scanoss 0.2.9 → 0.2.13
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +2 -0
- package/LICENSE +20 -18
- package/README.md +1 -1
- package/build/main/bin/cli-bin.js +7 -1
- package/build/main/commands/dep.d.ts +1 -0
- package/build/main/commands/dep.js +26 -0
- package/build/main/commands/scan.js +2 -2
- package/build/main/index.d.ts +2 -0
- package/build/main/index.js +3 -1
- package/build/main/lib/dependencies/Dependency.d.ts +9 -0
- package/build/main/lib/dependencies/Dependency.js +50 -0
- package/build/main/lib/dependencies/DependencyTypes.d.ts +19 -0
- package/build/main/lib/dependencies/DependencyTypes.js +3 -0
- package/build/main/lib/dependencies/PurlGenerator.d.ts +2 -0
- package/build/main/lib/dependencies/PurlGenerator.js +39 -0
- package/build/main/lib/dependencies/parsers/golangParser.d.ts +0 -0
- package/build/main/lib/dependencies/parsers/golangParser.js +3 -0
- package/build/main/lib/dependencies/parsers/mavenParser.d.ts +2 -0
- package/build/main/lib/dependencies/parsers/mavenParser.js +44 -0
- package/build/main/lib/dependencies/parsers/npmParser.d.ts +3 -0
- package/build/main/lib/dependencies/parsers/npmParser.js +45 -0
- package/build/main/lib/dependencies/parsers/pyParser.d.ts +2 -0
- package/build/main/lib/dependencies/parsers/pyParser.js +51 -0
- package/build/main/lib/dependencies/parsers/rubyParser.d.ts +3 -0
- package/build/main/lib/dependencies/parsers/rubyParser.js +135 -0
- package/build/main/lib/dependencies/parsers/types.d.ts +15 -0
- package/build/main/lib/dependencies/parsers/types.js +33 -0
- package/build/main/lib/dependencies/parsers/utils.d.ts +2 -0
- package/build/main/lib/dependencies/parsers/utils.js +20 -0
- package/build/main/lib/dependencies/src/PurlGenerator.d.ts +2 -0
- package/build/main/lib/dependencies/src/PurlGenerator.js +62 -0
- package/build/main/lib/dependencies/src/parsers/golangParser.d.ts +0 -0
- package/build/main/lib/dependencies/src/parsers/golangParser.js +3 -0
- package/build/main/lib/dependencies/src/parsers/mavenParser.d.ts +2 -0
- package/build/main/lib/dependencies/src/parsers/mavenParser.js +44 -0
- package/build/main/lib/dependencies/src/parsers/npmParser.d.ts +3 -0
- package/build/main/lib/dependencies/src/parsers/npmParser.js +45 -0
- package/build/main/lib/dependencies/src/parsers/pyParser.d.ts +2 -0
- package/build/main/lib/dependencies/src/parsers/pyParser.js +51 -0
- package/build/main/lib/dependencies/src/parsers/rubyParser.d.ts +3 -0
- package/build/main/lib/dependencies/src/parsers/rubyParser.js +135 -0
- package/build/main/lib/dependencies/src/parsers/types.d.ts +15 -0
- package/build/main/lib/dependencies/src/parsers/types.js +33 -0
- package/build/main/lib/dependencies/src/parsers/utils.d.ts +2 -0
- package/build/main/lib/dependencies/src/parsers/utils.js +19 -0
- package/build/main/lib/dependencyScan/dependencyScan.d.ts +2 -0
- package/build/main/lib/dependencyScan/dependencyScan.js +37 -0
- package/build/main/lib/dependencyScan/parser.d.ts +7 -0
- package/build/main/lib/dependencyScan/parser.js +41 -0
- package/build/main/lib/dependencyScan/utils.d.ts +1 -0
- package/build/main/lib/dependencyScan/utils.js +16 -0
- package/build/main/lib/scanner/Dependency/dependency.d.ts +9 -0
- package/build/main/lib/scanner/Dependency/dependency.js +46 -0
- package/build/main/lib/scanner/Dependency/dependencyScan.d.ts +9 -0
- package/build/main/lib/scanner/Dependency/dependencyScan.js +48 -0
- package/build/main/lib/scanner/Dependency/parser.d.ts +7 -0
- package/build/main/lib/scanner/Dependency/parser.js +41 -0
- package/build/main/lib/scanner/Dependency/utils.d.ts +1 -0
- package/build/main/lib/scanner/Dependency/utils.js +16 -0
- package/build/main/lib/scanner/Scanner.d.ts +3 -2
- package/build/main/lib/scanner/Scanner.js +15 -9
- package/build/main/lib/scanner/Winnower/Winnower.js +5 -3
- package/build/main/lib/tree/Tree.js +2 -2
- package/build/module/bin/cli-bin.js +7 -1
- package/build/module/commands/dep.d.ts +1 -0
- package/build/module/commands/dep.js +19 -0
- package/build/module/commands/scan.js +2 -2
- package/build/module/index.d.ts +2 -0
- package/build/module/index.js +3 -1
- package/build/module/lib/dependencies/Dependency.d.ts +9 -0
- package/build/module/lib/dependencies/Dependency.js +45 -0
- package/build/module/lib/dependencies/DependencyTypes.d.ts +19 -0
- package/build/module/lib/dependencies/DependencyTypes.js +2 -0
- package/build/module/lib/dependencies/PurlGenerator.d.ts +2 -0
- package/build/module/lib/dependencies/PurlGenerator.js +32 -0
- package/build/module/lib/dependencies/parsers/golangParser.d.ts +0 -0
- package/build/module/lib/dependencies/parsers/golangParser.js +3 -0
- package/build/module/lib/dependencies/parsers/mavenParser.d.ts +2 -0
- package/build/module/lib/dependencies/parsers/mavenParser.js +37 -0
- package/build/module/lib/dependencies/parsers/npmParser.d.ts +3 -0
- package/build/module/lib/dependencies/parsers/npmParser.js +37 -0
- package/build/module/lib/dependencies/parsers/pyParser.d.ts +2 -0
- package/build/module/lib/dependencies/parsers/pyParser.js +44 -0
- package/build/module/lib/dependencies/parsers/rubyParser.d.ts +3 -0
- package/build/module/lib/dependencies/parsers/rubyParser.js +132 -0
- package/build/module/lib/dependencies/parsers/types.d.ts +15 -0
- package/build/module/lib/dependencies/parsers/types.js +32 -0
- package/build/module/lib/dependencies/parsers/utils.d.ts +2 -0
- package/build/module/lib/dependencies/parsers/utils.js +15 -0
- package/build/module/lib/dependencies/src/PurlGenerator.d.ts +2 -0
- package/build/module/lib/dependencies/src/PurlGenerator.js +55 -0
- package/build/module/lib/dependencies/src/parsers/golangParser.d.ts +0 -0
- package/build/module/lib/dependencies/src/parsers/golangParser.js +3 -0
- package/build/module/lib/dependencies/src/parsers/mavenParser.d.ts +2 -0
- package/build/module/lib/dependencies/src/parsers/mavenParser.js +37 -0
- package/build/module/lib/dependencies/src/parsers/npmParser.d.ts +3 -0
- package/build/module/lib/dependencies/src/parsers/npmParser.js +37 -0
- package/build/module/lib/dependencies/src/parsers/pyParser.d.ts +2 -0
- package/build/module/lib/dependencies/src/parsers/pyParser.js +44 -0
- package/build/module/lib/dependencies/src/parsers/rubyParser.d.ts +3 -0
- package/build/module/lib/dependencies/src/parsers/rubyParser.js +132 -0
- package/build/module/lib/dependencies/src/parsers/types.d.ts +15 -0
- package/build/module/lib/dependencies/src/parsers/types.js +32 -0
- package/build/module/lib/dependencies/src/parsers/utils.d.ts +2 -0
- package/build/module/lib/dependencies/src/parsers/utils.js +14 -0
- package/build/module/lib/dependencyScan/dependencyScan.d.ts +2 -0
- package/build/module/lib/dependencyScan/dependencyScan.js +29 -0
- package/build/module/lib/dependencyScan/parser.d.ts +7 -0
- package/build/module/lib/dependencyScan/parser.js +38 -0
- package/build/module/lib/dependencyScan/utils.d.ts +1 -0
- package/build/module/lib/dependencyScan/utils.js +12 -0
- package/build/module/lib/scanner/Dependency/dependency.d.ts +9 -0
- package/build/module/lib/scanner/Dependency/dependency.js +38 -0
- package/build/module/lib/scanner/Dependency/dependencyScan.d.ts +9 -0
- package/build/module/lib/scanner/Dependency/dependencyScan.js +40 -0
- package/build/module/lib/scanner/Dependency/parser.d.ts +7 -0
- package/build/module/lib/scanner/Dependency/parser.js +38 -0
- package/build/module/lib/scanner/Dependency/utils.d.ts +1 -0
- package/build/module/lib/scanner/Dependency/utils.js +12 -0
- package/build/module/lib/scanner/Scanner.d.ts +3 -2
- package/build/module/lib/scanner/Scanner.js +15 -9
- package/build/module/lib/scanner/Winnower/Winnower.js +5 -3
- package/build/module/lib/tree/Tree.js +2 -2
- package/build/tsconfig.module.tsbuildinfo +1 -1
- package/build/tsconfig.tsbuildinfo +1 -1
- package/package.json +2 -1
- package/src/bin/cli-bin.ts +7 -3
- package/src/commands/dep.ts +23 -0
- package/src/commands/scan.ts +1 -1
- package/src/index.ts +2 -1
- package/src/lib/dependencies/Dependency.ts +58 -0
- package/src/lib/dependencies/DependencyTypes.ts +22 -0
- package/src/lib/dependencies/PurlGenerator.ts +41 -0
- package/src/lib/dependencies/parsers/golangParser.ts +4 -0
- package/src/lib/dependencies/parsers/mavenParser.ts +48 -0
- package/src/lib/dependencies/parsers/npmParser.ts +44 -0
- package/src/lib/dependencies/parsers/pyParser.ts +46 -0
- package/src/lib/dependencies/parsers/rubyParser.ts +181 -0
- package/src/lib/dependencies/parsers/types.ts +50 -0
- package/src/lib/dependencies/parsers/utils.ts +16 -0
- package/src/lib/scanner/Scanner.ts +18 -12
- package/src/lib/scanner/Winnower/Winnower.ts +5 -3
- package/src/lib/tree/Tree.ts +1 -1
- package/yarn.lock +5 -0
- package/package-lock.json +0 -18266
|
@@ -0,0 +1,55 @@
|
|
|
1
|
+
import fs from 'fs';
|
|
2
|
+
import path from 'path';
|
|
3
|
+
import { pomParser } from './parsers/mavenParser';
|
|
4
|
+
import { packagelockParser, packageParser } from './parsers/npmParser';
|
|
5
|
+
import { requirementsParser } from './parsers/pyParser';
|
|
6
|
+
import { gemfilelockParser, gemfileParser } from './parsers/rubyParser';
|
|
7
|
+
/*
|
|
8
|
+
This is a hash map that connect a filename with it's own parser function
|
|
9
|
+
Any parser function must return a FileDependency object (See type.ts file in src/parser
|
|
10
|
+
*/
|
|
11
|
+
const Parser = {
|
|
12
|
+
'requirements.txt': requirementsParser,
|
|
13
|
+
'pom.xml': pomParser,
|
|
14
|
+
'package.json': packageParser,
|
|
15
|
+
'package-lock.json': packagelockParser,
|
|
16
|
+
'Gemfile': gemfileParser,
|
|
17
|
+
'Gemfile.lock': gemfilelockParser
|
|
18
|
+
};
|
|
19
|
+
export async function generateDependenciesPurls(files) {
|
|
20
|
+
let results = { files: [] };
|
|
21
|
+
for (const filePath of files) {
|
|
22
|
+
const fileName = path.basename(filePath);
|
|
23
|
+
if (Parser[fileName] != null) {
|
|
24
|
+
const fileContent = await fs.promises.readFile(filePath, 'utf8');
|
|
25
|
+
const dependency = Parser[fileName](fileContent, filePath);
|
|
26
|
+
if (dependency.purls.length != 0)
|
|
27
|
+
results.files.push(dependency);
|
|
28
|
+
}
|
|
29
|
+
}
|
|
30
|
+
return results;
|
|
31
|
+
}
|
|
32
|
+
/* TESTING RELATED STUFF */
|
|
33
|
+
const dirToExplore = './test';
|
|
34
|
+
async function readOnlyFilesRecur(dir, store) {
|
|
35
|
+
const dirContent = await fs.promises.readdir(dir, { withFileTypes: true });
|
|
36
|
+
for (const f of dirContent) {
|
|
37
|
+
if (f.isFile() && !f.isSymbolicLink()) {
|
|
38
|
+
store.push(`${dir}/${f.name}`);
|
|
39
|
+
}
|
|
40
|
+
else if (f.isDirectory()) {
|
|
41
|
+
await readOnlyFilesRecur(`${dir}/${f.name}`, store);
|
|
42
|
+
}
|
|
43
|
+
}
|
|
44
|
+
}
|
|
45
|
+
const exploreFolder = async (dir) => {
|
|
46
|
+
let files = [];
|
|
47
|
+
await readOnlyFilesRecur(dir, files);
|
|
48
|
+
return files;
|
|
49
|
+
};
|
|
50
|
+
exploreFolder(dirToExplore).then(async (fList) => {
|
|
51
|
+
const res = await generateDependenciesPurls(fList);
|
|
52
|
+
console.log(JSON.stringify(res, null, 2));
|
|
53
|
+
});
|
|
54
|
+
/* TESTING RELATED STUFF */
|
|
55
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiUHVybEdlbmVyYXRvci5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uLy4uL3NyYy9saWIvZGVwZW5kZW5jaWVzL3NyYy9QdXJsR2VuZXJhdG9yLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sRUFBRSxNQUFNLElBQUksQ0FBQztBQUNwQixPQUFPLElBQUksTUFBTSxNQUFNLENBQUM7QUFJeEIsT0FBTyxFQUFFLFNBQVMsRUFBRSxNQUFNLHVCQUF1QixDQUFDO0FBQ2xELE9BQU8sRUFBRSxpQkFBaUIsRUFBRSxhQUFhLEVBQUUsTUFBTSxxQkFBcUIsQ0FBQztBQUN2RSxPQUFPLEVBQUUsa0JBQWtCLEVBQUUsTUFBTSxvQkFBb0IsQ0FBQztBQUN4RCxPQUFPLEVBQUUsaUJBQWlCLEVBQUUsYUFBYSxFQUFFLE1BQU0sc0JBQXNCLENBQUM7QUFJeEU7OztFQUdFO0FBQ0YsTUFBTSxNQUFNLEdBQXNCO0lBQzlCLGtCQUFrQixFQUFFLGtCQUFrQjtJQUN0QyxTQUFTLEVBQUUsU0FBUztJQUNwQixjQUFjLEVBQUUsYUFBYTtJQUM3QixtQkFBbUIsRUFBRSxpQkFBaUI7SUFDdEMsU0FBUyxFQUFFLGFBQWE7SUFDeEIsY0FBYyxFQUFFLGlCQUFpQjtDQUNwQyxDQUFDO0FBR0YsTUFBTSxDQUFDLEtBQUssVUFBVSx5QkFBeUIsQ0FBQyxLQUFvQjtJQUNoRSxJQUFJLE9BQU8sR0FBdUIsRUFBQyxLQUFLLEVBQUUsRUFBRSxFQUFDLENBQUM7SUFFOUMsS0FBSyxNQUFNLFFBQVEsSUFBSSxLQUFLLEVBQUU7UUFDMUIsTUFBTSxRQUFRLEdBQUcsSUFBSSxDQUFDLFFBQVEsQ0FBQyxRQUFRLENBQUMsQ0FBQztRQUN6QyxJQUFHLE1BQU0sQ0FBQyxRQUFRLENBQUMsSUFBSSxJQUFJLEVBQUU7WUFDekIsTUFBTSxXQUFXLEdBQUcsTUFBTSxFQUFFLENBQUMsUUFBUSxDQUFDLFFBQVEsQ0FBQyxRQUFRLEVBQUUsTUFBTSxDQUFDLENBQUM7WUFDakUsTUFBTSxVQUFVLEdBQUcsTUFBTSxDQUFDLFFBQVEsQ0FBQyxDQUFDLFdBQVcsRUFBRSxRQUFRLENBQUMsQ0FBQztZQUMzRCxJQUFHLFVBQVUsQ0FBQyxLQUFLLENBQUMsTUFBTSxJQUFJLENBQUM7Z0JBQzNCLE9BQU8sQ0FBQyxLQUFLLENBQUMsSUFBSSxDQUFDLFVBQVUsQ0FBQyxDQUFDO1NBQ3RDO0tBQ0o7SUFDRCxPQUFPLE9BQU8sQ0FBQztBQUNuQixDQUFDO0FBR0QsMkJBQTJCO0FBQzNCLE1BQU0sWUFBWSxHQUFHLFFBQVEsQ0FBQztBQUU5QixLQUFLLFVBQVUsa0JBQWtCLENBQUMsR0FBVyxFQUFFLEtBQW9CO0lBQy9ELE1BQU0sVUFBVSxHQUFHLE1BQU0sRUFBRSxDQUFDLFFBQVEsQ0FBQyxPQUFPLENBQUMsR0FBRyxFQUFFLEVBQUUsYUFBYSxFQUFFLElBQUksRUFBRSxDQUFDLENBQUM7SUFFM0UsS0FBSyxNQUFNLENBQUMsSUFBSSxVQUFVLEVBQUU7UUFDMUIsSUFBSSxDQUFDLENBQUMsTUFBTSxFQUFFLElBQUksQ0FBQyxDQUFDLENBQUMsY0FBYyxFQUFFLEVBQUM7WUFDcEMsS0FBSyxDQUFDLElBQUksQ0FBQyxHQUFHLEdBQUcsSUFBSSxDQUFDLENBQUMsSUFBSSxFQUFFLENBQUMsQ0FBQztTQUNoQzthQUFNLElBQUksQ0FBQyxDQUFDLFdBQVcsRUFBRSxFQUFFO1lBQzFCLE1BQU0sa0JBQWtCLENBQUMsR0FBRyxHQUFHLElBQUksQ0FBQyxDQUFDLElBQUksRUFBRSxFQUFFLEtBQUssQ0FBQyxDQUFDO1NBQ3JEO0tBQ0Y7QUFDSCxDQUFDO0FBRUgsTUFBTSxhQUFhLEdBQUcsS0FBSyxFQUFFLEdBQVcsRUFBRSxFQUFFO0lBQ3hDLElBQUksS0FBSyxHQUFrQixFQUFFLENBQUM7SUFDOUIsTUFBTSxrQkFBa0IsQ0FBQyxHQUFHLEVBQUUsS0FBSyxDQUFDLENBQUM7SUFDckMsT0FBTyxLQUFLLENBQUM7QUFDakIsQ0FBQyxDQUFBO0FBR0QsYUFBYSxDQUFDLFlBQVksQ0FBQyxDQUFDLElBQUksQ0FBQyxLQUFLLEVBQUUsS0FBSyxFQUFFLEVBQUU7SUFDN0MsTUFBTSxHQUFHLEdBQUcsTUFBTSx5QkFBeUIsQ0FBQyxLQUFLLENBQUMsQ0FBQztJQUVuRCxPQUFPLENBQUMsR0FBRyxDQUFDLElBQUksQ0FBQyxTQUFTLENBQUMsR0FBRyxFQUFFLElBQUksRUFBRSxDQUFDLENBQUMsQ0FBQyxDQUFDO0FBQzlDLENBQUMsQ0FBQyxDQUFDO0FBQ0gsMkJBQTJCIn0=
|
|
File without changes
|
|
@@ -0,0 +1,3 @@
|
|
|
1
|
+
// Reference https://go.dev/ref/mod#go-mod-file
|
|
2
|
+
//
|
|
3
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZ29sYW5nUGFyc2VyLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vLi4vLi4vc3JjL2xpYi9kZXBlbmRlbmNpZXMvc3JjL3BhcnNlcnMvZ29sYW5nUGFyc2VyLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUVBLCtDQUErQztBQUMvQyxHQUFHIn0=
|
|
@@ -0,0 +1,37 @@
|
|
|
1
|
+
import path from "path";
|
|
2
|
+
import { PackageURL } from "packageurl-js";
|
|
3
|
+
const PURL_TYPE = 'maven';
|
|
4
|
+
// Parse a pom.txt file from maven manifest file
|
|
5
|
+
// See reference on: https://maven.apache.org/guides/introduction/introduction-to-the-pom.html
|
|
6
|
+
// and https://maven.apache.org/guides/introduction/introduction-to-dependency-mechanism.html
|
|
7
|
+
const MANIFEST_FILE = 'pom.xml';
|
|
8
|
+
export function pomParser(fileContent, filePath) {
|
|
9
|
+
// If the file is not a python manifest file, return an empty results
|
|
10
|
+
const results = { file: filePath, purls: [] };
|
|
11
|
+
if (path.basename(filePath) != MANIFEST_FILE)
|
|
12
|
+
return results;
|
|
13
|
+
const dependencies = fileContent.match(/<dependency>((?:.|\n)*?)<\/dependency>/gm);
|
|
14
|
+
if (dependencies) {
|
|
15
|
+
// TODO: classifier are not supported yet
|
|
16
|
+
dependencies.forEach(dependency => {
|
|
17
|
+
// Extract groupId. It's the purl namespace
|
|
18
|
+
const groupId = dependency.match(/<groupId>([^<]*)<\/groupId>/);
|
|
19
|
+
const namespace = groupId ? groupId[1] : '';
|
|
20
|
+
// Extract artifact id. It's the purl name
|
|
21
|
+
const artifactId = dependency.match(/<artifactId>([^<]*)<\/artifactId>/);
|
|
22
|
+
const name = artifactId ? artifactId[1] : '';
|
|
23
|
+
const versionReg = dependency.match(/<version>([^<]*)<\/version>/);
|
|
24
|
+
const version = versionReg ? versionReg[1] : '';
|
|
25
|
+
let purlQualifiers;
|
|
26
|
+
const type = dependency.match(/<type>([^<]*)<\/type>/);
|
|
27
|
+
if (type) {
|
|
28
|
+
purlQualifiers = {};
|
|
29
|
+
purlQualifiers['type'] = type[1];
|
|
30
|
+
}
|
|
31
|
+
const purlString = new PackageURL(PURL_TYPE, namespace, name, version, purlQualifiers, undefined).toString();
|
|
32
|
+
results.purls.push({ purl: purlString });
|
|
33
|
+
});
|
|
34
|
+
}
|
|
35
|
+
return results;
|
|
36
|
+
}
|
|
37
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibWF2ZW5QYXJzZXIuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi9zcmMvbGliL2RlcGVuZGVuY2llcy9zcmMvcGFyc2Vycy9tYXZlblBhcnNlci50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxPQUFPLElBQUksTUFBTSxNQUFNLENBQUM7QUFDeEIsT0FBTyxFQUFFLFVBQVUsRUFBRSxNQUFNLGVBQWUsQ0FBQztBQUkzQyxNQUFNLFNBQVMsR0FBRyxPQUFPLENBQUM7QUFHMUIsZ0RBQWdEO0FBQ2hELDhGQUE4RjtBQUM5Riw2RkFBNkY7QUFDN0YsTUFBTSxhQUFhLEdBQUcsU0FBUyxDQUFDO0FBQ2hDLE1BQU0sVUFBVSxTQUFTLENBQUMsV0FBbUIsRUFBRSxRQUFnQjtJQUUzRCxxRUFBcUU7SUFDckUsTUFBTSxPQUFPLEdBQW1CLEVBQUMsSUFBSSxFQUFFLFFBQVEsRUFBRSxLQUFLLEVBQUUsRUFBRSxFQUFDLENBQUM7SUFDNUQsSUFBRyxJQUFJLENBQUMsUUFBUSxDQUFDLFFBQVEsQ0FBQyxJQUFJLGFBQWE7UUFDdkMsT0FBTyxPQUFPLENBQUM7SUFFbkIsTUFBTSxZQUFZLEdBQUcsV0FBVyxDQUFDLEtBQUssQ0FBQywwQ0FBMEMsQ0FBQyxDQUFDO0lBQ25GLElBQUcsWUFBWSxFQUFFO1FBQ2IseUNBQXlDO1FBQ3pDLFlBQVksQ0FBQyxPQUFPLENBQUMsVUFBVSxDQUFDLEVBQUU7WUFDOUIsMkNBQTJDO1lBQzNDLE1BQU0sT0FBTyxHQUFHLFVBQVUsQ0FBQyxLQUFLLENBQUMsNkJBQTZCLENBQUMsQ0FBQztZQUNoRSxNQUFNLFNBQVMsR0FBRyxPQUFPLENBQUMsQ0FBQyxDQUFDLE9BQU8sQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDO1lBRTVDLDBDQUEwQztZQUMxQyxNQUFNLFVBQVUsR0FBRyxVQUFVLENBQUMsS0FBSyxDQUFDLG1DQUFtQyxDQUFDLENBQUM7WUFDekUsTUFBTSxJQUFJLEdBQUcsVUFBVSxDQUFDLENBQUMsQ0FBQyxVQUFVLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQztZQUU3QyxNQUFNLFVBQVUsR0FBRyxVQUFVLENBQUMsS0FBSyxDQUFDLDZCQUE2QixDQUFDLENBQUM7WUFDbkUsTUFBTSxPQUFPLEdBQUcsVUFBVSxDQUFDLENBQUMsQ0FBQyxVQUFVLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQztZQUdoRCxJQUFJLGNBQWMsQ0FBQztZQUNuQixNQUFNLElBQUksR0FBRyxVQUFVLENBQUMsS0FBSyxDQUFDLHVCQUF1QixDQUFDLENBQUM7WUFDdkQsSUFBRyxJQUFJLEVBQUU7Z0JBQ0wsY0FBYyxHQUFHLEVBQUUsQ0FBQztnQkFDcEIsY0FBYyxDQUFDLE1BQU0sQ0FBQyxHQUFHLElBQUksQ0FBQyxDQUFDLENBQUMsQ0FBQTthQUNuQztZQUVELE1BQU0sVUFBVSxHQUFHLElBQUksVUFBVSxDQUFDLFNBQVMsRUFBRSxTQUFTLEVBQUUsSUFBSSxFQUFFLE9BQU8sRUFBRSxjQUFjLEVBQUUsU0FBUyxDQUFDLENBQUMsUUFBUSxFQUFFLENBQUM7WUFDN0csT0FBTyxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsRUFBQyxJQUFJLEVBQUUsVUFBVSxFQUFDLENBQUMsQ0FBQztRQUMzQyxDQUFDLENBQUMsQ0FBQztLQUNOO0lBQ0QsT0FBTyxPQUFPLENBQUM7QUFDbkIsQ0FBQyJ9
|
|
@@ -0,0 +1,37 @@
|
|
|
1
|
+
import path from "path";
|
|
2
|
+
import { PackageURL } from "packageurl-js";
|
|
3
|
+
const PURL_TYPE = 'npm';
|
|
4
|
+
// Parse a package.json file from node projects
|
|
5
|
+
// See reference on: https://docs.npmjs.com/cli/v8/configuring-npm/package-json
|
|
6
|
+
const MANIFEST_FILE = 'package.json';
|
|
7
|
+
export function packageParser(fileContent, filePath) {
|
|
8
|
+
// If the file is not manifest file, return an empty results
|
|
9
|
+
const results = { file: filePath, purls: [] };
|
|
10
|
+
if (path.basename(filePath) != MANIFEST_FILE)
|
|
11
|
+
return results;
|
|
12
|
+
const o = JSON.parse(fileContent);
|
|
13
|
+
let devDeps = Object.keys(o.devDependencies);
|
|
14
|
+
let deps = Object.keys(o.dependencies);
|
|
15
|
+
let listDeps = [...deps, ...devDeps];
|
|
16
|
+
for (const name of listDeps) {
|
|
17
|
+
const purlString = new PackageURL(PURL_TYPE, undefined, name, undefined, undefined, undefined).toString();
|
|
18
|
+
results.purls.push({ purl: purlString });
|
|
19
|
+
}
|
|
20
|
+
return results;
|
|
21
|
+
}
|
|
22
|
+
// Parse a package-lock.json file from node projects
|
|
23
|
+
// See reference on: https://docs.npmjs.com/cli/v8/configuring-npm/package-json
|
|
24
|
+
const MANIFEST_FILE_1 = 'package-loc.json';
|
|
25
|
+
export function packagelockParser(fileContent, filePath) {
|
|
26
|
+
const results = { file: filePath, purls: [] };
|
|
27
|
+
if (path.basename(filePath) != MANIFEST_FILE_1)
|
|
28
|
+
return results;
|
|
29
|
+
const o = JSON.parse(fileContent).dependencies;
|
|
30
|
+
for (const [key, value] of Object.entries(o)) {
|
|
31
|
+
if (!key)
|
|
32
|
+
continue;
|
|
33
|
+
let purl = new PackageURL(PURL_TYPE, undefined, key, value['version'], undefined, undefined).toString();
|
|
34
|
+
results.purls.push({ purl });
|
|
35
|
+
}
|
|
36
|
+
}
|
|
37
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -0,0 +1,44 @@
|
|
|
1
|
+
import path from "path";
|
|
2
|
+
import { PackageURL } from "packageurl-js";
|
|
3
|
+
import { isValidPath, isValidUrl } from './utils';
|
|
4
|
+
const PURL_TYPE = 'pypi';
|
|
5
|
+
// Parse a requirements.txt file from python projects
|
|
6
|
+
// See reference on: https://pip.pypa.io/en/stable/reference/requirements-file-format/
|
|
7
|
+
const MANIFEST_FILE = 'requirements.txt';
|
|
8
|
+
export function requirementsParser(fileContent, filePath) {
|
|
9
|
+
// If the file is not a python manifest file, return an empty results
|
|
10
|
+
const results = { file: filePath, purls: [] };
|
|
11
|
+
if (path.basename(filePath) != MANIFEST_FILE)
|
|
12
|
+
return results;
|
|
13
|
+
const lines = fileContent.split('\n');
|
|
14
|
+
let compName = '';
|
|
15
|
+
let compVer = '';
|
|
16
|
+
for (let line of lines) {
|
|
17
|
+
line = line.trim();
|
|
18
|
+
if (!line.startsWith('#') && line.length > 0) { // Avoid comments and new lines
|
|
19
|
+
if (isValidUrl(line)) {
|
|
20
|
+
// For reference about the regex see https://www.rfc-editor.org/rfc/rfc3986#appendix-B
|
|
21
|
+
const res = line.match(/^(([^:\/?#]+):)?(\/\/([^\/?#]*))?([^?#]*)(\?([^#]*))?(#(.*))?/);
|
|
22
|
+
continue;
|
|
23
|
+
}
|
|
24
|
+
else if (isValidPath(line)) {
|
|
25
|
+
continue;
|
|
26
|
+
}
|
|
27
|
+
else if (line.startsWith('-r')) {
|
|
28
|
+
continue;
|
|
29
|
+
} // recursive dependencies (NOT SUPPORTED YET)
|
|
30
|
+
else {
|
|
31
|
+
// Line contains a package name and/or version.
|
|
32
|
+
const res = line.match(/^([-\w]+)\s*(?:[>=~!]*)\s*([\d\.]*)/); //Extract name and version
|
|
33
|
+
if (res) {
|
|
34
|
+
compName = res.length > 1 ? res[1] : ' ';
|
|
35
|
+
compVer = undefined;
|
|
36
|
+
}
|
|
37
|
+
}
|
|
38
|
+
const purlString = new PackageURL(PURL_TYPE, undefined, compName, compVer, undefined, undefined).toString();
|
|
39
|
+
results.purls.push({ purl: purlString });
|
|
40
|
+
}
|
|
41
|
+
}
|
|
42
|
+
return results;
|
|
43
|
+
}
|
|
44
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -0,0 +1,132 @@
|
|
|
1
|
+
import path from "path";
|
|
2
|
+
import { PackageURL } from "packageurl-js";
|
|
3
|
+
const PURL_TYPE = 'gem';
|
|
4
|
+
// Parse a gemfile file from ruby
|
|
5
|
+
// See reference on: https://bundler.io/gemfile.html
|
|
6
|
+
// and https://bundler.io/man/gemfile.5.html
|
|
7
|
+
const MANIFEST_FILE = 'Gemfile';
|
|
8
|
+
export function gemfileParser(fileContent, filePath) {
|
|
9
|
+
// If the file is not a manifest file, return an empty results
|
|
10
|
+
const results = { file: filePath, purls: [] };
|
|
11
|
+
if (path.basename(filePath) != MANIFEST_FILE)
|
|
12
|
+
return results;
|
|
13
|
+
const lines = fileContent.split('\n');
|
|
14
|
+
let compName = '';
|
|
15
|
+
for (let line of lines) {
|
|
16
|
+
line = line.trim();
|
|
17
|
+
if (!line.startsWith('#') && line.length > 0) { // Avoid comments and empty lines
|
|
18
|
+
// Line contains a package name and/or version.
|
|
19
|
+
const res = line.match(/^gem\s*(["']\w+["'])/); //Extract name
|
|
20
|
+
if (res) {
|
|
21
|
+
compName = res.length > 1 ? res[1] : ' ';
|
|
22
|
+
compName = compName.replace(/['"]/g, '');
|
|
23
|
+
const purlString = new PackageURL(PURL_TYPE, undefined, compName, undefined, undefined, undefined).toString();
|
|
24
|
+
results.purls.push({ purl: purlString });
|
|
25
|
+
}
|
|
26
|
+
}
|
|
27
|
+
}
|
|
28
|
+
return results;
|
|
29
|
+
}
|
|
30
|
+
const MANIFEST_FILE_1 = 'Gemfile.lock';
|
|
31
|
+
export function gemfilelockParser(fileContent, filePath) {
|
|
32
|
+
// If the file is not a manifest file, return an empty results
|
|
33
|
+
const results = { file: filePath, purls: [] };
|
|
34
|
+
if (path.basename(filePath) != MANIFEST_FILE_1)
|
|
35
|
+
return results;
|
|
36
|
+
const gemlockParser = new GemfileLockParser();
|
|
37
|
+
const purls = gemlockParser.getDependencies(fileContent);
|
|
38
|
+
for (const purl of purls) {
|
|
39
|
+
results.purls.push({ purl });
|
|
40
|
+
}
|
|
41
|
+
return results;
|
|
42
|
+
}
|
|
43
|
+
// Section headings: these are also used as switches to track a parsing state
|
|
44
|
+
const PATH = 'PATH';
|
|
45
|
+
const GIT = 'GIT';
|
|
46
|
+
const SVN = 'SVN';
|
|
47
|
+
const GEM = 'GEM';
|
|
48
|
+
const PLATFORMS = 'PLATFORMS';
|
|
49
|
+
const DEPENDENCIES = 'DEPENDENCIES';
|
|
50
|
+
const SPECS = ' specs:';
|
|
51
|
+
// types of Gems, which is really where they are provisioned from
|
|
52
|
+
// RubyGems repo, local path or VCS
|
|
53
|
+
const GEM_TYPES = [GEM, PATH, GIT, SVN];
|
|
54
|
+
const specRegex = /(?<name>[^ \)\(,!:]+)?(?: \((?<version>[^-]*?)(?:-(?<platform>[^!]*))?\))?/;
|
|
55
|
+
const firstDepLevelRegex = /^ {4}(?! )/;
|
|
56
|
+
/*
|
|
57
|
+
The parsing use a simple state machine, switching states based on sections
|
|
58
|
+
headings. The result is a list of purls
|
|
59
|
+
*/
|
|
60
|
+
class GemfileLockParser {
|
|
61
|
+
statesMap;
|
|
62
|
+
state;
|
|
63
|
+
current_options;
|
|
64
|
+
current_gem;
|
|
65
|
+
purlList;
|
|
66
|
+
constructor() {
|
|
67
|
+
this.purlList = [];
|
|
68
|
+
// map of a line start string to the next parsing state function
|
|
69
|
+
this.statesMap = {};
|
|
70
|
+
this.statesMap[DEPENDENCIES] = this.parseDependency;
|
|
71
|
+
this.statesMap[PLATFORMS] = this.parsePlatform;
|
|
72
|
+
this.statesMap[GIT] = this.parseOptions;
|
|
73
|
+
this.statesMap[PATH] = this.parseOptions;
|
|
74
|
+
this.statesMap[SVN] = this.parseOptions;
|
|
75
|
+
this.statesMap[GEM] = this.parseOptions;
|
|
76
|
+
this.statesMap[SPECS] = this.parseSpec;
|
|
77
|
+
}
|
|
78
|
+
getDependencies(filecontent) {
|
|
79
|
+
this.resetState();
|
|
80
|
+
let file = filecontent.split('\n');
|
|
81
|
+
for (let line of file) {
|
|
82
|
+
line = line.trimEnd();
|
|
83
|
+
//reset state on empty lines
|
|
84
|
+
if (!line.length) {
|
|
85
|
+
this.resetState();
|
|
86
|
+
continue;
|
|
87
|
+
}
|
|
88
|
+
//switch to new state
|
|
89
|
+
if (line in this.statesMap) {
|
|
90
|
+
if (GEM_TYPES.includes(line))
|
|
91
|
+
this.current_gem = line;
|
|
92
|
+
this.state = this.statesMap[line];
|
|
93
|
+
continue;
|
|
94
|
+
}
|
|
95
|
+
// process the line
|
|
96
|
+
if (this.state)
|
|
97
|
+
this.state(line);
|
|
98
|
+
}
|
|
99
|
+
this.refine();
|
|
100
|
+
return this.purlList;
|
|
101
|
+
}
|
|
102
|
+
resetState() {
|
|
103
|
+
this.current_options = {};
|
|
104
|
+
this.state = null;
|
|
105
|
+
}
|
|
106
|
+
parseOptions(line) {
|
|
107
|
+
const match = line.match(/\s*(\w+):\s*(.*)/);
|
|
108
|
+
const key = match.length >= 1 ? match[1] : null;
|
|
109
|
+
const value = match.length >= 2 ? match[2] : null;
|
|
110
|
+
if (key)
|
|
111
|
+
this.current_options[key] = value;
|
|
112
|
+
}
|
|
113
|
+
parseDependency(line) { }
|
|
114
|
+
parsePlatform(line) { }
|
|
115
|
+
parseSpec(line) {
|
|
116
|
+
if (this.current_gem == GEM) {
|
|
117
|
+
if (firstDepLevelRegex.test(line)) {
|
|
118
|
+
line = line.trimStart();
|
|
119
|
+
const match = line.match(specRegex);
|
|
120
|
+
const purl = new PackageURL(PURL_TYPE, undefined, match.groups.name, match.groups.version, undefined, undefined).toString();
|
|
121
|
+
this.purlList.push(purl);
|
|
122
|
+
}
|
|
123
|
+
else { // Second level of dependence
|
|
124
|
+
}
|
|
125
|
+
}
|
|
126
|
+
if (this.current_gem == GIT) { }
|
|
127
|
+
// Purl from local dependencies are not generated
|
|
128
|
+
if (this.current_gem == PATH) { }
|
|
129
|
+
}
|
|
130
|
+
refine() { }
|
|
131
|
+
}
|
|
132
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
export interface Purl {
|
|
2
|
+
purl: string;
|
|
3
|
+
}
|
|
4
|
+
export interface FileDependency {
|
|
5
|
+
file: string;
|
|
6
|
+
purls: Array<Purl>;
|
|
7
|
+
}
|
|
8
|
+
export interface FileListDependency {
|
|
9
|
+
files: Array<FileDependency>;
|
|
10
|
+
}
|
|
11
|
+
declare type ParserFuncType = (fileContent: string, filePath: string) => FileDependency;
|
|
12
|
+
export interface ParserDefinitions {
|
|
13
|
+
[key: string]: ParserFuncType;
|
|
14
|
+
}
|
|
15
|
+
export {};
|
|
@@ -0,0 +1,32 @@
|
|
|
1
|
+
export {};
|
|
2
|
+
/*
|
|
3
|
+
EXAMPLE
|
|
4
|
+
{
|
|
5
|
+
"files": [
|
|
6
|
+
{
|
|
7
|
+
"file": "./test/data/requirements.txt",
|
|
8
|
+
"purls": [
|
|
9
|
+
{
|
|
10
|
+
"purl": "pkg:pypi/requests"
|
|
11
|
+
},
|
|
12
|
+
{
|
|
13
|
+
"purl": "pkg:pypi/crc32c@2.2"
|
|
14
|
+
},
|
|
15
|
+
{
|
|
16
|
+
"purl": "pkg:pypi/binaryornot"
|
|
17
|
+
},
|
|
18
|
+
{
|
|
19
|
+
"purl": "pkg:pypi/progress"
|
|
20
|
+
},
|
|
21
|
+
{
|
|
22
|
+
"purl": "pkg:pypi/grpcio"
|
|
23
|
+
},
|
|
24
|
+
{
|
|
25
|
+
"purl": "pkg:pypi/protobuf"
|
|
26
|
+
}
|
|
27
|
+
]
|
|
28
|
+
}
|
|
29
|
+
]
|
|
30
|
+
}
|
|
31
|
+
*/
|
|
32
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidHlwZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi9zcmMvbGliL2RlcGVuZGVuY2llcy9zcmMvcGFyc2Vycy90eXBlcy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiO0FBb0JBOzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7OztFQTZCRSJ9
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
export function isValidUrl(string) {
|
|
2
|
+
let url;
|
|
3
|
+
try {
|
|
4
|
+
new URL(string);
|
|
5
|
+
}
|
|
6
|
+
catch (_) {
|
|
7
|
+
return false;
|
|
8
|
+
}
|
|
9
|
+
return true;
|
|
10
|
+
}
|
|
11
|
+
export function isValidPath(string) {
|
|
12
|
+
return /^((?:\.\.?)|(?:[a-zA-Z]:\\)|(?:\/))/gm.test(string);
|
|
13
|
+
}
|
|
14
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -0,0 +1,29 @@
|
|
|
1
|
+
import fs from 'fs';
|
|
2
|
+
import path from 'path';
|
|
3
|
+
import { parser } from './parser';
|
|
4
|
+
async function readOnlyFiles(dir) {
|
|
5
|
+
const files = await fs.promises.readdir(dir, { withFileTypes: true });
|
|
6
|
+
const results = [];
|
|
7
|
+
for (const f of files) {
|
|
8
|
+
if (f.isFile() && !f.isSymbolicLink()) {
|
|
9
|
+
results.push(`${dir}/${f.name}`);
|
|
10
|
+
}
|
|
11
|
+
}
|
|
12
|
+
return results;
|
|
13
|
+
}
|
|
14
|
+
export async function dependencyScan(projectPath) {
|
|
15
|
+
const filePaths = await readOnlyFiles(projectPath);
|
|
16
|
+
for (const filePath of filePaths) {
|
|
17
|
+
const fileName = path.basename(filePath);
|
|
18
|
+
if (parser[fileName])
|
|
19
|
+
return parser[fileName](await fs.promises.readFile(filePath, 'utf-8'));
|
|
20
|
+
}
|
|
21
|
+
return {};
|
|
22
|
+
}
|
|
23
|
+
export async function appendDependencyToResult(resultPath, dependency) {
|
|
24
|
+
const result = await fs.promises.readFile(resultPath, 'utf-8');
|
|
25
|
+
const resultJson = JSON.parse(result);
|
|
26
|
+
resultJson.dependencies = dependency;
|
|
27
|
+
await fs.promises.writeFile(resultPath, JSON.stringify(resultJson, null, 2));
|
|
28
|
+
}
|
|
29
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
export declare const parser: {
|
|
2
|
+
'requirements.txt': typeof pyParser;
|
|
3
|
+
'package.json': typeof jsParser;
|
|
4
|
+
};
|
|
5
|
+
declare function pyParser(requirements: string): Record<string, string>;
|
|
6
|
+
declare function jsParser(packageJson: string): Record<string, string>;
|
|
7
|
+
export {};
|
|
@@ -0,0 +1,38 @@
|
|
|
1
|
+
import { isValidUrl } from './utils';
|
|
2
|
+
export const parser = {
|
|
3
|
+
'requirements.txt': pyParser,
|
|
4
|
+
'package.json': jsParser
|
|
5
|
+
};
|
|
6
|
+
// Parse a requirements.txt file from python projects
|
|
7
|
+
// See reference on: https://pip.pypa.io/en/stable/reference/requirements-file-format/
|
|
8
|
+
function pyParser(requirements) {
|
|
9
|
+
const lines = requirements.split('\n');
|
|
10
|
+
const results = {};
|
|
11
|
+
let compName = '';
|
|
12
|
+
let compVer = '';
|
|
13
|
+
for (let line of lines) {
|
|
14
|
+
line = line.trim();
|
|
15
|
+
if (!line.startsWith('#') && line.length > 0) { // Avoid comments and new lines
|
|
16
|
+
if (isValidUrl(line) || /^[\.\/]+/.test(line)) { // url or path
|
|
17
|
+
compName = line.match(/.*\/(.*)/)[1];
|
|
18
|
+
compVer = compName.match(/\d\.\d.\d/)[0];
|
|
19
|
+
results[compName] = compVer;
|
|
20
|
+
}
|
|
21
|
+
else if (line.startsWith('-r')) { } // recursive dependencies (NOT SUPPORTED YET)
|
|
22
|
+
else {
|
|
23
|
+
const res = line.match(/\s*([-\w]*)\s*(?:[>=~!]*)\s*([\d\.]*)/);
|
|
24
|
+
compName = res[1];
|
|
25
|
+
compVer = res[2];
|
|
26
|
+
results[compName] = compVer;
|
|
27
|
+
}
|
|
28
|
+
}
|
|
29
|
+
}
|
|
30
|
+
return results;
|
|
31
|
+
}
|
|
32
|
+
function jsParser(packageJson) {
|
|
33
|
+
const o = JSON.parse(packageJson);
|
|
34
|
+
const results = {};
|
|
35
|
+
Object.assign(results, o.dependencies);
|
|
36
|
+
return results;
|
|
37
|
+
}
|
|
38
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export declare function isValidUrl(string: string): boolean;
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
import { URL } from "url";
|
|
2
|
+
export function isValidUrl(string) {
|
|
3
|
+
let url;
|
|
4
|
+
try {
|
|
5
|
+
new URL(string);
|
|
6
|
+
}
|
|
7
|
+
catch (_) {
|
|
8
|
+
return false;
|
|
9
|
+
}
|
|
10
|
+
return true;
|
|
11
|
+
}
|
|
12
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidXRpbHMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvbGliL2RlcGVuZGVuY3lTY2FuL3V0aWxzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sRUFBRSxHQUFHLEVBQUUsTUFBTSxLQUFLLENBQUM7QUFFMUIsTUFBTSxVQUFVLFVBQVUsQ0FBQyxNQUFjO0lBQ3JDLElBQUksR0FBUSxDQUFDO0lBQ2IsSUFBSTtRQUNGLElBQUksR0FBRyxDQUFDLE1BQU0sQ0FBQyxDQUFDO0tBQ2pCO0lBQUMsT0FBTyxDQUFDLEVBQUU7UUFDVixPQUFPLEtBQUssQ0FBQztLQUNkO0lBQ0QsT0FBTyxJQUFJLENBQUM7QUFDZCxDQUFDIn0=
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
interface Dependency {
|
|
2
|
+
filename: string;
|
|
3
|
+
path: string;
|
|
4
|
+
quantity: number;
|
|
5
|
+
dependencies: Record<string, string>;
|
|
6
|
+
}
|
|
7
|
+
export declare function dependency(projectPath: string): Promise<Array<Dependency>>;
|
|
8
|
+
export declare function appendDependencyToResult(resultPath: string, dependency: Record<string, string>): Promise<void>;
|
|
9
|
+
export {};
|
|
@@ -0,0 +1,38 @@
|
|
|
1
|
+
import fs from 'fs';
|
|
2
|
+
import path from 'path';
|
|
3
|
+
import { parser } from './parser';
|
|
4
|
+
;
|
|
5
|
+
async function readOnlyFiles(dir) {
|
|
6
|
+
const files = await fs.promises.readdir(dir, { withFileTypes: true });
|
|
7
|
+
const results = [];
|
|
8
|
+
for (const f of files) {
|
|
9
|
+
if (f.isFile() && !f.isSymbolicLink()) {
|
|
10
|
+
results.push(`${dir}/${f.name}`);
|
|
11
|
+
}
|
|
12
|
+
}
|
|
13
|
+
return results;
|
|
14
|
+
}
|
|
15
|
+
// Reads the root directory and search for a dependency declaration file
|
|
16
|
+
// Such as requirements.txt, package.json
|
|
17
|
+
// Returns: A list of dependencies declared
|
|
18
|
+
export async function dependency(projectPath) {
|
|
19
|
+
const dependencies = [];
|
|
20
|
+
const filePaths = await readOnlyFiles(projectPath);
|
|
21
|
+
for (const filePath of filePaths) {
|
|
22
|
+
const fileName = path.basename(filePath);
|
|
23
|
+
if (parser[fileName]) {
|
|
24
|
+
let dep = parser[fileName](await fs.promises.readFile(filePath, 'utf-8'));
|
|
25
|
+
if (dep) {
|
|
26
|
+
dependencies.push({ filename: fileName, path: filePath, quantity: dep.length, dependencies: dep });
|
|
27
|
+
}
|
|
28
|
+
}
|
|
29
|
+
}
|
|
30
|
+
return dependencies;
|
|
31
|
+
}
|
|
32
|
+
export async function appendDependencyToResult(resultPath, dependency) {
|
|
33
|
+
const result = await fs.promises.readFile(resultPath, 'utf-8');
|
|
34
|
+
const resultJson = JSON.parse(result);
|
|
35
|
+
resultJson.dependencies = dependency;
|
|
36
|
+
await fs.promises.writeFile(resultPath, JSON.stringify(resultJson, null, 2));
|
|
37
|
+
}
|
|
38
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
interface Dependency {
|
|
2
|
+
filename: string;
|
|
3
|
+
path: string;
|
|
4
|
+
quantity: number;
|
|
5
|
+
dependencies: Record<string, string>;
|
|
6
|
+
}
|
|
7
|
+
export declare function dependencyScan(projectPath: string): Promise<Array<Dependency>>;
|
|
8
|
+
export declare function appendDependencyToResult(resultPath: string, dependency: Record<string, string>): Promise<void>;
|
|
9
|
+
export {};
|