supply-chain-guard 6.3.2 → 6.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +41 -14
- package/action.yml +1 -1
- package/dist/cache-dir.d.ts +46 -0
- package/dist/cache-dir.d.ts.map +1 -0
- package/dist/cache-dir.js +153 -0
- package/dist/cache-dir.js.map +1 -0
- package/dist/catalog-digest.d.ts +4 -4
- package/dist/catalog-digest.js +4 -4
- package/dist/cli.js +3 -3
- package/dist/cli.js.map +1 -1
- package/dist/continuous-monitor.d.ts.map +1 -1
- package/dist/continuous-monitor.js +13 -6
- package/dist/continuous-monitor.js.map +1 -1
- package/dist/dependency-confusion.js +1 -1
- package/dist/feed.d.ts +4 -2
- package/dist/feed.d.ts.map +1 -1
- package/dist/feed.js +13 -3
- package/dist/feed.js.map +1 -1
- package/dist/index.d.ts +1 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +7 -2
- package/dist/index.js.map +1 -1
- package/dist/npm-scanner.js +1 -1
- package/dist/pypi-scanner.js +1 -1
- package/dist/reporter.js +12 -12
- package/dist/risk-forecast.d.ts.map +1 -1
- package/dist/risk-forecast.js +10 -3
- package/dist/risk-forecast.js.map +1 -1
- package/dist/sbom-generator.js +1 -1
- package/dist/scanner.d.ts.map +1 -1
- package/dist/scanner.js +6 -3
- package/dist/scanner.js.map +1 -1
- package/dist/threat-intel.d.ts +1 -1
- package/dist/threat-intel.d.ts.map +1 -1
- package/dist/threat-intel.js +161 -177
- package/dist/threat-intel.js.map +1 -1
- package/dist/types.d.ts +5 -3
- package/dist/types.d.ts.map +1 -1
- package/dist/types.js.map +1 -1
- package/dist/vscode-scanner.js +1 -1
- package/package.json +1 -1
- package/self-scan-manifest.json +4 -4
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"continuous-monitor.js","sourceRoot":"","sources":["../src/continuous-monitor.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,EAAE,oCAAgB;AAC9B,MAAY,IAAI,sCAAkB;AAElC,iDAMwB;AAExB,MAAM,YAAY,GAAG,mBAAmB,CAAC;AACzC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAchC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,OAAO,CACL,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QAC5B,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC;QACpC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CACrC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,yBAAgC,GAAW;IACzC,OAAO,IAAA,iCAAkB,EAAC,GAAG,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;GAQG;AACH,yBAAgC,GAAW;IACzC,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,gCAAwC,SAAQ,KAAK;IAC1C,MAAM,CAA8B;IAE7C,YAAY,MAAmC;QAC7C,KAAK,CACH,qDAAqD,MAAM,KAAK;YAC9D,WAAW,wBAAS,IAAI,YAAY,gCAAgC;YACpE,wDAAwD,CAC3D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,sCACE,MAAmC;IAEnC,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EACT,iCAAiC,wBAAS,IAAI,YAAY,kCAAkC,MAAM,KAAK;YACvG,2GAA2G;YAC3G,4HAA4H;QAC9H,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,CAAC;QACb,QAAQ,EAAE,OAAO;QACjB,cAAc,EACZ,2DAA2D,wBAAS,IAAI,YAAY,+CAA+C;YACnI,2HAA2H;YAC3H,wGAAwG;KAC3G,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,yBACE,GAAW,EACX,MAAkB;IAElB,2EAA2E;IAC3E,+EAA+E;IAC/E,IAAI,MAAM,CAAC,WAAW;QAAE,OAAO;IAE/B,2EAA2E;IAC3E,wDAAwD;IACxD,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,QAAQ,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACrC,MAAM,IAAI,0BAA0B,CAClC,QAAQ,CAAC,MAAM,IAAI,aAAa,CACjC,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAA,6BAAc,EAAC,GAAG,CAAC,CAAC;IAEvC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC;QACX,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;QACrC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ;KACvC,CAAC,CAAC;IAEH,2BAA2B;IAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,CAAC;IACpD,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EACnC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CACjC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,0BACE,OAA2B,EAC3B,YAAoB;IAEpB,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAExC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;
|
|
1
|
+
{"version":3,"file":"continuous-monitor.js","sourceRoot":"","sources":["../src/continuous-monitor.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,EAAE,oCAAgB;AAC9B,MAAY,IAAI,sCAAkB;AAElC,iDAMwB;AAExB,MAAM,YAAY,GAAG,mBAAmB,CAAC;AACzC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAchC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,OAAO,CACL,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QAC5B,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC;QACpC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CACrC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,yBAAgC,GAAW;IACzC,OAAO,IAAA,iCAAkB,EAAC,GAAG,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;GAQG;AACH,yBAAgC,GAAW;IACzC,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,gCAAwC,SAAQ,KAAK;IAC1C,MAAM,CAA8B;IAE7C,YAAY,MAAmC;QAC7C,KAAK,CACH,qDAAqD,MAAM,KAAK;YAC9D,WAAW,wBAAS,IAAI,YAAY,gCAAgC;YACpE,wDAAwD,CAC3D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,sCACE,MAAmC;IAEnC,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EACT,iCAAiC,wBAAS,IAAI,YAAY,kCAAkC,MAAM,KAAK;YACvG,2GAA2G;YAC3G,4HAA4H;QAC9H,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,CAAC;QACb,QAAQ,EAAE,OAAO;QACjB,cAAc,EACZ,2DAA2D,wBAAS,IAAI,YAAY,+CAA+C;YACnI,2HAA2H;YAC3H,wGAAwG;KAC3G,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,yBACE,GAAW,EACX,MAAkB;IAElB,2EAA2E;IAC3E,+EAA+E;IAC/E,IAAI,MAAM,CAAC,WAAW;QAAE,OAAO;IAE/B,2EAA2E;IAC3E,wDAAwD;IACxD,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,QAAQ,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACrC,MAAM,IAAI,0BAA0B,CAClC,QAAQ,CAAC,MAAM,IAAI,aAAa,CACjC,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAA,6BAAc,EAAC,GAAG,CAAC,CAAC;IAEvC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC;QACX,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;QACrC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ;KACvC,CAAC,CAAC;IAEH,2BAA2B;IAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,CAAC;IACpD,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EACnC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CACjC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,0BACE,OAA2B,EAC3B,YAAoB;IAEpB,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAExC,yEAAyE;IACzE,6EAA6E;IAC7E,2EAA2E;IAC3E,qDAAqD;IACrD,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5E,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;IAEpD,+CAA+C;IAC/C,IAAI,YAAY,GAAG,SAAS,GAAG,CAAC,IAAI,YAAY,GAAG,EAAE,EAAE,CAAC;QACtD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,kBAAkB;YACxB,WAAW,EAAE,0BAA0B,SAAS,OAAO,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,GAAG,SAAS,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,0CAA0C;YAClK,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,OAAO;YACjB,cAAc,EAAE,yGAAyG;SAC1H,CAAC,CAAC;IACL,CAAC;IAED,uEAAuE;IACvE,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;QACzE,0EAA0E;QAC1E,sEAAsE;QACtE,IAAI,SAAS,GAAG,QAAQ,GAAG,GAAG,IAAI,SAAS,GAAG,EAAE,IAAI,YAAY,GAAG,QAAQ,EAAE,CAAC;YAC5E,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,WAAW,EAAE,8CAA8C,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,iCAAiC;gBACrJ,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,GAAG;gBACf,QAAQ,EAAE,OAAO;gBACjB,cAAc,EAAE,wFAAwF;aACzG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,kEAAkE;IAClE,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACrF,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,sBAAsB;YAC5B,WAAW,EAAE,iDAAiD,MAAM,CAAC,MAAM,4CAA4C;YACvH,QAAQ,EAAE,MAAM;YAChB,UAAU,EAAE,GAAG;YACf,QAAQ,EAAE,OAAO;YACjB,cAAc,EAAE,sFAAsF;SACvG,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,sBACE,OAA2B;IAE3B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAExC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5E,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAE5E,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,OAAO,QAAQ,CAAC;AAClB,CAAC"}
|
|
@@ -53,7 +53,7 @@ const types_js_1 = require("./types.js");
|
|
|
53
53
|
const pattern_scanner_js_1 = require("./pattern-scanner.js");
|
|
54
54
|
const json_utils_js_1 = require("./json-utils.js");
|
|
55
55
|
const publishing_anomaly_detector_js_1 = require("./publishing-anomaly-detector.js");
|
|
56
|
-
const TOOL_VERSION = "6.
|
|
56
|
+
const TOOL_VERSION = "6.4.0";
|
|
57
57
|
const NPM_REGISTRY = "https://registry.npmjs.org";
|
|
58
58
|
const NPM_DOWNLOADS_API = "https://api.npmjs.org/downloads/point/last-week";
|
|
59
59
|
const PYPI_REGISTRY = "https://pypi.org/pypi";
|
package/dist/feed.d.ts
CHANGED
|
@@ -152,7 +152,9 @@ export declare function catalogSeverityFor(reason: NonNullable<CatalogState["rea
|
|
|
152
152
|
* setting is a statement about the mechanism being in place, not about how
|
|
153
153
|
* many indicators happen to be in it.
|
|
154
154
|
*/
|
|
155
|
-
export declare function catalogFindings(state: CatalogState, mode?: "optional" | "required"
|
|
155
|
+
export declare function catalogFindings(state: CatalogState, mode?: "optional" | "required", context?: {
|
|
156
|
+
legacyCacheInWorkingDir?: boolean;
|
|
157
|
+
}): Finding[];
|
|
156
158
|
export interface RefreshResult {
|
|
157
159
|
/** Number of IOC entries written to the cache. */
|
|
158
160
|
entryCount: number;
|
|
@@ -223,5 +225,5 @@ export declare const CATALOG_MAX_DECOMPRESSED_BYTES: number;
|
|
|
223
225
|
* caller must bound the input itself.
|
|
224
226
|
*/
|
|
225
227
|
export declare function decodeCatalogBody(body: Buffer): string;
|
|
226
|
-
export declare function refreshFeed(feedUrl?: string,
|
|
228
|
+
export declare function refreshFeed(feedUrl?: string, cacheDirOption?: string, limitOverrides?: FeedLimitOverrides): Promise<RefreshResult>;
|
|
227
229
|
//# sourceMappingURL=feed.d.ts.map
|
package/dist/feed.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"feed.d.ts","sourceRoot":"","sources":["../src/feed.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAOH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;
|
|
1
|
+
{"version":3,"file":"feed.d.ts","sourceRoot":"","sources":["../src/feed.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAOH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAG1C,OAAO,EAKL,KAAK,YAAY,EAEjB,KAAK,OAAO,EACZ,KAAK,kBAAkB,EACxB,MAAM,mBAAmB,CAAC;AAE3B,2EAA2E;AAC3E,eAAO,MAAM,gBAAgB,gFACkD,CAAC;AAEhF,mEAAmE;AACnE,eAAO,MAAM,4BAA4B,sFAC4C,CAAC;AAEtF,kFAAkF;AAClF,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,MAAqC,GAC9C,MAAM,CAER;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAQjE;AAMD,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,SAAS,CAQpD;AAMD;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC,8EAA8E;AAC9E,eAAO,MAAM,eAAe,sBAAsB,CAAC;AAEnD,6DAA6D;AAC7D,eAAO,MAAM,oBAAoB,gCAAgC,CAAC;AAElE,MAAM,WAAW,aAAa;IAC5B,+EAA+E;IAC/E,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,yEAAyE;IACzE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,iEAAiE;IACjE,YAAY,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,KAAK,EAAE,OAAO,CAAC;CAChB;AA8BD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,SAAS,OAAO,EAAE,EACxB,GAAG,GAAE,MAAM,GAAG,IAAiB,GAC9B,aAAa,CA2Bf;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,aAAa,GAAG,OAAO,EAAE,CA8BzE;AA4DD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAC3C,IAAI,EAAE,UAAU,GAAG,UAAU,GAC5B,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAEjD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,YAAY,EACnB,IAAI,GAAE,UAAU,GAAG,UAAuB,EAC1C,OAAO,GAAE;IAAE,uBAAuB,CAAC,EAAE,OAAO,CAAA;CAAO,GAClD,OAAO,EAAE,CA4CX;AAMD,MAAM,WAAW,aAAa;IAC5B,kDAAkD;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,YAAY,GAAE,MAAM,GAAG,SAAkB,GACxC,OAAO,EAAE,CA4DX;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B,QAAmB,CAAC;AAO/D;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAqBtD;AAqID,wBAAsB,WAAW,CAC/B,OAAO,GAAE,MAAyB,EAClC,cAAc,CAAC,EAAE,MAAM,EACvB,cAAc,GAAE,kBAAuB,GACtC,OAAO,CAAC,aAAa,CAAC,CA+BxB"}
|
package/dist/feed.js
CHANGED
|
@@ -74,6 +74,7 @@ const node_zlib_1 = require("node:zlib");
|
|
|
74
74
|
const node_crypto_1 = require("node:crypto");
|
|
75
75
|
const remote_download_js_1 = require("./remote-download.js");
|
|
76
76
|
const catalog_digest_js_1 = require("./catalog-digest.js");
|
|
77
|
+
const cache_dir_js_1 = require("./cache-dir.js");
|
|
77
78
|
const threat_intel_js_1 = require("./threat-intel.js");
|
|
78
79
|
/** Published feed location: the committed feed.json on the main branch. */
|
|
79
80
|
exports.DEFAULT_FEED_URL = "https://raw.githubusercontent.com/homeofe/supply-chain-guard/main/feed.json";
|
|
@@ -343,7 +344,7 @@ function catalogSeverityFor(reason, mode) {
|
|
|
343
344
|
* setting is a statement about the mechanism being in place, not about how
|
|
344
345
|
* many indicators happen to be in it.
|
|
345
346
|
*/
|
|
346
|
-
function catalogFindings(state, mode = "optional") {
|
|
347
|
+
function catalogFindings(state, mode = "optional", context = {}) {
|
|
347
348
|
if (state.available)
|
|
348
349
|
return [];
|
|
349
350
|
// Widened deliberately. CATALOG_DIGEST is generated with `as const`, so
|
|
@@ -357,13 +358,21 @@ function catalogFindings(state, mode = "optional") {
|
|
|
357
358
|
return [];
|
|
358
359
|
const reason = state.reason ?? "absent";
|
|
359
360
|
const built = state.cachedVersion ? ` (it was built for ${state.cachedVersion})` : "";
|
|
361
|
+
// A cache in the working directory is the former default location. It is
|
|
362
|
+
// no longer read unless named, so say where the catalog is looked for now.
|
|
363
|
+
const legacy = context.legacyCacheInWorkingDir
|
|
364
|
+
? " A .scg-cache directory in the working directory was not read: the cache " +
|
|
365
|
+
"now lives in one directory per user, so one refresh serves scans from any " +
|
|
366
|
+
"directory. Run the refresh once, or pass --cache-dir .scg-cache to keep using it."
|
|
367
|
+
: "";
|
|
360
368
|
return [
|
|
361
369
|
{
|
|
362
370
|
rule: exports.CATALOG_MISSING_RULE,
|
|
363
371
|
description: `${missing} historical indicators were not consulted by this scan, because ` +
|
|
364
372
|
`${CATALOG_REASON_TEXT[reason]}${built}. Those indicators are published ` +
|
|
365
373
|
`separately from the package and are downloaded on demand, so this scan ` +
|
|
366
|
-
`matched against the bundled set alone and no other part of the result says so
|
|
374
|
+
`matched against the bundled set alone and no other part of the result says so.` +
|
|
375
|
+
legacy,
|
|
367
376
|
severity: catalogSeverityFor(reason, mode),
|
|
368
377
|
confidence: 1.0,
|
|
369
378
|
category: "trust",
|
|
@@ -597,8 +606,9 @@ async function installCatalog(feedUrl, cacheDir, limits) {
|
|
|
597
606
|
}));
|
|
598
607
|
return { entryCount: entries.length, cachePath };
|
|
599
608
|
}
|
|
600
|
-
async function refreshFeed(feedUrl = exports.DEFAULT_FEED_URL,
|
|
609
|
+
async function refreshFeed(feedUrl = exports.DEFAULT_FEED_URL, cacheDirOption, limitOverrides = {}) {
|
|
601
610
|
const limits = { ...threat_intel_js_1.FEED_REMOTE_LIMITS, ...limitOverrides };
|
|
611
|
+
const cacheDir = (0, cache_dir_js_1.resolveCacheDir)(cacheDirOption);
|
|
602
612
|
try {
|
|
603
613
|
const body = await httpsGetBody(feedUrl, limits);
|
|
604
614
|
const entries = parseFeedPayload(body);
|
package/dist/feed.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"feed.js","sourceRoot":"","sources":["../src/feed.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,EAAE,oCAAgB;AAC9B,MAAY,IAAI,sCAAkB;AAClC,yCAAuC;AACvC,6CAAyC;AACzC,6DAAkF;AAElF,2DAAqD;AACrD,uDAU2B;AAE3B,2EAA2E;AAC9D,QAAA,gBAAgB,GAC3B,6EAA6E,CAAC;AAEhF,mEAAmE;AACtD,QAAA,4BAA4B,GACvC,mFAAmF,CAAC;AAEtF,kFAAkF;AAClF,uBACE,OAAe,EACf,IAAY,EACZ,QAAQ,GAAW,QAAA,4BAA4B;IAE/C,OAAO,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,mCAA0C,OAAe;IACvD,IAAI,OAAO,KAAK,QAAA,gBAAgB;QAAE,OAAO,QAAA,4BAA4B,CAAC;IACtE,oEAAoE;IACpE,sDAAsD;IACtD,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,QAAA,4BAA4B,CAAC;IAC1D,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,QAAQ,CAAC;AACzD,CAAC;AAYD;;;GAGG;AACH,mBAA0B,IAAe;IACvC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/C,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACpD,CAAC;AAED,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E;;;;;;;;;;;;;;;GAeG;AACU,QAAA,qBAAqB,GAAG,EAAE,CAAC;AAExC,8EAA8E;AACjE,QAAA,eAAe,GAAG,mBAAmB,CAAC;AAEnD,6DAA6D;AAChD,QAAA,oBAAoB,GAAG,6BAA6B,CAAC;AAalE,MAAM,UAAU,GAAG,UAAU,CAAC;AAC9B,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAEnD;;;;GAIG;AACH,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5B,IACE,MAAM,CAAC,cAAc,EAAE,KAAK,IAAI;QAChC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,KAAK,KAAK;QAClC,MAAM,CAAC,UAAU,EAAE,KAAK,GAAG,EAC3B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,uBACE,IAAwB,EACxB,GAAG,GAAkB,IAAI,CAAC,GAAG,EAAE;IAE/B,MAAM,KAAK,GAAG,GAAG,YAAY,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IACxD,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,eAAe,CAAE,GAA+B,CAAC,SAAS,CAAC,CAAC;QACvE,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,GAAG,KAAK;YAAE,SAAS;QACxC,YAAY,IAAI,CAAC,CAAC;QAClB,IAAI,QAAQ,KAAK,IAAI,IAAI,EAAE,GAAG,QAAQ;YAAE,QAAQ,GAAG,EAAE,CAAC;IACxD,CAAC;IAED,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,oBAAoB;IACpB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAChF,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAC,GAAG,UAAU,CAAC,CAAC;IAC5D,OAAO;QACL,eAAe,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC9D,OAAO;QACP,YAAY;QACZ,KAAK,EAAE,OAAO,GAAG,QAAA,qBAAqB;KACvC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,+BAAsC,SAAwB;IAC5D,IAAI,CAAC,SAAS,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAEhC,MAAM,GAAG,GACP,SAAS,CAAC,OAAO,KAAK,IAAI,IAAI,SAAS,CAAC,eAAe,KAAK,IAAI;QAC9D,CAAC,CAAC,2DAA2D;QAC7D,CAAC,CAAC,GAAG,SAAS,CAAC,OAAO,+BAA+B,SAAS,CAAC,eAAe,IAAI;YAChF,UAAU,SAAS,CAAC,YAAY,oBAAoB,CAAC;IAE3D,OAAO;QACL;YACE,IAAI,EAAE,QAAA,eAAe;YACrB,WAAW,EACT,0DAA0D,GAAG,IAAI;gBACjE,yEAAyE;gBACzE,mEAAmE;YACrE,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,GAAG;YACf,QAAQ,EAAE,OAAO;YACjB,SAAS,EACP,wEAAwE;gBACxE,uEAAuE;gBACvE,qCAAqC;YACvC,cAAc,EACZ,yDAAyD;gBACzD,iEAAiE;gBACjE,uCAAuC,QAAA,eAAe,kBAAkB;gBACxE,6CAA6C;SAChD;KACF,CAAC;AACJ,CAAC;AAGD;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAwD;IAC/E,MAAM,EAAE,gDAAgD;IACxD,UAAU,EAAE,sCAAsC;IAClD,kBAAkB,EAAE,sDAAsD;IAC1E,iBAAiB,EAAE,gEAAgE;IACnF,OAAO,EAAE,6EAA6E;CACvF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,uBAAuB,GAGzB;IACF,MAAM,EAAE,MAAM;IACd,kBAAkB,EAAE,KAAK;IACzB,UAAU,EAAE,QAAQ;IACpB,iBAAiB,EAAE,MAAM;IACzB,OAAO,EAAE,MAAM;CAChB,CAAC;AAEF;;;;;;;;;GASG;AACH,4BACE,MAA2C,EAC3C,IAA6B;IAE7B,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,yBACE,KAAmB,EACnB,IAAI,GAA4B,UAAU;IAE1C,IAAI,KAAK,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAE/B,wEAAwE;IACxE,4EAA4E;IAC5E,8EAA8E;IAC9E,uEAAuE;IACvE,6EAA6E;IAC7E,iBAAiB;IACjB,MAAM,OAAO,GAAW,kCAAc,CAAC,UAAU,CAAC;IAClD,IAAI,OAAO,KAAK,CAAC,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,EAAE,CAAC;IAEpD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,sBAAsB,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAEtF,OAAO;QACL;YACE,IAAI,EAAE,QAAA,oBAAoB;YAC1B,WAAW,EACT,GAAG,OAAO,kEAAkE;gBAC5E,GAAG,mBAAmB,CAAC,MAAM,CAAC,GAAG,KAAK,mCAAmC;gBACzE,yEAAyE;gBACzE,gFAAgF;YAClF,QAAQ,EAAE,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC;YAC1C,UAAU,EAAE,GAAG;YACf,QAAQ,EAAE,OAAO;YACjB,SAAS,EACP,wEAAwE;gBACxE,2EAA2E;gBAC3E,2EAA2E;YAC7E,cAAc,EACZ,0EAA0E;gBAC1E,uCAAuC,QAAA,oBAAoB,gBAAgB;gBAC3E,uDAAuD;SAC1D;KACF,CAAC;AACJ,CAAC;AAgCD;;;;;;;;;;;;;;;GAeG;AACH,0BACE,GAAW,EACX,YAAY,GAAuB,MAAM;IAEzC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,4EAA4E;IAC5E,eAAe;IACf,MAAM,QAAQ,GAAI,MAAoC,EAAE,IAAI,CAAC;IAC7D,MAAM,IAAI,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9D,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,sCAAsC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAC/G,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAY,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC5C,CAAC,CAAC,MAAM;QACR,CAAC,CAAE,MAAuC,EAAE,OAAO,CAAC;IAEtD,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,8EAA8E;IAC9E,yCAAyC;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,KAAK,MAAM,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,iBAAiB,GAAc,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,IACE,CAAC,KAAK,IAAI;YACV,OAAO,CAAC,KAAK,QAAQ;YACrB,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;YAC1B,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YAC3B,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAC9B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QACD,uEAAuE;QACvE,mEAAmE;QACnE,uEAAuE;QACvE,sEAAsE;QACtE,IAAI,CAAC,IAAA,gCAAc,EAAC,CAAC,CAAC,EAAE,CAAC;YACvB,qEAAqE;YACrE,uCAAuC;YACvC,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,yIAAyI,CACxP,CAAC;QACJ,CAAC;QACD,iBAAiB,CAAC,IAAI,CAAC,IAAA,kCAAgB,EAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED;;;;;;;GAOG;AACU,QAAA,8BAA8B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE/D,4EAA4E;AAC5E,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,2BAAkC,IAAY;IAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,IAAA,sBAAU,EAAC,IAAI,EAAE;YACtB,eAAe,EAAE,QAAA,8BAA8B;SAChD,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,2EAA2E;QAC3E,6BAA6B;QAC7B,MAAM,IAAI,GAAI,GAAoC,EAAE,IAAI,CAAC;QACzD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,IAAI,KAAK,sBAAsB,IAAI,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CACb,gCAAgC,QAAA,8BAA8B,QAAQ,CACvE,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,MAA2B;IAClE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAA,qCAAgB,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrD,sEAAsE;IACtE,6EAA6E;IAC7E,uDAAuD;IACvD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,4CAA4C;AAC5C,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,KAAK,UAAU,cAAc,CAC3B,OAAe,EACf,QAAgB,EAChB,MAA2B;IAE3B,MAAM,OAAO,GAAG,kCAAc,CAAC,OAAO,CAAC;IACvC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAEpD,MAAM,SAAS,GAAG,CAChB,MAAM,IAAA,qCAAgB,EAAC,aAAa,CAAC,OAAO,EAAE,oBAAoB,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CACvF,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEzB,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,WAAW,KAAK,kCAAc,CAAC,MAAM,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,wBAAwB,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB;YACpE,GAAG,kCAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAC5D,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAGjC,CAAC;IACF,2EAA2E;IAC3E,yEAAyE;IACzE,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,uCAAuC;IACvC,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,OAAO,GAAc,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAA,qCAAgB,EAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QAChG,yEAAyE;QACzE,kEAAkE;QAClE,oCAAoC;QACpC,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,iBAAiB,KAAK,CAAC,IAAI,WAAW,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB;gBAC7E,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAC3D,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,eAAe,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,IAAI,eAAe,KAAK,kCAAc,CAAC,aAAa,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,0BAA0B,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB;YAC1E,GAAG,kCAAc,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CACnE,CAAC;IACJ,CAAC;IAED,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,oCAAkB,CAAC,CAAC;IAC1D,EAAE,CAAC,aAAa,CACd,SAAS,EACT,IAAI,CAAC,SAAS,CAAC;QACb,OAAO;QACP,MAAM,EAAE,kCAAc,CAAC,MAAM;QAC7B,qEAAqE;QACrE,8DAA8D;QAC9D,QAAQ,EAAE,eAAe;QACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO;KACR,CAAC,CACH,CAAC;IAEF,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;AACnD,CAAC;AAEM,KAAK,sBACV,OAAO,GAAW,QAAA,gBAAgB,EAClC,QAAQ,GAAW,2BAAS,EAC5B,cAAc,GAAuB,EAAE;IAEvC,MAAM,MAAM,GAAwB,EAAE,GAAG,oCAAkB,EAAE,GAAG,cAAc,EAAE,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAEvC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,iCAAe,CAAC,CAAC;QACvD,EAAE,CAAC,aAAa,CACd,SAAS,EACT,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAC1E,CAAC;QAEF,2EAA2E;QAC3E,yEAAyE;QACzE,yEAAyE;QACzE,kEAAkE;QAClE,IAAI,OAAiC,CAAC;QACtC,IAAI,YAAgC,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,sCAAsC,OAAO,KAAK,OAAO,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC"}
|
|
1
|
+
{"version":3,"file":"feed.js","sourceRoot":"","sources":["../src/feed.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,EAAE,oCAAgB;AAC9B,MAAY,IAAI,sCAAkB;AAClC,yCAAuC;AACvC,6CAAyC;AACzC,6DAAkF;AAElF,2DAAqD;AACrD,iDAAiD;AACjD,uDAS2B;AAE3B,2EAA2E;AAC9D,QAAA,gBAAgB,GAC3B,6EAA6E,CAAC;AAEhF,mEAAmE;AACtD,QAAA,4BAA4B,GACvC,mFAAmF,CAAC;AAEtF,kFAAkF;AAClF,uBACE,OAAe,EACf,IAAY,EACZ,QAAQ,GAAW,QAAA,4BAA4B;IAE/C,OAAO,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,mCAA0C,OAAe;IACvD,IAAI,OAAO,KAAK,QAAA,gBAAgB;QAAE,OAAO,QAAA,4BAA4B,CAAC;IACtE,oEAAoE;IACpE,sDAAsD;IACtD,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,QAAA,4BAA4B,CAAC;IAC1D,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,QAAQ,CAAC;AACzD,CAAC;AAYD;;;GAGG;AACH,mBAA0B,IAAe;IACvC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/C,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACpD,CAAC;AAED,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E;;;;;;;;;;;;;;;GAeG;AACU,QAAA,qBAAqB,GAAG,EAAE,CAAC;AAExC,8EAA8E;AACjE,QAAA,eAAe,GAAG,mBAAmB,CAAC;AAEnD,6DAA6D;AAChD,QAAA,oBAAoB,GAAG,6BAA6B,CAAC;AAalE,MAAM,UAAU,GAAG,UAAU,CAAC;AAC9B,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAEnD;;;;GAIG;AACH,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5B,IACE,MAAM,CAAC,cAAc,EAAE,KAAK,IAAI;QAChC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,KAAK,KAAK;QAClC,MAAM,CAAC,UAAU,EAAE,KAAK,GAAG,EAC3B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,uBACE,IAAwB,EACxB,GAAG,GAAkB,IAAI,CAAC,GAAG,EAAE;IAE/B,MAAM,KAAK,GAAG,GAAG,YAAY,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IACxD,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,eAAe,CAAE,GAA+B,CAAC,SAAS,CAAC,CAAC;QACvE,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,GAAG,KAAK;YAAE,SAAS;QACxC,YAAY,IAAI,CAAC,CAAC;QAClB,IAAI,QAAQ,KAAK,IAAI,IAAI,EAAE,GAAG,QAAQ;YAAE,QAAQ,GAAG,EAAE,CAAC;IACxD,CAAC;IAED,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,oBAAoB;IACpB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAChF,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAC,GAAG,UAAU,CAAC,CAAC;IAC5D,OAAO;QACL,eAAe,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC9D,OAAO;QACP,YAAY;QACZ,KAAK,EAAE,OAAO,GAAG,QAAA,qBAAqB;KACvC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,+BAAsC,SAAwB;IAC5D,IAAI,CAAC,SAAS,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAEhC,MAAM,GAAG,GACP,SAAS,CAAC,OAAO,KAAK,IAAI,IAAI,SAAS,CAAC,eAAe,KAAK,IAAI;QAC9D,CAAC,CAAC,2DAA2D;QAC7D,CAAC,CAAC,GAAG,SAAS,CAAC,OAAO,+BAA+B,SAAS,CAAC,eAAe,IAAI;YAChF,UAAU,SAAS,CAAC,YAAY,oBAAoB,CAAC;IAE3D,OAAO;QACL;YACE,IAAI,EAAE,QAAA,eAAe;YACrB,WAAW,EACT,0DAA0D,GAAG,IAAI;gBACjE,yEAAyE;gBACzE,mEAAmE;YACrE,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,GAAG;YACf,QAAQ,EAAE,OAAO;YACjB,SAAS,EACP,wEAAwE;gBACxE,uEAAuE;gBACvE,qCAAqC;YACvC,cAAc,EACZ,yDAAyD;gBACzD,iEAAiE;gBACjE,uCAAuC,QAAA,eAAe,kBAAkB;gBACxE,6CAA6C;SAChD;KACF,CAAC;AACJ,CAAC;AAGD;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAwD;IAC/E,MAAM,EAAE,gDAAgD;IACxD,UAAU,EAAE,sCAAsC;IAClD,kBAAkB,EAAE,sDAAsD;IAC1E,iBAAiB,EAAE,gEAAgE;IACnF,OAAO,EAAE,6EAA6E;CACvF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,uBAAuB,GAGzB;IACF,MAAM,EAAE,MAAM;IACd,kBAAkB,EAAE,KAAK;IACzB,UAAU,EAAE,QAAQ;IACpB,iBAAiB,EAAE,MAAM;IACzB,OAAO,EAAE,MAAM;CAChB,CAAC;AAEF;;;;;;;;;GASG;AACH,4BACE,MAA2C,EAC3C,IAA6B;IAE7B,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,yBACE,KAAmB,EACnB,IAAI,GAA4B,UAAU,EAC1C,OAAO,GAA0C,EAAE;IAEnD,IAAI,KAAK,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAE/B,wEAAwE;IACxE,4EAA4E;IAC5E,8EAA8E;IAC9E,uEAAuE;IACvE,6EAA6E;IAC7E,iBAAiB;IACjB,MAAM,OAAO,GAAW,kCAAc,CAAC,UAAU,CAAC;IAClD,IAAI,OAAO,KAAK,CAAC,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,EAAE,CAAC;IAEpD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,sBAAsB,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,yEAAyE;IACzE,2EAA2E;IAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,uBAAuB;QAC5C,CAAC,CAAC,2EAA2E;YAC3E,4EAA4E;YAC5E,mFAAmF;QACrF,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;QACL;YACE,IAAI,EAAE,QAAA,oBAAoB;YAC1B,WAAW,EACT,GAAG,OAAO,kEAAkE;gBAC5E,GAAG,mBAAmB,CAAC,MAAM,CAAC,GAAG,KAAK,mCAAmC;gBACzE,yEAAyE;gBACzE,gFAAgF;gBAChF,MAAM;YACR,QAAQ,EAAE,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC;YAC1C,UAAU,EAAE,GAAG;YACf,QAAQ,EAAE,OAAO;YACjB,SAAS,EACP,wEAAwE;gBACxE,2EAA2E;gBAC3E,2EAA2E;YAC7E,cAAc,EACZ,0EAA0E;gBAC1E,uCAAuC,QAAA,oBAAoB,gBAAgB;gBAC3E,uDAAuD;SAC1D;KACF,CAAC;AACJ,CAAC;AAgCD;;;;;;;;;;;;;;;GAeG;AACH,0BACE,GAAW,EACX,YAAY,GAAuB,MAAM;IAEzC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,4EAA4E;IAC5E,eAAe;IACf,MAAM,QAAQ,GAAI,MAAoC,EAAE,IAAI,CAAC;IAC7D,MAAM,IAAI,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9D,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,sCAAsC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAC/G,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAY,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC5C,CAAC,CAAC,MAAM;QACR,CAAC,CAAE,MAAuC,EAAE,OAAO,CAAC;IAEtD,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,8EAA8E;IAC9E,yCAAyC;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,KAAK,MAAM,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,iBAAiB,GAAc,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,IACE,CAAC,KAAK,IAAI;YACV,OAAO,CAAC,KAAK,QAAQ;YACrB,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;YAC1B,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YAC3B,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAC9B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QACD,uEAAuE;QACvE,mEAAmE;QACnE,uEAAuE;QACvE,sEAAsE;QACtE,IAAI,CAAC,IAAA,gCAAc,EAAC,CAAC,CAAC,EAAE,CAAC;YACvB,qEAAqE;YACrE,uCAAuC;YACvC,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,yIAAyI,CACxP,CAAC;QACJ,CAAC;QACD,iBAAiB,CAAC,IAAI,CAAC,IAAA,kCAAgB,EAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED;;;;;;;GAOG;AACU,QAAA,8BAA8B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE/D,4EAA4E;AAC5E,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,2BAAkC,IAAY;IAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,IAAA,sBAAU,EAAC,IAAI,EAAE;YACtB,eAAe,EAAE,QAAA,8BAA8B;SAChD,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,2EAA2E;QAC3E,6BAA6B;QAC7B,MAAM,IAAI,GAAI,GAAoC,EAAE,IAAI,CAAC;QACzD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,IAAI,KAAK,sBAAsB,IAAI,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CACb,gCAAgC,QAAA,8BAA8B,QAAQ,CACvE,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,MAA2B;IAClE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAA,qCAAgB,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrD,sEAAsE;IACtE,6EAA6E;IAC7E,uDAAuD;IACvD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,4CAA4C;AAC5C,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,KAAK,UAAU,cAAc,CAC3B,OAAe,EACf,QAAgB,EAChB,MAA2B;IAE3B,MAAM,OAAO,GAAG,kCAAc,CAAC,OAAO,CAAC;IACvC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAEpD,MAAM,SAAS,GAAG,CAChB,MAAM,IAAA,qCAAgB,EAAC,aAAa,CAAC,OAAO,EAAE,oBAAoB,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CACvF,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEzB,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,WAAW,KAAK,kCAAc,CAAC,MAAM,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,wBAAwB,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB;YACpE,GAAG,kCAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAC5D,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAGjC,CAAC;IACF,2EAA2E;IAC3E,yEAAyE;IACzE,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,uCAAuC;IACvC,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,OAAO,GAAc,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAA,qCAAgB,EAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QAChG,yEAAyE;QACzE,kEAAkE;QAClE,oCAAoC;QACpC,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,iBAAiB,KAAK,CAAC,IAAI,WAAW,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB;gBAC7E,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAC3D,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,eAAe,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,IAAI,eAAe,KAAK,kCAAc,CAAC,aAAa,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,0BAA0B,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB;YAC1E,GAAG,kCAAc,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CACnE,CAAC;IACJ,CAAC;IAED,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,oCAAkB,CAAC,CAAC;IAC1D,EAAE,CAAC,aAAa,CACd,SAAS,EACT,IAAI,CAAC,SAAS,CAAC;QACb,OAAO;QACP,MAAM,EAAE,kCAAc,CAAC,MAAM;QAC7B,qEAAqE;QACrE,8DAA8D;QAC9D,QAAQ,EAAE,eAAe;QACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO;KACR,CAAC,CACH,CAAC;IAEF,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;AACnD,CAAC;AAEM,KAAK,sBACV,OAAO,GAAW,QAAA,gBAAgB,EAClC,cAAuB,EACvB,cAAc,GAAuB,EAAE;IAEvC,MAAM,MAAM,GAAwB,EAAE,GAAG,oCAAkB,EAAE,GAAG,cAAc,EAAE,CAAC;IACjF,MAAM,QAAQ,GAAG,IAAA,8BAAe,EAAC,cAAc,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAEvC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,iCAAe,CAAC,CAAC;QACvD,EAAE,CAAC,aAAa,CACd,SAAS,EACT,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAC1E,CAAC;QAEF,2EAA2E;QAC3E,yEAAyE;QACzE,yEAAyE;QACzE,kEAAkE;QAClE,IAAI,OAAiC,CAAC;QACtC,IAAI,YAAgC,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,sCAAsC,OAAO,KAAK,OAAO,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC"}
|
package/dist/index.d.ts
CHANGED
|
@@ -35,6 +35,7 @@ export { loadPolicyConfig, applyPolicy, applyBaseline, describePolicyEffect, sav
|
|
|
35
35
|
export { detectTrustSignals } from "./trust-signals.js";
|
|
36
36
|
export { loadThreatIntel, updateThreatFeed, checkThreatIntel, matchPackageIOC, getBundledFeed, getBundledFeedRef, FEED_REMOTE_LIMITS, type FeedLimitOverrides } from "./threat-intel.js";
|
|
37
37
|
export { feedStats, refreshFeed, parseFeedPayload, decodeCatalogBody, CATALOG_MAX_DECOMPRESSED_BYTES, DEFAULT_FEED_URL, feedFreshness, feedStalenessFindings, catalogFindings, catalogSeverityFor, CATALOG_MISSING_RULE, FEED_STALE_AFTER_DAYS, FEED_STALE_RULE, type FeedFreshness, } from "./feed.js";
|
|
38
|
+
export { resolveCacheDir, userCacheDir, LEGACY_CACHE_DIR } from "./cache-dir.js";
|
|
38
39
|
export { calculateRiskDimensions } from "./risk-engine.js";
|
|
39
40
|
export { getChangedFiles } from "./diff-scanner.js";
|
|
40
41
|
export { listOrgRepos, analyzeOrgFindings } from "./org-scanner.js";
|
package/dist/index.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EACL,aAAa,EACb,WAAW,EACX,WAAW,EACX,aAAa,EACb,aAAa,EACb,cAAc,EACd,mBAAmB,EACnB,aAAa,EACb,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,8BAA8B,EAC9B,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,0BAA0B,EAC1B,cAAc,EACd,YAAY,EACZ,4BAA4B,EAC5B,uBAAuB,EACvB,sBAAsB,EACtB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAChG,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAC/I,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,aAAa,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACtH,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAKxD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,EAAE,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACzL,OAAO,EACL,SAAS,EACT,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,8BAA8B,EAC9B,gBAAgB,EAChB,aAAa,EACb,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,KAAK,aAAa,GACnB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACnG,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAI1D,OAAO,EACL,eAAe,EACf,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,4BAA4B,EAC5B,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,eAAe,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,mBAAmB,EAAE,+BAA+B,EAAE,MAAM,oBAAoB,CAAC;AAC/F,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAKnG,OAAO,EAAE,gBAAgB,EAAE,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,4BAA4B,EAC5B,cAAc,EACd,cAAc,EACd,eAAe,EACf,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,UAAU,EACV,YAAY,EACZ,UAAU,EACV,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC7G,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAClF,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,mBAAmB,EACnB,cAAc,EACd,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,OAAO,EACP,UAAU,EACV,WAAW,EACX,WAAW,EACX,QAAQ,EACR,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,wBAAwB,EACxB,cAAc,EACd,eAAe,EACf,cAAc,EACd,cAAc,EACd,YAAY,EACZ,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,cAAc,EACd,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,aAAa,EACb,UAAU,EACV,YAAY,GACb,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,6BAA6B,EAC7B,wBAAwB,EACxB,yBAAyB,EACzB,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,cAAc,EACd,yBAAyB,EACzB,mBAAmB,EACnB,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,2BAA2B,EAC3B,iBAAiB,EACjB,qBAAqB,EACrB,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,4BAA4B,CAAC;AACpC,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAC5F,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EACL,aAAa,EACb,WAAW,EACX,WAAW,EACX,aAAa,EACb,aAAa,EACb,cAAc,EACd,mBAAmB,EACnB,aAAa,EACb,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,8BAA8B,EAC9B,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,0BAA0B,EAC1B,cAAc,EACd,YAAY,EACZ,4BAA4B,EAC5B,uBAAuB,EACvB,sBAAsB,EACtB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAChG,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAC/I,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,aAAa,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACtH,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAKxD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,EAAE,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACzL,OAAO,EACL,SAAS,EACT,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,8BAA8B,EAC9B,gBAAgB,EAChB,aAAa,EACb,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,KAAK,aAAa,GACnB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACnG,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAI1D,OAAO,EACL,eAAe,EACf,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,4BAA4B,EAC5B,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,eAAe,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,mBAAmB,EAAE,+BAA+B,EAAE,MAAM,oBAAoB,CAAC;AAC/F,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAKnG,OAAO,EAAE,gBAAgB,EAAE,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,4BAA4B,EAC5B,cAAc,EACd,cAAc,EACd,eAAe,EACf,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,UAAU,EACV,YAAY,EACZ,UAAU,EACV,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC7G,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAClF,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,mBAAmB,EACnB,cAAc,EACd,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,OAAO,EACP,UAAU,EACV,WAAW,EACX,WAAW,EACX,QAAQ,EACR,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,wBAAwB,EACxB,cAAc,EACd,eAAe,EACf,cAAc,EACd,cAAc,EACd,YAAY,EACZ,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,cAAc,EACd,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,aAAa,EACb,UAAU,EACV,YAAY,GACb,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,6BAA6B,EAC7B,wBAAwB,EACxB,yBAAyB,EACzB,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,cAAc,EACd,yBAAyB,EACzB,mBAAmB,EACnB,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,2BAA2B,EAC3B,iBAAiB,EACjB,qBAAqB,EACrB,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,4BAA4B,CAAC;AACpC,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAC5F,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC"}
|
package/dist/index.js
CHANGED
|
@@ -8,8 +8,9 @@
|
|
|
8
8
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
9
9
|
exports.INTERNAL_DISCLOSURE_ENV = exports.INTERNAL_DISCLOSURE_PATTERNS = exports.lineAtOffset = exports.buildLineIndex = exports.isHostnameLexicalContextOk = exports.isDevPathContextOk = exports.isPersonalAccountName = exports.isNonPublicForgeHost = exports.severityForHost = exports.isSingleLabelHost = exports.isInternalHost = exports.isWellKnownInfraValue = exports.isUniqueLocalIPv6 = exports.isPrivateAddressLeak = exports.classifyIPv4 = exports.isRuleArmedOnSurface = exports.classifyFileSurface = exports.isDocumentationFile = exports.candidateTokens = exports.normalizeInternalTerm = exports.hashInternalTerm = exports.emptyInternalDisclosureRuntime = exports.loadInternalDisclosureConfig = exports.scanInternalDisclosure = exports.scanGitSecurity = exports.scanConfigFile = exports.scanConfigFiles = exports.scanDockerFile = exports.scanDockerFiles = exports.scanGitHubActionsWorkflows = exports.checkBunLockfile = exports.checkYarnLockfile = exports.checkPnpmLockfile = exports.checkNpmLockfile = exports.checkLockfile = exports.formatReport = exports.monitorWatchlist = exports.listWatchlist = exports.removeFromWatchlist = exports.addToWatchlist = exports.saveWatchlist = exports.loadWatchlist = exports.formatAlert = exports.checkWallet = exports.monitorWallet = exports.scanDependencyConfusion = exports.scanVscodeExtension = exports.scanPypiPackage = exports.scanNpmPackage = exports.scan = void 0;
|
|
10
10
|
exports.catalogSeverityFor = exports.catalogFindings = exports.feedStalenessFindings = exports.feedFreshness = exports.DEFAULT_FEED_URL = exports.CATALOG_MAX_DECOMPRESSED_BYTES = exports.decodeCatalogBody = exports.parseFeedPayload = exports.refreshFeed = exports.feedStats = exports.FEED_REMOTE_LIMITS = exports.getBundledFeedRef = exports.getBundledFeed = exports.matchPackageIOC = exports.checkThreatIntel = exports.updateThreatFeed = exports.loadThreatIntel = exports.detectTrustSignals = exports.saveBaseline = exports.describePolicyEffect = exports.applyBaseline = exports.applyPolicy = exports.loadPolicyConfig = exports.calculateTrustBreakdown = exports.correlateFindings = exports.scanReleaseArtifacts = exports.fetchNpmLatest = exports.checkRegistryVersionDrift = exports.evaluateVersionDrift = exports.analyzePublishingAnomalies = exports.levenshtein = exports.analyzeDependencyRisks = exports.analyzeInstallHooks = exports.scanReadmeLures = exports.parseGitHubUrl = exports.analyzeGitHubTrust = exports.checkFileDigest = exports.checkBadVersion = exports.checkIOCBlocklist = exports.scanNuGetFiles = exports.scanComposerFiles = exports.scanRubyGemsFiles = exports.scanGoFiles = exports.scanCargoFiles = exports.shannonEntropy = exports.analyzeEntropy = exports.MAX_FINDINGS_PER_FILE = exports.MAX_FINDINGS_PER_RULE = exports.MAX_LINE_LENGTH = exports.INTERNAL_HASH_SALT_ENV = void 0;
|
|
11
|
-
exports.
|
|
12
|
-
exports.
|
|
11
|
+
exports.resolveNpmAlias = exports.parseIntegrity = exports.exactVersionOf = exports.detectUninventoriedManifests = exports.describeInventoryCoverage = exports.generateSbomDocument = exports.calculateMetrics = exports.forecastRisk = exports.checkSlaCompliance = exports.buildTriageScope = exports.readJsonArrayStore = exports.triageStoreUnreadableFinding = exports.checkTriageGovernance = exports.saveTriageDecisions = exports.loadTriageDecisions = exports.readTriageDecisions = exports.RiskHistoryUnreadableError = exports.riskHistoryUnreadableFinding = exports.analyzeRiskTrend = exports.saveRiskHistory = exports.loadRiskHistory = exports.readRiskHistory = exports.calculateOrgPosture = exports.getHoneytokenEnv = exports.checkHoneytokenAccess = exports.scanOpenClawPlugin = exports.parseWorkflow = exports.scanWorkflowGraph = exports.modelWorkflows = exports.promoteConfidence = exports.validateFindings = exports.exportGraphMermaid = exports.buildAttackGraph = exports.exportCsvSummary = exports.exportIncidentMarkdown = exports.exportIncidentBundle = exports.checkDependencyGovernance = exports.generatePlaybooks = exports.generateFixSuggestions = exports.generateRemediations = exports.analyzeOrgFindings = exports.listOrgRepos = exports.getChangedFiles = exports.calculateRiskDimensions = exports.LEGACY_CACHE_DIR = exports.userCacheDir = exports.resolveCacheDir = exports.FEED_STALE_RULE = exports.FEED_STALE_AFTER_DAYS = exports.CATALOG_MISSING_RULE = void 0;
|
|
12
|
+
exports.getTwoTierVerdictExitCode = exports.EPSS_FALLBACK_SCORE = exports.SCORECARD_FALLBACK_SCORE = exports.LOOKUP_FAILURE_TTL_MS = exports.LOOKUP_TIMEOUT_MS = exports.STANDARD_ECOSYSTEM_PREFIXES = exports.parsePrefixedPackage = exports.formatPackageCacheKey = exports.isValidEcosystemPrefix = exports.normalizeEcosystemPrefix = exports.ThreatIntelCache = exports.gatherExternalIntel = exports.enrichVulnerabilityInputs = exports.queryScorecard = exports.queryCisaKev = exports.queryEpss = exports.queryOsv = exports.getTwoTierExitCode = exports.calculateCompositeRiskScore = exports.calculateGovernanceVector = exports.calculateHeuristicVector = exports.calculateExploitabilityVector = exports.evaluateTier1Gate = exports.evaluateTwoTierVerdict = exports.SUPPORTED_MANAGERS = exports.resolveManagerBinary = exports.parseSpecToken = exports.extractInstallSpecs = exports.runInstallGuard = exports.analyzeInstallCommand = exports.startMcpServer = exports.handleMcpLine = exports.handleMcpMessage = exports.scanEditorTasksContent = exports.scanAgentSettingsContent = exports.scanSkillContent = exports.scanAgentSkillFiles = exports.MCP_CONFIG_FILES = exports.hasMcpConfigFiles = exports.scanMcpConfigContent = exports.scanMcpConfigs = exports.scanPypiDependencyConfusion = exports.parsePackageValue = exports.toOsvRecords = exports.SLSA_NOT_ASSESSED = exports.parseAttestation = exports.assessSLSA = exports.getSLSALevel = exports.verifySLSA = exports.lockfileEntryName = void 0;
|
|
13
|
+
exports.shouldParseWorkflow = void 0;
|
|
13
14
|
var scanner_js_1 = require("./scanner.js");
|
|
14
15
|
Object.defineProperty(exports, "scan", { enumerable: true, get: function () { return scanner_js_1.scan; } });
|
|
15
16
|
var npm_scanner_js_1 = require("./npm-scanner.js");
|
|
@@ -148,6 +149,10 @@ Object.defineProperty(exports, "catalogSeverityFor", { enumerable: true, get: fu
|
|
|
148
149
|
Object.defineProperty(exports, "CATALOG_MISSING_RULE", { enumerable: true, get: function () { return feed_js_1.CATALOG_MISSING_RULE; } });
|
|
149
150
|
Object.defineProperty(exports, "FEED_STALE_AFTER_DAYS", { enumerable: true, get: function () { return feed_js_1.FEED_STALE_AFTER_DAYS; } });
|
|
150
151
|
Object.defineProperty(exports, "FEED_STALE_RULE", { enumerable: true, get: function () { return feed_js_1.FEED_STALE_RULE; } });
|
|
152
|
+
var cache_dir_js_1 = require("./cache-dir.js");
|
|
153
|
+
Object.defineProperty(exports, "resolveCacheDir", { enumerable: true, get: function () { return cache_dir_js_1.resolveCacheDir; } });
|
|
154
|
+
Object.defineProperty(exports, "userCacheDir", { enumerable: true, get: function () { return cache_dir_js_1.userCacheDir; } });
|
|
155
|
+
Object.defineProperty(exports, "LEGACY_CACHE_DIR", { enumerable: true, get: function () { return cache_dir_js_1.LEGACY_CACHE_DIR; } });
|
|
151
156
|
var risk_engine_js_1 = require("./risk-engine.js");
|
|
152
157
|
Object.defineProperty(exports, "calculateRiskDimensions", { enumerable: true, get: function () { return risk_engine_js_1.calculateRiskDimensions; } });
|
|
153
158
|
var diff_scanner_js_1 = require("./diff-scanner.js");
|
package/dist/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;AAEH,2CAAoC;AAA3B,kGAAA,IAAI,OAAA;AACb,mDAAkD;AAAzC,gHAAA,cAAc,OAAA;AACvB,qDAAoD;AAA3C,kHAAA,eAAe,OAAA;AACxB,yDAA0D;AAAjD,wHAAA,mBAAmB,OAAA;AAC5B,qEAAoE;AAA3D,kIAAA,uBAAuB,OAAA;AAChC,yDAU6B;AAT3B,kHAAA,aAAa,OAAA;AACb,gHAAA,WAAW,OAAA;AACX,gHAAA,WAAW,OAAA;AACX,kHAAA,aAAa,OAAA;AACb,kHAAA,aAAa,OAAA;AACb,mHAAA,cAAc,OAAA;AACd,wHAAA,mBAAmB,OAAA;AACnB,kHAAA,aAAa,OAAA;AACb,qHAAA,gBAAgB,OAAA;AAElB,6CAA6C;AAApC,2GAAA,YAAY,OAAA;AACrB,6DAM+B;AAL7B,oHAAA,aAAa,OAAA;AACb,uHAAA,gBAAgB,OAAA;AAChB,wHAAA,iBAAiB,OAAA;AACjB,wHAAA,iBAAiB,OAAA;AACjB,uHAAA,gBAAgB,OAAA;AAElB,yEAAyE;AAAhE,uIAAA,0BAA0B,OAAA;AACnC,iEAA0E;AAAjE,wHAAA,eAAe,OAAA;AAAE,uHAAA,cAAc,OAAA;AACxC,yDAAsE;AAA7D,oHAAA,eAAe,OAAA;AAAE,mHAAA,cAAc,OAAA;AACxC,mDAAmD;AAA1C,iHAAA,eAAe,OAAA;AACxB,mEA6BkC;AA5BhC,gIAAA,sBAAsB,OAAA;AACtB,sIAAA,4BAA4B,OAAA;AAC5B,wIAAA,8BAA8B,OAAA;AAC9B,0HAAA,gBAAgB,OAAA;AAChB,+HAAA,qBAAqB,OAAA;AACrB,yHAAA,eAAe,OAAA;AACf,6HAAA,mBAAmB,OAAA;AACnB,6HAAA,mBAAmB,OAAA;AACnB,8HAAA,oBAAoB,OAAA;AACpB,sHAAA,YAAY,OAAA;AACZ,8HAAA,oBAAoB,OAAA;AACpB,2HAAA,iBAAiB,OAAA;AACjB,+HAAA,qBAAqB,OAAA;AACrB,wHAAA,cAAc,OAAA;AACd,2HAAA,iBAAiB,OAAA;AACjB,yHAAA,eAAe,OAAA;AACf,8HAAA,oBAAoB,OAAA;AACpB,+HAAA,qBAAqB,OAAA;AACrB,4HAAA,kBAAkB,OAAA;AAClB,oIAAA,0BAA0B,OAAA;AAC1B,wHAAA,cAAc,OAAA;AACd,sHAAA,YAAY,OAAA;AACZ,sIAAA,4BAA4B,OAAA;AAC5B,iIAAA,uBAAuB,OAAA;AACvB,gIAAA,sBAAsB,OAAA;AACtB,yHAAA,eAAe,OAAA;AACf,+HAAA,qBAAqB,OAAA;AACrB,+HAAA,qBAAqB,OAAA;AAEvB,2CAA8D;AAArD,4GAAA,cAAc,OAAA;AAAE,4GAAA,cAAc,OAAA;AACvC,uDAAoD;AAA3C,kHAAA,cAAc,OAAA;AACvB,iDAA8C;AAArC,4GAAA,WAAW,OAAA;AACpB,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,uDAAoD;AAA3C,kHAAA,cAAc,OAAA;AACvB,uDAAyF;AAAhF,qHAAA,iBAAiB,OAAA;AAAE,mHAAA,eAAe,OAAA;AAAE,mHAAA,eAAe,OAAA;AAC5D,qEAAgG;AAAvF,6HAAA,kBAAkB,OAAA;AAAE,yHAAA,cAAc,OAAA;AAAE,0HAAA,eAAe,OAAA;AAC5D,qEAAgE;AAAvD,8HAAA,mBAAmB,OAAA;AAC5B,6EAAoF;AAA3E,qIAAA,sBAAsB,OAAA;AAAE,0HAAA,WAAW,OAAA;AAC5C,mFAA+I;AAAtI,4IAAA,0BAA0B,OAAA;AAAE,sIAAA,oBAAoB,OAAA;AAAE,2IAAA,yBAAyB,OAAA;AAAE,gIAAA,cAAc,OAAA;AACpG,2DAA4D;AAAnD,0HAAA,oBAAoB,OAAA;AAC7B,iEAA4D;AAAnD,0HAAA,iBAAiB,OAAA;AAC1B,2DAA+D;AAAtD,6HAAA,uBAAuB,OAAA;AAChC,uDAAsH;AAA7G,oHAAA,gBAAgB,OAAA;AAAE,+GAAA,WAAW,OAAA;AAAE,iHAAA,aAAa,OAAA;AAAE,wHAAA,oBAAoB,OAAA;AAAE,gHAAA,YAAY,OAAA;AACzF,uDAAwD;AAA/C,sHAAA,kBAAkB,OAAA;AAC3B,gFAAgF;AAChF,iFAAiF;AACjF,+EAA+E;AAC/E,2EAA2E;AAC3E,qDAAyL;AAAhL,kHAAA,eAAe,OAAA;AAAE,mHAAA,gBAAgB,OAAA;AAAE,mHAAA,gBAAgB,OAAA;AAAE,kHAAA,eAAe,OAAA;AAAE,iHAAA,cAAc,OAAA;AAAE,oHAAA,iBAAiB,OAAA;AAAE,qHAAA,kBAAkB,OAAA;AACpI,qCAemB;AAdjB,oGAAA,SAAS,OAAA;AACT,sGAAA,WAAW,OAAA;AACX,2GAAA,gBAAgB,OAAA;AAChB,4GAAA,iBAAiB,OAAA;AACjB,yHAAA,8BAA8B,OAAA;AAC9B,2GAAA,gBAAgB,OAAA;AAChB,wGAAA,aAAa,OAAA;AACb,gHAAA,qBAAqB,OAAA;AACrB,0GAAA,eAAe,OAAA;AACf,6GAAA,kBAAkB,OAAA;AAClB,+GAAA,oBAAoB,OAAA;AACpB,gHAAA,qBAAqB,OAAA;AACrB,0GAAA,eAAe,OAAA;AAGjB,+CAAiF;AAAxE,+GAAA,eAAe,OAAA;AAAE,4GAAA,YAAY,OAAA;AAAE,gHAAA,gBAAgB,OAAA;AACxD,mDAA2D;AAAlD,yHAAA,uBAAuB,OAAA;AAChC,qDAAoD;AAA3C,kHAAA,eAAe,OAAA;AACxB,mDAAoE;AAA3D,8GAAA,YAAY,OAAA;AAAE,oHAAA,kBAAkB,OAAA;AACzC,iEAAuF;AAA9E,6HAAA,oBAAoB,OAAA;AAAE,+HAAA,sBAAsB,OAAA;AACrD,+CAAmD;AAA1C,iHAAA,iBAAiB,OAAA;AAC1B,uEAAuE;AAA9D,qIAAA,yBAAyB,OAAA;AAClC,qDAAmG;AAA1F,uHAAA,oBAAoB,OAAA;AAAE,yHAAA,sBAAsB,OAAA;AAAE,mHAAA,gBAAgB,OAAA;AACvE,qDAAyE;AAAhE,mHAAA,gBAAgB,OAAA;AAAE,qHAAA,kBAAkB,OAAA;AAC7C,+DAA6E;AAApE,wHAAA,gBAAgB,OAAA;AAAE,yHAAA,iBAAiB,OAAA;AAC5C,6DAAuD;AAA9C,qHAAA,cAAc,OAAA;AACvB,yDAAwD;AAA/C,sHAAA,iBAAiB,OAAA;AAC1B,qDAAkD;AAAzC,gHAAA,aAAa,OAAA;AACtB,2EAAkE;AAAzD,gIAAA,kBAAkB,OAAA;AAC3B,6DAAgF;AAAvE,4HAAA,qBAAqB,OAAA;AAAE,uHAAA,gBAAgB,OAAA;AAChD,yDAA0D;AAAjD,wHAAA,mBAAmB,OAAA;AAC5B,4EAA4E;AAC5E,2EAA2E;AAC3E,qEAAqE;AACrE,iEAOiC;AAN/B,wHAAA,eAAe,OAAA;AACf,wHAAA,eAAe,OAAA;AACf,wHAAA,eAAe,OAAA;AACf,yHAAA,gBAAgB,OAAA;AAChB,qIAAA,4BAA4B,OAAA;AAC5B,mIAAA,0BAA0B,OAAA;AAG5B,uDAM4B;AAL1B,uHAAA,mBAAmB,OAAA;AACnB,uHAAA,mBAAmB,OAAA;AACnB,uHAAA,mBAAmB,OAAA;AACnB,yHAAA,qBAAqB,OAAA;AACrB,gIAAA,4BAA4B,OAAA;AAG9B,+CAAoD;AAA3C,kHAAA,kBAAkB,OAAA;AAE3B,4EAA4E;AAC5E,+EAA+E;AAC/E,4EAA4E;AAC5E,yEAAyE;AACzE,qDAAuE;AAA9D,mHAAA,gBAAgB,OAAA;AACzB,iDAAqD;AAA5C,mHAAA,kBAAkB,OAAA;AAC3B,uDAAkD;AAAzC,gHAAA,YAAY,OAAA;AACrB,2CAAgD;AAAvC,8GAAA,gBAAgB,OAAA;AACzB,yDAQ6B;AAP3B,yHAAA,oBAAoB,OAAA;AACpB,8HAAA,yBAAyB,OAAA;AACzB,iIAAA,4BAA4B,OAAA;AAC5B,mHAAA,cAAc,OAAA;AACd,mHAAA,cAAc,OAAA;AACd,oHAAA,eAAe,OAAA;AACf,sHAAA,iBAAiB,OAAA;AAEnB,uDAM4B;AAL1B,8GAAA,UAAU,OAAA;AACV,gHAAA,YAAY,OAAA;AACZ,8GAAA,UAAU,OAAA;AACV,oHAAA,gBAAgB,OAAA;AAChB,qHAAA,iBAAiB,OAAA;AAGnB,iDAAkE;AAAzD,6GAAA,YAAY,OAAA;AAAE,kHAAA,iBAAiB,OAAA;AACxC,qEAAwE;AAA/D,sIAAA,2BAA2B,OAAA;AACpC,mDAA6G;AAApG,gHAAA,cAAc,OAAA;AAAE,sHAAA,oBAAoB,OAAA;AAAE,mHAAA,iBAAiB,OAAA;AAAE,kHAAA,gBAAgB,OAAA;AAClF,yDAK6B;AAJ3B,wHAAA,mBAAmB,OAAA;AACnB,qHAAA,gBAAgB,OAAA;AAChB,6HAAA,wBAAwB,OAAA;AACxB,2HAAA,sBAAsB,OAAA;AAExB,iDAAkF;AAAzE,iHAAA,gBAAgB,OAAA;AAAE,8GAAA,aAAa,OAAA;AAAE,+GAAA,cAAc,OAAA;AACxD,uDAO4B;AAN1B,yHAAA,qBAAqB,OAAA;AACrB,mHAAA,eAAe,OAAA;AACf,uHAAA,mBAAmB,OAAA;AACnB,kHAAA,cAAc,OAAA;AACd,wHAAA,oBAAoB,OAAA;AACpB,sHAAA,kBAAkB,OAAA;AAsCpB,6DAQ+B;AAP7B,6HAAA,sBAAsB,OAAA;AACtB,wHAAA,iBAAiB,OAAA;AACjB,oIAAA,6BAA6B,OAAA;AAC7B,+HAAA,wBAAwB,OAAA;AACxB,gIAAA,yBAAyB,OAAA;AACzB,kIAAA,2BAA2B,OAAA;AAC3B,yHAAA,kBAAkB,OAAA;AAEpB,uEAiBoC;AAhBlC,oHAAA,QAAQ,OAAA;AACR,qHAAA,SAAS,OAAA;AACT,wHAAA,YAAY,OAAA;AACZ,0HAAA,cAAc,OAAA;AACd,qIAAA,yBAAyB,OAAA;AACzB,+HAAA,mBAAmB,OAAA;AACnB,4HAAA,gBAAgB,OAAA;AAChB,oIAAA,wBAAwB,OAAA;AACxB,kIAAA,sBAAsB,OAAA;AACtB,iIAAA,qBAAqB,OAAA;AACrB,gIAAA,oBAAoB,OAAA;AACpB,uIAAA,2BAA2B,OAAA;AAC3B,6HAAA,iBAAiB,OAAA;AACjB,iIAAA,qBAAqB,OAAA;AACrB,oIAAA,wBAAwB,OAAA;AACxB,+HAAA,mBAAmB,OAAA;AAGrB,6CAA0D;AAAjD,wHAAA,yBAAyB,OAAA;AAClC,qDAAwD;AAA/C,sHAAA,mBAAmB,OAAA"}
|
package/dist/npm-scanner.js
CHANGED
|
@@ -66,7 +66,7 @@ const threat_intel_js_1 = require("./threat-intel.js");
|
|
|
66
66
|
const install_guard_js_1 = require("./install-guard.js");
|
|
67
67
|
const json_utils_js_1 = require("./json-utils.js");
|
|
68
68
|
const remote_download_js_1 = require("./remote-download.js");
|
|
69
|
-
const TOOL_VERSION = "6.
|
|
69
|
+
const TOOL_VERSION = "6.4.0";
|
|
70
70
|
const NPM_REGISTRY = "https://registry.npmjs.org";
|
|
71
71
|
const NPM_REGISTRY_HOST = "registry.npmjs.org";
|
|
72
72
|
const RAW_GITHUB_HOST = "raw.githubusercontent.com";
|
package/dist/pypi-scanner.js
CHANGED
|
@@ -56,7 +56,7 @@ const patterns_js_1 = require("./patterns.js");
|
|
|
56
56
|
const pattern_scanner_js_1 = require("./pattern-scanner.js");
|
|
57
57
|
const extracted_file_walker_js_1 = require("./extracted-file-walker.js");
|
|
58
58
|
const remote_download_js_1 = require("./remote-download.js");
|
|
59
|
-
const TOOL_VERSION = "6.
|
|
59
|
+
const TOOL_VERSION = "6.4.0";
|
|
60
60
|
const PYPI_API = "https://pypi.org/pypi";
|
|
61
61
|
const PYPI_METADATA_HOST = "pypi.org";
|
|
62
62
|
const PYPI_ARTIFACT_HOST = "files.pythonhosted.org";
|
package/dist/reporter.js
CHANGED
|
@@ -294,7 +294,7 @@ function formatJson(report) {
|
|
|
294
294
|
function formatText(report, options = {}) {
|
|
295
295
|
const lines = [];
|
|
296
296
|
// ── layout constants ───────────────────────────────────────────────────────
|
|
297
|
-
const VERSION = "6.
|
|
297
|
+
const VERSION = "6.4.0";
|
|
298
298
|
const W = 76; // visible chars between "│ " and " │" (total line = 80)
|
|
299
299
|
// ── ANSI helpers ───────────────────────────────────────────────────────────
|
|
300
300
|
const stripAnsi = (s) => s.replace(/\x1b\[[0-9;]*m/g, "");
|
|
@@ -739,7 +739,7 @@ function formatMarkdown(report) {
|
|
|
739
739
|
lines.push("");
|
|
740
740
|
lines.push(`| Property | Value |`);
|
|
741
741
|
lines.push(`|----------|-------|`);
|
|
742
|
-
lines.push(`| Tool | \`${mdCell(report.tool || "supply-chain-guard v6.
|
|
742
|
+
lines.push(`| Tool | \`${mdCell(report.tool || "supply-chain-guard v6.4.0")}\` |`);
|
|
743
743
|
lines.push(`| Target | \`${mdCell(report.target)}\` |`);
|
|
744
744
|
lines.push(`| Type | ${mdText(report.scanType)} |`);
|
|
745
745
|
lines.push(`| Time | ${mdText(report.timestamp)} |`);
|
|
@@ -993,7 +993,7 @@ function formatSarif(report) {
|
|
|
993
993
|
tool: {
|
|
994
994
|
driver: {
|
|
995
995
|
name: "supply-chain-guard",
|
|
996
|
-
version: "6.
|
|
996
|
+
version: "6.4.0",
|
|
997
997
|
informationUri: "https://github.com/homeofe/supply-chain-guard",
|
|
998
998
|
rules,
|
|
999
999
|
},
|
|
@@ -1217,7 +1217,7 @@ function formatSbom(report) {
|
|
|
1217
1217
|
...(properties.length > 0 ? { properties } : {}),
|
|
1218
1218
|
}];
|
|
1219
1219
|
});
|
|
1220
|
-
const annotations = buildIncidentAnnotations(report.incidents, subjectsByIncident, metadata.timestamp, metadata.tools.components[0]?.version ?? "6.
|
|
1220
|
+
const annotations = buildIncidentAnnotations(report.incidents, subjectsByIncident, metadata.timestamp, metadata.tools.components[0]?.version ?? "6.4.0");
|
|
1221
1221
|
const withVulns = {
|
|
1222
1222
|
...document,
|
|
1223
1223
|
metadata: {
|
|
@@ -1266,7 +1266,7 @@ function formatSbom(report) {
|
|
|
1266
1266
|
...(properties.length > 0 ? { properties } : {}),
|
|
1267
1267
|
};
|
|
1268
1268
|
});
|
|
1269
|
-
const fallbackAnnotations = buildIncidentAnnotations(report.incidents, fallbackSubjectsByIncident, report.timestamp, "6.
|
|
1269
|
+
const fallbackAnnotations = buildIncidentAnnotations(report.incidents, fallbackSubjectsByIncident, report.timestamp, "6.4.0");
|
|
1270
1270
|
const sbom = {
|
|
1271
1271
|
bomFormat: "CycloneDX",
|
|
1272
1272
|
specVersion: "1.6",
|
|
@@ -1276,7 +1276,7 @@ function formatSbom(report) {
|
|
|
1276
1276
|
timestamp: report.timestamp,
|
|
1277
1277
|
tools: {
|
|
1278
1278
|
components: [
|
|
1279
|
-
{ type: "application", name: "supply-chain-guard", version: "6.
|
|
1279
|
+
{ type: "application", name: "supply-chain-guard", version: "6.4.0" },
|
|
1280
1280
|
],
|
|
1281
1281
|
},
|
|
1282
1282
|
component: {
|
|
@@ -1352,8 +1352,8 @@ function formatBadge(report) {
|
|
|
1352
1352
|
label: "supply-chain-guard",
|
|
1353
1353
|
message,
|
|
1354
1354
|
color,
|
|
1355
|
-
tool: report.tool || "supply-chain-guard v6.
|
|
1356
|
-
version: report.tool ? (report.tool.includes("@") ? report.tool.split("@")[1] : report.tool.replace(/^supply-chain-guard v?/, "")) : "6.
|
|
1355
|
+
tool: report.tool || "supply-chain-guard v6.4.0",
|
|
1356
|
+
version: report.tool ? (report.tool.includes("@") ? report.tool.split("@")[1] : report.tool.replace(/^supply-chain-guard v?/, "")) : "6.4.0",
|
|
1357
1357
|
timestamp: report.timestamp,
|
|
1358
1358
|
commit: report.commit ?? "none",
|
|
1359
1359
|
detectionSet: report.detectionSet,
|
|
@@ -1409,7 +1409,7 @@ function formatGitlab(report) {
|
|
|
1409
1409
|
name: "supply-chain-guard",
|
|
1410
1410
|
url: "https://github.com/homeofe/supply-chain-guard",
|
|
1411
1411
|
vendor: { name: "supply-chain-guard" },
|
|
1412
|
-
version: "6.
|
|
1412
|
+
version: "6.4.0",
|
|
1413
1413
|
};
|
|
1414
1414
|
const vulnerabilities = report.findings
|
|
1415
1415
|
.filter((f) => !f.suppressed)
|
|
@@ -1534,7 +1534,7 @@ function formatJunit(report) {
|
|
|
1534
1534
|
// (unreleased, issue 205): the coverage properties are ALWAYS emitted, so a JUnit
|
|
1535
1535
|
// artefact states its own denominator instead of only what was found.
|
|
1536
1536
|
lines.push(" <properties>");
|
|
1537
|
-
lines.push(` <property name="supply-chain-guard:tool-version" value="${xmlEscape(report.tool || "supply-chain-guard v6.
|
|
1537
|
+
lines.push(` <property name="supply-chain-guard:tool-version" value="${xmlEscape(report.tool || "supply-chain-guard v6.4.0")}"/>`);
|
|
1538
1538
|
lines.push(` <property name="supply-chain-guard:timestamp" value="${xmlEscape(report.timestamp)}"/>`);
|
|
1539
1539
|
lines.push(` <property name="supply-chain-guard:commit" value="${xmlEscape(report.commit ?? "none (not a git repository)")}"/>`);
|
|
1540
1540
|
if (report.detectionSet) {
|
|
@@ -1664,7 +1664,7 @@ footer{text-align:center;padding:24px;color:#94a3b8;font-size:13px}
|
|
|
1664
1664
|
<body>
|
|
1665
1665
|
<div class="container">
|
|
1666
1666
|
<header>
|
|
1667
|
-
<h1>${escapeHtml(report.tool || "supply-chain-guard v6.
|
|
1667
|
+
<h1>${escapeHtml(report.tool || "supply-chain-guard v6.4.0")} Scan Report</h1>
|
|
1668
1668
|
<div class="meta">
|
|
1669
1669
|
<span>Target: ${escapeHtml(report.target)}</span>
|
|
1670
1670
|
<span>Type: ${report.scanType}</span>
|
|
@@ -1726,7 +1726,7 @@ footer{text-align:center;padding:24px;color:#94a3b8;font-size:13px}
|
|
|
1726
1726
|
` : ""}
|
|
1727
1727
|
|
|
1728
1728
|
<footer>
|
|
1729
|
-
Generated by <a href="https://github.com/homeofe/supply-chain-guard">${escapeHtml(report.tool || "supply-chain-guard v6.
|
|
1729
|
+
Generated by <a href="https://github.com/homeofe/supply-chain-guard">${escapeHtml(report.tool || "supply-chain-guard v6.4.0")}</a>
|
|
1730
1730
|
</footer>
|
|
1731
1731
|
</div>
|
|
1732
1732
|
<script>
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"risk-forecast.d.ts","sourceRoot":"","sources":["../src/risk-forecast.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE5D;;GAEG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,gBAAgB,EAAE,EAC3B,YAAY,EAAE,MAAM,GACnB,OAAO,EAAE,
|
|
1
|
+
{"version":3,"file":"risk-forecast.d.ts","sourceRoot":"","sources":["../src/risk-forecast.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE5D;;GAEG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,gBAAgB,EAAE,EAC3B,YAAY,EAAE,MAAM,GACnB,OAAO,EAAE,CAoGX"}
|
package/dist/risk-forecast.js
CHANGED
|
@@ -14,8 +14,13 @@ function forecastRisk(history, currentScore) {
|
|
|
14
14
|
const findings = [];
|
|
15
15
|
if (history.length < 5)
|
|
16
16
|
return findings;
|
|
17
|
-
// Simple linear regression on last 10 data points
|
|
18
|
-
|
|
17
|
+
// Simple linear regression on the last 10 data points, the current scan
|
|
18
|
+
// being the last of them. Fitted to the stored history alone, the line
|
|
19
|
+
// described the scans before this one, and a project whose score had just
|
|
20
|
+
// dropped to 0 was told its posture was "worsening".
|
|
21
|
+
const recent = [...history.map((h) => h.score), currentScore]
|
|
22
|
+
.slice(-10)
|
|
23
|
+
.map((score) => ({ score }));
|
|
19
24
|
const n = recent.length;
|
|
20
25
|
const xMean = (n - 1) / 2;
|
|
21
26
|
const yMean = recent.reduce((s, h) => s + h.score, 0) / n;
|
|
@@ -53,7 +58,9 @@ function forecastRisk(history, currentScore) {
|
|
|
53
58
|
sumSq += residual * residual;
|
|
54
59
|
}
|
|
55
60
|
const stdev = Math.sqrt(sumSq / n);
|
|
56
|
-
|
|
61
|
+
// A scan below the window's own average is not evidence of a rise, however
|
|
62
|
+
// steep the scans before it were.
|
|
63
|
+
if (slope > 5 && currentScore >= yMean) {
|
|
57
64
|
// Getting worse fast - real degradation worth flagging.
|
|
58
65
|
findings.push({
|
|
59
66
|
rule: "RISK_TRAJECTORY_DEGRADING",
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"risk-forecast.js","sourceRoot":"","sources":["../src/risk-forecast.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAIH;;GAEG;AACH,sBACE,OAA2B,EAC3B,YAAoB;IAEpB,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAExC,
|
|
1
|
+
{"version":3,"file":"risk-forecast.js","sourceRoot":"","sources":["../src/risk-forecast.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAIH;;GAEG;AACH,sBACE,OAA2B,EAC3B,YAAoB;IAEpB,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAExC,wEAAwE;IACxE,uEAAuE;IACvE,0EAA0E;IAC1E,qDAAqD;IACrD,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;SAC1D,KAAK,CAAC,CAAC,EAAE,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IACxB,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IAE1D,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,SAAS,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;QACrD,WAAW,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9D,yBAAyB;IACzB,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC;IAE3D,IAAI,aAAa,GAAG,EAAE,IAAI,YAAY,IAAI,EAAE,EAAE,CAAC;QAC7C,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,wBAAwB;YAC9B,WAAW,EAAE,8CAA8C,aAAa,4DAA4D,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YAC7J,QAAQ,EAAE,MAAM;YAChB,UAAU,EAAE,GAAG;YACf,QAAQ,EAAE,OAAO;YACjB,cAAc,EAAE,oFAAoF;SACrG,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IACrE,kEAAkE;IAClE,uEAAuE;IACvE,sEAAsE;IACtE,oEAAoE;IACpE,kEAAkE;IAElE,8DAA8D;IAC9D,qEAAqE;IACrE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,SAAS,CAAC;QAC7C,KAAK,IAAI,QAAQ,GAAG,QAAQ,CAAC;IAC/B,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAEnC,2EAA2E;IAC3E,kCAAkC;IAClC,IAAI,KAAK,GAAG,CAAC,IAAI,YAAY,IAAI,KAAK,EAAE,CAAC;QACvC,wDAAwD;QACxD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,2BAA2B;YACjC,WAAW,EAAE,sCAAsC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uDAAuD,CAAC,SAAS;YACpI,QAAQ,EAAE,MAAM;YAChB,UAAU,EAAE,GAAG;YACf,QAAQ,EAAE,OAAO;YACjB,cAAc,EAAE,+HAA+H;SAChJ,CAAC,CAAC;IACL,CAAC;IACD,iEAAiE;IACjE,0DAA0D;IAE1D,wEAAwE;IACxE,yEAAyE;IACzE,yEAAyE;IACzE,oEAAoE;IACpE,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QACpD,IAAI,SAAS,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAChF,gBAAgB,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,KAAK,KAAK,CAAC;YAAE,SAAS,GAAG,KAAK,CAAC;IACrC,CAAC;IAED,IAAI,KAAK,GAAG,EAAE,IAAI,gBAAgB,IAAI,CAAC,EAAE,CAAC;QACxC,oEAAoE;QACpE,kEAAkE;QAClE,iEAAiE;QACjE,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,0BAA0B;YAChC,WAAW,EAAE,iCAAiC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,gBAAgB,kEAAkE;YAClK,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,GAAG;YACf,QAAQ,EAAE,OAAO;YACjB,cAAc,EAAE,gHAAgH;SACjI,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}
|
package/dist/sbom-generator.js
CHANGED
|
@@ -87,7 +87,7 @@ const fs = __importStar(require("node:fs"));
|
|
|
87
87
|
const path = __importStar(require("node:path"));
|
|
88
88
|
const node_crypto_1 = require("node:crypto");
|
|
89
89
|
const json_utils_js_1 = require("./json-utils.js");
|
|
90
|
-
const TOOL_VERSION = "6.
|
|
90
|
+
const TOOL_VERSION = "6.4.0";
|
|
91
91
|
/** bom-ref of the component the document is about. */
|
|
92
92
|
const SUBJECT_BOM_REF = "target";
|
|
93
93
|
/** Property namespace, matching the `supply-chain-guard:scan-status` property reporter.ts adds. */
|
package/dist/scanner.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAyB,MAAM,YAAY,CAAC;
|
|
1
|
+
{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAyB,MAAM,YAAY,CAAC;AAsL1F;;GAEG;AACH,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAg+BpE;AAo+BD;;;;GAIG;AAMH,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAMlD,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAoB1D"}
|
package/dist/scanner.js
CHANGED
|
@@ -96,6 +96,7 @@ const workflow_modeler_js_1 = require("./workflow-modeler.js");
|
|
|
96
96
|
const workflow_graph_js_1 = require("./workflow-graph.js");
|
|
97
97
|
const openclaw_plugin_scanner_js_1 = require("./openclaw-plugin-scanner.js");
|
|
98
98
|
const feed_js_1 = require("./feed.js");
|
|
99
|
+
const cache_dir_js_1 = require("./cache-dir.js");
|
|
99
100
|
const publishing_anomaly_detector_js_1 = require("./publishing-anomaly-detector.js");
|
|
100
101
|
const continuous_monitor_js_1 = require("./continuous-monitor.js");
|
|
101
102
|
const triage_engine_js_1 = require("./triage-engine.js");
|
|
@@ -112,7 +113,7 @@ const mcp_scanner_js_1 = require("./mcp-scanner.js");
|
|
|
112
113
|
const skills_scanner_js_1 = require("./skills-scanner.js");
|
|
113
114
|
const disguised_asset_js_1 = require("./disguised-asset.js");
|
|
114
115
|
const self_scan_trust_js_1 = require("./self-scan-trust.js");
|
|
115
|
-
const TOOL_VERSION = "6.
|
|
116
|
+
const TOOL_VERSION = "6.4.0";
|
|
116
117
|
/**
|
|
117
118
|
* Pattern literals in this matcher module deliberately spell out signatures
|
|
118
119
|
* that the public scanner detects. Suppress only those exact rule definitions
|
|
@@ -246,7 +247,7 @@ async function scan(options) {
|
|
|
246
247
|
}
|
|
247
248
|
}
|
|
248
249
|
// v4.5: Load threat intelligence feed. The Action passes an isolated cacheDir
|
|
249
|
-
// under RUNNER_TEMP; the CLI default
|
|
250
|
+
// under RUNNER_TEMP; the CLI default is the per-user cache (src/cache-dir.ts).
|
|
250
251
|
// Catalog availability is snapshotted here: nested scanners must not reload
|
|
251
252
|
// from a different directory and overwrite lastCatalog before the finding.
|
|
252
253
|
const threatFeed = (0, threat_intel_js_1.loadThreatIntel)(options.cacheDir);
|
|
@@ -748,7 +749,9 @@ async function scan(options) {
|
|
|
748
749
|
// cannot change what this scan reports. Carries no `file`, for the same
|
|
749
750
|
// reason: the path-ignore filter below drops anything that looks like a
|
|
750
751
|
// repo finding.
|
|
751
|
-
for (const pushed of (0, feed_js_1.catalogFindings)(catalogState, policy?.catalog ?? "optional"
|
|
752
|
+
for (const pushed of (0, feed_js_1.catalogFindings)(catalogState, policy?.catalog ?? "optional", {
|
|
753
|
+
legacyCacheInWorkingDir: (0, cache_dir_js_1.legacyCacheIgnored)(options.cacheDir),
|
|
754
|
+
}))
|
|
752
755
|
findings.push(pushed);
|
|
753
756
|
// Apply path ignores to out-of-band scanners too. The primary file walk was
|
|
754
757
|
// pruned before scanning, but Git/lockfile/agent scanners discover their own
|