scanoss 0.7.8 → 0.7.10
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/build/main/index.d.ts +2 -0
- package/build/main/index.js +3 -1
- package/build/main/sdk/FileCount/FileCount.d.ts +6 -0
- package/build/main/sdk/FileCount/FileCount.js +88 -0
- package/build/main/sdk/FileCount/FileCountFilter.d.ts +2 -0
- package/build/main/sdk/FileCount/FileCountFilter.js +10 -0
- package/build/main/sdk/FileCount/Interfaces.d.ts +19 -0
- package/build/main/sdk/FileCount/Interfaces.js +8 -0
- package/build/main/sdk/Filtering/DefaultFilterForDependencies.d.ts +2 -0
- package/build/main/sdk/Filtering/DefaultFilterForDependencies.js +144 -0
- package/build/main/sdk/Filtering/DefaultFilterForScanning.d.ts +2 -0
- package/build/main/sdk/Filtering/DefaultFilterForScanning.js +193 -0
- package/build/main/sdk/Filtering/Filtering.d.ts +80 -0
- package/build/main/sdk/Filtering/Filtering.js +259 -0
- package/build/main/sdk/scanner/WfpProvider/WfpCalculator/WfpCalculator.d.ts +1 -1
- package/build/main/sdk/tree/Filters/DependencyFilter.js +4 -4
- package/build/main/sdk/tree/Filters/ScanFilter.js +4 -4
- package/build/main/tsconfig.tsbuildinfo +82 -39
- package/build/module/index.d.ts +2 -0
- package/build/module/index.js +3 -1
- package/build/module/sdk/FileCount/FileCount.d.ts +6 -0
- package/build/module/sdk/FileCount/FileCount.js +63 -0
- package/build/module/sdk/FileCount/FileCountFilter.d.ts +2 -0
- package/build/module/sdk/FileCount/FileCountFilter.js +8 -0
- package/build/module/sdk/FileCount/Interfaces.d.ts +19 -0
- package/build/module/sdk/FileCount/Interfaces.js +6 -0
- package/build/module/sdk/Filtering/DefaultFilterForDependencies.d.ts +2 -0
- package/build/module/sdk/Filtering/DefaultFilterForDependencies.js +142 -0
- package/build/module/sdk/Filtering/DefaultFilterForScanning.d.ts +2 -0
- package/build/module/sdk/Filtering/DefaultFilterForScanning.js +191 -0
- package/build/module/sdk/Filtering/Filtering.d.ts +80 -0
- package/build/module/sdk/Filtering/Filtering.js +229 -0
- package/build/module/sdk/scanner/WfpProvider/WfpCalculator/WfpCalculator.d.ts +1 -1
- package/build/module/sdk/tree/Filters/DependencyFilter.js +4 -4
- package/build/module/sdk/tree/Filters/ScanFilter.js +4 -4
- package/build/module/tsconfig.module.tsbuildinfo +82 -39
- package/package.json +3 -3
- package/.circleci/config.yml +0 -64
- package/.cspell.json +0 -36
- package/.editorconfig +0 -15
- package/.eslintrc.json +0 -37
- package/.github/workflows/reuse.yml +0 -15
- package/.github/workflows/scanoss.yml +0 -24
- package/.gitignore +0 -10
- package/.idea/.gitignore +0 -5
- package/.idea/codeStyles/Project.xml +0 -61
- package/.idea/codeStyles/codeStyleConfig.xml +0 -5
- package/.idea/inspectionProfiles/Project_Default.xml +0 -6
- package/.idea/modules.xml +0 -8
- package/.idea/scanoss.js.iml +0 -12
- package/.idea/vcs.xml +0 -6
- package/.idea/workspace.xml +0 -297
- package/.prettierignore +0 -2
- package/.reuse/dep5 +0 -16
- package/.vscode/extensions.json +0 -8
- package/.vscode/launch.json +0 -29
- package/.vscode/settings.json +0 -7
- package/LICENSES/CC0-1.0.txt +0 -121
- package/LICENSES/MIT.txt +0 -9
- package/assets/ReportHTMLTemplate/index.html +0 -1181
- package/build/main/package.json +0 -120
- package/build/main/sdk/filters/DefaultFilterForDependencies.d.ts +0 -16
- package/build/main/sdk/filters/DefaultFilterForDependencies.js +0 -145
- package/build/main/sdk/filters/DefaultFilterForScanning.d.ts +0 -16
- package/build/main/sdk/filters/DefaultFilterForScanning.js +0 -194
- package/build/main/sdk/filters/filtering.d.ts +0 -32
- package/build/main/sdk/filters/filtering.js +0 -228
- package/build/main/src/cli/bin/cli-bin.d.ts +0 -2
- package/build/main/src/cli/bin/cli-bin.js +0 -68
- package/build/main/src/cli/commands/dep.d.ts +0 -1
- package/build/main/src/cli/commands/dep.js +0 -38
- package/build/main/src/cli/commands/helpers.d.ts +0 -2
- package/build/main/src/cli/commands/helpers.js +0 -25
- package/build/main/src/cli/commands/scan.d.ts +0 -1
- package/build/main/src/cli/commands/scan.js +0 -138
- package/build/main/src/cli/commands/wfp.d.ts +0 -1
- package/build/main/src/cli/commands/wfp.js +0 -54
- package/build/main/src/index.d.ts +0 -14
- package/build/main/src/index.js +0 -30
- package/build/main/src/sdk/DataLayer/DataLayerTypes.d.ts +0 -108
- package/build/main/src/sdk/DataLayer/DataLayerTypes.js +0 -5
- package/build/main/src/sdk/DataLayer/DataProviderManager.d.ts +0 -7
- package/build/main/src/sdk/DataLayer/DataProviderManager.js +0 -24
- package/build/main/src/sdk/DataLayer/DataProviders/ComponentDataProvider.d.ts +0 -13
- package/build/main/src/sdk/DataLayer/DataProviders/ComponentDataProvider.js +0 -164
- package/build/main/src/sdk/DataLayer/DataProviders/DependencyDataProvider.d.ts +0 -9
- package/build/main/src/sdk/DataLayer/DataProviders/DependencyDataProvider.js +0 -37
- package/build/main/src/sdk/DataLayer/DataProviders/LicenseDataProvider.d.ts +0 -18
- package/build/main/src/sdk/DataLayer/DataProviders/LicenseDataProvider.js +0 -148
- package/build/main/src/sdk/DataLayer/DataProviders/SummaryDataProvider.d.ts +0 -11
- package/build/main/src/sdk/DataLayer/DataProviders/SummaryDataProvider.js +0 -33
- package/build/main/src/sdk/Decompress/DecompressionManager.d.ts +0 -12
- package/build/main/src/sdk/Decompress/DecompressionManager.js +0 -73
- package/build/main/src/sdk/Decompress/Decompressor/DecompressTgz.d.ts +0 -5
- package/build/main/src/sdk/Decompress/Decompressor/DecompressTgz.js +0 -22
- package/build/main/src/sdk/Decompress/Decompressor/DecompressZips.d.ts +0 -5
- package/build/main/src/sdk/Decompress/Decompressor/DecompressZips.js +0 -24
- package/build/main/src/sdk/Decompress/Decompressor/Decompressor.d.ts +0 -10
- package/build/main/src/sdk/Decompress/Decompressor/Decompressor.js +0 -18
- package/build/main/src/sdk/Dependencies/DependencyScanner.d.ts +0 -11
- package/build/main/src/sdk/Dependencies/DependencyScanner.js +0 -96
- package/build/main/src/sdk/Dependencies/DependencyScannerCfg.d.ts +0 -4
- package/build/main/src/sdk/Dependencies/DependencyScannerCfg.js +0 -10
- package/build/main/src/sdk/Dependencies/DependencyTypes.d.ts +0 -21
- package/build/main/src/sdk/Dependencies/DependencyTypes.js +0 -2
- package/build/main/src/sdk/Dependencies/LocalDependency/DependencyTypes.d.ts +0 -16
- package/build/main/src/sdk/Dependencies/LocalDependency/DependencyTypes.js +0 -2
- package/build/main/src/sdk/Dependencies/LocalDependency/LocalDependency.d.ts +0 -8
- package/build/main/src/sdk/Dependencies/LocalDependency/LocalDependency.js +0 -102
- package/build/main/src/sdk/Dependencies/LocalDependency/parsers/buildGradleParser.d.ts +0 -2
- package/build/main/src/sdk/Dependencies/LocalDependency/parsers/buildGradleParser.js +0 -95
- package/build/main/src/sdk/Dependencies/LocalDependency/parsers/golangParser.d.ts +0 -3
- package/build/main/src/sdk/Dependencies/LocalDependency/parsers/golangParser.js +0 -97
- package/build/main/src/sdk/Dependencies/LocalDependency/parsers/mavenParser.d.ts +0 -2
- package/build/main/src/sdk/Dependencies/LocalDependency/parsers/mavenParser.js +0 -183
- package/build/main/src/sdk/Dependencies/LocalDependency/parsers/npmParser.d.ts +0 -13
- package/build/main/src/sdk/Dependencies/LocalDependency/parsers/npmParser.js +0 -187
- package/build/main/src/sdk/Dependencies/LocalDependency/parsers/nugetParser.d.ts +0 -3
- package/build/main/src/sdk/Dependencies/LocalDependency/parsers/nugetParser.js +0 -58
- package/build/main/src/sdk/Dependencies/LocalDependency/parsers/pyParser.d.ts +0 -2
- package/build/main/src/sdk/Dependencies/LocalDependency/parsers/pyParser.js +0 -64
- package/build/main/src/sdk/Dependencies/LocalDependency/parsers/rubyParser.d.ts +0 -3
- package/build/main/src/sdk/Dependencies/LocalDependency/parsers/rubyParser.js +0 -132
- package/build/main/src/sdk/Dependencies/LocalDependency/parsers/utils.d.ts +0 -2
- package/build/main/src/sdk/Dependencies/LocalDependency/parsers/utils.js +0 -19
- package/build/main/src/sdk/Report/Report.d.ts +0 -8
- package/build/main/src/sdk/Report/Report.js +0 -26
- package/build/main/src/sdk/filters/DefaultFilterForDependencies.d.ts +0 -16
- package/build/main/src/sdk/filters/DefaultFilterForDependencies.js +0 -145
- package/build/main/src/sdk/filters/DefaultFilterForScanning.d.ts +0 -16
- package/build/main/src/sdk/filters/DefaultFilterForScanning.js +0 -194
- package/build/main/src/sdk/filters/filtering.d.ts +0 -32
- package/build/main/src/sdk/filters/filtering.js +0 -228
- package/build/main/src/sdk/grpc/GrpcDependencyService.d.ts +0 -11
- package/build/main/src/sdk/grpc/GrpcDependencyService.js +0 -86
- package/build/main/src/sdk/grpc/scanoss/api/common/v2/scanoss-common_grpc_pb.d.ts +0 -0
- package/build/main/src/sdk/grpc/scanoss/api/common/v2/scanoss-common_grpc_pb.js +0 -2
- package/build/main/src/sdk/grpc/scanoss/api/common/v2/scanoss-common_pb.d.ts +0 -1
- package/build/main/src/sdk/grpc/scanoss/api/common/v2/scanoss-common_pb.js +0 -404
- package/build/main/src/sdk/grpc/scanoss/api/dependencies/v2/scanoss-dependencies_grpc_pb.d.ts +0 -39
- package/build/main/src/sdk/grpc/scanoss/api/dependencies/v2/scanoss-dependencies_grpc_pb.js +0 -98
- package/build/main/src/sdk/grpc/scanoss/api/dependencies/v2/scanoss-dependencies_pb.d.ts +0 -1
- package/build/main/src/sdk/grpc/scanoss/api/dependencies/v2/scanoss-dependencies_pb.js +0 -1197
- package/build/main/src/sdk/grpc/scanoss/api/scanning/v2/scanoss-scanning_grpc_pb.d.ts +0 -19
- package/build/main/src/sdk/grpc/scanoss/api/scanning/v2/scanoss-scanning_grpc_pb.js +0 -66
- package/build/main/src/sdk/grpc/scanoss/api/scanning/v2/scanoss-scanning_pb.d.ts +0 -1
- package/build/main/src/sdk/grpc/scanoss/api/scanning/v2/scanoss-scanning_pb.js +0 -14
- package/build/main/src/sdk/scanner/Dispatcher/DispatchableItem.d.ts +0 -19
- package/build/main/src/sdk/scanner/Dispatcher/DispatchableItem.js +0 -43
- package/build/main/src/sdk/scanner/Dispatcher/Dispatcher.d.ts +0 -20
- package/build/main/src/sdk/scanner/Dispatcher/Dispatcher.js +0 -160
- package/build/main/src/sdk/scanner/Dispatcher/DispatcherResponse.d.ts +0 -12
- package/build/main/src/sdk/scanner/Dispatcher/DispatcherResponse.js +0 -33
- package/build/main/src/sdk/scanner/Dispatcher/GlobalControllerAborter.d.ts +0 -10
- package/build/main/src/sdk/scanner/Dispatcher/GlobalControllerAborter.js +0 -32
- package/build/main/src/sdk/scanner/Fingerprint.d.ts +0 -16
- package/build/main/src/sdk/scanner/Fingerprint.js +0 -78
- package/build/main/src/sdk/scanner/Scannable/ScannableItem.d.ts +0 -15
- package/build/main/src/sdk/scanner/Scannable/ScannableItem.js +0 -27
- package/build/main/src/sdk/scanner/Scanner.d.ts +0 -46
- package/build/main/src/sdk/scanner/Scanner.js +0 -283
- package/build/main/src/sdk/scanner/ScannerCfg.d.ts +0 -16
- package/build/main/src/sdk/scanner/ScannerCfg.js +0 -30
- package/build/main/src/sdk/scanner/ScannerTypes.d.ts +0 -121
- package/build/main/src/sdk/scanner/ScannerTypes.js +0 -48
- package/build/main/src/sdk/scanner/WfpProvider/FingerprintPackage.d.ts +0 -9
- package/build/main/src/sdk/scanner/WfpProvider/FingerprintPackage.js +0 -31
- package/build/main/src/sdk/scanner/WfpProvider/WfpCalculator/WfpCalculator.d.ts +0 -20
- package/build/main/src/sdk/scanner/WfpProvider/WfpCalculator/WfpCalculator.js +0 -492
- package/build/main/src/sdk/scanner/WfpProvider/WfpProvider.d.ts +0 -35
- package/build/main/src/sdk/scanner/WfpProvider/WfpProvider.js +0 -68
- package/build/main/src/sdk/scanner/WfpProvider/WfpSplitter/WfpSplitter.d.ts +0 -21
- package/build/main/src/sdk/scanner/WfpProvider/WfpSplitter/WfpSplitter.js +0 -139
- package/build/main/src/sdk/tree/File.d.ts +0 -7
- package/build/main/src/sdk/tree/File.js +0 -24
- package/build/main/src/sdk/tree/Filters/DecompressionFilter.d.ts +0 -7
- package/build/main/src/sdk/tree/Filters/DecompressionFilter.js +0 -21
- package/build/main/src/sdk/tree/Filters/DependencyFilter.d.ts +0 -7
- package/build/main/src/sdk/tree/Filters/DependencyFilter.js +0 -17
- package/build/main/src/sdk/tree/Filters/Filter.d.ts +0 -4
- package/build/main/src/sdk/tree/Filters/Filter.js +0 -6
- package/build/main/src/sdk/tree/Filters/ScanFilter.d.ts +0 -7
- package/build/main/src/sdk/tree/Filters/ScanFilter.js +0 -17
- package/build/main/src/sdk/tree/Folder.d.ts +0 -12
- package/build/main/src/sdk/tree/Folder.js +0 -58
- package/build/main/src/sdk/tree/Node.d.ts +0 -17
- package/build/main/src/sdk/tree/Node.js +0 -25
- package/build/main/src/sdk/tree/Tree.d.ts +0 -18
- package/build/main/src/sdk/tree/Tree.js +0 -70
- package/build/module/package.json +0 -120
- package/build/module/sdk/filters/DefaultFilterForDependencies.d.ts +0 -16
- package/build/module/sdk/filters/DefaultFilterForDependencies.js +0 -143
- package/build/module/sdk/filters/DefaultFilterForScanning.d.ts +0 -16
- package/build/module/sdk/filters/DefaultFilterForScanning.js +0 -192
- package/build/module/sdk/filters/filtering.d.ts +0 -32
- package/build/module/sdk/filters/filtering.js +0 -203
- package/build/module/src/cli/bin/cli-bin.d.ts +0 -2
- package/build/module/src/cli/bin/cli-bin.js +0 -67
- package/build/module/src/cli/commands/dep.d.ts +0 -1
- package/build/module/src/cli/commands/dep.js +0 -32
- package/build/module/src/cli/commands/helpers.d.ts +0 -2
- package/build/module/src/cli/commands/helpers.js +0 -19
- package/build/module/src/cli/commands/scan.d.ts +0 -1
- package/build/module/src/cli/commands/scan.js +0 -135
- package/build/module/src/cli/commands/wfp.d.ts +0 -1
- package/build/module/src/cli/commands/wfp.js +0 -48
- package/build/module/src/index.d.ts +0 -14
- package/build/module/src/index.js +0 -19
- package/build/module/src/sdk/DataLayer/DataLayerTypes.d.ts +0 -108
- package/build/module/src/sdk/DataLayer/DataLayerTypes.js +0 -5
- package/build/module/src/sdk/DataLayer/DataProviderManager.d.ts +0 -7
- package/build/module/src/sdk/DataLayer/DataProviderManager.js +0 -21
- package/build/module/src/sdk/DataLayer/DataProviders/ComponentDataProvider.d.ts +0 -13
- package/build/module/src/sdk/DataLayer/DataProviders/ComponentDataProvider.js +0 -159
- package/build/module/src/sdk/DataLayer/DataProviders/DependencyDataProvider.d.ts +0 -9
- package/build/module/src/sdk/DataLayer/DataProviders/DependencyDataProvider.js +0 -34
- package/build/module/src/sdk/DataLayer/DataProviders/LicenseDataProvider.d.ts +0 -18
- package/build/module/src/sdk/DataLayer/DataProviders/LicenseDataProvider.js +0 -145
- package/build/module/src/sdk/DataLayer/DataProviders/SummaryDataProvider.d.ts +0 -11
- package/build/module/src/sdk/DataLayer/DataProviders/SummaryDataProvider.js +0 -30
- package/build/module/src/sdk/Decompress/DecompressionManager.d.ts +0 -12
- package/build/module/src/sdk/Decompress/DecompressionManager.js +0 -67
- package/build/module/src/sdk/Decompress/Decompressor/DecompressTgz.d.ts +0 -5
- package/build/module/src/sdk/Decompress/Decompressor/DecompressTgz.js +0 -16
- package/build/module/src/sdk/Decompress/Decompressor/DecompressZips.d.ts +0 -5
- package/build/module/src/sdk/Decompress/Decompressor/DecompressZips.js +0 -18
- package/build/module/src/sdk/Decompress/Decompressor/Decompressor.d.ts +0 -10
- package/build/module/src/sdk/Decompress/Decompressor/Decompressor.js +0 -15
- package/build/module/src/sdk/Dependencies/DependencyScanner.d.ts +0 -11
- package/build/module/src/sdk/Dependencies/DependencyScanner.js +0 -93
- package/build/module/src/sdk/Dependencies/DependencyScannerCfg.d.ts +0 -4
- package/build/module/src/sdk/Dependencies/DependencyScannerCfg.js +0 -7
- package/build/module/src/sdk/Dependencies/DependencyTypes.d.ts +0 -21
- package/build/module/src/sdk/Dependencies/DependencyTypes.js +0 -2
- package/build/module/src/sdk/Dependencies/LocalDependency/DependencyTypes.d.ts +0 -16
- package/build/module/src/sdk/Dependencies/LocalDependency/DependencyTypes.js +0 -2
- package/build/module/src/sdk/Dependencies/LocalDependency/LocalDependency.d.ts +0 -8
- package/build/module/src/sdk/Dependencies/LocalDependency/LocalDependency.js +0 -96
- package/build/module/src/sdk/Dependencies/LocalDependency/parsers/buildGradleParser.d.ts +0 -2
- package/build/module/src/sdk/Dependencies/LocalDependency/parsers/buildGradleParser.js +0 -87
- package/build/module/src/sdk/Dependencies/LocalDependency/parsers/golangParser.d.ts +0 -3
- package/build/module/src/sdk/Dependencies/LocalDependency/parsers/golangParser.js +0 -88
- package/build/module/src/sdk/Dependencies/LocalDependency/parsers/mavenParser.d.ts +0 -2
- package/build/module/src/sdk/Dependencies/LocalDependency/parsers/mavenParser.js +0 -180
- package/build/module/src/sdk/Dependencies/LocalDependency/parsers/npmParser.d.ts +0 -13
- package/build/module/src/sdk/Dependencies/LocalDependency/parsers/npmParser.js +0 -175
- package/build/module/src/sdk/Dependencies/LocalDependency/parsers/nugetParser.d.ts +0 -3
- package/build/module/src/sdk/Dependencies/LocalDependency/parsers/nugetParser.js +0 -49
- package/build/module/src/sdk/Dependencies/LocalDependency/parsers/pyParser.d.ts +0 -2
- package/build/module/src/sdk/Dependencies/LocalDependency/parsers/pyParser.js +0 -57
- package/build/module/src/sdk/Dependencies/LocalDependency/parsers/rubyParser.d.ts +0 -3
- package/build/module/src/sdk/Dependencies/LocalDependency/parsers/rubyParser.js +0 -125
- package/build/module/src/sdk/Dependencies/LocalDependency/parsers/utils.d.ts +0 -2
- package/build/module/src/sdk/Dependencies/LocalDependency/parsers/utils.js +0 -15
- package/build/module/src/sdk/Report/Report.d.ts +0 -8
- package/build/module/src/sdk/Report/Report.js +0 -20
- package/build/module/src/sdk/filters/DefaultFilterForDependencies.d.ts +0 -16
- package/build/module/src/sdk/filters/DefaultFilterForDependencies.js +0 -143
- package/build/module/src/sdk/filters/DefaultFilterForScanning.d.ts +0 -16
- package/build/module/src/sdk/filters/DefaultFilterForScanning.js +0 -192
- package/build/module/src/sdk/filters/filtering.d.ts +0 -32
- package/build/module/src/sdk/filters/filtering.js +0 -203
- package/build/module/src/sdk/grpc/GrpcDependencyService.d.ts +0 -11
- package/build/module/src/sdk/grpc/GrpcDependencyService.js +0 -64
- package/build/module/src/sdk/grpc/scanoss/api/common/v2/scanoss-common_grpc_pb.d.ts +0 -0
- package/build/module/src/sdk/grpc/scanoss/api/common/v2/scanoss-common_grpc_pb.js +0 -2
- package/build/module/src/sdk/grpc/scanoss/api/common/v2/scanoss-common_pb.d.ts +0 -1
- package/build/module/src/sdk/grpc/scanoss/api/common/v2/scanoss-common_pb.js +0 -404
- package/build/module/src/sdk/grpc/scanoss/api/dependencies/v2/scanoss-dependencies_grpc_pb.d.ts +0 -39
- package/build/module/src/sdk/grpc/scanoss/api/dependencies/v2/scanoss-dependencies_grpc_pb.js +0 -98
- package/build/module/src/sdk/grpc/scanoss/api/dependencies/v2/scanoss-dependencies_pb.d.ts +0 -1
- package/build/module/src/sdk/grpc/scanoss/api/dependencies/v2/scanoss-dependencies_pb.js +0 -1197
- package/build/module/src/sdk/grpc/scanoss/api/scanning/v2/scanoss-scanning_grpc_pb.d.ts +0 -19
- package/build/module/src/sdk/grpc/scanoss/api/scanning/v2/scanoss-scanning_grpc_pb.js +0 -66
- package/build/module/src/sdk/grpc/scanoss/api/scanning/v2/scanoss-scanning_pb.d.ts +0 -1
- package/build/module/src/sdk/grpc/scanoss/api/scanning/v2/scanoss-scanning_pb.js +0 -14
- package/build/module/src/sdk/scanner/Dispatcher/DispatchableItem.d.ts +0 -19
- package/build/module/src/sdk/scanner/Dispatcher/DispatchableItem.js +0 -37
- package/build/module/src/sdk/scanner/Dispatcher/Dispatcher.d.ts +0 -20
- package/build/module/src/sdk/scanner/Dispatcher/Dispatcher.js +0 -135
- package/build/module/src/sdk/scanner/Dispatcher/DispatcherResponse.d.ts +0 -12
- package/build/module/src/sdk/scanner/Dispatcher/DispatcherResponse.js +0 -30
- package/build/module/src/sdk/scanner/Dispatcher/GlobalControllerAborter.d.ts +0 -10
- package/build/module/src/sdk/scanner/Dispatcher/GlobalControllerAborter.js +0 -26
- package/build/module/src/sdk/scanner/Fingerprint.d.ts +0 -16
- package/build/module/src/sdk/scanner/Fingerprint.js +0 -54
- package/build/module/src/sdk/scanner/Scannable/ScannableItem.d.ts +0 -15
- package/build/module/src/sdk/scanner/Scannable/ScannableItem.js +0 -24
- package/build/module/src/sdk/scanner/Scanner.d.ts +0 -46
- package/build/module/src/sdk/scanner/Scanner.js +0 -275
- package/build/module/src/sdk/scanner/ScannerCfg.d.ts +0 -16
- package/build/module/src/sdk/scanner/ScannerCfg.js +0 -27
- package/build/module/src/sdk/scanner/ScannerTypes.d.ts +0 -121
- package/build/module/src/sdk/scanner/ScannerTypes.js +0 -46
- package/build/module/src/sdk/scanner/WfpProvider/FingerprintPackage.d.ts +0 -9
- package/build/module/src/sdk/scanner/WfpProvider/FingerprintPackage.js +0 -28
- package/build/module/src/sdk/scanner/WfpProvider/WfpCalculator/WfpCalculator.d.ts +0 -20
- package/build/module/src/sdk/scanner/WfpProvider/WfpCalculator/WfpCalculator.js +0 -486
- package/build/module/src/sdk/scanner/WfpProvider/WfpProvider.d.ts +0 -35
- package/build/module/src/sdk/scanner/WfpProvider/WfpProvider.js +0 -65
- package/build/module/src/sdk/scanner/WfpProvider/WfpSplitter/WfpSplitter.d.ts +0 -21
- package/build/module/src/sdk/scanner/WfpProvider/WfpSplitter/WfpSplitter.js +0 -132
- package/build/module/src/sdk/tree/File.d.ts +0 -7
- package/build/module/src/sdk/tree/File.js +0 -19
- package/build/module/src/sdk/tree/Filters/DecompressionFilter.d.ts +0 -7
- package/build/module/src/sdk/tree/Filters/DecompressionFilter.js +0 -18
- package/build/module/src/sdk/tree/Filters/DependencyFilter.d.ts +0 -7
- package/build/module/src/sdk/tree/Filters/DependencyFilter.js +0 -14
- package/build/module/src/sdk/tree/Filters/Filter.d.ts +0 -4
- package/build/module/src/sdk/tree/Filters/Filter.js +0 -3
- package/build/module/src/sdk/tree/Filters/ScanFilter.d.ts +0 -7
- package/build/module/src/sdk/tree/Filters/ScanFilter.js +0 -14
- package/build/module/src/sdk/tree/Folder.d.ts +0 -12
- package/build/module/src/sdk/tree/Folder.js +0 -53
- package/build/module/src/sdk/tree/Node.d.ts +0 -17
- package/build/module/src/sdk/tree/Node.js +0 -22
- package/build/module/src/sdk/tree/Tree.d.ts +0 -18
- package/build/module/src/sdk/tree/Tree.js +0 -64
- package/package-lock.json +0 -17117
- package/src/cli/bin/cli-bin.ts +0 -81
- package/src/cli/commands/dep.ts +0 -37
- package/src/cli/commands/helpers.ts +0 -19
- package/src/cli/commands/scan.ts +0 -173
- package/src/cli/commands/wfp.ts +0 -60
- package/src/index.ts +0 -26
- package/src/sdk/DataLayer/DataLayerTypes.ts +0 -129
- package/src/sdk/DataLayer/DataProviderManager.ts +0 -27
- package/src/sdk/DataLayer/DataProviders/ComponentDataProvider.ts +0 -195
- package/src/sdk/DataLayer/DataProviders/DependencyDataProvider.ts +0 -48
- package/src/sdk/DataLayer/DataProviders/LicenseDataProvider.ts +0 -184
- package/src/sdk/DataLayer/DataProviders/SummaryDataProvider.ts +0 -47
- package/src/sdk/Decompress/DecompressionManager.ts +0 -91
- package/src/sdk/Decompress/Decompressor/DecompressTgz.ts +0 -20
- package/src/sdk/Decompress/Decompressor/DecompressZips.ts +0 -21
- package/src/sdk/Decompress/Decompressor/Decompressor.ts +0 -20
- package/src/sdk/Dependencies/DependencyScanner.ts +0 -108
- package/src/sdk/Dependencies/DependencyScannerCfg.ts +0 -7
- package/src/sdk/Dependencies/DependencyTypes.ts +0 -24
- package/src/sdk/Dependencies/LocalDependency/DependencyTypes.ts +0 -21
- package/src/sdk/Dependencies/LocalDependency/LocalDependency.ts +0 -111
- package/src/sdk/Dependencies/LocalDependency/parsers/buildGradleParser.ts +0 -115
- package/src/sdk/Dependencies/LocalDependency/parsers/golangParser.ts +0 -130
- package/src/sdk/Dependencies/LocalDependency/parsers/mavenParser.ts +0 -209
- package/src/sdk/Dependencies/LocalDependency/parsers/npmParser.ts +0 -227
- package/src/sdk/Dependencies/LocalDependency/parsers/nugetParser.ts +0 -64
- package/src/sdk/Dependencies/LocalDependency/parsers/pyParser.ts +0 -58
- package/src/sdk/Dependencies/LocalDependency/parsers/rubyParser.ts +0 -174
- package/src/sdk/Dependencies/LocalDependency/parsers/utils.ts +0 -15
- package/src/sdk/Report/Report.ts +0 -30
- package/src/sdk/filters/DefaultFilterForDependencies.ts +0 -149
- package/src/sdk/filters/DefaultFilterForScanning.ts +0 -207
- package/src/sdk/filters/filtering.ts +0 -235
- package/src/sdk/grpc/GrpcDependencyService.ts +0 -72
- package/src/sdk/grpc/scanoss/api/common/v2/scanoss-common_grpc_pb.d.ts +0 -1
- package/src/sdk/grpc/scanoss/api/common/v2/scanoss-common_grpc_pb.js +0 -1
- package/src/sdk/grpc/scanoss/api/common/v2/scanoss-common_pb.d.ts +0 -79
- package/src/sdk/grpc/scanoss/api/common/v2/scanoss-common_pb.js +0 -482
- package/src/sdk/grpc/scanoss/api/dependencies/v2/scanoss-dependencies_grpc_pb.d.ts +0 -30
- package/src/sdk/grpc/scanoss/api/dependencies/v2/scanoss-dependencies_grpc_pb.js +0 -109
- package/src/sdk/grpc/scanoss/api/dependencies/v2/scanoss-dependencies_pb.d.ts +0 -206
- package/src/sdk/grpc/scanoss/api/dependencies/v2/scanoss-dependencies_pb.js +0 -1489
- package/src/sdk/grpc/scanoss/api/scanning/v2/scanoss-scanning_grpc_pb.d.ts +0 -25
- package/src/sdk/grpc/scanoss/api/scanning/v2/scanoss-scanning_grpc_pb.js +0 -73
- package/src/sdk/grpc/scanoss/api/scanning/v2/scanoss-scanning_pb.d.ts +0 -6
- package/src/sdk/grpc/scanoss/api/scanning/v2/scanoss-scanning_pb.js +0 -15
- package/src/sdk/scanner/Dispatcher/DispatchableItem.ts +0 -62
- package/src/sdk/scanner/Dispatcher/Dispatcher.ts +0 -173
- package/src/sdk/scanner/Dispatcher/DispatcherResponse.ts +0 -40
- package/src/sdk/scanner/Dispatcher/GlobalControllerAborter.ts +0 -33
- package/src/sdk/scanner/Fingerprint.ts +0 -82
- package/src/sdk/scanner/Scannable/ScannableItem.ts +0 -43
- package/src/sdk/scanner/Scanner.ts +0 -360
- package/src/sdk/scanner/ScannerCfg.ts +0 -43
- package/src/sdk/scanner/ScannerTypes.ts +0 -127
- package/src/sdk/scanner/WfpProvider/FingerprintPackage.ts +0 -34
- package/src/sdk/scanner/WfpProvider/WfpCalculator/WfpCalculator.ts +0 -516
- package/src/sdk/scanner/WfpProvider/WfpProvider.ts +0 -105
- package/src/sdk/scanner/WfpProvider/WfpSplitter/WfpSplitter.ts +0 -184
- package/src/sdk/tree/File.ts +0 -22
- package/src/sdk/tree/Filters/DecompressionFilter.ts +0 -22
- package/src/sdk/tree/Filters/DependencyFilter.ts +0 -22
- package/src/sdk/tree/Filters/Filter.ts +0 -5
- package/src/sdk/tree/Filters/ScanFilter.ts +0 -22
- package/src/sdk/tree/Folder.ts +0 -57
- package/src/sdk/tree/Node.ts +0 -39
- package/src/sdk/tree/Tree.ts +0 -82
- package/tests/scanoss.sh +0 -56
- package/tests/sdk/DataLayer/DataProviders/ComponentDataProvider.spec.ts +0 -176
- package/tests/sdk/DataLayer/DataProviders/DependencyDataProvider.spec.ts +0 -51
- package/tests/sdk/DataLayer/DataProviders/SummaryDataProvider.spec.ts +0 -35
- package/tests/sdk/DataLayer/DataProviders/samples/results-with-dep.json +0 -665
- package/tests/sdk/DataLayer/DataProviders/samples/results.json +0 -556
- package/tests/sdk/DataLayer/samples/simple/results-with-dep.json +0 -665
- package/tests/sdk/DataLayer/samples/simple-1/output1.json +0 -1196
- package/tests/sdk/Dependencies/LocalDependency/LocalDependency.spec.ts +0 -24
- package/tests/sdk/Dependencies/LocalDependency/Parsers/buildGradle.spec.ts +0 -48
- package/tests/sdk/Dependencies/LocalDependency/Parsers/golangParser.spec.ts +0 -146
- package/tests/sdk/Dependencies/LocalDependency/Parsers/npmParser.spec.ts +0 -135
- package/tests/sdk/Dependencies/LocalDependency/Parsers/nugetParser.spec.ts +0 -73
- package/tests/sdk/Dependencies/LocalDependency/Parsers/pomParser.spec.ts +0 -45
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/Gemfile/1/Gemfile +0 -6
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/Gemfile/1/Gemfile~ +0 -0
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/Gemfile/2/Gemfile +0 -3
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/Gemfile/2/Gemfile~ +0 -6
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/Gemfile/3/Gemfile +0 -7
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/Gemfile/3/Gemfile~ +0 -6
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/Gemfile/4/Gemfile +0 -31
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/Gemfile/4/Gemfile~ +0 -7
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/Gemfile.lock/1/Gemfile.lock +0 -180
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/Gemfile.lock/2/Gemfile.lock +0 -60
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/Gemfile.lock/2/Gemfile.lock~ +0 -0
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/go.sum/1/go.sum +0 -119
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/go.sum/depJSON.sh +0 -23
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/gradle/1/build.gradle +0 -26
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/gradle/2/build.gradle +0 -16
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/nuget/NoDependencies.csproj +0 -115
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/nuget/netcore-2.csproj +0 -18
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/nuget/netcore.csproj +0 -14
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/nuget/packageConfig-1/packages.config +0 -5
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/pom.xml/1/pom.xml +0 -670
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/pom.xml/2/pom.xml +0 -780
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/yarn-lock/generate_expected_output.sh +0 -4
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/yarn-lock/v1/yarn.lock +0 -50
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/yarn-lock/v1/yarn.lock-expected +0 -13
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/yarn-lock/v1-complex/yarn.lock +0 -27
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/yarn-lock/v1-complex/yarn.lock-expected +0 -8
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/yarn-lock/v1_2/scancode-out.json +0 -149662
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/yarn-lock/v1_2/yarn.lock +0 -8409
- package/tests/sdk/Dependencies/LocalDependency/Parsers/samples/yarn-lock/v1_2/yarn.lock-expected +0 -1153
- package/tests/sdk/Scanner/WfpProvider/WfpCalculator/WfpCalculator.spec.ts +0 -102
- package/tests/sdk/Scanner/WfpProvider/WfpCalculator/samples/file1.c +0 -41
- package/tests/sdk/Scanner/WfpProvider/WfpCalculator/samples/file2.go +0 -87
- package/tests/sdk/Scanner/WfpProvider/WfpSplitter/WfpSplitter.spec.ts +0 -35
- package/tests/sdk/Scanner/WfpProvider/WfpSplitter/samples/wfp.wfp +0 -68
- package/tests/sdk/Scanner/WfpProvider/WfpSplitter/samples/wfp.wfp~ +0 -68
- package/tsconfig.json +0 -31
- package/tsconfig.module.json +0 -11
- package/yarn.lock +0 -5481
|
@@ -1,97 +0,0 @@
|
|
|
1
|
-
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
2
|
-
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
3
|
-
};
|
|
4
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
|
-
exports.goSumParser = exports.goModParser = void 0;
|
|
6
|
-
const packageurl_js_1 = require("packageurl-js");
|
|
7
|
-
const path_1 = __importDefault(require("path"));
|
|
8
|
-
function parseDepLink(str) {
|
|
9
|
-
var _a, _b;
|
|
10
|
-
const res = /.*?(?<ns_name>[^\s]+)\s+(?<version>(.*))/.exec(str);
|
|
11
|
-
return {
|
|
12
|
-
ns_name: (_a = res === null || res === void 0 ? void 0 : res.groups) === null || _a === void 0 ? void 0 : _a.ns_name,
|
|
13
|
-
version: (_b = res === null || res === void 0 ? void 0 : res.groups) === null || _b === void 0 ? void 0 : _b.version
|
|
14
|
-
};
|
|
15
|
-
}
|
|
16
|
-
function getDepDataGoModFromLine(line) {
|
|
17
|
-
const { ns_name, version } = parseDepLink(line);
|
|
18
|
-
const index = ns_name.lastIndexOf('/');
|
|
19
|
-
const namespace = ns_name.substring(0, index);
|
|
20
|
-
const name = ns_name.substring(index + 1);
|
|
21
|
-
return { namespace, name, version };
|
|
22
|
-
}
|
|
23
|
-
// Removes comments and spaces
|
|
24
|
-
function preprocessLine(line) {
|
|
25
|
-
if (line.includes("//"))
|
|
26
|
-
line = line.substring(0, line.indexOf("//"));
|
|
27
|
-
return line.trim();
|
|
28
|
-
}
|
|
29
|
-
const PURL_TYPE = 'golang';
|
|
30
|
-
// See reference on: https://go.dev/ref/mod#go-mod-file
|
|
31
|
-
const MANIFEST_FILE = 'go.mod';
|
|
32
|
-
function goModParser(fileContent, filePath) {
|
|
33
|
-
// If the file is not a go.mod manifest file, return an empty results
|
|
34
|
-
const results = { file: filePath, purls: [] };
|
|
35
|
-
if (path_1.default.basename(filePath) != MANIFEST_FILE)
|
|
36
|
-
return Promise.resolve(results);
|
|
37
|
-
const lines = fileContent.split('\n');
|
|
38
|
-
const require = [];
|
|
39
|
-
for (let num = 0; num < lines.length; num += 1) {
|
|
40
|
-
let line = preprocessLine(lines[num]);
|
|
41
|
-
if (line.includes('require') && line.includes('(')) {
|
|
42
|
-
num += 1;
|
|
43
|
-
line = preprocessLine(lines[num]);
|
|
44
|
-
while (num < lines.length && line !== ')') {
|
|
45
|
-
const { namespace, name, version } = getDepDataGoModFromLine(line);
|
|
46
|
-
const purlString = new packageurl_js_1.PackageURL(PURL_TYPE, namespace, name, version, undefined, undefined).toString();
|
|
47
|
-
results.purls.push({ purl: purlString });
|
|
48
|
-
require.push(line);
|
|
49
|
-
num += 1;
|
|
50
|
-
line = preprocessLine(lines[num]);
|
|
51
|
-
}
|
|
52
|
-
}
|
|
53
|
-
}
|
|
54
|
-
return Promise.resolve(results);
|
|
55
|
-
}
|
|
56
|
-
exports.goModParser = goModParser;
|
|
57
|
-
function parseGoSumDepLink(str) {
|
|
58
|
-
var _a, _b, _c;
|
|
59
|
-
const res = /.*?(?<ns_name>[^\s]+)\s+(?<version>(.*))\s+h1:(?<checksum>(.*))/.exec(str);
|
|
60
|
-
return {
|
|
61
|
-
ns_name: (_a = res === null || res === void 0 ? void 0 : res.groups) === null || _a === void 0 ? void 0 : _a.ns_name,
|
|
62
|
-
version: (_b = res === null || res === void 0 ? void 0 : res.groups) === null || _b === void 0 ? void 0 : _b.version,
|
|
63
|
-
checksum: (_c = res === null || res === void 0 ? void 0 : res.groups) === null || _c === void 0 ? void 0 : _c.checksum
|
|
64
|
-
};
|
|
65
|
-
}
|
|
66
|
-
function getDepDataGoSumFromLine(line) {
|
|
67
|
-
const { ns_name, version } = parseGoSumDepLink(line);
|
|
68
|
-
if (!ns_name)
|
|
69
|
-
return {};
|
|
70
|
-
const index = ns_name.lastIndexOf('/');
|
|
71
|
-
const namespace = ns_name.substring(0, index);
|
|
72
|
-
const name = ns_name.substring(index + 1);
|
|
73
|
-
return { namespace, name, version };
|
|
74
|
-
}
|
|
75
|
-
// See reference on: https://go.dev/ref/mod#go-mod-file
|
|
76
|
-
function goSumParser(fileContent, filePath) {
|
|
77
|
-
// If the file is not a go.mod manifest file, return an empty results
|
|
78
|
-
const results = { file: filePath, purls: [] };
|
|
79
|
-
if (path_1.default.basename(filePath) != 'go.sum')
|
|
80
|
-
return Promise.resolve(results);
|
|
81
|
-
const lines = fileContent.split('\n');
|
|
82
|
-
for (let num = 0; num < lines.length; num += 1) {
|
|
83
|
-
let line = preprocessLine(lines[num]); //Deletes coments
|
|
84
|
-
if (!line)
|
|
85
|
-
continue;
|
|
86
|
-
line = line.replace('/go.mod', '');
|
|
87
|
-
const { namespace, name, version } = getDepDataGoSumFromLine(line);
|
|
88
|
-
if (!name)
|
|
89
|
-
continue;
|
|
90
|
-
//const purlString = new PackageURL(PURL_TYPE, namespace, name, undefined, undefined, undefined).toString();
|
|
91
|
-
const purlString = `pkg:${PURL_TYPE}/${namespace}/${name}`;
|
|
92
|
-
results.purls.push({ purl: purlString, requirement: version });
|
|
93
|
-
}
|
|
94
|
-
return Promise.resolve(results);
|
|
95
|
-
}
|
|
96
|
-
exports.goSumParser = goSumParser;
|
|
97
|
-
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZ29sYW5nUGFyc2VyLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vLi4vLi4vLi4vc3JjL3Nkay9EZXBlbmRlbmNpZXMvTG9jYWxEZXBlbmRlbmN5L3BhcnNlcnMvZ29sYW5nUGFyc2VyLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7O0FBRUEsaURBQTJDO0FBQzNDLGdEQUF3QjtBQUV4QixTQUFTLFlBQVksQ0FBRSxHQUFXOztJQUNoQyxNQUFNLEdBQUcsR0FBRywwQ0FBMEMsQ0FBQyxJQUFJLENBQUMsR0FBRyxDQUFDLENBQUM7SUFDakUsT0FBTztRQUNMLE9BQU8sUUFBRSxHQUFHLGFBQUgsR0FBRyx1QkFBSCxHQUFHLENBQUUsTUFBTSwwQ0FBRSxPQUFPO1FBQzdCLE9BQU8sUUFBRSxHQUFHLGFBQUgsR0FBRyx1QkFBSCxHQUFHLENBQUUsTUFBTSwwQ0FBRSxPQUFPO0tBQzlCLENBQUM7QUFDSixDQUFDO0FBRUQsU0FBUyx1QkFBdUIsQ0FBQyxJQUFZO0lBQzNDLE1BQU0sRUFBQyxPQUFPLEVBQUUsT0FBTyxFQUFDLEdBQUcsWUFBWSxDQUFDLElBQUksQ0FBQyxDQUFDO0lBRTlDLE1BQU0sS0FBSyxHQUFHLE9BQU8sQ0FBQyxXQUFXLENBQUMsR0FBRyxDQUFDLENBQUM7SUFDdkMsTUFBTSxTQUFTLEdBQUcsT0FBTyxDQUFDLFNBQVMsQ0FBQyxDQUFDLEVBQUUsS0FBSyxDQUFDLENBQUM7SUFDOUMsTUFBTSxJQUFJLEdBQUcsT0FBTyxDQUFDLFNBQVMsQ0FBQyxLQUFLLEdBQUcsQ0FBQyxDQUFDLENBQUM7SUFFMUMsT0FBTyxFQUFDLFNBQVMsRUFBRSxJQUFJLEVBQUUsT0FBTyxFQUFDLENBQUE7QUFDbkMsQ0FBQztBQUVELDhCQUE4QjtBQUM5QixTQUFTLGNBQWMsQ0FBQyxJQUFZO0lBQ2hDLElBQUksSUFBSSxDQUFDLFFBQVEsQ0FBQyxJQUFJLENBQUM7UUFDckIsSUFBSSxHQUFHLElBQUksQ0FBQyxTQUFTLENBQUMsQ0FBQyxFQUFDLElBQUksQ0FBQyxPQUFPLENBQUMsSUFBSSxDQUFDLENBQUMsQ0FBQztJQUM5QyxPQUFPLElBQUksQ0FBQyxJQUFJLEVBQUUsQ0FBQztBQUN2QixDQUFDO0FBS0QsTUFBTSxTQUFTLEdBQUcsUUFBUSxDQUFDO0FBRzNCLHVEQUF1RDtBQUN2RCxNQUFNLGFBQWEsR0FBRyxRQUFRLENBQUM7QUFDL0IsU0FBZ0IsV0FBVyxDQUFDLFdBQW1CLEVBQUUsUUFBZ0I7SUFFL0QscUVBQXFFO0lBQ3JFLE1BQU0sT0FBTyxHQUFxQixFQUFDLElBQUksRUFBRSxRQUFRLEVBQUUsS0FBSyxFQUFFLEVBQUUsRUFBQyxDQUFDO0lBQzlELElBQUcsY0FBSSxDQUFDLFFBQVEsQ0FBQyxRQUFRLENBQUMsSUFBSSxhQUFhO1FBQ3ZDLE9BQU8sT0FBTyxDQUFDLE9BQU8sQ0FBQyxPQUFPLENBQUMsQ0FBQztJQUVwQyxNQUFNLEtBQUssR0FBRyxXQUFXLENBQUMsS0FBSyxDQUFDLElBQUksQ0FBQyxDQUFDO0lBRXZDLE1BQU0sT0FBTyxHQUFHLEVBQUUsQ0FBQztJQUVsQixLQUFLLElBQUksR0FBRyxHQUFHLENBQUMsRUFBRyxHQUFHLEdBQUcsS0FBSyxDQUFDLE1BQU0sRUFBRyxHQUFHLElBQUUsQ0FBQyxFQUFFO1FBRTlDLElBQUksSUFBSSxHQUFHLGNBQWMsQ0FBQyxLQUFLLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQztRQUd0QyxJQUFHLElBQUksQ0FBQyxRQUFRLENBQUMsU0FBUyxDQUFDLElBQUksSUFBSSxDQUFDLFFBQVEsQ0FBQyxHQUFHLENBQUMsRUFBRTtZQUNqRCxHQUFHLElBQUUsQ0FBQyxDQUFDO1lBQ1AsSUFBSSxHQUFHLGNBQWMsQ0FBQyxLQUFLLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQztZQUNsQyxPQUFPLEdBQUcsR0FBRyxLQUFLLENBQUMsTUFBTSxJQUFJLElBQUksS0FBRyxHQUFHLEVBQUU7Z0JBRXZDLE1BQU0sRUFBQyxTQUFTLEVBQUUsSUFBSSxFQUFFLE9BQU8sRUFBQyxHQUFHLHVCQUF1QixDQUFDLElBQUksQ0FBQyxDQUFBO2dCQUVoRSxNQUFNLFVBQVUsR0FBRyxJQUFJLDBCQUFVLENBQUMsU0FBUyxFQUFFLFNBQVMsRUFBRSxJQUFJLEVBQUUsT0FBTyxFQUFFLFNBQVMsRUFBRSxTQUFTLENBQUMsQ0FBQyxRQUFRLEVBQUUsQ0FBQztnQkFDeEcsT0FBTyxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsRUFBQyxJQUFJLEVBQUUsVUFBVSxFQUFDLENBQUMsQ0FBQztnQkFFdkMsT0FBTyxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsQ0FBQztnQkFFbkIsR0FBRyxJQUFFLENBQUMsQ0FBQztnQkFDUCxJQUFJLEdBQUcsY0FBYyxDQUFDLEtBQUssQ0FBQyxHQUFHLENBQUMsQ0FBQyxDQUFDO2FBQ25DO1NBQ0Y7S0FDRjtJQUVELE9BQU8sT0FBTyxDQUFDLE9BQU8sQ0FBQyxPQUFPLENBQUMsQ0FBQztBQUNsQyxDQUFDO0FBbkNELGtDQW1DQztBQU1ELFNBQVMsaUJBQWlCLENBQUUsR0FBVzs7SUFDckMsTUFBTSxHQUFHLEdBQUcsaUVBQWlFLENBQUMsSUFBSSxDQUFDLEdBQUcsQ0FBQyxDQUFDO0lBQ3hGLE9BQU87UUFDTCxPQUFPLFFBQUUsR0FBRyxhQUFILEdBQUcsdUJBQUgsR0FBRyxDQUFFLE1BQU0sMENBQUUsT0FBTztRQUM3QixPQUFPLFFBQUUsR0FBRyxhQUFILEdBQUcsdUJBQUgsR0FBRyxDQUFFLE1BQU0sMENBQUUsT0FBTztRQUM3QixRQUFRLFFBQUUsR0FBRyxhQUFILEdBQUcsdUJBQUgsR0FBRyxDQUFFLE1BQU0sMENBQUUsUUFBUTtLQUNoQyxDQUFDO0FBQ0osQ0FBQztBQUVELFNBQVMsdUJBQXVCLENBQUMsSUFBWTtJQUMzQyxNQUFNLEVBQUMsT0FBTyxFQUFFLE9BQU8sRUFBQyxHQUFHLGlCQUFpQixDQUFDLElBQUksQ0FBQyxDQUFDO0lBRW5ELElBQUksQ0FBQyxPQUFPO1FBQUUsT0FBTyxFQUFFLENBQUM7SUFFeEIsTUFBTSxLQUFLLEdBQUcsT0FBTyxDQUFDLFdBQVcsQ0FBQyxHQUFHLENBQUMsQ0FBQztJQUN2QyxNQUFNLFNBQVMsR0FBRyxPQUFPLENBQUMsU0FBUyxDQUFDLENBQUMsRUFBRSxLQUFLLENBQUMsQ0FBQztJQUM5QyxNQUFNLElBQUksR0FBRyxPQUFPLENBQUMsU0FBUyxDQUFDLEtBQUssR0FBRyxDQUFDLENBQUMsQ0FBQztJQUUxQyxPQUFPLEVBQUMsU0FBUyxFQUFFLElBQUksRUFBRSxPQUFPLEVBQUMsQ0FBQTtBQUNuQyxDQUFDO0FBRUQsdURBQXVEO0FBQ3ZELFNBQWdCLFdBQVcsQ0FBQyxXQUFtQixFQUFFLFFBQWdCO0lBRS9ELHFFQUFxRTtJQUNyRSxNQUFNLE9BQU8sR0FBcUIsRUFBRSxJQUFJLEVBQUUsUUFBUSxFQUFFLEtBQUssRUFBRSxFQUFFLEVBQUUsQ0FBQztJQUNoRSxJQUFJLGNBQUksQ0FBQyxRQUFRLENBQUMsUUFBUSxDQUFDLElBQUksUUFBUTtRQUNyQyxPQUFPLE9BQU8sQ0FBQyxPQUFPLENBQUMsT0FBTyxDQUFDLENBQUM7SUFHbEMsTUFBTSxLQUFLLEdBQUcsV0FBVyxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsQ0FBQztJQUN0QyxLQUFLLElBQUksR0FBRyxHQUFHLENBQUMsRUFBRSxHQUFHLEdBQUcsS0FBSyxDQUFDLE1BQU0sRUFBRSxHQUFHLElBQUksQ0FBQyxFQUFFO1FBRTlDLElBQUksSUFBSSxHQUFHLGNBQWMsQ0FBQyxLQUFLLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQyxDQUFFLGlCQUFpQjtRQUN6RCxJQUFHLENBQUMsSUFBSTtZQUFFLFNBQVE7UUFFbEIsSUFBSSxHQUFHLElBQUksQ0FBQyxPQUFPLENBQUMsU0FBUyxFQUFFLEVBQUUsQ0FBQyxDQUFBO1FBQ2xDLE1BQU0sRUFBQyxTQUFTLEVBQUUsSUFBSSxFQUFFLE9BQU8sRUFBQyxHQUFHLHVCQUF1QixDQUFDLElBQUksQ0FBQyxDQUFBO1FBRWhFLElBQUksQ0FBQyxJQUFJO1lBQUUsU0FBUTtRQUVuQiw0R0FBNEc7UUFDNUcsTUFBTSxVQUFVLEdBQUcsT0FBTyxTQUFTLElBQUksU0FBUyxJQUFJLElBQUksRUFBRSxDQUFBO1FBQzFELE9BQU8sQ0FBQyxLQUFLLENBQUMsSUFBSSxDQUFDLEVBQUMsSUFBSSxFQUFFLFVBQVUsRUFBRSxXQUFXLEVBQUUsT0FBTyxFQUFDLENBQUMsQ0FBQTtLQUM3RDtJQUVELE9BQU8sT0FBTyxDQUFDLE9BQU8sQ0FBQyxPQUFPLENBQUMsQ0FBQztBQUdsQyxDQUFDO0FBM0JELGtDQTJCQyJ9
|
|
@@ -1,183 +0,0 @@
|
|
|
1
|
-
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
2
|
-
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
3
|
-
};
|
|
4
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
|
-
exports.pomParser = void 0;
|
|
6
|
-
const path_1 = __importDefault(require("path"));
|
|
7
|
-
const packageurl_js_1 = require("packageurl-js");
|
|
8
|
-
const PURL_TYPE = 'maven';
|
|
9
|
-
// Parse a pom.txt file from maven manifest file
|
|
10
|
-
// See reference on: https://maven.apache.org/guides/introduction/introduction-to-the-pom.html
|
|
11
|
-
// and https://maven.apache.org/guides/introduction/introduction-to-dependency-mechanism.html
|
|
12
|
-
const MANIFEST_FILE = 'pom.xml';
|
|
13
|
-
function pomParser(fileContent, filePath) {
|
|
14
|
-
// If the file is not a python manifest file, return an empty results
|
|
15
|
-
const results = { file: filePath, purls: [] };
|
|
16
|
-
if (path_1.default.basename(filePath) != MANIFEST_FILE)
|
|
17
|
-
return Promise.resolve(results);
|
|
18
|
-
const dependencies = fileContent.match(/<dependency>((?:.|\n)*?)<\/dependency>/gm);
|
|
19
|
-
if (dependencies) {
|
|
20
|
-
dependencies.forEach(dependency => {
|
|
21
|
-
// Extract groupId. It's the purl namespace
|
|
22
|
-
const groupId = dependency.match(/<groupId>([^<]*)<\/groupId>/);
|
|
23
|
-
const namespace = (groupId && groupId.length >= 1) ? groupId[1] : null;
|
|
24
|
-
// Extract artifact id. It's the purl name
|
|
25
|
-
const artifactId = dependency.match(/<artifactId>([^<]*)<\/artifactId>/);
|
|
26
|
-
const name = (artifactId && artifactId.length >= 1) ? artifactId[1] : null;
|
|
27
|
-
const versionReg = dependency.match(/<version>([^<]*)<\/version>/);
|
|
28
|
-
let version;
|
|
29
|
-
if (versionReg && versionReg.length >= 1)
|
|
30
|
-
version = resolve_version(versionReg[1], fileContent);
|
|
31
|
-
// Extract scope.
|
|
32
|
-
const scopeRes = dependency.match(/<scope>([^<]*)<\/scope>/);
|
|
33
|
-
const scope = (scopeRes && scopeRes.length >= 1) ? scopeRes[1] : null;
|
|
34
|
-
//Detect and extract purl qualifiers
|
|
35
|
-
const classifierRes = dependency.match(/<classifier>([^<]*)<\/classifier>/);
|
|
36
|
-
const classifier = (classifierRes && classifierRes.length >= 1) ? classifierRes[1] : null;
|
|
37
|
-
const typeRes = dependency.match(/<type>([^<]*)<\/type>/);
|
|
38
|
-
const type = (typeRes && typeRes.length >= 1) ? typeRes[1] : null;
|
|
39
|
-
let purlQualifiers;
|
|
40
|
-
if (type || classifier)
|
|
41
|
-
purlQualifiers = Object.assign(Object.assign({}, (type && { type })), (classifier && { classifier }));
|
|
42
|
-
const purlString = new packageurl_js_1.PackageURL(PURL_TYPE, namespace, name, undefined, purlQualifiers, undefined).toString();
|
|
43
|
-
results.purls.push({ purl: purlString, requirement: version, scope: scope });
|
|
44
|
-
});
|
|
45
|
-
}
|
|
46
|
-
//Remove purls duplicated
|
|
47
|
-
const nonDuplicatedResults = removeDuplicated(results);
|
|
48
|
-
return Promise.resolve(nonDuplicatedResults);
|
|
49
|
-
}
|
|
50
|
-
exports.pomParser = pomParser;
|
|
51
|
-
function removeDuplicated(results) {
|
|
52
|
-
const map = {};
|
|
53
|
-
for (let res of results.purls) {
|
|
54
|
-
map[res.purl] = res;
|
|
55
|
-
}
|
|
56
|
-
results.purls = Object.values(map);
|
|
57
|
-
return results;
|
|
58
|
-
}
|
|
59
|
-
function resolve_version(dependency_version, file_content) {
|
|
60
|
-
// See properties: https://maven.apache.org/pom.html#properties
|
|
61
|
-
let version = '';
|
|
62
|
-
if (dependency_version) {
|
|
63
|
-
if (/\${project.version}/.test(dependency_version)) {
|
|
64
|
-
version = extract_content_from_tag(file_content, ['project', 'version']);
|
|
65
|
-
}
|
|
66
|
-
else if (/\${.*?}/.test(dependency_version)) {
|
|
67
|
-
const property = dependency_version.match(/\${(.*?)}/)[1];
|
|
68
|
-
const result = file_content.match(new RegExp(`<${property}>([^<]*)<\/${property}>`));
|
|
69
|
-
if (result && result.length > 0)
|
|
70
|
-
version = result[1];
|
|
71
|
-
}
|
|
72
|
-
else {
|
|
73
|
-
version = dependency_version.toString();
|
|
74
|
-
}
|
|
75
|
-
}
|
|
76
|
-
return version;
|
|
77
|
-
}
|
|
78
|
-
function get_start_tag_name(line) {
|
|
79
|
-
const result = line.match(/\<([\w\-\.]+).*?>/);
|
|
80
|
-
if (result)
|
|
81
|
-
return result[1].trim();
|
|
82
|
-
return '';
|
|
83
|
-
}
|
|
84
|
-
function get_end_tag_name(line) {
|
|
85
|
-
const result = line.match(/\<\/([\w\-\.]+) ?>/);
|
|
86
|
-
if (result)
|
|
87
|
-
return result[1].trim();
|
|
88
|
-
return '';
|
|
89
|
-
}
|
|
90
|
-
function get_end_tag(line) {
|
|
91
|
-
const result = get_end_tag_name(line);
|
|
92
|
-
if (result !== '')
|
|
93
|
-
return `</${result}>`;
|
|
94
|
-
return '';
|
|
95
|
-
}
|
|
96
|
-
function get_start_tag(line) {
|
|
97
|
-
const result = get_start_tag_name(line);
|
|
98
|
-
if (result !== '')
|
|
99
|
-
return `<${result}>`;
|
|
100
|
-
return '';
|
|
101
|
-
}
|
|
102
|
-
function element_match(openTag, closeTag) {
|
|
103
|
-
return get_start_tag_name(openTag) === get_end_tag_name(closeTag);
|
|
104
|
-
}
|
|
105
|
-
function is_element_complete(line) {
|
|
106
|
-
return get_start_tag_name(line) === get_end_tag_name(line);
|
|
107
|
-
}
|
|
108
|
-
function get_offset_until_end_of_tag(lines, end_tag_name) {
|
|
109
|
-
let i = 0;
|
|
110
|
-
for (const line of lines) {
|
|
111
|
-
if (get_end_tag_name(line) === end_tag_name)
|
|
112
|
-
break;
|
|
113
|
-
i += 1;
|
|
114
|
-
}
|
|
115
|
-
return i;
|
|
116
|
-
}
|
|
117
|
-
function remove_comments(lines) {
|
|
118
|
-
for (let i = 0; i < lines.length; i += 1) {
|
|
119
|
-
let openCommentFlag = /<!--/.test(lines[i]);
|
|
120
|
-
let endCommentFlag = /-->/.test(lines[i]);
|
|
121
|
-
if (openCommentFlag && endCommentFlag)
|
|
122
|
-
lines[i] = lines[i].replace(/<!--.*-->/, '');
|
|
123
|
-
else if (openCommentFlag) {
|
|
124
|
-
while (!/-->/.test(lines[i]) && i < lines.length) {
|
|
125
|
-
lines[i] = '';
|
|
126
|
-
i += 1;
|
|
127
|
-
}
|
|
128
|
-
lines[i] = lines[i].replace(/.*-->/, '');
|
|
129
|
-
}
|
|
130
|
-
}
|
|
131
|
-
return lines;
|
|
132
|
-
}
|
|
133
|
-
function extract_content_from_tag(file_content, selector) {
|
|
134
|
-
let lines = file_content.split('\n');
|
|
135
|
-
const stack = [];
|
|
136
|
-
let selectorIndex = 0;
|
|
137
|
-
let startTagName = '';
|
|
138
|
-
let endTagName = '';
|
|
139
|
-
let content = '';
|
|
140
|
-
// Sanitize xml: Removes comments
|
|
141
|
-
lines = remove_comments(lines);
|
|
142
|
-
for (let i = 0; i < lines.length; i += 1) {
|
|
143
|
-
let line = lines[i].trim();
|
|
144
|
-
if (line === '')
|
|
145
|
-
continue;
|
|
146
|
-
startTagName = get_start_tag_name(line);
|
|
147
|
-
endTagName = get_end_tag_name(line);
|
|
148
|
-
// Element complete in the same line and different than my selector
|
|
149
|
-
if (selector[selectorIndex] !== startTagName && is_element_complete(line))
|
|
150
|
-
continue;
|
|
151
|
-
// Element spans multiline and is different than my selector
|
|
152
|
-
// Loop until find corresponding end tag
|
|
153
|
-
if (selector[selectorIndex] !== startTagName) {
|
|
154
|
-
i += 1;
|
|
155
|
-
while (i < lines.length && !element_match(line, lines[i]))
|
|
156
|
-
i += 1;
|
|
157
|
-
continue;
|
|
158
|
-
}
|
|
159
|
-
// lines[i] points to the opening tag of the current selector[selectorIndex]
|
|
160
|
-
selectorIndex += 1;
|
|
161
|
-
stack.push(startTagName);
|
|
162
|
-
// Target reached
|
|
163
|
-
if (selector.length === stack.length) {
|
|
164
|
-
// Target has only one line
|
|
165
|
-
if (is_element_complete(line)) {
|
|
166
|
-
line = line.replace(get_end_tag(line), '');
|
|
167
|
-
line = line.replace(get_start_tag(line), '');
|
|
168
|
-
return line;
|
|
169
|
-
}
|
|
170
|
-
// Extracts everything beetwen opening and closing tag and return.
|
|
171
|
-
i += 1;
|
|
172
|
-
while (i < lines.length && !element_match(line, lines[i])) {
|
|
173
|
-
content += lines[i].trim();
|
|
174
|
-
i += 1;
|
|
175
|
-
}
|
|
176
|
-
return content;
|
|
177
|
-
}
|
|
178
|
-
startTagName = '';
|
|
179
|
-
endTagName = '';
|
|
180
|
-
}
|
|
181
|
-
return '';
|
|
182
|
-
}
|
|
183
|
-
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,13 +0,0 @@
|
|
|
1
|
-
import { ILocalDependency } from "../DependencyTypes";
|
|
2
|
-
export declare function packageParser(fileContent: string, filePath: string): Promise<ILocalDependency>;
|
|
3
|
-
export declare function packagelockParser(fileContent: string, filePath: string): Promise<ILocalDependency>;
|
|
4
|
-
export declare function yarnLockParser(fileContent: string, filePath: string): Promise<ILocalDependency>;
|
|
5
|
-
declare enum YarnLockVersionEnum {
|
|
6
|
-
"V1" = 0,
|
|
7
|
-
"V2" = 1,
|
|
8
|
-
UnknownYarnLockFormat = 2
|
|
9
|
-
}
|
|
10
|
-
export declare function yarnLockRecognizeVersion(fileContent: string): YarnLockVersionEnum;
|
|
11
|
-
export declare function yarnLockV1Parser(fileContent: string, filePath: string): Promise<ILocalDependency>;
|
|
12
|
-
export declare function yarnLockV2Parser(fileContent: string, filePath: string): Promise<ILocalDependency>;
|
|
13
|
-
export {};
|
|
@@ -1,187 +0,0 @@
|
|
|
1
|
-
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
2
|
-
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
3
|
-
};
|
|
4
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
|
-
exports.yarnLockV2Parser = exports.yarnLockV1Parser = exports.yarnLockRecognizeVersion = exports.yarnLockParser = exports.packagelockParser = exports.packageParser = void 0;
|
|
6
|
-
const path_1 = __importDefault(require("path"));
|
|
7
|
-
const packageurl_js_1 = require("packageurl-js");
|
|
8
|
-
const PURL_TYPE = 'npm';
|
|
9
|
-
// Parse a package.json file from node projects
|
|
10
|
-
// See reference on: https://docs.npmjs.com/cli/v8/configuring-npm/package-json
|
|
11
|
-
const MANIFEST_FILE = 'package.json';
|
|
12
|
-
function packageParser(fileContent, filePath) {
|
|
13
|
-
// If the file is not manifest file, return an empty results
|
|
14
|
-
const results = { file: filePath, purls: [] };
|
|
15
|
-
if (path_1.default.basename(filePath) != MANIFEST_FILE)
|
|
16
|
-
return Promise.resolve(results);
|
|
17
|
-
const o = JSON.parse(fileContent);
|
|
18
|
-
let devDeps = Object.keys(o.devDependencies || {});
|
|
19
|
-
let deps = Object.keys(o.dependencies || {});
|
|
20
|
-
for (const name of deps) {
|
|
21
|
-
const purlString = new packageurl_js_1.PackageURL(PURL_TYPE, undefined, name, undefined, undefined, undefined).toString();
|
|
22
|
-
results.purls.push({ purl: purlString, scope: "dependencies", requirement: o.dependencies[name] });
|
|
23
|
-
}
|
|
24
|
-
for (const name of devDeps) {
|
|
25
|
-
const purlString = new packageurl_js_1.PackageURL(PURL_TYPE, undefined, name, undefined, undefined, undefined).toString();
|
|
26
|
-
results.purls.push({ purl: purlString, scope: "devDependencies", requirement: o.devDependencies[name] });
|
|
27
|
-
}
|
|
28
|
-
return Promise.resolve(results);
|
|
29
|
-
}
|
|
30
|
-
exports.packageParser = packageParser;
|
|
31
|
-
// Parse a package-lock.json file from node projects
|
|
32
|
-
// See reference on: https://docs.npmjs.com/cli/v8/configuring-npm/package-json
|
|
33
|
-
function packagelockParser(fileContent, filePath) {
|
|
34
|
-
var _a;
|
|
35
|
-
const results = { file: filePath, purls: [] };
|
|
36
|
-
if (path_1.default.basename(filePath) != 'package-lock.json')
|
|
37
|
-
return Promise.resolve(results);
|
|
38
|
-
const packages = (_a = JSON.parse(fileContent)) === null || _a === void 0 ? void 0 : _a.packages;
|
|
39
|
-
if (!packages)
|
|
40
|
-
return Promise.resolve(results);
|
|
41
|
-
for (const [key, value] of Object.entries(packages)) {
|
|
42
|
-
if (!key)
|
|
43
|
-
continue;
|
|
44
|
-
const keySplit = key.split("/");
|
|
45
|
-
const depName = keySplit[keySplit.length - 1];
|
|
46
|
-
let purl = new packageurl_js_1.PackageURL(PURL_TYPE, undefined, depName, undefined, undefined, undefined).toString();
|
|
47
|
-
let req = value['version'];
|
|
48
|
-
results.purls.push({ purl: purl, requirement: req });
|
|
49
|
-
}
|
|
50
|
-
return Promise.resolve(results);
|
|
51
|
-
}
|
|
52
|
-
exports.packagelockParser = packagelockParser;
|
|
53
|
-
function yarnLockParser(fileContent, filePath) {
|
|
54
|
-
const results = { file: filePath, purls: [] };
|
|
55
|
-
if (path_1.default.basename(filePath) != 'yarn.lock')
|
|
56
|
-
return Promise.resolve(results);
|
|
57
|
-
const yarnVersion = yarnLockRecognizeVersion(fileContent);
|
|
58
|
-
if (yarnVersion === YarnLockVersionEnum.V1)
|
|
59
|
-
return yarnLockV1Parser(fileContent, filePath);
|
|
60
|
-
else if (yarnVersion === YarnLockVersionEnum.V2)
|
|
61
|
-
return yarnLockV2Parser(fileContent, filePath);
|
|
62
|
-
return Promise.resolve(results);
|
|
63
|
-
}
|
|
64
|
-
exports.yarnLockParser = yarnLockParser;
|
|
65
|
-
var YarnLockVersionEnum;
|
|
66
|
-
(function (YarnLockVersionEnum) {
|
|
67
|
-
YarnLockVersionEnum[YarnLockVersionEnum["V1"] = 0] = "V1";
|
|
68
|
-
YarnLockVersionEnum[YarnLockVersionEnum["V2"] = 1] = "V2";
|
|
69
|
-
YarnLockVersionEnum[YarnLockVersionEnum["UnknownYarnLockFormat"] = 2] = "UnknownYarnLockFormat";
|
|
70
|
-
})(YarnLockVersionEnum || (YarnLockVersionEnum = {}));
|
|
71
|
-
/*
|
|
72
|
-
The start of v1 file has this:
|
|
73
|
-
# THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
|
|
74
|
-
# yarn lockfile v1
|
|
75
|
-
|
|
76
|
-
The start of v2 file has this:
|
|
77
|
-
# This file is generated by running "yarn install" inside your project.
|
|
78
|
-
# Manual changes might be lost - proceed with caution!
|
|
79
|
-
|
|
80
|
-
__metadata:
|
|
81
|
-
*/
|
|
82
|
-
function yarnLockRecognizeVersion(fileContent) {
|
|
83
|
-
const yarn = fileContent.split("\n", 10); //Check only the first 10 lines;
|
|
84
|
-
for (const line of yarn) {
|
|
85
|
-
if (line.includes('__metadata:'))
|
|
86
|
-
return YarnLockVersionEnum.V2;
|
|
87
|
-
if (line.includes('yarn lockfile v1'))
|
|
88
|
-
return YarnLockVersionEnum.V1;
|
|
89
|
-
}
|
|
90
|
-
return YarnLockVersionEnum.UnknownYarnLockFormat;
|
|
91
|
-
}
|
|
92
|
-
exports.yarnLockRecognizeVersion = yarnLockRecognizeVersion;
|
|
93
|
-
function yarnLockV1Parser(fileContent, filePath) {
|
|
94
|
-
const results = { file: filePath, purls: [] };
|
|
95
|
-
//Yield an array with each element is a dependency
|
|
96
|
-
/*
|
|
97
|
-
"@babel/core@^7.1.0", "@babel/core@^7.3.4":
|
|
98
|
-
version "7.3.4"
|
|
99
|
-
resolved "https://registry.yarnpkg.com/@babel/core/-/core-7.3.4.tgz#921a5a13746c21e32445bf0798680e9d11a6530b"
|
|
100
|
-
integrity sha512-jRsuseXBo9pN197KnDwhhaaBzyZr2oIcLHHTt2oDdQrej5Qp57dCCJafWx5ivU8/alEYDpssYqv1MUqcxwQlrA==
|
|
101
|
-
dependencies:
|
|
102
|
-
"@babel/code-frame" "^7.0.0"
|
|
103
|
-
"@babel/generator" "^7.3.4"
|
|
104
|
-
*/
|
|
105
|
-
const yl_dependencies = fileContent.split("\n\n");
|
|
106
|
-
for (const yl_dependency of yl_dependencies) {
|
|
107
|
-
const dependencyData = {};
|
|
108
|
-
const topRequirements = [];
|
|
109
|
-
const dep_lines = yl_dependency.split("\n");
|
|
110
|
-
if (dep_lines.every((line) => line.trim().startsWith("#") == true))
|
|
111
|
-
continue; //All lines are coments
|
|
112
|
-
if (dep_lines.every((line) => line.trim() == ""))
|
|
113
|
-
continue; //All lines are empty lines
|
|
114
|
-
for (const dep_line of dep_lines) {
|
|
115
|
-
// Clean comments and empty lines
|
|
116
|
-
const trimmed = dep_line.trim();
|
|
117
|
-
const comment = trimmed.startsWith('#');
|
|
118
|
-
if (!trimmed || comment)
|
|
119
|
-
continue;
|
|
120
|
-
// Do nothing with it's own dependencies
|
|
121
|
-
// "@babel/code-frame" "^7.0.0"
|
|
122
|
-
// "@babel/generator" "^7.3.4"
|
|
123
|
-
if (dep_line.startsWith(' '.repeat(4))) { }
|
|
124
|
-
// version "7.3.4"
|
|
125
|
-
// resolved "https://registry.yarnpkg.com/@babel/core/-/core-7.3.4.tgz#921a5a13746c21e32445bf0798680e9d11a6530b"
|
|
126
|
-
// integrity sha512-jRsuseXBo9pN197KnDwhhaaBzyZr2oIcLHHTt2oDdQrej5Qp57dCCJafWx5ivU8/alEYDpssYqv1MUqcxwQlrA==
|
|
127
|
-
// dependencies:
|
|
128
|
-
else if (dep_line.startsWith(' '.repeat(2))) {
|
|
129
|
-
const dep = trimmed.split(" ");
|
|
130
|
-
const key = dep[0].trim();
|
|
131
|
-
if (key !== "dependencies:" && key !== "optionalDependencies:") {
|
|
132
|
-
dependencyData[key] = dep[1].replace(/\"|\'/g, "");
|
|
133
|
-
}
|
|
134
|
-
}
|
|
135
|
-
// the first line of a dependency has the name and requirements
|
|
136
|
-
//"@babel/core@^7.1.0", "@babel/core@^7.3.4":
|
|
137
|
-
else if (!dep_line.startsWith(' ')) {
|
|
138
|
-
const dep = dep_line.replace(/:/g, "").split(",");
|
|
139
|
-
const requirements = dep.map(line => line.trim().replace(/"|'/g, ""));
|
|
140
|
-
for (const req of requirements) {
|
|
141
|
-
const atIndex = req.lastIndexOf("@");
|
|
142
|
-
let constraint = req.slice(atIndex + 1); // gets ^7.1.0
|
|
143
|
-
constraint = constraint.replace(/"|'/g, "");
|
|
144
|
-
const ns_name = req.slice(0, atIndex);
|
|
145
|
-
let ns = '';
|
|
146
|
-
let name = ns_name;
|
|
147
|
-
if (ns_name.includes("/")) {
|
|
148
|
-
const slashIndex = req.lastIndexOf("/");
|
|
149
|
-
ns = ns_name.slice(0, slashIndex);
|
|
150
|
-
name = ns_name.slice(slashIndex + 1);
|
|
151
|
-
}
|
|
152
|
-
topRequirements.push({ constraint: constraint, ns: ns, name: name });
|
|
153
|
-
}
|
|
154
|
-
}
|
|
155
|
-
}
|
|
156
|
-
//Make sure that name and namespace are equal for the same dependency
|
|
157
|
-
const isNsNameEqual = topRequirements.every((topRequirement) => {
|
|
158
|
-
return topRequirement.ns === topRequirements[0].ns && topRequirement.name === topRequirements[0].name;
|
|
159
|
-
});
|
|
160
|
-
if (!isNsNameEqual) {
|
|
161
|
-
console.error("Different names for same dependency is not supported");
|
|
162
|
-
continue;
|
|
163
|
-
}
|
|
164
|
-
const topRequirement = topRequirements[0];
|
|
165
|
-
const namespace = topRequirement.ns;
|
|
166
|
-
const name = topRequirement.name;
|
|
167
|
-
const version = dependencyData['version'];
|
|
168
|
-
const purl = new packageurl_js_1.PackageURL(PURL_TYPE, namespace, name, version, undefined, undefined).toString();
|
|
169
|
-
let requirement = '';
|
|
170
|
-
for (const topRequirement of topRequirements) {
|
|
171
|
-
requirement += topRequirement.constraint + ", ";
|
|
172
|
-
}
|
|
173
|
-
if (requirement.endsWith(", ")) {
|
|
174
|
-
requirement = requirement.slice(0, requirement.length - 2);
|
|
175
|
-
}
|
|
176
|
-
results.purls.push({ purl: purl, requirement: requirement });
|
|
177
|
-
}
|
|
178
|
-
return Promise.resolve(results);
|
|
179
|
-
}
|
|
180
|
-
exports.yarnLockV1Parser = yarnLockV1Parser;
|
|
181
|
-
//TODO: Implement yarn lock V2 parser
|
|
182
|
-
function yarnLockV2Parser(fileContent, filePath) {
|
|
183
|
-
const results = { file: filePath, purls: [] };
|
|
184
|
-
return Promise.resolve(results);
|
|
185
|
-
}
|
|
186
|
-
exports.yarnLockV2Parser = yarnLockV2Parser;
|
|
187
|
-
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibnBtUGFyc2VyLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vLi4vLi4vLi4vc3JjL3Nkay9EZXBlbmRlbmNpZXMvTG9jYWxEZXBlbmRlbmN5L3BhcnNlcnMvbnBtUGFyc2VyLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7O0FBQUEsZ0RBQXdCO0FBQ3hCLGlEQUEyQztBQUczQyxNQUFNLFNBQVMsR0FBRyxLQUFLLENBQUM7QUFHeEIsK0NBQStDO0FBQy9DLCtFQUErRTtBQUMvRSxNQUFNLGFBQWEsR0FBRyxjQUFjLENBQUM7QUFDckMsU0FBZ0IsYUFBYSxDQUFDLFdBQW1CLEVBQUUsUUFBZ0I7SUFDL0QsNERBQTREO0lBQzVELE1BQU0sT0FBTyxHQUFxQixFQUFDLElBQUksRUFBRSxRQUFRLEVBQUUsS0FBSyxFQUFFLEVBQUUsRUFBQyxDQUFDO0lBQzlELElBQUcsY0FBSSxDQUFDLFFBQVEsQ0FBQyxRQUFRLENBQUMsSUFBSSxhQUFhO1FBQ3pDLE9BQU8sT0FBTyxDQUFDLE9BQU8sQ0FBQyxPQUFPLENBQUMsQ0FBQztJQUVsQyxNQUFNLENBQUMsR0FBRyxJQUFJLENBQUMsS0FBSyxDQUFDLFdBQVcsQ0FBQyxDQUFDO0lBQ2xDLElBQUksT0FBTyxHQUFHLE1BQU0sQ0FBQyxJQUFJLENBQUMsQ0FBQyxDQUFDLGVBQWUsSUFBSSxFQUFFLENBQUMsQ0FBQztJQUNuRCxJQUFJLElBQUksR0FBRyxNQUFNLENBQUMsSUFBSSxDQUFDLENBQUMsQ0FBQyxZQUFZLElBQUksRUFBRSxDQUFDLENBQUM7SUFFN0MsS0FBSSxNQUFNLElBQUksSUFBSSxJQUFJLEVBQUM7UUFDbkIsTUFBTSxVQUFVLEdBQUcsSUFBSSwwQkFBVSxDQUFDLFNBQVMsRUFBRSxTQUFTLEVBQUUsSUFBSSxFQUFFLFNBQVMsRUFBRSxTQUFTLEVBQUUsU0FBUyxDQUFDLENBQUMsUUFBUSxFQUFFLENBQUM7UUFDMUcsT0FBTyxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsRUFBQyxJQUFJLEVBQUUsVUFBVSxFQUFFLEtBQUssRUFBRSxjQUFjLEVBQUUsV0FBVyxFQUFFLENBQUMsQ0FBQyxZQUFZLENBQUMsSUFBSSxDQUFDLEVBQUMsQ0FBQyxDQUFDO0tBQ3BHO0lBRUQsS0FBSSxNQUFNLElBQUksSUFBSSxPQUFPLEVBQUM7UUFDeEIsTUFBTSxVQUFVLEdBQUcsSUFBSSwwQkFBVSxDQUFDLFNBQVMsRUFBRSxTQUFTLEVBQUUsSUFBSSxFQUFFLFNBQVMsRUFBRSxTQUFTLEVBQUUsU0FBUyxDQUFDLENBQUMsUUFBUSxFQUFFLENBQUM7UUFDMUcsT0FBTyxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsRUFBQyxJQUFJLEVBQUUsVUFBVSxFQUFFLEtBQUssRUFBRSxpQkFBaUIsRUFBRSxXQUFXLEVBQUUsQ0FBQyxDQUFDLGVBQWUsQ0FBQyxJQUFJLENBQUMsRUFBQyxDQUFDLENBQUM7S0FDeEc7SUFFRCxPQUFPLE9BQU8sQ0FBQyxPQUFPLENBQUMsT0FBTyxDQUFDLENBQUM7QUFDcEMsQ0FBQztBQXJCRCxzQ0FxQkM7QUFHRCxvREFBb0Q7QUFDcEQsK0VBQStFO0FBQy9FLFNBQWdCLGlCQUFpQixDQUFDLFdBQW1CLEVBQUUsUUFBZ0I7O0lBRW5FLE1BQU0sT0FBTyxHQUFxQixFQUFDLElBQUksRUFBRSxRQUFRLEVBQUUsS0FBSyxFQUFFLEVBQUUsRUFBQyxDQUFDO0lBRTlELElBQUcsY0FBSSxDQUFDLFFBQVEsQ0FBQyxRQUFRLENBQUMsSUFBSSxtQkFBbUI7UUFDL0MsT0FBTyxPQUFPLENBQUMsT0FBTyxDQUFDLE9BQU8sQ0FBQyxDQUFDO0lBRWxDLE1BQU0sUUFBUSxTQUFHLElBQUksQ0FBQyxLQUFLLENBQUMsV0FBVyxDQUFDLDBDQUFFLFFBQVEsQ0FBQztJQUVuRCxJQUFHLENBQUMsUUFBUTtRQUFFLE9BQU8sT0FBTyxDQUFDLE9BQU8sQ0FBQyxPQUFPLENBQUMsQ0FBQztJQUU5QyxLQUFLLE1BQU0sQ0FBQyxHQUFHLEVBQUUsS0FBSyxDQUFDLElBQUksTUFBTSxDQUFDLE9BQU8sQ0FBQyxRQUFRLENBQUMsRUFBRTtRQUNqRCxJQUFHLENBQUMsR0FBRztZQUFFLFNBQVM7UUFFbEIsTUFBTSxRQUFRLEdBQUcsR0FBRyxDQUFDLEtBQUssQ0FBQyxHQUFHLENBQUMsQ0FBQTtRQUMvQixNQUFNLE9BQU8sR0FBRyxRQUFRLENBQUMsUUFBUSxDQUFDLE1BQU0sR0FBQyxDQUFDLENBQUMsQ0FBQTtRQUUzQyxJQUFJLElBQUksR0FBRyxJQUFJLDBCQUFVLENBQUMsU0FBUyxFQUFFLFNBQVMsRUFBRSxPQUFPLEVBQUMsU0FBUyxFQUFFLFNBQVMsRUFBRSxTQUFTLENBQUMsQ0FBQyxRQUFRLEVBQUUsQ0FBQztRQUNwRyxJQUFJLEdBQUcsR0FBRyxLQUFLLENBQUMsU0FBUyxDQUFDLENBQUM7UUFDM0IsT0FBTyxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsRUFBQyxJQUFJLEVBQUUsSUFBSSxFQUFFLFdBQVcsRUFBRSxHQUFHLEVBQUMsQ0FBQyxDQUFDO0tBQ3REO0lBRUQsT0FBTyxPQUFPLENBQUMsT0FBTyxDQUFDLE9BQU8sQ0FBQyxDQUFDO0FBQ3BDLENBQUM7QUF2QkQsOENBdUJDO0FBSUQsU0FBZ0IsY0FBYyxDQUFDLFdBQW1CLEVBQUUsUUFBZ0I7SUFDbEUsTUFBTSxPQUFPLEdBQXFCLEVBQUMsSUFBSSxFQUFFLFFBQVEsRUFBRSxLQUFLLEVBQUUsRUFBRSxFQUFDLENBQUM7SUFFOUQsSUFBRyxjQUFJLENBQUMsUUFBUSxDQUFDLFFBQVEsQ0FBQyxJQUFJLFdBQVc7UUFDdkMsT0FBTyxPQUFPLENBQUMsT0FBTyxDQUFDLE9BQU8sQ0FBQyxDQUFDO0lBRWxDLE1BQU0sV0FBVyxHQUFHLHdCQUF3QixDQUFDLFdBQVcsQ0FBQyxDQUFBO0lBQ3pELElBQUksV0FBVyxLQUFLLG1CQUFtQixDQUFDLEVBQUU7UUFBRSxPQUFPLGdCQUFnQixDQUFDLFdBQVcsRUFBRSxRQUFRLENBQUMsQ0FBQTtTQUNyRixJQUFJLFdBQVcsS0FBSyxtQkFBbUIsQ0FBQyxFQUFFO1FBQUUsT0FBTyxnQkFBZ0IsQ0FBQyxXQUFXLEVBQUUsUUFBUSxDQUFDLENBQUE7SUFFL0YsT0FBTyxPQUFPLENBQUMsT0FBTyxDQUFDLE9BQU8sQ0FBQyxDQUFDO0FBQ2xDLENBQUM7QUFYRCx3Q0FXQztBQUVELElBQUssbUJBSUo7QUFKRCxXQUFLLG1CQUFtQjtJQUN0Qix5REFBSSxDQUFBO0lBQ0oseURBQUksQ0FBQTtJQUNKLCtGQUFxQixDQUFBO0FBQ3ZCLENBQUMsRUFKSSxtQkFBbUIsS0FBbkIsbUJBQW1CLFFBSXZCO0FBRUQ7Ozs7Ozs7Ozs7R0FVRztBQUNILFNBQWdCLHdCQUF3QixDQUFDLFdBQW1CO0lBRTFELE1BQU0sSUFBSSxHQUFHLFdBQVcsQ0FBQyxLQUFLLENBQUMsSUFBSSxFQUFFLEVBQUUsQ0FBQyxDQUFBLENBQUMsZ0NBQWdDO0lBQ3pFLEtBQUssTUFBTSxJQUFJLElBQUksSUFBSSxFQUFFO1FBQ3ZCLElBQUssSUFBSSxDQUFDLFFBQVEsQ0FBQyxhQUFhLENBQUM7WUFBRyxPQUFPLG1CQUFtQixDQUFDLEVBQUUsQ0FBQTtRQUNqRSxJQUFLLElBQUksQ0FBQyxRQUFRLENBQUMsa0JBQWtCLENBQUM7WUFBRyxPQUFPLG1CQUFtQixDQUFDLEVBQUUsQ0FBQTtLQUN2RTtJQUNELE9BQU8sbUJBQW1CLENBQUMscUJBQXFCLENBQUE7QUFDbEQsQ0FBQztBQVJELDREQVFDO0FBRUQsU0FBZ0IsZ0JBQWdCLENBQUMsV0FBbUIsRUFBRSxRQUFnQjtJQUVwRSxNQUFNLE9BQU8sR0FBcUIsRUFBQyxJQUFJLEVBQUUsUUFBUSxFQUFFLEtBQUssRUFBRSxFQUFFLEVBQUMsQ0FBQztJQUU5RCxrREFBa0Q7SUFDbEQ7Ozs7Ozs7O09BUUc7SUFDSCxNQUFNLGVBQWUsR0FBRyxXQUFXLENBQUMsS0FBSyxDQUFDLE1BQU0sQ0FBQyxDQUFDO0lBRWxELEtBQUssTUFBTSxhQUFhLElBQUksZUFBZSxFQUFFO1FBSTNDLE1BQU0sY0FBYyxHQUEyQixFQUFFLENBQUE7UUFDakQsTUFBTSxlQUFlLEdBQUcsRUFBRSxDQUFDO1FBRTNCLE1BQU0sU0FBUyxHQUFHLGFBQWEsQ0FBQyxLQUFLLENBQUMsSUFBSSxDQUFDLENBQUM7UUFDNUMsSUFBSSxTQUFTLENBQUMsS0FBSyxDQUFDLENBQUMsSUFBSSxFQUFFLEVBQUUsQ0FBRSxJQUFJLENBQUMsSUFBSSxFQUFFLENBQUMsVUFBVSxDQUFDLEdBQUcsQ0FBQyxJQUFJLElBQUksQ0FBQztZQUFFLFNBQVEsQ0FBQyx1QkFBdUI7UUFDckcsSUFBSSxTQUFTLENBQUMsS0FBSyxDQUFDLENBQUMsSUFBSSxFQUFFLEVBQUUsQ0FBRSxJQUFJLENBQUMsSUFBSSxFQUFFLElBQUksRUFBRSxDQUFDO1lBQUUsU0FBUSxDQUFFLDJCQUEyQjtRQUV4RixLQUFLLE1BQU0sUUFBUSxJQUFJLFNBQVMsRUFBRTtZQUVoQyxpQ0FBaUM7WUFDakMsTUFBTSxPQUFPLEdBQUcsUUFBUSxDQUFDLElBQUksRUFBRSxDQUFDO1lBQ2hDLE1BQU0sT0FBTyxHQUFHLE9BQU8sQ0FBQyxVQUFVLENBQUMsR0FBRyxDQUFDLENBQUM7WUFDeEMsSUFBSSxDQUFDLE9BQU8sSUFBSSxPQUFPO2dCQUFFLFNBQVE7WUFFakMsd0NBQXdDO1lBQ3hDLGtDQUFrQztZQUNsQyxpQ0FBaUM7WUFDakMsSUFBSSxRQUFRLENBQUMsVUFBVSxDQUFDLEdBQUcsQ0FBQyxNQUFNLENBQUMsQ0FBQyxDQUFDLENBQUMsRUFBRSxHQUFFO1lBRTFDLG1CQUFtQjtZQUNuQixpSEFBaUg7WUFDakgsNkdBQTZHO1lBQzdHLGlCQUFpQjtpQkFDWixJQUFJLFFBQVEsQ0FBQyxVQUFVLENBQUMsR0FBRyxDQUFDLE1BQU0sQ0FBQyxDQUFDLENBQUMsQ0FBQyxFQUFFO2dCQUMzQyxNQUFNLEdBQUcsR0FBRyxPQUFPLENBQUMsS0FBSyxDQUFDLEdBQUcsQ0FBQyxDQUFBO2dCQUM5QixNQUFNLEdBQUcsR0FBRyxHQUFHLENBQUMsQ0FBQyxDQUFDLENBQUMsSUFBSSxFQUFFLENBQUM7Z0JBQzFCLElBQUksR0FBRyxLQUFLLGVBQWUsSUFBSSxHQUFHLEtBQUcsdUJBQXVCLEVBQUU7b0JBQzVELGNBQWMsQ0FBQyxHQUFHLENBQUMsR0FBRyxHQUFHLENBQUMsQ0FBQyxDQUFDLENBQUMsT0FBTyxDQUFDLFFBQVEsRUFBRSxFQUFFLENBQUMsQ0FBQztpQkFDcEQ7YUFDRjtZQUVELCtEQUErRDtZQUMvRCw2Q0FBNkM7aUJBQ3hDLElBQUksQ0FBQyxRQUFRLENBQUMsVUFBVSxDQUFDLEdBQUcsQ0FBQyxFQUFDO2dCQUNqQyxNQUFNLEdBQUcsR0FBRyxRQUFRLENBQUMsT0FBTyxDQUFDLElBQUksRUFBRSxFQUFFLENBQUMsQ0FBQyxLQUFLLENBQUMsR0FBRyxDQUFDLENBQUM7Z0JBQ2xELE1BQU0sWUFBWSxHQUFHLEdBQUcsQ0FBQyxHQUFHLENBQUMsSUFBSSxDQUFDLEVBQUUsQ0FBQyxJQUFJLENBQUMsSUFBSSxFQUFFLENBQUMsT0FBTyxDQUFDLE1BQU0sRUFBRSxFQUFFLENBQUMsQ0FBQyxDQUFDO2dCQUV0RSxLQUFLLE1BQU0sR0FBRyxJQUFJLFlBQVksRUFBRTtvQkFFOUIsTUFBTSxPQUFPLEdBQUcsR0FBRyxDQUFDLFdBQVcsQ0FBQyxHQUFHLENBQUMsQ0FBQTtvQkFFcEMsSUFBSSxVQUFVLEdBQUcsR0FBRyxDQUFDLEtBQUssQ0FBQyxPQUFPLEdBQUMsQ0FBQyxDQUFDLENBQUEsQ0FBRSxjQUFjO29CQUNyRCxVQUFVLEdBQUcsVUFBVSxDQUFDLE9BQU8sQ0FBQyxNQUFNLEVBQUUsRUFBRSxDQUFDLENBQUM7b0JBRTVDLE1BQU0sT0FBTyxHQUFHLEdBQUcsQ0FBQyxLQUFLLENBQUMsQ0FBQyxFQUFFLE9BQU8sQ0FBQyxDQUFBO29CQUVyQyxJQUFJLEVBQUUsR0FBRyxFQUFFLENBQUM7b0JBQ1osSUFBSSxJQUFJLEdBQUcsT0FBTyxDQUFDO29CQUNuQixJQUFJLE9BQU8sQ0FBQyxRQUFRLENBQUMsR0FBRyxDQUFDLEVBQUU7d0JBQ3pCLE1BQU0sVUFBVSxHQUFHLEdBQUcsQ0FBQyxXQUFXLENBQUMsR0FBRyxDQUFDLENBQUE7d0JBQ3ZDLEVBQUUsR0FBRyxPQUFPLENBQUMsS0FBSyxDQUFDLENBQUMsRUFBQyxVQUFVLENBQUMsQ0FBQzt3QkFDakMsSUFBSSxHQUFHLE9BQU8sQ0FBQyxLQUFLLENBQUMsVUFBVSxHQUFDLENBQUMsQ0FBQyxDQUFBO3FCQUNuQztvQkFFRCxlQUFlLENBQUMsSUFBSSxDQUFDLEVBQUMsVUFBVSxFQUFFLFVBQVUsRUFBRSxFQUFFLEVBQUUsRUFBRSxFQUFFLElBQUksRUFBRSxJQUFJLEVBQUUsQ0FBQyxDQUFDO2lCQUNyRTthQUVGO1NBR0Y7UUFFRCxxRUFBcUU7UUFDckUsTUFBTSxhQUFhLEdBQUcsZUFBZSxDQUFDLEtBQUssQ0FBQyxDQUFDLGNBQWMsRUFBRSxFQUFFO1lBQzdELE9BQU8sY0FBYyxDQUFDLEVBQUUsS0FBSyxlQUFlLENBQUMsQ0FBQyxDQUFDLENBQUMsRUFBRSxJQUFJLGNBQWMsQ0FBQyxJQUFJLEtBQUssZUFBZSxDQUFDLENBQUMsQ0FBQyxDQUFDLElBQUksQ0FBQTtRQUN2RyxDQUFDLENBQUMsQ0FBQztRQUVILElBQUksQ0FBQyxhQUFhLEVBQUU7WUFDbEIsT0FBTyxDQUFDLEtBQUssQ0FBQyxzREFBc0QsQ0FBQyxDQUFBO1lBQ3JFLFNBQVE7U0FDVDtRQUNELE1BQU0sY0FBYyxHQUFHLGVBQWUsQ0FBQyxDQUFDLENBQUMsQ0FBQztRQUMxQyxNQUFNLFNBQVMsR0FBRyxjQUFjLENBQUMsRUFBRSxDQUFDO1FBQ3BDLE1BQU0sSUFBSSxHQUFHLGNBQWMsQ0FBQyxJQUFJLENBQUM7UUFDakMsTUFBTSxPQUFPLEdBQUcsY0FBYyxDQUFDLFNBQVMsQ0FBQyxDQUFDO1FBQzFDLE1BQU0sSUFBSSxHQUFHLElBQUksMEJBQVUsQ0FBQyxTQUFTLEVBQUUsU0FBUyxFQUFFLElBQUksRUFBRSxPQUFPLEVBQUUsU0FBUyxFQUFFLFNBQVMsQ0FBQyxDQUFDLFFBQVEsRUFBRSxDQUFBO1FBRWpHLElBQUksV0FBVyxHQUFHLEVBQUUsQ0FBQTtRQUNwQixLQUFLLE1BQU0sY0FBYyxJQUFJLGVBQWUsRUFBRTtZQUM1QyxXQUFXLElBQUksY0FBYyxDQUFDLFVBQVUsR0FBRyxJQUFJLENBQUE7U0FDaEQ7UUFDRCxJQUFJLFdBQVcsQ0FBQyxRQUFRLENBQUMsSUFBSSxDQUFDLEVBQUU7WUFDOUIsV0FBVyxHQUFHLFdBQVcsQ0FBQyxLQUFLLENBQUMsQ0FBQyxFQUFFLFdBQVcsQ0FBQyxNQUFNLEdBQUMsQ0FBQyxDQUFDLENBQUE7U0FDekQ7UUFFRCxPQUFPLENBQUMsS0FBSyxDQUFDLElBQUksQ0FBQyxFQUFDLElBQUksRUFBRSxJQUFJLEVBQUUsV0FBVyxFQUFFLFdBQVcsRUFBQyxDQUFDLENBQUE7S0FFM0Q7SUFHRCxPQUFPLE9BQU8sQ0FBQyxPQUFPLENBQUMsT0FBTyxDQUFDLENBQUM7QUFFbEMsQ0FBQztBQWhIRCw0Q0FnSEM7QUFHRCxxQ0FBcUM7QUFDckMsU0FBZ0IsZ0JBQWdCLENBQUMsV0FBbUIsRUFBRSxRQUFnQjtJQUVwRSxNQUFNLE9BQU8sR0FBcUIsRUFBQyxJQUFJLEVBQUUsUUFBUSxFQUFFLEtBQUssRUFBRSxFQUFFLEVBQUMsQ0FBQztJQUc5RCxPQUFPLE9BQU8sQ0FBQyxPQUFPLENBQUMsT0FBTyxDQUFDLENBQUM7QUFFbEMsQ0FBQztBQVBELDRDQU9DIn0=
|
|
@@ -1,58 +0,0 @@
|
|
|
1
|
-
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
2
|
-
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
3
|
-
};
|
|
4
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
|
-
exports.packagesConfigParser = exports.csprojParser = void 0;
|
|
6
|
-
const xml_js_1 = __importDefault(require("xml-js"));
|
|
7
|
-
const packageurl_js_1 = require("packageurl-js");
|
|
8
|
-
const PURL_TYPE = "nuget";
|
|
9
|
-
function csprojParser(fileContent, filePath) {
|
|
10
|
-
const results = { file: filePath, purls: [] };
|
|
11
|
-
try {
|
|
12
|
-
const fileProject = xml_js_1.default.xml2js(fileContent);
|
|
13
|
-
const project = fileProject.elements.find(item => item.name == 'Project');
|
|
14
|
-
const itemGroups = project.elements.filter(item => item.name == 'ItemGroup');
|
|
15
|
-
const packageReference = [];
|
|
16
|
-
itemGroups.forEach(itemGroup => {
|
|
17
|
-
itemGroup.elements.forEach(item => {
|
|
18
|
-
if (item.name == "PackageReference")
|
|
19
|
-
packageReference.push(item);
|
|
20
|
-
});
|
|
21
|
-
});
|
|
22
|
-
//Generates purls
|
|
23
|
-
packageReference.forEach(itemPackage => {
|
|
24
|
-
var _a, _b, _c, _d;
|
|
25
|
-
const packageName = (_b = (_a = itemPackage.attributes) === null || _a === void 0 ? void 0 : _a.Include) === null || _b === void 0 ? void 0 : _b.toString();
|
|
26
|
-
const version = (_d = (_c = itemPackage.attributes) === null || _c === void 0 ? void 0 : _c.Version) === null || _d === void 0 ? void 0 : _d.toString();
|
|
27
|
-
results.purls.push({
|
|
28
|
-
purl: new packageurl_js_1.PackageURL(PURL_TYPE, null, packageName, null, null, null).toString(),
|
|
29
|
-
requirement: version
|
|
30
|
-
});
|
|
31
|
-
});
|
|
32
|
-
}
|
|
33
|
-
catch (e) {
|
|
34
|
-
console.error(e);
|
|
35
|
-
return Promise.resolve({ file: filePath, purls: [] });
|
|
36
|
-
}
|
|
37
|
-
return Promise.resolve(results);
|
|
38
|
-
}
|
|
39
|
-
exports.csprojParser = csprojParser;
|
|
40
|
-
function packagesConfigParser(fileContent, filePath) {
|
|
41
|
-
const results = { file: filePath, purls: [] };
|
|
42
|
-
const packageConfig = xml_js_1.default.xml2js(fileContent);
|
|
43
|
-
const packages = packageConfig.elements.filter(item => item.name == "packages");
|
|
44
|
-
packages.forEach(pkg => {
|
|
45
|
-
pkg.elements.forEach(dep => {
|
|
46
|
-
var _a, _b;
|
|
47
|
-
const depName = (_a = dep.attributes) === null || _a === void 0 ? void 0 : _a.id;
|
|
48
|
-
const depVersion = (_b = dep.attributes) === null || _b === void 0 ? void 0 : _b.version;
|
|
49
|
-
results.purls.push({
|
|
50
|
-
purl: new packageurl_js_1.PackageURL(PURL_TYPE, null, depName, null, null, null).toString(),
|
|
51
|
-
requirement: depVersion
|
|
52
|
-
});
|
|
53
|
-
});
|
|
54
|
-
});
|
|
55
|
-
return Promise.resolve(results);
|
|
56
|
-
}
|
|
57
|
-
exports.packagesConfigParser = packagesConfigParser;
|
|
58
|
-
//# sourceMappingURL=data:application/json;base64,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
|