toolip 1.0.3 → 1.0.6

package/dist/src/core/alternatives.js

@@ -1,35 +0,0 @@
-const alternativeMap = {
-    request: [
-        { name: 'got', reason: 'Modern HTTP client with active maintenance and strong Node.js support.' },
-        { name: 'undici', reason: 'Fast official Node.js HTTP client maintained under the Node.js project.' },
-        { name: 'axios', reason: 'Popular promise-based HTTP client with broad ecosystem adoption.' }
-    ],
-    'node-fetch': [
-        { name: 'undici', reason: 'Native fetch-compatible HTTP client for modern Node.js.' },
-        { name: 'ky', reason: 'Small fetch-based client for browser and modern JavaScript workflows.' }
-    ],
-    moment: [
-        { name: 'dayjs', reason: 'Small Moment-compatible API with lower bundle size.' },
-        { name: 'date-fns', reason: 'Modular date utilities with tree-shaking support.' },
-        { name: 'luxon', reason: 'Modern date-time library from the Moment maintainers.' }
-    ],
-    lodash: [
-        { name: 'lodash-es', reason: 'ES module build with better tree-shaking.' },
-        { name: 'radash', reason: 'Modern utility library with TypeScript-friendly APIs.' }
-    ],
-    uuid: [
-        { name: 'crypto.randomUUID', reason: 'Built into modern Node.js and avoids an extra dependency where suitable.' }
-    ]
-};
-export function findAlternatives(packageName) {
-    return {
-        package: packageName,
-        alternatives: alternativeMap[packageName] ?? [
-            {
-                name: 'No curated alternative yet',
-                reason: 'Toolip does not have a curated replacement for this package yet. Inspect maintenance, license, downloads, and dependency count manually.'
-            }
-        ]
-    };
-}
-//# sourceMappingURL=alternatives.js.map

package/dist/src/core/alternatives.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"alternatives.js","sourceRoot":"","sources":["../../../src/core/alternatives.ts"],"names":[],"mappings":"AAQA,MAAM,cAAc,GAAuD;IACzE,OAAO,EAAE;QACP,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,wEAAwE,EAAE;QACjG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,yEAAyE,EAAE;QACrG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,kEAAkE,EAAE;KAC9F;IACD,YAAY,EAAE;QACZ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,yDAAyD,EAAE;QACrF,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,uEAAuE,EAAE;KAChG;IACD,MAAM,EAAE;QACN,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,qDAAqD,EAAE;QAChF,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,mDAAmD,EAAE;QACjF,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,uDAAuD,EAAE;KACnF;IACD,MAAM,EAAE;QACN,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,2CAA2C,EAAE;QAC1E,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,uDAAuD,EAAE;KACpF;IACD,IAAI,EAAE;QACJ,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,0EAA0E,EAAE;KAClH;CACF,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,YAAY,EAAE,cAAc,CAAC,WAAW,CAAC,IAAI;YAC3C;gBACE,IAAI,EAAE,4BAA4B;gBAClC,MAAM,EAAE,0IAA0I;aACnJ;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/src/core/analyze-package.d.ts

@@ -1,2 +0,0 @@
-import type { DependencyInfo, PackageHealth } from './dependency-types.js';
-export declare function analyzePackage(dependency: DependencyInfo): Promise<PackageHealth>;

package/dist/src/core/analyze-package.js

@@ -1,49 +0,0 @@
-import semver from 'semver';
-import { fetchPackageManifest } from './npm-registry.js';
-import { calculateRiskScore } from './risk-score.js';
-function cleanInstalledVersion(version) {
-    if (version === 'latest')
-        return null;
-    return semver.coerce(version)?.version ?? null;
-}
-function isOutdated(installedVersion, latestVersion) {
-    const cleanedInstalledVersion = cleanInstalledVersion(installedVersion);
-    if (!cleanedInstalledVersion || !latestVersion) {
-        return false;
-    }
-    const cleanedLatestVersion = semver.coerce(latestVersion)?.version;
-    if (!cleanedLatestVersion) {
-        return false;
-    }
-    return semver.lt(cleanedInstalledVersion, cleanedLatestVersion);
-}
-export async function analyzePackage(dependency) {
-    const manifest = await fetchPackageManifest(dependency.name);
-    const latestVersion = typeof manifest.version === 'string' ? manifest.version : null;
-    const publishedDate = manifest.time && latestVersion ? manifest.time[latestVersion] ?? null : null;
-    const ageInDays = publishedDate
-        ? Math.floor((Date.now() - new Date(publishedDate).getTime()) /
-            (1000 * 60 * 60 * 24))
-        : null;
-    const maintainers = Array.isArray(manifest.maintainers)
-        ? manifest.maintainers.length
-        : 0;
-    const deprecated = Boolean(manifest.deprecated);
-    return {
-        name: dependency.name,
-        installedVersion: dependency.version,
-        latestVersion,
-        outdated: isOutdated(dependency.version, latestVersion),
-        deprecated,
-        maintainers,
-        publishedAt: publishedDate,
-        ageInDays,
-        downloads: null,
-        riskScore: calculateRiskScore({
-            deprecated,
-            maintainers,
-            ageInDays
-        })
-    };
-}
-//# sourceMappingURL=analyze-package.js.map

package/dist/src/core/analyze-package.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"analyze-package.js","sourceRoot":"","sources":["../../../src/core/analyze-package.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAGrD,SAAS,qBAAqB,CAAC,OAAe;IAC5C,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC;AACjD,CAAC;AAED,SAAS,UAAU,CAAC,gBAAwB,EAAE,aAA4B;IACxE,MAAM,uBAAuB,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;IAExE,IAAI,CAAC,uBAAuB,IAAI,CAAC,aAAa,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IAEnE,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,MAAM,CAAC,EAAE,CAAC,uBAAuB,EAAE,oBAAoB,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAA0B;IAE1B,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,aAAa,GAAG,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAErF,MAAM,aAAa,GACjB,QAAQ,CAAC,IAAI,IAAI,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAE/E,MAAM,SAAS,GAAG,aAAa;QAC7B,CAAC,CAAC,IAAI,CAAC,KAAK,CACR,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC;YAC9C,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CACxB;QACH,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QACrD,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM;QAC7B,CAAC,CAAC,CAAC,CAAC;IAEN,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAEhD,OAAO;QACL,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,gBAAgB,EAAE,UAAU,CAAC,OAAO;QACpC,aAAa;QACb,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC;QACvD,UAAU;QACV,WAAW;QACX,WAAW,EAAE,aAAa;QAC1B,SAAS;QACT,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,kBAAkB,CAAC;YAC5B,UAAU;YACV,WAAW;YACX,SAAS;SACV,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/src/core/compare-packages.d.ts

@@ -1,7 +0,0 @@
-import type { PackageHealth } from './dependency-types.js';
-export type PackageComparison = {
-    packages: PackageHealth[];
-    safest: PackageHealth | null;
-    riskiest: PackageHealth | null;
-};
-export declare function comparePackages(packageNames: string[]): Promise<PackageComparison>;

package/dist/src/core/compare-packages.js

@@ -1,19 +0,0 @@
-import { analyzePackage } from './analyze-package.js';
-function asDependency(packageName) {
-    return {
-        name: packageName,
-        version: 'latest',
-        type: 'dependency'
-    };
-}
-export async function comparePackages(packageNames) {
-    const uniqueNames = [...new Set(packageNames.map((name) => name.trim()).filter(Boolean))];
-    const packages = await Promise.all(uniqueNames.map((packageName) => analyzePackage(asDependency(packageName))));
-    const sortedByRisk = [...packages].sort((a, b) => a.riskScore - b.riskScore);
-    return {
-        packages,
-        safest: sortedByRisk[0] ?? null,
-        riskiest: sortedByRisk.at(-1) ?? null
-    };
-}
-//# sourceMappingURL=compare-packages.js.map

package/dist/src/core/compare-packages.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"compare-packages.js","sourceRoot":"","sources":["../../../src/core/compare-packages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAStD,SAAS,YAAY,CAAC,WAAmB;IACvC,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,YAAY;KACnB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,YAAsB;IAC1D,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAE1F,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,WAAW,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,cAAc,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAC5E,CAAC;IAEF,MAAM,YAAY,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAE7E,OAAO;QACL,QAAQ;QACR,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,IAAI;QAC/B,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI;KACtC,CAAC;AACJ,CAAC"}

package/dist/src/core/dependency-scan.d.ts

@@ -1,17 +0,0 @@
-import type { PackageHealth } from './dependency-types.js';
-import type { ToolipFinding } from './report.js';
-export type DependencyScanResult = {
-    packages: PackageHealth[];
-    findings: ToolipFinding[];
-    summary: {
-        totalDependencies: number;
-        outdated: number;
-        deprecated: number;
-        highRisk: number;
-        mediumRisk: number;
-        lowRisk: number;
-        averageRiskScore: number;
-    };
-};
-export declare function scanDependencies(root: string): Promise<DependencyScanResult>;
-export declare function packageToFindings(pkg: PackageHealth): ToolipFinding[];

package/dist/src/core/dependency-scan.js

@@ -1,70 +0,0 @@
-import { readDependencies } from './read-dependencies.js';
-import { analyzePackage } from './analyze-package.js';
-export async function scanDependencies(root) {
-    const dependencies = await readDependencies(root);
-    const packages = await Promise.all(dependencies.map((dependency) => analyzePackage(dependency)));
-    const findings = packages.flatMap(packageToFindings);
-    return {
-        packages,
-        findings,
-        summary: {
-            totalDependencies: packages.length,
-            outdated: packages.filter((pkg) => pkg.outdated).length,
-            deprecated: packages.filter((pkg) => pkg.deprecated).length,
-            highRisk: packages.filter((pkg) => pkg.riskScore >= 70).length,
-            mediumRisk: packages.filter((pkg) => pkg.riskScore >= 40 && pkg.riskScore < 70).length,
-            lowRisk: packages.filter((pkg) => pkg.riskScore > 0 && pkg.riskScore < 40).length,
-            averageRiskScore: packages.length === 0
-                ? 0
-                : Math.round(packages.reduce((total, pkg) => total + pkg.riskScore, 0) / packages.length)
-        }
-    };
-}
-export function packageToFindings(pkg) {
-    const findings = [];
-    if (pkg.deprecated) {
-        findings.push({
-            id: `TOOLIP-DEP-DEPRECATED-${pkg.name.toUpperCase().replaceAll(/[^A-Z0-9]/g, '-')}`,
-            title: `Deprecated package: ${pkg.name}`,
-            severity: 'high',
-            category: 'supply-chain',
-            message: `${pkg.name} is marked as deprecated on the npm registry.`,
-            recommendation: 'Replace deprecated packages with maintained alternatives and review migration notes.',
-            evidence: pkg.latestVersion ?? undefined
-        });
-    }
-    if (pkg.outdated) {
-        findings.push({
-            id: `TOOLIP-DEP-OUTDATED-${pkg.name.toUpperCase().replaceAll(/[^A-Z0-9]/g, '-')}`,
-            title: `Outdated package: ${pkg.name}`,
-            severity: 'medium',
-            category: 'supply-chain',
-            message: `${pkg.name} appears outdated. Installed: ${pkg.installedVersion}. Latest: ${pkg.latestVersion ?? 'unknown'}.`,
-            recommendation: 'Upgrade the package after checking changelogs, breaking changes, and test coverage.',
-            evidence: `${pkg.installedVersion} -> ${pkg.latestVersion ?? 'unknown'}`
-        });
-    }
-    if (pkg.maintainers === 0) {
-        findings.push({
-            id: `TOOLIP-DEP-NO-MAINTAINERS-${pkg.name.toUpperCase().replaceAll(/[^A-Z0-9]/g, '-')}`,
-            title: `No visible maintainers: ${pkg.name}`,
-            severity: 'medium',
-            category: 'supply-chain',
-            message: `${pkg.name} has no visible maintainer metadata from the registry response.`,
-            recommendation: 'Review package ownership, repository activity, and whether a better-maintained alternative exists.'
-        });
-    }
-    if (pkg.ageInDays !== null && pkg.ageInDays > 730) {
-        findings.push({
-            id: `TOOLIP-DEP-STALE-${pkg.name.toUpperCase().replaceAll(/[^A-Z0-9]/g, '-')}`,
-            title: `Possibly stale package: ${pkg.name}`,
-            severity: 'low',
-            category: 'supply-chain',
-            message: `${pkg.name} has not had a detected latest publish in more than two years.`,
-            recommendation: 'Confirm whether the package is intentionally stable or abandoned before relying on it.',
-            evidence: `${pkg.ageInDays} days`
-        });
-    }
-    return findings;
-}
-//# sourceMappingURL=dependency-scan.js.map

package/dist/src/core/dependency-scan.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dependency-scan.js","sourceRoot":"","sources":["../../../src/core/dependency-scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAkBtD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY;IACjD,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAC7D,CAAC;IAEF,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAErD,OAAO;QACL,QAAQ;QACR,QAAQ;QACR,OAAO,EAAE;YACP,iBAAiB,EAAE,QAAQ,CAAC,MAAM;YAClC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM;YACvD,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM;YAC3D,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM;YAC9D,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,IAAI,GAAG,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,MAAM;YACtF,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,IAAI,GAAG,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,MAAM;YACjF,gBAAgB,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;gBACrC,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC;SAC5F;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAkB;IAClD,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,yBAAyB,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE;YACnF,KAAK,EAAE,uBAAuB,GAAG,CAAC,IAAI,EAAE;YACxC,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,cAAc;YACxB,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,+CAA+C;YACnE,cAAc,EAAE,sFAAsF;YACtG,QAAQ,EAAE,GAAG,CAAC,aAAa,IAAI,SAAS;SACzC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjB,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,uBAAuB,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE;YACjF,KAAK,EAAE,qBAAqB,GAAG,CAAC,IAAI,EAAE;YACtC,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,cAAc;YACxB,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,iCAAiC,GAAG,CAAC,gBAAgB,aAAa,GAAG,CAAC,aAAa,IAAI,SAAS,GAAG;YACvH,cAAc,EAAE,qFAAqF;YACrG,QAAQ,EAAE,GAAG,GAAG,CAAC,gBAAgB,OAAO,GAAG,CAAC,aAAa,IAAI,SAAS,EAAE;SACzE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,WAAW,KAAK,CAAC,EAAE,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,6BAA6B,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE;YACvF,KAAK,EAAE,2BAA2B,GAAG,CAAC,IAAI,EAAE;YAC5C,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,cAAc;YACxB,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,iEAAiE;YACrF,cAAc,EAAE,oGAAoG;SACrH,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;QAClD,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,oBAAoB,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE;YAC9E,KAAK,EAAE,2BAA2B,GAAG,CAAC,IAAI,EAAE;YAC5C,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,cAAc;YACxB,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,gEAAgE;YACpF,cAAc,EAAE,wFAAwF;YACxG,QAAQ,EAAE,GAAG,GAAG,CAAC,SAAS,OAAO;SAClC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/src/core/dependency-tree.d.ts

@@ -1,16 +0,0 @@
-export type DependencyTreeNode = {
-    name: string;
-    version: string;
-    type: 'dependency' | 'devDependency';
-    children: DependencyTreeNode[];
-};
-export type DependencyTree = {
-    root: string;
-    dependencies: DependencyTreeNode[];
-    summary: {
-        direct: number;
-        transitive: number;
-        maxDepth: number;
-    };
-};
-export declare function buildDependencyTree(root: string): Promise<DependencyTree>;

package/dist/src/core/dependency-tree.js

@@ -1,19 +0,0 @@
-import { readDependencies } from './read-dependencies.js';
-export async function buildDependencyTree(root) {
-    const dependencies = await readDependencies(root);
-    return {
-        root,
-        dependencies: dependencies.map((dependency) => ({
-            name: dependency.name,
-            version: dependency.version,
-            type: dependency.type,
-            children: []
-        })),
-        summary: {
-            direct: dependencies.length,
-            transitive: 0,
-            maxDepth: dependencies.length > 0 ? 1 : 0
-        }
-    };
-}
-//# sourceMappingURL=dependency-tree.js.map

package/dist/src/core/dependency-tree.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dependency-tree.js","sourceRoot":"","sources":["../../../src/core/dependency-tree.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAmB1D,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY;IACpD,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAElD,OAAO;QACL,IAAI;QACJ,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAC9C,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC;QACH,OAAO,EAAE;YACP,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,UAAU,EAAE,CAAC;YACb,QAAQ,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAC1C;KACF,CAAC;AACJ,CAAC"}

package/dist/src/core/dependency-types.d.ts

@@ -1,17 +0,0 @@
-export type DependencyInfo = {
-    name: string;
-    version: string;
-    type: 'dependency' | 'devDependency';
-};
-export type PackageHealth = {
-    name: string;
-    latestVersion: string | null;
-    installedVersion: string;
-    outdated: boolean;
-    deprecated: boolean;
-    maintainers: number;
-    publishedAt: string | null;
-    ageInDays: number | null;
-    downloads: number | null;
-    riskScore: number;
-};

package/dist/src/core/dependency-types.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=dependency-types.js.map

package/dist/src/core/dependency-types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dependency-types.js","sourceRoot":"","sources":["../../../src/core/dependency-types.ts"],"names":[],"mappings":""}

package/dist/src/core/file-walker.d.ts

@@ -1,6 +0,0 @@
-export type ProjectFile = {
-    absolutePath: string;
-    relativePath: string;
-    extension: string;
-};
-export declare function walkProjectFiles(root: string): Promise<ProjectFile[]>;

package/dist/src/core/file-walker.js

@@ -1,27 +0,0 @@
-import path from 'node:path';
-import fg from 'fast-glob';
-import { loadToolipIgnore } from './load-toolip-ignore.js';
-export async function walkProjectFiles(root) {
-    const absoluteRoot = path.resolve(root);
-    const toolipIgnore = await loadToolipIgnore(absoluteRoot);
-    const entries = await fg(['**/*'], {
-        cwd: absoluteRoot,
-        dot: true,
-        onlyFiles: true,
-        unique: true,
-        followSymbolicLinks: false,
-        ignore: toolipIgnore.patterns
-    });
-    return entries
-        .map((entry) => {
-        const absolutePath = path.join(absoluteRoot, entry);
-        return {
-            absolutePath,
-            relativePath: entry.replaceAll('\\', '/'),
-            extension: path.extname(entry).replace('.', '').toLowerCase()
-        };
-    })
-        .filter((file) => !toolipIgnore.ignores(file.absolutePath))
-        .sort((a, b) => a.relativePath.localeCompare(b.relativePath));
-}
-//# sourceMappingURL=file-walker.js.map

package/dist/src/core/file-walker.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"file-walker.js","sourceRoot":"","sources":["../../../src/core/file-walker.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,WAAW,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAQ3D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY;IACjD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAE1D,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE;QACjC,GAAG,EAAE,YAAY;QACjB,GAAG,EAAE,IAAI;QACT,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,IAAI;QACZ,mBAAmB,EAAE,KAAK;QAC1B,MAAM,EAAE,YAAY,CAAC,QAAQ;KAC9B,CAAC,CAAC;IAEH,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACpD,OAAO;YACL,YAAY;YACZ,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC;YACzC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE;SAC9D,CAAC;IACJ,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;SAC1D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;AAClE,CAAC"}

package/dist/src/core/git-audit.d.ts

@@ -1,12 +0,0 @@
-import type { ToolipFinding } from './report.js';
-export type GitAuditResult = {
-    findings: ToolipFinding[];
-    summary: {
-        filesChecked: number;
-        dangerousFiles: number;
-        gitignorePresent: boolean;
-        envIgnored: boolean;
-        pemIgnored: boolean;
-    };
-};
-export declare function runGitAudit(root: string): Promise<GitAuditResult>;

package/dist/src/core/git-audit.js

@@ -1,111 +0,0 @@
-import { access, readFile } from 'node:fs/promises';
-import path from 'node:path';
-import { walkProjectFiles } from './file-walker.js';
-const dangerousFilePatterns = [
-    {
-        id: 'ENV-FILE',
-        regex: /(^|\/)\.env(\.|$|\/)?/i,
-        title: '.env file present',
-        severity: 'high',
-        message: 'A .env-style file exists in the project tree.',
-        recommendation: 'Keep .env files local, ensure they are ignored, and never commit real secrets.'
-    },
-    {
-        id: 'PEM-FILE',
-        regex: /\.pem$/i,
-        title: 'PEM file present',
-        severity: 'critical',
-        message: 'A PEM key file exists in the project tree.',
-        recommendation: 'Remove private key files from the repository and rotate affected credentials.'
-    },
-    {
-        id: 'KEY-FILE',
-        regex: /\.(key|p12|pfx)$/i,
-        title: 'Key/certificate file present',
-        severity: 'critical',
-        message: 'A key or certificate-like file exists in the project tree.',
-        recommendation: 'Do not store key material in source repositories.'
-    }
-];
-export async function runGitAudit(root) {
-    const files = await walkProjectFiles(root);
-    const relativePaths = files.map((file) => file.relativePath);
-    const gitignorePath = path.join(root, '.gitignore');
-    const gitignorePresent = await exists(gitignorePath);
-    const gitignoreContent = gitignorePresent ? await readFile(gitignorePath, 'utf8') : '';
-    const findings = [];
-    for (const file of relativePaths) {
-        for (const pattern of dangerousFilePatterns) {
-            if (!pattern.regex.test(file))
-                continue;
-            findings.push({
-                id: `TOOLIP-GIT-${pattern.id}-${file.toUpperCase().replaceAll(/[^A-Z0-9]/g, '-')}`,
-                title: pattern.title,
-                severity: pattern.severity,
-                category: 'git-security',
-                message: pattern.message,
-                recommendation: pattern.recommendation,
-                file
-            });
-        }
-    }
-    const envIgnored = ignoresPattern(gitignoreContent, '.env') || ignoresPattern(gitignoreContent, '.env.*');
-    const pemIgnored = ignoresPattern(gitignoreContent, '*.pem') || ignoresPattern(gitignoreContent, '.pem');
-    if (!gitignorePresent) {
-        findings.push({
-            id: 'TOOLIP-GIT-MISSING-GITIGNORE',
-            title: 'Missing .gitignore',
-            severity: 'medium',
-            category: 'git-security',
-            message: 'No .gitignore file was found.',
-            recommendation: 'Add a .gitignore file that excludes secrets, build output, dependencies, and local machine files.'
-        });
-    }
-    if (gitignorePresent && !envIgnored) {
-        findings.push({
-            id: 'TOOLIP-GIT-ENV-NOT-IGNORED',
-            title: '.env files may not be ignored',
-            severity: 'high',
-            category: 'git-security',
-            message: '.gitignore does not appear to ignore .env files.',
-            recommendation: 'Add .env and .env.* to .gitignore while allowing a safe .env.example.'
-        });
-    }
-    if (gitignorePresent && !pemIgnored) {
-        findings.push({
-            id: 'TOOLIP-GIT-PEM-NOT-IGNORED',
-            title: 'PEM files may not be ignored',
-            severity: 'medium',
-            category: 'git-security',
-            message: '.gitignore does not appear to ignore PEM files.',
-            recommendation: 'Add *.pem and other key material patterns to .gitignore.'
-        });
-    }
-    return {
-        findings,
-        summary: {
-            filesChecked: files.length,
-            dangerousFiles: findings.filter((finding) => finding.file).length,
-            gitignorePresent,
-            envIgnored,
-            pemIgnored
-        }
-    };
-}
-async function exists(filePath) {
-    try {
-        await access(filePath);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-function ignoresPattern(gitignore, pattern) {
-    return gitignore
-        .split('\n')
-        .map((line) => line.trim())
-        .filter(Boolean)
-        .some((line) => line === pattern || line.includes(pattern));
-}
-//# sourceMappingURL=git-audit.js.map

package/dist/src/core/git-audit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"git-audit.js","sourceRoot":"","sources":["../../../src/core/git-audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAcpD,MAAM,qBAAqB,GAAG;IAC5B;QACE,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,wBAAwB;QAC/B,KAAK,EAAE,mBAAmB;QAC1B,QAAQ,EAAE,MAAe;QACzB,OAAO,EAAE,+CAA+C;QACxD,cAAc,EAAE,gFAAgF;KACjG;IACD;QACE,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,kBAAkB;QACzB,QAAQ,EAAE,UAAmB;QAC7B,OAAO,EAAE,4CAA4C;QACrD,cAAc,EAAE,+EAA+E;KAChG;IACD;QACE,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,mBAAmB;QAC1B,KAAK,EAAE,8BAA8B;QACrC,QAAQ,EAAE,UAAmB;QAC7B,OAAO,EAAE,4DAA4D;QACrE,cAAc,EAAE,mDAAmD;KACpE;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY;IAC5C,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7D,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACpD,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEvF,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;YAC5C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YAExC,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,cAAc,OAAO,CAAC,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE;gBAClF,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,cAAc;gBACxB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,IAAI;aACL,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,cAAc,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,cAAc,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IAC1G,MAAM,UAAU,GAAG,cAAc,CAAC,gBAAgB,EAAE,OAAO,CAAC,IAAI,cAAc,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAEzG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,8BAA8B;YAClC,KAAK,EAAE,oBAAoB;YAC3B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,cAAc;YACxB,OAAO,EAAE,+BAA+B;YACxC,cAAc,EAAE,mGAAmG;SACpH,CAAC,CAAC;IACL,CAAC;IAED,IAAI,gBAAgB,IAAI,CAAC,UAAU,EAAE,CAAC;QACpC,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,4BAA4B;YAChC,KAAK,EAAE,+BAA+B;YACtC,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,cAAc;YACxB,OAAO,EAAE,kDAAkD;YAC3D,cAAc,EAAE,uEAAuE;SACxF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,gBAAgB,IAAI,CAAC,UAAU,EAAE,CAAC;QACpC,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,4BAA4B;YAChC,KAAK,EAAE,8BAA8B;YACrC,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,cAAc;YACxB,OAAO,EAAE,iDAAiD;YAC1D,cAAc,EAAE,0DAA0D;SAC3E,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,QAAQ;QACR,OAAO,EAAE;YACP,YAAY,EAAE,KAAK,CAAC,MAAM;YAC1B,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM;YACjE,gBAAgB;YAChB,UAAU;YACV,UAAU;SACX;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,QAAgB;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB,EAAE,OAAe;IACxD,OAAO,SAAS;SACb,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAChE,CAAC"}

package/dist/src/core/hooks.d.ts

@@ -1 +0,0 @@
-export declare function installPreCommitHook(root: string): Promise<string>;

package/dist/src/core/hooks.js

@@ -1,14 +0,0 @@
-import { mkdir, writeFile, chmod } from 'node:fs/promises';
-import path from 'node:path';
-export async function installPreCommitHook(root) {
-    const hooksDir = path.join(root, '.git', 'hooks');
-    const hookPath = path.join(hooksDir, 'pre-commit');
-    await mkdir(hooksDir, { recursive: true });
-    await writeFile(hookPath, `#!/bin/sh
-echo "Running Toolip pre-commit checks..."
-npx toolip pre-commit
-`, 'utf8');
-    await chmod(hookPath, 0o755);
-    return hookPath;
-}
-//# sourceMappingURL=hooks.js.map

package/dist/src/core/hooks.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../../../src/core/hooks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAY;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEnD,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3C,MAAM,SAAS,CACb,QAAQ,EACR;;;CAGH,EACG,MAAM,CACP,CAAC;IAEF,MAAM,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAE7B,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/src/core/learn.d.ts

@@ -1,11 +0,0 @@
-export type LearnTopic = {
-    id: string;
-    title: string;
-    explanation: string;
-    risks: string[];
-    mistakes: string[];
-    secureExamples: string[];
-    bestPractices: string[];
-};
-export declare function listLearnTopics(): LearnTopic[];
-export declare function getLearnTopic(topic: string): LearnTopic | null;