scanoss 0.2.11 → 0.2.15
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.circleci/config.yml +64 -0
- package/.cspell.json +34 -0
- package/.editorconfig +15 -0
- package/.eslintrc.json +37 -0
- package/.gitignore +11 -0
- package/.prettierignore +2 -0
- package/.vscode/extensions.json +8 -0
- package/.vscode/launch.json +29 -0
- package/.vscode/settings.json +7 -0
- package/CHANGELOG.md +4 -0
- package/build/main/bin/cli-bin.js +2 -2
- package/build/main/commands/dep.js +1 -1
- package/build/main/lib/dependencies/Dependency.js +3 -3
- package/build/main/lib/dependencies/parsers/npmParser.js +3 -2
- package/build/main/lib/scanner/Scanner.d.ts +1 -0
- package/build/main/lib/scanner/Scanner.js +21 -3
- package/build/module/bin/cli-bin.js +2 -2
- package/build/module/commands/dep.js +1 -1
- package/build/module/lib/dependencies/Dependency.js +3 -3
- package/build/module/lib/dependencies/parsers/npmParser.js +3 -2
- package/build/module/lib/scanner/Scanner.d.ts +1 -0
- package/build/module/lib/scanner/Scanner.js +21 -3
- package/build/tsconfig.module.tsbuildinfo +1 -0
- package/build/tsconfig.tsbuildinfo +1 -0
- package/examples/defaultFilter.json +203 -0
- package/package.json +1 -1
- package/src/bin/cli-bin.ts +56 -0
- package/src/commands/dep.ts +23 -0
- package/src/commands/scan.ts +97 -0
- package/src/index.ts +5 -0
- package/src/lib/dependencies/Dependency.ts +60 -0
- package/src/lib/dependencies/DependencyTypes.ts +22 -0
- package/src/lib/dependencies/PurlGenerator.ts +41 -0
- package/src/lib/dependencies/parsers/golangParser.ts +4 -0
- package/src/lib/dependencies/parsers/mavenParser.ts +48 -0
- package/src/lib/dependencies/parsers/npmParser.ts +45 -0
- package/src/lib/dependencies/parsers/pyParser.ts +46 -0
- package/src/lib/dependencies/parsers/rubyParser.ts +181 -0
- package/{build/module/lib/dependencies/src/parsers/types.js → src/lib/dependencies/parsers/types.ts} +21 -3
- package/src/lib/dependencies/parsers/utils.ts +16 -0
- package/src/lib/filters/defaultFilter.ts +207 -0
- package/src/lib/filters/filtering.ts +234 -0
- package/src/lib/scanner/Dispatcher/DispatchableItem.ts +29 -0
- package/src/lib/scanner/Dispatcher/Dispatcher.ts +151 -0
- package/src/lib/scanner/Dispatcher/DispatcherResponse.ts +40 -0
- package/src/lib/scanner/Dispatcher/GlobalControllerAborter.ts +33 -0
- package/src/lib/scanner/Scannable/ScannableItem.ts +43 -0
- package/src/lib/scanner/Scanner.ts +342 -0
- package/src/lib/scanner/ScannerCfg.ts +29 -0
- package/src/lib/scanner/ScannerTypes.ts +41 -0
- package/src/lib/scanner/Winnower/Winnower.ts +439 -0
- package/src/lib/scanner/Winnower/WinnowerExtractor.ts +38 -0
- package/src/lib/scanner/Winnower/WinnowerResponse.ts +38 -0
- package/src/lib/tree/File.ts +20 -0
- package/src/lib/tree/Folder.ts +50 -0
- package/src/lib/tree/Node.ts +34 -0
- package/src/lib/tree/Tree.ts +89 -0
- package/tsconfig.json +47 -0
- package/tsconfig.module.json +11 -0
- package/yarn.lock +5675 -0
- package/build/main/lib/dependencies/src/PurlGenerator.d.ts +0 -2
- package/build/main/lib/dependencies/src/PurlGenerator.js +0 -62
- package/build/main/lib/dependencies/src/parsers/golangParser.d.ts +0 -0
- package/build/main/lib/dependencies/src/parsers/golangParser.js +0 -3
- package/build/main/lib/dependencies/src/parsers/mavenParser.d.ts +0 -2
- package/build/main/lib/dependencies/src/parsers/mavenParser.js +0 -44
- package/build/main/lib/dependencies/src/parsers/npmParser.d.ts +0 -3
- package/build/main/lib/dependencies/src/parsers/npmParser.js +0 -45
- package/build/main/lib/dependencies/src/parsers/pyParser.d.ts +0 -2
- package/build/main/lib/dependencies/src/parsers/pyParser.js +0 -51
- package/build/main/lib/dependencies/src/parsers/rubyParser.d.ts +0 -3
- package/build/main/lib/dependencies/src/parsers/rubyParser.js +0 -135
- package/build/main/lib/dependencies/src/parsers/types.d.ts +0 -15
- package/build/main/lib/dependencies/src/parsers/types.js +0 -33
- package/build/main/lib/dependencies/src/parsers/utils.d.ts +0 -2
- package/build/main/lib/dependencies/src/parsers/utils.js +0 -19
- package/build/main/lib/dependencyScan/dependencyScan.d.ts +0 -2
- package/build/main/lib/dependencyScan/dependencyScan.js +0 -37
- package/build/main/lib/dependencyScan/parser.d.ts +0 -7
- package/build/main/lib/dependencyScan/parser.js +0 -41
- package/build/main/lib/dependencyScan/utils.d.ts +0 -1
- package/build/main/lib/dependencyScan/utils.js +0 -16
- package/build/main/lib/scanner/Dependency/dependency.d.ts +0 -9
- package/build/main/lib/scanner/Dependency/dependency.js +0 -46
- package/build/main/lib/scanner/Dependency/dependencyScan.d.ts +0 -9
- package/build/main/lib/scanner/Dependency/dependencyScan.js +0 -48
- package/build/main/lib/scanner/Dependency/parser.d.ts +0 -7
- package/build/main/lib/scanner/Dependency/parser.js +0 -41
- package/build/main/lib/scanner/Dependency/utils.d.ts +0 -1
- package/build/main/lib/scanner/Dependency/utils.js +0 -16
- package/build/main/lib/scanner/ScannerEvents.d.ts +0 -22
- package/build/main/lib/scanner/ScannerEvents.js +0 -28
- package/build/module/lib/dependencies/src/PurlGenerator.d.ts +0 -2
- package/build/module/lib/dependencies/src/PurlGenerator.js +0 -55
- package/build/module/lib/dependencies/src/parsers/golangParser.d.ts +0 -0
- package/build/module/lib/dependencies/src/parsers/golangParser.js +0 -3
- package/build/module/lib/dependencies/src/parsers/mavenParser.d.ts +0 -2
- package/build/module/lib/dependencies/src/parsers/mavenParser.js +0 -37
- package/build/module/lib/dependencies/src/parsers/npmParser.d.ts +0 -3
- package/build/module/lib/dependencies/src/parsers/npmParser.js +0 -37
- package/build/module/lib/dependencies/src/parsers/pyParser.d.ts +0 -2
- package/build/module/lib/dependencies/src/parsers/pyParser.js +0 -44
- package/build/module/lib/dependencies/src/parsers/rubyParser.d.ts +0 -3
- package/build/module/lib/dependencies/src/parsers/rubyParser.js +0 -132
- package/build/module/lib/dependencies/src/parsers/types.d.ts +0 -15
- package/build/module/lib/dependencies/src/parsers/utils.d.ts +0 -2
- package/build/module/lib/dependencies/src/parsers/utils.js +0 -14
- package/build/module/lib/dependencyScan/dependencyScan.d.ts +0 -2
- package/build/module/lib/dependencyScan/dependencyScan.js +0 -29
- package/build/module/lib/dependencyScan/parser.d.ts +0 -7
- package/build/module/lib/dependencyScan/parser.js +0 -38
- package/build/module/lib/dependencyScan/utils.d.ts +0 -1
- package/build/module/lib/dependencyScan/utils.js +0 -12
- package/build/module/lib/scanner/Dependency/dependency.d.ts +0 -9
- package/build/module/lib/scanner/Dependency/dependency.js +0 -38
- package/build/module/lib/scanner/Dependency/dependencyScan.d.ts +0 -9
- package/build/module/lib/scanner/Dependency/dependencyScan.js +0 -40
- package/build/module/lib/scanner/Dependency/parser.d.ts +0 -7
- package/build/module/lib/scanner/Dependency/parser.js +0 -38
- package/build/module/lib/scanner/Dependency/utils.d.ts +0 -1
- package/build/module/lib/scanner/Dependency/utils.js +0 -12
- package/build/module/lib/scanner/ScannerEvents.d.ts +0 -22
- package/build/module/lib/scanner/ScannerEvents.js +0 -25
|
@@ -1,46 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
-
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
-
};
|
|
5
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
-
exports.appendDependencyToResult = exports.dependency = void 0;
|
|
7
|
-
const fs_1 = __importDefault(require("fs"));
|
|
8
|
-
const path_1 = __importDefault(require("path"));
|
|
9
|
-
const parser_1 = require("./parser");
|
|
10
|
-
;
|
|
11
|
-
async function readOnlyFiles(dir) {
|
|
12
|
-
const files = await fs_1.default.promises.readdir(dir, { withFileTypes: true });
|
|
13
|
-
const results = [];
|
|
14
|
-
for (const f of files) {
|
|
15
|
-
if (f.isFile() && !f.isSymbolicLink()) {
|
|
16
|
-
results.push(`${dir}/${f.name}`);
|
|
17
|
-
}
|
|
18
|
-
}
|
|
19
|
-
return results;
|
|
20
|
-
}
|
|
21
|
-
// Reads the root directory and search for a dependency declaration file
|
|
22
|
-
// Such as requirements.txt, package.json
|
|
23
|
-
// Returns: A list of dependencies declared
|
|
24
|
-
async function dependency(projectPath) {
|
|
25
|
-
const dependencies = [];
|
|
26
|
-
const filePaths = await readOnlyFiles(projectPath);
|
|
27
|
-
for (const filePath of filePaths) {
|
|
28
|
-
const fileName = path_1.default.basename(filePath);
|
|
29
|
-
if (parser_1.parser[fileName]) {
|
|
30
|
-
let dep = parser_1.parser[fileName](await fs_1.default.promises.readFile(filePath, 'utf-8'));
|
|
31
|
-
if (dep) {
|
|
32
|
-
dependencies.push({ filename: fileName, path: filePath, quantity: dep.length, dependencies: dep });
|
|
33
|
-
}
|
|
34
|
-
}
|
|
35
|
-
}
|
|
36
|
-
return dependencies;
|
|
37
|
-
}
|
|
38
|
-
exports.dependency = dependency;
|
|
39
|
-
async function appendDependencyToResult(resultPath, dependency) {
|
|
40
|
-
const result = await fs_1.default.promises.readFile(resultPath, 'utf-8');
|
|
41
|
-
const resultJson = JSON.parse(result);
|
|
42
|
-
resultJson.dependencies = dependency;
|
|
43
|
-
await fs_1.default.promises.writeFile(resultPath, JSON.stringify(resultJson, null, 2));
|
|
44
|
-
}
|
|
45
|
-
exports.appendDependencyToResult = appendDependencyToResult;
|
|
46
|
-
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,9 +0,0 @@
|
|
|
1
|
-
interface Dependency {
|
|
2
|
-
filename: string;
|
|
3
|
-
path: string;
|
|
4
|
-
quantity: number;
|
|
5
|
-
dependencies: Record<string, string>;
|
|
6
|
-
}
|
|
7
|
-
export declare function dependencyScan(projectPath: string): Promise<Array<Dependency>>;
|
|
8
|
-
export declare function appendDependencyToResult(resultPath: string, dependency: Record<string, string>): Promise<void>;
|
|
9
|
-
export {};
|
|
@@ -1,48 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
-
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
-
};
|
|
5
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
-
exports.appendDependencyToResult = exports.dependencyScan = void 0;
|
|
7
|
-
const fs_1 = __importDefault(require("fs"));
|
|
8
|
-
const path_1 = __importDefault(require("path"));
|
|
9
|
-
const parser_1 = require("./parser");
|
|
10
|
-
;
|
|
11
|
-
async function readOnlyFiles(dir) {
|
|
12
|
-
const files = await fs_1.default.promises.readdir(dir, { withFileTypes: true });
|
|
13
|
-
const results = [];
|
|
14
|
-
for (const f of files) {
|
|
15
|
-
if (f.isFile() && !f.isSymbolicLink()) {
|
|
16
|
-
results.push(`${dir}/${f.name}`);
|
|
17
|
-
}
|
|
18
|
-
}
|
|
19
|
-
return results;
|
|
20
|
-
}
|
|
21
|
-
// Reads the root directory and search for a dependency declaration file
|
|
22
|
-
// Such as requirements.txt, package.json
|
|
23
|
-
// Returns: A list of dependencies declared
|
|
24
|
-
async function dependencyScan(projectPath) {
|
|
25
|
-
const dependencies = [];
|
|
26
|
-
dependencies.push({ filename: '', path: '', quantity: 0, dependencies: {} });
|
|
27
|
-
const filePaths = await readOnlyFiles(projectPath);
|
|
28
|
-
for (const filePath of filePaths) {
|
|
29
|
-
const fileName = path_1.default.basename(filePath);
|
|
30
|
-
if (parser_1.parser[fileName]) {
|
|
31
|
-
let dep = parser_1.parser[fileName](await fs_1.default.promises.readFile(filePath, 'utf-8'));
|
|
32
|
-
let depFileName = path_1.default.basename(dep.path);
|
|
33
|
-
if (dep) {
|
|
34
|
-
dependencies.push({ filename: depFileName, path: filePath, quantity: dep.length, dependencies: dep.dependencies });
|
|
35
|
-
}
|
|
36
|
-
}
|
|
37
|
-
}
|
|
38
|
-
return dependencies;
|
|
39
|
-
}
|
|
40
|
-
exports.dependencyScan = dependencyScan;
|
|
41
|
-
async function appendDependencyToResult(resultPath, dependency) {
|
|
42
|
-
const result = await fs_1.default.promises.readFile(resultPath, 'utf-8');
|
|
43
|
-
const resultJson = JSON.parse(result);
|
|
44
|
-
resultJson.dependencies = dependency;
|
|
45
|
-
await fs_1.default.promises.writeFile(resultPath, JSON.stringify(resultJson, null, 2));
|
|
46
|
-
}
|
|
47
|
-
exports.appendDependencyToResult = appendDependencyToResult;
|
|
48
|
-
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,7 +0,0 @@
|
|
|
1
|
-
export declare const parser: {
|
|
2
|
-
'requirements.txt': typeof pyParser;
|
|
3
|
-
'package.json': typeof jsParser;
|
|
4
|
-
};
|
|
5
|
-
declare function pyParser(requirements: string): Record<string, string>;
|
|
6
|
-
declare function jsParser(packageJson: string): Record<string, string>;
|
|
7
|
-
export {};
|
|
@@ -1,41 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.parser = void 0;
|
|
4
|
-
const utils_1 = require("./utils");
|
|
5
|
-
exports.parser = {
|
|
6
|
-
'requirements.txt': pyParser,
|
|
7
|
-
'package.json': jsParser
|
|
8
|
-
};
|
|
9
|
-
// Parse a requirements.txt file from python projects
|
|
10
|
-
// See reference on: https://pip.pypa.io/en/stable/reference/requirements-file-format/
|
|
11
|
-
function pyParser(requirements) {
|
|
12
|
-
const lines = requirements.split('\n');
|
|
13
|
-
const results = {};
|
|
14
|
-
let compName = '';
|
|
15
|
-
let compVer = '';
|
|
16
|
-
for (let line of lines) {
|
|
17
|
-
line = line.trim();
|
|
18
|
-
if (!line.startsWith('#') && line.length > 0) { // Avoid comments and new lines
|
|
19
|
-
if ((0, utils_1.isValidUrl)(line) || /^[\.\/]+/.test(line)) { // url or path
|
|
20
|
-
compName = line.match(/.*\/(.*)/)[1];
|
|
21
|
-
compVer = compName.match(/\d\.\d.\d/)[0];
|
|
22
|
-
results[compName] = compVer;
|
|
23
|
-
}
|
|
24
|
-
else if (line.startsWith('-r')) { } // recursive dependencies (NOT SUPPORTED YET)
|
|
25
|
-
else {
|
|
26
|
-
const res = line.match(/\s*([-\w]*)\s*(?:[>=~!]*)\s*([\d\.]*)/);
|
|
27
|
-
compName = res[1];
|
|
28
|
-
compVer = res[2];
|
|
29
|
-
results[compName] = compVer;
|
|
30
|
-
}
|
|
31
|
-
}
|
|
32
|
-
}
|
|
33
|
-
return results;
|
|
34
|
-
}
|
|
35
|
-
function jsParser(packageJson) {
|
|
36
|
-
const o = JSON.parse(packageJson);
|
|
37
|
-
const results = {};
|
|
38
|
-
Object.assign(results, o.dependencies);
|
|
39
|
-
return results;
|
|
40
|
-
}
|
|
41
|
-
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
export declare function isValidUrl(string: string): boolean;
|
|
@@ -1,16 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.isValidUrl = void 0;
|
|
4
|
-
const url_1 = require("url");
|
|
5
|
-
function isValidUrl(string) {
|
|
6
|
-
let url;
|
|
7
|
-
try {
|
|
8
|
-
new url_1.URL(string);
|
|
9
|
-
}
|
|
10
|
-
catch (_) {
|
|
11
|
-
return false;
|
|
12
|
-
}
|
|
13
|
-
return true;
|
|
14
|
-
}
|
|
15
|
-
exports.isValidUrl = isValidUrl;
|
|
16
|
-
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidXRpbHMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvbGliL3NjYW5uZXIvRGVwZW5kZW5jeS91dGlscy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQSw2QkFBMEI7QUFFMUIsU0FBZ0IsVUFBVSxDQUFDLE1BQWM7SUFDckMsSUFBSSxHQUFRLENBQUM7SUFDYixJQUFJO1FBQ0YsSUFBSSxTQUFHLENBQUMsTUFBTSxDQUFDLENBQUM7S0FDakI7SUFBQyxPQUFPLENBQUMsRUFBRTtRQUNWLE9BQU8sS0FBSyxDQUFDO0tBQ2Q7SUFDRCxPQUFPLElBQUksQ0FBQztBQUNkLENBQUM7QUFSSCxnQ0FRRyJ9
|
|
@@ -1,22 +0,0 @@
|
|
|
1
|
-
export declare enum ScannerEvents {
|
|
2
|
-
WINNOWING_STARTING = "WINNOWING_STARTING",
|
|
3
|
-
WINNOWING_NEW_CONTENT = "WINNOWING_NEW_CONTENT",
|
|
4
|
-
WINNOWING_FINISHED = "WINNOWING_FINISHED",
|
|
5
|
-
WINNOWER_LOG = "WINNOWER_LOG",
|
|
6
|
-
DISPATCHER_WFP_SENDED = "DISPATCHER_WFP_SENDED",
|
|
7
|
-
DISPATCHER_NEW_DATA = "DISPATCHER_NEW_DATA",
|
|
8
|
-
DISPATCHER_FINISHED = "DISPATCHER_FINISHED",
|
|
9
|
-
DISPATCHER_ITEM_NO_DISPATCHED = "DISPATCHER_ITEM_NO_DISPATCHED",
|
|
10
|
-
DISPATCHER_QUEUE_SIZE_MAX_LIMIT = "DISPATCHER_QUEUE_FULL",
|
|
11
|
-
DISPATCHER_QUEUE_SIZE_MIN_LIMIT = "DISPATCHER_QUEUE_SIZE_MIN_LIMIT",
|
|
12
|
-
DISPATCHER_LOG = "DISPATCHER_LOG",
|
|
13
|
-
ERROR_SCANNER_ABORTED = "ERROR_SCANNER_ABORTED",
|
|
14
|
-
ERROR_SERVER_SIDE = "ERROR_SERVER_SIDE",
|
|
15
|
-
ERROR_CLIENT_SIDE = "ERROR_CLIENT_SIDE",
|
|
16
|
-
MODULE_DISPATCHER = "MODULE_DISPATCHER",
|
|
17
|
-
MODULE_WINNOWER = "MODULE_WINNOWER",
|
|
18
|
-
SCAN_DONE = "SCAN_DONE",
|
|
19
|
-
RESULTS_APPENDED = "RESULTS_APPENDED",
|
|
20
|
-
SCANNER_LOG = "SCANNER_LOG",
|
|
21
|
-
ERROR = "error"
|
|
22
|
-
}
|
|
@@ -1,28 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.ScannerEvents = void 0;
|
|
4
|
-
var ScannerEvents;
|
|
5
|
-
(function (ScannerEvents) {
|
|
6
|
-
ScannerEvents["WINNOWING_STARTING"] = "WINNOWING_STARTING";
|
|
7
|
-
ScannerEvents["WINNOWING_NEW_CONTENT"] = "WINNOWING_NEW_CONTENT";
|
|
8
|
-
ScannerEvents["WINNOWING_FINISHED"] = "WINNOWING_FINISHED";
|
|
9
|
-
ScannerEvents["WINNOWER_LOG"] = "WINNOWER_LOG";
|
|
10
|
-
ScannerEvents["DISPATCHER_WFP_SENDED"] = "DISPATCHER_WFP_SENDED";
|
|
11
|
-
ScannerEvents["DISPATCHER_NEW_DATA"] = "DISPATCHER_NEW_DATA";
|
|
12
|
-
ScannerEvents["DISPATCHER_FINISHED"] = "DISPATCHER_FINISHED";
|
|
13
|
-
ScannerEvents["DISPATCHER_ITEM_NO_DISPATCHED"] = "DISPATCHER_ITEM_NO_DISPATCHED";
|
|
14
|
-
ScannerEvents["DISPATCHER_QUEUE_SIZE_MAX_LIMIT"] = "DISPATCHER_QUEUE_FULL";
|
|
15
|
-
ScannerEvents["DISPATCHER_QUEUE_SIZE_MIN_LIMIT"] = "DISPATCHER_QUEUE_SIZE_MIN_LIMIT";
|
|
16
|
-
ScannerEvents["DISPATCHER_LOG"] = "DISPATCHER_LOG";
|
|
17
|
-
ScannerEvents["ERROR_SCANNER_ABORTED"] = "ERROR_SCANNER_ABORTED";
|
|
18
|
-
ScannerEvents["ERROR_SERVER_SIDE"] = "ERROR_SERVER_SIDE";
|
|
19
|
-
ScannerEvents["ERROR_CLIENT_SIDE"] = "ERROR_CLIENT_SIDE";
|
|
20
|
-
ScannerEvents["MODULE_DISPATCHER"] = "MODULE_DISPATCHER";
|
|
21
|
-
ScannerEvents["MODULE_WINNOWER"] = "MODULE_WINNOWER";
|
|
22
|
-
ScannerEvents["SCAN_DONE"] = "SCAN_DONE";
|
|
23
|
-
ScannerEvents["RESULTS_APPENDED"] = "RESULTS_APPENDED";
|
|
24
|
-
ScannerEvents["SCANNER_LOG"] = "SCANNER_LOG";
|
|
25
|
-
ScannerEvents["ERROR"] = "error";
|
|
26
|
-
})(ScannerEvents = exports.ScannerEvents || (exports.ScannerEvents = {}));
|
|
27
|
-
;
|
|
28
|
-
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,55 +0,0 @@
|
|
|
1
|
-
import fs from 'fs';
|
|
2
|
-
import path from 'path';
|
|
3
|
-
import { pomParser } from './parsers/mavenParser';
|
|
4
|
-
import { packagelockParser, packageParser } from './parsers/npmParser';
|
|
5
|
-
import { requirementsParser } from './parsers/pyParser';
|
|
6
|
-
import { gemfilelockParser, gemfileParser } from './parsers/rubyParser';
|
|
7
|
-
/*
|
|
8
|
-
This is a hash map that connect a filename with it's own parser function
|
|
9
|
-
Any parser function must return a FileDependency object (See type.ts file in src/parser
|
|
10
|
-
*/
|
|
11
|
-
const Parser = {
|
|
12
|
-
'requirements.txt': requirementsParser,
|
|
13
|
-
'pom.xml': pomParser,
|
|
14
|
-
'package.json': packageParser,
|
|
15
|
-
'package-lock.json': packagelockParser,
|
|
16
|
-
'Gemfile': gemfileParser,
|
|
17
|
-
'Gemfile.lock': gemfilelockParser
|
|
18
|
-
};
|
|
19
|
-
export async function generateDependenciesPurls(files) {
|
|
20
|
-
let results = { files: [] };
|
|
21
|
-
for (const filePath of files) {
|
|
22
|
-
const fileName = path.basename(filePath);
|
|
23
|
-
if (Parser[fileName] != null) {
|
|
24
|
-
const fileContent = await fs.promises.readFile(filePath, 'utf8');
|
|
25
|
-
const dependency = Parser[fileName](fileContent, filePath);
|
|
26
|
-
if (dependency.purls.length != 0)
|
|
27
|
-
results.files.push(dependency);
|
|
28
|
-
}
|
|
29
|
-
}
|
|
30
|
-
return results;
|
|
31
|
-
}
|
|
32
|
-
/* TESTING RELATED STUFF */
|
|
33
|
-
const dirToExplore = './test';
|
|
34
|
-
async function readOnlyFilesRecur(dir, store) {
|
|
35
|
-
const dirContent = await fs.promises.readdir(dir, { withFileTypes: true });
|
|
36
|
-
for (const f of dirContent) {
|
|
37
|
-
if (f.isFile() && !f.isSymbolicLink()) {
|
|
38
|
-
store.push(`${dir}/${f.name}`);
|
|
39
|
-
}
|
|
40
|
-
else if (f.isDirectory()) {
|
|
41
|
-
await readOnlyFilesRecur(`${dir}/${f.name}`, store);
|
|
42
|
-
}
|
|
43
|
-
}
|
|
44
|
-
}
|
|
45
|
-
const exploreFolder = async (dir) => {
|
|
46
|
-
let files = [];
|
|
47
|
-
await readOnlyFilesRecur(dir, files);
|
|
48
|
-
return files;
|
|
49
|
-
};
|
|
50
|
-
exploreFolder(dirToExplore).then(async (fList) => {
|
|
51
|
-
const res = await generateDependenciesPurls(fList);
|
|
52
|
-
console.log(JSON.stringify(res, null, 2));
|
|
53
|
-
});
|
|
54
|
-
/* TESTING RELATED STUFF */
|
|
55
|
-
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiUHVybEdlbmVyYXRvci5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uLy4uL3NyYy9saWIvZGVwZW5kZW5jaWVzL3NyYy9QdXJsR2VuZXJhdG9yLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sRUFBRSxNQUFNLElBQUksQ0FBQztBQUNwQixPQUFPLElBQUksTUFBTSxNQUFNLENBQUM7QUFJeEIsT0FBTyxFQUFFLFNBQVMsRUFBRSxNQUFNLHVCQUF1QixDQUFDO0FBQ2xELE9BQU8sRUFBRSxpQkFBaUIsRUFBRSxhQUFhLEVBQUUsTUFBTSxxQkFBcUIsQ0FBQztBQUN2RSxPQUFPLEVBQUUsa0JBQWtCLEVBQUUsTUFBTSxvQkFBb0IsQ0FBQztBQUN4RCxPQUFPLEVBQUUsaUJBQWlCLEVBQUUsYUFBYSxFQUFFLE1BQU0sc0JBQXNCLENBQUM7QUFJeEU7OztFQUdFO0FBQ0YsTUFBTSxNQUFNLEdBQXNCO0lBQzlCLGtCQUFrQixFQUFFLGtCQUFrQjtJQUN0QyxTQUFTLEVBQUUsU0FBUztJQUNwQixjQUFjLEVBQUUsYUFBYTtJQUM3QixtQkFBbUIsRUFBRSxpQkFBaUI7SUFDdEMsU0FBUyxFQUFFLGFBQWE7SUFDeEIsY0FBYyxFQUFFLGlCQUFpQjtDQUNwQyxDQUFDO0FBR0YsTUFBTSxDQUFDLEtBQUssVUFBVSx5QkFBeUIsQ0FBQyxLQUFvQjtJQUNoRSxJQUFJLE9BQU8sR0FBdUIsRUFBQyxLQUFLLEVBQUUsRUFBRSxFQUFDLENBQUM7SUFFOUMsS0FBSyxNQUFNLFFBQVEsSUFBSSxLQUFLLEVBQUU7UUFDMUIsTUFBTSxRQUFRLEdBQUcsSUFBSSxDQUFDLFFBQVEsQ0FBQyxRQUFRLENBQUMsQ0FBQztRQUN6QyxJQUFHLE1BQU0sQ0FBQyxRQUFRLENBQUMsSUFBSSxJQUFJLEVBQUU7WUFDekIsTUFBTSxXQUFXLEdBQUcsTUFBTSxFQUFFLENBQUMsUUFBUSxDQUFDLFFBQVEsQ0FBQyxRQUFRLEVBQUUsTUFBTSxDQUFDLENBQUM7WUFDakUsTUFBTSxVQUFVLEdBQUcsTUFBTSxDQUFDLFFBQVEsQ0FBQyxDQUFDLFdBQVcsRUFBRSxRQUFRLENBQUMsQ0FBQztZQUMzRCxJQUFHLFVBQVUsQ0FBQyxLQUFLLENBQUMsTUFBTSxJQUFJLENBQUM7Z0JBQzNCLE9BQU8sQ0FBQyxLQUFLLENBQUMsSUFBSSxDQUFDLFVBQVUsQ0FBQyxDQUFDO1NBQ3RDO0tBQ0o7SUFDRCxPQUFPLE9BQU8sQ0FBQztBQUNuQixDQUFDO0FBR0QsMkJBQTJCO0FBQzNCLE1BQU0sWUFBWSxHQUFHLFFBQVEsQ0FBQztBQUU5QixLQUFLLFVBQVUsa0JBQWtCLENBQUMsR0FBVyxFQUFFLEtBQW9CO0lBQy9ELE1BQU0sVUFBVSxHQUFHLE1BQU0sRUFBRSxDQUFDLFFBQVEsQ0FBQyxPQUFPLENBQUMsR0FBRyxFQUFFLEVBQUUsYUFBYSxFQUFFLElBQUksRUFBRSxDQUFDLENBQUM7SUFFM0UsS0FBSyxNQUFNLENBQUMsSUFBSSxVQUFVLEVBQUU7UUFDMUIsSUFBSSxDQUFDLENBQUMsTUFBTSxFQUFFLElBQUksQ0FBQyxDQUFDLENBQUMsY0FBYyxFQUFFLEVBQUM7WUFDcEMsS0FBSyxDQUFDLElBQUksQ0FBQyxHQUFHLEdBQUcsSUFBSSxDQUFDLENBQUMsSUFBSSxFQUFFLENBQUMsQ0FBQztTQUNoQzthQUFNLElBQUksQ0FBQyxDQUFDLFdBQVcsRUFBRSxFQUFFO1lBQzFCLE1BQU0sa0JBQWtCLENBQUMsR0FBRyxHQUFHLElBQUksQ0FBQyxDQUFDLElBQUksRUFBRSxFQUFFLEtBQUssQ0FBQyxDQUFDO1NBQ3JEO0tBQ0Y7QUFDSCxDQUFDO0FBRUgsTUFBTSxhQUFhLEdBQUcsS0FBSyxFQUFFLEdBQVcsRUFBRSxFQUFFO0lBQ3hDLElBQUksS0FBSyxHQUFrQixFQUFFLENBQUM7SUFDOUIsTUFBTSxrQkFBa0IsQ0FBQyxHQUFHLEVBQUUsS0FBSyxDQUFDLENBQUM7SUFDckMsT0FBTyxLQUFLLENBQUM7QUFDakIsQ0FBQyxDQUFBO0FBR0QsYUFBYSxDQUFDLFlBQVksQ0FBQyxDQUFDLElBQUksQ0FBQyxLQUFLLEVBQUUsS0FBSyxFQUFFLEVBQUU7SUFDN0MsTUFBTSxHQUFHLEdBQUcsTUFBTSx5QkFBeUIsQ0FBQyxLQUFLLENBQUMsQ0FBQztJQUVuRCxPQUFPLENBQUMsR0FBRyxDQUFDLElBQUksQ0FBQyxTQUFTLENBQUMsR0FBRyxFQUFFLElBQUksRUFBRSxDQUFDLENBQUMsQ0FBQyxDQUFDO0FBQzlDLENBQUMsQ0FBQyxDQUFDO0FBQ0gsMkJBQTJCIn0=
|
|
File without changes
|
|
@@ -1,3 +0,0 @@
|
|
|
1
|
-
// Reference https://go.dev/ref/mod#go-mod-file
|
|
2
|
-
//
|
|
3
|
-
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZ29sYW5nUGFyc2VyLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vLi4vLi4vc3JjL2xpYi9kZXBlbmRlbmNpZXMvc3JjL3BhcnNlcnMvZ29sYW5nUGFyc2VyLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUVBLCtDQUErQztBQUMvQyxHQUFHIn0=
|
|
@@ -1,37 +0,0 @@
|
|
|
1
|
-
import path from "path";
|
|
2
|
-
import { PackageURL } from "packageurl-js";
|
|
3
|
-
const PURL_TYPE = 'maven';
|
|
4
|
-
// Parse a pom.txt file from maven manifest file
|
|
5
|
-
// See reference on: https://maven.apache.org/guides/introduction/introduction-to-the-pom.html
|
|
6
|
-
// and https://maven.apache.org/guides/introduction/introduction-to-dependency-mechanism.html
|
|
7
|
-
const MANIFEST_FILE = 'pom.xml';
|
|
8
|
-
export function pomParser(fileContent, filePath) {
|
|
9
|
-
// If the file is not a python manifest file, return an empty results
|
|
10
|
-
const results = { file: filePath, purls: [] };
|
|
11
|
-
if (path.basename(filePath) != MANIFEST_FILE)
|
|
12
|
-
return results;
|
|
13
|
-
const dependencies = fileContent.match(/<dependency>((?:.|\n)*?)<\/dependency>/gm);
|
|
14
|
-
if (dependencies) {
|
|
15
|
-
// TODO: classifier are not supported yet
|
|
16
|
-
dependencies.forEach(dependency => {
|
|
17
|
-
// Extract groupId. It's the purl namespace
|
|
18
|
-
const groupId = dependency.match(/<groupId>([^<]*)<\/groupId>/);
|
|
19
|
-
const namespace = groupId ? groupId[1] : '';
|
|
20
|
-
// Extract artifact id. It's the purl name
|
|
21
|
-
const artifactId = dependency.match(/<artifactId>([^<]*)<\/artifactId>/);
|
|
22
|
-
const name = artifactId ? artifactId[1] : '';
|
|
23
|
-
const versionReg = dependency.match(/<version>([^<]*)<\/version>/);
|
|
24
|
-
const version = versionReg ? versionReg[1] : '';
|
|
25
|
-
let purlQualifiers;
|
|
26
|
-
const type = dependency.match(/<type>([^<]*)<\/type>/);
|
|
27
|
-
if (type) {
|
|
28
|
-
purlQualifiers = {};
|
|
29
|
-
purlQualifiers['type'] = type[1];
|
|
30
|
-
}
|
|
31
|
-
const purlString = new PackageURL(PURL_TYPE, namespace, name, version, purlQualifiers, undefined).toString();
|
|
32
|
-
results.purls.push({ purl: purlString });
|
|
33
|
-
});
|
|
34
|
-
}
|
|
35
|
-
return results;
|
|
36
|
-
}
|
|
37
|
-
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,37 +0,0 @@
|
|
|
1
|
-
import path from "path";
|
|
2
|
-
import { PackageURL } from "packageurl-js";
|
|
3
|
-
const PURL_TYPE = 'npm';
|
|
4
|
-
// Parse a package.json file from node projects
|
|
5
|
-
// See reference on: https://docs.npmjs.com/cli/v8/configuring-npm/package-json
|
|
6
|
-
const MANIFEST_FILE = 'package.json';
|
|
7
|
-
export function packageParser(fileContent, filePath) {
|
|
8
|
-
// If the file is not manifest file, return an empty results
|
|
9
|
-
const results = { file: filePath, purls: [] };
|
|
10
|
-
if (path.basename(filePath) != MANIFEST_FILE)
|
|
11
|
-
return results;
|
|
12
|
-
const o = JSON.parse(fileContent);
|
|
13
|
-
let devDeps = Object.keys(o.devDependencies);
|
|
14
|
-
let deps = Object.keys(o.dependencies);
|
|
15
|
-
let listDeps = [...deps, ...devDeps];
|
|
16
|
-
for (const name of listDeps) {
|
|
17
|
-
const purlString = new PackageURL(PURL_TYPE, undefined, name, undefined, undefined, undefined).toString();
|
|
18
|
-
results.purls.push({ purl: purlString });
|
|
19
|
-
}
|
|
20
|
-
return results;
|
|
21
|
-
}
|
|
22
|
-
// Parse a package-lock.json file from node projects
|
|
23
|
-
// See reference on: https://docs.npmjs.com/cli/v8/configuring-npm/package-json
|
|
24
|
-
const MANIFEST_FILE_1 = 'package-loc.json';
|
|
25
|
-
export function packagelockParser(fileContent, filePath) {
|
|
26
|
-
const results = { file: filePath, purls: [] };
|
|
27
|
-
if (path.basename(filePath) != MANIFEST_FILE_1)
|
|
28
|
-
return results;
|
|
29
|
-
const o = JSON.parse(fileContent).dependencies;
|
|
30
|
-
for (const [key, value] of Object.entries(o)) {
|
|
31
|
-
if (!key)
|
|
32
|
-
continue;
|
|
33
|
-
let purl = new PackageURL(PURL_TYPE, undefined, key, value['version'], undefined, undefined).toString();
|
|
34
|
-
results.purls.push({ purl });
|
|
35
|
-
}
|
|
36
|
-
}
|
|
37
|
-
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,44 +0,0 @@
|
|
|
1
|
-
import path from "path";
|
|
2
|
-
import { PackageURL } from "packageurl-js";
|
|
3
|
-
import { isValidPath, isValidUrl } from './utils';
|
|
4
|
-
const PURL_TYPE = 'pypi';
|
|
5
|
-
// Parse a requirements.txt file from python projects
|
|
6
|
-
// See reference on: https://pip.pypa.io/en/stable/reference/requirements-file-format/
|
|
7
|
-
const MANIFEST_FILE = 'requirements.txt';
|
|
8
|
-
export function requirementsParser(fileContent, filePath) {
|
|
9
|
-
// If the file is not a python manifest file, return an empty results
|
|
10
|
-
const results = { file: filePath, purls: [] };
|
|
11
|
-
if (path.basename(filePath) != MANIFEST_FILE)
|
|
12
|
-
return results;
|
|
13
|
-
const lines = fileContent.split('\n');
|
|
14
|
-
let compName = '';
|
|
15
|
-
let compVer = '';
|
|
16
|
-
for (let line of lines) {
|
|
17
|
-
line = line.trim();
|
|
18
|
-
if (!line.startsWith('#') && line.length > 0) { // Avoid comments and new lines
|
|
19
|
-
if (isValidUrl(line)) {
|
|
20
|
-
// For reference about the regex see https://www.rfc-editor.org/rfc/rfc3986#appendix-B
|
|
21
|
-
const res = line.match(/^(([^:\/?#]+):)?(\/\/([^\/?#]*))?([^?#]*)(\?([^#]*))?(#(.*))?/);
|
|
22
|
-
continue;
|
|
23
|
-
}
|
|
24
|
-
else if (isValidPath(line)) {
|
|
25
|
-
continue;
|
|
26
|
-
}
|
|
27
|
-
else if (line.startsWith('-r')) {
|
|
28
|
-
continue;
|
|
29
|
-
} // recursive dependencies (NOT SUPPORTED YET)
|
|
30
|
-
else {
|
|
31
|
-
// Line contains a package name and/or version.
|
|
32
|
-
const res = line.match(/^([-\w]+)\s*(?:[>=~!]*)\s*([\d\.]*)/); //Extract name and version
|
|
33
|
-
if (res) {
|
|
34
|
-
compName = res.length > 1 ? res[1] : ' ';
|
|
35
|
-
compVer = undefined;
|
|
36
|
-
}
|
|
37
|
-
}
|
|
38
|
-
const purlString = new PackageURL(PURL_TYPE, undefined, compName, compVer, undefined, undefined).toString();
|
|
39
|
-
results.purls.push({ purl: purlString });
|
|
40
|
-
}
|
|
41
|
-
}
|
|
42
|
-
return results;
|
|
43
|
-
}
|
|
44
|
-
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,132 +0,0 @@
|
|
|
1
|
-
import path from "path";
|
|
2
|
-
import { PackageURL } from "packageurl-js";
|
|
3
|
-
const PURL_TYPE = 'gem';
|
|
4
|
-
// Parse a gemfile file from ruby
|
|
5
|
-
// See reference on: https://bundler.io/gemfile.html
|
|
6
|
-
// and https://bundler.io/man/gemfile.5.html
|
|
7
|
-
const MANIFEST_FILE = 'Gemfile';
|
|
8
|
-
export function gemfileParser(fileContent, filePath) {
|
|
9
|
-
// If the file is not a manifest file, return an empty results
|
|
10
|
-
const results = { file: filePath, purls: [] };
|
|
11
|
-
if (path.basename(filePath) != MANIFEST_FILE)
|
|
12
|
-
return results;
|
|
13
|
-
const lines = fileContent.split('\n');
|
|
14
|
-
let compName = '';
|
|
15
|
-
for (let line of lines) {
|
|
16
|
-
line = line.trim();
|
|
17
|
-
if (!line.startsWith('#') && line.length > 0) { // Avoid comments and empty lines
|
|
18
|
-
// Line contains a package name and/or version.
|
|
19
|
-
const res = line.match(/^gem\s*(["']\w+["'])/); //Extract name
|
|
20
|
-
if (res) {
|
|
21
|
-
compName = res.length > 1 ? res[1] : ' ';
|
|
22
|
-
compName = compName.replace(/['"]/g, '');
|
|
23
|
-
const purlString = new PackageURL(PURL_TYPE, undefined, compName, undefined, undefined, undefined).toString();
|
|
24
|
-
results.purls.push({ purl: purlString });
|
|
25
|
-
}
|
|
26
|
-
}
|
|
27
|
-
}
|
|
28
|
-
return results;
|
|
29
|
-
}
|
|
30
|
-
const MANIFEST_FILE_1 = 'Gemfile.lock';
|
|
31
|
-
export function gemfilelockParser(fileContent, filePath) {
|
|
32
|
-
// If the file is not a manifest file, return an empty results
|
|
33
|
-
const results = { file: filePath, purls: [] };
|
|
34
|
-
if (path.basename(filePath) != MANIFEST_FILE_1)
|
|
35
|
-
return results;
|
|
36
|
-
const gemlockParser = new GemfileLockParser();
|
|
37
|
-
const purls = gemlockParser.getDependencies(fileContent);
|
|
38
|
-
for (const purl of purls) {
|
|
39
|
-
results.purls.push({ purl });
|
|
40
|
-
}
|
|
41
|
-
return results;
|
|
42
|
-
}
|
|
43
|
-
// Section headings: these are also used as switches to track a parsing state
|
|
44
|
-
const PATH = 'PATH';
|
|
45
|
-
const GIT = 'GIT';
|
|
46
|
-
const SVN = 'SVN';
|
|
47
|
-
const GEM = 'GEM';
|
|
48
|
-
const PLATFORMS = 'PLATFORMS';
|
|
49
|
-
const DEPENDENCIES = 'DEPENDENCIES';
|
|
50
|
-
const SPECS = ' specs:';
|
|
51
|
-
// types of Gems, which is really where they are provisioned from
|
|
52
|
-
// RubyGems repo, local path or VCS
|
|
53
|
-
const GEM_TYPES = [GEM, PATH, GIT, SVN];
|
|
54
|
-
const specRegex = /(?<name>[^ \)\(,!:]+)?(?: \((?<version>[^-]*?)(?:-(?<platform>[^!]*))?\))?/;
|
|
55
|
-
const firstDepLevelRegex = /^ {4}(?! )/;
|
|
56
|
-
/*
|
|
57
|
-
The parsing use a simple state machine, switching states based on sections
|
|
58
|
-
headings. The result is a list of purls
|
|
59
|
-
*/
|
|
60
|
-
class GemfileLockParser {
|
|
61
|
-
statesMap;
|
|
62
|
-
state;
|
|
63
|
-
current_options;
|
|
64
|
-
current_gem;
|
|
65
|
-
purlList;
|
|
66
|
-
constructor() {
|
|
67
|
-
this.purlList = [];
|
|
68
|
-
// map of a line start string to the next parsing state function
|
|
69
|
-
this.statesMap = {};
|
|
70
|
-
this.statesMap[DEPENDENCIES] = this.parseDependency;
|
|
71
|
-
this.statesMap[PLATFORMS] = this.parsePlatform;
|
|
72
|
-
this.statesMap[GIT] = this.parseOptions;
|
|
73
|
-
this.statesMap[PATH] = this.parseOptions;
|
|
74
|
-
this.statesMap[SVN] = this.parseOptions;
|
|
75
|
-
this.statesMap[GEM] = this.parseOptions;
|
|
76
|
-
this.statesMap[SPECS] = this.parseSpec;
|
|
77
|
-
}
|
|
78
|
-
getDependencies(filecontent) {
|
|
79
|
-
this.resetState();
|
|
80
|
-
let file = filecontent.split('\n');
|
|
81
|
-
for (let line of file) {
|
|
82
|
-
line = line.trimEnd();
|
|
83
|
-
//reset state on empty lines
|
|
84
|
-
if (!line.length) {
|
|
85
|
-
this.resetState();
|
|
86
|
-
continue;
|
|
87
|
-
}
|
|
88
|
-
//switch to new state
|
|
89
|
-
if (line in this.statesMap) {
|
|
90
|
-
if (GEM_TYPES.includes(line))
|
|
91
|
-
this.current_gem = line;
|
|
92
|
-
this.state = this.statesMap[line];
|
|
93
|
-
continue;
|
|
94
|
-
}
|
|
95
|
-
// process the line
|
|
96
|
-
if (this.state)
|
|
97
|
-
this.state(line);
|
|
98
|
-
}
|
|
99
|
-
this.refine();
|
|
100
|
-
return this.purlList;
|
|
101
|
-
}
|
|
102
|
-
resetState() {
|
|
103
|
-
this.current_options = {};
|
|
104
|
-
this.state = null;
|
|
105
|
-
}
|
|
106
|
-
parseOptions(line) {
|
|
107
|
-
const match = line.match(/\s*(\w+):\s*(.*)/);
|
|
108
|
-
const key = match.length >= 1 ? match[1] : null;
|
|
109
|
-
const value = match.length >= 2 ? match[2] : null;
|
|
110
|
-
if (key)
|
|
111
|
-
this.current_options[key] = value;
|
|
112
|
-
}
|
|
113
|
-
parseDependency(line) { }
|
|
114
|
-
parsePlatform(line) { }
|
|
115
|
-
parseSpec(line) {
|
|
116
|
-
if (this.current_gem == GEM) {
|
|
117
|
-
if (firstDepLevelRegex.test(line)) {
|
|
118
|
-
line = line.trimStart();
|
|
119
|
-
const match = line.match(specRegex);
|
|
120
|
-
const purl = new PackageURL(PURL_TYPE, undefined, match.groups.name, match.groups.version, undefined, undefined).toString();
|
|
121
|
-
this.purlList.push(purl);
|
|
122
|
-
}
|
|
123
|
-
else { // Second level of dependence
|
|
124
|
-
}
|
|
125
|
-
}
|
|
126
|
-
if (this.current_gem == GIT) { }
|
|
127
|
-
// Purl from local dependencies are not generated
|
|
128
|
-
if (this.current_gem == PATH) { }
|
|
129
|
-
}
|
|
130
|
-
refine() { }
|
|
131
|
-
}
|
|
132
|
-
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,15 +0,0 @@
|
|
|
1
|
-
export interface Purl {
|
|
2
|
-
purl: string;
|
|
3
|
-
}
|
|
4
|
-
export interface FileDependency {
|
|
5
|
-
file: string;
|
|
6
|
-
purls: Array<Purl>;
|
|
7
|
-
}
|
|
8
|
-
export interface FileListDependency {
|
|
9
|
-
files: Array<FileDependency>;
|
|
10
|
-
}
|
|
11
|
-
declare type ParserFuncType = (fileContent: string, filePath: string) => FileDependency;
|
|
12
|
-
export interface ParserDefinitions {
|
|
13
|
-
[key: string]: ParserFuncType;
|
|
14
|
-
}
|
|
15
|
-
export {};
|