prscan 1.0.0

package/dist/tool/prscan.js

@@ -0,0 +1,477 @@
+import { analyzeGlobals } from "../util/analyze.js";
+import { getNpmPackageDownloadStats, getNpmPackageInfo, } from "../util/npm.js";
+import { YarnLockParser, PnpmLockParser } from "../util/parse.js";
+import { GitHubRepo } from "../util/repo.js";
+import semver from "semver";
+import { parse } from "@babel/parser";
+import { extractTarGzFromBuffer } from "../util/memory-archive.js";
+import got from "got";
+export class BaseRisk {
+    package;
+    info;
+    constructor(pkg, info) {
+        this.package = pkg;
+        this.info = info;
+    }
+}
+export class VersionRisk extends BaseRisk {
+    desc = "使用了最新或最近发布的版本";
+    level = "low";
+    static build(pkg, version) {
+        const latestVersion = pkg.package["dist-tags"].latest;
+        if (semver.eq(version, latestVersion)) {
+            const publishedTime = pkg.package.time[latestVersion];
+            if (publishedTime) {
+                const isRecent = Date.now() - new Date(publishedTime).getTime() <
+                    1000 * 60 * 60 * 24 * 30; // 30天
+                if (isRecent) {
+                    return new VersionRisk(pkg, `${pkg.package.name} 使用了最新版本: ${version}, 且该版本为30天内发布`);
+                }
+            }
+        }
+        // if (version in pkg.package.time) {
+        //     const publishedTime = pkg.package.time[version];
+        //     if (publishedTime) {
+        //         const isRecent =
+        //             Date.now() - new Date(publishedTime).getTime() <
+        //             1000 * 60 * 60 * 24 * 30; // 30天
+        //         if (isRecent) {
+        //             return new VersionRisk(
+        //                 pkg,
+        //                 `${pkg.package.name} 使用了30天内发布的版本: ${version}`
+        //             );
+        //         }
+        //     }
+        // }
+        return null;
+    }
+}
+export class NotWidelyUsedRisk extends BaseRisk {
+    desc = "使用了不常用的NPM包";
+    level = "medium";
+    static build(pkg) {
+        if (pkg.downloadInfo.downloads < 10000) {
+            return new NotWidelyUsedRisk(pkg, `${pkg.package.name}在${pkg.downloadInfo.start} - ${pkg.downloadInfo.end}期间下载量仅有 ${pkg.downloadInfo.downloads} 次`);
+        }
+        return null;
+    }
+}
+export class RiskyGlobalUsageRisk extends BaseRisk {
+    desc = "使用了危险的全局变量";
+    level = "high";
+    globals;
+    constructor(pkg, info, globals) {
+        super(pkg, info);
+        this.globals = globals;
+    }
+    static build(pkg, globals) {
+        const records = Object.create(null);
+        const networkGlobals = [
+            "fetch",
+            "XMLHttpRequest",
+            "ActiveXObject",
+            "WebSocket",
+            "EventSource",
+            "navigator",
+            "Image",
+            "Script",
+        ];
+        const domGlobals = ["document", "window", "addEventListener"];
+        const domCallbacks = [
+            "onsearch",
+            "onappinstalled",
+            "onbeforeinstallprompt",
+            "onbeforexrselect",
+            "onabort",
+            "onbeforeinput",
+            "onbeforematch",
+            "onbeforetoggle",
+            "onblur",
+            "oncancel",
+            "oncanplay",
+            "oncanplaythrough",
+            "onchange",
+            "onclick",
+            "onclose",
+            "oncommand",
+            "oncontentvisibilityautostatechange",
+            "oncontextlost",
+            "oncontextmenu",
+            "oncontextrestored",
+            "oncuechange",
+            "ondblclick",
+            "ondrag",
+            "ondragend",
+            "ondragenter",
+            "ondragleave",
+            "ondragover",
+            "ondragstart",
+            "ondrop",
+            "ondurationchange",
+            "onemptied",
+            "onended",
+            "onerror",
+            "onfocus",
+            "onformdata",
+            "oninput",
+            "oninvalid",
+            "onkeydown",
+            "onkeypress",
+            "onkeyup",
+            "onload",
+            "onloadeddata",
+            "onloadedmetadata",
+            "onloadstart",
+            "onmousedown",
+            "onmouseenter",
+            "onmouseleave",
+            "onmousemove",
+            "onmouseout",
+            "onmouseover",
+            "onmouseup",
+            "onmousewheel",
+            "onpause",
+            "onplay",
+            "onplaying",
+            "onprogress",
+            "onratechange",
+            "onreset",
+            "onresize",
+            "onscroll",
+            "onscrollend",
+            "onsecuritypolicyviolation",
+            "onseeked",
+            "onseeking",
+            "onselect",
+            "onslotchange",
+            "onstalled",
+            "onsubmit",
+            "onsuspend",
+            "ontimeupdate",
+            "ontoggle",
+            "onvolumechange",
+            "onwaiting",
+            "onwebkitanimationend",
+            "onwebkitanimationiteration",
+            "onwebkitanimationstart",
+            "onwebkittransitionend",
+            "onwheel",
+            "onauxclick",
+            "ongotpointercapture",
+            "onlostpointercapture",
+            "onpointerdown",
+            "onpointermove",
+            "onpointerrawupdate",
+            "onpointerup",
+            "onpointercancel",
+            "onpointerover",
+            "onpointerout",
+            "onpointerenter",
+            "onpointerleave",
+            "onselectstart",
+            "onselectionchange",
+            "onanimationend",
+            "onanimationiteration",
+            "onanimationstart",
+            "ontransitionrun",
+            "ontransitionstart",
+            "ontransitionend",
+            "ontransitioncancel",
+            "onafterprint",
+            "onbeforeprint",
+            "onbeforeunload",
+            "onhashchange",
+            "onlanguagechange",
+            "onmessage",
+            "onmessageerror",
+            "onoffline",
+            "ononline",
+            "onpagehide",
+            "onpageshow",
+            "onpopstate",
+            "onrejectionhandled",
+            "onstorage",
+            "onunhandledrejection",
+            "onunload",
+            "ondevicemotion",
+            "ondeviceorientation",
+            "ondeviceorientationabsolute",
+            "onpageswap",
+            "onpagereveal",
+            "onscrollsnapchange",
+            "onscrollsnapchanging",
+        ];
+        const codeExecGlobals = ["eval"];
+        const localStorageGlobals = [
+            "localStorage",
+            "sessionStorage",
+            "IndexedDB",
+            "cookies",
+        ];
+        for (const [g, perm] of Object.entries(globals)) {
+            if (networkGlobals.includes(g)) {
+                records[g] = {
+                    perm,
+                    type: "网络请求",
+                    desc: "发起网络请求, 可能包含恶意行为",
+                };
+            }
+            else if (domGlobals.includes(g) ||
+                (domCallbacks.includes(g) && perm === "rw")) {
+                records[g] = {
+                    perm,
+                    type: "操作DOM",
+                    desc: "可能读取用户助记词等敏感信息",
+                };
+            }
+            else if (codeExecGlobals.includes(g)) {
+                records[g] = {
+                    perm,
+                    type: "动态执行代码",
+                    desc: "可能会执行恶意代码",
+                };
+            }
+            else if (localStorageGlobals.includes(g)) {
+                records[g] = {
+                    perm,
+                    type: "读取本地储存",
+                    desc: "可能会读取用户的本地储存数据",
+                };
+            }
+            else if (g === "chrome") {
+                records[g] = {
+                    perm,
+                    type: "访问chrome扩展API",
+                    desc: "访问chrome扩展API",
+                };
+            }
+        }
+        if (Object.keys(records).length === 0) {
+            return null;
+        }
+        let info = "";
+        for (const [g, { perm, type, desc }] of Object.entries(records)) {
+            info += `- ${perm === "r" ? "访问" : "读写"} ${g} (${type}): ${desc}\n`;
+        }
+        return new RiskyGlobalUsageRisk(pkg, info.trim(), records);
+    }
+}
+export class ObfuscationRisk extends BaseRisk {
+    desc = "代码经过混淆";
+    level = "medium";
+    static build(pkg, files) {
+        let hit = false;
+        let info = "";
+        // 被混淆过的代码有如下特征
+        // 1. 包含特定混淆关键字，如 while(!![]), +-parseInt(
+        // 2. 包含典型混淆变量名，如 _0xabc123
+        const obfsKeywords = ["while(!![])", "+-parseInt("];
+        const obfsIdentifier = /_0x[0-9a-fA-F]{6}/;
+        for (const [file, content] of Object.entries(files)) {
+            if (obfsKeywords.some((kw) => content.includes(kw))) {
+                hit = true;
+            }
+            else if (obfsIdentifier.test(content)) {
+                hit = true;
+            }
+            info += `- ${file} 被混淆\n`;
+        }
+        return hit ? new ObfuscationRisk(pkg, info.trim()) : null;
+    }
+}
+export class RuleRisk extends BaseRisk {
+    desc = "触发关键字规则";
+    level = "low";
+    static build(pkg, files) {
+        let info = "";
+        let hit = false;
+        for (const [file, content] of Object.entries(files)) {
+            if (content.includes("ethereum")) {
+                info += `- ${file} 使用了 ethereum\n`;
+                hit = true;
+            }
+        }
+        return hit ? new RuleRisk(pkg, info.trim()) : null;
+    }
+}
+export async function scanPkgRisks(name, version) {
+    console.info(`Scanning ${name}@${version} ...`);
+    // 获取NPM包信息
+    const packageInfo = await getNpmPackageInfo(name);
+    if (packageInfo === null) {
+        throw new Error(`Failed to fetch package info for ${name}`);
+    }
+    if (!packageInfo.versions[version]) {
+        throw new Error(`Version ${version} of package ${name} not found in registry`);
+    }
+    // 获取下载统计信息
+    const downloadInfo = await getNpmPackageDownloadStats(name, "last-week");
+    if (downloadInfo === null) {
+        throw new Error(`Failed to fetch download stats for ${name}`);
+    }
+    // 下载包文件
+    console.info(`Downloading tarball for ${name}@${version}`);
+    const tarballUrl = packageInfo.versions[version].dist.tarball;
+    const tarballResponse = await got(tarballUrl);
+    if (tarballResponse.statusCode !== 200) {
+        throw new Error(`Failed to download tarball for ${name}@${version}: ${tarballResponse.statusMessage}`);
+    }
+    const tarballBuffer = tarballResponse.rawBody;
+    const files = await extractTarGzFromBuffer(tarballBuffer, {
+        filter: (path) => path.endsWith(".js"),
+    });
+    const fileMap = Object.create(null);
+    for (const file of files) {
+        fileMap[file.path] = file.content.toString("utf8");
+    }
+    // 分析代码
+    let globalUsage = Object.create(null);
+    for (const [file, content] of Object.entries(fileMap)) {
+        try {
+            const usage = analyzeGlobals(content);
+            for (const [g, perm] of Object.entries(usage)) {
+                if (g in globalUsage) {
+                    if (perm === "rw" || globalUsage[g] === "rw") {
+                        globalUsage[g] = "rw";
+                    }
+                }
+                else {
+                    globalUsage[g] = perm;
+                }
+            }
+        }
+        catch (e) {
+            console.warn(`Failed to analyze ${name}@${version} - ${file}:`, e);
+        }
+    }
+    const risks = [];
+    const relatedPkg = {
+        package: packageInfo,
+        downloadInfo: downloadInfo,
+    };
+    const vRisk = VersionRisk.build(relatedPkg, version);
+    if (vRisk)
+        risks.push(vRisk);
+    const uRisk = NotWidelyUsedRisk.build(relatedPkg);
+    if (uRisk)
+        risks.push(uRisk);
+    const gRisk = RiskyGlobalUsageRisk.build(relatedPkg, globalUsage);
+    if (gRisk)
+        risks.push(gRisk);
+    const oRisk = ObfuscationRisk.build(relatedPkg, fileMap);
+    if (oRisk)
+        risks.push(oRisk);
+    const rRisk = RuleRisk.build(relatedPkg, fileMap);
+    if (rRisk)
+        risks.push(rRisk);
+    return {
+        risks,
+        package: packageInfo,
+        downloadInfo: downloadInfo,
+        globalUsage: globalUsage,
+    };
+}
+export async function scanByFileDiff(files) {
+    let changedDeps = new Set();
+    const sr = {
+        changedDeps: [],
+    };
+    for (const file of files) {
+        if (file.filename.endsWith("pnpm-lock.yaml")) {
+            const p1 = new PnpmLockParser(file.oldContent);
+            const p2 = new PnpmLockParser(file.newContent);
+            const depsNew = PnpmLockParser.deps2Set(p1.getDependencies());
+            const depsOld = PnpmLockParser.deps2Set(p2.getDependencies());
+            // 对比集合差异, 寻找变更依赖
+            changedDeps = changedDeps.union(depsNew.difference(depsOld));
+            continue;
+        }
+        else if (file.filename.endsWith("yarn.lock")) {
+            const p1 = new YarnLockParser(file.oldContent);
+            const p2 = new YarnLockParser(file.newContent);
+            const depsNew = YarnLockParser.deps2Set(p1.getDependencies());
+            const depsOld = YarnLockParser.deps2Set(p2.getDependencies());
+            // 对比集合差异, 寻找变更依赖
+            changedDeps = changedDeps.union(depsNew.difference(depsOld));
+        }
+    }
+    for (const dep of changedDeps) {
+        const name = dep.slice(0, dep.lastIndexOf("@"));
+        const version = dep.slice(dep.lastIndexOf("@") + 1);
+        const pkgScan = await scanPkgRisks(name, version);
+        sr.changedDeps.push({
+            name,
+            version,
+            packageInfo: pkgScan.package,
+            downloadInfo: pkgScan.downloadInfo,
+            analyze: {
+                global: pkgScan.globalUsage,
+            },
+            risks: pkgScan.risks,
+        });
+    }
+    return sr;
+}
+export async function scanPRRisks(owner, repo, pull_no, auth = undefined) {
+    const github = new GitHubRepo(auth);
+    const prinfo = await github.getPRInfo(owner, repo, pull_no);
+    const prfiles = await github.getPRChangedFiles(owner, repo, pull_no, 100);
+    if (prinfo === null || prfiles === null) {
+        throw new Error(`Failed to fetch PR info or files for #${pull_no}`);
+    }
+    let changedDeps = new Set();
+    const sr = {
+        changedDeps: [],
+    };
+    for (const file of prfiles) {
+        if (file.status === "removed") {
+            continue; // 跳过已删除的文件
+        }
+        if (file.filename === "yarn.lock" ||
+            file.filename === "pnpm-lock.yaml") {
+            if (file.status !== "added") {
+                const yarnNew = await github.getTextFileContent(owner, repo, file.filename, prinfo.head.sha);
+                const yarnOld = await github.getTextFileContent(owner, repo, file.filename, prinfo.base.sha);
+                if (yarnNew === null || yarnOld === null) {
+                    throw new Error(`Failed to fetch ${file.filename} content`);
+                    continue;
+                }
+                // 构建依赖版本号集合
+                const parserNew = new YarnLockParser(yarnNew);
+                const parserOld = new YarnLockParser(yarnOld);
+                const depsNew = YarnLockParser.deps2Set(parserNew.getDependencies());
+                const depsOld = YarnLockParser.deps2Set(parserOld.getDependencies());
+                // 对比集合差异, 寻找变更依赖
+                changedDeps = changedDeps.union(depsNew.difference(depsOld));
+            }
+            else {
+                const yarnNew = await github.getTextFileContent(owner, repo, file.filename, prinfo.head.sha);
+                if (yarnNew === null) {
+                    throw new Error(`Failed to fetch ${file.filename} content`);
+                    continue;
+                }
+                // 构建依赖版本号集合
+                const parserNew = new YarnLockParser(yarnNew);
+                const depsNew = YarnLockParser.deps2Set(parserNew.getDependencies());
+                changedDeps = changedDeps.union(depsNew);
+            }
+        }
+    }
+    for (const dep of changedDeps) {
+        const name = dep.slice(0, dep.lastIndexOf("@"));
+        const version = dep.slice(dep.lastIndexOf("@") + 1);
+        const pkgScan = await scanPkgRisks(name, version);
+        sr.changedDeps.push({
+            name,
+            version,
+            packageInfo: pkgScan.package,
+            downloadInfo: pkgScan.downloadInfo,
+            analyze: {
+                global: pkgScan.globalUsage,
+            },
+            risks: pkgScan.risks,
+        });
+    }
+    return sr;
+}
+//# sourceMappingURL=prscan.js.map

package/dist/tool/prscan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prscan.js","sourceRoot":"","sources":["../../src/tool/prscan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAuB,MAAM,oBAAoB,CAAC;AACzE,OAAO,EACH,0BAA0B,EAC1B,iBAAiB,GAGpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAGnE,OAAO,GAAG,MAAM,KAAK,CAAC;AAOtB,MAAM,OAAgB,QAAQ;IAGnB,OAAO,CAAiB;IACxB,IAAI,CAAS;IAEpB,YAAY,GAAmB,EAAE,IAAY;QACzC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACrB,CAAC;CACJ;AAED,MAAM,OAAO,WAAY,SAAQ,QAAQ;IAC9B,IAAI,GAAW,eAAe,CAAC;IAC/B,KAAK,GAA8B,KAAK,CAAC;IAEhD,MAAM,CAAC,KAAK,CAAC,GAAmB,EAAE,OAAe;QAC7C,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;QACtD,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,CAAC;YACpC,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACtD,IAAI,aAAa,EAAE,CAAC;gBAChB,MAAM,QAAQ,GACV,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;oBAC9C,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM;gBACpC,IAAI,QAAQ,EAAE,CAAC;oBACX,OAAO,IAAI,WAAW,CAClB,GAAG,EACH,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,aAAa,OAAO,eAAe,CACzD,CAAC;gBACN,CAAC;YACL,CAAC;QACL,CAAC;QAED,qCAAqC;QACrC,uDAAuD;QACvD,2BAA2B;QAC3B,2BAA2B;QAC3B,+DAA+D;QAC/D,+CAA+C;QAC/C,0BAA0B;QAC1B,sCAAsC;QACtC,uBAAuB;QACvB,iEAAiE;QACjE,iBAAiB;QACjB,YAAY;QACZ,QAAQ;QACR,IAAI;QACJ,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AAED,MAAM,OAAO,iBAAkB,SAAQ,QAAQ;IACpC,IAAI,GAAW,aAAa,CAAC;IAC7B,KAAK,GAA8B,QAAQ,CAAC;IAEnD,MAAM,CAAC,KAAK,CAAC,GAAmB;QAC5B,IAAI,GAAG,CAAC,YAAY,CAAC,SAAS,GAAG,KAAK,EAAE,CAAC;YACrC,OAAO,IAAI,iBAAiB,CACxB,GAAG,EACH,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,YAAY,CAAC,KAAK,MAAM,GAAG,CAAC,YAAY,CAAC,GAAG,WAAW,GAAG,CAAC,YAAY,CAAC,SAAS,IAAI,CACnH,CAAC;QACN,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AAeD,MAAM,OAAO,oBAAqB,SAAQ,QAAQ;IAC9C,IAAI,GAAW,YAAY,CAAC;IAC5B,KAAK,GAA8B,MAAM,CAAC;IAEnC,OAAO,CAAa;IAE3B,YAAY,GAAmB,EAAE,IAAY,EAAE,OAAmB;QAC9D,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,GAAmB,EAAE,OAAmC;QACjE,MAAM,OAAO,GAAe,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEhD,MAAM,cAAc,GAAG;YACnB,OAAO;YACP,gBAAgB;YAChB,eAAe;YACf,WAAW;YACX,aAAa;YACb,WAAW;YACX,OAAO;YACP,QAAQ;SACX,CAAC;QACF,MAAM,UAAU,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG;YACjB,UAAU;YACV,gBAAgB;YAChB,uBAAuB;YACvB,kBAAkB;YAClB,SAAS;YACT,eAAe;YACf,eAAe;YACf,gBAAgB;YAChB,QAAQ;YACR,UAAU;YACV,WAAW;YACX,kBAAkB;YAClB,UAAU;YACV,SAAS;YACT,SAAS;YACT,WAAW;YACX,oCAAoC;YACpC,eAAe;YACf,eAAe;YACf,mBAAmB;YACnB,aAAa;YACb,YAAY;YACZ,QAAQ;YACR,WAAW;YACX,aAAa;YACb,aAAa;YACb,YAAY;YACZ,aAAa;YACb,QAAQ;YACR,kBAAkB;YAClB,WAAW;YACX,SAAS;YACT,SAAS;YACT,SAAS;YACT,YAAY;YACZ,SAAS;YACT,WAAW;YACX,WAAW;YACX,YAAY;YACZ,SAAS;YACT,QAAQ;YACR,cAAc;YACd,kBAAkB;YAClB,aAAa;YACb,aAAa;YACb,cAAc;YACd,cAAc;YACd,aAAa;YACb,YAAY;YACZ,aAAa;YACb,WAAW;YACX,cAAc;YACd,SAAS;YACT,QAAQ;YACR,WAAW;YACX,YAAY;YACZ,cAAc;YACd,SAAS;YACT,UAAU;YACV,UAAU;YACV,aAAa;YACb,2BAA2B;YAC3B,UAAU;YACV,WAAW;YACX,UAAU;YACV,cAAc;YACd,WAAW;YACX,UAAU;YACV,WAAW;YACX,cAAc;YACd,UAAU;YACV,gBAAgB;YAChB,WAAW;YACX,sBAAsB;YACtB,4BAA4B;YAC5B,wBAAwB;YACxB,uBAAuB;YACvB,SAAS;YACT,YAAY;YACZ,qBAAqB;YACrB,sBAAsB;YACtB,eAAe;YACf,eAAe;YACf,oBAAoB;YACpB,aAAa;YACb,iBAAiB;YACjB,eAAe;YACf,cAAc;YACd,gBAAgB;YAChB,gBAAgB;YAChB,eAAe;YACf,mBAAmB;YACnB,gBAAgB;YAChB,sBAAsB;YACtB,kBAAkB;YAClB,iBAAiB;YACjB,mBAAmB;YACnB,iBAAiB;YACjB,oBAAoB;YACpB,cAAc;YACd,eAAe;YACf,gBAAgB;YAChB,cAAc;YACd,kBAAkB;YAClB,WAAW;YACX,gBAAgB;YAChB,WAAW;YACX,UAAU;YACV,YAAY;YACZ,YAAY;YACZ,YAAY;YACZ,oBAAoB;YACpB,WAAW;YACX,sBAAsB;YACtB,UAAU;YACV,gBAAgB;YAChB,qBAAqB;YACrB,6BAA6B;YAC7B,YAAY;YACZ,cAAc;YACd,oBAAoB;YACpB,sBAAsB;SACzB,CAAC;QACF,MAAM,eAAe,GAAG,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,mBAAmB,GAAG;YACxB,cAAc;YACd,gBAAgB;YAChB,WAAW;YACX,SAAS;SACZ,CAAC;QAEF,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,CAAC,CAAC,GAAG;oBACT,IAAI;oBACJ,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,kBAAkB;iBAC3B,CAAC;YACN,CAAC;iBAAM,IACH,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACtB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,IAAI,CAAC,EAC7C,CAAC;gBACC,OAAO,CAAC,CAAC,CAAC,GAAG;oBACT,IAAI;oBACJ,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,gBAAgB;iBACzB,CAAC;YACN,CAAC;iBAAM,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrC,OAAO,CAAC,CAAC,CAAC,GAAG;oBACT,IAAI;oBACJ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,WAAW;iBACpB,CAAC;YACN,CAAC;iBAAM,IAAI,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,OAAO,CAAC,CAAC,CAAC,GAAG;oBACT,IAAI;oBACJ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,gBAAgB;iBACzB,CAAC;YACN,CAAC;iBAAM,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACxB,OAAO,CAAC,CAAC,CAAC,GAAG;oBACT,IAAI;oBACJ,IAAI,EAAE,eAAe;oBACrB,IAAI,EAAE,eAAe;iBACxB,CAAC;YACN,CAAC;QACL,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,KAAK,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9D,IAAI,IAAI,KACJ,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAC1B,IAAI,CAAC,KAAK,IAAI,MAAM,IAAI,IAAI,CAAC;QACjC,CAAC;QAED,OAAO,IAAI,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;CACJ;AAED,MAAM,OAAO,eAAgB,SAAQ,QAAQ;IAClC,IAAI,GAAW,QAAQ,CAAC;IACxB,KAAK,GAA8B,QAAQ,CAAC;IAEnD,MAAM,CAAC,KAAK,CACR,GAAmB,EACnB,KAA6B;QAE7B,IAAI,GAAG,GAAG,KAAK,CAAC;QAChB,IAAI,IAAI,GAAG,EAAE,CAAC;QAEd,eAAe;QACf,0CAA0C;QAC1C,2BAA2B;QAC3B,MAAM,YAAY,GAAG,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QACpD,MAAM,cAAc,GAAG,mBAAmB,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBAClD,GAAG,GAAG,IAAI,CAAC;YACf,CAAC;iBAAM,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtC,GAAG,GAAG,IAAI,CAAC;YACf,CAAC;YAED,IAAI,IAAI,KAAK,IAAI,QAAQ,CAAC;QAC9B,CAAC;QAED,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;CACJ;AAED,MAAM,OAAO,QAAS,SAAQ,QAAQ;IAC3B,IAAI,GAAW,SAAS,CAAC;IACzB,KAAK,GAA8B,KAAK,CAAC;IAEhD,MAAM,CAAC,KAAK,CACR,GAAmB,EACnB,KAA6B;QAE7B,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,GAAG,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,IAAI,IAAI,KAAK,IAAI,iBAAiB,CAAC;gBACnC,GAAG,GAAG,IAAI,CAAC;YACf,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,CAAC;CACJ;AAsBD,MAAM,CAAC,KAAK,UAAU,YAAY,CAC9B,IAAY,EACZ,OAAe;IAOf,OAAO,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,OAAO,MAAM,CAAC,CAAC;IAChD,WAAW;IACX,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACX,WAAW,OAAO,eAAe,IAAI,wBAAwB,CAChE,CAAC;IACN,CAAC;IAED,WAAW;IACX,MAAM,YAAY,GAAG,MAAM,0BAA0B,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACzE,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,QAAQ;IACR,OAAO,CAAC,IAAI,CAAC,2BAA2B,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAE,CAAC,IAAI,CAAC,OAAO,CAAC;IAC/D,MAAM,eAAe,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,eAAe,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACX,kCAAkC,IAAI,IAAI,OAAO,KAAK,eAAe,CAAC,aAAa,EAAE,CACxF,CAAC;IACN,CAAC;IAED,MAAM,aAAa,GAAG,eAAe,CAAC,OAAO,CAAC;IAE9C,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,aAAa,EAAE;QACtD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;KACzC,CAAC,CAAC;IACH,MAAM,OAAO,GAA2B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAE5D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,OAAO;IACP,IAAI,WAAW,GAAmB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;YACtC,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC;oBACnB,IAAI,IAAI,KAAK,IAAI,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;wBAC3C,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;oBAC1B,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACJ,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;gBAC1B,CAAC;YACL,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,OAAO,CAAC,IAAI,CAAC,qBAAqB,IAAI,IAAI,OAAO,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;QACvE,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAW,EAAE,CAAC;IAEzB,MAAM,UAAU,GAAmB;QAC/B,OAAO,EAAE,WAAW;QACpB,YAAY,EAAE,YAAY;KAC7B,CAAC;IAEF,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACrD,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAE7B,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAE7B,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAClE,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAE7B,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACzD,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAE7B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAClD,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAE7B,OAAO;QACH,KAAK;QACL,OAAO,EAAE,WAAW;QACpB,YAAY,EAAE,YAAY;QAC1B,WAAW,EAAE,WAAW;KAC3B,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAChC,KAIE;IAEF,IAAI,WAAW,GAAgB,IAAI,GAAG,EAAE,CAAC;IACzC,MAAM,EAAE,GAAiB;QACrB,WAAW,EAAE,EAAE;KAClB,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC3C,MAAM,EAAE,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/C,MAAM,EAAE,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;YAE9D,iBAAiB;YACjB,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;YAC7D,SAAS;QACb,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7C,MAAM,EAAE,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/C,MAAM,EAAE,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;YAE9D,iBAAiB;YACjB,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,CAAC;IACL,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAEpD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC;YAChB,IAAI;YACJ,OAAO;YACP,WAAW,EAAE,OAAO,CAAC,OAAO;YAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,OAAO,EAAE;gBACL,MAAM,EAAE,OAAO,CAAC,WAAW;aAC9B;YACD,KAAK,EAAE,OAAO,CAAC,KAAK;SACvB,CAAC,CAAC;IACP,CAAC;IAED,OAAO,EAAE,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC7B,KAAa,EACb,IAAY,EACZ,OAAe,EACf,OAA2B,SAAS;IAEpC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1E,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,yCAAyC,OAAO,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,WAAW,GAAgB,IAAI,GAAG,EAAE,CAAC;IAEzC,MAAM,EAAE,GAAiB;QACrB,WAAW,EAAE,EAAE;KAClB,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC5B,SAAS,CAAC,WAAW;QACzB,CAAC;QAED,IACI,IAAI,CAAC,QAAQ,KAAK,WAAW;YAC7B,IAAI,CAAC,QAAQ,KAAK,gBAAgB,EACpC,CAAC;YACC,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAC3C,KAAK,EACL,IAAI,EACJ,IAAI,CAAC,QAAQ,EACb,MAAM,CAAC,IAAI,CAAC,GAAG,CAClB,CAAC;gBAEF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAC3C,KAAK,EACL,IAAI,EACJ,IAAI,CAAC,QAAQ,EACb,MAAM,CAAC,IAAI,CAAC,GAAG,CAClB,CAAC;gBAEF,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACvC,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,CAAC,QAAQ,UAAU,CAAC,CAAC;oBAC5D,SAAS;gBACb,CAAC;gBAED,YAAY;gBACZ,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;gBAC9C,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;gBAC9C,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CACnC,SAAS,CAAC,eAAe,EAAE,CAC9B,CAAC;gBACF,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CACnC,SAAS,CAAC,eAAe,EAAE,CAC9B,CAAC;gBAEF,iBAAiB;gBACjB,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;YACjE,CAAC;iBAAM,CAAC;gBACJ,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAC3C,KAAK,EACL,IAAI,EACJ,IAAI,CAAC,QAAQ,EACb,MAAM,CAAC,IAAI,CAAC,GAAG,CAClB,CAAC;gBAEF,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACnB,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,CAAC,QAAQ,UAAU,CAAC,CAAC;oBAC5D,SAAS;gBACb,CAAC;gBAED,YAAY;gBACZ,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;gBAC9C,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CACnC,SAAS,CAAC,eAAe,EAAE,CAC9B,CAAC;gBAEF,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7C,CAAC;QACL,CAAC;IACL,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAEpD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC;YAChB,IAAI;YACJ,OAAO;YACP,WAAW,EAAE,OAAO,CAAC,OAAO;YAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,OAAO,EAAE;gBACL,MAAM,EAAE,OAAO,CAAC,WAAW;aAC9B;YACD,KAAK,EAAE,OAAO,CAAC,KAAK;SACvB,CAAC,CAAC;IACP,CAAC;IAED,OAAO,EAAE,CAAC;AACd,CAAC"}

package/dist/util/analyze.d.ts

@@ -0,0 +1,4 @@
+export type GlobalUsageMap = Record<string, "r" | "rw">;
+export declare const ECMAGlobals: string[];
+export declare function analyzeGlobals(code: string): GlobalUsageMap;
+//# sourceMappingURL=analyze.d.ts.map

package/dist/util/analyze.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyze.d.ts","sourceRoot":"","sources":["../../src/util/analyze.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC;AAExD,eAAO,MAAM,WAAW,UA+DvB,CAAC;AAqBF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAyJ3D"}