retire 4.3.1 → 4.3.3

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## [4.3.2]
+
+### Bugfix
+
+- Fixes #420 where ignore was not honoured
+
+## [4.3.2]
+
+### Bugfix
+
+- Types did not work for `lib/retire.js` due to symlinked type file
+
 ## [4.3.1]
 
 ### Bugfix

package/README.md

@@ -30,7 +30,7 @@ Options:
   --exitwith <code>        Custom exit code (default: 13) when vulnerabilities are found
   --colors                 Enable color output (console output only)
   --insecure               Enable fetching remote jsrepo/noderepo files from hosts using an insecure or self-signed SSL (TLS) certificate
-  --ext <extensions>       Comman separated list of file extensions for javascript files. The default is "js"
+  --ext <extensions>       Comma separated list of file extensions for JavaScript files. The default is "js"
   --cacert <path>          Use the specified certificate file to verify the peer used for fetching remote jsrepo/noderepo files
   --includeOsv             Include OSV advisories in the output
   -h, --help               display help for command

package/lib/cli.js

@@ -69,7 +69,7 @@ const prg = commander_1.program
     .option('--exitwith <code>', 'Custom exit code (default: 13) when vulnerabilities are found')
     .option('--colors', 'Enable color output (console output only)')
     .option('--insecure', 'Enable fetching remote jsrepo/noderepo files from hosts using an insecure or self-signed SSL (TLS) certificate')
-    .option('--ext <extensions>', 'Comman separated list of file extensions for javascript files. The default is "js"')
+    .option('--ext <extensions>', 'Comma separated list of file extensions for JavaScript files. The default is "js"')
     .option('--cacert <path>', 'Use the specified certificate file to verify the peer used for fetching remote jsrepo/noderepo files')
     .option('--includeOsv', 'Include OSV advisories in the output')
     .parse()
@@ -96,8 +96,8 @@ if (!(severity in types_1.severityLevels)) {
 const config = {
     path: scanpath,
     ignore: {
-        paths: (_g = (_f = (_e = prg.ignore) === null || _e === void 0 ? void 0 : _e.split(',')) === null || _f === void 0 ? void 0 : _f.map((x) => path_1.default.resolve(x))) !== null && _g !== void 0 ? _g : [],
-        pathsAsString: [],
+        paths: [],
+        pathsAsString: (_g = (_f = (_e = prg.ignore) === null || _e === void 0 ? void 0 : _e.split(',')) === null || _f === void 0 ? void 0 : _f.map((x) => path_1.default.resolve(x))) !== null && _g !== void 0 ? _g : [],
         descriptors: [],
     },
     colorwarn,

package/lib/retire.d.ts

@@ -0,0 +1,15 @@
+import { Repository, Component, Hasher } from './types';
+
+export declare function check(component: string, version: string, repo: Repository): Component[];
+
+export declare function replaceVersion(jsRepoJsonAsText: string): string;
+
+export declare function isVulnerable(results: Component[]): boolean;
+
+export declare function scanUri(uri: string, repo: Repository): Component[];
+
+export declare function scanFileName(fileName: string, repo: Repository): Component[];
+
+export declare function scanFileContent(content: string, repo: Repository, hasher: Hasher): Component[];
+
+export declare const version: string;

package/lib/retire.js

@@ -4,7 +4,7 @@
  */
 
 var exports = exports || {};
-exports.version = '4.3.1';
+exports.version = '4.3.3';
 
 function isDefined(o) {
   return typeof o !== 'undefined';

package/package.json

@@ -2,7 +2,7 @@
   "author": "Erlend Oftedal <erlend@oftedal.no>",
   "name": "retire",
   "description": "Retire is a tool for detecting use of vulnerable libraries",
-  "version": "4.3.1",
+  "version": "4.3.3",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -36,7 +36,7 @@
   },
   "scripts": {
     "test": "./test",
-    "build": "tsc && chmod ugo+x lib/cli.js",
+    "build": "tsc && chmod ugo+x lib/cli.js && cp src/retire.d.ts lib/retire.d.ts",
     "watch": "tsc --watch ",
     "typecheck": "tsc --noEmit",
     "lint": "eslint . --ext .ts --fix --ignore-path ../.gitignore",