seaworthycode 1.2.4 → 1.2.6

package/dist/index.js

@@ -1321,7 +1321,7 @@ var copy = {
   "cli.error.outputInsideTarget": "Cannot write report inside the scanned directory.",
   "errors.parse.binary_file": "File appears to be binary and was skipped.",
   // Warnings
-  "warnings.deps.tree_exceeded": "Dependency tree exceeded 500 packages. Results may be incomplete.",
+  "warnings.deps.tree_exceeded": "Dependency tree is large (5000+ packages). CVE scan may take longer than usual.",
   // Debug
   "debug.submodule_skipped": (path) => `Submodule ${path} not initialised, skipping.`,
   "debug.symlink_loop": (path) => `Symlink loop detected at ${path}, skipping.`,
@@ -3567,6 +3567,7 @@ async function loadLanguage(langKey) {
   languageCache.set(langKey, promise);
   return promise;
 }
+var MAX_PARSE_BYTES = 256 * 1024;
 function getOrCreateParser(lang, langKey) {
   if (langKey === "bash") {
     const parser2 = new Parser();
@@ -3624,6 +3625,9 @@ async function queryFile(file, queryString, astCache) {
         if (s.length === 0) {
           return { tree: null, source: s };
         }
+        if (s.length > MAX_PARSE_BYTES) {
+          throw new Error("file_too_large");
+        }
         const parser = getOrCreateParser(lang, file.language);
         const parsed2 = parser.parse(s);
         if (!parsed2) {
@@ -3653,6 +3657,9 @@ async function queryFile(file, queryString, astCache) {
     if (source.length === 0) {
       return { matches: [], degraded: false };
     }
+    if (source.length > MAX_PARSE_BYTES) {
+      return { matches: [], degraded: true };
+    }
     try {
       const parser = getOrCreateParser(lang, file.language);
       const parsed = parser.parse(source);
@@ -4747,7 +4754,7 @@ registry.register({
     return findings;
   }
 });
-var MAX_DEPS = 500;
+var MAX_DEPS = 5e3;
 async function countDepsFromPackageLock(targetDir) {
   try {
     const raw = await fs5.readFile(join8(targetDir, "package-lock.json"), "utf-8");
@@ -16450,7 +16457,7 @@ import { join as join16 } from "path";
 import { createRequire as createRequire3 } from "module";
 import { intro as intro2, outro as outro2, confirm, isCancel as isCancel2 } from "@clack/prompts";
 var _require2 = createRequire3(import.meta.url);
-var { version: CLI_VERSION2 } = _require2("../../package.json");
+var { version: CLI_VERSION2 } = _require2("../package.json");
 var LOG_FILE = join16(LOG_DIR, "seaworthy.log");
 var SENTRY_PROJECT_ID = "4511394796666960";
 var SENTRY_INGEST = "https://o4508597942026240.ingest.de.sentry.io";