scanoss 0.2.10 → 0.2.11
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +20 -18
- package/build/main/bin/cli-bin.js +7 -1
- package/build/main/commands/dep.d.ts +1 -0
- package/build/main/commands/dep.js +26 -0
- package/build/main/index.d.ts +2 -0
- package/build/main/index.js +3 -1
- package/build/main/lib/dependencies/Dependency.d.ts +9 -0
- package/build/main/lib/dependencies/Dependency.js +50 -0
- package/build/main/lib/dependencies/DependencyTypes.d.ts +19 -0
- package/build/main/lib/dependencies/DependencyTypes.js +3 -0
- package/build/main/lib/dependencies/PurlGenerator.d.ts +2 -0
- package/build/main/lib/dependencies/PurlGenerator.js +39 -0
- package/build/main/lib/dependencies/parsers/golangParser.d.ts +0 -0
- package/build/main/lib/dependencies/parsers/golangParser.js +3 -0
- package/build/main/lib/dependencies/parsers/mavenParser.d.ts +2 -0
- package/build/main/lib/dependencies/parsers/mavenParser.js +44 -0
- package/build/main/lib/dependencies/parsers/npmParser.d.ts +3 -0
- package/build/main/lib/dependencies/parsers/npmParser.js +45 -0
- package/build/main/lib/dependencies/parsers/pyParser.d.ts +2 -0
- package/build/main/lib/dependencies/parsers/pyParser.js +51 -0
- package/build/main/lib/dependencies/parsers/rubyParser.d.ts +3 -0
- package/build/main/lib/dependencies/parsers/rubyParser.js +135 -0
- package/build/main/lib/dependencies/parsers/types.d.ts +15 -0
- package/build/main/lib/dependencies/parsers/types.js +33 -0
- package/build/main/lib/dependencies/parsers/utils.d.ts +2 -0
- package/build/main/lib/dependencies/parsers/utils.js +20 -0
- package/build/main/lib/dependencies/src/PurlGenerator.d.ts +2 -0
- package/build/main/lib/dependencies/src/PurlGenerator.js +62 -0
- package/build/main/lib/dependencies/src/parsers/golangParser.d.ts +0 -0
- package/build/main/lib/dependencies/src/parsers/golangParser.js +3 -0
- package/build/main/lib/dependencies/src/parsers/mavenParser.d.ts +2 -0
- package/build/main/lib/dependencies/src/parsers/mavenParser.js +44 -0
- package/build/main/lib/dependencies/src/parsers/npmParser.d.ts +3 -0
- package/build/main/lib/dependencies/src/parsers/npmParser.js +45 -0
- package/build/main/lib/dependencies/src/parsers/pyParser.d.ts +2 -0
- package/build/main/lib/dependencies/src/parsers/pyParser.js +51 -0
- package/build/main/lib/dependencies/src/parsers/rubyParser.d.ts +3 -0
- package/build/main/lib/dependencies/src/parsers/rubyParser.js +135 -0
- package/build/main/lib/dependencies/src/parsers/types.d.ts +15 -0
- package/build/main/lib/dependencies/src/parsers/types.js +33 -0
- package/build/main/lib/dependencies/src/parsers/utils.d.ts +2 -0
- package/build/main/lib/dependencies/src/parsers/utils.js +19 -0
- package/build/main/lib/dependencyScan/dependencyScan.d.ts +2 -0
- package/build/main/lib/dependencyScan/dependencyScan.js +37 -0
- package/build/main/lib/dependencyScan/parser.d.ts +7 -0
- package/build/main/lib/dependencyScan/parser.js +41 -0
- package/build/main/lib/dependencyScan/utils.d.ts +1 -0
- package/build/main/lib/dependencyScan/utils.js +16 -0
- package/build/main/lib/scanner/Dependency/dependency.d.ts +9 -0
- package/build/main/lib/scanner/Dependency/dependency.js +46 -0
- package/build/main/lib/scanner/Dependency/dependencyScan.d.ts +9 -0
- package/build/main/lib/scanner/Dependency/dependencyScan.js +48 -0
- package/build/main/lib/scanner/Dependency/parser.d.ts +7 -0
- package/build/main/lib/scanner/Dependency/parser.js +41 -0
- package/build/main/lib/scanner/Dependency/utils.d.ts +1 -0
- package/build/main/lib/scanner/Dependency/utils.js +16 -0
- package/build/main/lib/tree/Tree.js +2 -2
- package/build/module/bin/cli-bin.js +7 -1
- package/build/module/commands/dep.d.ts +1 -0
- package/build/module/commands/dep.js +19 -0
- package/build/module/index.d.ts +2 -0
- package/build/module/index.js +3 -1
- package/build/module/lib/dependencies/Dependency.d.ts +9 -0
- package/build/module/lib/dependencies/Dependency.js +45 -0
- package/build/module/lib/dependencies/DependencyTypes.d.ts +19 -0
- package/build/module/lib/dependencies/DependencyTypes.js +2 -0
- package/build/module/lib/dependencies/PurlGenerator.d.ts +2 -0
- package/build/module/lib/dependencies/PurlGenerator.js +32 -0
- package/build/module/lib/dependencies/parsers/golangParser.d.ts +0 -0
- package/build/module/lib/dependencies/parsers/golangParser.js +3 -0
- package/build/module/lib/dependencies/parsers/mavenParser.d.ts +2 -0
- package/build/module/lib/dependencies/parsers/mavenParser.js +37 -0
- package/build/module/lib/dependencies/parsers/npmParser.d.ts +3 -0
- package/build/module/lib/dependencies/parsers/npmParser.js +37 -0
- package/build/module/lib/dependencies/parsers/pyParser.d.ts +2 -0
- package/build/module/lib/dependencies/parsers/pyParser.js +44 -0
- package/build/module/lib/dependencies/parsers/rubyParser.d.ts +3 -0
- package/build/module/lib/dependencies/parsers/rubyParser.js +132 -0
- package/build/module/lib/dependencies/parsers/types.d.ts +15 -0
- package/build/module/lib/dependencies/parsers/types.js +32 -0
- package/build/module/lib/dependencies/parsers/utils.d.ts +2 -0
- package/build/module/lib/dependencies/parsers/utils.js +15 -0
- package/build/module/lib/dependencies/src/PurlGenerator.d.ts +2 -0
- package/build/module/lib/dependencies/src/PurlGenerator.js +55 -0
- package/build/module/lib/dependencies/src/parsers/golangParser.d.ts +0 -0
- package/build/module/lib/dependencies/src/parsers/golangParser.js +3 -0
- package/build/module/lib/dependencies/src/parsers/mavenParser.d.ts +2 -0
- package/build/module/lib/dependencies/src/parsers/mavenParser.js +37 -0
- package/build/module/lib/dependencies/src/parsers/npmParser.d.ts +3 -0
- package/build/module/lib/dependencies/src/parsers/npmParser.js +37 -0
- package/build/module/lib/dependencies/src/parsers/pyParser.d.ts +2 -0
- package/build/module/lib/dependencies/src/parsers/pyParser.js +44 -0
- package/build/module/lib/dependencies/src/parsers/rubyParser.d.ts +3 -0
- package/build/module/lib/dependencies/src/parsers/rubyParser.js +132 -0
- package/build/module/lib/dependencies/src/parsers/types.d.ts +15 -0
- package/build/module/lib/dependencies/src/parsers/types.js +32 -0
- package/build/module/lib/dependencies/src/parsers/utils.d.ts +2 -0
- package/build/module/lib/dependencies/src/parsers/utils.js +14 -0
- package/build/module/lib/dependencyScan/dependencyScan.d.ts +2 -0
- package/build/module/lib/dependencyScan/dependencyScan.js +29 -0
- package/build/module/lib/dependencyScan/parser.d.ts +7 -0
- package/build/module/lib/dependencyScan/parser.js +38 -0
- package/build/module/lib/dependencyScan/utils.d.ts +1 -0
- package/build/module/lib/dependencyScan/utils.js +12 -0
- package/build/module/lib/scanner/Dependency/dependency.d.ts +9 -0
- package/build/module/lib/scanner/Dependency/dependency.js +38 -0
- package/build/module/lib/scanner/Dependency/dependencyScan.d.ts +9 -0
- package/build/module/lib/scanner/Dependency/dependencyScan.js +40 -0
- package/build/module/lib/scanner/Dependency/parser.d.ts +7 -0
- package/build/module/lib/scanner/Dependency/parser.js +38 -0
- package/build/module/lib/scanner/Dependency/utils.d.ts +1 -0
- package/build/module/lib/scanner/Dependency/utils.js +12 -0
- package/build/module/lib/tree/Tree.js +2 -2
- package/package.json +2 -1
- package/.circleci/config.yml +0 -64
- package/.cspell.json +0 -34
- package/.editorconfig +0 -15
- package/.eslintrc.json +0 -37
- package/.gitignore +0 -11
- package/.prettierignore +0 -2
- package/.vscode/extensions.json +0 -8
- package/.vscode/launch.json +0 -29
- package/.vscode/settings.json +0 -7
- package/build/tsconfig.module.tsbuildinfo +0 -1
- package/build/tsconfig.tsbuildinfo +0 -1
- package/examples/defaultFilter.json +0 -203
- package/package-lock.json +0 -18266
- package/src/bin/cli-bin.ts +0 -52
- package/src/commands/scan.ts +0 -97
- package/src/index.ts +0 -4
- package/src/lib/filters/defaultFilter.ts +0 -207
- package/src/lib/filters/filtering.ts +0 -234
- package/src/lib/scanner/Dispatcher/DispatchableItem.ts +0 -29
- package/src/lib/scanner/Dispatcher/Dispatcher.ts +0 -151
- package/src/lib/scanner/Dispatcher/DispatcherResponse.ts +0 -40
- package/src/lib/scanner/Dispatcher/GlobalControllerAborter.ts +0 -33
- package/src/lib/scanner/Scannable/ScannableItem.ts +0 -43
- package/src/lib/scanner/Scanner.ts +0 -319
- package/src/lib/scanner/ScannerCfg.ts +0 -29
- package/src/lib/scanner/ScannerTypes.ts +0 -41
- package/src/lib/scanner/Winnower/Winnower.ts +0 -439
- package/src/lib/scanner/Winnower/WinnowerExtractor.ts +0 -38
- package/src/lib/scanner/Winnower/WinnowerResponse.ts +0 -38
- package/src/lib/tree/File.ts +0 -20
- package/src/lib/tree/Folder.ts +0 -50
- package/src/lib/tree/Node.ts +0 -34
- package/src/lib/tree/Tree.ts +0 -89
- package/tsconfig.json +0 -47
- package/tsconfig.module.json +0 -11
- package/yarn.lock +0 -5670
package/LICENSE
CHANGED
|
@@ -1,21 +1,23 @@
|
|
|
1
|
-
|
|
1
|
+
/\* SPDX-License-Identifier: MIT
|
|
2
2
|
|
|
3
|
-
|
|
3
|
+
- The MIT License (MIT)
|
|
4
|
+
- Copyright © 2022 Scan Open Source Solutions SL - https://scanoss.com
|
|
5
|
+
-
|
|
6
|
+
- Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
7
|
+
- of this software and associated documentation files (the “Software”), to
|
|
8
|
+
- deal in the Software \* without restriction, including without limitation
|
|
9
|
+
- the rights to use, copy, modify, merge, publish, distribute, sublicense,
|
|
10
|
+
- and/or sell copies of the Software, and to permit persons to whom the
|
|
11
|
+
- Software is furnished to do so, subject to the following conditions:
|
|
4
12
|
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
in the Software without restriction, including without limitation the rights
|
|
8
|
-
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
9
|
-
copies of the Software, and to permit persons to whom the Software is
|
|
10
|
-
furnished to do so, subject to the following conditions:
|
|
13
|
+
- The above copyright notice and this permission notice shall be included in
|
|
14
|
+
- all copies or substantial portions of the Software.
|
|
11
15
|
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
21
|
-
SOFTWARE.
|
|
16
|
+
- THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
17
|
+
- IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
18
|
+
- FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
19
|
+
- AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
20
|
+
- LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
|
|
21
|
+
- FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
|
|
22
|
+
- IN THE SOFTWARE.
|
|
23
|
+
\*/
|
|
@@ -2,6 +2,7 @@
|
|
|
2
2
|
"use strict";
|
|
3
3
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
4
4
|
const commander_1 = require("commander");
|
|
5
|
+
const dep_1 = require("../commands/dep");
|
|
5
6
|
const scan_1 = require("../commands/scan");
|
|
6
7
|
function CLIErrorHandler(e) {
|
|
7
8
|
console.error(' ');
|
|
@@ -30,6 +31,11 @@ async function main() {
|
|
|
30
31
|
.addHelpText('after', `
|
|
31
32
|
Examples:
|
|
32
33
|
$ scanoss-js scan -o scan-output.json <source-folder>`);
|
|
34
|
+
commander_1.program
|
|
35
|
+
.command('dep <source>')
|
|
36
|
+
.description('Scan for dependencies [ BETA ]')
|
|
37
|
+
.option('-o, --output <filename>', 'Output result file name (optional - default stdout)')
|
|
38
|
+
.action((source, options) => { (0, dep_1.depHandler)(source, options).catch((e) => { CLIErrorHandler(e); }); });
|
|
33
39
|
await commander_1.program.parseAsync(process.argv);
|
|
34
40
|
}
|
|
35
41
|
try {
|
|
@@ -39,4 +45,4 @@ catch (e) {
|
|
|
39
45
|
console.error(e);
|
|
40
46
|
process.exit(1);
|
|
41
47
|
}
|
|
42
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
48
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export declare function depHandler(rootPath: string, options: any): Promise<void>;
|
|
@@ -0,0 +1,26 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
+
};
|
|
5
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
+
exports.depHandler = void 0;
|
|
7
|
+
const fs_1 = __importDefault(require("fs"));
|
|
8
|
+
const __1 = require("..");
|
|
9
|
+
const Tree_1 = require("../lib/tree/Tree");
|
|
10
|
+
async function depHandler(rootPath, options) {
|
|
11
|
+
rootPath = rootPath.replace(/\/$/, ''); // Remove trailing slash if exists
|
|
12
|
+
rootPath = rootPath.replace(/^\./, process.env.PWD); // Convert relative path to absolute path.
|
|
13
|
+
const tree = new Tree_1.Tree(rootPath);
|
|
14
|
+
tree.buildTree();
|
|
15
|
+
const fileList = tree.getRootFolder().getFiles().map((path) => { return rootPath + path; });
|
|
16
|
+
const dependency = new __1.Dependency();
|
|
17
|
+
const results = await dependency.scan(fileList);
|
|
18
|
+
if (options.output) {
|
|
19
|
+
fs_1.default.promises.writeFile(options.output, JSON.stringify(results, null, 2));
|
|
20
|
+
}
|
|
21
|
+
else {
|
|
22
|
+
console.log(JSON.stringify(results, null, 2));
|
|
23
|
+
}
|
|
24
|
+
}
|
|
25
|
+
exports.depHandler = depHandler;
|
|
26
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZGVwLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vc3JjL2NvbW1hbmRzL2RlcC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7QUFBQSw0Q0FBb0I7QUFDcEIsMEJBQWdDO0FBQ2hDLDJDQUF3QztBQUlqQyxLQUFLLFVBQVUsVUFBVSxDQUFDLFFBQWdCLEVBQUUsT0FBWTtJQUM3RCxRQUFRLEdBQUcsUUFBUSxDQUFDLE9BQU8sQ0FBQyxLQUFLLEVBQUUsRUFBRSxDQUFDLENBQUMsQ0FBRSxrQ0FBa0M7SUFDM0UsUUFBUSxHQUFHLFFBQVEsQ0FBQyxPQUFPLENBQUMsS0FBSyxFQUFFLE9BQU8sQ0FBQyxHQUFHLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBRSwwQ0FBMEM7SUFFaEcsTUFBTSxJQUFJLEdBQUcsSUFBSSxXQUFJLENBQUMsUUFBUSxDQUFDLENBQUM7SUFDaEMsSUFBSSxDQUFDLFNBQVMsRUFBRSxDQUFDO0lBRWpCLE1BQU0sUUFBUSxHQUFHLElBQUksQ0FBQyxhQUFhLEVBQUUsQ0FBQyxRQUFRLEVBQUUsQ0FBQyxHQUFHLENBQUMsQ0FBQyxJQUFJLEVBQUUsRUFBRSxHQUFFLE9BQU8sUUFBUSxHQUFDLElBQUksQ0FBQSxDQUFBLENBQUMsQ0FBQyxDQUFDO0lBRXZGLE1BQU0sVUFBVSxHQUFHLElBQUksY0FBVSxFQUFFLENBQUM7SUFDcEMsTUFBTSxPQUFPLEdBQUcsTUFBTSxVQUFVLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxDQUFDO0lBRWhELElBQUcsT0FBTyxDQUFDLE1BQU0sRUFBRTtRQUNqQixZQUFFLENBQUMsUUFBUSxDQUFDLFNBQVMsQ0FBQyxPQUFPLENBQUMsTUFBTSxFQUFFLElBQUksQ0FBQyxTQUFTLENBQUMsT0FBTyxFQUFFLElBQUksRUFBRSxDQUFDLENBQUMsQ0FBQyxDQUFDO0tBQ3pFO1NBQU07UUFDTCxPQUFPLENBQUMsR0FBRyxDQUFDLElBQUksQ0FBQyxTQUFTLENBQUMsT0FBTyxFQUFFLElBQUksRUFBRSxDQUFDLENBQUMsQ0FBQyxDQUFDO0tBQy9DO0FBRUgsQ0FBQztBQWxCRCxnQ0FrQkMifQ==
|
package/build/main/index.d.ts
CHANGED
package/build/main/index.js
CHANGED
|
@@ -13,4 +13,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
13
13
|
__exportStar(require("./lib/scanner/ScannerTypes"), exports);
|
|
14
14
|
__exportStar(require("./lib/scanner/ScannerCfg"), exports);
|
|
15
15
|
__exportStar(require("./lib/scanner/Scanner"), exports);
|
|
16
|
-
|
|
16
|
+
__exportStar(require("./lib/dependencies/DependencyTypes"), exports);
|
|
17
|
+
__exportStar(require("./lib/dependencies/Dependency"), exports);
|
|
18
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7O0FBQUEsNkRBQTJDO0FBQzNDLDJEQUF3QztBQUN4Qyx3REFBcUM7QUFDckMscUVBQW1EO0FBQ25ELGdFQUE4QyJ9
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
import { IDependencyResponse } from "./DependencyTypes";
|
|
2
|
+
export declare class Dependency {
|
|
3
|
+
private workDirectory;
|
|
4
|
+
private resultFilePath;
|
|
5
|
+
constructor();
|
|
6
|
+
scan(fileList: Array<string>): Promise<IDependencyResponse>;
|
|
7
|
+
setWorkDirectory(workDirectory: string): void;
|
|
8
|
+
private adapterToDependencyResponse;
|
|
9
|
+
}
|
|
@@ -0,0 +1,50 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
+
};
|
|
5
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
+
exports.Dependency = void 0;
|
|
7
|
+
const os_1 = __importDefault(require("os"));
|
|
8
|
+
const fs_1 = __importDefault(require("fs"));
|
|
9
|
+
const PurlGenerator_1 = require("./PurlGenerator");
|
|
10
|
+
class Dependency {
|
|
11
|
+
constructor() {
|
|
12
|
+
this.setWorkDirectory(`${os_1.default.tmpdir()}/depscanner-${new Date().getTime()}`);
|
|
13
|
+
}
|
|
14
|
+
async scan(fileList) {
|
|
15
|
+
const toGrpc = await (0, PurlGenerator_1.generateDependenciesPurls)(fileList);
|
|
16
|
+
// Here we should call to the grpc server
|
|
17
|
+
return this.adapterToDependencyResponse(toGrpc);
|
|
18
|
+
}
|
|
19
|
+
setWorkDirectory(workDirectory) {
|
|
20
|
+
this.workDirectory = workDirectory;
|
|
21
|
+
this.resultFilePath = `${this.workDirectory}/dependencies.json`;
|
|
22
|
+
if (!fs_1.default.existsSync(this.workDirectory))
|
|
23
|
+
fs_1.default.mkdirSync(this.workDirectory);
|
|
24
|
+
}
|
|
25
|
+
adapterToDependencyResponse(dependencies) {
|
|
26
|
+
const results = { files: [] };
|
|
27
|
+
const depArr = [];
|
|
28
|
+
let fileArr = {};
|
|
29
|
+
for (const dependency of dependencies.files) {
|
|
30
|
+
for (const purl of dependency.purls) {
|
|
31
|
+
depArr.push({
|
|
32
|
+
component: null,
|
|
33
|
+
purl: purl.purl,
|
|
34
|
+
version: null,
|
|
35
|
+
licenses: [{ name: null }]
|
|
36
|
+
});
|
|
37
|
+
}
|
|
38
|
+
fileArr = ({
|
|
39
|
+
file: dependency.file,
|
|
40
|
+
id: "dependency",
|
|
41
|
+
status: "pending",
|
|
42
|
+
dependencies: depArr
|
|
43
|
+
});
|
|
44
|
+
results.files.push(fileArr);
|
|
45
|
+
}
|
|
46
|
+
return results;
|
|
47
|
+
}
|
|
48
|
+
}
|
|
49
|
+
exports.Dependency = Dependency;
|
|
50
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
interface ILicense {
|
|
2
|
+
name: string;
|
|
3
|
+
}
|
|
4
|
+
export interface IDependency {
|
|
5
|
+
component: string;
|
|
6
|
+
purl: string;
|
|
7
|
+
version: string;
|
|
8
|
+
licenses: Array<ILicense>;
|
|
9
|
+
}
|
|
10
|
+
export interface IFile {
|
|
11
|
+
file: string;
|
|
12
|
+
id: string;
|
|
13
|
+
status: string;
|
|
14
|
+
dependencies: Array<IDependency>;
|
|
15
|
+
}
|
|
16
|
+
export interface IDependencyResponse {
|
|
17
|
+
files: Array<IFile>;
|
|
18
|
+
}
|
|
19
|
+
export {};
|
|
@@ -0,0 +1,3 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiRGVwZW5kZW5jeVR5cGVzLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vc3JjL2xpYi9kZXBlbmRlbmNpZXMvRGVwZW5kZW5jeVR5cGVzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiIifQ==
|
|
@@ -0,0 +1,39 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
+
};
|
|
5
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
+
exports.generateDependenciesPurls = void 0;
|
|
7
|
+
const fs_1 = __importDefault(require("fs"));
|
|
8
|
+
const path_1 = __importDefault(require("path"));
|
|
9
|
+
const mavenParser_1 = require("./parsers/mavenParser");
|
|
10
|
+
const npmParser_1 = require("./parsers/npmParser");
|
|
11
|
+
const pyParser_1 = require("./parsers/pyParser");
|
|
12
|
+
const rubyParser_1 = require("./parsers/rubyParser");
|
|
13
|
+
/*
|
|
14
|
+
This is a hash map that connect a filename with it's own parser function
|
|
15
|
+
Any parser function must return a FileDependency object (See type.ts file in src/parser
|
|
16
|
+
*/
|
|
17
|
+
const Parser = {
|
|
18
|
+
'requirements.txt': pyParser_1.requirementsParser,
|
|
19
|
+
'pom.xml': mavenParser_1.pomParser,
|
|
20
|
+
'package.json': npmParser_1.packageParser,
|
|
21
|
+
'package-lock.json': npmParser_1.packagelockParser,
|
|
22
|
+
'Gemfile': rubyParser_1.gemfileParser,
|
|
23
|
+
'Gemfile.lock': rubyParser_1.gemfilelockParser
|
|
24
|
+
};
|
|
25
|
+
async function generateDependenciesPurls(files) {
|
|
26
|
+
let results = { files: [] };
|
|
27
|
+
for (const filePath of files) {
|
|
28
|
+
const fileName = path_1.default.basename(filePath);
|
|
29
|
+
if (Parser[fileName] != null) {
|
|
30
|
+
const fileContent = await fs_1.default.promises.readFile(filePath, 'utf8');
|
|
31
|
+
const dependency = Parser[fileName](fileContent, filePath);
|
|
32
|
+
if (dependency.purls.length != 0)
|
|
33
|
+
results.files.push(dependency);
|
|
34
|
+
}
|
|
35
|
+
}
|
|
36
|
+
return results;
|
|
37
|
+
}
|
|
38
|
+
exports.generateDependenciesPurls = generateDependenciesPurls;
|
|
39
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiUHVybEdlbmVyYXRvci5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uL3NyYy9saWIvZGVwZW5kZW5jaWVzL1B1cmxHZW5lcmF0b3IudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7O0FBQUEsNENBQW9CO0FBQ3BCLGdEQUF3QjtBQUl4Qix1REFBa0Q7QUFDbEQsbURBQXVFO0FBQ3ZFLGlEQUF3RDtBQUN4RCxxREFBd0U7QUFJeEU7OztFQUdFO0FBQ0YsTUFBTSxNQUFNLEdBQXNCO0lBQzlCLGtCQUFrQixFQUFFLDZCQUFrQjtJQUN0QyxTQUFTLEVBQUUsdUJBQVM7SUFDcEIsY0FBYyxFQUFFLHlCQUFhO0lBQzdCLG1CQUFtQixFQUFFLDZCQUFpQjtJQUN0QyxTQUFTLEVBQUUsMEJBQWE7SUFDeEIsY0FBYyxFQUFFLDhCQUFpQjtDQUNwQyxDQUFDO0FBR0ssS0FBSyxVQUFVLHlCQUF5QixDQUFDLEtBQW9CO0lBQ2hFLElBQUksT0FBTyxHQUF1QixFQUFDLEtBQUssRUFBRSxFQUFFLEVBQUMsQ0FBQztJQUU5QyxLQUFLLE1BQU0sUUFBUSxJQUFJLEtBQUssRUFBRTtRQUMxQixNQUFNLFFBQVEsR0FBRyxjQUFJLENBQUMsUUFBUSxDQUFDLFFBQVEsQ0FBQyxDQUFDO1FBQ3pDLElBQUcsTUFBTSxDQUFDLFFBQVEsQ0FBQyxJQUFJLElBQUksRUFBRTtZQUN6QixNQUFNLFdBQVcsR0FBRyxNQUFNLFlBQUUsQ0FBQyxRQUFRLENBQUMsUUFBUSxDQUFDLFFBQVEsRUFBRSxNQUFNLENBQUMsQ0FBQztZQUNqRSxNQUFNLFVBQVUsR0FBRyxNQUFNLENBQUMsUUFBUSxDQUFDLENBQUMsV0FBVyxFQUFFLFFBQVEsQ0FBQyxDQUFDO1lBQzNELElBQUcsVUFBVSxDQUFDLEtBQUssQ0FBQyxNQUFNLElBQUksQ0FBQztnQkFDM0IsT0FBTyxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsVUFBVSxDQUFDLENBQUM7U0FDdEM7S0FDSjtJQUNELE9BQU8sT0FBTyxDQUFDO0FBQ25CLENBQUM7QUFiRCw4REFhQyJ9
|
|
File without changes
|
|
@@ -0,0 +1,3 @@
|
|
|
1
|
+
// Reference https://go.dev/ref/mod#go-mod-file
|
|
2
|
+
//
|
|
3
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZ29sYW5nUGFyc2VyLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vLi4vc3JjL2xpYi9kZXBlbmRlbmNpZXMvcGFyc2Vycy9nb2xhbmdQYXJzZXIudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBRUEsK0NBQStDO0FBQy9DLEdBQUcifQ==
|
|
@@ -0,0 +1,44 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
+
};
|
|
5
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
+
exports.pomParser = void 0;
|
|
7
|
+
const path_1 = __importDefault(require("path"));
|
|
8
|
+
const packageurl_js_1 = require("packageurl-js");
|
|
9
|
+
const PURL_TYPE = 'maven';
|
|
10
|
+
// Parse a pom.txt file from maven manifest file
|
|
11
|
+
// See reference on: https://maven.apache.org/guides/introduction/introduction-to-the-pom.html
|
|
12
|
+
// and https://maven.apache.org/guides/introduction/introduction-to-dependency-mechanism.html
|
|
13
|
+
const MANIFEST_FILE = 'pom.xml';
|
|
14
|
+
function pomParser(fileContent, filePath) {
|
|
15
|
+
// If the file is not a python manifest file, return an empty results
|
|
16
|
+
const results = { file: filePath, purls: [] };
|
|
17
|
+
if (path_1.default.basename(filePath) != MANIFEST_FILE)
|
|
18
|
+
return results;
|
|
19
|
+
const dependencies = fileContent.match(/<dependency>((?:.|\n)*?)<\/dependency>/gm);
|
|
20
|
+
if (dependencies) {
|
|
21
|
+
// TODO: classifier are not supported yet
|
|
22
|
+
dependencies.forEach(dependency => {
|
|
23
|
+
// Extract groupId. It's the purl namespace
|
|
24
|
+
const groupId = dependency.match(/<groupId>([^<]*)<\/groupId>/);
|
|
25
|
+
const namespace = groupId ? groupId[1] : '';
|
|
26
|
+
// Extract artifact id. It's the purl name
|
|
27
|
+
const artifactId = dependency.match(/<artifactId>([^<]*)<\/artifactId>/);
|
|
28
|
+
const name = artifactId ? artifactId[1] : '';
|
|
29
|
+
const versionReg = dependency.match(/<version>([^<]*)<\/version>/);
|
|
30
|
+
const version = versionReg ? versionReg[1] : '';
|
|
31
|
+
let purlQualifiers;
|
|
32
|
+
const type = dependency.match(/<type>([^<]*)<\/type>/);
|
|
33
|
+
if (type) {
|
|
34
|
+
purlQualifiers = {};
|
|
35
|
+
purlQualifiers['type'] = type[1];
|
|
36
|
+
}
|
|
37
|
+
const purlString = new packageurl_js_1.PackageURL(PURL_TYPE, namespace, name, version, purlQualifiers, undefined).toString();
|
|
38
|
+
results.purls.push({ purl: purlString });
|
|
39
|
+
});
|
|
40
|
+
}
|
|
41
|
+
return results;
|
|
42
|
+
}
|
|
43
|
+
exports.pomParser = pomParser;
|
|
44
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibWF2ZW5QYXJzZXIuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvbGliL2RlcGVuZGVuY2llcy9wYXJzZXJzL21hdmVuUGFyc2VyLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7OztBQUFBLGdEQUF3QjtBQUN4QixpREFBMkM7QUFJM0MsTUFBTSxTQUFTLEdBQUcsT0FBTyxDQUFDO0FBRzFCLGdEQUFnRDtBQUNoRCw4RkFBOEY7QUFDOUYsNkZBQTZGO0FBQzdGLE1BQU0sYUFBYSxHQUFHLFNBQVMsQ0FBQztBQUNoQyxTQUFnQixTQUFTLENBQUMsV0FBbUIsRUFBRSxRQUFnQjtJQUUzRCxxRUFBcUU7SUFDckUsTUFBTSxPQUFPLEdBQW1CLEVBQUMsSUFBSSxFQUFFLFFBQVEsRUFBRSxLQUFLLEVBQUUsRUFBRSxFQUFDLENBQUM7SUFDNUQsSUFBRyxjQUFJLENBQUMsUUFBUSxDQUFDLFFBQVEsQ0FBQyxJQUFJLGFBQWE7UUFDdkMsT0FBTyxPQUFPLENBQUM7SUFFbkIsTUFBTSxZQUFZLEdBQUcsV0FBVyxDQUFDLEtBQUssQ0FBQywwQ0FBMEMsQ0FBQyxDQUFDO0lBQ25GLElBQUcsWUFBWSxFQUFFO1FBQ2IseUNBQXlDO1FBQ3pDLFlBQVksQ0FBQyxPQUFPLENBQUMsVUFBVSxDQUFDLEVBQUU7WUFDOUIsMkNBQTJDO1lBQzNDLE1BQU0sT0FBTyxHQUFHLFVBQVUsQ0FBQyxLQUFLLENBQUMsNkJBQTZCLENBQUMsQ0FBQztZQUNoRSxNQUFNLFNBQVMsR0FBRyxPQUFPLENBQUMsQ0FBQyxDQUFDLE9BQU8sQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDO1lBRTVDLDBDQUEwQztZQUMxQyxNQUFNLFVBQVUsR0FBRyxVQUFVLENBQUMsS0FBSyxDQUFDLG1DQUFtQyxDQUFDLENBQUM7WUFDekUsTUFBTSxJQUFJLEdBQUcsVUFBVSxDQUFDLENBQUMsQ0FBQyxVQUFVLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQztZQUU3QyxNQUFNLFVBQVUsR0FBRyxVQUFVLENBQUMsS0FBSyxDQUFDLDZCQUE2QixDQUFDLENBQUM7WUFDbkUsTUFBTSxPQUFPLEdBQUcsVUFBVSxDQUFDLENBQUMsQ0FBQyxVQUFVLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQztZQUdoRCxJQUFJLGNBQWMsQ0FBQztZQUNuQixNQUFNLElBQUksR0FBRyxVQUFVLENBQUMsS0FBSyxDQUFDLHVCQUF1QixDQUFDLENBQUM7WUFDdkQsSUFBRyxJQUFJLEVBQUU7Z0JBQ0wsY0FBYyxHQUFHLEVBQUUsQ0FBQztnQkFDcEIsY0FBYyxDQUFDLE1BQU0sQ0FBQyxHQUFHLElBQUksQ0FBQyxDQUFDLENBQUMsQ0FBQTthQUNuQztZQUVELE1BQU0sVUFBVSxHQUFHLElBQUksMEJBQVUsQ0FBQyxTQUFTLEVBQUUsU0FBUyxFQUFFLElBQUksRUFBRSxPQUFPLEVBQUUsY0FBYyxFQUFFLFNBQVMsQ0FBQyxDQUFDLFFBQVEsRUFBRSxDQUFDO1lBQzdHLE9BQU8sQ0FBQyxLQUFLLENBQUMsSUFBSSxDQUFDLEVBQUMsSUFBSSxFQUFFLFVBQVUsRUFBQyxDQUFDLENBQUM7UUFDM0MsQ0FBQyxDQUFDLENBQUM7S0FDTjtJQUNELE9BQU8sT0FBTyxDQUFDO0FBQ25CLENBQUM7QUFuQ0QsOEJBbUNDIn0=
|
|
@@ -0,0 +1,45 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
+
};
|
|
5
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
+
exports.packagelockParser = exports.packageParser = void 0;
|
|
7
|
+
const path_1 = __importDefault(require("path"));
|
|
8
|
+
const packageurl_js_1 = require("packageurl-js");
|
|
9
|
+
const PURL_TYPE = 'npm';
|
|
10
|
+
// Parse a package.json file from node projects
|
|
11
|
+
// See reference on: https://docs.npmjs.com/cli/v8/configuring-npm/package-json
|
|
12
|
+
const MANIFEST_FILE = 'package.json';
|
|
13
|
+
function packageParser(fileContent, filePath) {
|
|
14
|
+
// If the file is not manifest file, return an empty results
|
|
15
|
+
const results = { file: filePath, purls: [] };
|
|
16
|
+
if (path_1.default.basename(filePath) != MANIFEST_FILE)
|
|
17
|
+
return results;
|
|
18
|
+
const o = JSON.parse(fileContent);
|
|
19
|
+
let devDeps = Object.keys(o.devDependencies || {});
|
|
20
|
+
let deps = Object.keys(o.dependencies || {});
|
|
21
|
+
let listDeps = [...deps, ...devDeps];
|
|
22
|
+
for (const name of listDeps) {
|
|
23
|
+
const purlString = new packageurl_js_1.PackageURL(PURL_TYPE, undefined, name, undefined, undefined, undefined).toString();
|
|
24
|
+
results.purls.push({ purl: purlString });
|
|
25
|
+
}
|
|
26
|
+
return results;
|
|
27
|
+
}
|
|
28
|
+
exports.packageParser = packageParser;
|
|
29
|
+
// Parse a package-lock.json file from node projects
|
|
30
|
+
// See reference on: https://docs.npmjs.com/cli/v8/configuring-npm/package-json
|
|
31
|
+
const MANIFEST_FILE_1 = 'package-loc.json';
|
|
32
|
+
function packagelockParser(fileContent, filePath) {
|
|
33
|
+
const results = { file: filePath, purls: [] };
|
|
34
|
+
if (path_1.default.basename(filePath) != MANIFEST_FILE_1)
|
|
35
|
+
return results;
|
|
36
|
+
const o = JSON.parse(fileContent).dependencies;
|
|
37
|
+
for (const [key, value] of Object.entries(o)) {
|
|
38
|
+
if (!key)
|
|
39
|
+
continue;
|
|
40
|
+
let purl = new packageurl_js_1.PackageURL(PURL_TYPE, undefined, key, value['version'], undefined, undefined).toString();
|
|
41
|
+
results.purls.push({ purl });
|
|
42
|
+
}
|
|
43
|
+
}
|
|
44
|
+
exports.packagelockParser = packagelockParser;
|
|
45
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -0,0 +1,51 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
+
};
|
|
5
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
+
exports.requirementsParser = void 0;
|
|
7
|
+
const path_1 = __importDefault(require("path"));
|
|
8
|
+
const packageurl_js_1 = require("packageurl-js");
|
|
9
|
+
const utils_1 = require("./utils");
|
|
10
|
+
const PURL_TYPE = 'pypi';
|
|
11
|
+
// Parse a requirements.txt file from python projects
|
|
12
|
+
// See reference on: https://pip.pypa.io/en/stable/reference/requirements-file-format/
|
|
13
|
+
const MANIFEST_FILE = 'requirements.txt';
|
|
14
|
+
function requirementsParser(fileContent, filePath) {
|
|
15
|
+
// If the file is not a python manifest file, return an empty results
|
|
16
|
+
const results = { file: filePath, purls: [] };
|
|
17
|
+
if (path_1.default.basename(filePath) != MANIFEST_FILE)
|
|
18
|
+
return results;
|
|
19
|
+
const lines = fileContent.split('\n');
|
|
20
|
+
let compName = '';
|
|
21
|
+
let compVer = '';
|
|
22
|
+
for (let line of lines) {
|
|
23
|
+
line = line.trim();
|
|
24
|
+
if (!line.startsWith('#') && line.length > 0) { // Avoid comments and new lines
|
|
25
|
+
if ((0, utils_1.isValidUrl)(line)) {
|
|
26
|
+
// For reference about the regex see https://www.rfc-editor.org/rfc/rfc3986#appendix-B
|
|
27
|
+
const res = line.match(/^(([^:\/?#]+):)?(\/\/([^\/?#]*))?([^?#]*)(\?([^#]*))?(#(.*))?/);
|
|
28
|
+
continue;
|
|
29
|
+
}
|
|
30
|
+
else if ((0, utils_1.isValidPath)(line)) {
|
|
31
|
+
continue;
|
|
32
|
+
}
|
|
33
|
+
else if (line.startsWith('-r')) {
|
|
34
|
+
continue;
|
|
35
|
+
} // recursive dependencies (NOT SUPPORTED YET)
|
|
36
|
+
else {
|
|
37
|
+
// Line contains a package name and/or version.
|
|
38
|
+
const res = line.match(/^([-\w]+)\s*(?:[>=~!]*)\s*([\d\.]*)/); //Extract name and version
|
|
39
|
+
if (res) {
|
|
40
|
+
compName = res.length > 1 ? res[1] : ' ';
|
|
41
|
+
compVer = undefined;
|
|
42
|
+
}
|
|
43
|
+
}
|
|
44
|
+
const purlString = new packageurl_js_1.PackageURL(PURL_TYPE, undefined, compName, compVer, undefined, undefined).toString();
|
|
45
|
+
results.purls.push({ purl: purlString });
|
|
46
|
+
}
|
|
47
|
+
}
|
|
48
|
+
return results;
|
|
49
|
+
}
|
|
50
|
+
exports.requirementsParser = requirementsParser;
|
|
51
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicHlQYXJzZXIuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvbGliL2RlcGVuZGVuY2llcy9wYXJzZXJzL3B5UGFyc2VyLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7OztBQUFBLGdEQUF3QjtBQUN4QixpREFBMkM7QUFFM0MsbUNBQWtEO0FBRWxELE1BQU0sU0FBUyxHQUFHLE1BQU0sQ0FBQztBQUV6QixxREFBcUQ7QUFDckQsc0ZBQXNGO0FBQ3RGLE1BQU0sYUFBYSxHQUFHLGtCQUFrQixDQUFDO0FBQ3pDLFNBQWdCLGtCQUFrQixDQUFDLFdBQW1CLEVBQUUsUUFBZ0I7SUFFcEUscUVBQXFFO0lBQ3JFLE1BQU0sT0FBTyxHQUFtQixFQUFDLElBQUksRUFBRSxRQUFRLEVBQUUsS0FBSyxFQUFFLEVBQUUsRUFBQyxDQUFDO0lBQzVELElBQUcsY0FBSSxDQUFDLFFBQVEsQ0FBQyxRQUFRLENBQUMsSUFBSSxhQUFhO1FBQ3ZDLE9BQU8sT0FBTyxDQUFDO0lBR25CLE1BQU0sS0FBSyxHQUFrQixXQUFXLENBQUMsS0FBSyxDQUFDLElBQUksQ0FBQyxDQUFDO0lBQ3JELElBQUksUUFBUSxHQUFXLEVBQUUsQ0FBQztJQUMxQixJQUFJLE9BQU8sR0FBVyxFQUFFLENBQUM7SUFFekIsS0FBSyxJQUFJLElBQUksSUFBSSxLQUFLLEVBQUU7UUFDcEIsSUFBSSxHQUFHLElBQUksQ0FBQyxJQUFJLEVBQUUsQ0FBQztRQUNuQixJQUFJLENBQUMsSUFBSSxDQUFDLFVBQVUsQ0FBQyxHQUFHLENBQUMsSUFBSSxJQUFJLENBQUMsTUFBTSxHQUFDLENBQUMsRUFBRSxFQUFFLCtCQUErQjtZQUN6RSxJQUFHLElBQUEsa0JBQVUsRUFBQyxJQUFJLENBQUMsRUFBRTtnQkFDakIsc0ZBQXNGO2dCQUN0RixNQUFNLEdBQUcsR0FBRyxJQUFJLENBQUMsS0FBSyxDQUFDLCtEQUErRCxDQUFDLENBQUM7Z0JBQ3hGLFNBQVM7YUFDWjtpQkFDSSxJQUFHLElBQUEsbUJBQVcsRUFBQyxJQUFJLENBQUMsRUFBRTtnQkFBQyxTQUFTO2FBQUM7aUJBQ2pDLElBQUcsSUFBSSxDQUFDLFVBQVUsQ0FBQyxJQUFJLENBQUMsRUFBRTtnQkFBQyxTQUFTO2FBQUMsQ0FBQyw2Q0FBNkM7aUJBQ25GO2dCQUNELCtDQUErQztnQkFDL0MsTUFBTSxHQUFHLEdBQUcsSUFBSSxDQUFDLEtBQUssQ0FBQyxxQ0FBcUMsQ0FBQyxDQUFDLENBQUksMEJBQTBCO2dCQUM1RixJQUFJLEdBQUcsRUFBRTtvQkFDTCxRQUFRLEdBQUcsR0FBRyxDQUFDLE1BQU0sR0FBRyxDQUFDLENBQUMsQ0FBQyxDQUFDLEdBQUcsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsR0FBRyxDQUFDO29CQUN6QyxPQUFPLEdBQUcsU0FBUyxDQUFDO2lCQUN2QjthQUNKO1lBQ0QsTUFBTSxVQUFVLEdBQUcsSUFBSSwwQkFBVSxDQUFDLFNBQVMsRUFBRSxTQUFTLEVBQUUsUUFBUSxFQUFFLE9BQU8sRUFBRSxTQUFTLEVBQUUsU0FBUyxDQUFDLENBQUMsUUFBUSxFQUFFLENBQUM7WUFDNUcsT0FBTyxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsRUFBQyxJQUFJLEVBQUUsVUFBVSxFQUFDLENBQUMsQ0FBQztTQUMxQztLQUNKO0lBQ0QsT0FBTyxPQUFPLENBQUM7QUFDbkIsQ0FBQztBQW5DRCxnREFtQ0MifQ==
|
|
@@ -0,0 +1,135 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
+
};
|
|
5
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
+
exports.gemfilelockParser = exports.gemfileParser = void 0;
|
|
7
|
+
const path_1 = __importDefault(require("path"));
|
|
8
|
+
const packageurl_js_1 = require("packageurl-js");
|
|
9
|
+
const PURL_TYPE = 'gem';
|
|
10
|
+
// Parse a gemfile file from ruby
|
|
11
|
+
// See reference on: https://bundler.io/gemfile.html
|
|
12
|
+
// and https://bundler.io/man/gemfile.5.html
|
|
13
|
+
const MANIFEST_FILE = 'Gemfile';
|
|
14
|
+
function gemfileParser(fileContent, filePath) {
|
|
15
|
+
// If the file is not a manifest file, return an empty results
|
|
16
|
+
const results = { file: filePath, purls: [] };
|
|
17
|
+
if (path_1.default.basename(filePath) != MANIFEST_FILE)
|
|
18
|
+
return results;
|
|
19
|
+
const lines = fileContent.split('\n');
|
|
20
|
+
let compName = '';
|
|
21
|
+
for (let line of lines) {
|
|
22
|
+
line = line.trim();
|
|
23
|
+
if (!line.startsWith('#') && line.length > 0) { // Avoid comments and empty lines
|
|
24
|
+
// Line contains a package name and/or version.
|
|
25
|
+
const res = line.match(/^gem\s*(["']\w+["'])/); //Extract name
|
|
26
|
+
if (res) {
|
|
27
|
+
compName = res.length > 1 ? res[1] : ' ';
|
|
28
|
+
compName = compName.replace(/['"]/g, '');
|
|
29
|
+
const purlString = new packageurl_js_1.PackageURL(PURL_TYPE, undefined, compName, undefined, undefined, undefined).toString();
|
|
30
|
+
results.purls.push({ purl: purlString });
|
|
31
|
+
}
|
|
32
|
+
}
|
|
33
|
+
}
|
|
34
|
+
return results;
|
|
35
|
+
}
|
|
36
|
+
exports.gemfileParser = gemfileParser;
|
|
37
|
+
const MANIFEST_FILE_1 = 'Gemfile.lock';
|
|
38
|
+
function gemfilelockParser(fileContent, filePath) {
|
|
39
|
+
// If the file is not a manifest file, return an empty results
|
|
40
|
+
const results = { file: filePath, purls: [] };
|
|
41
|
+
if (path_1.default.basename(filePath) != MANIFEST_FILE_1)
|
|
42
|
+
return results;
|
|
43
|
+
const gemlockParser = new GemfileLockParser();
|
|
44
|
+
const purls = gemlockParser.getDependencies(fileContent);
|
|
45
|
+
for (const purl of purls) {
|
|
46
|
+
results.purls.push({ purl });
|
|
47
|
+
}
|
|
48
|
+
return results;
|
|
49
|
+
}
|
|
50
|
+
exports.gemfilelockParser = gemfilelockParser;
|
|
51
|
+
// Section headings: these are also used as switches to track a parsing state
|
|
52
|
+
const PATH = 'PATH';
|
|
53
|
+
const GIT = 'GIT';
|
|
54
|
+
const SVN = 'SVN';
|
|
55
|
+
const GEM = 'GEM';
|
|
56
|
+
const PLATFORMS = 'PLATFORMS';
|
|
57
|
+
const DEPENDENCIES = 'DEPENDENCIES';
|
|
58
|
+
const SPECS = ' specs:';
|
|
59
|
+
// types of Gems, which is really where they are provisioned from
|
|
60
|
+
// RubyGems repo, local path or VCS
|
|
61
|
+
const GEM_TYPES = [GEM, PATH, GIT, SVN];
|
|
62
|
+
const specRegex = /(?<name>[^ \)\(,!:]+)?(?: \((?<version>[^-]*?)(?:-(?<platform>[^!]*))?\))?/;
|
|
63
|
+
const firstDepLevelRegex = /^ {4}(?! )/;
|
|
64
|
+
/*
|
|
65
|
+
The parsing use a simple state machine, switching states based on sections
|
|
66
|
+
headings. The result is a list of purls
|
|
67
|
+
*/
|
|
68
|
+
class GemfileLockParser {
|
|
69
|
+
constructor() {
|
|
70
|
+
this.purlList = [];
|
|
71
|
+
// map of a line start string to the next parsing state function
|
|
72
|
+
this.statesMap = {};
|
|
73
|
+
this.statesMap[DEPENDENCIES] = this.parseDependency;
|
|
74
|
+
this.statesMap[PLATFORMS] = this.parsePlatform;
|
|
75
|
+
this.statesMap[GIT] = this.parseOptions;
|
|
76
|
+
this.statesMap[PATH] = this.parseOptions;
|
|
77
|
+
this.statesMap[SVN] = this.parseOptions;
|
|
78
|
+
this.statesMap[GEM] = this.parseOptions;
|
|
79
|
+
this.statesMap[SPECS] = this.parseSpec;
|
|
80
|
+
}
|
|
81
|
+
getDependencies(filecontent) {
|
|
82
|
+
this.resetState();
|
|
83
|
+
let file = filecontent.split('\n');
|
|
84
|
+
for (let line of file) {
|
|
85
|
+
line = line.trimEnd();
|
|
86
|
+
//reset state on empty lines
|
|
87
|
+
if (!line.length) {
|
|
88
|
+
this.resetState();
|
|
89
|
+
continue;
|
|
90
|
+
}
|
|
91
|
+
//switch to new state
|
|
92
|
+
if (line in this.statesMap) {
|
|
93
|
+
if (GEM_TYPES.includes(line))
|
|
94
|
+
this.current_gem = line;
|
|
95
|
+
this.state = this.statesMap[line];
|
|
96
|
+
continue;
|
|
97
|
+
}
|
|
98
|
+
// process the line
|
|
99
|
+
if (this.state)
|
|
100
|
+
this.state(line);
|
|
101
|
+
}
|
|
102
|
+
this.refine();
|
|
103
|
+
return this.purlList;
|
|
104
|
+
}
|
|
105
|
+
resetState() {
|
|
106
|
+
this.current_options = {};
|
|
107
|
+
this.state = null;
|
|
108
|
+
}
|
|
109
|
+
parseOptions(line) {
|
|
110
|
+
const match = line.match(/\s*(\w+):\s*(.*)/);
|
|
111
|
+
const key = match.length >= 1 ? match[1] : null;
|
|
112
|
+
const value = match.length >= 2 ? match[2] : null;
|
|
113
|
+
if (key)
|
|
114
|
+
this.current_options[key] = value;
|
|
115
|
+
}
|
|
116
|
+
parseDependency(line) { }
|
|
117
|
+
parsePlatform(line) { }
|
|
118
|
+
parseSpec(line) {
|
|
119
|
+
if (this.current_gem == GEM) {
|
|
120
|
+
if (firstDepLevelRegex.test(line)) {
|
|
121
|
+
line = line.trimStart();
|
|
122
|
+
const match = line.match(specRegex);
|
|
123
|
+
const purl = new packageurl_js_1.PackageURL(PURL_TYPE, undefined, match.groups.name, match.groups.version, undefined, undefined).toString();
|
|
124
|
+
this.purlList.push(purl);
|
|
125
|
+
}
|
|
126
|
+
else { // Second level of dependence
|
|
127
|
+
}
|
|
128
|
+
}
|
|
129
|
+
if (this.current_gem == GIT) { }
|
|
130
|
+
// Purl from local dependencies are not generated
|
|
131
|
+
if (this.current_gem == PATH) { }
|
|
132
|
+
}
|
|
133
|
+
refine() { }
|
|
134
|
+
}
|
|
135
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
export interface Purl {
|
|
2
|
+
purl: string;
|
|
3
|
+
}
|
|
4
|
+
export interface FileDependency {
|
|
5
|
+
file: string;
|
|
6
|
+
purls: Array<Purl>;
|
|
7
|
+
}
|
|
8
|
+
export interface FileListDependency {
|
|
9
|
+
files: Array<FileDependency>;
|
|
10
|
+
}
|
|
11
|
+
declare type ParserFuncType = (fileContent: string, filePath: string) => FileDependency;
|
|
12
|
+
export interface ParserDefinitions {
|
|
13
|
+
[key: string]: ParserFuncType;
|
|
14
|
+
}
|
|
15
|
+
export {};
|
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
/*
|
|
4
|
+
EXAMPLE
|
|
5
|
+
{
|
|
6
|
+
"files": [
|
|
7
|
+
{
|
|
8
|
+
"file": "./test/data/requirements.txt",
|
|
9
|
+
"purls": [
|
|
10
|
+
{
|
|
11
|
+
"purl": "pkg:pypi/requests"
|
|
12
|
+
},
|
|
13
|
+
{
|
|
14
|
+
"purl": "pkg:pypi/crc32c@2.2"
|
|
15
|
+
},
|
|
16
|
+
{
|
|
17
|
+
"purl": "pkg:pypi/binaryornot"
|
|
18
|
+
},
|
|
19
|
+
{
|
|
20
|
+
"purl": "pkg:pypi/progress"
|
|
21
|
+
},
|
|
22
|
+
{
|
|
23
|
+
"purl": "pkg:pypi/grpcio"
|
|
24
|
+
},
|
|
25
|
+
{
|
|
26
|
+
"purl": "pkg:pypi/protobuf"
|
|
27
|
+
}
|
|
28
|
+
]
|
|
29
|
+
}
|
|
30
|
+
]
|
|
31
|
+
}
|
|
32
|
+
*/
|
|
33
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidHlwZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvbGliL2RlcGVuZGVuY2llcy9wYXJzZXJzL3R5cGVzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7O0FBb0JBOzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7OztFQTZCRSJ9
|