scanoss 0.7.4 → 0.7.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (281) hide show
  1. package/.idea/workspace.xml +22 -20
  2. package/build/main/cli/bin/cli-bin.d.ts +2 -1
  3. package/build/main/cli/bin/cli-bin.js +10 -2
  4. package/build/main/package.json +120 -0
  5. package/build/main/sdk/Dependencies/LocalDependency/parsers/rubyParser.d.ts +1 -1
  6. package/build/main/sdk/Dependencies/LocalDependency/parsers/rubyParser.js +4 -4
  7. package/build/main/sdk/scanner/Dispatcher/Dispatcher.js +5 -2
  8. package/build/main/sdk/scanner/Fingerprint.d.ts +2 -2
  9. package/build/main/sdk/scanner/Fingerprint.js +26 -8
  10. package/build/main/sdk/scanner/Scanner.js +4 -1
  11. package/build/main/sdk/scanner/ScannerCfg.d.ts +1 -0
  12. package/build/main/sdk/scanner/ScannerCfg.js +6 -3
  13. package/build/main/sdk/scanner/WfpProvider/WfpCalculator/WfpCalculator.js +6 -3
  14. package/build/main/src/cli/bin/cli-bin.d.ts +2 -0
  15. package/build/main/src/cli/bin/cli-bin.js +68 -0
  16. package/build/main/src/cli/commands/dep.d.ts +1 -0
  17. package/build/main/src/cli/commands/dep.js +38 -0
  18. package/build/main/src/cli/commands/helpers.d.ts +2 -0
  19. package/build/main/src/cli/commands/helpers.js +25 -0
  20. package/build/main/src/cli/commands/scan.d.ts +1 -0
  21. package/build/main/src/cli/commands/scan.js +138 -0
  22. package/build/main/src/cli/commands/wfp.d.ts +1 -0
  23. package/build/main/src/cli/commands/wfp.js +54 -0
  24. package/build/main/src/index.d.ts +14 -0
  25. package/build/main/src/index.js +30 -0
  26. package/build/main/src/sdk/DataLayer/DataLayerTypes.d.ts +108 -0
  27. package/build/main/src/sdk/DataLayer/DataLayerTypes.js +5 -0
  28. package/build/main/src/sdk/DataLayer/DataProviderManager.d.ts +7 -0
  29. package/build/main/src/sdk/DataLayer/DataProviderManager.js +24 -0
  30. package/build/main/src/sdk/DataLayer/DataProviders/ComponentDataProvider.d.ts +13 -0
  31. package/build/main/src/sdk/DataLayer/DataProviders/ComponentDataProvider.js +164 -0
  32. package/build/main/src/sdk/DataLayer/DataProviders/DependencyDataProvider.d.ts +9 -0
  33. package/build/main/src/sdk/DataLayer/DataProviders/DependencyDataProvider.js +37 -0
  34. package/build/main/src/sdk/DataLayer/DataProviders/LicenseDataProvider.d.ts +18 -0
  35. package/build/main/src/sdk/DataLayer/DataProviders/LicenseDataProvider.js +148 -0
  36. package/build/main/src/sdk/DataLayer/DataProviders/SummaryDataProvider.d.ts +11 -0
  37. package/build/main/src/sdk/DataLayer/DataProviders/SummaryDataProvider.js +33 -0
  38. package/build/main/src/sdk/Decompress/DecompressionManager.d.ts +12 -0
  39. package/build/main/src/sdk/Decompress/DecompressionManager.js +73 -0
  40. package/build/main/src/sdk/Decompress/Decompressor/DecompressTgz.d.ts +5 -0
  41. package/build/main/src/sdk/Decompress/Decompressor/DecompressTgz.js +22 -0
  42. package/build/main/src/sdk/Decompress/Decompressor/DecompressZips.d.ts +5 -0
  43. package/build/main/src/sdk/Decompress/Decompressor/DecompressZips.js +24 -0
  44. package/build/main/src/sdk/Decompress/Decompressor/Decompressor.d.ts +10 -0
  45. package/build/main/src/sdk/Decompress/Decompressor/Decompressor.js +18 -0
  46. package/build/main/src/sdk/Dependencies/DependencyScanner.d.ts +11 -0
  47. package/build/main/src/sdk/Dependencies/DependencyScanner.js +96 -0
  48. package/build/main/src/sdk/Dependencies/DependencyScannerCfg.d.ts +4 -0
  49. package/build/main/src/sdk/Dependencies/DependencyScannerCfg.js +10 -0
  50. package/build/main/src/sdk/Dependencies/DependencyTypes.d.ts +21 -0
  51. package/build/main/src/sdk/Dependencies/DependencyTypes.js +2 -0
  52. package/build/main/src/sdk/Dependencies/LocalDependency/DependencyTypes.d.ts +16 -0
  53. package/build/main/src/sdk/Dependencies/LocalDependency/DependencyTypes.js +2 -0
  54. package/build/main/src/sdk/Dependencies/LocalDependency/LocalDependency.d.ts +8 -0
  55. package/build/main/src/sdk/Dependencies/LocalDependency/LocalDependency.js +102 -0
  56. package/build/main/src/sdk/Dependencies/LocalDependency/parsers/buildGradleParser.d.ts +2 -0
  57. package/build/main/src/sdk/Dependencies/LocalDependency/parsers/buildGradleParser.js +95 -0
  58. package/build/main/src/sdk/Dependencies/LocalDependency/parsers/golangParser.d.ts +3 -0
  59. package/build/main/src/sdk/Dependencies/LocalDependency/parsers/golangParser.js +97 -0
  60. package/build/main/src/sdk/Dependencies/LocalDependency/parsers/mavenParser.d.ts +2 -0
  61. package/build/main/src/sdk/Dependencies/LocalDependency/parsers/mavenParser.js +183 -0
  62. package/build/main/src/sdk/Dependencies/LocalDependency/parsers/npmParser.d.ts +13 -0
  63. package/build/main/src/sdk/Dependencies/LocalDependency/parsers/npmParser.js +187 -0
  64. package/build/main/src/sdk/Dependencies/LocalDependency/parsers/nugetParser.d.ts +3 -0
  65. package/build/main/src/sdk/Dependencies/LocalDependency/parsers/nugetParser.js +58 -0
  66. package/build/main/src/sdk/Dependencies/LocalDependency/parsers/pyParser.d.ts +2 -0
  67. package/build/main/src/sdk/Dependencies/LocalDependency/parsers/pyParser.js +64 -0
  68. package/build/main/src/sdk/Dependencies/LocalDependency/parsers/rubyParser.d.ts +3 -0
  69. package/build/main/src/sdk/Dependencies/LocalDependency/parsers/rubyParser.js +132 -0
  70. package/build/main/src/sdk/Dependencies/LocalDependency/parsers/utils.d.ts +2 -0
  71. package/build/main/src/sdk/Dependencies/LocalDependency/parsers/utils.js +19 -0
  72. package/build/main/src/sdk/Report/Report.d.ts +8 -0
  73. package/build/main/src/sdk/Report/Report.js +26 -0
  74. package/build/main/src/sdk/filters/DefaultFilterForDependencies.d.ts +16 -0
  75. package/build/main/src/sdk/filters/DefaultFilterForDependencies.js +145 -0
  76. package/build/main/src/sdk/filters/DefaultFilterForScanning.d.ts +16 -0
  77. package/build/main/src/sdk/filters/DefaultFilterForScanning.js +194 -0
  78. package/build/main/src/sdk/filters/filtering.d.ts +32 -0
  79. package/build/main/src/sdk/filters/filtering.js +228 -0
  80. package/build/main/src/sdk/grpc/GrpcDependencyService.d.ts +11 -0
  81. package/build/main/src/sdk/grpc/GrpcDependencyService.js +86 -0
  82. package/build/main/src/sdk/grpc/scanoss/api/common/v2/scanoss-common_grpc_pb.d.ts +0 -0
  83. package/build/main/src/sdk/grpc/scanoss/api/common/v2/scanoss-common_grpc_pb.js +2 -0
  84. package/build/main/src/sdk/grpc/scanoss/api/common/v2/scanoss-common_pb.d.ts +1 -0
  85. package/build/main/src/sdk/grpc/scanoss/api/common/v2/scanoss-common_pb.js +404 -0
  86. package/build/main/src/sdk/grpc/scanoss/api/dependencies/v2/scanoss-dependencies_grpc_pb.d.ts +39 -0
  87. package/build/main/src/sdk/grpc/scanoss/api/dependencies/v2/scanoss-dependencies_grpc_pb.js +98 -0
  88. package/build/main/src/sdk/grpc/scanoss/api/dependencies/v2/scanoss-dependencies_pb.d.ts +1 -0
  89. package/build/main/src/sdk/grpc/scanoss/api/dependencies/v2/scanoss-dependencies_pb.js +1197 -0
  90. package/build/main/src/sdk/grpc/scanoss/api/scanning/v2/scanoss-scanning_grpc_pb.d.ts +19 -0
  91. package/build/main/src/sdk/grpc/scanoss/api/scanning/v2/scanoss-scanning_grpc_pb.js +66 -0
  92. package/build/main/src/sdk/grpc/scanoss/api/scanning/v2/scanoss-scanning_pb.d.ts +1 -0
  93. package/build/main/src/sdk/grpc/scanoss/api/scanning/v2/scanoss-scanning_pb.js +14 -0
  94. package/build/main/src/sdk/scanner/Dispatcher/DispatchableItem.d.ts +19 -0
  95. package/build/main/src/sdk/scanner/Dispatcher/DispatchableItem.js +43 -0
  96. package/build/main/src/sdk/scanner/Dispatcher/Dispatcher.d.ts +20 -0
  97. package/build/main/src/sdk/scanner/Dispatcher/Dispatcher.js +160 -0
  98. package/build/main/src/sdk/scanner/Dispatcher/DispatcherResponse.d.ts +12 -0
  99. package/build/main/src/sdk/scanner/Dispatcher/DispatcherResponse.js +33 -0
  100. package/build/main/src/sdk/scanner/Dispatcher/GlobalControllerAborter.d.ts +10 -0
  101. package/build/main/src/sdk/scanner/Dispatcher/GlobalControllerAborter.js +32 -0
  102. package/build/main/src/sdk/scanner/Fingerprint.d.ts +16 -0
  103. package/build/main/src/sdk/scanner/Fingerprint.js +78 -0
  104. package/build/main/src/sdk/scanner/Scannable/ScannableItem.d.ts +15 -0
  105. package/build/main/src/sdk/scanner/Scannable/ScannableItem.js +27 -0
  106. package/build/main/src/sdk/scanner/Scanner.d.ts +46 -0
  107. package/build/main/src/sdk/scanner/Scanner.js +283 -0
  108. package/build/main/src/sdk/scanner/ScannerCfg.d.ts +16 -0
  109. package/build/main/src/sdk/scanner/ScannerCfg.js +30 -0
  110. package/build/main/src/sdk/scanner/ScannerTypes.d.ts +121 -0
  111. package/build/main/src/sdk/scanner/ScannerTypes.js +48 -0
  112. package/build/main/src/sdk/scanner/WfpProvider/FingerprintPackage.d.ts +9 -0
  113. package/build/main/src/sdk/scanner/WfpProvider/FingerprintPackage.js +31 -0
  114. package/build/main/src/sdk/scanner/WfpProvider/WfpCalculator/WfpCalculator.d.ts +20 -0
  115. package/build/main/src/sdk/scanner/WfpProvider/WfpCalculator/WfpCalculator.js +492 -0
  116. package/build/main/src/sdk/scanner/WfpProvider/WfpProvider.d.ts +35 -0
  117. package/build/main/src/sdk/scanner/WfpProvider/WfpProvider.js +68 -0
  118. package/build/main/src/sdk/scanner/WfpProvider/WfpSplitter/WfpSplitter.d.ts +21 -0
  119. package/build/main/src/sdk/scanner/WfpProvider/WfpSplitter/WfpSplitter.js +139 -0
  120. package/build/main/src/sdk/tree/File.d.ts +7 -0
  121. package/build/main/src/sdk/tree/File.js +24 -0
  122. package/build/main/src/sdk/tree/Filters/DecompressionFilter.d.ts +7 -0
  123. package/build/main/src/sdk/tree/Filters/DecompressionFilter.js +21 -0
  124. package/build/main/src/sdk/tree/Filters/DependencyFilter.d.ts +7 -0
  125. package/build/main/src/sdk/tree/Filters/DependencyFilter.js +17 -0
  126. package/build/main/src/sdk/tree/Filters/Filter.d.ts +4 -0
  127. package/build/main/src/sdk/tree/Filters/Filter.js +6 -0
  128. package/build/main/src/sdk/tree/Filters/ScanFilter.d.ts +7 -0
  129. package/build/main/src/sdk/tree/Filters/ScanFilter.js +17 -0
  130. package/build/main/src/sdk/tree/Folder.d.ts +12 -0
  131. package/build/main/src/sdk/tree/Folder.js +58 -0
  132. package/build/main/src/sdk/tree/Node.d.ts +17 -0
  133. package/build/main/src/sdk/tree/Node.js +25 -0
  134. package/build/main/src/sdk/tree/Tree.d.ts +18 -0
  135. package/build/main/src/sdk/tree/Tree.js +70 -0
  136. package/build/main/tsconfig.tsbuildinfo +126 -123
  137. package/build/module/cli/bin/cli-bin.d.ts +2 -1
  138. package/build/module/cli/bin/cli-bin.js +6 -2
  139. package/build/module/package.json +120 -0
  140. package/build/module/sdk/Dependencies/LocalDependency/parsers/rubyParser.d.ts +1 -1
  141. package/build/module/sdk/Dependencies/LocalDependency/parsers/rubyParser.js +4 -4
  142. package/build/module/sdk/scanner/Dispatcher/Dispatcher.js +5 -2
  143. package/build/module/sdk/scanner/Fingerprint.d.ts +2 -2
  144. package/build/module/sdk/scanner/Fingerprint.js +6 -6
  145. package/build/module/sdk/scanner/Scanner.js +4 -1
  146. package/build/module/sdk/scanner/ScannerCfg.d.ts +1 -0
  147. package/build/module/sdk/scanner/ScannerCfg.js +6 -3
  148. package/build/module/sdk/scanner/WfpProvider/WfpCalculator/WfpCalculator.js +6 -3
  149. package/build/module/src/cli/bin/cli-bin.d.ts +2 -0
  150. package/build/module/src/cli/bin/cli-bin.js +67 -0
  151. package/build/module/src/cli/commands/dep.d.ts +1 -0
  152. package/build/module/src/cli/commands/dep.js +32 -0
  153. package/build/module/src/cli/commands/helpers.d.ts +2 -0
  154. package/build/module/src/cli/commands/helpers.js +19 -0
  155. package/build/module/src/cli/commands/scan.d.ts +1 -0
  156. package/build/module/src/cli/commands/scan.js +135 -0
  157. package/build/module/src/cli/commands/wfp.d.ts +1 -0
  158. package/build/module/src/cli/commands/wfp.js +48 -0
  159. package/build/module/src/index.d.ts +14 -0
  160. package/build/module/src/index.js +19 -0
  161. package/build/module/src/sdk/DataLayer/DataLayerTypes.d.ts +108 -0
  162. package/build/module/src/sdk/DataLayer/DataLayerTypes.js +5 -0
  163. package/build/module/src/sdk/DataLayer/DataProviderManager.d.ts +7 -0
  164. package/build/module/src/sdk/DataLayer/DataProviderManager.js +21 -0
  165. package/build/module/src/sdk/DataLayer/DataProviders/ComponentDataProvider.d.ts +13 -0
  166. package/build/module/src/sdk/DataLayer/DataProviders/ComponentDataProvider.js +159 -0
  167. package/build/module/src/sdk/DataLayer/DataProviders/DependencyDataProvider.d.ts +9 -0
  168. package/build/module/src/sdk/DataLayer/DataProviders/DependencyDataProvider.js +34 -0
  169. package/build/module/src/sdk/DataLayer/DataProviders/LicenseDataProvider.d.ts +18 -0
  170. package/build/module/src/sdk/DataLayer/DataProviders/LicenseDataProvider.js +145 -0
  171. package/build/module/src/sdk/DataLayer/DataProviders/SummaryDataProvider.d.ts +11 -0
  172. package/build/module/src/sdk/DataLayer/DataProviders/SummaryDataProvider.js +30 -0
  173. package/build/module/src/sdk/Decompress/DecompressionManager.d.ts +12 -0
  174. package/build/module/src/sdk/Decompress/DecompressionManager.js +67 -0
  175. package/build/module/src/sdk/Decompress/Decompressor/DecompressTgz.d.ts +5 -0
  176. package/build/module/src/sdk/Decompress/Decompressor/DecompressTgz.js +16 -0
  177. package/build/module/src/sdk/Decompress/Decompressor/DecompressZips.d.ts +5 -0
  178. package/build/module/src/sdk/Decompress/Decompressor/DecompressZips.js +18 -0
  179. package/build/module/src/sdk/Decompress/Decompressor/Decompressor.d.ts +10 -0
  180. package/build/module/src/sdk/Decompress/Decompressor/Decompressor.js +15 -0
  181. package/build/module/src/sdk/Dependencies/DependencyScanner.d.ts +11 -0
  182. package/build/module/src/sdk/Dependencies/DependencyScanner.js +93 -0
  183. package/build/module/src/sdk/Dependencies/DependencyScannerCfg.d.ts +4 -0
  184. package/build/module/src/sdk/Dependencies/DependencyScannerCfg.js +7 -0
  185. package/build/module/src/sdk/Dependencies/DependencyTypes.d.ts +21 -0
  186. package/build/module/src/sdk/Dependencies/DependencyTypes.js +2 -0
  187. package/build/module/src/sdk/Dependencies/LocalDependency/DependencyTypes.d.ts +16 -0
  188. package/build/module/src/sdk/Dependencies/LocalDependency/DependencyTypes.js +2 -0
  189. package/build/module/src/sdk/Dependencies/LocalDependency/LocalDependency.d.ts +8 -0
  190. package/build/module/src/sdk/Dependencies/LocalDependency/LocalDependency.js +96 -0
  191. package/build/module/src/sdk/Dependencies/LocalDependency/parsers/buildGradleParser.d.ts +2 -0
  192. package/build/module/src/sdk/Dependencies/LocalDependency/parsers/buildGradleParser.js +87 -0
  193. package/build/module/src/sdk/Dependencies/LocalDependency/parsers/golangParser.d.ts +3 -0
  194. package/build/module/src/sdk/Dependencies/LocalDependency/parsers/golangParser.js +88 -0
  195. package/build/module/src/sdk/Dependencies/LocalDependency/parsers/mavenParser.d.ts +2 -0
  196. package/build/module/src/sdk/Dependencies/LocalDependency/parsers/mavenParser.js +180 -0
  197. package/build/module/src/sdk/Dependencies/LocalDependency/parsers/npmParser.d.ts +13 -0
  198. package/build/module/src/sdk/Dependencies/LocalDependency/parsers/npmParser.js +175 -0
  199. package/build/module/src/sdk/Dependencies/LocalDependency/parsers/nugetParser.d.ts +3 -0
  200. package/build/module/src/sdk/Dependencies/LocalDependency/parsers/nugetParser.js +49 -0
  201. package/build/module/src/sdk/Dependencies/LocalDependency/parsers/pyParser.d.ts +2 -0
  202. package/build/module/src/sdk/Dependencies/LocalDependency/parsers/pyParser.js +57 -0
  203. package/build/module/src/sdk/Dependencies/LocalDependency/parsers/rubyParser.d.ts +3 -0
  204. package/build/module/src/sdk/Dependencies/LocalDependency/parsers/rubyParser.js +125 -0
  205. package/build/module/src/sdk/Dependencies/LocalDependency/parsers/utils.d.ts +2 -0
  206. package/build/module/src/sdk/Dependencies/LocalDependency/parsers/utils.js +15 -0
  207. package/build/module/src/sdk/Report/Report.d.ts +8 -0
  208. package/build/module/src/sdk/Report/Report.js +20 -0
  209. package/build/module/src/sdk/filters/DefaultFilterForDependencies.d.ts +16 -0
  210. package/build/module/src/sdk/filters/DefaultFilterForDependencies.js +143 -0
  211. package/build/module/src/sdk/filters/DefaultFilterForScanning.d.ts +16 -0
  212. package/build/module/src/sdk/filters/DefaultFilterForScanning.js +192 -0
  213. package/build/module/src/sdk/filters/filtering.d.ts +32 -0
  214. package/build/module/src/sdk/filters/filtering.js +203 -0
  215. package/build/module/src/sdk/grpc/GrpcDependencyService.d.ts +11 -0
  216. package/build/module/src/sdk/grpc/GrpcDependencyService.js +64 -0
  217. package/build/module/src/sdk/grpc/scanoss/api/common/v2/scanoss-common_grpc_pb.d.ts +0 -0
  218. package/build/module/src/sdk/grpc/scanoss/api/common/v2/scanoss-common_grpc_pb.js +2 -0
  219. package/build/module/src/sdk/grpc/scanoss/api/common/v2/scanoss-common_pb.d.ts +1 -0
  220. package/build/module/src/sdk/grpc/scanoss/api/common/v2/scanoss-common_pb.js +404 -0
  221. package/build/module/src/sdk/grpc/scanoss/api/dependencies/v2/scanoss-dependencies_grpc_pb.d.ts +39 -0
  222. package/build/module/src/sdk/grpc/scanoss/api/dependencies/v2/scanoss-dependencies_grpc_pb.js +98 -0
  223. package/build/module/src/sdk/grpc/scanoss/api/dependencies/v2/scanoss-dependencies_pb.d.ts +1 -0
  224. package/build/module/src/sdk/grpc/scanoss/api/dependencies/v2/scanoss-dependencies_pb.js +1197 -0
  225. package/build/module/src/sdk/grpc/scanoss/api/scanning/v2/scanoss-scanning_grpc_pb.d.ts +19 -0
  226. package/build/module/src/sdk/grpc/scanoss/api/scanning/v2/scanoss-scanning_grpc_pb.js +66 -0
  227. package/build/module/src/sdk/grpc/scanoss/api/scanning/v2/scanoss-scanning_pb.d.ts +1 -0
  228. package/build/module/src/sdk/grpc/scanoss/api/scanning/v2/scanoss-scanning_pb.js +14 -0
  229. package/build/module/src/sdk/scanner/Dispatcher/DispatchableItem.d.ts +19 -0
  230. package/build/module/src/sdk/scanner/Dispatcher/DispatchableItem.js +37 -0
  231. package/build/module/src/sdk/scanner/Dispatcher/Dispatcher.d.ts +20 -0
  232. package/build/module/src/sdk/scanner/Dispatcher/Dispatcher.js +135 -0
  233. package/build/module/src/sdk/scanner/Dispatcher/DispatcherResponse.d.ts +12 -0
  234. package/build/module/src/sdk/scanner/Dispatcher/DispatcherResponse.js +30 -0
  235. package/build/module/src/sdk/scanner/Dispatcher/GlobalControllerAborter.d.ts +10 -0
  236. package/build/module/src/sdk/scanner/Dispatcher/GlobalControllerAborter.js +26 -0
  237. package/build/module/src/sdk/scanner/Fingerprint.d.ts +16 -0
  238. package/build/module/src/sdk/scanner/Fingerprint.js +54 -0
  239. package/build/module/src/sdk/scanner/Scannable/ScannableItem.d.ts +15 -0
  240. package/build/module/src/sdk/scanner/Scannable/ScannableItem.js +24 -0
  241. package/build/module/src/sdk/scanner/Scanner.d.ts +46 -0
  242. package/build/module/src/sdk/scanner/Scanner.js +275 -0
  243. package/build/module/src/sdk/scanner/ScannerCfg.d.ts +16 -0
  244. package/build/module/src/sdk/scanner/ScannerCfg.js +27 -0
  245. package/build/module/src/sdk/scanner/ScannerTypes.d.ts +121 -0
  246. package/build/module/src/sdk/scanner/ScannerTypes.js +46 -0
  247. package/build/module/src/sdk/scanner/WfpProvider/FingerprintPackage.d.ts +9 -0
  248. package/build/module/src/sdk/scanner/WfpProvider/FingerprintPackage.js +28 -0
  249. package/build/module/src/sdk/scanner/WfpProvider/WfpCalculator/WfpCalculator.d.ts +20 -0
  250. package/build/module/src/sdk/scanner/WfpProvider/WfpCalculator/WfpCalculator.js +486 -0
  251. package/build/module/src/sdk/scanner/WfpProvider/WfpProvider.d.ts +35 -0
  252. package/build/module/src/sdk/scanner/WfpProvider/WfpProvider.js +65 -0
  253. package/build/module/src/sdk/scanner/WfpProvider/WfpSplitter/WfpSplitter.d.ts +21 -0
  254. package/build/module/src/sdk/scanner/WfpProvider/WfpSplitter/WfpSplitter.js +132 -0
  255. package/build/module/src/sdk/tree/File.d.ts +7 -0
  256. package/build/module/src/sdk/tree/File.js +19 -0
  257. package/build/module/src/sdk/tree/Filters/DecompressionFilter.d.ts +7 -0
  258. package/build/module/src/sdk/tree/Filters/DecompressionFilter.js +18 -0
  259. package/build/module/src/sdk/tree/Filters/DependencyFilter.d.ts +7 -0
  260. package/build/module/src/sdk/tree/Filters/DependencyFilter.js +14 -0
  261. package/build/module/src/sdk/tree/Filters/Filter.d.ts +4 -0
  262. package/build/module/src/sdk/tree/Filters/Filter.js +3 -0
  263. package/build/module/src/sdk/tree/Filters/ScanFilter.d.ts +7 -0
  264. package/build/module/src/sdk/tree/Filters/ScanFilter.js +14 -0
  265. package/build/module/src/sdk/tree/Folder.d.ts +12 -0
  266. package/build/module/src/sdk/tree/Folder.js +53 -0
  267. package/build/module/src/sdk/tree/Node.d.ts +17 -0
  268. package/build/module/src/sdk/tree/Node.js +22 -0
  269. package/build/module/src/sdk/tree/Tree.d.ts +18 -0
  270. package/build/module/src/sdk/tree/Tree.js +64 -0
  271. package/build/module/tsconfig.module.tsbuildinfo +126 -123
  272. package/package-lock.json +17117 -0
  273. package/package.json +1 -1
  274. package/src/cli/bin/cli-bin.ts +7 -4
  275. package/src/sdk/Dependencies/LocalDependency/parsers/rubyParser.ts +10 -9
  276. package/src/sdk/scanner/Dispatcher/Dispatcher.ts +5 -2
  277. package/src/sdk/scanner/Fingerprint.ts +6 -8
  278. package/src/sdk/scanner/Scanner.ts +4 -0
  279. package/src/sdk/scanner/ScannerCfg.ts +8 -2
  280. package/src/sdk/scanner/WfpProvider/WfpCalculator/WfpCalculator.ts +7 -2
  281. package/yarn.lock +4977 -4864
@@ -0,0 +1,183 @@
1
+ var __importDefault = (this && this.__importDefault) || function (mod) {
2
+ return (mod && mod.__esModule) ? mod : { "default": mod };
3
+ };
4
+ Object.defineProperty(exports, "__esModule", { value: true });
5
+ exports.pomParser = void 0;
6
+ const path_1 = __importDefault(require("path"));
7
+ const packageurl_js_1 = require("packageurl-js");
8
+ const PURL_TYPE = 'maven';
9
+ // Parse a pom.txt file from maven manifest file
10
+ // See reference on: https://maven.apache.org/guides/introduction/introduction-to-the-pom.html
11
+ // and https://maven.apache.org/guides/introduction/introduction-to-dependency-mechanism.html
12
+ const MANIFEST_FILE = 'pom.xml';
13
+ function pomParser(fileContent, filePath) {
14
+ // If the file is not a python manifest file, return an empty results
15
+ const results = { file: filePath, purls: [] };
16
+ if (path_1.default.basename(filePath) != MANIFEST_FILE)
17
+ return Promise.resolve(results);
18
+ const dependencies = fileContent.match(/<dependency>((?:.|\n)*?)<\/dependency>/gm);
19
+ if (dependencies) {
20
+ dependencies.forEach(dependency => {
21
+ // Extract groupId. It's the purl namespace
22
+ const groupId = dependency.match(/<groupId>([^<]*)<\/groupId>/);
23
+ const namespace = (groupId && groupId.length >= 1) ? groupId[1] : null;
24
+ // Extract artifact id. It's the purl name
25
+ const artifactId = dependency.match(/<artifactId>([^<]*)<\/artifactId>/);
26
+ const name = (artifactId && artifactId.length >= 1) ? artifactId[1] : null;
27
+ const versionReg = dependency.match(/<version>([^<]*)<\/version>/);
28
+ let version;
29
+ if (versionReg && versionReg.length >= 1)
30
+ version = resolve_version(versionReg[1], fileContent);
31
+ // Extract scope.
32
+ const scopeRes = dependency.match(/<scope>([^<]*)<\/scope>/);
33
+ const scope = (scopeRes && scopeRes.length >= 1) ? scopeRes[1] : null;
34
+ //Detect and extract purl qualifiers
35
+ const classifierRes = dependency.match(/<classifier>([^<]*)<\/classifier>/);
36
+ const classifier = (classifierRes && classifierRes.length >= 1) ? classifierRes[1] : null;
37
+ const typeRes = dependency.match(/<type>([^<]*)<\/type>/);
38
+ const type = (typeRes && typeRes.length >= 1) ? typeRes[1] : null;
39
+ let purlQualifiers;
40
+ if (type || classifier)
41
+ purlQualifiers = Object.assign(Object.assign({}, (type && { type })), (classifier && { classifier }));
42
+ const purlString = new packageurl_js_1.PackageURL(PURL_TYPE, namespace, name, undefined, purlQualifiers, undefined).toString();
43
+ results.purls.push({ purl: purlString, requirement: version, scope: scope });
44
+ });
45
+ }
46
+ //Remove purls duplicated
47
+ const nonDuplicatedResults = removeDuplicated(results);
48
+ return Promise.resolve(nonDuplicatedResults);
49
+ }
50
+ exports.pomParser = pomParser;
51
+ function removeDuplicated(results) {
52
+ const map = {};
53
+ for (let res of results.purls) {
54
+ map[res.purl] = res;
55
+ }
56
+ results.purls = Object.values(map);
57
+ return results;
58
+ }
59
+ function resolve_version(dependency_version, file_content) {
60
+ // See properties: https://maven.apache.org/pom.html#properties
61
+ let version = '';
62
+ if (dependency_version) {
63
+ if (/\${project.version}/.test(dependency_version)) {
64
+ version = extract_content_from_tag(file_content, ['project', 'version']);
65
+ }
66
+ else if (/\${.*?}/.test(dependency_version)) {
67
+ const property = dependency_version.match(/\${(.*?)}/)[1];
68
+ const result = file_content.match(new RegExp(`<${property}>([^<]*)<\/${property}>`));
69
+ if (result && result.length > 0)
70
+ version = result[1];
71
+ }
72
+ else {
73
+ version = dependency_version.toString();
74
+ }
75
+ }
76
+ return version;
77
+ }
78
+ function get_start_tag_name(line) {
79
+ const result = line.match(/\<([\w\-\.]+).*?>/);
80
+ if (result)
81
+ return result[1].trim();
82
+ return '';
83
+ }
84
+ function get_end_tag_name(line) {
85
+ const result = line.match(/\<\/([\w\-\.]+) ?>/);
86
+ if (result)
87
+ return result[1].trim();
88
+ return '';
89
+ }
90
+ function get_end_tag(line) {
91
+ const result = get_end_tag_name(line);
92
+ if (result !== '')
93
+ return `</${result}>`;
94
+ return '';
95
+ }
96
+ function get_start_tag(line) {
97
+ const result = get_start_tag_name(line);
98
+ if (result !== '')
99
+ return `<${result}>`;
100
+ return '';
101
+ }
102
+ function element_match(openTag, closeTag) {
103
+ return get_start_tag_name(openTag) === get_end_tag_name(closeTag);
104
+ }
105
+ function is_element_complete(line) {
106
+ return get_start_tag_name(line) === get_end_tag_name(line);
107
+ }
108
+ function get_offset_until_end_of_tag(lines, end_tag_name) {
109
+ let i = 0;
110
+ for (const line of lines) {
111
+ if (get_end_tag_name(line) === end_tag_name)
112
+ break;
113
+ i += 1;
114
+ }
115
+ return i;
116
+ }
117
+ function remove_comments(lines) {
118
+ for (let i = 0; i < lines.length; i += 1) {
119
+ let openCommentFlag = /<!--/.test(lines[i]);
120
+ let endCommentFlag = /-->/.test(lines[i]);
121
+ if (openCommentFlag && endCommentFlag)
122
+ lines[i] = lines[i].replace(/<!--.*-->/, '');
123
+ else if (openCommentFlag) {
124
+ while (!/-->/.test(lines[i]) && i < lines.length) {
125
+ lines[i] = '';
126
+ i += 1;
127
+ }
128
+ lines[i] = lines[i].replace(/.*-->/, '');
129
+ }
130
+ }
131
+ return lines;
132
+ }
133
+ function extract_content_from_tag(file_content, selector) {
134
+ let lines = file_content.split('\n');
135
+ const stack = [];
136
+ let selectorIndex = 0;
137
+ let startTagName = '';
138
+ let endTagName = '';
139
+ let content = '';
140
+ // Sanitize xml: Removes comments
141
+ lines = remove_comments(lines);
142
+ for (let i = 0; i < lines.length; i += 1) {
143
+ let line = lines[i].trim();
144
+ if (line === '')
145
+ continue;
146
+ startTagName = get_start_tag_name(line);
147
+ endTagName = get_end_tag_name(line);
148
+ // Element complete in the same line and different than my selector
149
+ if (selector[selectorIndex] !== startTagName && is_element_complete(line))
150
+ continue;
151
+ // Element spans multiline and is different than my selector
152
+ // Loop until find corresponding end tag
153
+ if (selector[selectorIndex] !== startTagName) {
154
+ i += 1;
155
+ while (i < lines.length && !element_match(line, lines[i]))
156
+ i += 1;
157
+ continue;
158
+ }
159
+ // lines[i] points to the opening tag of the current selector[selectorIndex]
160
+ selectorIndex += 1;
161
+ stack.push(startTagName);
162
+ // Target reached
163
+ if (selector.length === stack.length) {
164
+ // Target has only one line
165
+ if (is_element_complete(line)) {
166
+ line = line.replace(get_end_tag(line), '');
167
+ line = line.replace(get_start_tag(line), '');
168
+ return line;
169
+ }
170
+ // Extracts everything beetwen opening and closing tag and return.
171
+ i += 1;
172
+ while (i < lines.length && !element_match(line, lines[i])) {
173
+ content += lines[i].trim();
174
+ i += 1;
175
+ }
176
+ return content;
177
+ }
178
+ startTagName = '';
179
+ endTagName = '';
180
+ }
181
+ return '';
182
+ }
183
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibWF2ZW5QYXJzZXIuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvc2RrL0RlcGVuZGVuY2llcy9Mb2NhbERlcGVuZGVuY3kvcGFyc2Vycy9tYXZlblBhcnNlci50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7OztBQUFBLGdEQUF3QjtBQUN4QixpREFBMkM7QUFHM0MsTUFBTSxTQUFTLEdBQUcsT0FBTyxDQUFDO0FBRTFCLGdEQUFnRDtBQUNoRCw4RkFBOEY7QUFDOUYsNkZBQTZGO0FBQzdGLE1BQU0sYUFBYSxHQUFHLFNBQVMsQ0FBQztBQUNoQyxTQUFnQixTQUFTLENBQUMsV0FBbUIsRUFBRSxRQUFnQjtJQUUzRCxxRUFBcUU7SUFDckUsTUFBTSxPQUFPLEdBQXFCLEVBQUMsSUFBSSxFQUFFLFFBQVEsRUFBRSxLQUFLLEVBQUUsRUFBRSxFQUFDLENBQUM7SUFDOUQsSUFBRyxjQUFJLENBQUMsUUFBUSxDQUFDLFFBQVEsQ0FBQyxJQUFJLGFBQWE7UUFDekMsT0FBTyxPQUFPLENBQUMsT0FBTyxDQUFDLE9BQU8sQ0FBQyxDQUFDO0lBRWxDLE1BQU0sWUFBWSxHQUFHLFdBQVcsQ0FBQyxLQUFLLENBQUMsMENBQTBDLENBQUMsQ0FBQztJQUNuRixJQUFHLFlBQVksRUFBRTtRQUVmLFlBQVksQ0FBQyxPQUFPLENBQUMsVUFBVSxDQUFDLEVBQUU7WUFDaEMsMkNBQTJDO1lBQzNDLE1BQU0sT0FBTyxHQUFHLFVBQVUsQ0FBQyxLQUFLLENBQUMsNkJBQTZCLENBQUMsQ0FBQztZQUNoRSxNQUFNLFNBQVMsR0FBRyxDQUFDLE9BQU8sSUFBSSxPQUFPLENBQUMsTUFBTSxJQUFFLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxPQUFPLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLElBQUksQ0FBQztZQUVyRSwwQ0FBMEM7WUFDMUMsTUFBTSxVQUFVLEdBQUcsVUFBVSxDQUFDLEtBQUssQ0FBQyxtQ0FBbUMsQ0FBQyxDQUFDO1lBQ3pFLE1BQU0sSUFBSSxHQUFHLENBQUMsVUFBVSxJQUFJLFVBQVUsQ0FBQyxNQUFNLElBQUUsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLFVBQVUsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsSUFBSSxDQUFDO1lBRXpFLE1BQU0sVUFBVSxHQUFHLFVBQVUsQ0FBQyxLQUFLLENBQUMsNkJBQTZCLENBQUMsQ0FBQztZQUNuRSxJQUFJLE9BQU8sQ0FBQztZQUNaLElBQUcsVUFBVSxJQUFJLFVBQVUsQ0FBQyxNQUFNLElBQUUsQ0FBQztnQkFBRSxPQUFPLEdBQUcsZUFBZSxDQUFDLFVBQVUsQ0FBQyxDQUFDLENBQUMsRUFBRSxXQUFXLENBQUMsQ0FBQztZQUc3RixpQkFBaUI7WUFDakIsTUFBTSxRQUFRLEdBQUcsVUFBVSxDQUFDLEtBQUssQ0FBQyx5QkFBeUIsQ0FBQyxDQUFDO1lBQzdELE1BQU0sS0FBSyxHQUFHLENBQUMsUUFBUSxJQUFJLFFBQVEsQ0FBQyxNQUFNLElBQUUsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLFFBQVEsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsSUFBSSxDQUFDO1lBR3BFLG9DQUFvQztZQUNwQyxNQUFNLGFBQWEsR0FBRyxVQUFVLENBQUMsS0FBSyxDQUFDLG1DQUFtQyxDQUFDLENBQUM7WUFDNUUsTUFBTSxVQUFVLEdBQUcsQ0FBQyxhQUFhLElBQUksYUFBYSxDQUFDLE1BQU0sSUFBRSxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsYUFBYSxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxJQUFJLENBQUM7WUFFeEYsTUFBTSxPQUFPLEdBQUcsVUFBVSxDQUFDLEtBQUssQ0FBQyx1QkFBdUIsQ0FBQyxDQUFDO1lBQzFELE1BQU0sSUFBSSxHQUFHLENBQUMsT0FBTyxJQUFJLE9BQU8sQ0FBQyxNQUFNLElBQUUsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLE9BQU8sQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsSUFBSSxDQUFDO1lBRWhFLElBQUksY0FBYyxDQUFDO1lBQ25CLElBQUksSUFBSSxJQUFJLFVBQVU7Z0JBQ3RCLGNBQWMsbUNBQ1QsQ0FBQyxJQUFJLElBQUksRUFBQyxJQUFJLEVBQUMsQ0FBQyxHQUNoQixDQUFDLFVBQVUsSUFBSSxFQUFDLFVBQVUsRUFBQyxDQUFDLENBQ2hDLENBQUM7WUFFRixNQUFNLFVBQVUsR0FBRyxJQUFJLDBCQUFVLENBQUMsU0FBUyxFQUFFLFNBQVMsRUFBRSxJQUFJLEVBQUUsU0FBUyxFQUFFLGNBQWMsRUFBRSxTQUFTLENBQUMsQ0FBQyxRQUFRLEVBQUUsQ0FBQztZQUMvRyxPQUFPLENBQUMsS0FBSyxDQUFDLElBQUksQ0FBQyxFQUFDLElBQUksRUFBRSxVQUFVLEVBQUUsV0FBVyxFQUFFLE9BQU8sRUFBRSxLQUFLLEVBQUUsS0FBSyxFQUFDLENBQUMsQ0FBQztRQUU3RSxDQUFDLENBQUMsQ0FBQztLQUNKO0lBRUQseUJBQXlCO0lBQ3pCLE1BQU0sb0JBQW9CLEdBQUcsZ0JBQWdCLENBQUMsT0FBTyxDQUFDLENBQUM7SUFDdkQsT0FBTyxPQUFPLENBQUMsT0FBTyxDQUFDLG9CQUFvQixDQUFDLENBQUM7QUFDakQsQ0FBQztBQXBERCw4QkFvREM7QUFFRCxTQUFTLGdCQUFnQixDQUFDLE9BQXlCO0lBQ2pELE1BQU0sR0FBRyxHQUFHLEVBQUUsQ0FBQztJQUNmLEtBQUssSUFBSSxHQUFHLElBQUksT0FBTyxDQUFDLEtBQUssRUFBRTtRQUM3QixHQUFHLENBQUMsR0FBRyxDQUFDLElBQUksQ0FBQyxHQUFHLEdBQUcsQ0FBQTtLQUNwQjtJQUNELE9BQU8sQ0FBQyxLQUFLLEdBQUcsTUFBTSxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQUMsQ0FBQztJQUNuQyxPQUFPLE9BQU8sQ0FBQTtBQUNoQixDQUFDO0FBRUQsU0FBUyxlQUFlLENBQUMsa0JBQTBCLEVBQUUsWUFBb0I7SUFDdkUsK0RBQStEO0lBQy9ELElBQUksT0FBTyxHQUFHLEVBQUUsQ0FBQztJQUNqQixJQUFHLGtCQUFrQixFQUFFO1FBQ3JCLElBQUcscUJBQXFCLENBQUMsSUFBSSxDQUFDLGtCQUFrQixDQUFDLEVBQUU7WUFDakQsT0FBTyxHQUFHLHdCQUF3QixDQUFDLFlBQVksRUFBRSxDQUFDLFNBQVMsRUFBRSxTQUFTLENBQUMsQ0FBQyxDQUFDO1NBQzFFO2FBQU0sSUFBRyxTQUFTLENBQUMsSUFBSSxDQUFDLGtCQUFrQixDQUFDLEVBQUU7WUFDNUMsTUFBTSxRQUFRLEdBQUcsa0JBQWtCLENBQUMsS0FBSyxDQUFDLFdBQVcsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDO1lBQzFELE1BQU0sTUFBTSxHQUFHLFlBQVksQ0FBQyxLQUFLLENBQUMsSUFBSSxNQUFNLENBQUMsSUFBSSxRQUFRLGNBQWMsUUFBUSxHQUFHLENBQUMsQ0FBQyxDQUFDO1lBQ3JGLElBQUksTUFBTSxJQUFJLE1BQU0sQ0FBQyxNQUFNLEdBQUMsQ0FBQztnQkFBRSxPQUFPLEdBQUcsTUFBTSxDQUFDLENBQUMsQ0FBQyxDQUFDO1NBQ3BEO2FBQU07WUFDTCxPQUFPLEdBQUcsa0JBQWtCLENBQUMsUUFBUSxFQUFFLENBQUM7U0FDekM7S0FDRjtJQUNELE9BQU8sT0FBTyxDQUFDO0FBQ2pCLENBQUM7QUFHRCxTQUFTLGtCQUFrQixDQUFDLElBQVk7SUFDdEMsTUFBTSxNQUFNLEdBQUcsSUFBSSxDQUFDLEtBQUssQ0FBQyxtQkFBbUIsQ0FBQyxDQUFDO0lBQy9DLElBQUksTUFBTTtRQUFFLE9BQU8sTUFBTSxDQUFDLENBQUMsQ0FBQyxDQUFDLElBQUksRUFBRSxDQUFDO0lBQ3BDLE9BQU8sRUFBRSxDQUFDO0FBQ1osQ0FBQztBQUVELFNBQVMsZ0JBQWdCLENBQUMsSUFBWTtJQUNwQyxNQUFNLE1BQU0sR0FBRyxJQUFJLENBQUMsS0FBSyxDQUFDLG9CQUFvQixDQUFDLENBQUM7SUFDaEQsSUFBSSxNQUFNO1FBQUUsT0FBTyxNQUFNLENBQUMsQ0FBQyxDQUFDLENBQUMsSUFBSSxFQUFFLENBQUM7SUFDcEMsT0FBTyxFQUFFLENBQUM7QUFDWixDQUFDO0FBRUQsU0FBUyxXQUFXLENBQUMsSUFBWTtJQUMvQixNQUFNLE1BQU0sR0FBRyxnQkFBZ0IsQ0FBQyxJQUFJLENBQUMsQ0FBQztJQUN0QyxJQUFJLE1BQU0sS0FBSyxFQUFFO1FBQUUsT0FBTyxLQUFLLE1BQU0sR0FBRyxDQUFBO0lBQ3hDLE9BQU8sRUFBRSxDQUFDO0FBQ1osQ0FBQztBQUVELFNBQVMsYUFBYSxDQUFDLElBQVk7SUFDakMsTUFBTSxNQUFNLEdBQUcsa0JBQWtCLENBQUMsSUFBSSxDQUFDLENBQUM7SUFDeEMsSUFBSSxNQUFNLEtBQUssRUFBRTtRQUFFLE9BQU8sSUFBSSxNQUFNLEdBQUcsQ0FBQTtJQUN2QyxPQUFPLEVBQUUsQ0FBQztBQUNaLENBQUM7QUFFRCxTQUFTLGFBQWEsQ0FBQyxPQUFlLEVBQUUsUUFBZTtJQUNyRCxPQUFPLGtCQUFrQixDQUFDLE9BQU8sQ0FBQyxLQUFLLGdCQUFnQixDQUFDLFFBQVEsQ0FBQyxDQUFDO0FBQ3BFLENBQUM7QUFFRCxTQUFTLG1CQUFtQixDQUFDLElBQVk7SUFDdkMsT0FBTyxrQkFBa0IsQ0FBQyxJQUFJLENBQUMsS0FBSyxnQkFBZ0IsQ0FBQyxJQUFJLENBQUMsQ0FBQztBQUM3RCxDQUFDO0FBR0QsU0FBUywyQkFBMkIsQ0FBQyxLQUFvQixFQUFFLFlBQW9CO0lBQzdFLElBQUksQ0FBQyxHQUFHLENBQUMsQ0FBQztJQUNWLEtBQUssTUFBTSxJQUFJLElBQUksS0FBSyxFQUFFO1FBQ3RCLElBQUssZ0JBQWdCLENBQUMsSUFBSSxDQUFDLEtBQUssWUFBWTtZQUFFLE1BQU07UUFDcEQsQ0FBQyxJQUFJLENBQUMsQ0FBQztLQUNWO0lBQ0QsT0FBTyxDQUFDLENBQUM7QUFDWCxDQUFDO0FBRUQsU0FBUyxlQUFlLENBQUMsS0FBb0I7SUFDM0MsS0FBSyxJQUFJLENBQUMsR0FBQyxDQUFDLEVBQUUsQ0FBQyxHQUFDLEtBQUssQ0FBQyxNQUFNLEVBQUUsQ0FBQyxJQUFFLENBQUMsRUFBRTtRQUNoQyxJQUFJLGVBQWUsR0FBRyxNQUFNLENBQUMsSUFBSSxDQUFDLEtBQUssQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDO1FBQzVDLElBQUksY0FBYyxHQUFHLEtBQUssQ0FBQyxJQUFJLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUM7UUFFMUMsSUFBRyxlQUFlLElBQUksY0FBYztZQUNoQyxLQUFLLENBQUMsQ0FBQyxDQUFDLEdBQUcsS0FBSyxDQUFDLENBQUMsQ0FBQyxDQUFDLE9BQU8sQ0FBQyxXQUFXLEVBQUUsRUFBRSxDQUFDLENBQUM7YUFDNUMsSUFBSSxlQUFlLEVBQUM7WUFDckIsT0FBTSxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FBQyxDQUFDLElBQUksQ0FBQyxHQUFDLEtBQUssQ0FBQyxNQUFNLEVBQUU7Z0JBQzNDLEtBQUssQ0FBQyxDQUFDLENBQUMsR0FBRyxFQUFFLENBQUM7Z0JBQ2QsQ0FBQyxJQUFJLENBQUMsQ0FBQzthQUNWO1lBQ0QsS0FBSyxDQUFDLENBQUMsQ0FBQyxHQUFHLEtBQUssQ0FBQyxDQUFDLENBQUMsQ0FBQyxPQUFPLENBQUMsT0FBTyxFQUFFLEVBQUUsQ0FBQyxDQUFDO1NBQzVDO0tBRUo7SUFDRCxPQUFPLEtBQUssQ0FBQztBQUNmLENBQUM7QUFHRCxTQUFTLHdCQUF3QixDQUFDLFlBQW9CLEVBQUUsUUFBdUI7SUFDN0UsSUFBSSxLQUFLLEdBQUcsWUFBWSxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsQ0FBQztJQUNyQyxNQUFNLEtBQUssR0FBa0IsRUFBRSxDQUFDO0lBRWhDLElBQUksYUFBYSxHQUFHLENBQUMsQ0FBQztJQUN0QixJQUFJLFlBQVksR0FBRyxFQUFFLENBQUM7SUFDdEIsSUFBSSxVQUFVLEdBQUcsRUFBRSxDQUFDO0lBQ3BCLElBQUksT0FBTyxHQUFHLEVBQUUsQ0FBQztJQUVqQixpQ0FBaUM7SUFDakMsS0FBSyxHQUFHLGVBQWUsQ0FBQyxLQUFLLENBQUMsQ0FBQztJQUUvQixLQUFLLElBQUksQ0FBQyxHQUFDLENBQUMsRUFBRSxDQUFDLEdBQUMsS0FBSyxDQUFDLE1BQU0sRUFBRSxDQUFDLElBQUUsQ0FBQyxFQUFFO1FBQ2xDLElBQUksSUFBSSxHQUFHLEtBQUssQ0FBQyxDQUFDLENBQUMsQ0FBQyxJQUFJLEVBQUUsQ0FBQztRQUMzQixJQUFHLElBQUksS0FBSyxFQUFFO1lBQUUsU0FBUztRQUV6QixZQUFZLEdBQUcsa0JBQWtCLENBQUMsSUFBSSxDQUFDLENBQUM7UUFDeEMsVUFBVSxHQUFHLGdCQUFnQixDQUFDLElBQUksQ0FBQyxDQUFDO1FBRXBDLG1FQUFtRTtRQUNuRSxJQUFHLFFBQVEsQ0FBQyxhQUFhLENBQUMsS0FBSyxZQUFZLElBQUksbUJBQW1CLENBQUMsSUFBSSxDQUFDO1lBQUUsU0FBUztRQUVuRiw0REFBNEQ7UUFDNUQsd0NBQXdDO1FBQ3hDLElBQUksUUFBUSxDQUFDLGFBQWEsQ0FBQyxLQUFLLFlBQVksRUFBRTtZQUMzQyxDQUFDLElBQUksQ0FBQyxDQUFDO1lBQ1AsT0FBTyxDQUFDLEdBQUMsS0FBSyxDQUFDLE1BQU0sSUFBSSxDQUFDLGFBQWEsQ0FBQyxJQUFJLEVBQUUsS0FBSyxDQUFDLENBQUMsQ0FBQyxDQUFDO2dCQUFFLENBQUMsSUFBRSxDQUFDLENBQUM7WUFDOUQsU0FBUztTQUNYO1FBRUQsNEVBQTRFO1FBQzVFLGFBQWEsSUFBSSxDQUFDLENBQUM7UUFDbkIsS0FBSyxDQUFDLElBQUksQ0FBQyxZQUFZLENBQUMsQ0FBQztRQUV6QixpQkFBaUI7UUFDakIsSUFBRyxRQUFRLENBQUMsTUFBTSxLQUFLLEtBQUssQ0FBQyxNQUFNLEVBQUU7WUFDbkMsMkJBQTJCO1lBQzNCLElBQUksbUJBQW1CLENBQUMsSUFBSSxDQUFDLEVBQUU7Z0JBQzNCLElBQUksR0FBRyxJQUFJLENBQUMsT0FBTyxDQUFDLFdBQVcsQ0FBQyxJQUFJLENBQUMsRUFBRSxFQUFFLENBQUMsQ0FBQztnQkFDM0MsSUFBSSxHQUFHLElBQUksQ0FBQyxPQUFPLENBQUMsYUFBYSxDQUFDLElBQUksQ0FBQyxFQUFFLEVBQUUsQ0FBQyxDQUFDO2dCQUM3QyxPQUFPLElBQUksQ0FBQzthQUNmO1lBRUMsa0VBQWtFO1lBQ2xFLENBQUMsSUFBSSxDQUFDLENBQUM7WUFDUCxPQUFPLENBQUMsR0FBQyxLQUFLLENBQUMsTUFBTSxJQUFJLENBQUMsYUFBYSxDQUFDLElBQUksRUFBRSxLQUFLLENBQUMsQ0FBQyxDQUFDLENBQUMsRUFBRztnQkFDeEQsT0FBTyxJQUFJLEtBQUssQ0FBQyxDQUFDLENBQUMsQ0FBQyxJQUFJLEVBQUUsQ0FBQztnQkFDM0IsQ0FBQyxJQUFJLENBQUMsQ0FBQzthQUNSO1lBQ0QsT0FBTyxPQUFPLENBQUM7U0FDbEI7UUFDRCxZQUFZLEdBQUMsRUFBRSxDQUFDO1FBQ2hCLFVBQVUsR0FBQyxFQUFFLENBQUM7S0FDZjtJQUNELE9BQU8sRUFBRSxDQUFDO0FBQ1osQ0FBQyJ9
@@ -0,0 +1,13 @@
1
+ import { ILocalDependency } from "../DependencyTypes";
2
+ export declare function packageParser(fileContent: string, filePath: string): Promise<ILocalDependency>;
3
+ export declare function packagelockParser(fileContent: string, filePath: string): Promise<ILocalDependency>;
4
+ export declare function yarnLockParser(fileContent: string, filePath: string): Promise<ILocalDependency>;
5
+ declare enum YarnLockVersionEnum {
6
+ "V1" = 0,
7
+ "V2" = 1,
8
+ UnknownYarnLockFormat = 2
9
+ }
10
+ export declare function yarnLockRecognizeVersion(fileContent: string): YarnLockVersionEnum;
11
+ export declare function yarnLockV1Parser(fileContent: string, filePath: string): Promise<ILocalDependency>;
12
+ export declare function yarnLockV2Parser(fileContent: string, filePath: string): Promise<ILocalDependency>;
13
+ export {};
@@ -0,0 +1,187 @@
1
+ var __importDefault = (this && this.__importDefault) || function (mod) {
2
+ return (mod && mod.__esModule) ? mod : { "default": mod };
3
+ };
4
+ Object.defineProperty(exports, "__esModule", { value: true });
5
+ exports.yarnLockV2Parser = exports.yarnLockV1Parser = exports.yarnLockRecognizeVersion = exports.yarnLockParser = exports.packagelockParser = exports.packageParser = void 0;
6
+ const path_1 = __importDefault(require("path"));
7
+ const packageurl_js_1 = require("packageurl-js");
8
+ const PURL_TYPE = 'npm';
9
+ // Parse a package.json file from node projects
10
+ // See reference on: https://docs.npmjs.com/cli/v8/configuring-npm/package-json
11
+ const MANIFEST_FILE = 'package.json';
12
+ function packageParser(fileContent, filePath) {
13
+ // If the file is not manifest file, return an empty results
14
+ const results = { file: filePath, purls: [] };
15
+ if (path_1.default.basename(filePath) != MANIFEST_FILE)
16
+ return Promise.resolve(results);
17
+ const o = JSON.parse(fileContent);
18
+ let devDeps = Object.keys(o.devDependencies || {});
19
+ let deps = Object.keys(o.dependencies || {});
20
+ for (const name of deps) {
21
+ const purlString = new packageurl_js_1.PackageURL(PURL_TYPE, undefined, name, undefined, undefined, undefined).toString();
22
+ results.purls.push({ purl: purlString, scope: "dependencies", requirement: o.dependencies[name] });
23
+ }
24
+ for (const name of devDeps) {
25
+ const purlString = new packageurl_js_1.PackageURL(PURL_TYPE, undefined, name, undefined, undefined, undefined).toString();
26
+ results.purls.push({ purl: purlString, scope: "devDependencies", requirement: o.devDependencies[name] });
27
+ }
28
+ return Promise.resolve(results);
29
+ }
30
+ exports.packageParser = packageParser;
31
+ // Parse a package-lock.json file from node projects
32
+ // See reference on: https://docs.npmjs.com/cli/v8/configuring-npm/package-json
33
+ function packagelockParser(fileContent, filePath) {
34
+ var _a;
35
+ const results = { file: filePath, purls: [] };
36
+ if (path_1.default.basename(filePath) != 'package-lock.json')
37
+ return Promise.resolve(results);
38
+ const packages = (_a = JSON.parse(fileContent)) === null || _a === void 0 ? void 0 : _a.packages;
39
+ if (!packages)
40
+ return Promise.resolve(results);
41
+ for (const [key, value] of Object.entries(packages)) {
42
+ if (!key)
43
+ continue;
44
+ const keySplit = key.split("/");
45
+ const depName = keySplit[keySplit.length - 1];
46
+ let purl = new packageurl_js_1.PackageURL(PURL_TYPE, undefined, depName, undefined, undefined, undefined).toString();
47
+ let req = value['version'];
48
+ results.purls.push({ purl: purl, requirement: req });
49
+ }
50
+ return Promise.resolve(results);
51
+ }
52
+ exports.packagelockParser = packagelockParser;
53
+ function yarnLockParser(fileContent, filePath) {
54
+ const results = { file: filePath, purls: [] };
55
+ if (path_1.default.basename(filePath) != 'yarn.lock')
56
+ return Promise.resolve(results);
57
+ const yarnVersion = yarnLockRecognizeVersion(fileContent);
58
+ if (yarnVersion === YarnLockVersionEnum.V1)
59
+ return yarnLockV1Parser(fileContent, filePath);
60
+ else if (yarnVersion === YarnLockVersionEnum.V2)
61
+ return yarnLockV2Parser(fileContent, filePath);
62
+ return Promise.resolve(results);
63
+ }
64
+ exports.yarnLockParser = yarnLockParser;
65
+ var YarnLockVersionEnum;
66
+ (function (YarnLockVersionEnum) {
67
+ YarnLockVersionEnum[YarnLockVersionEnum["V1"] = 0] = "V1";
68
+ YarnLockVersionEnum[YarnLockVersionEnum["V2"] = 1] = "V2";
69
+ YarnLockVersionEnum[YarnLockVersionEnum["UnknownYarnLockFormat"] = 2] = "UnknownYarnLockFormat";
70
+ })(YarnLockVersionEnum || (YarnLockVersionEnum = {}));
71
+ /*
72
+ The start of v1 file has this:
73
+ # THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
74
+ # yarn lockfile v1
75
+
76
+ The start of v2 file has this:
77
+ # This file is generated by running "yarn install" inside your project.
78
+ # Manual changes might be lost - proceed with caution!
79
+
80
+ __metadata:
81
+ */
82
+ function yarnLockRecognizeVersion(fileContent) {
83
+ const yarn = fileContent.split("\n", 10); //Check only the first 10 lines;
84
+ for (const line of yarn) {
85
+ if (line.includes('__metadata:'))
86
+ return YarnLockVersionEnum.V2;
87
+ if (line.includes('yarn lockfile v1'))
88
+ return YarnLockVersionEnum.V1;
89
+ }
90
+ return YarnLockVersionEnum.UnknownYarnLockFormat;
91
+ }
92
+ exports.yarnLockRecognizeVersion = yarnLockRecognizeVersion;
93
+ function yarnLockV1Parser(fileContent, filePath) {
94
+ const results = { file: filePath, purls: [] };
95
+ //Yield an array with each element is a dependency
96
+ /*
97
+ "@babel/core@^7.1.0", "@babel/core@^7.3.4":
98
+ version "7.3.4"
99
+ resolved "https://registry.yarnpkg.com/@babel/core/-/core-7.3.4.tgz#921a5a13746c21e32445bf0798680e9d11a6530b"
100
+ integrity sha512-jRsuseXBo9pN197KnDwhhaaBzyZr2oIcLHHTt2oDdQrej5Qp57dCCJafWx5ivU8/alEYDpssYqv1MUqcxwQlrA==
101
+ dependencies:
102
+ "@babel/code-frame" "^7.0.0"
103
+ "@babel/generator" "^7.3.4"
104
+ */
105
+ const yl_dependencies = fileContent.split("\n\n");
106
+ for (const yl_dependency of yl_dependencies) {
107
+ const dependencyData = {};
108
+ const topRequirements = [];
109
+ const dep_lines = yl_dependency.split("\n");
110
+ if (dep_lines.every((line) => line.trim().startsWith("#") == true))
111
+ continue; //All lines are coments
112
+ if (dep_lines.every((line) => line.trim() == ""))
113
+ continue; //All lines are empty lines
114
+ for (const dep_line of dep_lines) {
115
+ // Clean comments and empty lines
116
+ const trimmed = dep_line.trim();
117
+ const comment = trimmed.startsWith('#');
118
+ if (!trimmed || comment)
119
+ continue;
120
+ // Do nothing with it's own dependencies
121
+ // "@babel/code-frame" "^7.0.0"
122
+ // "@babel/generator" "^7.3.4"
123
+ if (dep_line.startsWith(' '.repeat(4))) { }
124
+ // version "7.3.4"
125
+ // resolved "https://registry.yarnpkg.com/@babel/core/-/core-7.3.4.tgz#921a5a13746c21e32445bf0798680e9d11a6530b"
126
+ // integrity sha512-jRsuseXBo9pN197KnDwhhaaBzyZr2oIcLHHTt2oDdQrej5Qp57dCCJafWx5ivU8/alEYDpssYqv1MUqcxwQlrA==
127
+ // dependencies:
128
+ else if (dep_line.startsWith(' '.repeat(2))) {
129
+ const dep = trimmed.split(" ");
130
+ const key = dep[0].trim();
131
+ if (key !== "dependencies:" && key !== "optionalDependencies:") {
132
+ dependencyData[key] = dep[1].replace(/\"|\'/g, "");
133
+ }
134
+ }
135
+ // the first line of a dependency has the name and requirements
136
+ //"@babel/core@^7.1.0", "@babel/core@^7.3.4":
137
+ else if (!dep_line.startsWith(' ')) {
138
+ const dep = dep_line.replace(/:/g, "").split(",");
139
+ const requirements = dep.map(line => line.trim().replace(/"|'/g, ""));
140
+ for (const req of requirements) {
141
+ const atIndex = req.lastIndexOf("@");
142
+ let constraint = req.slice(atIndex + 1); // gets ^7.1.0
143
+ constraint = constraint.replace(/"|'/g, "");
144
+ const ns_name = req.slice(0, atIndex);
145
+ let ns = '';
146
+ let name = ns_name;
147
+ if (ns_name.includes("/")) {
148
+ const slashIndex = req.lastIndexOf("/");
149
+ ns = ns_name.slice(0, slashIndex);
150
+ name = ns_name.slice(slashIndex + 1);
151
+ }
152
+ topRequirements.push({ constraint: constraint, ns: ns, name: name });
153
+ }
154
+ }
155
+ }
156
+ //Make sure that name and namespace are equal for the same dependency
157
+ const isNsNameEqual = topRequirements.every((topRequirement) => {
158
+ return topRequirement.ns === topRequirements[0].ns && topRequirement.name === topRequirements[0].name;
159
+ });
160
+ if (!isNsNameEqual) {
161
+ console.error("Different names for same dependency is not supported");
162
+ continue;
163
+ }
164
+ const topRequirement = topRequirements[0];
165
+ const namespace = topRequirement.ns;
166
+ const name = topRequirement.name;
167
+ const version = dependencyData['version'];
168
+ const purl = new packageurl_js_1.PackageURL(PURL_TYPE, namespace, name, version, undefined, undefined).toString();
169
+ let requirement = '';
170
+ for (const topRequirement of topRequirements) {
171
+ requirement += topRequirement.constraint + ", ";
172
+ }
173
+ if (requirement.endsWith(", ")) {
174
+ requirement = requirement.slice(0, requirement.length - 2);
175
+ }
176
+ results.purls.push({ purl: purl, requirement: requirement });
177
+ }
178
+ return Promise.resolve(results);
179
+ }
180
+ exports.yarnLockV1Parser = yarnLockV1Parser;
181
+ //TODO: Implement yarn lock V2 parser
182
+ function yarnLockV2Parser(fileContent, filePath) {
183
+ const results = { file: filePath, purls: [] };
184
+ return Promise.resolve(results);
185
+ }
186
+ exports.yarnLockV2Parser = yarnLockV2Parser;
187
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibnBtUGFyc2VyLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vLi4vLi4vLi4vc3JjL3Nkay9EZXBlbmRlbmNpZXMvTG9jYWxEZXBlbmRlbmN5L3BhcnNlcnMvbnBtUGFyc2VyLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7O0FBQUEsZ0RBQXdCO0FBQ3hCLGlEQUEyQztBQUczQyxNQUFNLFNBQVMsR0FBRyxLQUFLLENBQUM7QUFHeEIsK0NBQStDO0FBQy9DLCtFQUErRTtBQUMvRSxNQUFNLGFBQWEsR0FBRyxjQUFjLENBQUM7QUFDckMsU0FBZ0IsYUFBYSxDQUFDLFdBQW1CLEVBQUUsUUFBZ0I7SUFDL0QsNERBQTREO0lBQzVELE1BQU0sT0FBTyxHQUFxQixFQUFDLElBQUksRUFBRSxRQUFRLEVBQUUsS0FBSyxFQUFFLEVBQUUsRUFBQyxDQUFDO0lBQzlELElBQUcsY0FBSSxDQUFDLFFBQVEsQ0FBQyxRQUFRLENBQUMsSUFBSSxhQUFhO1FBQ3pDLE9BQU8sT0FBTyxDQUFDLE9BQU8sQ0FBQyxPQUFPLENBQUMsQ0FBQztJQUVsQyxNQUFNLENBQUMsR0FBRyxJQUFJLENBQUMsS0FBSyxDQUFDLFdBQVcsQ0FBQyxDQUFDO0lBQ2xDLElBQUksT0FBTyxHQUFHLE1BQU0sQ0FBQyxJQUFJLENBQUMsQ0FBQyxDQUFDLGVBQWUsSUFBSSxFQUFFLENBQUMsQ0FBQztJQUNuRCxJQUFJLElBQUksR0FBRyxNQUFNLENBQUMsSUFBSSxDQUFDLENBQUMsQ0FBQyxZQUFZLElBQUksRUFBRSxDQUFDLENBQUM7SUFFN0MsS0FBSSxNQUFNLElBQUksSUFBSSxJQUFJLEVBQUM7UUFDbkIsTUFBTSxVQUFVLEdBQUcsSUFBSSwwQkFBVSxDQUFDLFNBQVMsRUFBRSxTQUFTLEVBQUUsSUFBSSxFQUFFLFNBQVMsRUFBRSxTQUFTLEVBQUUsU0FBUyxDQUFDLENBQUMsUUFBUSxFQUFFLENBQUM7UUFDMUcsT0FBTyxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsRUFBQyxJQUFJLEVBQUUsVUFBVSxFQUFFLEtBQUssRUFBRSxjQUFjLEVBQUUsV0FBVyxFQUFFLENBQUMsQ0FBQyxZQUFZLENBQUMsSUFBSSxDQUFDLEVBQUMsQ0FBQyxDQUFDO0tBQ3BHO0lBRUQsS0FBSSxNQUFNLElBQUksSUFBSSxPQUFPLEVBQUM7UUFDeEIsTUFBTSxVQUFVLEdBQUcsSUFBSSwwQkFBVSxDQUFDLFNBQVMsRUFBRSxTQUFTLEVBQUUsSUFBSSxFQUFFLFNBQVMsRUFBRSxTQUFTLEVBQUUsU0FBUyxDQUFDLENBQUMsUUFBUSxFQUFFLENBQUM7UUFDMUcsT0FBTyxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsRUFBQyxJQUFJLEVBQUUsVUFBVSxFQUFFLEtBQUssRUFBRSxpQkFBaUIsRUFBRSxXQUFXLEVBQUUsQ0FBQyxDQUFDLGVBQWUsQ0FBQyxJQUFJLENBQUMsRUFBQyxDQUFDLENBQUM7S0FDeEc7SUFFRCxPQUFPLE9BQU8sQ0FBQyxPQUFPLENBQUMsT0FBTyxDQUFDLENBQUM7QUFDcEMsQ0FBQztBQXJCRCxzQ0FxQkM7QUFHRCxvREFBb0Q7QUFDcEQsK0VBQStFO0FBQy9FLFNBQWdCLGlCQUFpQixDQUFDLFdBQW1CLEVBQUUsUUFBZ0I7O0lBRW5FLE1BQU0sT0FBTyxHQUFxQixFQUFDLElBQUksRUFBRSxRQUFRLEVBQUUsS0FBSyxFQUFFLEVBQUUsRUFBQyxDQUFDO0lBRTlELElBQUcsY0FBSSxDQUFDLFFBQVEsQ0FBQyxRQUFRLENBQUMsSUFBSSxtQkFBbUI7UUFDL0MsT0FBTyxPQUFPLENBQUMsT0FBTyxDQUFDLE9BQU8sQ0FBQyxDQUFDO0lBRWxDLE1BQU0sUUFBUSxTQUFHLElBQUksQ0FBQyxLQUFLLENBQUMsV0FBVyxDQUFDLDBDQUFFLFFBQVEsQ0FBQztJQUVuRCxJQUFHLENBQUMsUUFBUTtRQUFFLE9BQU8sT0FBTyxDQUFDLE9BQU8sQ0FBQyxPQUFPLENBQUMsQ0FBQztJQUU5QyxLQUFLLE1BQU0sQ0FBQyxHQUFHLEVBQUUsS0FBSyxDQUFDLElBQUksTUFBTSxDQUFDLE9BQU8sQ0FBQyxRQUFRLENBQUMsRUFBRTtRQUNqRCxJQUFHLENBQUMsR0FBRztZQUFFLFNBQVM7UUFFbEIsTUFBTSxRQUFRLEdBQUcsR0FBRyxDQUFDLEtBQUssQ0FBQyxHQUFHLENBQUMsQ0FBQTtRQUMvQixNQUFNLE9BQU8sR0FBRyxRQUFRLENBQUMsUUFBUSxDQUFDLE1BQU0sR0FBQyxDQUFDLENBQUMsQ0FBQTtRQUUzQyxJQUFJLElBQUksR0FBRyxJQUFJLDBCQUFVLENBQUMsU0FBUyxFQUFFLFNBQVMsRUFBRSxPQUFPLEVBQUMsU0FBUyxFQUFFLFNBQVMsRUFBRSxTQUFTLENBQUMsQ0FBQyxRQUFRLEVBQUUsQ0FBQztRQUNwRyxJQUFJLEdBQUcsR0FBRyxLQUFLLENBQUMsU0FBUyxDQUFDLENBQUM7UUFDM0IsT0FBTyxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsRUFBQyxJQUFJLEVBQUUsSUFBSSxFQUFFLFdBQVcsRUFBRSxHQUFHLEVBQUMsQ0FBQyxDQUFDO0tBQ3REO0lBRUQsT0FBTyxPQUFPLENBQUMsT0FBTyxDQUFDLE9BQU8sQ0FBQyxDQUFDO0FBQ3BDLENBQUM7QUF2QkQsOENBdUJDO0FBSUQsU0FBZ0IsY0FBYyxDQUFDLFdBQW1CLEVBQUUsUUFBZ0I7SUFDbEUsTUFBTSxPQUFPLEdBQXFCLEVBQUMsSUFBSSxFQUFFLFFBQVEsRUFBRSxLQUFLLEVBQUUsRUFBRSxFQUFDLENBQUM7SUFFOUQsSUFBRyxjQUFJLENBQUMsUUFBUSxDQUFDLFFBQVEsQ0FBQyxJQUFJLFdBQVc7UUFDdkMsT0FBTyxPQUFPLENBQUMsT0FBTyxDQUFDLE9BQU8sQ0FBQyxDQUFDO0lBRWxDLE1BQU0sV0FBVyxHQUFHLHdCQUF3QixDQUFDLFdBQVcsQ0FBQyxDQUFBO0lBQ3pELElBQUksV0FBVyxLQUFLLG1CQUFtQixDQUFDLEVBQUU7UUFBRSxPQUFPLGdCQUFnQixDQUFDLFdBQVcsRUFBRSxRQUFRLENBQUMsQ0FBQTtTQUNyRixJQUFJLFdBQVcsS0FBSyxtQkFBbUIsQ0FBQyxFQUFFO1FBQUUsT0FBTyxnQkFBZ0IsQ0FBQyxXQUFXLEVBQUUsUUFBUSxDQUFDLENBQUE7SUFFL0YsT0FBTyxPQUFPLENBQUMsT0FBTyxDQUFDLE9BQU8sQ0FBQyxDQUFDO0FBQ2xDLENBQUM7QUFYRCx3Q0FXQztBQUVELElBQUssbUJBSUo7QUFKRCxXQUFLLG1CQUFtQjtJQUN0Qix5REFBSSxDQUFBO0lBQ0oseURBQUksQ0FBQTtJQUNKLCtGQUFxQixDQUFBO0FBQ3ZCLENBQUMsRUFKSSxtQkFBbUIsS0FBbkIsbUJBQW1CLFFBSXZCO0FBRUQ7Ozs7Ozs7Ozs7R0FVRztBQUNILFNBQWdCLHdCQUF3QixDQUFDLFdBQW1CO0lBRTFELE1BQU0sSUFBSSxHQUFHLFdBQVcsQ0FBQyxLQUFLLENBQUMsSUFBSSxFQUFFLEVBQUUsQ0FBQyxDQUFBLENBQUMsZ0NBQWdDO0lBQ3pFLEtBQUssTUFBTSxJQUFJLElBQUksSUFBSSxFQUFFO1FBQ3ZCLElBQUssSUFBSSxDQUFDLFFBQVEsQ0FBQyxhQUFhLENBQUM7WUFBRyxPQUFPLG1CQUFtQixDQUFDLEVBQUUsQ0FBQTtRQUNqRSxJQUFLLElBQUksQ0FBQyxRQUFRLENBQUMsa0JBQWtCLENBQUM7WUFBRyxPQUFPLG1CQUFtQixDQUFDLEVBQUUsQ0FBQTtLQUN2RTtJQUNELE9BQU8sbUJBQW1CLENBQUMscUJBQXFCLENBQUE7QUFDbEQsQ0FBQztBQVJELDREQVFDO0FBRUQsU0FBZ0IsZ0JBQWdCLENBQUMsV0FBbUIsRUFBRSxRQUFnQjtJQUVwRSxNQUFNLE9BQU8sR0FBcUIsRUFBQyxJQUFJLEVBQUUsUUFBUSxFQUFFLEtBQUssRUFBRSxFQUFFLEVBQUMsQ0FBQztJQUU5RCxrREFBa0Q7SUFDbEQ7Ozs7Ozs7O09BUUc7SUFDSCxNQUFNLGVBQWUsR0FBRyxXQUFXLENBQUMsS0FBSyxDQUFDLE1BQU0sQ0FBQyxDQUFDO0lBRWxELEtBQUssTUFBTSxhQUFhLElBQUksZUFBZSxFQUFFO1FBSTNDLE1BQU0sY0FBYyxHQUEyQixFQUFFLENBQUE7UUFDakQsTUFBTSxlQUFlLEdBQUcsRUFBRSxDQUFDO1FBRTNCLE1BQU0sU0FBUyxHQUFHLGFBQWEsQ0FBQyxLQUFLLENBQUMsSUFBSSxDQUFDLENBQUM7UUFDNUMsSUFBSSxTQUFTLENBQUMsS0FBSyxDQUFDLENBQUMsSUFBSSxFQUFFLEVBQUUsQ0FBRSxJQUFJLENBQUMsSUFBSSxFQUFFLENBQUMsVUFBVSxDQUFDLEdBQUcsQ0FBQyxJQUFJLElBQUksQ0FBQztZQUFFLFNBQVEsQ0FBQyx1QkFBdUI7UUFDckcsSUFBSSxTQUFTLENBQUMsS0FBSyxDQUFDLENBQUMsSUFBSSxFQUFFLEVBQUUsQ0FBRSxJQUFJLENBQUMsSUFBSSxFQUFFLElBQUksRUFBRSxDQUFDO1lBQUUsU0FBUSxDQUFFLDJCQUEyQjtRQUV4RixLQUFLLE1BQU0sUUFBUSxJQUFJLFNBQVMsRUFBRTtZQUVoQyxpQ0FBaUM7WUFDakMsTUFBTSxPQUFPLEdBQUcsUUFBUSxDQUFDLElBQUksRUFBRSxDQUFDO1lBQ2hDLE1BQU0sT0FBTyxHQUFHLE9BQU8sQ0FBQyxVQUFVLENBQUMsR0FBRyxDQUFDLENBQUM7WUFDeEMsSUFBSSxDQUFDLE9BQU8sSUFBSSxPQUFPO2dCQUFFLFNBQVE7WUFFakMsd0NBQXdDO1lBQ3hDLGtDQUFrQztZQUNsQyxpQ0FBaUM7WUFDakMsSUFBSSxRQUFRLENBQUMsVUFBVSxDQUFDLEdBQUcsQ0FBQyxNQUFNLENBQUMsQ0FBQyxDQUFDLENBQUMsRUFBRSxHQUFFO1lBRTFDLG1CQUFtQjtZQUNuQixpSEFBaUg7WUFDakgsNkdBQTZHO1lBQzdHLGlCQUFpQjtpQkFDWixJQUFJLFFBQVEsQ0FBQyxVQUFVLENBQUMsR0FBRyxDQUFDLE1BQU0sQ0FBQyxDQUFDLENBQUMsQ0FBQyxFQUFFO2dCQUMzQyxNQUFNLEdBQUcsR0FBRyxPQUFPLENBQUMsS0FBSyxDQUFDLEdBQUcsQ0FBQyxDQUFBO2dCQUM5QixNQUFNLEdBQUcsR0FBRyxHQUFHLENBQUMsQ0FBQyxDQUFDLENBQUMsSUFBSSxFQUFFLENBQUM7Z0JBQzFCLElBQUksR0FBRyxLQUFLLGVBQWUsSUFBSSxHQUFHLEtBQUcsdUJBQXVCLEVBQUU7b0JBQzVELGNBQWMsQ0FBQyxHQUFHLENBQUMsR0FBRyxHQUFHLENBQUMsQ0FBQyxDQUFDLENBQUMsT0FBTyxDQUFDLFFBQVEsRUFBRSxFQUFFLENBQUMsQ0FBQztpQkFDcEQ7YUFDRjtZQUVELCtEQUErRDtZQUMvRCw2Q0FBNkM7aUJBQ3hDLElBQUksQ0FBQyxRQUFRLENBQUMsVUFBVSxDQUFDLEdBQUcsQ0FBQyxFQUFDO2dCQUNqQyxNQUFNLEdBQUcsR0FBRyxRQUFRLENBQUMsT0FBTyxDQUFDLElBQUksRUFBRSxFQUFFLENBQUMsQ0FBQyxLQUFLLENBQUMsR0FBRyxDQUFDLENBQUM7Z0JBQ2xELE1BQU0sWUFBWSxHQUFHLEdBQUcsQ0FBQyxHQUFHLENBQUMsSUFBSSxDQUFDLEVBQUUsQ0FBQyxJQUFJLENBQUMsSUFBSSxFQUFFLENBQUMsT0FBTyxDQUFDLE1BQU0sRUFBRSxFQUFFLENBQUMsQ0FBQyxDQUFDO2dCQUV0RSxLQUFLLE1BQU0sR0FBRyxJQUFJLFlBQVksRUFBRTtvQkFFOUIsTUFBTSxPQUFPLEdBQUcsR0FBRyxDQUFDLFdBQVcsQ0FBQyxHQUFHLENBQUMsQ0FBQTtvQkFFcEMsSUFBSSxVQUFVLEdBQUcsR0FBRyxDQUFDLEtBQUssQ0FBQyxPQUFPLEdBQUMsQ0FBQyxDQUFDLENBQUEsQ0FBRSxjQUFjO29CQUNyRCxVQUFVLEdBQUcsVUFBVSxDQUFDLE9BQU8sQ0FBQyxNQUFNLEVBQUUsRUFBRSxDQUFDLENBQUM7b0JBRTVDLE1BQU0sT0FBTyxHQUFHLEdBQUcsQ0FBQyxLQUFLLENBQUMsQ0FBQyxFQUFFLE9BQU8sQ0FBQyxDQUFBO29CQUVyQyxJQUFJLEVBQUUsR0FBRyxFQUFFLENBQUM7b0JBQ1osSUFBSSxJQUFJLEdBQUcsT0FBTyxDQUFDO29CQUNuQixJQUFJLE9BQU8sQ0FBQyxRQUFRLENBQUMsR0FBRyxDQUFDLEVBQUU7d0JBQ3pCLE1BQU0sVUFBVSxHQUFHLEdBQUcsQ0FBQyxXQUFXLENBQUMsR0FBRyxDQUFDLENBQUE7d0JBQ3ZDLEVBQUUsR0FBRyxPQUFPLENBQUMsS0FBSyxDQUFDLENBQUMsRUFBQyxVQUFVLENBQUMsQ0FBQzt3QkFDakMsSUFBSSxHQUFHLE9BQU8sQ0FBQyxLQUFLLENBQUMsVUFBVSxHQUFDLENBQUMsQ0FBQyxDQUFBO3FCQUNuQztvQkFFRCxlQUFlLENBQUMsSUFBSSxDQUFDLEVBQUMsVUFBVSxFQUFFLFVBQVUsRUFBRSxFQUFFLEVBQUUsRUFBRSxFQUFFLElBQUksRUFBRSxJQUFJLEVBQUUsQ0FBQyxDQUFDO2lCQUNyRTthQUVGO1NBR0Y7UUFFRCxxRUFBcUU7UUFDckUsTUFBTSxhQUFhLEdBQUcsZUFBZSxDQUFDLEtBQUssQ0FBQyxDQUFDLGNBQWMsRUFBRSxFQUFFO1lBQzdELE9BQU8sY0FBYyxDQUFDLEVBQUUsS0FBSyxlQUFlLENBQUMsQ0FBQyxDQUFDLENBQUMsRUFBRSxJQUFJLGNBQWMsQ0FBQyxJQUFJLEtBQUssZUFBZSxDQUFDLENBQUMsQ0FBQyxDQUFDLElBQUksQ0FBQTtRQUN2RyxDQUFDLENBQUMsQ0FBQztRQUVILElBQUksQ0FBQyxhQUFhLEVBQUU7WUFDbEIsT0FBTyxDQUFDLEtBQUssQ0FBQyxzREFBc0QsQ0FBQyxDQUFBO1lBQ3JFLFNBQVE7U0FDVDtRQUNELE1BQU0sY0FBYyxHQUFHLGVBQWUsQ0FBQyxDQUFDLENBQUMsQ0FBQztRQUMxQyxNQUFNLFNBQVMsR0FBRyxjQUFjLENBQUMsRUFBRSxDQUFDO1FBQ3BDLE1BQU0sSUFBSSxHQUFHLGNBQWMsQ0FBQyxJQUFJLENBQUM7UUFDakMsTUFBTSxPQUFPLEdBQUcsY0FBYyxDQUFDLFNBQVMsQ0FBQyxDQUFDO1FBQzFDLE1BQU0sSUFBSSxHQUFHLElBQUksMEJBQVUsQ0FBQyxTQUFTLEVBQUUsU0FBUyxFQUFFLElBQUksRUFBRSxPQUFPLEVBQUUsU0FBUyxFQUFFLFNBQVMsQ0FBQyxDQUFDLFFBQVEsRUFBRSxDQUFBO1FBRWpHLElBQUksV0FBVyxHQUFHLEVBQUUsQ0FBQTtRQUNwQixLQUFLLE1BQU0sY0FBYyxJQUFJLGVBQWUsRUFBRTtZQUM1QyxXQUFXLElBQUksY0FBYyxDQUFDLFVBQVUsR0FBRyxJQUFJLENBQUE7U0FDaEQ7UUFDRCxJQUFJLFdBQVcsQ0FBQyxRQUFRLENBQUMsSUFBSSxDQUFDLEVBQUU7WUFDOUIsV0FBVyxHQUFHLFdBQVcsQ0FBQyxLQUFLLENBQUMsQ0FBQyxFQUFFLFdBQVcsQ0FBQyxNQUFNLEdBQUMsQ0FBQyxDQUFDLENBQUE7U0FDekQ7UUFFRCxPQUFPLENBQUMsS0FBSyxDQUFDLElBQUksQ0FBQyxFQUFDLElBQUksRUFBRSxJQUFJLEVBQUUsV0FBVyxFQUFFLFdBQVcsRUFBQyxDQUFDLENBQUE7S0FFM0Q7SUFHRCxPQUFPLE9BQU8sQ0FBQyxPQUFPLENBQUMsT0FBTyxDQUFDLENBQUM7QUFFbEMsQ0FBQztBQWhIRCw0Q0FnSEM7QUFHRCxxQ0FBcUM7QUFDckMsU0FBZ0IsZ0JBQWdCLENBQUMsV0FBbUIsRUFBRSxRQUFnQjtJQUVwRSxNQUFNLE9BQU8sR0FBcUIsRUFBQyxJQUFJLEVBQUUsUUFBUSxFQUFFLEtBQUssRUFBRSxFQUFFLEVBQUMsQ0FBQztJQUc5RCxPQUFPLE9BQU8sQ0FBQyxPQUFPLENBQUMsT0FBTyxDQUFDLENBQUM7QUFFbEMsQ0FBQztBQVBELDRDQU9DIn0=
@@ -0,0 +1,3 @@
1
+ import { ILocalDependency } from '../DependencyTypes';
2
+ export declare function csprojParser(fileContent: string, filePath: string): Promise<ILocalDependency>;
3
+ export declare function packagesConfigParser(fileContent: string, filePath: string): Promise<ILocalDependency>;
@@ -0,0 +1,58 @@
1
+ var __importDefault = (this && this.__importDefault) || function (mod) {
2
+ return (mod && mod.__esModule) ? mod : { "default": mod };
3
+ };
4
+ Object.defineProperty(exports, "__esModule", { value: true });
5
+ exports.packagesConfigParser = exports.csprojParser = void 0;
6
+ const xml_js_1 = __importDefault(require("xml-js"));
7
+ const packageurl_js_1 = require("packageurl-js");
8
+ const PURL_TYPE = "nuget";
9
+ function csprojParser(fileContent, filePath) {
10
+ const results = { file: filePath, purls: [] };
11
+ try {
12
+ const fileProject = xml_js_1.default.xml2js(fileContent);
13
+ const project = fileProject.elements.find(item => item.name == 'Project');
14
+ const itemGroups = project.elements.filter(item => item.name == 'ItemGroup');
15
+ const packageReference = [];
16
+ itemGroups.forEach(itemGroup => {
17
+ itemGroup.elements.forEach(item => {
18
+ if (item.name == "PackageReference")
19
+ packageReference.push(item);
20
+ });
21
+ });
22
+ //Generates purls
23
+ packageReference.forEach(itemPackage => {
24
+ var _a, _b, _c, _d;
25
+ const packageName = (_b = (_a = itemPackage.attributes) === null || _a === void 0 ? void 0 : _a.Include) === null || _b === void 0 ? void 0 : _b.toString();
26
+ const version = (_d = (_c = itemPackage.attributes) === null || _c === void 0 ? void 0 : _c.Version) === null || _d === void 0 ? void 0 : _d.toString();
27
+ results.purls.push({
28
+ purl: new packageurl_js_1.PackageURL(PURL_TYPE, null, packageName, null, null, null).toString(),
29
+ requirement: version
30
+ });
31
+ });
32
+ }
33
+ catch (e) {
34
+ console.error(e);
35
+ return Promise.resolve({ file: filePath, purls: [] });
36
+ }
37
+ return Promise.resolve(results);
38
+ }
39
+ exports.csprojParser = csprojParser;
40
+ function packagesConfigParser(fileContent, filePath) {
41
+ const results = { file: filePath, purls: [] };
42
+ const packageConfig = xml_js_1.default.xml2js(fileContent);
43
+ const packages = packageConfig.elements.filter(item => item.name == "packages");
44
+ packages.forEach(pkg => {
45
+ pkg.elements.forEach(dep => {
46
+ var _a, _b;
47
+ const depName = (_a = dep.attributes) === null || _a === void 0 ? void 0 : _a.id;
48
+ const depVersion = (_b = dep.attributes) === null || _b === void 0 ? void 0 : _b.version;
49
+ results.purls.push({
50
+ purl: new packageurl_js_1.PackageURL(PURL_TYPE, null, depName, null, null, null).toString(),
51
+ requirement: depVersion
52
+ });
53
+ });
54
+ });
55
+ return Promise.resolve(results);
56
+ }
57
+ exports.packagesConfigParser = packagesConfigParser;
58
+ //# sourceMappingURL=data:application/json;base64,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
@@ -0,0 +1,2 @@
1
+ import { ILocalDependency } from "../DependencyTypes";
2
+ export declare function requirementsParser(fileContent: string, filePath: string): Promise<ILocalDependency>;
@@ -0,0 +1,64 @@
1
+ var __importDefault = (this && this.__importDefault) || function (mod) {
2
+ return (mod && mod.__esModule) ? mod : { "default": mod };
3
+ };
4
+ Object.defineProperty(exports, "__esModule", { value: true });
5
+ exports.requirementsParser = void 0;
6
+ const path_1 = __importDefault(require("path"));
7
+ const packageurl_js_1 = require("packageurl-js");
8
+ const utils_1 = require("./utils");
9
+ function parseDep(str) {
10
+ var _a, _b, _c;
11
+ const res = /^(?<name>[-\w]+)\s*(?<sym>[>=~!]*)\s*(?<version>[\d\.]*)/.exec(str);
12
+ return {
13
+ name: (_a = res === null || res === void 0 ? void 0 : res.groups) === null || _a === void 0 ? void 0 : _a.name,
14
+ sym: (_b = res === null || res === void 0 ? void 0 : res.groups) === null || _b === void 0 ? void 0 : _b.sym,
15
+ version: (_c = res === null || res === void 0 ? void 0 : res.groups) === null || _c === void 0 ? void 0 : _c.version,
16
+ };
17
+ }
18
+ const PURL_TYPE = 'pypi';
19
+ // Parse a requirements.txt file from python projects
20
+ // See reference on: https://pip.pypa.io/en/stable/reference/requirements-file-format/
21
+ const MANIFEST_FILE = 'requirements.txt';
22
+ function requirementsParser(fileContent, filePath) {
23
+ // If the file is not a python manifest file, return an empty results
24
+ const results = { file: filePath, purls: [] };
25
+ if (path_1.default.basename(filePath) != MANIFEST_FILE)
26
+ return Promise.resolve(results);
27
+ const lines = fileContent.split('\n');
28
+ for (let line of lines) {
29
+ line = line.trim();
30
+ if (line.length == 0)
31
+ continue;
32
+ if (!line.startsWith('#') && line.length > 0) { // Avoid comments and new lines
33
+ if (utils_1.isValidUrl(line)) {
34
+ // For reference about the regex see https://www.rfc-editor.org/rfc/rfc3986#appendix-B
35
+ const res = line.match(/^(([^:\/?#]+):)?(\/\/([^\/?#]*))?([^?#]*)(\?([^#]*))?(#(.*))?/);
36
+ continue;
37
+ }
38
+ else if (utils_1.isValidPath(line)) {
39
+ continue;
40
+ } // Do not parse local dependencies.
41
+ else if (line.startsWith('-r')) {
42
+ continue;
43
+ } // Recursive dependencies (NOT SUPPORTED YET)
44
+ else {
45
+ const dep = parseDep(line);
46
+ if (!dep.sym) {
47
+ const purlString = new packageurl_js_1.PackageURL(PURL_TYPE, undefined, dep.name, undefined, undefined, undefined).toString();
48
+ results.purls.push({ purl: purlString });
49
+ }
50
+ else if (dep.sym === '==') {
51
+ const purlString = new packageurl_js_1.PackageURL(PURL_TYPE, undefined, dep.name, dep.version, undefined, undefined).toString();
52
+ results.purls.push({ purl: purlString });
53
+ }
54
+ else {
55
+ const purlString = new packageurl_js_1.PackageURL(PURL_TYPE, undefined, dep.name, undefined, undefined, undefined).toString();
56
+ results.purls.push({ purl: purlString, requirement: dep.sym + dep.version });
57
+ }
58
+ }
59
+ }
60
+ }
61
+ return Promise.resolve(results);
62
+ }
63
+ exports.requirementsParser = requirementsParser;
64
+ //# sourceMappingURL=data:application/json;base64,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
@@ -0,0 +1,3 @@
1
+ import { ILocalDependency } from "../DependencyTypes";
2
+ export declare function gemfileParser(fileContent: string, filePath: string): Promise<ILocalDependency>;
3
+ export declare function gemfilelockParser(fileContent: string, filePath: string): Promise<ILocalDependency>;