snyk-cpp-plugin 2.15.4 → 2.16.3

package/dist/common.d.ts

@@ -1,3 +1,7 @@
 export declare const isWindowsOS: () => boolean;
 export declare const MAX_SUPPORTED_FILE_SIZE: number;
-export declare const CONCURRENCY_LEVEL: number;
+export declare const HASHING_CONCURRENCY_LEVEL: number;
+export declare const DECOMPRESSING_CONCURRENCY_LEVEL: number;
+export declare const DECOMPRESSING_WORKSPACE_DIR = "workspace";
+export declare const DECOMPRESSING_IGNORE_DIR = "ignore";
+export declare const isSupportedSize: (size: number) => boolean;

package/dist/common.js

@@ -1,11 +1,15 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CONCURRENCY_LEVEL = exports.MAX_SUPPORTED_FILE_SIZE = exports.isWindowsOS = void 0;
+exports.isSupportedSize = exports.DECOMPRESSING_IGNORE_DIR = exports.DECOMPRESSING_WORKSPACE_DIR = exports.DECOMPRESSING_CONCURRENCY_LEVEL = exports.HASHING_CONCURRENCY_LEVEL = exports.MAX_SUPPORTED_FILE_SIZE = exports.isWindowsOS = void 0;
 const os = require("os");
 const osName = require('os-name');
 exports.isWindowsOS = () => osName()
     .toLowerCase()
     .indexOf('windows') === 0;
 exports.MAX_SUPPORTED_FILE_SIZE = 2 * 1024 * 1024 * 1024 - 1;
-exports.CONCURRENCY_LEVEL = os.cpus().length;
+exports.HASHING_CONCURRENCY_LEVEL = os.cpus().length;
+exports.DECOMPRESSING_CONCURRENCY_LEVEL = os.cpus().length * 8;
+exports.DECOMPRESSING_WORKSPACE_DIR = 'workspace';
+exports.DECOMPRESSING_IGNORE_DIR = 'ignore';
+exports.isSupportedSize = (size) => 0 < size && size < exports.MAX_SUPPORTED_FILE_SIZE;
 //# sourceMappingURL=common.js.map

package/dist/common.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.js","sourceRoot":"","sources":["../lib/common.ts"],"names":[],"mappings":";;;AAAA,yBAAyB;AAEzB,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AAErB,QAAA,WAAW,GAAG,GAAY,EAAE,CACvC,MAAM,EAAE;KACL,WAAW,EAAE;KACb,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAEjB,QAAA,uBAAuB,GAAW,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC;AAE7D,QAAA,iBAAiB,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC"}
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../lib/common.ts"],"names":[],"mappings":";;;AAAA,yBAAyB;AAEzB,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AAErB,QAAA,WAAW,GAAG,GAAY,EAAE,CACvC,MAAM,EAAE;KACL,WAAW,EAAE;KACb,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAEjB,QAAA,uBAAuB,GAAW,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC;AAE7D,QAAA,yBAAyB,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC;AAE7C,QAAA,+BAA+B,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAEvD,QAAA,2BAA2B,GAAG,WAAW,CAAC;AAE1C,QAAA,wBAAwB,GAAG,QAAQ,CAAC;AAEpC,QAAA,eAAe,GAAG,CAAC,IAAY,EAAW,EAAE,CACvD,CAAC,GAAG,IAAI,IAAI,IAAI,GAAG,+BAAuB,CAAC"}

package/dist/display/index.js

@@ -39,7 +39,7 @@ async function display(scanResults, testResults, errors, options) {
         error_1.exitWith(error_1.ExitCode.Error, 'Error displaying results.');
     }
     if (hasVulnerabilities) {
-        error_1.exitWith(error_1.ExitCode.VulnerabilitiesFound, result.join('\n'));
+        error_1.exitWith(error_1.ExitCode.VulnerabilitiesFound, result.join('\n'), testResults);
     }
     if (!hasDependencies) {
         result.push(`Could not detect supported target files in ${options === null || options === void 0 ? void 0 : options.path}`);

package/dist/display/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../lib/display/index.ts"],"names":[],"mappings":";;;AAAA,+BAA+B;AAC/B,oCAAiC;AACjC,+CAAiD;AAEjD,uCAImB;AACnB,0CAAoD;AAE7C,KAAK,UAAU,OAAO,CAC3B,WAAyB,EACzB,WAAyB,EACzB,MAAgB,EAChB,OAAiB;IAEjB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;QACrB,gBAAQ,CAAC,gBAAQ,CAAC,KAAK,EAAE,uBAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;KAC5D;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAE/B,IAAI;QACF,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,EAAE;YACjB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,OAAO,CAAC,IAAI,OAAO,CAAC,CAAC;YAClE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;SACrB;QAED,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,EAAE;YAClB,MAAM,cAAc,GAAG,2BAAiB,CAAC,WAAW,CAAC,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;SAChC;QAED,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE;YACpC,MAAM,QAAQ,GAAG,0BAAc,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YACzD,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC,GAAG,+BAAqB,CAC9D,OAAO,EACP,QAAQ,EACR,UAAU,CACX,CAAC;YAEF,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE;gBAC3C,eAAe,GAAG,IAAI,CAAC;aACxB;YAED,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;gBAChC,kBAAkB,GAAG,IAAI,CAAC;aAC3B;YAED,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,EAAE,GAAG,aAAa,CAAC,CAAC;SACrD;KACF;IAAC,OAAO,KAAK,EAAE;QACd,aAAK,CAAC,KAAK,CAAC,OAAO,IAAI,iCAAiC,KAAK,EAAE,CAAC,CAAC;QACjE,gBAAQ,CAAC,gBAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;KACvD;IAED,IAAI,kBAAkB,EAAE;QACtB,gBAAQ,CAAC,gBAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;KAC5D;IAED,IAAI,CAAC,eAAe,EAAE;QACpB,MAAM,CAAC,IAAI,CAAC,8CAA8C,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,gBAAQ,CAAC,gBAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;KACxD;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AA1DD,0BA0DC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../lib/display/index.ts"],"names":[],"mappings":";;;AAAA,+BAA+B;AAC/B,oCAAiC;AACjC,+CAAiD;AAEjD,uCAImB;AACnB,0CAAoD;AAE7C,KAAK,UAAU,OAAO,CAC3B,WAAyB,EACzB,WAAyB,EACzB,MAAgB,EAChB,OAAiB;IAEjB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;QACrB,gBAAQ,CAAC,gBAAQ,CAAC,KAAK,EAAE,uBAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;KAC5D;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAE/B,IAAI;QACF,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,EAAE;YACjB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,OAAO,CAAC,IAAI,OAAO,CAAC,CAAC;YAClE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;SACrB;QAED,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,EAAE;YAClB,MAAM,cAAc,GAAG,2BAAiB,CAAC,WAAW,CAAC,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;SAChC;QAED,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE;YACpC,MAAM,QAAQ,GAAG,0BAAc,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YACzD,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC,GAAG,+BAAqB,CAC9D,OAAO,EACP,QAAQ,EACR,UAAU,CACX,CAAC;YAEF,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE;gBAC3C,eAAe,GAAG,IAAI,CAAC;aACxB;YAED,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;gBAChC,kBAAkB,GAAG,IAAI,CAAC;aAC3B;YAED,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,EAAE,GAAG,aAAa,CAAC,CAAC;SACrD;KACF;IAAC,OAAO,KAAK,EAAE;QACd,aAAK,CAAC,KAAK,CAAC,OAAO,IAAI,iCAAiC,KAAK,EAAE,CAAC,CAAC;QACjE,gBAAQ,CAAC,gBAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;KACvD;IAED,IAAI,kBAAkB,EAAE;QACtB,gBAAQ,CAAC,gBAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;KACzE;IAED,IAAI,CAAC,eAAe,EAAE;QACpB,MAAM,CAAC,IAAI,CAAC,8CAA8C,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,gBAAQ,CAAC,gBAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;KACxD;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AA1DD,0BA0DC"}

package/dist/extract.d.ts

@@ -0,0 +1,5 @@
+import { FilePath } from './types';
+export declare function extract(archives: readonly FilePath[], temporaryDir: FilePath, depthLimit: number, depth?: number): Promise<void>;
+export declare function isTar(path: FilePath): boolean;
+export declare function isZip(path: FilePath): boolean;
+export declare function isArchive(path: FilePath): boolean;

package/dist/extract.js

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isArchive = exports.isZip = exports.isTar = exports.extract = void 0;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const uuid_1 = require("uuid");
+const common_1 = require("./common");
+const debug_1 = require("./debug");
+const pMap = require('p-map');
+const AdmZip = require('adm-zip');
+const tar = require('tar');
+const { mkdir, rename } = fs_1.promises;
+const zipFormats = ['.zip', '.zipx'];
+const tarFormats = ['.tar', '.gz', '.tgz'];
+async function handleExtraction(path, temporaryDir, keepArchive, childArchiveHandler) {
+    const extractionSource = keepArchive
+        ? path
+        : path_1.join(temporaryDir, common_1.DECOMPRESSING_IGNORE_DIR, `${uuid_1.v4()}-${path_1.basename(path)}`);
+    if (!keepArchive) {
+        await mkdir(path_1.dirname(extractionSource), { recursive: true });
+        await rename(path, extractionSource);
+    }
+    const extractionTarget = path_1.join(temporaryDir, common_1.DECOMPRESSING_WORKSPACE_DIR, path.includes(temporaryDir)
+        ? path_1.relative(path_1.join(temporaryDir, common_1.DECOMPRESSING_WORKSPACE_DIR), path)
+        : path_1.basename(path));
+    await mkdir(extractionTarget, { recursive: true });
+    if (isTar(extractionSource)) {
+        await tar.x({
+            file: extractionSource,
+            cwd: extractionTarget,
+            sync: true,
+            onentry: (entry) => {
+                const childAbsolutePath = path_1.join(extractionTarget, entry.path);
+                if (isArchive(childAbsolutePath)) {
+                    childArchiveHandler(childAbsolutePath);
+                }
+            },
+        });
+    }
+    else if (isZip(extractionSource)) {
+        const zip = new AdmZip(extractionSource);
+        await pMap(zip.getEntries(), (entry) => {
+            const childAbsolutePath = path_1.join(extractionTarget, entry.entryName);
+            zip.extractEntryTo(entry.entryName, extractionTarget, true, true);
+            if (isArchive(childAbsolutePath)) {
+                childArchiveHandler(childAbsolutePath);
+            }
+        }, { concurrency: common_1.DECOMPRESSING_CONCURRENCY_LEVEL });
+    }
+}
+async function extract(archives, temporaryDir, depthLimit, depth = 0) {
+    if (depth >= depthLimit) {
+        return;
+    }
+    const childArchives = [];
+    for (const archive of archives) {
+        try {
+            const keepArchive = 0 === depth;
+            await handleExtraction(archive, temporaryDir, keepArchive, (childArchive) => childArchives.push(childArchive));
+        }
+        catch (err) {
+            debug_1.debug(`Could not extract archive: ${archive} ${err}`);
+        }
+    }
+    if (childArchives.length > 0) {
+        await extract(childArchives, temporaryDir, depthLimit, depth + 1);
+    }
+}
+exports.extract = extract;
+function isTar(path) {
+    return tarFormats.includes(path_1.extname(path));
+}
+exports.isTar = isTar;
+function isZip(path) {
+    return zipFormats.includes(path_1.extname(path));
+}
+exports.isZip = isZip;
+function isArchive(path) {
+    return isTar(path) || isZip(path);
+}
+exports.isArchive = isArchive;
+//# sourceMappingURL=extract.js.map

package/dist/extract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.js","sourceRoot":"","sources":["../lib/extract.ts"],"names":[],"mappings":";;;AAAA,2BAA8B;AAC9B,+BAAkE;AAClE,+BAAoC;AAEpC,qCAIkB;AAClB,mCAAgC;AAEhC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;AAE3B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,aAAQ,CAAC;AAEnC,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACrC,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAM3C,KAAK,UAAU,gBAAgB,CAC7B,IAAc,EACd,YAAsB,EACtB,WAAoB,EACpB,mBAAsC;IAEtC,MAAM,gBAAgB,GAAa,WAAW;QAC5C,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,WAAI,CACF,YAAY,EACZ,iCAAwB,EACxB,GAAG,SAAM,EAAE,IAAI,eAAQ,CAAC,IAAI,CAAC,EAAE,CAChC,CAAC;IAEN,IAAI,CAAC,WAAW,EAAE;QAChB,MAAM,KAAK,CAAC,cAAO,CAAC,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;KACtC;IAED,MAAM,gBAAgB,GAAa,WAAI,CACrC,YAAY,EACZ,oCAA2B,EAE3B,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QACzB,CAAC,CAAC,eAAQ,CAAC,WAAI,CAAC,YAAY,EAAE,oCAA2B,CAAC,EAAE,IAAI,CAAC;QACjE,CAAC,CAAC,eAAQ,CAAC,IAAI,CAAC,CACnB,CAAC;IAEF,MAAM,KAAK,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnD,IAAI,KAAK,CAAC,gBAAgB,CAAC,EAAE;QAC3B,MAAM,GAAG,CAAC,CAAC,CAAC;YACV,IAAI,EAAE,gBAAgB;YACtB,GAAG,EAAE,gBAAgB;YACrB,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,CAAC,KAAU,EAAE,EAAE;gBACtB,MAAM,iBAAiB,GAAG,WAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAE7D,IAAI,SAAS,CAAC,iBAAiB,CAAC,EAAE;oBAChC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;iBACxC;YACH,CAAC;SACF,CAAC,CAAC;KACJ;SAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,EAAE;QAClC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACzC,MAAM,IAAI,CACR,GAAG,CAAC,UAAU,EAAE,EAChB,CAAC,KAAU,EAAE,EAAE;YACb,MAAM,iBAAiB,GAAG,WAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAClE,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAElE,IAAI,SAAS,CAAC,iBAAiB,CAAC,EAAE;gBAChC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;aACxC;QACH,CAAC,EACD,EAAE,WAAW,EAAE,wCAA+B,EAAE,CACjD,CAAC;KACH;AACH,CAAC;AAEM,KAAK,UAAU,OAAO,CAC3B,QAA6B,EAC7B,YAAsB,EACtB,UAAkB,EAClB,KAAK,GAAG,CAAC;IAET,IAAI,KAAK,IAAI,UAAU,EAAE;QACvB,OAAO;KACR;IAED,MAAM,aAAa,GAAe,EAAE,CAAC;IAErC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE;QAC9B,IAAI;YACF,MAAM,WAAW,GAAG,CAAC,KAAK,KAAK,CAAC;YAEhC,MAAM,gBAAgB,CACpB,OAAO,EACP,YAAY,EACZ,WAAW,EACX,CAAC,YAAsB,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAC7D,CAAC;SACH;QAAC,OAAO,GAAG,EAAE;YACZ,aAAK,CAAC,8BAA8B,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;SACvD;KACF;IAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE;QAC5B,MAAM,OAAO,CAAC,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;KACnE;AACH,CAAC;AA9BD,0BA8BC;AAED,SAAgB,KAAK,CAAC,IAAc;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,cAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5C,CAAC;AAFD,sBAEC;AAED,SAAgB,KAAK,CAAC,IAAc;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,cAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5C,CAAC;AAFD,sBAEC;AAED,SAAgB,SAAS,CAAC,IAAc;IACtC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAFD,8BAEC"}

package/dist/find.d.ts

@@ -2,4 +2,4 @@
 import { promises } from 'fs';
 import { FilePath } from './types';
 export declare const readdir: typeof promises.readdir, lstat: typeof promises.lstat;
-export declare function find(src: string): Promise<FilePath[]>;
+export declare function find(src: string): Promise<[FilePath[], FilePath[]]>;

package/dist/find.js

@@ -5,16 +5,22 @@ const fs_1 = require("fs");
 const path_1 = require("path");
 const common_1 = require("./common");
 const debug_1 = require("./debug");
+const extract_1 = require("./extract");
 exports.readdir = fs_1.promises.readdir, exports.lstat = fs_1.promises.lstat;
 async function find(src) {
-    const result = [];
+    const fileResults = [];
+    const archiveResults = [];
     await traverse(src, async (path, stats) => {
-        if (stats.size > common_1.MAX_SUPPORTED_FILE_SIZE || stats.size <= 0) {
+        if (!common_1.isSupportedSize(stats.size)) {
             return;
         }
-        result.push(path);
+        if (extract_1.isArchive(path)) {
+            archiveResults.push(path);
+            return;
+        }
+        fileResults.push(path);
     });
-    return result;
+    return [fileResults, archiveResults];
 }
 exports.find = find;
 async function traverse(src, handle) {

package/dist/find.js.map

@@ -1 +1 @@
-{"version":3,"file":"find.js","sourceRoot":"","sources":["../lib/find.ts"],"names":[],"mappings":";;;AAAA,2BAAqC;AACrC,+BAA4B;AAC5B,qCAAmD;AACnD,mCAAgC;AAGjB,eAAO,GAAY,aAAQ,UAAlB,aAAK,GAAK,aAAQ,OAAC;AAMpC,KAAK,UAAU,IAAI,CAAC,GAAW;IACpC,MAAM,MAAM,GAAe,EAAE,CAAC;IAE9B,MAAM,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,IAAc,EAAE,KAAY,EAAE,EAAE;QACzD,IAAI,KAAK,CAAC,IAAI,GAAG,gCAAuB,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,EAAE;YAC3D,OAAO;SACR;QAED,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAZD,oBAYC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,MAAmB;IACtD,IAAI;QACF,MAAM,KAAK,GAAG,MAAM,aAAK,CAAC,GAAG,CAAC,CAAC;QAE/B,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE;YAC1B,OAAO;SACR;QAED,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE;YAClB,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACnB,OAAO;SACR;QAED,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE;YACvB,MAAM,OAAO,GAAG,MAAM,eAAO,CAAC,GAAG,CAAC,CAAC;YAEnC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE;gBAC3B,MAAM,QAAQ,GAAG,WAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAElC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;aAClC;SACF;KACF;IAAC,OAAO,KAAK,EAAE;QACd,aAAK,CAAC,KAAK,CAAC,OAAO,IAAI,sBAAsB,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC;KAC/D;AACH,CAAC"}
+{"version":3,"file":"find.js","sourceRoot":"","sources":["../lib/find.ts"],"names":[],"mappings":";;;AAAA,2BAAqC;AACrC,+BAA4B;AAC5B,qCAA2C;AAC3C,mCAAgC;AAEhC,uCAAsC;AAEvB,eAAO,GAAY,aAAQ,UAAlB,aAAK,GAAK,aAAQ,OAAC;AAMpC,KAAK,UAAU,IAAI,CAAC,GAAW;IACpC,MAAM,WAAW,GAAe,EAAE,CAAC;IACnC,MAAM,cAAc,GAAe,EAAE,CAAC;IAEtC,MAAM,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,IAAc,EAAE,KAAY,EAAE,EAAE;QACzD,IAAI,CAAC,wBAAe,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;YAChC,OAAO;SACR;QAED,IAAI,mBAAS,CAAC,IAAI,CAAC,EAAE;YACnB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,OAAO;SACR;QAED,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;AACvC,CAAC;AAlBD,oBAkBC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,MAAmB;IACtD,IAAI;QACF,MAAM,KAAK,GAAG,MAAM,aAAK,CAAC,GAAG,CAAC,CAAC;QAE/B,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE;YAC1B,OAAO;SACR;QAED,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE;YAClB,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACnB,OAAO;SACR;QAED,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE;YACvB,MAAM,OAAO,GAAG,MAAM,eAAO,CAAC,GAAG,CAAC,CAAC;YAEnC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE;gBAC3B,MAAM,QAAQ,GAAG,WAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAElC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;aAClC;SACF;KACF;IAAC,OAAO,KAAK,EAAE;QACd,aAAK,CAAC,KAAK,CAAC,OAAO,IAAI,sBAAsB,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC;KAC/D;AACH,CAAC"}

package/dist/scan.js

@@ -3,15 +3,23 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.scan = void 0;
 const fs = require("fs");
 const path = require("path");
+const path_1 = require("path");
 const debug_1 = require("./debug");
 const find_1 = require("./find");
 const hosted_git_info_1 = require("hosted-git-info");
 const signatures_1 = require("./signatures");
 const git_1 = require("./git");
+const extract_1 = require("./extract");
+const fs_1 = require("./utils/fs");
+const common_1 = require("./common");
 async function scan(options) {
     try {
         debug_1.debug.enabled = !!(options === null || options === void 0 ? void 0 : options.debug);
         debug_1.debug('options %o \n', options);
+        const extractionDepthLimit = options['max-depth'] || 0;
+        if (extractionDepthLimit < 0) {
+            throw 'invalid options: --max-depth should be greater than or equal to 0.';
+        }
         if (!options.path) {
             throw 'invalid options: no path provided.';
         }
@@ -19,11 +27,25 @@ async function scan(options) {
             throw `'${options.path}' does not exist.`;
         }
         const start = Date.now();
-        const paths = await find_1.find(options.path);
-        debug_1.debug('%d files found \n', paths.length);
-        const signatures = await signatures_1.computeSignaturesConcurrently(paths);
+        const [filePaths, archivePaths] = await find_1.find(options.path);
+        let extractionWorkspace = null;
+        if (0 < extractionDepthLimit && 0 < archivePaths.length) {
+            const temporaryDir = await fs_1.createTemporaryDir();
+            extractionWorkspace = path_1.join(temporaryDir, common_1.DECOMPRESSING_WORKSPACE_DIR);
+            await extract_1.extract(archivePaths, temporaryDir, extractionDepthLimit);
+            const [newFilePaths, newArchivePaths] = await find_1.find(extractionWorkspace);
+            filePaths.push(...newFilePaths, ...newArchivePaths);
+        }
+        else {
+            filePaths.push(...archivePaths);
+        }
+        debug_1.debug('%d files found \n', filePaths.length);
+        const signatures = await signatures_1.computeSignaturesConcurrently(filePaths);
         signatures.forEach((s) => {
-            s.path = path.relative(options.path, s.path);
+            const src = extractionWorkspace && s.path.includes(extractionWorkspace)
+                ? extractionWorkspace
+                : options.path;
+            s.path = path.relative(src, s.path);
         });
         const end = Date.now();
         const totalMilliseconds = end - start;

package/dist/scan.js.map

@@ -1 +1 @@
-{"version":3,"file":"scan.js","sourceRoot":"","sources":["../lib/scan.ts"],"names":[],"mappings":";;;AAAA,yBAAyB;AACzB,6BAA6B;AAW7B,mCAAgC;AAChC,iCAA8B;AAC9B,qDAA0C;AAC1C,6CAA6D;AAC7D,+BAAkC;AAE3B,KAAK,UAAU,IAAI,CAAC,OAAgB;IACzC,IAAI;QACF,aAAK,CAAC,OAAO,GAAG,CAAC,EAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,CAAA,CAAC;QACjC,aAAK,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAEhC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YACjB,MAAM,oCAAoC,CAAC;SAC5C;QAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YAChC,MAAM,IAAI,OAAO,CAAC,IAAI,mBAAmB,CAAC;SAC3C;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,MAAM,KAAK,GAAe,MAAM,WAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnD,aAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAEzC,MAAM,UAAU,GAAsB,MAAM,0CAA6B,CACvE,KAAK,CACN,CAAC;QAEF,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YACvB,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,MAAM,iBAAiB,GAAG,GAAG,GAAG,KAAK,CAAC;QACtC,MAAM,mBAAmB,GAAG,UAAU,CAAC,MAAM,CAAC;QAC9C,MAAM,2CAA2C,GAAG,IAAI,CAAC,KAAK,CAC5D,iBAAiB,GAAG,IAAI,CACzB,CAAC;QAEF,aAAK,CAAC,yBAAyB,mBAAmB,KAAK,CAAC,CAAC;QACzD,aAAK,CACH,uDAAuD,2CAA2C,MAAM,CACzG,CAAC;QAEF,MAAM,KAAK,GAAY,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAEtE,MAAM,SAAS,GAAgB;YAC7B;gBACE,IAAI,EAAE,gCAAgC;gBACtC,IAAI,EAAE;oBACJ,mBAAmB;oBACnB,2CAA2C;iBAC5C;aACF;SACF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,eAAS,EAAE,CAAC;QACjC,aAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,yBAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,IAAI,GACR,OAAO,CAAC,WAAW,KAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,CAAA,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzE,aAAK,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAC1B,MAAM,WAAW,GAAiB;YAChC;gBACE,KAAK;gBACL,QAAQ,EAAE;oBACR,IAAI,EAAE,KAAK;iBACZ;gBACD,IAAI;gBACJ,MAAM;gBACN,SAAS;aACV;SACF,CAAC;QAEF,OAAO;YACL,WAAW;SACZ,CAAC;KACH;IAAC,OAAO,KAAK,EAAE;QACd,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;KAC3D;AACH,CAAC;AA3ED,oBA2EC"}
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../lib/scan.ts"],"names":[],"mappings":";;;AAAA,yBAAyB;AACzB,6BAA6B;AAC7B,+BAA4B;AAW5B,mCAAgC;AAChC,iCAA8B;AAC9B,qDAA0C;AAC1C,6CAA6D;AAC7D,+BAAkC;AAClC,uCAAoC;AACpC,mCAAgD;AAChD,qCAAuD;AAEhD,KAAK,UAAU,IAAI,CAAC,OAAgB;IACzC,IAAI;QACF,aAAK,CAAC,OAAO,GAAG,CAAC,EAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,CAAA,CAAC;QACjC,aAAK,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAChC,MAAM,oBAAoB,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAEvD,IAAI,oBAAoB,GAAG,CAAC,EAAE;YAC5B,MAAM,oEAAoE,CAAC;SAC5E;QAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YACjB,MAAM,oCAAoC,CAAC;SAC5C;QAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YAChC,MAAM,IAAI,OAAO,CAAC,IAAI,mBAAmB,CAAC;SAC3C;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,MAAM,WAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,mBAAmB,GAAoB,IAAI,CAAC;QAEhD,IAAI,CAAC,GAAG,oBAAoB,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE;YACvD,MAAM,YAAY,GAAG,MAAM,uBAAkB,EAAE,CAAC;YAChD,mBAAmB,GAAG,WAAI,CAAC,YAAY,EAAE,oCAA2B,CAAC,CAAC;YAEtE,MAAM,iBAAO,CAAC,YAAY,EAAE,YAAY,EAAE,oBAAoB,CAAC,CAAC;YAChE,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,MAAM,WAAI,CAAC,mBAAmB,CAAC,CAAC;YAExE,SAAS,CAAC,IAAI,CAAC,GAAG,YAAY,EAAE,GAAG,eAAe,CAAC,CAAC;SACrD;aAAM;YACL,SAAS,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;SACjC;QAED,aAAK,CAAC,mBAAmB,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAE7C,MAAM,UAAU,GAAsB,MAAM,0CAA6B,CACvE,SAAS,CACV,CAAC;QAEF,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YACvB,MAAM,GAAG,GACP,mBAAmB,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBACzD,CAAC,CAAC,mBAAmB;gBACrB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;YAEnB,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,MAAM,iBAAiB,GAAG,GAAG,GAAG,KAAK,CAAC;QACtC,MAAM,mBAAmB,GAAG,UAAU,CAAC,MAAM,CAAC;QAC9C,MAAM,2CAA2C,GAAG,IAAI,CAAC,KAAK,CAC5D,iBAAiB,GAAG,IAAI,CACzB,CAAC;QAEF,aAAK,CAAC,yBAAyB,mBAAmB,KAAK,CAAC,CAAC;QACzD,aAAK,CACH,uDAAuD,2CAA2C,MAAM,CACzG,CAAC;QAEF,MAAM,KAAK,GAAY,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAEtE,MAAM,SAAS,GAAgB;YAC7B;gBACE,IAAI,EAAE,gCAAgC;gBACtC,IAAI,EAAE;oBACJ,mBAAmB;oBACnB,2CAA2C;iBAC5C;aACF;SACF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,eAAS,EAAE,CAAC;QACjC,aAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,yBAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,IAAI,GACR,OAAO,CAAC,WAAW,KAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,CAAA,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzE,aAAK,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAC1B,MAAM,WAAW,GAAiB;YAChC;gBACE,KAAK;gBACL,QAAQ,EAAE;oBACR,IAAI,EAAE,KAAK;iBACZ;gBACD,IAAI;gBACJ,MAAM;gBACN,SAAS;aACV;SACF,CAAC;QAEF,OAAO;YACL,WAAW;SACZ,CAAC;KACH;IAAC,OAAO,KAAK,EAAE;QACd,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;KAC3D;AACH,CAAC;AAnGD,oBAmGC"}

package/dist/signatures.js

@@ -10,7 +10,7 @@ async function computeSignaturesConcurrently(paths) {
     return pMap(paths, async (path) => {
         const content = await readFile(path);
         return await hash_1.computeHash(path, content);
-    }, { concurrency: common_1.CONCURRENCY_LEVEL });
+    }, { concurrency: common_1.HASHING_CONCURRENCY_LEVEL });
 }
 exports.computeSignaturesConcurrently = computeSignaturesConcurrently;
 //# sourceMappingURL=signatures.js.map

package/dist/signatures.js.map

@@ -1 +1 @@
-{"version":3,"file":"signatures.js","sourceRoot":"","sources":["../lib/signatures.ts"],"names":[],"mappings":";;;AAAA,2BAA8B;AAE9B,iCAAqC;AACrC,qCAA6C;AAE7C,8BAA+B;AAE/B,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAQ,CAAC;AAEvB,KAAK,UAAU,6BAA6B,CACjD,KAAiB;IAEjB,OAAO,IAAI,CACT,KAAK,EACL,KAAK,EAAE,IAAc,EAAE,EAAE;QACvB,MAAM,OAAO,GAAgB,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClD,OAAO,MAAM,kBAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC,EACD,EAAE,WAAW,EAAE,0BAAiB,EAAE,CACnC,CAAC;AACJ,CAAC;AAXD,sEAWC"}
+{"version":3,"file":"signatures.js","sourceRoot":"","sources":["../lib/signatures.ts"],"names":[],"mappings":";;;AAAA,2BAA8B;AAE9B,iCAAqC;AACrC,qCAAqD;AAErD,8BAA+B;AAE/B,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAQ,CAAC;AAEvB,KAAK,UAAU,6BAA6B,CACjD,KAAiB;IAEjB,OAAO,IAAI,CACT,KAAK,EACL,KAAK,EAAE,IAAc,EAAE,EAAE;QACvB,MAAM,OAAO,GAAgB,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClD,OAAO,MAAM,kBAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC,EACD,EAAE,WAAW,EAAE,kCAAyB,EAAE,CAC3C,CAAC;AACJ,CAAC;AAXD,sEAWC"}

package/dist/types.d.ts

@@ -44,6 +44,7 @@ export interface Options {
     'print-deps'?: boolean;
     'print-dep-paths'?: boolean;
     supportUnmanagedVulnDB?: boolean;
+    'max-depth'?: number;
 }
 export interface Issue {
     pkgName: string;

package/dist/utils/error.d.ts

@@ -1,6 +1,7 @@
+import { TestResult } from '../types';
 export declare enum ExitCode {
     VulnerabilitiesFound = "VULNS",
     Error = 2,
     NoSupportedFiles = 3
 }
-export declare function exitWith(exitCode: ExitCode, message: string): void;
+export declare function exitWith(exitCode: ExitCode, message: string, testResults?: TestResult[]): void;

package/dist/utils/error.js

@@ -7,10 +7,14 @@ var ExitCode;
     ExitCode[ExitCode["Error"] = 2] = "Error";
     ExitCode[ExitCode["NoSupportedFiles"] = 3] = "NoSupportedFiles";
 })(ExitCode = exports.ExitCode || (exports.ExitCode = {}));
-function exitWith(exitCode, message) {
+function exitWith(exitCode, message, testResults = []) {
     const err = new Error();
     err.message = message;
     err.code = exitCode.valueOf();
+    if (0 < testResults.length) {
+        const jsonData = testResults.length === 1 ? testResults[0] : testResults;
+        err.jsonStringifiedResults = JSON.stringify(jsonData);
+    }
     throw err;
 }
 exports.exitWith = exitWith;

package/dist/utils/error.js.map

@@ -1 +1 @@
-{"version":3,"file":"error.js","sourceRoot":"","sources":["../../lib/utils/error.ts"],"names":[],"mappings":";;;AAAA,IAAY,QAIX;AAJD,WAAY,QAAQ;IAClB,0CAA8B,CAAA;IAC9B,yCAAS,CAAA;IACT,+DAAoB,CAAA;AACtB,CAAC,EAJW,QAAQ,GAAR,gBAAQ,KAAR,gBAAQ,QAInB;AAED,SAAgB,QAAQ,CAAC,QAAkB,EAAE,OAAe;IAC1D,MAAM,GAAG,GAAG,IAAI,KAAK,EAAS,CAAC;IAC/B,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;IACtB,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;IAE9B,MAAM,GAAG,CAAC;AACZ,CAAC;AAND,4BAMC"}
+{"version":3,"file":"error.js","sourceRoot":"","sources":["../../lib/utils/error.ts"],"names":[],"mappings":";;;AAEA,IAAY,QAIX;AAJD,WAAY,QAAQ;IAClB,0CAA8B,CAAA;IAC9B,yCAAS,CAAA;IACT,+DAAoB,CAAA;AACtB,CAAC,EAJW,QAAQ,GAAR,gBAAQ,KAAR,gBAAQ,QAInB;AAED,SAAgB,QAAQ,CACtB,QAAkB,EAClB,OAAe,EACf,cAA4B,EAAE;IAE9B,MAAM,GAAG,GAAG,IAAI,KAAK,EAAS,CAAC;IAC/B,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;IACtB,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;IAE9B,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE;QAC1B,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QACzE,GAAG,CAAC,sBAAsB,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;KACvD;IAED,MAAM,GAAG,CAAC;AACZ,CAAC;AAfD,4BAeC"}

package/dist/utils/fs.d.ts

@@ -0,0 +1,2 @@
+import { FilePath } from '../types';
+export declare function createTemporaryDir(): Promise<FilePath>;

package/dist/utils/fs.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createTemporaryDir = void 0;
+const os = require("os");
+const fs_1 = require("fs");
+const path_1 = require("path");
+const { mkdtemp } = fs_1.promises;
+async function createTemporaryDir() {
+    return await mkdtemp(path_1.join(os.tmpdir(), 'snyk'));
+}
+exports.createTemporaryDir = createTemporaryDir;
+//# sourceMappingURL=fs.js.map

package/dist/utils/fs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.js","sourceRoot":"","sources":["../../lib/utils/fs.ts"],"names":[],"mappings":";;;AAAA,yBAAyB;AAEzB,2BAA8B;AAC9B,+BAA4B;AAG5B,MAAM,EAAE,OAAO,EAAE,GAAG,aAAQ,CAAC;AAEtB,KAAK,UAAU,kBAAkB;IACtC,OAAO,MAAM,OAAO,CAAC,WAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;AAClD,CAAC;AAFD,gDAEC"}

package/package.json

@@ -30,11 +30,15 @@
   },
   "dependencies": {
     "@snyk/dep-graph": "^1.19.3",
+    "@types/uuid": "^8.3.4",
+    "adm-zip": "^0.5.9",
     "chalk": "^4.1.0",
     "debug": "^4.1.1",
     "hosted-git-info": "^3.0.7",
     "p-map": "^4.0.0",
-    "tslib": "^2.0.0"
+    "tar": "^6.1.11",
+    "tslib": "^2.0.0",
+    "uuid": "^8.3.2"
   },
   "devDependencies": {
     "@types/debug": "^4.1.5",
@@ -53,5 +57,5 @@
     "tsc-watch": "^4.2.9",
     "typescript": "^3.9.7"
   },
-  "version": "2.15.4"
+  "version": "2.16.3"
 }