retire 3.1.3 → 3.2.0

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## [3.2.0]
+
+- Add `--ext` to allow specifying other file extensions
+
 ## [3.1.3]
 
 - Fixes a typo

package/README.md

@@ -39,6 +39,7 @@ Options:
   --exitwith <code>        Custom exit code (default: 13) when vulnerabilities are found
   --colors                 Enable color output (console output only)
   --insecure               Enable fetching remote jsrepo/noderepo files from hosts using an insecure or self-signed SSL (TLS) certificate
+  --ext <extensions>       Comman separated list of file extensions for javascript files. The default is "js"
   --cacert <path>          Use the specified certificate file to verify the peer used for fetching remote jsrepo/noderepo files
 ````
 

package/bin/retire

@@ -60,13 +60,14 @@ program
   .option('--exitwith <code>', 'Custom exit code (default: 13) when vulnerabilities are found')
   .option('--colors', 'Enable color output (console output only)')
   .option('--insecure', 'Enable fetching remote jsrepo/noderepo files from hosts using an insecure or self-signed SSL (TLS) certificate')
+  .option('--ext <extensions>', 'Comman separated list of file extensions for javascript files. The default is "js"')
   .option('--cacert <path>', 'Use the specified certificate file to verify the peer used for fetching remote jsrepo/noderepo files')
   .parse(process.argv);
 
 var config = utils.extend({ path: '.' }, utils.pick(program, [
   'package', 'node', 'js', 'jspath', 'verbose', 'nodepath', 'path', 'jsrepo', 'noderepo',
   'dropexternal', 'nocache', 'proxy', 'ignore', 'ignorefile', 'outputformat', 'outputpath',
-  'severity', 'exitwith', 'colors', 'includemeta', 'cachedir', 'insecure', 'cacert'
+  'severity', 'exitwith', 'colors', 'includemeta', 'cachedir', 'insecure', 'cacert', 'ext'
 ]));
 
 if (!config.nocache && !config.cachedir) {

package/lib/resolve.js

@@ -69,8 +69,9 @@ function getNodeDependencies(path, limit) {
 
 function scanJsFiles(path, options) {
 	var finder = walkdir.find(path, { "follow_symlinks" : false, "no_return": true });
+	var ext = (options.ext || "js").split(",").map(e => "." + e);
 	function onFile(file){
-		if (file.match(/\.js$/)) {
+		if (ext.some(e => file.endsWith(e))) {
 			finder.emit('jsfile', file);
 		}
 		if (file.match(/\/bower.json$/)) {

package/lib/retire.js

@@ -4,7 +4,7 @@
  */
 
 var exports = exports || {};
-exports.version = '3.1.3';
+exports.version = '3.2.0';
 
 function isDefined(o) {
 	return typeof o !== 'undefined';

package/package.json

@@ -2,7 +2,7 @@
   "author": "Erlend Oftedal <erlend@oftedal.no>",
   "name": "retire",
   "description": "Retire is a tool for detecting use of vulnerable libraries",
-  "version": "3.1.3",
+  "version": "3.2.0",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",