projectpulse-mcp 1.4.0 → 1.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +89 -102
- package/dist/scoring/health-score.d.ts +1 -1
- package/dist/scoring/health-score.d.ts.map +1 -1
- package/dist/scoring/health-score.js +34 -9
- package/dist/scoring/health-score.js.map +1 -1
- package/dist/scoring/health-score.test.js +41 -1
- package/dist/scoring/health-score.test.js.map +1 -1
- package/dist/security/openssf-client.d.ts +4 -0
- package/dist/security/openssf-client.d.ts.map +1 -0
- package/dist/security/openssf-client.js +34 -0
- package/dist/security/openssf-client.js.map +1 -0
- package/dist/security/openssf-client.test.d.ts +2 -0
- package/dist/security/openssf-client.test.d.ts.map +1 -0
- package/dist/security/openssf-client.test.js +70 -0
- package/dist/security/openssf-client.test.js.map +1 -0
- package/dist/security/types.d.ts +15 -0
- package/dist/security/types.d.ts.map +1 -0
- package/dist/security/types.js +2 -0
- package/dist/security/types.js.map +1 -0
- package/dist/tools/get-health-score.d.ts.map +1 -1
- package/dist/tools/get-health-score.js +5 -3
- package/dist/tools/get-health-score.js.map +1 -1
- package/dist/tools/get-health-score.test.js +37 -0
- package/dist/tools/get-health-score.test.js.map +1 -1
- package/dist/types/health.d.ts +1 -0
- package/dist/types/health.d.ts.map +1 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -1,88 +1,48 @@
|
|
|
1
|
-
<
|
|
1
|
+
<h1 align="center">ProjectPulse MCP 🏥</h1>
|
|
2
2
|
|
|
3
|
-
<
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
**Monitor, score, and compare GitHub repository health directly from your AI agent conversations.**
|
|
8
|
-
|
|
9
|
-
[](https://www.npmjs.com/package/projectpulse-mcp)
|
|
10
|
-
[](https://opensource.org/licenses/MIT)
|
|
11
|
-
[](https://www.typescriptlang.org/)
|
|
12
|
-
[](https://modelcontextprotocol.io)
|
|
13
|
-
[](https://vitest.dev/)
|
|
3
|
+
<p align="center">
|
|
4
|
+
<em>GitHub repository health monitoring for AI assistants — works with any language, any repo.</em>
|
|
5
|
+
</p>
|
|
14
6
|
|
|
15
7
|
<p align="center">
|
|
16
|
-
<a href="
|
|
17
|
-
<a href="
|
|
18
|
-
<a href="
|
|
19
|
-
<a href="
|
|
20
|
-
<a href="
|
|
21
|
-
<a href="#-license">License</a>
|
|
8
|
+
<a href="https://www.npmjs.com/package/projectpulse-mcp"><img src="https://img.shields.io/npm/v/projectpulse-mcp.svg?color=blue" alt="npm version" /></a>
|
|
9
|
+
<a href="https://github.com/alexbypa/github-projectpulse-mcp/blob/main/LICENSE"><img src="https://img.shields.io/github/license/alexbypa/github-projectpulse-mcp" alt="license" /></a>
|
|
10
|
+
<a href="https://github.com/alexbypa/github-projectpulse-mcp/actions"><img src="https://img.shields.io/github/actions/workflow/status/alexbypa/github-projectpulse-mcp/ci.yml?label=tests" alt="tests" /></a>
|
|
11
|
+
<a href="https://github.com/alexbypa/github-projectpulse-mcp/stargazers"><img src="https://img.shields.io/github/stars/alexbypa/github-projectpulse-mcp" alt="stars" /></a>
|
|
12
|
+
<a href="https://www.npmjs.com/package/projectpulse-mcp"><img src="https://img.shields.io/npm/dt/projectpulse-mcp" alt="downloads" /></a>
|
|
22
13
|
</p>
|
|
23
14
|
|
|
24
15
|
---
|
|
25
16
|
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
## 🌟 Overview
|
|
17
|
+
This [Model Context Protocol](https://modelcontextprotocol.io/) (MCP) server gives AI assistants the ability to analyze health, security, CI/CD status, and delivery metrics of any GitHub repository — directly from your conversations.
|
|
29
18
|
|
|
30
|
-
|
|
19
|
+
## ✨ Features
|
|
31
20
|
|
|
32
|
-
|
|
21
|
+
- 🏥 **Health Score** — comprehensive 0-100 score with grade (A-F), category breakdown, and improvement suggestions
|
|
22
|
+
- 🔒 **Security** — Dependabot alerts blended with [OpenSSF Scorecard](https://scorecard.dev/) checks (60/40 weighted)
|
|
23
|
+
- 📊 **DORA Metrics** — proxy [DORA metrics](https://dora.dev/) from GitHub data: deployment frequency, lead time, change failure rate, MTTR
|
|
24
|
+
- 🔍 **Code Scanning** — CodeQL and other code scanning alerts with severity, message, and creation date
|
|
25
|
+
- 📦 **Dependency Analysis** — Dependabot alerts with severity filtering
|
|
26
|
+
- ⚙️ **CI/CD Status** — recent GitHub Actions workflow runs and conclusions
|
|
27
|
+
- 📋 **Repository Info** — stars, forks, language, license, and general metadata
|
|
33
28
|
|
|
34
|
-
##
|
|
35
|
-
|
|
36
|
-
### 🔍 1. Multi-Repository Benchmark & Comparison
|
|
37
|
-
* **`compare_repos`**: Compares 2 to 5 repositories simultaneously and returns a ranked JSON score.
|
|
38
|
-
* **Competition Ranking**: Employs standard competition ranking (1224 scheme) with full tie-breaking.
|
|
39
|
-
* **Fault Tolerance**: Isolates repository errors (e.g. 404s) so remaining repositories are scored seamlessly.
|
|
40
|
-
|
|
41
|
-
### 📊 2. Algorithmic Health Scoring (Grade A–F)
|
|
42
|
-
* **`get_health_score`**: Weighted composite metric across 5 dimensions:
|
|
43
|
-
- **CI/CD Reliability (25%)**: Evaluates pass rate across recent workflow runs.
|
|
44
|
-
- **Security & Dependabot (25%)**: Audits open critical, high, medium, and low security advisories.
|
|
45
|
-
- **Codebase Freshness (20%)**: Tracks commit recency and push activity.
|
|
46
|
-
- **Community & Activity (15%)**: Measures open issue resolution and fork engagement.
|
|
47
|
-
- **Maintenance Standards (15%)**: Assesses licensing, descriptions, and active status.
|
|
48
|
-
|
|
49
|
-
### ⏱️ 3. Proxy DORA Metrics
|
|
50
|
-
* **`get_dora_metrics`**: Computes core DevOps Research & Assessment metrics over a configurable window (7–90 days):
|
|
51
|
-
- **Deployment Frequency**: Weekly release throughput.
|
|
52
|
-
- **Lead Time for Changes**: Median PR duration from opening to merge.
|
|
53
|
-
- **Change Failure Rate**: Proportion of failed workflow executions.
|
|
54
|
-
- **Mean Time to Recovery (MTTR)**: Median duration between failure and subsequent branch recovery.
|
|
55
|
-
|
|
56
|
-
### 🛡️ 4. Security & Code Quality Audits
|
|
57
|
-
* **`analyze_dependencies`**: Detailed Dependabot alert breakdowns with severity filtering.
|
|
58
|
-
* **`analyze_code_scanning`**: CodeQL static analysis and security scanning summaries.
|
|
59
|
-
* **`check_ci_status`**: Live inspection of recent GitHub Actions pipeline conclusions.
|
|
60
|
-
* **`get_repo_health`**: Raw telemetry (stars, forks, languages, licenses, default branches).
|
|
29
|
+
## 📸 Example
|
|
61
30
|
|
|
62
|
-
|
|
31
|
+
|
|
63
32
|
|
|
64
|
-
##
|
|
33
|
+
## 🚀 Quick Start
|
|
65
34
|
|
|
66
|
-
|
|
67
|
-
| :--- | :--- | :--- |
|
|
68
|
-
| **`compare_repos`** | Compares and ranks 2 to 5 GitHub repositories by health score using standard competition ranking. | `repos: Array<{ owner: string, repo: string }>` *(min: 2, max: 5)* |
|
|
69
|
-
| **`get_health_score`** | Calculates a 0–100 weighted health score with letter grade (A–F), category breakdown, and suggestions. | `owner: string`, `repo: string` |
|
|
70
|
-
| **`get_dora_metrics`** | Calculates DORA proxy metrics (Deployment Frequency, Lead Time, Change Failure Rate, MTTR). | `owner: string`, `repo: string`, `days?: number` *(7–90, default: 30)* |
|
|
71
|
-
| **`get_repo_health`** | Retrieves core repository metadata (stars, open issues, language, license, activity). | `owner: string`, `repo: string` |
|
|
72
|
-
| **`analyze_dependencies`** | Lists Dependabot security advisories grouped by severity level. | `owner: string`, `repo: string`, `severity?: "critical" \| "high" \| "medium" \| "low"` |
|
|
73
|
-
| **`analyze_code_scanning`** | Fetches CodeQL and static analysis scanning alerts. | `owner: string`, `repo: string` |
|
|
74
|
-
| **`check_ci_status`** | Fetches recent GitHub Actions workflow runs and conclusions. | `owner: string`, `repo: string`, `limit?: number` *(default: 10)* |
|
|
75
|
-
| **`ping`** | Simple connectivity and latency validation check. | `message: string` |
|
|
35
|
+
### Claude Code (CLI)
|
|
76
36
|
|
|
77
|
-
|
|
37
|
+
```bash
|
|
38
|
+
claude mcp add projectpulse -- npx projectpulse-mcp
|
|
39
|
+
```
|
|
78
40
|
|
|
79
|
-
|
|
41
|
+
> **Note:** You need a `.env` file with your `GITHUB_TOKEN` in the directory where you run Claude Code.
|
|
80
42
|
|
|
81
|
-
###
|
|
43
|
+
### Claude Desktop
|
|
82
44
|
|
|
83
|
-
Add
|
|
84
|
-
* **Windows**: `%APPDATA%\Claude\claude_desktop_config.json`
|
|
85
|
-
* **macOS**: `~/Library/Application Support/Claude/claude_desktop_config.json`
|
|
45
|
+
Add to your `claude_desktop_config.json` (`%APPDATA%\Claude\` on Windows, `~/Library/Application Support/Claude/` on macOS):
|
|
86
46
|
|
|
87
47
|
```json
|
|
88
48
|
{
|
|
@@ -91,62 +51,89 @@ Add the server to your `claude_desktop_config.json`:
|
|
|
91
51
|
"command": "npx",
|
|
92
52
|
"args": ["-y", "projectpulse-mcp"],
|
|
93
53
|
"env": {
|
|
94
|
-
"GITHUB_TOKEN": "
|
|
54
|
+
"GITHUB_TOKEN": "your-github-personal-access-token"
|
|
95
55
|
}
|
|
96
56
|
}
|
|
97
57
|
}
|
|
98
58
|
}
|
|
99
59
|
```
|
|
100
60
|
|
|
101
|
-
###
|
|
61
|
+
### Other MCP Clients (Cursor, Windsurf, etc.)
|
|
102
62
|
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
|
|
63
|
+
Configure a new MCP server with:
|
|
64
|
+
- **Transport**: `stdio`
|
|
65
|
+
- **Command**: `npx`
|
|
66
|
+
- **Arguments**: `-y projectpulse-mcp`
|
|
67
|
+
- **Environment**: `GITHUB_TOKEN` = your GitHub PAT
|
|
106
68
|
|
|
107
|
-
|
|
108
|
-
* **Command:** `npx`
|
|
109
|
-
* **Args:** `-y projectpulse-mcp`
|
|
110
|
-
* **Environment Variable:** `GITHUB_TOKEN=your_token_here`
|
|
69
|
+
## 🛠️ Tools
|
|
111
70
|
|
|
112
|
-
|
|
71
|
+
| Tool | Description | Inputs |
|
|
72
|
+
| --- | --- | --- |
|
|
73
|
+
| `get_health_score` | 0-100 health score with grade (A-F), category breakdown, and suggestions | `owner`, `repo` |
|
|
74
|
+
| `get_dora_metrics` | DORA proxy metrics: deployment frequency, lead time, change failure rate, MTTR | `owner`, `repo`, `days?` (7-90, default 30) |
|
|
75
|
+
| `get_repo_health` | General metadata: stars, issues, language, license, etc. | `owner`, `repo` |
|
|
76
|
+
| `analyze_dependencies` | Dependabot alerts by severity | `owner`, `repo`, `severity?` |
|
|
77
|
+
| `check_ci_status` | Recent CI/CD workflow runs | `owner`, `repo`, `limit?` (default 10) |
|
|
78
|
+
| `analyze_code_scanning` | CodeQL / code scanning alerts | `owner`, `repo` |
|
|
79
|
+
| `ping` | Connectivity check | `message` |
|
|
80
|
+
|
|
81
|
+
## 🆕 What's New
|
|
82
|
+
|
|
83
|
+
### OpenSSF Scorecard Integration
|
|
84
|
+
|
|
85
|
+
Security score now blends **Dependabot alerts** (60%) with **OpenSSF Scorecard** checks (40%) for a more complete picture. 12 security-relevant checks are evaluated — repos without a scorecard gracefully fall back to Dependabot-only scoring.
|
|
86
|
+
|
|
87
|
+
### DORA Metrics
|
|
88
|
+
|
|
89
|
+
New `get_dora_metrics` tool calculates proxy [DORA metrics](https://dora.dev/) from public GitHub data:
|
|
113
90
|
|
|
114
|
-
|
|
91
|
+
| Metric | Source | Unit |
|
|
92
|
+
| --- | --- | --- |
|
|
93
|
+
| Deployment Frequency | Releases | releases/week |
|
|
94
|
+
| Lead Time for Changes | PR created → merged | hours (median) |
|
|
95
|
+
| Change Failure Rate | CI workflow conclusions | percentage |
|
|
96
|
+
| Mean Time to Recovery | CI failure → next success | hours (median) |
|
|
115
97
|
|
|
116
|
-
|
|
98
|
+
Metrics return `null` when insufficient data is available — works safely on any repository.
|
|
117
99
|
|
|
118
|
-
|
|
119
|
-
|
|
100
|
+
## ⚙️ Configuration
|
|
101
|
+
|
|
102
|
+
### GITHUB_TOKEN
|
|
103
|
+
|
|
104
|
+
Required to avoid rate limits and access security data (Dependabot, CodeQL alerts).
|
|
105
|
+
|
|
106
|
+
**Option A: Fine-grained PAT (Recommended)**
|
|
107
|
+
1. **Settings** > **Developer settings** > **Personal access tokens** > **Fine-grained tokens**
|
|
108
|
+
2. Select target repositories
|
|
109
|
+
3. Grant **Read-only** access to:
|
|
120
110
|
- `Code scanning alerts`
|
|
121
111
|
- `Dependabot alerts`
|
|
122
|
-
- `Actions`
|
|
123
112
|
- `Metadata` (default)
|
|
124
|
-
3. Set your token as the `GITHUB_TOKEN` environment variable in your `.env` file or MCP client configuration.
|
|
125
113
|
|
|
126
|
-
|
|
114
|
+
**Option B: Classic Token**
|
|
115
|
+
Generate with `repo` + `security_events` scopes.
|
|
127
116
|
|
|
128
|
-
|
|
117
|
+
**Providing the token:**
|
|
118
|
+
- **Claude Desktop**: set in `claude_desktop_config.json` (see Quick Start)
|
|
119
|
+
- **Claude Code / Local**: create a `.env` file:
|
|
120
|
+
```env
|
|
121
|
+
GITHUB_TOKEN=ghp_your_token_here
|
|
122
|
+
```
|
|
129
123
|
|
|
130
|
-
|
|
131
|
-
# Install dependencies
|
|
132
|
-
npm install
|
|
124
|
+
## 👤 Author
|
|
133
125
|
|
|
134
|
-
|
|
135
|
-
npm test
|
|
126
|
+
**alexbypa** — [GitHub](https://github.com/alexbypa) · [npm](https://www.npmjs.com/~alexbypa)
|
|
136
127
|
|
|
137
|
-
|
|
138
|
-
npm run lint
|
|
128
|
+
## 🤝 Contributing
|
|
139
129
|
|
|
140
|
-
|
|
141
|
-
|
|
142
|
-
```
|
|
130
|
+
Contributions, issues and feature requests are welcome!
|
|
131
|
+
Feel free to check the [issues page](https://github.com/alexbypa/github-projectpulse-mcp/issues).
|
|
143
132
|
|
|
144
|
-
|
|
133
|
+
## ⭐ Show your support
|
|
145
134
|
|
|
146
|
-
|
|
135
|
+
Give a star if this project helped you!
|
|
147
136
|
|
|
148
|
-
|
|
137
|
+
## 📝 License
|
|
149
138
|
|
|
150
|
-
|
|
151
|
-
<sub>Built with ❤️ by <a href="https://github.com/alexbypa">Alessandro Chiodo</a></sub>
|
|
152
|
-
</div>
|
|
139
|
+
MIT — see the [LICENSE](LICENSE) file for details.
|
|
@@ -9,7 +9,7 @@ export declare function calculateSecurityScore(alertCounts: {
|
|
|
9
9
|
high: number;
|
|
10
10
|
medium: number;
|
|
11
11
|
low: number;
|
|
12
|
-
}): CategoryScore;
|
|
12
|
+
}, openssfScore?: number): CategoryScore;
|
|
13
13
|
export declare function calculateCommunityScore(openIssues: number, forks: number): CategoryScore;
|
|
14
14
|
export declare function calculateMaintenanceScore(hasLicense: boolean, hasDescription: boolean, archived: boolean): CategoryScore;
|
|
15
15
|
export declare function calculateHealthScore(repo: string, categories: Record<string, CategoryScore>): HealthReport;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"health-score.d.ts","sourceRoot":"","sources":["../../src/scoring/health-score.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;
|
|
1
|
+
{"version":3,"file":"health-score.d.ts","sourceRoot":"","sources":["../../src/scoring/health-score.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAWxE,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,CAMjD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC;IAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,GAAG,aAAa,CAK1F;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CAQvE;AAED,wBAAgB,sBAAsB,CAAC,WAAW,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,aAAa,CAuBzJ;AAED,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAQxF;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,GAAG,aAAa,CAMxH;AAED,wBAAgB,oBAAoB,CAChC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,GAC1C,YAAY,CAQd"}
|
|
@@ -35,15 +35,24 @@ export function calculateFreshnessScore(pushedAt) {
|
|
|
35
35
|
score = 10;
|
|
36
36
|
return { score, weight: WEIGHTS.freshness, detail: `Last push ${Math.round(daysAgo)} days ago` };
|
|
37
37
|
}
|
|
38
|
-
export function calculateSecurityScore(alertCounts) {
|
|
38
|
+
export function calculateSecurityScore(alertCounts, openssfScore) {
|
|
39
39
|
const { critical, high, medium, low } = alertCounts;
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
40
|
+
// openSsfScore viene calcolato prendendo i punteggi più recenti di security-scorecards
|
|
41
|
+
let scoreDependaBot = 100;
|
|
42
|
+
scoreDependaBot -= critical * 25;
|
|
43
|
+
scoreDependaBot -= high * 15;
|
|
44
|
+
scoreDependaBot -= medium * 5;
|
|
45
|
+
scoreDependaBot -= low * 2;
|
|
46
|
+
scoreDependaBot = Math.max(0, scoreDependaBot);
|
|
47
|
+
let score = scoreDependaBot;
|
|
48
|
+
if (openssfScore != undefined) {
|
|
49
|
+
score = Math.round(scoreDependaBot * 0.6 + openssfScore * 0.4);
|
|
50
|
+
}
|
|
51
|
+
return {
|
|
52
|
+
score: score,
|
|
53
|
+
weight: WEIGHTS.security,
|
|
54
|
+
detail: `Alerts: ${critical} critical, ${high} high, ${medium} medium, ${low} low${openssfScore !== undefined ? ` | OpenSSF: ${openssfScore}/100` : ''}`
|
|
55
|
+
};
|
|
47
56
|
}
|
|
48
57
|
export function calculateCommunityScore(openIssues, forks) {
|
|
49
58
|
let score = 50;
|
|
@@ -75,6 +84,22 @@ export function calculateHealthScore(repo, categories) {
|
|
|
75
84
|
const suggestions = values
|
|
76
85
|
.filter(cat => cat.score < 50)
|
|
77
86
|
.map(cat => `Improve ${cat.detail} (score: ${cat.score}/100)`);
|
|
78
|
-
return { repo, score, grade, breakdown: categories, suggestions, checkedAt: new Date().toISOString() };
|
|
87
|
+
return { repo, score, grade, breakdown: categories, suggestions, checkedAt: new Date().toISOString(), gradeMeaning: gradeToMeaning(grade) };
|
|
88
|
+
}
|
|
89
|
+
function gradeToMeaning(grade) {
|
|
90
|
+
switch (grade) {
|
|
91
|
+
case "A":
|
|
92
|
+
return "Excellent: The repository is actively maintained, secure, and has a strong community presence.";
|
|
93
|
+
case "B":
|
|
94
|
+
return "Good: The repository is well-maintained but may have minor areas for improvement.";
|
|
95
|
+
case "C":
|
|
96
|
+
return "Average: The repository needs significant improvements to be considered healthy.";
|
|
97
|
+
case "D":
|
|
98
|
+
return "Poor: The repository is not well-maintained and requires immediate attention.";
|
|
99
|
+
case "F":
|
|
100
|
+
return "Critical: The repository is abandoned or has critical issues that need to be addressed.";
|
|
101
|
+
default:
|
|
102
|
+
return "Unknown";
|
|
103
|
+
}
|
|
79
104
|
}
|
|
80
105
|
//# sourceMappingURL=health-score.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"health-score.js","sourceRoot":"","sources":["../../src/scoring/health-score.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"health-score.js","sourceRoot":"","sources":["../../src/scoring/health-score.ts"],"names":[],"mappings":"AAGA,MAAM,OAAO,GAAG;IACZ,EAAE,EAAE,IAAI;IACR,SAAS,EAAE,IAAI;IACf,SAAS,EAAE,IAAI;IACf,QAAQ,EAAE,IAAI;IACd,WAAW,EAAE,IAAI;CACX,CAAC;AAEX,MAAM,UAAU,YAAY,CAAC,KAAa;IACtC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC;IAC5B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC;IAC5B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC;IAC5B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC;IAC5B,OAAO,GAAG,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAA0C;IACvE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;IAC1B,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;IACnE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,KAAK,cAAc,EAAE,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACpD,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACpF,IAAI,KAAa,CAAC;IAClB,IAAI,OAAO,GAAG,CAAC;QAAE,KAAK,GAAG,GAAG,CAAC;SACxB,IAAI,OAAO,GAAG,EAAE;QAAE,KAAK,GAAG,EAAE,CAAC;SAC7B,IAAI,OAAO,GAAG,EAAE;QAAE,KAAK,GAAG,EAAE,CAAC;;QAC7B,KAAK,GAAG,EAAE,CAAC;IAChB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,WAA4E,EAAE,YAAqB;IACtI,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC;IAEpD,uFAAuF;IACvF,IAAI,eAAe,GAAG,GAAG,CAAC;IAE1B,eAAe,IAAI,QAAQ,GAAG,EAAE,CAAC;IACjC,eAAe,IAAI,IAAI,GAAG,EAAE,CAAC;IAC7B,eAAe,IAAI,MAAM,GAAG,CAAC,CAAC;IAC9B,eAAe,IAAI,GAAG,GAAG,CAAC,CAAC;IAC3B,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IAE/C,IAAI,KAAK,GAAG,eAAe,CAAC;IAC5B,IAAI,YAAY,IAAI,SAAS,EAAE,CAAC;QAC5B,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,GAAG,GAAG,YAAY,GAAG,GAAG,CAAC,CAAA;IAClE,CAAC;IAED,OAAO;QACH,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,OAAO,CAAC,QAAQ;QACxB,MAAM,EAAE,WAAW,QAAQ,cAAc,IAAI,UAAU,MAAM,YAAY,GAAG,OAAO,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,YAAY,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;KAC3J,CAAC;AAEN,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,UAAkB,EAAE,KAAa;IACrE,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,KAAK,GAAG,EAAE;QAAE,KAAK,IAAI,EAAE,CAAC;SACvB,IAAI,KAAK,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;IAChC,IAAI,UAAU,GAAG,EAAE;QAAE,KAAK,IAAI,EAAE,CAAC;SAC5B,IAAI,UAAU,GAAG,EAAE;QAAE,KAAK,IAAI,EAAE,CAAC;IACtC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,UAAU,iBAAiB,KAAK,QAAQ,EAAE,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,UAAmB,EAAE,cAAuB,EAAE,QAAiB;IACrG,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,UAAU;QAAE,KAAK,IAAI,EAAE,CAAC;IAC5B,IAAI,cAAc;QAAE,KAAK,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,QAAQ;QAAE,KAAK,IAAI,EAAE,CAAC;IAC3B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,UAAU,kBAAkB,cAAc,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC1I,CAAC;AAED,MAAM,UAAU,oBAAoB,CAChC,IAAY,EACZ,UAAyC;IAEzC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,WAAW,GAAG,MAAM;SACrB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;SAC7B,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,GAAG,CAAC,MAAM,YAAY,GAAG,CAAC,KAAK,OAAO,CAAC,CAAC;IACnE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;AAChJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAY;IAChC,QAAQ,KAAK,EAAE,CAAC;QACZ,KAAK,GAAG;YACJ,OAAO,gGAAgG,CAAC;QAC5G,KAAK,GAAG;YACJ,OAAO,mFAAmF,CAAC;QAC/F,KAAK,GAAG;YACJ,OAAO,kFAAkF,CAAC;QAC9F,KAAK,GAAG;YACJ,OAAO,+EAA+E,CAAC;QAC3F,KAAK,GAAG;YACJ,OAAO,yFAAyF,CAAC;QACrG;YACI,OAAO,SAAS,CAAC;IACzB,CAAC;AACL,CAAC"}
|
|
@@ -94,6 +94,45 @@ describe('calculateSecurityScore', () => {
|
|
|
94
94
|
detail: 'Alerts: 5 critical, 0 high, 0 medium, 0 low'
|
|
95
95
|
});
|
|
96
96
|
});
|
|
97
|
+
it('should blend dependabot (60%) and openssf (40%) when openssfScore is provided', () => {
|
|
98
|
+
// dependabot score: 100 - (1 * 25) = 75
|
|
99
|
+
// openssfScore: 80
|
|
100
|
+
// total: 75 * 0.6 + 80 * 0.4 = 45 + 32 = 77
|
|
101
|
+
expect(calculateSecurityScore({
|
|
102
|
+
critical: 1,
|
|
103
|
+
high: 0,
|
|
104
|
+
medium: 0,
|
|
105
|
+
low: 0
|
|
106
|
+
}, 80)).toEqual({
|
|
107
|
+
score: 77,
|
|
108
|
+
weight: 0.25,
|
|
109
|
+
detail: 'Alerts: 1 critical, 0 high, 0 medium, 0 low | OpenSSF: 80/100'
|
|
110
|
+
});
|
|
111
|
+
});
|
|
112
|
+
it('should mitigate a low dependabot score if openssf is high', () => {
|
|
113
|
+
expect(calculateSecurityScore({
|
|
114
|
+
critical: 3, // -75, score 25
|
|
115
|
+
high: 0,
|
|
116
|
+
medium: 0,
|
|
117
|
+
low: 0
|
|
118
|
+
}, 90)).toEqual({
|
|
119
|
+
score: 51, // 25 * 0.6 + 90 * 0.4 = 15 + 36 = 51
|
|
120
|
+
weight: 0.25,
|
|
121
|
+
detail: 'Alerts: 3 critical, 0 high, 0 medium, 0 low | OpenSSF: 90/100'
|
|
122
|
+
});
|
|
123
|
+
});
|
|
124
|
+
it('should behave exactly as before if openssfScore is explicitly undefined', () => {
|
|
125
|
+
expect(calculateSecurityScore({
|
|
126
|
+
critical: 1,
|
|
127
|
+
high: 0,
|
|
128
|
+
medium: 0,
|
|
129
|
+
low: 0
|
|
130
|
+
}, undefined)).toEqual({
|
|
131
|
+
score: 75,
|
|
132
|
+
weight: 0.25,
|
|
133
|
+
detail: 'Alerts: 1 critical, 0 high, 0 medium, 0 low'
|
|
134
|
+
});
|
|
135
|
+
});
|
|
97
136
|
});
|
|
98
137
|
describe('calculateFreshnessScore', () => {
|
|
99
138
|
it('should return 100 for push within 7 days', () => {
|
|
@@ -193,7 +232,8 @@ describe('calculateHealthScore', () => {
|
|
|
193
232
|
grade: 'A',
|
|
194
233
|
breakdown: expect.any(Object),
|
|
195
234
|
suggestions: [],
|
|
196
|
-
checkedAt: expect.any(String)
|
|
235
|
+
checkedAt: expect.any(String),
|
|
236
|
+
gradeMeaning: expect.any(String)
|
|
197
237
|
});
|
|
198
238
|
});
|
|
199
239
|
it('should generate suggestions for categories with score < 50', () => {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"health-score.test.js","sourceRoot":"","sources":["../../src/scoring/health-score.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACH,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACvB,MAAM,mBAAmB,CAAC;AAE3B,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC1B,gCAAgC;IAChC,oCAAoC;IAEpC,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBACrB,UAAU,EAAE,SAAS;aACxB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACT,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,iBAAiB;SAC5B,CAAC,CAAA;IACN,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBACrB,UAAU,EAAE,SAAS;aACxB,EAAE;gBACC,UAAU,EAAE,SAAS;aACxB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACT,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,iBAAiB;SAC5B,CAAC,CAAA;IACN,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACjC,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,iBAAiB;SAC5B,CAAC,CAAA;IACN,CAAC,CAAC,CAAA;AACN,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,sBAAsB,CAAC;YAC1B,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;SACT,CAAC,CAAC,CAAC,OAAO,CAAC;YACR,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,6CAA6C;SACxD,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,sBAAsB,CAAC;YAC1B,QAAQ,EAAE,CAAC,EAAE,MAAM;YACnB,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;SACT,CAAC,CAAC,CAAC,OAAO,CAAC;YACR,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,6CAA6C;SACxD,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,sBAAsB,CAAC;YAC1B,QAAQ,EAAE,CAAC,EAAE,MAAM;YACnB,IAAI,EAAE,CAAC,EAAE,MAAM;YACf,MAAM,EAAE,CAAC,EAAE,MAAM;YACjB,GAAG,EAAE,CAAC,CAAC,KAAK;SACf,CAAC,CAAC,CAAC,OAAO,CAAC;YACR,KAAK,EAAE,EAAE,EAAE,8BAA8B;YACzC,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,6CAA6C;SACxD,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,sBAAsB,CAAC;YAC1B,QAAQ,EAAE,CAAC,EAAE,OAAO;YACpB,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;SACT,CAAC,CAAC,CAAC,OAAO,CAAC;YACR,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,6CAA6C;SACxD,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAChD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1E,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,sBAAsB;SACjC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAChD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3E,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,uBAAuB;SAClC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAChD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3E,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,uBAAuB;SAClC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACpD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5E,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,wBAAwB;SACnC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,wBAAwB;SACnC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,KAAK,EAAE,EAAE,EAAE,UAAU;YACrB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,wBAAwB;SACnC,CAAC,CAAC;QACH,MAAM,CAAC,uBAAuB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3C,KAAK,EAAE,EAAE,EAAE,UAAU;YACrB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,yBAAyB;SACpC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,uBAAuB,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3C,KAAK,EAAE,EAAE,EAAE,UAAU;YACrB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,yBAAyB;SACpC,CAAC,CAAC;QACH,MAAM,CAAC,uBAAuB,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3C,KAAK,EAAE,EAAE,EAAE,UAAU;YACrB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,yBAAyB;SACpC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,yBAAyB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YACzD,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,gDAAgD;SAC3D,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,yBAAyB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1D,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,mDAAmD;SAC9D,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACtD,MAAM,MAAM,GAAG,oBAAoB,CAAC,WAAW,EAAE;YAC7C,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE;YAC3D,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,uBAAuB,EAAE;YACvE,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,0BAA0B,EAAE;YAC1E,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE;YACpE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE;SAC9D,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACnB,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,GAAG;YACV,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7B,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"health-score.test.js","sourceRoot":"","sources":["../../src/scoring/health-score.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACH,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACvB,MAAM,mBAAmB,CAAC;AAE3B,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC1B,gCAAgC;IAChC,oCAAoC;IAEpC,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBACrB,UAAU,EAAE,SAAS;aACxB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACT,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,iBAAiB;SAC5B,CAAC,CAAA;IACN,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBACrB,UAAU,EAAE,SAAS;aACxB,EAAE;gBACC,UAAU,EAAE,SAAS;aACxB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACT,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,iBAAiB;SAC5B,CAAC,CAAA;IACN,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACjC,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,iBAAiB;SAC5B,CAAC,CAAA;IACN,CAAC,CAAC,CAAA;AACN,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,sBAAsB,CAAC;YAC1B,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;SACT,CAAC,CAAC,CAAC,OAAO,CAAC;YACR,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,6CAA6C;SACxD,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,sBAAsB,CAAC;YAC1B,QAAQ,EAAE,CAAC,EAAE,MAAM;YACnB,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;SACT,CAAC,CAAC,CAAC,OAAO,CAAC;YACR,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,6CAA6C;SACxD,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,sBAAsB,CAAC;YAC1B,QAAQ,EAAE,CAAC,EAAE,MAAM;YACnB,IAAI,EAAE,CAAC,EAAE,MAAM;YACf,MAAM,EAAE,CAAC,EAAE,MAAM;YACjB,GAAG,EAAE,CAAC,CAAC,KAAK;SACf,CAAC,CAAC,CAAC,OAAO,CAAC;YACR,KAAK,EAAE,EAAE,EAAE,8BAA8B;YACzC,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,6CAA6C;SACxD,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,sBAAsB,CAAC;YAC1B,QAAQ,EAAE,CAAC,EAAE,OAAO;YACpB,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;SACT,CAAC,CAAC,CAAC,OAAO,CAAC;YACR,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,6CAA6C;SACxD,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACrF,wCAAwC;QACxC,mBAAmB;QACnB,4CAA4C;QAC5C,MAAM,CAAC,sBAAsB,CAAC;YAC1B,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;SACT,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACZ,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,+DAA+D;SAC1E,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,sBAAsB,CAAC;YAC1B,QAAQ,EAAE,CAAC,EAAE,gBAAgB;YAC7B,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;SACT,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACZ,KAAK,EAAE,EAAE,EAAE,qCAAqC;YAChD,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,+DAA+D;SAC1E,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QAC/E,MAAM,CAAC,sBAAsB,CAAC;YAC1B,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;SACT,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YACnB,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,6CAA6C;SACxD,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAChD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1E,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,sBAAsB;SACjC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAChD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3E,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,uBAAuB;SAClC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAChD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3E,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,uBAAuB;SAClC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACpD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5E,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,wBAAwB;SACnC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,wBAAwB;SACnC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,KAAK,EAAE,EAAE,EAAE,UAAU;YACrB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,wBAAwB;SACnC,CAAC,CAAC;QACH,MAAM,CAAC,uBAAuB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3C,KAAK,EAAE,EAAE,EAAE,UAAU;YACrB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,yBAAyB;SACpC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,uBAAuB,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3C,KAAK,EAAE,EAAE,EAAE,UAAU;YACrB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,yBAAyB;SACpC,CAAC,CAAC;QACH,MAAM,CAAC,uBAAuB,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3C,KAAK,EAAE,EAAE,EAAE,UAAU;YACrB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,yBAAyB;SACpC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,yBAAyB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YACzD,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,gDAAgD;SAC3D,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,yBAAyB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1D,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,mDAAmD;SAC9D,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACtD,MAAM,MAAM,GAAG,oBAAoB,CAAC,WAAW,EAAE;YAC7C,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE;YAC3D,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,uBAAuB,EAAE;YACvE,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,0BAA0B,EAAE;YAC1E,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE;YACpE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE;SAC9D,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACnB,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,GAAG;YACV,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7B,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7B,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;SACnC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QAClE,MAAM,MAAM,GAAG,oBAAoB,CAAC,WAAW,EAAE;YAC7C,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE;YACzD,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,sBAAsB,EAAE;SAC1E,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC;YAC/B,wCAAwC;SAC3C,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1,4 @@
|
|
|
1
|
+
import { OpenSSFCheck, OpenSSFResult } from "./types.js";
|
|
2
|
+
export declare function fetchOpenSSFScore(owner: string, repo: string): Promise<OpenSSFResult | null>;
|
|
3
|
+
export declare function calculateOpenSSFResult(checks: OpenSSFCheck[]): OpenSSFResult | null;
|
|
4
|
+
//# sourceMappingURL=openssf-client.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"openssf-client.d.ts","sourceRoot":"","sources":["../../src/security/openssf-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAIzD,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAmBlG;AAID,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,aAAa,GAAG,IAAI,CAenF"}
|
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
const BASE_URL = "https://api.securityscorecards.dev/projects/github.com";
|
|
2
|
+
export async function fetchOpenSSFScore(owner, repo) {
|
|
3
|
+
try {
|
|
4
|
+
const response = await fetch(`${BASE_URL}/${owner}/${repo}`, {
|
|
5
|
+
signal: AbortSignal.timeout(5000)
|
|
6
|
+
});
|
|
7
|
+
if (!response.ok) {
|
|
8
|
+
return null;
|
|
9
|
+
}
|
|
10
|
+
const data = await response.json();
|
|
11
|
+
const checks = data.checks;
|
|
12
|
+
return calculateOpenSSFResult(checks);
|
|
13
|
+
}
|
|
14
|
+
catch (error) {
|
|
15
|
+
console.debug("Error fetching OpenSSF score:", error);
|
|
16
|
+
return null;
|
|
17
|
+
}
|
|
18
|
+
}
|
|
19
|
+
const SECURITY_CHECKS = new Set(["Binary-Artifacts", "Fuzzing", "Dependency-Update-Tool", "Branch-Protection", "Code-Review", "Dangerous-Workflow", "Pinned-Dependencies", "SAST", "Security-Policy", "Signed-Releases", "Token-Permissions", "Vulnerabilities"]);
|
|
20
|
+
export function calculateOpenSSFResult(checks) {
|
|
21
|
+
const securityChecks = checks.filter(check => SECURITY_CHECKS.has(check.name));
|
|
22
|
+
const applicableChecks = securityChecks.filter(c => c.score !== -1); // solo quelli applicabili
|
|
23
|
+
if (applicableChecks.length === 0) {
|
|
24
|
+
return null;
|
|
25
|
+
}
|
|
26
|
+
const score = Math.round((applicableChecks.reduce((sum, item) => sum + item.score, 0) / applicableChecks.length) * 10);
|
|
27
|
+
return {
|
|
28
|
+
score: score,
|
|
29
|
+
checksUsed: applicableChecks.length,
|
|
30
|
+
checksTotal: securityChecks.length,
|
|
31
|
+
details: `${applicableChecks.length}/${securityChecks.length} security checks, score ${score}/100`
|
|
32
|
+
};
|
|
33
|
+
}
|
|
34
|
+
//# sourceMappingURL=openssf-client.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"openssf-client.js","sourceRoot":"","sources":["../../src/security/openssf-client.ts"],"names":[],"mappings":"AAEA,MAAM,QAAQ,GAAG,wDAAwD,CAAC;AAE1E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAa,EAAE,IAAY;IAC/D,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,IAAI,KAAK,IAAI,IAAI,EAAE,EAAE;YACzD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SACpC,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,MAAM,GAAmB,IAAI,CAAC,MAAM,CAAC;QAE3C,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAG1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,SAAS,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,aAAa,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAElQ,MAAM,UAAU,sBAAsB,CAAC,MAAsB;IACzD,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,MAAM,gBAAgB,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA,0BAA0B;IAE9F,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAEvH,OAAO;QACH,KAAK,EAAE,KAAK;QACZ,UAAU,EAAE,gBAAgB,CAAC,MAAM;QACnC,WAAW,EAAE,cAAc,CAAC,MAAM;QAClC,OAAO,EAAE,GAAG,gBAAgB,CAAC,MAAM,IAAI,cAAc,CAAC,MAAM,2BAA2B,KAAK,MAAM;KACrG,CAAA;AACL,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"openssf-client.test.d.ts","sourceRoot":"","sources":["../../src/security/openssf-client.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,70 @@
|
|
|
1
|
+
import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
|
|
2
|
+
import { calculateOpenSSFResult, fetchOpenSSFScore } from './openssf-client.js';
|
|
3
|
+
describe('calculateOpenSSFResult', () => {
|
|
4
|
+
it('calcola correttamente lo score con check misti', () => {
|
|
5
|
+
const mockChecks = [
|
|
6
|
+
{ name: "Branch-Protection", score: 8, reason: "found", documentation: { url: "https://..." } },
|
|
7
|
+
{ name: "SAST", score: 6, reason: "found", documentation: { url: "https://..." } },
|
|
8
|
+
{ name: "Vulnerabilities", score: -1, reason: "not applicable", documentation: { url: "https://..." } },
|
|
9
|
+
{ name: "CI-Tests", score: 10, reason: "found", documentation: { url: "https://..." } },
|
|
10
|
+
];
|
|
11
|
+
const result = calculateOpenSSFResult(mockChecks);
|
|
12
|
+
expect(result).not.toBeNull();
|
|
13
|
+
expect(result?.checksTotal).toBe(3);
|
|
14
|
+
expect(result?.checksUsed).toBe(2);
|
|
15
|
+
expect(result?.score).toBe(70);
|
|
16
|
+
expect(result?.details).toBe('2/3 security checks, score 70/100');
|
|
17
|
+
});
|
|
18
|
+
it('ritorna null se tutti i security check hanno score -1', () => {
|
|
19
|
+
const mockChecks = [
|
|
20
|
+
{ name: "Branch-Protection", score: -1, reason: "not applicable", documentation: { url: "https://..." } },
|
|
21
|
+
{ name: "SAST", score: -1, reason: "not applicable", documentation: { url: "https://..." } },
|
|
22
|
+
];
|
|
23
|
+
const result = calculateOpenSSFResult(mockChecks);
|
|
24
|
+
expect(result).toBeNull();
|
|
25
|
+
});
|
|
26
|
+
it('ritorna null se non ci sono check security nel set', () => {
|
|
27
|
+
const mockChecks = [
|
|
28
|
+
{ name: "CI-Tests", score: 10, reason: "found", documentation: { url: "https://..." } },
|
|
29
|
+
{ name: "License", score: 10, reason: "found", documentation: { url: "https://..." } },
|
|
30
|
+
{ name: "Maintained", score: 10, reason: "found", documentation: { url: "https://..." } },
|
|
31
|
+
];
|
|
32
|
+
const result = calculateOpenSSFResult(mockChecks);
|
|
33
|
+
expect(result).toBeNull();
|
|
34
|
+
});
|
|
35
|
+
it('ritorna null per un array vuoto', () => {
|
|
36
|
+
const result = calculateOpenSSFResult([]);
|
|
37
|
+
expect(result).toBeNull();
|
|
38
|
+
});
|
|
39
|
+
});
|
|
40
|
+
describe('fetchOpenSSFScore', () => {
|
|
41
|
+
let fetchSpy;
|
|
42
|
+
beforeEach(() => {
|
|
43
|
+
fetchSpy = vi.spyOn(global, 'fetch');
|
|
44
|
+
});
|
|
45
|
+
afterEach(() => {
|
|
46
|
+
fetchSpy.mockRestore();
|
|
47
|
+
});
|
|
48
|
+
it('ritorna OpenSSFResult in caso di successo', async () => {
|
|
49
|
+
const mockChecks = [
|
|
50
|
+
{ name: "Branch-Protection", score: 10, reason: "found", documentation: { url: "https://..." } }
|
|
51
|
+
];
|
|
52
|
+
fetchSpy.mockResolvedValue(new Response(JSON.stringify({ checks: mockChecks }), { status: 200 }));
|
|
53
|
+
const result = await fetchOpenSSFScore('owner', 'repo');
|
|
54
|
+
expect(result).not.toBeNull();
|
|
55
|
+
expect(result?.score).toBe(100);
|
|
56
|
+
expect(result?.checksTotal).toBe(1);
|
|
57
|
+
expect(result?.checksUsed).toBe(1);
|
|
58
|
+
});
|
|
59
|
+
it('ritorna null in caso di 404', async () => {
|
|
60
|
+
fetchSpy.mockResolvedValue(new Response(null, { status: 404 }));
|
|
61
|
+
const result = await fetchOpenSSFScore('owner', 'repo');
|
|
62
|
+
expect(result).toBeNull();
|
|
63
|
+
});
|
|
64
|
+
it('ritorna null in caso di timeout (errore in fetch)', async () => {
|
|
65
|
+
fetchSpy.mockRejectedValue(new DOMException("Timeout", "AbortError"));
|
|
66
|
+
const result = await fetchOpenSSFScore('owner', 'repo');
|
|
67
|
+
expect(result).toBeNull();
|
|
68
|
+
});
|
|
69
|
+
});
|
|
70
|
+
//# sourceMappingURL=openssf-client.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"openssf-client.test.js","sourceRoot":"","sources":["../../src/security/openssf-client.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGhF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACtD,MAAM,UAAU,GAAmB;YAC/B,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE;YAC/F,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE;YAClF,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE;YACvG,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE;SAC1F,CAAC;QAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;QAElD,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC7D,MAAM,UAAU,GAAmB;YAC/B,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE;YACzG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE;SAC/F,CAAC;QAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;QAElD,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC1D,MAAM,UAAU,GAAmB;YAC/B,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE;YACvF,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE;YACtF,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE;SAC5F,CAAC;QAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;QAElD,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACvC,MAAM,MAAM,GAAG,sBAAsB,CAAC,EAAE,CAAC,CAAC;QAE1C,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IAC/B,IAAI,QAAqC,CAAC;IAE1C,UAAU,CAAC,GAAG,EAAE;QACZ,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACX,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,UAAU,GAAG;YACf,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE;SACnG,CAAC;QACF,QAAQ,CAAC,iBAAiB,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAElG,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAExD,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QACzC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAEhE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAExD,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QAC/D,QAAQ,CAAC,iBAAiB,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;QAEtE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAExD,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
export type OpenSSFCheck = {
|
|
2
|
+
name: string;
|
|
3
|
+
score: number;
|
|
4
|
+
reason: string;
|
|
5
|
+
documentation: {
|
|
6
|
+
url: string;
|
|
7
|
+
};
|
|
8
|
+
};
|
|
9
|
+
export type OpenSSFResult = {
|
|
10
|
+
score: number;
|
|
11
|
+
checksUsed: number;
|
|
12
|
+
checksTotal: number;
|
|
13
|
+
details: string;
|
|
14
|
+
};
|
|
15
|
+
//# sourceMappingURL=types.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/security/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACnB,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/security/types.ts"],"names":[],"mappings":""}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"get-health-score.d.ts","sourceRoot":"","sources":["../../src/tools/get-health-score.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;
|
|
1
|
+
{"version":3,"file":"get-health-score.d.ts","sourceRoot":"","sources":["../../src/tools/get-health-score.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAiBpE,wBAAsB,qBAAqB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;;;;;GA0C3F;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAS9D"}
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
import { z } from "zod";
|
|
2
2
|
import { getOctokit } from "../github/client.js";
|
|
3
|
+
import { fetchOpenSSFScore } from "../security/openssf-client.js";
|
|
3
4
|
import { calculateCiScore, calculateFreshnessScore, calculateSecurityScore, calculateCommunityScore, calculateMaintenanceScore, calculateHealthScore, } from "../scoring/health-score.js";
|
|
4
5
|
const inputSchema = z.object({
|
|
5
6
|
owner: z.string().describe("GitHub repository owner"),
|
|
@@ -7,9 +8,10 @@ const inputSchema = z.object({
|
|
|
7
8
|
});
|
|
8
9
|
export async function executeGetHealthScore({ owner, repo }) {
|
|
9
10
|
const octokit = getOctokit();
|
|
10
|
-
const [repoData, runsData] = await Promise.all([
|
|
11
|
+
const [repoData, runsData, openssfResult] = await Promise.all([
|
|
11
12
|
octokit.repos.get({ owner, repo }),
|
|
12
13
|
octokit.actions.listWorkflowRunsForRepo({ owner, repo, per_page: 10 }),
|
|
14
|
+
fetchOpenSSFScore(owner, repo)
|
|
13
15
|
]);
|
|
14
16
|
let alertCounts = { critical: 0, high: 0, medium: 0, low: 0 };
|
|
15
17
|
try {
|
|
@@ -28,7 +30,7 @@ export async function executeGetHealthScore({ owner, repo }) {
|
|
|
28
30
|
const categories = {
|
|
29
31
|
ci: calculateCiScore(runsData.data.workflow_runs),
|
|
30
32
|
freshness: calculateFreshnessScore(repoData.data.pushed_at ?? new Date().toISOString()),
|
|
31
|
-
security: calculateSecurityScore(alertCounts),
|
|
33
|
+
security: calculateSecurityScore(alertCounts, openssfResult?.score),
|
|
32
34
|
community: calculateCommunityScore(repoData.data.open_issues_count, repoData.data.forks_count),
|
|
33
35
|
maintenance: calculateMaintenanceScore(repoData.data.license !== null, repoData.data.description !== null, repoData.data.archived),
|
|
34
36
|
};
|
|
@@ -42,7 +44,7 @@ export async function executeGetHealthScore({ owner, repo }) {
|
|
|
42
44
|
}
|
|
43
45
|
export function registerGetHealthScore(server) {
|
|
44
46
|
server.registerTool("get_health_score", {
|
|
45
|
-
description: "Calculate a 0-100 health score for a GitHub repository with grade (A-F), category breakdown, and improvement suggestions",
|
|
47
|
+
description: "Calculate a 0-100 health score for a GitHub repository with grade (A-F), category breakdown (CI, freshness, security, community, maintenance), and improvement suggestions. Security score blends Dependabot alerts (60%) with OpenSSF Scorecard checks (40%) when available — highlight the OpenSSF score in your response if present in the security detail.",
|
|
46
48
|
inputSchema,
|
|
47
49
|
}, executeGetHealthScore);
|
|
48
50
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"get-health-score.js","sourceRoot":"","sources":["../../src/tools/get-health-score.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EACH,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,GACvB,MAAM,4BAA4B,CAAC;AAEpC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IACrD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;CACtD,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAmC;IACxF,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAE7B,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;
|
|
1
|
+
{"version":3,"file":"get-health-score.js","sourceRoot":"","sources":["../../src/tools/get-health-score.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EACH,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,GACvB,MAAM,4BAA4B,CAAC;AAEpC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IACrD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;CACtD,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAmC;IACxF,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAE7B,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1D,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAClC,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACtE,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC;KACjC,CAAC,CAAC;IAEH,IAAI,WAAW,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAC9D,IAAI,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,KAAK,CAAC,iBAAiB,CAAC,QAAoC,CAAC;gBACzE,IAAI,GAAG,IAAI,WAAW;oBAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,CAAC;QACL,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACL,mDAAmD;IACvD,CAAC;IAED,MAAM,UAAU,GAAG;QACf,EAAE,EAAE,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAoB,CAAC;QACxD,SAAS,EAAE,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACvF,QAAQ,EAAE,sBAAsB,CAAC,WAAW,EAAE,aAAa,EAAE,KAAK,CAAC;QACnE,SAAS,EAAE,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC;QAC9F,WAAW,EAAE,yBAAyB,CAClC,QAAQ,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,EAC9B,QAAQ,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,EAClC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CACzB;KACJ,CAAC;IAEF,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;IAEpE,OAAO;QACH,OAAO,EAAE,CAAC;gBACN,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;aACxC,CAAC;KACL,CAAC;AACN,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAiB;IACpD,MAAM,CAAC,YAAY,CACf,kBAAkB,EAClB;QACI,WAAW,EAAE,gWAAgW;QAC7W,WAAW;KACd,EACD,qBAAqB,CACxB,CAAC;AACN,CAAC"}
|
|
@@ -1,7 +1,9 @@
|
|
|
1
1
|
import { describe, it, expect, vi, beforeEach } from 'vitest';
|
|
2
2
|
import { getOctokit } from '../github/client.js';
|
|
3
3
|
import { executeGetHealthScore } from './get-health-score.js';
|
|
4
|
+
import { fetchOpenSSFScore } from '../security/openssf-client.js';
|
|
4
5
|
vi.mock('../github/client.js');
|
|
6
|
+
vi.mock('../security/openssf-client.js');
|
|
5
7
|
describe('executeGetHealthScore', () => {
|
|
6
8
|
beforeEach(() => {
|
|
7
9
|
vi.resetAllMocks();
|
|
@@ -89,5 +91,40 @@ describe('executeGetHealthScore', () => {
|
|
|
89
91
|
.rejects
|
|
90
92
|
.toThrow('API Error');
|
|
91
93
|
});
|
|
94
|
+
it('should include OpenSSF score when available', async () => {
|
|
95
|
+
const mockReposGet = vi.fn().mockResolvedValue({
|
|
96
|
+
data: { pushed_at: '2023-10-01T00:00:00Z', open_issues_count: 0, forks_count: 0, license: { spdx_id: 'MIT' }, description: 'test', archived: false }
|
|
97
|
+
});
|
|
98
|
+
const mockListRuns = vi.fn().mockResolvedValue({ data: { workflow_runs: [] } });
|
|
99
|
+
const mockListAlerts = vi.fn().mockResolvedValue({ data: [] });
|
|
100
|
+
vi.mocked(getOctokit).mockReturnValue({
|
|
101
|
+
repos: { get: mockReposGet },
|
|
102
|
+
actions: { listWorkflowRunsForRepo: mockListRuns },
|
|
103
|
+
dependabot: { listAlertsForRepo: mockListAlerts }
|
|
104
|
+
});
|
|
105
|
+
vi.mocked(fetchOpenSSFScore).mockResolvedValue({
|
|
106
|
+
score: 80, checksUsed: 8, checksTotal: 10, details: "8/10 security checks, score 80/100"
|
|
107
|
+
});
|
|
108
|
+
const result = await executeGetHealthScore({ owner: 'test', repo: 'repo' });
|
|
109
|
+
const parsedText = JSON.parse(result.content[0].text);
|
|
110
|
+
expect(parsedText.breakdown.security.detail).toContain('OpenSSF');
|
|
111
|
+
});
|
|
112
|
+
it('should fallback to Dependabot only when OpenSSF is null', async () => {
|
|
113
|
+
const mockReposGet = vi.fn().mockResolvedValue({
|
|
114
|
+
data: { pushed_at: '2023-10-01T00:00:00Z', open_issues_count: 0, forks_count: 0, license: { spdx_id: 'MIT' }, description: 'test', archived: false }
|
|
115
|
+
});
|
|
116
|
+
const mockListRuns = vi.fn().mockResolvedValue({ data: { workflow_runs: [] } });
|
|
117
|
+
const mockListAlerts = vi.fn().mockResolvedValue({ data: [] });
|
|
118
|
+
vi.mocked(getOctokit).mockReturnValue({
|
|
119
|
+
repos: { get: mockReposGet },
|
|
120
|
+
actions: { listWorkflowRunsForRepo: mockListRuns },
|
|
121
|
+
dependabot: { listAlertsForRepo: mockListAlerts }
|
|
122
|
+
});
|
|
123
|
+
vi.mocked(fetchOpenSSFScore).mockResolvedValue(null);
|
|
124
|
+
const result = await executeGetHealthScore({ owner: 'test', repo: 'repo' });
|
|
125
|
+
const parsedText = JSON.parse(result.content[0].text);
|
|
126
|
+
expect(parsedText.breakdown.security.detail).not.toContain('OpenSSF');
|
|
127
|
+
expect(parsedText.breakdown.security.score).toBe(100);
|
|
128
|
+
});
|
|
92
129
|
});
|
|
93
130
|
//# sourceMappingURL=get-health-score.test.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"get-health-score.test.js","sourceRoot":"","sources":["../../src/tools/get-health-score.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;
|
|
1
|
+
{"version":3,"file":"get-health-score.test.js","sourceRoot":"","sources":["../../src/tools/get-health-score.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAElE,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAC/B,EAAE,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;AAEzC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACnC,UAAU,CAAC,GAAG,EAAE;QACZ,EAAE,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC3C,IAAI,EAAE;gBACF,SAAS,EAAE,sBAAsB;gBACjC,iBAAiB,EAAE,CAAC;gBACpB,WAAW,EAAE,EAAE;gBACf,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC3B,WAAW,EAAE,WAAW;gBACxB,QAAQ,EAAE,KAAK;aAClB;SACJ,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC3C,IAAI,EAAE;gBACF,aAAa,EAAE,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;aAC7C;SACJ,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC7C,IAAI,EAAE;gBACF,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;gBAC9D,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;aAC7D;SACJ,CAAC,CAAC;QAEH,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC;YAClC,KAAK,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE;YAC5B,OAAO,EAAE,EAAE,uBAAuB,EAAE,YAAY,EAAE;YAClD,UAAU,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE;SAC7C,CAAC,CAAC;QAEV,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAE5E,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3E,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAE7E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE5C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC9C,oCAAoC;QACpC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACrE,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC3C,IAAI,EAAE;gBACF,SAAS,EAAE,sBAAsB;gBACjC,iBAAiB,EAAE,CAAC;gBACpB,WAAW,EAAE,EAAE;gBACf,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC3B,WAAW,EAAE,WAAW;gBACxB,QAAQ,EAAE,KAAK;aAClB;SACJ,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC3C,IAAI,EAAE;gBACF,aAAa,EAAE,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;aAC7C;SACJ,CAAC,CAAC;QAEH,wCAAwC;QACxC,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QAEzE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC;YAClC,KAAK,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE;YAC5B,OAAO,EAAE,EAAE,uBAAuB,EAAE,YAAY,EAAE;YAClD,UAAU,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE;SAC7C,CAAC,CAAC;QAEV,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAE5E,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1C,iDAAiD;QACjD,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACrE,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QACvE,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEhF,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC;YAClC,KAAK,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE;YAC5B,OAAO,EAAE,EAAE,uBAAuB,EAAE,YAAY,EAAE;YAClD,UAAU,EAAE,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;SACtC,CAAC,CAAC;QAEV,MAAM,MAAM,CAAC,qBAAqB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;aACrE,OAAO;aACP,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC3C,IAAI,EAAE,EAAE,SAAS,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;SACvJ,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAChF,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAE/D,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC;YAClC,KAAK,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE;YAC5B,OAAO,EAAE,EAAE,uBAAuB,EAAE,YAAY,EAAE;YAClD,UAAU,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE;SAC7C,CAAC,CAAC;QAEV,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,iBAAiB,CAAC;YAC3C,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,oCAAoC;SAC3F,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5E,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAEtD,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC3C,IAAI,EAAE,EAAE,SAAS,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;SACvJ,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAChF,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAE/D,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC;YAClC,KAAK,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE;YAC5B,OAAO,EAAE,EAAE,uBAAuB,EAAE,YAAY,EAAE;YAClD,UAAU,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE;SAC7C,CAAC,CAAC;QAEV,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5E,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAEtD,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACtE,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
|
package/dist/types/health.d.ts
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../src/types/health.ts"],"names":[],"mappings":"AACA,KAAK,KAAK,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;AAGzC,KAAK,aAAa,GAAG;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAA;AAGD,KAAK,YAAY,GAAG;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,KAAK,CAAC;IACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACzC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../src/types/health.ts"],"names":[],"mappings":"AACA,KAAK,KAAK,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;AAGzC,KAAK,aAAa,GAAG;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAA;AAGD,KAAK,YAAY,GAAG;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,KAAK,CAAC;IACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACzC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAA;AAED,KAAK,gBAAgB,GAAG;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,KAAK,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,YAAY,GAAG,IAAI,CAAC;QAC5B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;KACtB,CAAC,CAAC;CAEJ,CAAA;AAED,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC"}
|