sentinello 3.0.1 → 3.1.0

package/dist/cli.cjs

@@ -27,7 +27,11 @@ var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require
   throw Error('Dynamic require of "' + x + '" is not supported');
 });
 var __commonJS = (cb, mod) => function __require2() {
-  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  try {
+    return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  } catch (e) {
+    throw mod = 0, e;
+  }
 };
 var __export = (target, all) => {
   for (var name in all)
@@ -28604,6 +28608,10 @@ async function detectYarnMajor(projectPath, lockfile) {
   }
   return null;
 }
+function auditSummary(ctx, findingCount) {
+  const packageCount = ctx.resolvedGraph?.packages?.length ?? null;
+  return JSON.stringify({ source: SCANNER_NAME, packageCount, findingCount });
+}
 function logCrossCheckDrops(result, packageManager) {
   if (result.droppedCount === 0) return;
   const MAX_LIST = 10;
@@ -28712,7 +28720,7 @@ async function runNpmAudit(projectPath, ctx, deps = REAL_DEPS) {
       status: "ok",
       reasonCode: "ok",
       findings: crossChecked2.kept,
-      rawJson: rawText,
+      rawJson: auditSummary(ctx, crossChecked2.kept.length),
       errorText: null,
       durationMs: Date.now() - startedAt
     };
@@ -28736,7 +28744,7 @@ async function runNpmAudit(projectPath, ctx, deps = REAL_DEPS) {
     status: "ok",
     reasonCode: "ok",
     findings: crossChecked.kept,
-    rawJson: rawText,
+    rawJson: auditSummary(ctx, crossChecked.kept.length),
     errorText: null,
     durationMs: Date.now() - startedAt
   };
@@ -28997,7 +29005,7 @@ function nameFromNodePath(nodePath) {
   return slash < 0 ? tail : tail.slice(0, slash);
 }
 
-// ../../node_modules/.pnpm/js-yaml@4.3.0/node_modules/js-yaml/dist/js-yaml.mjs
+// ../../node_modules/.pnpm/js-yaml@4.3.1/node_modules/js-yaml/dist/js-yaml.mjs
 function getDefaultExportFromCjs(x) {
   return x && x.__esModule && Object.prototype.hasOwnProperty.call(x, "default") ? x["default"] : x;
 }
@@ -29858,7 +29866,7 @@ function requireOmap() {
   const _toString = Object.prototype.toString;
   function resolveYamlOmap(data) {
     if (data === null) return true;
-    const objectKeys = [];
+    const objectKeys = {};
     const object2 = data;
     for (let index = 0, length = object2.length; index < length; index += 1) {
       const pair = object2[index];
@@ -29872,8 +29880,8 @@ function requireOmap() {
         }
       }
       if (!pairHasKey) return false;
-      if (objectKeys.indexOf(pairKey) === -1) objectKeys.push(pairKey);
-      else return false;
+      if (_hasOwnProperty.call(objectKeys, pairKey)) return false;
+      Object.defineProperty(objectKeys, pairKey, { value: true });
     }
     return true;
   }
@@ -35368,8 +35376,8 @@ function createUi(options) {
 
 // src/help.ts
 var CLI_VERSION = (function resolveVersion() {
-  if ("3.0.1".length > 0) {
-    return "3.0.1";
+  if ("3.1.0".length > 0) {
+    return "3.1.0";
   }
   const fromEnv = process.env.SENTINELLO_VERSION;
   if (fromEnv && fromEnv.trim().length > 0) return fromEnv.trim();

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "sentinello",
-    "version": "3.0.1",
+    "version": "3.1.0",
     "license": "MIT",
     "description": "Scan the projects in a folder for vulnerable dependencies and write an advisory an agent can act on.",
     "keywords": [