scanoss 0.2.9 → 0.2.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (145) hide show
  1. package/CHANGELOG.md +2 -0
  2. package/LICENSE +20 -18
  3. package/README.md +1 -1
  4. package/build/main/bin/cli-bin.js +7 -1
  5. package/build/main/commands/dep.d.ts +1 -0
  6. package/build/main/commands/dep.js +26 -0
  7. package/build/main/commands/scan.js +2 -2
  8. package/build/main/index.d.ts +2 -0
  9. package/build/main/index.js +3 -1
  10. package/build/main/lib/dependencies/Dependency.d.ts +9 -0
  11. package/build/main/lib/dependencies/Dependency.js +50 -0
  12. package/build/main/lib/dependencies/DependencyTypes.d.ts +19 -0
  13. package/build/main/lib/dependencies/DependencyTypes.js +3 -0
  14. package/build/main/lib/dependencies/PurlGenerator.d.ts +2 -0
  15. package/build/main/lib/dependencies/PurlGenerator.js +39 -0
  16. package/build/main/lib/dependencies/parsers/golangParser.d.ts +0 -0
  17. package/build/main/lib/dependencies/parsers/golangParser.js +3 -0
  18. package/build/main/lib/dependencies/parsers/mavenParser.d.ts +2 -0
  19. package/build/main/lib/dependencies/parsers/mavenParser.js +44 -0
  20. package/build/main/lib/dependencies/parsers/npmParser.d.ts +3 -0
  21. package/build/main/lib/dependencies/parsers/npmParser.js +45 -0
  22. package/build/main/lib/dependencies/parsers/pyParser.d.ts +2 -0
  23. package/build/main/lib/dependencies/parsers/pyParser.js +51 -0
  24. package/build/main/lib/dependencies/parsers/rubyParser.d.ts +3 -0
  25. package/build/main/lib/dependencies/parsers/rubyParser.js +135 -0
  26. package/build/main/lib/dependencies/parsers/types.d.ts +15 -0
  27. package/build/main/lib/dependencies/parsers/types.js +33 -0
  28. package/build/main/lib/dependencies/parsers/utils.d.ts +2 -0
  29. package/build/main/lib/dependencies/parsers/utils.js +20 -0
  30. package/build/main/lib/dependencies/src/PurlGenerator.d.ts +2 -0
  31. package/build/main/lib/dependencies/src/PurlGenerator.js +62 -0
  32. package/build/main/lib/dependencies/src/parsers/golangParser.d.ts +0 -0
  33. package/build/main/lib/dependencies/src/parsers/golangParser.js +3 -0
  34. package/build/main/lib/dependencies/src/parsers/mavenParser.d.ts +2 -0
  35. package/build/main/lib/dependencies/src/parsers/mavenParser.js +44 -0
  36. package/build/main/lib/dependencies/src/parsers/npmParser.d.ts +3 -0
  37. package/build/main/lib/dependencies/src/parsers/npmParser.js +45 -0
  38. package/build/main/lib/dependencies/src/parsers/pyParser.d.ts +2 -0
  39. package/build/main/lib/dependencies/src/parsers/pyParser.js +51 -0
  40. package/build/main/lib/dependencies/src/parsers/rubyParser.d.ts +3 -0
  41. package/build/main/lib/dependencies/src/parsers/rubyParser.js +135 -0
  42. package/build/main/lib/dependencies/src/parsers/types.d.ts +15 -0
  43. package/build/main/lib/dependencies/src/parsers/types.js +33 -0
  44. package/build/main/lib/dependencies/src/parsers/utils.d.ts +2 -0
  45. package/build/main/lib/dependencies/src/parsers/utils.js +19 -0
  46. package/build/main/lib/dependencyScan/dependencyScan.d.ts +2 -0
  47. package/build/main/lib/dependencyScan/dependencyScan.js +37 -0
  48. package/build/main/lib/dependencyScan/parser.d.ts +7 -0
  49. package/build/main/lib/dependencyScan/parser.js +41 -0
  50. package/build/main/lib/dependencyScan/utils.d.ts +1 -0
  51. package/build/main/lib/dependencyScan/utils.js +16 -0
  52. package/build/main/lib/scanner/Dependency/dependency.d.ts +9 -0
  53. package/build/main/lib/scanner/Dependency/dependency.js +46 -0
  54. package/build/main/lib/scanner/Dependency/dependencyScan.d.ts +9 -0
  55. package/build/main/lib/scanner/Dependency/dependencyScan.js +48 -0
  56. package/build/main/lib/scanner/Dependency/parser.d.ts +7 -0
  57. package/build/main/lib/scanner/Dependency/parser.js +41 -0
  58. package/build/main/lib/scanner/Dependency/utils.d.ts +1 -0
  59. package/build/main/lib/scanner/Dependency/utils.js +16 -0
  60. package/build/main/lib/scanner/Scanner.d.ts +3 -2
  61. package/build/main/lib/scanner/Scanner.js +15 -9
  62. package/build/main/lib/scanner/Winnower/Winnower.js +5 -3
  63. package/build/main/lib/tree/Tree.js +2 -2
  64. package/build/module/bin/cli-bin.js +7 -1
  65. package/build/module/commands/dep.d.ts +1 -0
  66. package/build/module/commands/dep.js +19 -0
  67. package/build/module/commands/scan.js +2 -2
  68. package/build/module/index.d.ts +2 -0
  69. package/build/module/index.js +3 -1
  70. package/build/module/lib/dependencies/Dependency.d.ts +9 -0
  71. package/build/module/lib/dependencies/Dependency.js +45 -0
  72. package/build/module/lib/dependencies/DependencyTypes.d.ts +19 -0
  73. package/build/module/lib/dependencies/DependencyTypes.js +2 -0
  74. package/build/module/lib/dependencies/PurlGenerator.d.ts +2 -0
  75. package/build/module/lib/dependencies/PurlGenerator.js +32 -0
  76. package/build/module/lib/dependencies/parsers/golangParser.d.ts +0 -0
  77. package/build/module/lib/dependencies/parsers/golangParser.js +3 -0
  78. package/build/module/lib/dependencies/parsers/mavenParser.d.ts +2 -0
  79. package/build/module/lib/dependencies/parsers/mavenParser.js +37 -0
  80. package/build/module/lib/dependencies/parsers/npmParser.d.ts +3 -0
  81. package/build/module/lib/dependencies/parsers/npmParser.js +37 -0
  82. package/build/module/lib/dependencies/parsers/pyParser.d.ts +2 -0
  83. package/build/module/lib/dependencies/parsers/pyParser.js +44 -0
  84. package/build/module/lib/dependencies/parsers/rubyParser.d.ts +3 -0
  85. package/build/module/lib/dependencies/parsers/rubyParser.js +132 -0
  86. package/build/module/lib/dependencies/parsers/types.d.ts +15 -0
  87. package/build/module/lib/dependencies/parsers/types.js +32 -0
  88. package/build/module/lib/dependencies/parsers/utils.d.ts +2 -0
  89. package/build/module/lib/dependencies/parsers/utils.js +15 -0
  90. package/build/module/lib/dependencies/src/PurlGenerator.d.ts +2 -0
  91. package/build/module/lib/dependencies/src/PurlGenerator.js +55 -0
  92. package/build/module/lib/dependencies/src/parsers/golangParser.d.ts +0 -0
  93. package/build/module/lib/dependencies/src/parsers/golangParser.js +3 -0
  94. package/build/module/lib/dependencies/src/parsers/mavenParser.d.ts +2 -0
  95. package/build/module/lib/dependencies/src/parsers/mavenParser.js +37 -0
  96. package/build/module/lib/dependencies/src/parsers/npmParser.d.ts +3 -0
  97. package/build/module/lib/dependencies/src/parsers/npmParser.js +37 -0
  98. package/build/module/lib/dependencies/src/parsers/pyParser.d.ts +2 -0
  99. package/build/module/lib/dependencies/src/parsers/pyParser.js +44 -0
  100. package/build/module/lib/dependencies/src/parsers/rubyParser.d.ts +3 -0
  101. package/build/module/lib/dependencies/src/parsers/rubyParser.js +132 -0
  102. package/build/module/lib/dependencies/src/parsers/types.d.ts +15 -0
  103. package/build/module/lib/dependencies/src/parsers/types.js +32 -0
  104. package/build/module/lib/dependencies/src/parsers/utils.d.ts +2 -0
  105. package/build/module/lib/dependencies/src/parsers/utils.js +14 -0
  106. package/build/module/lib/dependencyScan/dependencyScan.d.ts +2 -0
  107. package/build/module/lib/dependencyScan/dependencyScan.js +29 -0
  108. package/build/module/lib/dependencyScan/parser.d.ts +7 -0
  109. package/build/module/lib/dependencyScan/parser.js +38 -0
  110. package/build/module/lib/dependencyScan/utils.d.ts +1 -0
  111. package/build/module/lib/dependencyScan/utils.js +12 -0
  112. package/build/module/lib/scanner/Dependency/dependency.d.ts +9 -0
  113. package/build/module/lib/scanner/Dependency/dependency.js +38 -0
  114. package/build/module/lib/scanner/Dependency/dependencyScan.d.ts +9 -0
  115. package/build/module/lib/scanner/Dependency/dependencyScan.js +40 -0
  116. package/build/module/lib/scanner/Dependency/parser.d.ts +7 -0
  117. package/build/module/lib/scanner/Dependency/parser.js +38 -0
  118. package/build/module/lib/scanner/Dependency/utils.d.ts +1 -0
  119. package/build/module/lib/scanner/Dependency/utils.js +12 -0
  120. package/build/module/lib/scanner/Scanner.d.ts +3 -2
  121. package/build/module/lib/scanner/Scanner.js +15 -9
  122. package/build/module/lib/scanner/Winnower/Winnower.js +5 -3
  123. package/build/module/lib/tree/Tree.js +2 -2
  124. package/build/tsconfig.module.tsbuildinfo +1 -1
  125. package/build/tsconfig.tsbuildinfo +1 -1
  126. package/package.json +2 -1
  127. package/src/bin/cli-bin.ts +7 -3
  128. package/src/commands/dep.ts +23 -0
  129. package/src/commands/scan.ts +1 -1
  130. package/src/index.ts +2 -1
  131. package/src/lib/dependencies/Dependency.ts +58 -0
  132. package/src/lib/dependencies/DependencyTypes.ts +22 -0
  133. package/src/lib/dependencies/PurlGenerator.ts +41 -0
  134. package/src/lib/dependencies/parsers/golangParser.ts +4 -0
  135. package/src/lib/dependencies/parsers/mavenParser.ts +48 -0
  136. package/src/lib/dependencies/parsers/npmParser.ts +44 -0
  137. package/src/lib/dependencies/parsers/pyParser.ts +46 -0
  138. package/src/lib/dependencies/parsers/rubyParser.ts +181 -0
  139. package/src/lib/dependencies/parsers/types.ts +50 -0
  140. package/src/lib/dependencies/parsers/utils.ts +16 -0
  141. package/src/lib/scanner/Scanner.ts +18 -12
  142. package/src/lib/scanner/Winnower/Winnower.ts +5 -3
  143. package/src/lib/tree/Tree.ts +1 -1
  144. package/yarn.lock +5 -0
  145. package/package-lock.json +0 -18266
@@ -0,0 +1,55 @@
1
+ import fs from 'fs';
2
+ import path from 'path';
3
+ import { pomParser } from './parsers/mavenParser';
4
+ import { packagelockParser, packageParser } from './parsers/npmParser';
5
+ import { requirementsParser } from './parsers/pyParser';
6
+ import { gemfilelockParser, gemfileParser } from './parsers/rubyParser';
7
+ /*
8
+ This is a hash map that connect a filename with it's own parser function
9
+ Any parser function must return a FileDependency object (See type.ts file in src/parser
10
+ */
11
+ const Parser = {
12
+ 'requirements.txt': requirementsParser,
13
+ 'pom.xml': pomParser,
14
+ 'package.json': packageParser,
15
+ 'package-lock.json': packagelockParser,
16
+ 'Gemfile': gemfileParser,
17
+ 'Gemfile.lock': gemfilelockParser
18
+ };
19
+ export async function generateDependenciesPurls(files) {
20
+ let results = { files: [] };
21
+ for (const filePath of files) {
22
+ const fileName = path.basename(filePath);
23
+ if (Parser[fileName] != null) {
24
+ const fileContent = await fs.promises.readFile(filePath, 'utf8');
25
+ const dependency = Parser[fileName](fileContent, filePath);
26
+ if (dependency.purls.length != 0)
27
+ results.files.push(dependency);
28
+ }
29
+ }
30
+ return results;
31
+ }
32
+ /* TESTING RELATED STUFF */
33
+ const dirToExplore = './test';
34
+ async function readOnlyFilesRecur(dir, store) {
35
+ const dirContent = await fs.promises.readdir(dir, { withFileTypes: true });
36
+ for (const f of dirContent) {
37
+ if (f.isFile() && !f.isSymbolicLink()) {
38
+ store.push(`${dir}/${f.name}`);
39
+ }
40
+ else if (f.isDirectory()) {
41
+ await readOnlyFilesRecur(`${dir}/${f.name}`, store);
42
+ }
43
+ }
44
+ }
45
+ const exploreFolder = async (dir) => {
46
+ let files = [];
47
+ await readOnlyFilesRecur(dir, files);
48
+ return files;
49
+ };
50
+ exploreFolder(dirToExplore).then(async (fList) => {
51
+ const res = await generateDependenciesPurls(fList);
52
+ console.log(JSON.stringify(res, null, 2));
53
+ });
54
+ /* TESTING RELATED STUFF */
55
+ //# sourceMappingURL=data:application/json;base64,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
@@ -0,0 +1,3 @@
1
+ // Reference https://go.dev/ref/mod#go-mod-file
2
+ //
3
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZ29sYW5nUGFyc2VyLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vLi4vLi4vc3JjL2xpYi9kZXBlbmRlbmNpZXMvc3JjL3BhcnNlcnMvZ29sYW5nUGFyc2VyLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUVBLCtDQUErQztBQUMvQyxHQUFHIn0=
@@ -0,0 +1,2 @@
1
+ import { FileDependency } from "./types";
2
+ export declare function pomParser(fileContent: string, filePath: string): FileDependency;
@@ -0,0 +1,37 @@
1
+ import path from "path";
2
+ import { PackageURL } from "packageurl-js";
3
+ const PURL_TYPE = 'maven';
4
+ // Parse a pom.txt file from maven manifest file
5
+ // See reference on: https://maven.apache.org/guides/introduction/introduction-to-the-pom.html
6
+ // and https://maven.apache.org/guides/introduction/introduction-to-dependency-mechanism.html
7
+ const MANIFEST_FILE = 'pom.xml';
8
+ export function pomParser(fileContent, filePath) {
9
+ // If the file is not a python manifest file, return an empty results
10
+ const results = { file: filePath, purls: [] };
11
+ if (path.basename(filePath) != MANIFEST_FILE)
12
+ return results;
13
+ const dependencies = fileContent.match(/<dependency>((?:.|\n)*?)<\/dependency>/gm);
14
+ if (dependencies) {
15
+ // TODO: classifier are not supported yet
16
+ dependencies.forEach(dependency => {
17
+ // Extract groupId. It's the purl namespace
18
+ const groupId = dependency.match(/<groupId>([^<]*)<\/groupId>/);
19
+ const namespace = groupId ? groupId[1] : '';
20
+ // Extract artifact id. It's the purl name
21
+ const artifactId = dependency.match(/<artifactId>([^<]*)<\/artifactId>/);
22
+ const name = artifactId ? artifactId[1] : '';
23
+ const versionReg = dependency.match(/<version>([^<]*)<\/version>/);
24
+ const version = versionReg ? versionReg[1] : '';
25
+ let purlQualifiers;
26
+ const type = dependency.match(/<type>([^<]*)<\/type>/);
27
+ if (type) {
28
+ purlQualifiers = {};
29
+ purlQualifiers['type'] = type[1];
30
+ }
31
+ const purlString = new PackageURL(PURL_TYPE, namespace, name, version, purlQualifiers, undefined).toString();
32
+ results.purls.push({ purl: purlString });
33
+ });
34
+ }
35
+ return results;
36
+ }
37
+ //# sourceMappingURL=data:application/json;base64,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
@@ -0,0 +1,3 @@
1
+ import { FileDependency } from "./types";
2
+ export declare function packageParser(fileContent: string, filePath: string): FileDependency;
3
+ export declare function packagelockParser(fileContent: string, filePath: string): FileDependency;
@@ -0,0 +1,37 @@
1
+ import path from "path";
2
+ import { PackageURL } from "packageurl-js";
3
+ const PURL_TYPE = 'npm';
4
+ // Parse a package.json file from node projects
5
+ // See reference on: https://docs.npmjs.com/cli/v8/configuring-npm/package-json
6
+ const MANIFEST_FILE = 'package.json';
7
+ export function packageParser(fileContent, filePath) {
8
+ // If the file is not manifest file, return an empty results
9
+ const results = { file: filePath, purls: [] };
10
+ if (path.basename(filePath) != MANIFEST_FILE)
11
+ return results;
12
+ const o = JSON.parse(fileContent);
13
+ let devDeps = Object.keys(o.devDependencies);
14
+ let deps = Object.keys(o.dependencies);
15
+ let listDeps = [...deps, ...devDeps];
16
+ for (const name of listDeps) {
17
+ const purlString = new PackageURL(PURL_TYPE, undefined, name, undefined, undefined, undefined).toString();
18
+ results.purls.push({ purl: purlString });
19
+ }
20
+ return results;
21
+ }
22
+ // Parse a package-lock.json file from node projects
23
+ // See reference on: https://docs.npmjs.com/cli/v8/configuring-npm/package-json
24
+ const MANIFEST_FILE_1 = 'package-loc.json';
25
+ export function packagelockParser(fileContent, filePath) {
26
+ const results = { file: filePath, purls: [] };
27
+ if (path.basename(filePath) != MANIFEST_FILE_1)
28
+ return results;
29
+ const o = JSON.parse(fileContent).dependencies;
30
+ for (const [key, value] of Object.entries(o)) {
31
+ if (!key)
32
+ continue;
33
+ let purl = new PackageURL(PURL_TYPE, undefined, key, value['version'], undefined, undefined).toString();
34
+ results.purls.push({ purl });
35
+ }
36
+ }
37
+ //# sourceMappingURL=data:application/json;base64,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
@@ -0,0 +1,2 @@
1
+ import { FileDependency } from "./types";
2
+ export declare function requirementsParser(fileContent: string, filePath: string): FileDependency;
@@ -0,0 +1,44 @@
1
+ import path from "path";
2
+ import { PackageURL } from "packageurl-js";
3
+ import { isValidPath, isValidUrl } from './utils';
4
+ const PURL_TYPE = 'pypi';
5
+ // Parse a requirements.txt file from python projects
6
+ // See reference on: https://pip.pypa.io/en/stable/reference/requirements-file-format/
7
+ const MANIFEST_FILE = 'requirements.txt';
8
+ export function requirementsParser(fileContent, filePath) {
9
+ // If the file is not a python manifest file, return an empty results
10
+ const results = { file: filePath, purls: [] };
11
+ if (path.basename(filePath) != MANIFEST_FILE)
12
+ return results;
13
+ const lines = fileContent.split('\n');
14
+ let compName = '';
15
+ let compVer = '';
16
+ for (let line of lines) {
17
+ line = line.trim();
18
+ if (!line.startsWith('#') && line.length > 0) { // Avoid comments and new lines
19
+ if (isValidUrl(line)) {
20
+ // For reference about the regex see https://www.rfc-editor.org/rfc/rfc3986#appendix-B
21
+ const res = line.match(/^(([^:\/?#]+):)?(\/\/([^\/?#]*))?([^?#]*)(\?([^#]*))?(#(.*))?/);
22
+ continue;
23
+ }
24
+ else if (isValidPath(line)) {
25
+ continue;
26
+ }
27
+ else if (line.startsWith('-r')) {
28
+ continue;
29
+ } // recursive dependencies (NOT SUPPORTED YET)
30
+ else {
31
+ // Line contains a package name and/or version.
32
+ const res = line.match(/^([-\w]+)\s*(?:[>=~!]*)\s*([\d\.]*)/); //Extract name and version
33
+ if (res) {
34
+ compName = res.length > 1 ? res[1] : ' ';
35
+ compVer = undefined;
36
+ }
37
+ }
38
+ const purlString = new PackageURL(PURL_TYPE, undefined, compName, compVer, undefined, undefined).toString();
39
+ results.purls.push({ purl: purlString });
40
+ }
41
+ }
42
+ return results;
43
+ }
44
+ //# sourceMappingURL=data:application/json;base64,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
@@ -0,0 +1,3 @@
1
+ import { FileDependency } from "./types";
2
+ export declare function gemfileParser(fileContent: string, filePath: string): FileDependency;
3
+ export declare function gemfilelockParser(fileContent: string, filePath: string): FileDependency;
@@ -0,0 +1,132 @@
1
+ import path from "path";
2
+ import { PackageURL } from "packageurl-js";
3
+ const PURL_TYPE = 'gem';
4
+ // Parse a gemfile file from ruby
5
+ // See reference on: https://bundler.io/gemfile.html
6
+ // and https://bundler.io/man/gemfile.5.html
7
+ const MANIFEST_FILE = 'Gemfile';
8
+ export function gemfileParser(fileContent, filePath) {
9
+ // If the file is not a manifest file, return an empty results
10
+ const results = { file: filePath, purls: [] };
11
+ if (path.basename(filePath) != MANIFEST_FILE)
12
+ return results;
13
+ const lines = fileContent.split('\n');
14
+ let compName = '';
15
+ for (let line of lines) {
16
+ line = line.trim();
17
+ if (!line.startsWith('#') && line.length > 0) { // Avoid comments and empty lines
18
+ // Line contains a package name and/or version.
19
+ const res = line.match(/^gem\s*(["']\w+["'])/); //Extract name
20
+ if (res) {
21
+ compName = res.length > 1 ? res[1] : ' ';
22
+ compName = compName.replace(/['"]/g, '');
23
+ const purlString = new PackageURL(PURL_TYPE, undefined, compName, undefined, undefined, undefined).toString();
24
+ results.purls.push({ purl: purlString });
25
+ }
26
+ }
27
+ }
28
+ return results;
29
+ }
30
+ const MANIFEST_FILE_1 = 'Gemfile.lock';
31
+ export function gemfilelockParser(fileContent, filePath) {
32
+ // If the file is not a manifest file, return an empty results
33
+ const results = { file: filePath, purls: [] };
34
+ if (path.basename(filePath) != MANIFEST_FILE_1)
35
+ return results;
36
+ const gemlockParser = new GemfileLockParser();
37
+ const purls = gemlockParser.getDependencies(fileContent);
38
+ for (const purl of purls) {
39
+ results.purls.push({ purl });
40
+ }
41
+ return results;
42
+ }
43
+ // Section headings: these are also used as switches to track a parsing state
44
+ const PATH = 'PATH';
45
+ const GIT = 'GIT';
46
+ const SVN = 'SVN';
47
+ const GEM = 'GEM';
48
+ const PLATFORMS = 'PLATFORMS';
49
+ const DEPENDENCIES = 'DEPENDENCIES';
50
+ const SPECS = ' specs:';
51
+ // types of Gems, which is really where they are provisioned from
52
+ // RubyGems repo, local path or VCS
53
+ const GEM_TYPES = [GEM, PATH, GIT, SVN];
54
+ const specRegex = /(?<name>[^ \)\(,!:]+)?(?: \((?<version>[^-]*?)(?:-(?<platform>[^!]*))?\))?/;
55
+ const firstDepLevelRegex = /^ {4}(?! )/;
56
+ /*
57
+ The parsing use a simple state machine, switching states based on sections
58
+ headings. The result is a list of purls
59
+ */
60
+ class GemfileLockParser {
61
+ statesMap;
62
+ state;
63
+ current_options;
64
+ current_gem;
65
+ purlList;
66
+ constructor() {
67
+ this.purlList = [];
68
+ // map of a line start string to the next parsing state function
69
+ this.statesMap = {};
70
+ this.statesMap[DEPENDENCIES] = this.parseDependency;
71
+ this.statesMap[PLATFORMS] = this.parsePlatform;
72
+ this.statesMap[GIT] = this.parseOptions;
73
+ this.statesMap[PATH] = this.parseOptions;
74
+ this.statesMap[SVN] = this.parseOptions;
75
+ this.statesMap[GEM] = this.parseOptions;
76
+ this.statesMap[SPECS] = this.parseSpec;
77
+ }
78
+ getDependencies(filecontent) {
79
+ this.resetState();
80
+ let file = filecontent.split('\n');
81
+ for (let line of file) {
82
+ line = line.trimEnd();
83
+ //reset state on empty lines
84
+ if (!line.length) {
85
+ this.resetState();
86
+ continue;
87
+ }
88
+ //switch to new state
89
+ if (line in this.statesMap) {
90
+ if (GEM_TYPES.includes(line))
91
+ this.current_gem = line;
92
+ this.state = this.statesMap[line];
93
+ continue;
94
+ }
95
+ // process the line
96
+ if (this.state)
97
+ this.state(line);
98
+ }
99
+ this.refine();
100
+ return this.purlList;
101
+ }
102
+ resetState() {
103
+ this.current_options = {};
104
+ this.state = null;
105
+ }
106
+ parseOptions(line) {
107
+ const match = line.match(/\s*(\w+):\s*(.*)/);
108
+ const key = match.length >= 1 ? match[1] : null;
109
+ const value = match.length >= 2 ? match[2] : null;
110
+ if (key)
111
+ this.current_options[key] = value;
112
+ }
113
+ parseDependency(line) { }
114
+ parsePlatform(line) { }
115
+ parseSpec(line) {
116
+ if (this.current_gem == GEM) {
117
+ if (firstDepLevelRegex.test(line)) {
118
+ line = line.trimStart();
119
+ const match = line.match(specRegex);
120
+ const purl = new PackageURL(PURL_TYPE, undefined, match.groups.name, match.groups.version, undefined, undefined).toString();
121
+ this.purlList.push(purl);
122
+ }
123
+ else { // Second level of dependence
124
+ }
125
+ }
126
+ if (this.current_gem == GIT) { }
127
+ // Purl from local dependencies are not generated
128
+ if (this.current_gem == PATH) { }
129
+ }
130
+ refine() { }
131
+ }
132
+ //# sourceMappingURL=data:application/json;base64,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
@@ -0,0 +1,15 @@
1
+ export interface Purl {
2
+ purl: string;
3
+ }
4
+ export interface FileDependency {
5
+ file: string;
6
+ purls: Array<Purl>;
7
+ }
8
+ export interface FileListDependency {
9
+ files: Array<FileDependency>;
10
+ }
11
+ declare type ParserFuncType = (fileContent: string, filePath: string) => FileDependency;
12
+ export interface ParserDefinitions {
13
+ [key: string]: ParserFuncType;
14
+ }
15
+ export {};
@@ -0,0 +1,32 @@
1
+ export {};
2
+ /*
3
+ EXAMPLE
4
+ {
5
+ "files": [
6
+ {
7
+ "file": "./test/data/requirements.txt",
8
+ "purls": [
9
+ {
10
+ "purl": "pkg:pypi/requests"
11
+ },
12
+ {
13
+ "purl": "pkg:pypi/crc32c@2.2"
14
+ },
15
+ {
16
+ "purl": "pkg:pypi/binaryornot"
17
+ },
18
+ {
19
+ "purl": "pkg:pypi/progress"
20
+ },
21
+ {
22
+ "purl": "pkg:pypi/grpcio"
23
+ },
24
+ {
25
+ "purl": "pkg:pypi/protobuf"
26
+ }
27
+ ]
28
+ }
29
+ ]
30
+ }
31
+ */
32
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidHlwZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi9zcmMvbGliL2RlcGVuZGVuY2llcy9zcmMvcGFyc2Vycy90eXBlcy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiO0FBb0JBOzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7OztFQTZCRSJ9
@@ -0,0 +1,2 @@
1
+ export declare function isValidUrl(string: string): boolean;
2
+ export declare function isValidPath(string: string): boolean;
@@ -0,0 +1,14 @@
1
+ export function isValidUrl(string) {
2
+ let url;
3
+ try {
4
+ new URL(string);
5
+ }
6
+ catch (_) {
7
+ return false;
8
+ }
9
+ return true;
10
+ }
11
+ export function isValidPath(string) {
12
+ return /^((?:\.\.?)|(?:[a-zA-Z]:\\)|(?:\/))/gm.test(string);
13
+ }
14
+ //# sourceMappingURL=data:application/json;base64,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
@@ -0,0 +1,2 @@
1
+ export declare function dependencyScan(projectPath: string): Promise<Record<string, string>>;
2
+ export declare function appendDependencyToResult(resultPath: string, dependency: Record<string, string>): Promise<void>;
@@ -0,0 +1,29 @@
1
+ import fs from 'fs';
2
+ import path from 'path';
3
+ import { parser } from './parser';
4
+ async function readOnlyFiles(dir) {
5
+ const files = await fs.promises.readdir(dir, { withFileTypes: true });
6
+ const results = [];
7
+ for (const f of files) {
8
+ if (f.isFile() && !f.isSymbolicLink()) {
9
+ results.push(`${dir}/${f.name}`);
10
+ }
11
+ }
12
+ return results;
13
+ }
14
+ export async function dependencyScan(projectPath) {
15
+ const filePaths = await readOnlyFiles(projectPath);
16
+ for (const filePath of filePaths) {
17
+ const fileName = path.basename(filePath);
18
+ if (parser[fileName])
19
+ return parser[fileName](await fs.promises.readFile(filePath, 'utf-8'));
20
+ }
21
+ return {};
22
+ }
23
+ export async function appendDependencyToResult(resultPath, dependency) {
24
+ const result = await fs.promises.readFile(resultPath, 'utf-8');
25
+ const resultJson = JSON.parse(result);
26
+ resultJson.dependencies = dependency;
27
+ await fs.promises.writeFile(resultPath, JSON.stringify(resultJson, null, 2));
28
+ }
29
+ //# sourceMappingURL=data:application/json;base64,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
@@ -0,0 +1,7 @@
1
+ export declare const parser: {
2
+ 'requirements.txt': typeof pyParser;
3
+ 'package.json': typeof jsParser;
4
+ };
5
+ declare function pyParser(requirements: string): Record<string, string>;
6
+ declare function jsParser(packageJson: string): Record<string, string>;
7
+ export {};
@@ -0,0 +1,38 @@
1
+ import { isValidUrl } from './utils';
2
+ export const parser = {
3
+ 'requirements.txt': pyParser,
4
+ 'package.json': jsParser
5
+ };
6
+ // Parse a requirements.txt file from python projects
7
+ // See reference on: https://pip.pypa.io/en/stable/reference/requirements-file-format/
8
+ function pyParser(requirements) {
9
+ const lines = requirements.split('\n');
10
+ const results = {};
11
+ let compName = '';
12
+ let compVer = '';
13
+ for (let line of lines) {
14
+ line = line.trim();
15
+ if (!line.startsWith('#') && line.length > 0) { // Avoid comments and new lines
16
+ if (isValidUrl(line) || /^[\.\/]+/.test(line)) { // url or path
17
+ compName = line.match(/.*\/(.*)/)[1];
18
+ compVer = compName.match(/\d\.\d.\d/)[0];
19
+ results[compName] = compVer;
20
+ }
21
+ else if (line.startsWith('-r')) { } // recursive dependencies (NOT SUPPORTED YET)
22
+ else {
23
+ const res = line.match(/\s*([-\w]*)\s*(?:[>=~!]*)\s*([\d\.]*)/);
24
+ compName = res[1];
25
+ compVer = res[2];
26
+ results[compName] = compVer;
27
+ }
28
+ }
29
+ }
30
+ return results;
31
+ }
32
+ function jsParser(packageJson) {
33
+ const o = JSON.parse(packageJson);
34
+ const results = {};
35
+ Object.assign(results, o.dependencies);
36
+ return results;
37
+ }
38
+ //# sourceMappingURL=data:application/json;base64,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
@@ -0,0 +1 @@
1
+ export declare function isValidUrl(string: string): boolean;
@@ -0,0 +1,12 @@
1
+ import { URL } from "url";
2
+ export function isValidUrl(string) {
3
+ let url;
4
+ try {
5
+ new URL(string);
6
+ }
7
+ catch (_) {
8
+ return false;
9
+ }
10
+ return true;
11
+ }
12
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidXRpbHMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvbGliL2RlcGVuZGVuY3lTY2FuL3V0aWxzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sRUFBRSxHQUFHLEVBQUUsTUFBTSxLQUFLLENBQUM7QUFFMUIsTUFBTSxVQUFVLFVBQVUsQ0FBQyxNQUFjO0lBQ3JDLElBQUksR0FBUSxDQUFDO0lBQ2IsSUFBSTtRQUNGLElBQUksR0FBRyxDQUFDLE1BQU0sQ0FBQyxDQUFDO0tBQ2pCO0lBQUMsT0FBTyxDQUFDLEVBQUU7UUFDVixPQUFPLEtBQUssQ0FBQztLQUNkO0lBQ0QsT0FBTyxJQUFJLENBQUM7QUFDZCxDQUFDIn0=
@@ -0,0 +1,9 @@
1
+ interface Dependency {
2
+ filename: string;
3
+ path: string;
4
+ quantity: number;
5
+ dependencies: Record<string, string>;
6
+ }
7
+ export declare function dependency(projectPath: string): Promise<Array<Dependency>>;
8
+ export declare function appendDependencyToResult(resultPath: string, dependency: Record<string, string>): Promise<void>;
9
+ export {};
@@ -0,0 +1,38 @@
1
+ import fs from 'fs';
2
+ import path from 'path';
3
+ import { parser } from './parser';
4
+ ;
5
+ async function readOnlyFiles(dir) {
6
+ const files = await fs.promises.readdir(dir, { withFileTypes: true });
7
+ const results = [];
8
+ for (const f of files) {
9
+ if (f.isFile() && !f.isSymbolicLink()) {
10
+ results.push(`${dir}/${f.name}`);
11
+ }
12
+ }
13
+ return results;
14
+ }
15
+ // Reads the root directory and search for a dependency declaration file
16
+ // Such as requirements.txt, package.json
17
+ // Returns: A list of dependencies declared
18
+ export async function dependency(projectPath) {
19
+ const dependencies = [];
20
+ const filePaths = await readOnlyFiles(projectPath);
21
+ for (const filePath of filePaths) {
22
+ const fileName = path.basename(filePath);
23
+ if (parser[fileName]) {
24
+ let dep = parser[fileName](await fs.promises.readFile(filePath, 'utf-8'));
25
+ if (dep) {
26
+ dependencies.push({ filename: fileName, path: filePath, quantity: dep.length, dependencies: dep });
27
+ }
28
+ }
29
+ }
30
+ return dependencies;
31
+ }
32
+ export async function appendDependencyToResult(resultPath, dependency) {
33
+ const result = await fs.promises.readFile(resultPath, 'utf-8');
34
+ const resultJson = JSON.parse(result);
35
+ resultJson.dependencies = dependency;
36
+ await fs.promises.writeFile(resultPath, JSON.stringify(resultJson, null, 2));
37
+ }
38
+ //# sourceMappingURL=data:application/json;base64,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
@@ -0,0 +1,9 @@
1
+ interface Dependency {
2
+ filename: string;
3
+ path: string;
4
+ quantity: number;
5
+ dependencies: Record<string, string>;
6
+ }
7
+ export declare function dependencyScan(projectPath: string): Promise<Array<Dependency>>;
8
+ export declare function appendDependencyToResult(resultPath: string, dependency: Record<string, string>): Promise<void>;
9
+ export {};