secure-scan 1.2.2

package/dist/dependencies/parsers/java/javaParser.js

@@ -0,0 +1,168 @@
+"use strict";
+/**
+ * Java Dependency Parser
+ * Parses pom.xml and build.gradle
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JavaDependencyParser = void 0;
+const base_1 = require("../base");
+/**
+ * Java Dependency Parser
+ */
+class JavaDependencyParser extends base_1.BaseDependencyParser {
+    name = 'Java Dependency Parser';
+    supportedFiles = ['pom.xml', 'build.gradle'];
+    ecosystem = 'maven';
+    /**
+     * Parse manifest file
+     */
+    async parse(filePath, content) {
+        this.logParsing(filePath);
+        const fileName = filePath.split(/[/\\]/).pop() || '';
+        const dependencies = [];
+        const parseErrors = [];
+        try {
+            if (fileName === 'pom.xml') {
+                dependencies.push(...this.parsePomXml(content, filePath, parseErrors));
+            }
+            else if (fileName === 'build.gradle') {
+                dependencies.push(...this.parseBuildGradle(content, filePath, parseErrors));
+            }
+        }
+        catch (error) {
+            const errorMsg = error instanceof Error ? error.message : String(error);
+            parseErrors.push(`Failed to parse ${fileName}: ${errorMsg}`);
+            this.logError(filePath, errorMsg);
+        }
+        return {
+            filePath,
+            fileType: fileName,
+            ecosystem: fileName === 'build.gradle' ? 'gradle' : 'maven',
+            dependencies,
+            parseErrors: parseErrors.length > 0 ? parseErrors : undefined,
+            isLockFile: false
+        };
+    }
+    /**
+     * Parse pom.xml (Maven)
+     */
+    parsePomXml(content, filePath, errors) {
+        const dependencies = [];
+        // Simple XML parser for Maven dependencies
+        // Pattern: <dependency><groupId>...</groupId><artifactId>...</artifactId><version>...</version></dependency>
+        const dependencyRegex = /<dependency>\s*([\s\S]*?)<\/dependency>/g;
+        const groupIdRegex = /<groupId>([^<]+)<\/groupId>/;
+        const artifactIdRegex = /<artifactId>([^<]+)<\/artifactId>/;
+        const versionRegex = /<version>([^<]+)<\/version>/;
+        const scopeRegex = /<scope>([^<]+)<\/scope>/;
+        let match;
+        while ((match = dependencyRegex.exec(content)) !== null) {
+            const depBlock = match[1];
+            const groupId = groupIdRegex.exec(depBlock)?.[1];
+            const artifactId = artifactIdRegex.exec(depBlock)?.[1];
+            const version = versionRegex.exec(depBlock)?.[1] || '*';
+            const scope = scopeRegex.exec(depBlock)?.[1] || 'compile';
+            if (groupId && artifactId) {
+                // Maven uses groupId:artifactId format
+                const name = `${groupId}:${artifactId}`;
+                // Determine dependency type based on scope
+                let depType = 'direct';
+                if (scope === 'test')
+                    depType = 'dev';
+                if (scope === 'provided' || scope === 'optional')
+                    depType = 'optional';
+                dependencies.push(this.createDependency(name, version, filePath, {
+                    dependencyType: depType
+                }));
+            }
+        }
+        // Also parse plugin dependencies
+        const pluginRegex = /<plugin>\s*([\s\S]*?)<\/plugin>/g;
+        while ((match = pluginRegex.exec(content)) !== null) {
+            const pluginBlock = match[1];
+            const groupId = groupIdRegex.exec(pluginBlock)?.[1] || 'org.apache.maven.plugins';
+            const artifactId = artifactIdRegex.exec(pluginBlock)?.[1];
+            const version = versionRegex.exec(pluginBlock)?.[1] || '*';
+            if (artifactId) {
+                const name = `${groupId}:${artifactId}`;
+                dependencies.push(this.createDependency(name, version, filePath, {
+                    dependencyType: 'dev' // Plugins are build-time dependencies
+                }));
+            }
+        }
+        return dependencies;
+    }
+    /**
+     * Parse build.gradle (Gradle)
+     */
+    parseBuildGradle(content, filePath, errors) {
+        const dependencies = [];
+        // Gradle dependency patterns
+        // implementation 'group:artifact:version'
+        // implementation "group:artifact:version"
+        // implementation("group:artifact:version")
+        // implementation group: 'x', name: 'y', version: 'z'
+        const configTypes = [
+            'implementation',
+            'api',
+            'compile',
+            'compileOnly',
+            'runtimeOnly',
+            'testImplementation',
+            'testCompile',
+            'testRuntimeOnly',
+            'annotationProcessor',
+            'kapt'
+        ];
+        // Pattern for string notation: implementation 'group:artifact:version'
+        const stringPattern = new RegExp(`(${configTypes.join('|')})\\s*[("']([^"')]+)[)"']`, 'g');
+        // Pattern for map notation: implementation group: 'x', name: 'y', version: 'z'
+        const mapPattern = new RegExp(`(${configTypes.join('|')})\\s+group:\\s*['"]([^'"]+)['"],\\s*name:\\s*['"]([^'"]+)['"](?:,\\s*version:\\s*['"]([^'"]+)['"])?`, 'g');
+        let match;
+        // Parse string notation
+        while ((match = stringPattern.exec(content)) !== null) {
+            const configType = match[1];
+            const depString = match[2];
+            // Parse group:artifact:version
+            const parts = depString.split(':');
+            if (parts.length >= 2) {
+                const groupId = parts[0];
+                const artifactId = parts[1];
+                const version = parts[2] || '*';
+                const name = `${groupId}:${artifactId}`;
+                const depType = this.getGradleDepType(configType);
+                dependencies.push(this.createDependency(name, version, filePath, {
+                    dependencyType: depType
+                }));
+            }
+        }
+        // Parse map notation
+        while ((match = mapPattern.exec(content)) !== null) {
+            const configType = match[1];
+            const groupId = match[2];
+            const artifactId = match[3];
+            const version = match[4] || '*';
+            const name = `${groupId}:${artifactId}`;
+            const depType = this.getGradleDepType(configType);
+            dependencies.push(this.createDependency(name, version, filePath, {
+                dependencyType: depType
+            }));
+        }
+        return dependencies;
+    }
+    /**
+     * Map Gradle configuration to dependency type
+     */
+    getGradleDepType(configType) {
+        const testConfigs = ['testImplementation', 'testCompile', 'testRuntimeOnly'];
+        const devConfigs = ['annotationProcessor', 'kapt', 'compileOnly'];
+        if (testConfigs.includes(configType))
+            return 'dev';
+        if (devConfigs.includes(configType))
+            return 'dev';
+        return 'direct';
+    }
+}
+exports.JavaDependencyParser = JavaDependencyParser;
+exports.default = JavaDependencyParser;
+//# sourceMappingURL=javaParser.js.map

package/dist/dependencies/parsers/java/javaParser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"javaParser.js","sourceRoot":"","sources":["../../../../src/dependencies/parsers/java/javaParser.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,kCAA+C;AAQ/C;;GAEG;AACH,MAAa,oBAAqB,SAAQ,2BAAoB;IAC5D,IAAI,GAAG,wBAAwB,CAAC;IAChC,cAAc,GAAuB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACjE,SAAS,GAAqB,OAAO,CAAC;IAEtC;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,OAAe;QAC3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAE1B,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QACrD,MAAM,YAAY,GAAiB,EAAE,CAAC;QACtC,MAAM,WAAW,GAAa,EAAE,CAAC;QAEjC,IAAI,CAAC;YACH,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;YACzE,CAAC;iBAAM,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;gBACvC,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxE,WAAW,CAAC,IAAI,CAAC,mBAAmB,QAAQ,KAAK,QAAQ,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpC,CAAC;QAED,OAAO;YACL,QAAQ;YACR,QAAQ,EAAE,QAA4B;YACtC,SAAS,EAAE,QAAQ,KAAK,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;YAC3D,YAAY;YACZ,WAAW,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YAC7D,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,OAAe,EAAE,QAAgB,EAAE,MAAgB;QACrE,MAAM,YAAY,GAAiB,EAAE,CAAC;QAEtC,2CAA2C;QAC3C,6GAA6G;QAC7G,MAAM,eAAe,GAAG,0CAA0C,CAAC;QACnE,MAAM,YAAY,GAAG,6BAA6B,CAAC;QACnD,MAAM,eAAe,GAAG,mCAAmC,CAAC;QAC5D,MAAM,YAAY,GAAG,6BAA6B,CAAC;QACnD,MAAM,UAAU,GAAG,yBAAyB,CAAC;QAE7C,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAE1B,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACjD,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACvD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;YACxD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;YAE1D,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;gBAC1B,uCAAuC;gBACvC,MAAM,IAAI,GAAG,GAAG,OAAO,IAAI,UAAU,EAAE,CAAC;gBAExC,2CAA2C;gBAC3C,IAAI,OAAO,GAAkC,QAAQ,CAAC;gBACtD,IAAI,KAAK,KAAK,MAAM;oBAAE,OAAO,GAAG,KAAK,CAAC;gBACtC,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,UAAU;oBAAE,OAAO,GAAG,UAAU,CAAC;gBAEvE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE;oBAC/D,cAAc,EAAE,OAAO;iBACxB,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,MAAM,WAAW,GAAG,kCAAkC,CAAC;QACvD,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAE7B,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,0BAA0B,CAAC;YAClF,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;YAE3D,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,IAAI,GAAG,GAAG,OAAO,IAAI,UAAU,EAAE,CAAC;gBACxC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE;oBAC/D,cAAc,EAAE,KAAK,CAAC,sCAAsC;iBAC7D,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,OAAe,EAAE,QAAgB,EAAE,MAAgB;QAC1E,MAAM,YAAY,GAAiB,EAAE,CAAC;QAEtC,6BAA6B;QAC7B,0CAA0C;QAC1C,0CAA0C;QAC1C,2CAA2C;QAC3C,qDAAqD;QAErD,MAAM,WAAW,GAAG;YAClB,gBAAgB;YAChB,KAAK;YACL,SAAS;YACT,aAAa;YACb,aAAa;YACb,oBAAoB;YACpB,aAAa;YACb,iBAAiB;YACjB,qBAAqB;YACrB,MAAM;SACP,CAAC;QAEF,uEAAuE;QACvE,MAAM,aAAa,GAAG,IAAI,MAAM,CAC9B,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,0BAA0B,EACnD,GAAG,CACJ,CAAC;QAEF,+EAA+E;QAC/E,MAAM,UAAU,GAAG,IAAI,MAAM,CAC3B,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,qGAAqG,EAC9H,GAAG,CACJ,CAAC;QAEF,IAAI,KAAK,CAAC;QAEV,wBAAwB;QACxB,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACtD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAE3B,+BAA+B;YAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACtB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACzB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;gBAChC,MAAM,IAAI,GAAG,GAAG,OAAO,IAAI,UAAU,EAAE,CAAC;gBAExC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBAElD,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE;oBAC/D,cAAc,EAAE,OAAO;iBACxB,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACnD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;YAChC,MAAM,IAAI,GAAG,GAAG,OAAO,IAAI,UAAU,EAAE,CAAC;YAExC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;YAElD,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE;gBAC/D,cAAc,EAAE,OAAO;aACxB,CAAC,CAAC,CAAC;QACN,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,UAAkB;QACzC,MAAM,WAAW,GAAG,CAAC,oBAAoB,EAAE,aAAa,EAAE,iBAAiB,CAAC,CAAC;QAC7E,MAAM,UAAU,GAAG,CAAC,qBAAqB,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QAElE,IAAI,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QACnD,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QAClD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAxLD,oDAwLC;AAED,kBAAe,oBAAoB,CAAC"}

package/dist/dependencies/parsers/javascript/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * JavaScript Parser Module Exports
+ */
+export * from './javascriptParser';
+export { default as JavaScriptDependencyParser } from './javascriptParser';
+//# sourceMappingURL=index.d.ts.map

package/dist/dependencies/parsers/javascript/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/dependencies/parsers/javascript/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,oBAAoB,CAAC;AACnC,OAAO,EAAE,OAAO,IAAI,0BAA0B,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/dependencies/parsers/javascript/index.js

@@ -0,0 +1,27 @@
+"use strict";
+/**
+ * JavaScript Parser Module Exports
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JavaScriptDependencyParser = void 0;
+__exportStar(require("./javascriptParser"), exports);
+var javascriptParser_1 = require("./javascriptParser");
+Object.defineProperty(exports, "JavaScriptDependencyParser", { enumerable: true, get: function () { return __importDefault(javascriptParser_1).default; } });
+//# sourceMappingURL=index.js.map

package/dist/dependencies/parsers/javascript/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/dependencies/parsers/javascript/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;AAEH,qDAAmC;AACnC,uDAA2E;AAAlE,+IAAA,OAAO,OAA8B"}

package/dist/dependencies/parsers/javascript/javascriptParser.d.ts

@@ -0,0 +1,55 @@
+/**
+ * JavaScript/Node.js Dependency Parser
+ * Parses package.json, package-lock.json, and yarn.lock
+ */
+import { BaseDependencyParser } from '../base';
+import { DependencyManifest, ManifestFileType, PackageEcosystem } from '../../types';
+/**
+ * JavaScript/Node.js Dependency Parser
+ */
+export declare class JavaScriptDependencyParser extends BaseDependencyParser {
+    name: string;
+    supportedFiles: ManifestFileType[];
+    ecosystem: PackageEcosystem;
+    /**
+     * Parse manifest file
+     */
+    parse(filePath: string, content: string): Promise<DependencyManifest>;
+    /**
+     * Get manifest file type
+     */
+    private getFileType;
+    /**
+     * Parse package.json
+     */
+    private parsePackageJson;
+    /**
+     * Parse package-lock.json
+     */
+    private parsePackageLock;
+    /**
+     * Extract package name from node_modules path
+     */
+    private extractPackageName;
+    /**
+     * Calculate dependency depth from path
+     */
+    private calculateDepth;
+    /**
+     * Recursively parse package-lock dependencies (v1 format)
+     */
+    private parsePackageLockDependencies;
+    /**
+     * Parse yarn.lock (v1 format)
+     */
+    private parseYarnLock;
+    /**
+     * Check for dangerous scripts in package.json
+     */
+    detectDangerousScripts(content: string): {
+        script: string;
+        command: string;
+    }[];
+}
+export default JavaScriptDependencyParser;
+//# sourceMappingURL=javascriptParser.d.ts.map

package/dist/dependencies/parsers/javascript/javascriptParser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"javascriptParser.d.ts","sourceRoot":"","sources":["../../../../src/dependencies/parsers/javascript/javascriptParser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAGjB,MAAM,aAAa,CAAC;AA8CrB;;GAEG;AACH,qBAAa,0BAA2B,SAAQ,oBAAoB;IAClE,IAAI,SAAkC;IACtC,cAAc,EAAE,gBAAgB,EAAE,CAAsD;IACxF,SAAS,EAAE,gBAAgB,CAAS;IAEpC;;OAEG;IACG,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA+B3E;;OAEG;IACH,OAAO,CAAC,WAAW;IAMnB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAkDxB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA6CxB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAmB1B;;OAEG;IACH,OAAO,CAAC,cAAc;IAItB;;OAEG;IACH,OAAO,CAAC,4BAA4B;IA+BpC;;OAEG;IACH,OAAO,CAAC,aAAa;IAgDrB;;OAEG;IACH,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE;CAgC/E;AAED,eAAe,0BAA0B,CAAC"}

package/dist/dependencies/parsers/javascript/javascriptParser.js

@@ -0,0 +1,266 @@
+"use strict";
+/**
+ * JavaScript/Node.js Dependency Parser
+ * Parses package.json, package-lock.json, and yarn.lock
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JavaScriptDependencyParser = void 0;
+const base_1 = require("../base");
+/**
+ * JavaScript/Node.js Dependency Parser
+ */
+class JavaScriptDependencyParser extends base_1.BaseDependencyParser {
+    name = 'JavaScript Dependency Parser';
+    supportedFiles = ['package.json', 'package-lock.json', 'yarn.lock'];
+    ecosystem = 'npm';
+    /**
+     * Parse manifest file
+     */
+    async parse(filePath, content) {
+        this.logParsing(filePath);
+        const fileName = filePath.split(/[/\\]/).pop() || '';
+        const dependencies = [];
+        const parseErrors = [];
+        try {
+            if (fileName === 'package.json') {
+                dependencies.push(...this.parsePackageJson(content, filePath, parseErrors));
+            }
+            else if (fileName === 'package-lock.json') {
+                dependencies.push(...this.parsePackageLock(content, filePath, parseErrors));
+            }
+            else if (fileName === 'yarn.lock') {
+                dependencies.push(...this.parseYarnLock(content, filePath, parseErrors));
+            }
+        }
+        catch (error) {
+            const errorMsg = error instanceof Error ? error.message : String(error);
+            parseErrors.push(`Failed to parse ${fileName}: ${errorMsg}`);
+            this.logError(filePath, errorMsg);
+        }
+        return {
+            filePath,
+            fileType: this.getFileType(fileName),
+            ecosystem: this.ecosystem,
+            dependencies,
+            parseErrors: parseErrors.length > 0 ? parseErrors : undefined,
+            isLockFile: this.isLockFile(fileName)
+        };
+    }
+    /**
+     * Get manifest file type
+     */
+    getFileType(fileName) {
+        if (fileName === 'package-lock.json')
+            return 'package-lock.json';
+        if (fileName === 'yarn.lock')
+            return 'yarn.lock';
+        return 'package.json';
+    }
+    /**
+     * Parse package.json
+     */
+    parsePackageJson(content, filePath, errors) {
+        const dependencies = [];
+        let pkg;
+        try {
+            pkg = JSON.parse(content);
+        }
+        catch (e) {
+            errors.push('Invalid JSON in package.json');
+            return dependencies;
+        }
+        // Parse regular dependencies
+        if (pkg.dependencies) {
+            for (const [name, version] of Object.entries(pkg.dependencies)) {
+                dependencies.push(this.createDependency(name, version, filePath, {
+                    dependencyType: 'direct'
+                }));
+            }
+        }
+        // Parse dev dependencies
+        if (pkg.devDependencies) {
+            for (const [name, version] of Object.entries(pkg.devDependencies)) {
+                dependencies.push(this.createDependency(name, version, filePath, {
+                    dependencyType: 'dev'
+                }));
+            }
+        }
+        // Parse peer dependencies
+        if (pkg.peerDependencies) {
+            for (const [name, version] of Object.entries(pkg.peerDependencies)) {
+                dependencies.push(this.createDependency(name, version, filePath, {
+                    dependencyType: 'peer'
+                }));
+            }
+        }
+        // Parse optional dependencies
+        if (pkg.optionalDependencies) {
+            for (const [name, version] of Object.entries(pkg.optionalDependencies)) {
+                dependencies.push(this.createDependency(name, version, filePath, {
+                    dependencyType: 'optional'
+                }));
+            }
+        }
+        return dependencies;
+    }
+    /**
+     * Parse package-lock.json
+     */
+    parsePackageLock(content, filePath, errors) {
+        const dependencies = [];
+        let lockFile;
+        try {
+            lockFile = JSON.parse(content);
+        }
+        catch (e) {
+            errors.push('Invalid JSON in package-lock.json');
+            return dependencies;
+        }
+        // Handle lockfileVersion 2/3 (packages field)
+        if (lockFile.packages) {
+            for (const [pkgPath, pkg] of Object.entries(lockFile.packages)) {
+                // Skip root package (empty path)
+                if (!pkgPath || pkgPath === '')
+                    continue;
+                // Extract package name from path (e.g., "node_modules/lodash" -> "lodash")
+                const name = this.extractPackageName(pkgPath);
+                if (!name || !pkg.version)
+                    continue;
+                const depType = pkg.dev ? 'dev' : (pkg.optional ? 'optional' : 'transitive');
+                const depth = this.calculateDepth(pkgPath);
+                dependencies.push(this.createDependency(name, pkg.version, filePath, {
+                    dependencyType: depth === 1 ? 'direct' : depType,
+                    resolvedVersion: pkg.version,
+                    depth
+                }));
+            }
+        }
+        // Handle lockfileVersion 1 (dependencies field)
+        else if (lockFile.dependencies) {
+            this.parsePackageLockDependencies(lockFile.dependencies, filePath, dependencies, 0, false);
+        }
+        return dependencies;
+    }
+    /**
+     * Extract package name from node_modules path
+     */
+    extractPackageName(pkgPath) {
+        // Remove "node_modules/" prefix and handle scoped packages
+        const parts = pkgPath.split('node_modules/');
+        const lastPart = parts[parts.length - 1];
+        if (!lastPart)
+            return null;
+        // Handle scoped packages (@scope/package)
+        if (lastPart.startsWith('@')) {
+            const scopedParts = lastPart.split('/');
+            if (scopedParts.length >= 2) {
+                return `${scopedParts[0]}/${scopedParts[1]}`;
+            }
+        }
+        // Regular package
+        return lastPart.split('/')[0];
+    }
+    /**
+     * Calculate dependency depth from path
+     */
+    calculateDepth(pkgPath) {
+        return (pkgPath.match(/node_modules/g) || []).length;
+    }
+    /**
+     * Recursively parse package-lock dependencies (v1 format)
+     */
+    parsePackageLockDependencies(deps, filePath, result, depth, isDev) {
+        for (const [name, dep] of Object.entries(deps)) {
+            const depType = dep.dev || isDev
+                ? 'dev'
+                : (dep.optional ? 'optional' : (depth === 0 ? 'direct' : 'transitive'));
+            result.push(this.createDependency(name, dep.version, filePath, {
+                dependencyType: depType,
+                resolvedVersion: dep.version,
+                depth
+            }));
+            // Parse nested dependencies
+            if (dep.dependencies) {
+                this.parsePackageLockDependencies(dep.dependencies, filePath, result, depth + 1, dep.dev || isDev);
+            }
+        }
+    }
+    /**
+     * Parse yarn.lock (v1 format)
+     */
+    parseYarnLock(content, filePath, errors) {
+        const dependencies = [];
+        // Simple yarn.lock parser
+        const lines = content.split('\n');
+        let currentPackage = null;
+        let currentVersion = null;
+        for (const line of lines) {
+            // Skip comments and empty lines
+            if (line.startsWith('#') || line.trim() === '')
+                continue;
+            // New package entry (lines that don't start with whitespace)
+            if (!line.startsWith(' ') && !line.startsWith('\t')) {
+                // Parse package name(s) from entry like '"lodash@^4.17.21":'
+                const match = line.match(/^"?(@?[^@"]+)@[^"]+/);
+                if (match) {
+                    currentPackage = match[1];
+                }
+            }
+            // Version line
+            else if (line.trim().startsWith('version')) {
+                const versionMatch = line.match(/version\s+"?([^"]+)"?/);
+                if (versionMatch && currentPackage) {
+                    currentVersion = versionMatch[1];
+                    // Check if this dependency already exists
+                    const existing = dependencies.find(d => d.name === currentPackage && d.resolvedVersion === currentVersion);
+                    if (!existing) {
+                        dependencies.push(this.createDependency(currentPackage, currentVersion, filePath, {
+                            dependencyType: 'transitive',
+                            resolvedVersion: currentVersion,
+                            depth: 1
+                        }));
+                    }
+                    currentPackage = null;
+                    currentVersion = null;
+                }
+            }
+        }
+        return dependencies;
+    }
+    /**
+     * Check for dangerous scripts in package.json
+     */
+    detectDangerousScripts(content) {
+        const dangerous = [];
+        try {
+            const pkg = JSON.parse(content);
+            if (!pkg.scripts)
+                return dangerous;
+            const dangerousPatterns = [
+                /curl\s+.*\|\s*(bash|sh)/i, // curl pipe to shell
+                /wget\s+.*\|\s*(bash|sh)/i, // wget pipe to shell
+                /eval\s*\(/i, // eval usage
+                /base64\s+(-d|--decode)/i, // base64 decode
+                /\$\(.*\)/, // command substitution
+                /nc\s+-e/i, // netcat reverse shell
+                /powershell\s+-enc/i, // encoded powershell
+                /node\s+-e\s+['"].*require.*http/i, // inline node with http
+            ];
+            for (const [script, command] of Object.entries(pkg.scripts)) {
+                for (const pattern of dangerousPatterns) {
+                    if (pattern.test(command)) {
+                        dangerous.push({ script, command });
+                        break;
+                    }
+                }
+            }
+        }
+        catch {
+            // Ignore parse errors
+        }
+        return dangerous;
+    }
+}
+exports.JavaScriptDependencyParser = JavaScriptDependencyParser;
+exports.default = JavaScriptDependencyParser;
+//# sourceMappingURL=javascriptParser.js.map

package/dist/dependencies/parsers/javascript/javascriptParser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"javascriptParser.js","sourceRoot":"","sources":["../../../../src/dependencies/parsers/javascript/javascriptParser.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,kCAA+C;AAqD/C;;GAEG;AACH,MAAa,0BAA2B,SAAQ,2BAAoB;IAClE,IAAI,GAAG,8BAA8B,CAAC;IACtC,cAAc,GAAuB,CAAC,cAAc,EAAE,mBAAmB,EAAE,WAAW,CAAC,CAAC;IACxF,SAAS,GAAqB,KAAK,CAAC;IAEpC;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,OAAe;QAC3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAE1B,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QACrD,MAAM,YAAY,GAAiB,EAAE,CAAC;QACtC,MAAM,WAAW,GAAa,EAAE,CAAC;QAEjC,IAAI,CAAC;YACH,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;gBAChC,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;YAC9E,CAAC;iBAAM,IAAI,QAAQ,KAAK,mBAAmB,EAAE,CAAC;gBAC5C,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;YAC9E,CAAC;iBAAM,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACpC,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxE,WAAW,CAAC,IAAI,CAAC,mBAAmB,QAAQ,KAAK,QAAQ,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpC,CAAC;QAED,OAAO;YACL,QAAQ;YACR,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;YACpC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY;YACZ,WAAW,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YAC7D,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;SACtC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,QAAgB;QAClC,IAAI,QAAQ,KAAK,mBAAmB;YAAE,OAAO,mBAAmB,CAAC;QACjE,IAAI,QAAQ,KAAK,WAAW;YAAE,OAAO,WAAW,CAAC;QACjD,OAAO,cAAc,CAAC;IACxB,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,OAAe,EAAE,QAAgB,EAAE,MAAgB;QAC1E,MAAM,YAAY,GAAiB,EAAE,CAAC;QAEtC,IAAI,GAAgB,CAAC;QACrB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAC5C,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,6BAA6B;QAC7B,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACrB,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC/D,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE;oBAC/D,cAAc,EAAE,QAAQ;iBACzB,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC;QAED,yBAAyB;QACzB,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC;YACxB,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;gBAClE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE;oBAC/D,cAAc,EAAE,KAAK;iBACtB,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACnE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE;oBAC/D,cAAc,EAAE,MAAM;iBACvB,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,IAAI,GAAG,CAAC,oBAAoB,EAAE,CAAC;YAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBACvE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE;oBAC/D,cAAc,EAAE,UAAU;iBAC3B,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,OAAe,EAAE,QAAgB,EAAE,MAAgB;QAC1E,MAAM,YAAY,GAAiB,EAAE,CAAC;QAEtC,IAAI,QAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;YACjD,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,8CAA8C;QAC9C,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/D,iCAAiC;gBACjC,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,EAAE;oBAAE,SAAS;gBAEzC,2EAA2E;gBAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBAC9C,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO;oBAAE,SAAS;gBAEpC,MAAM,OAAO,GAAmB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;gBAC7F,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;gBAE3C,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE;oBACnE,cAAc,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;oBAChD,eAAe,EAAE,GAAG,CAAC,OAAO;oBAC5B,KAAK;iBACN,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC;QACD,gDAAgD;aAC3C,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC/B,IAAI,CAAC,4BAA4B,CAC/B,QAAQ,CAAC,YAAY,EACrB,QAAQ,EACR,YAAY,EACZ,CAAC,EACD,KAAK,CACN,CAAC;QACJ,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,OAAe;QACxC,2DAA2D;QAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAEzC,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE3B,0CAA0C;QAC1C,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,WAAW,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBAC5B,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,OAAe;QACpC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACvD,CAAC;IAED;;OAEG;IACK,4BAA4B,CAClC,IAA2C,EAC3C,QAAgB,EAChB,MAAoB,EACpB,KAAa,EACb,KAAc;QAEd,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,MAAM,OAAO,GAAmB,GAAG,CAAC,GAAG,IAAI,KAAK;gBAC9C,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;YAE1E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE;gBAC7D,cAAc,EAAE,OAAO;gBACvB,eAAe,EAAE,GAAG,CAAC,OAAO;gBAC5B,KAAK;aACN,CAAC,CAAC,CAAC;YAEJ,4BAA4B;YAC5B,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;gBACrB,IAAI,CAAC,4BAA4B,CAC/B,GAAG,CAAC,YAAY,EAChB,QAAQ,EACR,MAAM,EACN,KAAK,GAAG,CAAC,EACT,GAAG,CAAC,GAAG,IAAI,KAAK,CACjB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,OAAe,EAAE,QAAgB,EAAE,MAAgB;QACvE,MAAM,YAAY,GAAiB,EAAE,CAAC;QAEtC,0BAA0B;QAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,cAAc,GAAkB,IAAI,CAAC;QACzC,IAAI,cAAc,GAAkB,IAAI,CAAC;QAEzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,gCAAgC;YAChC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,SAAS;YAEzD,6DAA6D;YAC7D,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpD,6DAA6D;gBAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;gBAChD,IAAI,KAAK,EAAE,CAAC;oBACV,cAAc,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YACD,eAAe;iBACV,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;gBACzD,IAAI,YAAY,IAAI,cAAc,EAAE,CAAC;oBACnC,cAAc,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;oBAEjC,0CAA0C;oBAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACrC,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,eAAe,KAAK,cAAc,CAClE,CAAC;oBAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,cAAc,EAAE,cAAc,EAAE,QAAQ,EAAE;4BAChF,cAAc,EAAE,YAAY;4BAC5B,eAAe,EAAE,cAAc;4BAC/B,KAAK,EAAE,CAAC;yBACT,CAAC,CAAC,CAAC;oBACN,CAAC;oBAED,cAAc,GAAG,IAAI,CAAC;oBACtB,cAAc,GAAG,IAAI,CAAC;gBACxB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,OAAe;QACpC,MAAM,SAAS,GAA0C,EAAE,CAAC;QAE5D,IAAI,CAAC;YACH,MAAM,GAAG,GAAgB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7C,IAAI,CAAC,GAAG,CAAC,OAAO;gBAAE,OAAO,SAAS,CAAC;YAEnC,MAAM,iBAAiB,GAAG;gBACxB,0BAA0B,EAAY,qBAAqB;gBAC3D,0BAA0B,EAAY,qBAAqB;gBAC3D,YAAY,EAA2B,aAAa;gBACpD,yBAAyB,EAAa,gBAAgB;gBACtD,UAAU,EAA6B,uBAAuB;gBAC9D,UAAU,EAA6B,uBAAuB;gBAC9D,oBAAoB,EAAmB,qBAAqB;gBAC5D,kCAAkC,EAAI,wBAAwB;aAC/D,CAAC;YAEF,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5D,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;oBACxC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC1B,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;wBACpC,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AA1SD,gEA0SC;AAED,kBAAe,0BAA0B,CAAC"}

package/dist/dependencies/parsers/php/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * PHP Parser Module Exports
+ */
+export * from './phpParser';
+export { default as PHPDependencyParser } from './phpParser';
+//# sourceMappingURL=index.d.ts.map

package/dist/dependencies/parsers/php/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/dependencies/parsers/php/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,aAAa,CAAC"}

package/dist/dependencies/parsers/php/index.js

@@ -0,0 +1,27 @@
+"use strict";
+/**
+ * PHP Parser Module Exports
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PHPDependencyParser = void 0;
+__exportStar(require("./phpParser"), exports);
+var phpParser_1 = require("./phpParser");
+Object.defineProperty(exports, "PHPDependencyParser", { enumerable: true, get: function () { return __importDefault(phpParser_1).default; } });
+//# sourceMappingURL=index.js.map

package/dist/dependencies/parsers/php/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/dependencies/parsers/php/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;AAEH,8CAA4B;AAC5B,yCAA6D;AAApD,iIAAA,OAAO,OAAuB"}

package/dist/dependencies/parsers/php/phpParser.d.ts

@@ -0,0 +1,35 @@
+/**
+ * PHP Dependency Parser
+ * Parses composer.json and composer.lock
+ */
+import { BaseDependencyParser } from '../base';
+import { DependencyManifest, ManifestFileType, PackageEcosystem } from '../../types';
+/**
+ * PHP Dependency Parser
+ */
+export declare class PHPDependencyParser extends BaseDependencyParser {
+    name: string;
+    supportedFiles: ManifestFileType[];
+    ecosystem: PackageEcosystem;
+    /**
+     * Parse manifest file
+     */
+    parse(filePath: string, content: string): Promise<DependencyManifest>;
+    /**
+     * Parse composer.json
+     */
+    private parseComposerJson;
+    /**
+     * Parse composer.lock
+     */
+    private parseComposerLock;
+    /**
+     * Check for dangerous scripts in composer.json
+     */
+    detectDangerousScripts(content: string): {
+        script: string;
+        command: string;
+    }[];
+}
+export default PHPDependencyParser;
+//# sourceMappingURL=phpParser.d.ts.map

package/dist/dependencies/parsers/php/phpParser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"phpParser.d.ts","sourceRoot":"","sources":["../../../../src/dependencies/parsers/php/phpParser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAEjB,MAAM,aAAa,CAAC;AA+BrB;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,oBAAoB;IAC3D,IAAI,SAA2B;IAC/B,cAAc,EAAE,gBAAgB,EAAE,CAAsC;IACxE,SAAS,EAAE,gBAAgB,CAAc;IAEzC;;OAEG;IACG,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA6B3E;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAsCzB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAwCzB;;OAEG;IACH,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE;CAoC/E;AAED,eAAe,mBAAmB,CAAC"}