAI,CAAC,iBAAiB,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,wBAAwB,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC1E,KAAK,CAAC,IAAI,CACR,KAAK,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,EAC7F,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CACvE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,qBAAqB,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAClE,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,KAAK,CAAC,IAAI,CACR,KAAK,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,EAAE,EAC1E,OAAO,OAAO,CAAC,WAAW,EAAE,CAC7B,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,oBAAoB,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/D,KAAK,MAAM,UAAU,IAAI,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,SAAS,uBAAuB,CAAC,QAA2B;IAC1D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,6BAA6B,CAAC;IAChE,IAAI,QAAQ,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,uBAAuB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC/E,OAAO,uBAAuB,QAAQ,CAAC,MAAM,SAAS,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACzF,CAAC;AAED,SAAS,iBAAiB,CACxB,IAA6C,EAC7C,KAA8C;IAE9C,MAAM,QAAQ,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC1E,OAAO,CACL,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAClE,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAChC,CAAC;AACJ,CAAC"}

package/dist/output/renderSarifReport.d.ts

@@ -0,0 +1,3 @@
+import type { AnalysisReport } from '@lovlydev/pkgwise-core';
+export declare function renderSarifReport(report: AnalysisReport): string;
+//# sourceMappingURL=renderSarifReport.d.ts.map

package/dist/output/renderSarifReport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderSarifReport.d.ts","sourceRoot":"","sources":["../../src/output/renderSarifReport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAA4B,MAAM,wBAAwB,CAAC;AAEvF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAgDhE"}

package/dist/output/renderSarifReport.js

@@ -0,0 +1,145 @@
+export function renderSarifReport(report) {
+    const ruleIds = [...new Set(report.findings.map((finding) => finding.ruleId))].sort();
+    const ruleIndexes = new Map(ruleIds.map((id, index) => [id, index]));
+    const artifactUri = report.project.lockfile ?? 'package.json';
+    const sarif = {
+        $schema: 'https://json.schemastore.org/sarif-2.1.0.json',
+        version: '2.1.0',
+        runs: [
+            {
+                tool: {
+                    driver: {
+                        name: 'PkgWise',
+                        version: report.tool.version,
+                        ...(isSemanticVersion(report.tool.version)
+                            ? { semanticVersion: report.tool.version }
+                            : {}),
+                        informationUri: 'docs/spec/README.md',
+                        rules: ruleIds.map((ruleId) => createRuleDescriptor(ruleId, report.findings)),
+                    },
+                },
+                artifacts: [{ location: { uri: artifactUri } }],
+                invocations: [
+                    {
+                        executionSuccessful: true,
+                        toolExecutionNotifications: report.diagnostics.map((diagnostic) => ({
+                            descriptor: { id: diagnostic.code },
+                            level: diagnostic.level === 'warning' ? 'warning' : 'note',
+                            message: { text: diagnostic.message },
+                        })),
+                        properties: {
+                            analysisStatus: report.status,
+                            coverage: report.coverage.overall,
+                            policyStatus: report.policy.status,
+                        },
+                    },
+                ],
+                results: report.findings.map((finding) => createResult(finding, ruleIndexes.get(finding.ruleId), artifactUri)),
+                properties: {
+                    schemaVersion: report.schemaVersion,
+                    packageManager: report.project.manager,
+                    packageCount: report.graph.packageCount,
+                },
+            },
+        ],
+    };
+    return `${JSON.stringify(sarif, null, 2)}\n`;
+}
+function createRuleDescriptor(ruleId, findings) {
+    const representative = findings.find((finding) => finding.ruleId === ruleId);
+    return {
+        id: ruleId,
+        name: ruleId.replaceAll(/[^a-zA-Z0-9]+/g, '_'),
+        shortDescription: { text: ruleTitle(ruleId) },
+        fullDescription: { text: ruleDescription(ruleId) },
+        help: {
+            text: representative.recommendation.summary,
+            markdown: representative.recommendation.summary,
+        },
+        defaultConfiguration: { level: defaultRuleLevel(ruleId) },
+        properties: {
+            ruleVersion: representative.ruleVersion,
+            category: representative.category,
+            evidenceKind: representative.evidence[0]?.kind ?? 'unknown',
+        },
+    };
+}
+function createResult(finding, ruleIndex, artifactUri) {
+    const resolvedPaths = finding.dependencyPaths.filter((path) => path.packages.length > 0);
+    return {
+        ruleId: finding.ruleId,
+        ruleIndex,
+        level: sarifLevel(finding.severity),
+        message: {
+            text: `${finding.title}: ${finding.summary} Recommendation: ${finding.recommendation.summary}`,
+        },
+        partialFingerprints: {
+            'pkgwiseFindingFingerprint/v1': finding.fingerprint,
+        },
+        locations: [{ physicalLocation: { artifactLocation: { uri: artifactUri } } }],
+        ...(resolvedPaths.length === 0
+            ? {}
+            : {
+                codeFlows: resolvedPaths.map((path) => ({
+                    threadFlows: [
+                        {
+                            locations: path.packages.map((item) => ({
+                                location: {
+                                    logicalLocations: [
+                                        {
+                                            name: item.name,
+                                            fullyQualifiedName: `${item.name}${item.version === undefined ? '' : `@${item.version}`}`,
+                                            kind: 'package',
+                                        },
+                                    ],
+                                },
+                            })),
+                        },
+                    ],
+                })),
+            }),
+        properties: {
+            priority: finding.priority,
+            confidence: finding.confidence,
+            category: finding.category,
+            evidenceKind: finding.evidence[0]?.kind ?? 'unknown',
+            packageIds: finding.subject.packageIds,
+            pathsTruncated: finding.pathsTruncated,
+        },
+    };
+}
+function defaultRuleLevel(ruleId) {
+    return ruleId === 'compatibility/unresolved-dependency' ? 'warning' : 'note';
+}
+function isSemanticVersion(value) {
+    return /^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/.test(value);
+}
+function sarifLevel(severity) {
+    if (severity === 'critical' || severity === 'high')
+        return 'error';
+    if (severity === 'medium')
+        return 'warning';
+    return 'note';
+}
+function ruleTitle(ruleId) {
+    if (ruleId === 'reliability/version-fragmentation')
+        return 'Multiple package versions';
+    if (ruleId === 'reliability/dependency-cycle')
+        return 'Dependency cycle';
+    if (ruleId === 'compatibility/unresolved-dependency')
+        return 'Unresolved dependency';
+    return ruleId;
+}
+function ruleDescription(ruleId) {
+    if (ruleId === 'reliability/version-fragmentation') {
+        return 'Reports multiple exact versions of the same package in the reachable dependency graph.';
+    }
+    if (ruleId === 'reliability/dependency-cycle') {
+        return 'Reports strongly connected components in the resolved dependency graph.';
+    }
+    if (ruleId === 'compatibility/unresolved-dependency') {
+        return 'Reports required dependency relations without a matching lockfile locator.';
+    }
+    return 'PkgWise dependency analysis rule.';
+}
+//# sourceMappingURL=renderSarifReport.js.map

package/dist/output/renderSarifReport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderSarifReport.js","sourceRoot":"","sources":["../../src/output/renderSarifReport.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,iBAAiB,CAAC,MAAsB;IACtD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,CAAU,CAAC,CAAC,CAAC;IAC9E,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,cAAc,CAAC;IAC9D,MAAM,KAAK,GAAG;QACZ,OAAO,EAAE,+CAA+C;QACxD,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;wBAC5B,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;4BACxC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE;4BAC1C,CAAC,CAAC,EAAE,CAAC;wBACP,cAAc,EAAE,qBAAqB;wBACrC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;qBAC9E;iBACF;gBACD,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC;gBAC/C,WAAW,EAAE;oBACX;wBACE,mBAAmB,EAAE,IAAI;wBACzB,0BAA0B,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;4BAClE,UAAU,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,IAAI,EAAE;4BACnC,KAAK,EAAE,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;4BAC1D,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,EAAE;yBACtC,CAAC,CAAC;wBACH,UAAU,EAAE;4BACV,cAAc,EAAE,MAAM,CAAC,MAAM;4BAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;4BACjC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;yBACnC;qBACF;iBACF;gBACD,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACvC,YAAY,CAAC,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAW,EAAE,WAAW,CAAC,CAC9E;gBACD,UAAU,EAAE;oBACV,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO;oBACtC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY;iBACxC;aACF;SACF;KACF,CAAC;IACF,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAc,EAAE,QAA4B;IACxE,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAY,CAAC;IACxF,OAAO;QACL,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,gBAAgB,EAAE,GAAG,CAAC;QAC9C,gBAAgB,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE;QAC7C,eAAe,EAAE,EAAE,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE;QAClD,IAAI,EAAE;YACJ,IAAI,EAAE,cAAc,CAAC,cAAc,CAAC,OAAO;YAC3C,QAAQ,EAAE,cAAc,CAAC,cAAc,CAAC,OAAO;SAChD;QACD,oBAAoB,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE;QACzD,UAAU,EAAE;YACV,WAAW,EAAE,cAAc,CAAC,WAAW;YACvC,QAAQ,EAAE,cAAc,CAAC,QAAQ;YACjC,YAAY,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,SAAS;SAC5D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,OAAgB,EAAE,SAAiB,EAAE,WAAmB;IAC5E,MAAM,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzF,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS;QACT,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC;QACnC,OAAO,EAAE;YACP,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,OAAO,oBAAoB,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE;SAC/F;QACD,mBAAmB,EAAE;YACnB,8BAA8B,EAAE,OAAO,CAAC,WAAW;SACpD;QACD,SAAS,EAAE,CAAC,EAAE,gBAAgB,EAAE,EAAE,gBAAgB,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QAC7E,GAAG,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;YAC5B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,SAAS,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBACtC,WAAW,EAAE;wBACX;4BACE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gCACtC,QAAQ,EAAE;oCACR,gBAAgB,EAAE;wCAChB;4CACE,IAAI,EAAE,IAAI,CAAC,IAAI;4CACf,kBAAkB,EAAE,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE;4CACzF,IAAI,EAAE,SAAS;yCAChB;qCACF;iCACF;6BACF,CAAC,CAAC;yBACJ;qBACF;iBACF,CAAC,CAAC;aACJ,CAAC;QACN,UAAU,EAAE;YACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,SAAS;YACpD,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU;YACtC,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAO,MAAM,KAAK,qCAAqC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/E,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,iIAAiI,CAAC,IAAI,CAC3I,KAAK,CACN,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,QAAyB;IAC3C,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC;IACnE,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,MAAc;IAC/B,IAAI,MAAM,KAAK,mCAAmC;QAAE,OAAO,2BAA2B,CAAC;IACvF,IAAI,MAAM,KAAK,8BAA8B;QAAE,OAAO,kBAAkB,CAAC;IACzE,IAAI,MAAM,KAAK,qCAAqC;QAAE,OAAO,uBAAuB,CAAC;IACrF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,IAAI,MAAM,KAAK,mCAAmC,EAAE,CAAC;QACnD,OAAO,wFAAwF,CAAC;IAClG,CAAC;IACD,IAAI,MAAM,KAAK,8BAA8B,EAAE,CAAC;QAC9C,OAAO,yEAAyE,CAAC;IACnF,CAAC;IACD,IAAI,MAAM,KAAK,qCAAqC,EAAE,CAAC;QACrD,OAAO,4EAA4E,CAAC;IACtF,CAAC;IACD,OAAO,mCAAmC,CAAC;AAC7C,CAAC"}

package/dist/output/renderStructuredResult.d.ts

@@ -0,0 +1,3 @@
+import type { OutputFormat } from '../options/GlobalOptions.js';
+export declare function renderStructuredResult(value: unknown, format: OutputFormat): string;
+//# sourceMappingURL=renderStructuredResult.d.ts.map

package/dist/output/renderStructuredResult.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderStructuredResult.d.ts","sourceRoot":"","sources":["../../src/output/renderStructuredResult.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAGhE,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,GAAG,MAAM,CAmBnF"}

package/dist/output/renderStructuredResult.js

@@ -0,0 +1,20 @@
+import { PkgWiseError } from '@lovlydev/pkgwise-core';
+import { renderGenericMarkdown } from './renderMarkdownReport.js';
+export function renderStructuredResult(value, format) {
+    if (format === 'json') {
+        return `${JSON.stringify(value, null, 2)}\n`;
+    }
+    if (format === 'terminal') {
+        return `${JSON.stringify(value, null, 2)}\n`;
+    }
+    if (format === 'markdown') {
+        return renderGenericMarkdown(value);
+    }
+    throw new PkgWiseError({
+        code: 'PW_FEATURE_NOT_IMPLEMENTED',
+        userMessage: `${format.toUpperCase()} reporting is not implemented in this development build yet.`,
+        recoverable: false,
+        details: { format },
+    });
+}
+//# sourceMappingURL=renderStructuredResult.js.map

package/dist/output/renderStructuredResult.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderStructuredResult.js","sourceRoot":"","sources":["../../src/output/renderStructuredResult.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,MAAoB;IACzE,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAC/C,CAAC;IAED,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QAC1B,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAC/C,CAAC;IAED,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QAC1B,OAAO,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,IAAI,YAAY,CAAC;QACrB,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,8DAA8D;QAClG,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE,EAAE,MAAM,EAAE;KACpB,CAAC,CAAC;AACL,CAAC"}

package/dist/output/writeTextOutput.d.ts

@@ -0,0 +1,3 @@
+import type { CliIo } from '../io/CliIo.js';
+export declare function writeTextOutput(content: string, outputPath: string | undefined, io: CliIo): Promise<void>;
+//# sourceMappingURL=writeTextOutput.d.ts.map

package/dist/output/writeTextOutput.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeTextOutput.d.ts","sourceRoot":"","sources":["../../src/output/writeTextOutput.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAE5C,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,EAAE,EAAE,KAAK,GACR,OAAO,CAAC,IAAI,CAAC,CAkBf"}

package/dist/output/writeTextOutput.js

@@ -0,0 +1,22 @@
+import { mkdir, rename, rm, writeFile } from 'node:fs/promises';
+import { dirname, resolve } from 'node:path';
+import { randomUUID } from 'node:crypto';
+export async function writeTextOutput(content, outputPath, io) {
+    if (outputPath === undefined) {
+        io.stdout.write(content);
+        return;
+    }
+    const target = resolve(outputPath);
+    const parent = dirname(target);
+    const temporary = `${target}.${randomUUID()}.tmp`;
+    await mkdir(parent, { recursive: true });
+    try {
+        await writeFile(temporary, content, { encoding: 'utf8', flag: 'wx' });
+        await rename(temporary, target);
+    }
+    catch (error) {
+        await rm(temporary, { force: true });
+        throw error;
+    }
+}
+//# sourceMappingURL=writeTextOutput.js.map

package/dist/output/writeTextOutput.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeTextOutput.js","sourceRoot":"","sources":["../../src/output/writeTextOutput.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,UAA8B,EAC9B,EAAS;IAET,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,UAAU,EAAE,MAAM,CAAC;IAClD,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzC,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/runCli.d.ts

@@ -0,0 +1,11 @@
+import { PkgWiseError, type PkgWiseClient } from '@lovlydev/pkgwise-core';
+import type { CliIo } from './io/CliIo.js';
+export interface RunCliOptions {
+    readonly client?: PkgWiseClient;
+    readonly io?: CliIo;
+    readonly signal?: AbortSignal;
+    readonly version?: string;
+}
+export declare function runCli(argv: readonly string[], options?: RunCliOptions): Promise<number>;
+export declare function createCancelledError(): PkgWiseError;
+//# sourceMappingURL=runCli.d.ts.map

package/dist/runCli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runCli.d.ts","sourceRoot":"","sources":["../src/runCli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAIzF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAI3C,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC;IACpB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAsB,MAAM,CAC1B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,MAAM,CAAC,CAwCjB;AAYD,wBAAgB,oBAAoB,IAAI,YAAY,CAMnD"}

package/dist/runCli.js

@@ -0,0 +1,60 @@
+import { createPkgWise, PkgWiseError } from '@lovlydev/pkgwise-core';
+import { CommanderError } from 'commander';
+import { createCli } from './createCli.js';
+import { mapErrorToExitCode } from './exit/mapErrorToExitCode.js';
+import { processCliIo } from './io/CliIo.js';
+import { renderCliError } from './output/renderCliError.js';
+export async function runCli(argv, options = {}) {
+    const io = options.io ?? processCliIo;
+    const client = options.client ?? createPkgWise();
+    const signal = options.signal ?? new AbortController().signal;
+    let exitCode = 0;
+    const program = createCli({
+        client,
+        io,
+        signal,
+        version: options.version ?? '0.1.0-alpha.0',
+        setExitCode(code) {
+            exitCode = code;
+        },
+    });
+    try {
+        await program.parseAsync([...argv], { from: 'user' });
+        return exitCode;
+    }
+    catch (error) {
+        if (error instanceof CommanderError) {
+            return error.exitCode === 0 ? 0 : 2;
+        }
+        const mappedCode = mapErrorToExitCode(error);
+        const format = readRequestedFormat(argv);
+        const debug = argv.includes('--debug');
+        const envelope = renderCliError(error, debug);
+        if (format === 'json' || format === 'sarif') {
+            io.stdout.write(`${JSON.stringify(envelope, null, 2)}\n`);
+        }
+        else {
+            io.stderr.write(`Error [${envelope.error.code}]: ${envelope.error.message}\n`);
+            if (debug && error instanceof Error && error.stack !== undefined) {
+                io.stderr.write(`${error.stack}\n`);
+            }
+        }
+        return mappedCode;
+    }
+}
+function readRequestedFormat(argv) {
+    const assignment = argv.find((argument) => argument.startsWith('--format='));
+    if (assignment !== undefined) {
+        return assignment.slice('--format='.length);
+    }
+    const index = argv.indexOf('--format');
+    return index === -1 ? undefined : argv[index + 1];
+}
+export function createCancelledError() {
+    return new PkgWiseError({
+        code: 'PW_CANCELLED',
+        userMessage: 'The operation was cancelled.',
+        recoverable: true,
+    });
+}
+//# sourceMappingURL=runCli.js.map

package/dist/runCli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runCli.js","sourceRoot":"","sources":["../src/runCli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAsB,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAElE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAS5D,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAuB,EACvB,UAAyB,EAAE;IAE3B,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,YAAY,CAAC;IACtC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC;IAC9D,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,MAAM,OAAO,GAAG,SAAS,CAAC;QACxB,MAAM;QACN,EAAE;QACF,MAAM;QACN,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe;QAC3C,WAAW,CAAC,IAAI;YACd,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACtD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAE9C,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YAC5C,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;YAC/E,IAAI,KAAK,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBACjE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAuB;IAClD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7E,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,8BAA8B;QAC3C,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -0,0 +1,57 @@
+{
+  "name": "pkgwise",
+  "version": "0.1.0-alpha.0",
+  "description": "Explainable dependency analysis for JavaScript and TypeScript projects",
+  "keywords": [
+    "dependencies",
+    "security",
+    "npm",
+    "osv",
+    "audit",
+    "cli"
+  ],
+  "type": "module",
+  "sideEffects": false,
+  "license": "MIT",
+  "author": "LovlyDev",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/lovlyDev/pkgWise.git",
+    "directory": "packages/cli"
+  },
+  "homepage": "https://github.com/lovlyDev/pkgWise#readme",
+  "bugs": {
+    "url": "https://github.com/lovlyDev/pkgWise/issues"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
+  "bin": {
+    "pkgwise": "./dist/bin/pkgwise.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "dependencies": {
+    "commander": "^14.0.0",
+    "@lovlydev/pkgwise-core": "0.1.0-alpha.0"
+  },
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "scripts": {
+    "build": "node ../../node_modules/typescript/bin/tsc -p tsconfig.build.json",
+    "typecheck": "node ../../node_modules/typescript/bin/tsc -p tsconfig.json --noEmit",
+    "test": "node ../../node_modules/typescript/bin/tsc -p tsconfig.test.json && node --test .test-dist/test/**/*.test.js"
+  }
+}