toolip 1.0.6 → 2.0.0

package/dist/src/errors/toolip-error.d.ts

@@ -0,0 +1,8 @@
+export declare class ToolipError extends Error {
+    readonly code: string;
+    readonly exitCode: number;
+    constructor(message: string, options?: {
+        code?: string;
+        exitCode?: number;
+    });
+}

package/dist/src/errors/toolip-error.js

@@ -0,0 +1,11 @@
+export class ToolipError extends Error {
+    code;
+    exitCode;
+    constructor(message, options) {
+        super(message);
+        this.name = 'ToolipError';
+        this.code = options?.code ?? 'TOOLIP_ERROR';
+        this.exitCode = options?.exitCode ?? 1;
+    }
+}
+//# sourceMappingURL=toolip-error.js.map

package/dist/src/errors/toolip-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolip-error.js","sourceRoot":"","sources":["../../../src/errors/toolip-error.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,WAAY,SAAQ,KAAK;IACpB,IAAI,CAAS;IACb,QAAQ,CAAS;IAEjC,YAAY,OAAe,EAAE,OAA8C;QACzE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,cAAc,CAAC;QAC5C,IAAI,CAAC,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,CAAC,CAAC;IACzC,CAAC;CACF"}

package/dist/src/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/src/index.js

@@ -0,0 +1,89 @@
+#!/usr/bin/env node
+import { Command } from 'commander';
+import chalk from 'chalk';
+import { registerAlternativesCommand } from './commands/alternatives.js';
+import { registerCompareCommand } from './commands/compare.js';
+import { registerDoctorCommand } from './commands/doctor.js';
+import { registerGitAuditCommand } from './commands/git-audit.js';
+import { registerHookCommand } from './commands/hook.js';
+import { registerInspectCommand } from './commands/inspect.js';
+import { registerLearnCommand } from './commands/learn.js';
+import { registerLicensesCommand } from './commands/licenses.js';
+import { registerPreCommitCommand } from './commands/pre-commit.js';
+import { registerProfileCommand } from './commands/profile.js';
+import { registerScanCommand } from './commands/scan.js';
+import { registerScoreCommand } from './commands/score.js';
+import { registerSelfTestCommand } from './commands/self-test.js';
+import { registerTreeCommand } from './commands/tree.js';
+import { registerVaultCommand } from './commands/vault.js';
+import { TOOLIP_AUTHOR, TOOLIP_VERSION } from './config/version.js';
+import { handleError } from './utils/error-handler.js';
+import { registerVulnerabilitiesCommand } from './commands/vulnerabilities.js';
+import { registerAstScanCommand } from './commands/ast-scan.js';
+import { registerReachabilityCommand } from './commands/reachability.js';
+import { registerInstallScriptsCommand } from './commands/install-scripts.js';
+import { registerSbomCommand } from './commands/sbom.js';
+import { registerHistoryCommand } from './commands/history.js';
+import { registerConfigCommand } from './commands/config.js';
+import { registerPackageHealthCommand } from './commands/package-health.js';
+import { registerDependencyConfusionCommand } from './commands/dependency-confusion.js';
+import { registerGitHistoryCommand } from './commands/git-history.js';
+import { registerDockerScanCommand } from './commands/docker-scan.js';
+import { registerMonorepoCommand } from './commands/monorepo.js';
+import { registerAuditRepoCommand } from './commands/audit-repo.js';
+import { registerUpgradePrCommand } from './commands/upgrade-pr.js';
+import { registerDiffCommand } from './commands/diff.js';
+import { registerPublishCommand } from './commands/publish.js';
+import { registerWatchCommand } from './commands/watch.js';
+import { registerAnnounceCommand } from './commands/announce.js';
+import { registerMcpCommand } from './commands/mcp.js';
+const program = new Command();
+program
+    .name('toolip')
+    .description('Developer-first supply chain security, security hygiene, and secrets management CLI.')
+    .version(TOOLIP_VERSION);
+registerSelfTestCommand(program);
+registerProfileCommand(program);
+registerScanCommand(program);
+registerDoctorCommand(program);
+registerScoreCommand(program);
+registerInspectCommand(program);
+registerCompareCommand(program);
+registerLicensesCommand(program);
+registerAlternativesCommand(program);
+registerTreeCommand(program);
+registerVaultCommand(program);
+registerGitAuditCommand(program);
+registerPreCommitCommand(program);
+registerHookCommand(program);
+registerLearnCommand(program);
+program.addHelpText('after', `
+
+${chalk.dim(`Built by ${TOOLIP_AUTHOR.name} (${TOOLIP_AUTHOR.handle}) — ${TOOLIP_AUTHOR.github}`)}`);
+program.exitOverride();
+try {
+    registerVulnerabilitiesCommand(program);
+    registerAstScanCommand(program);
+    registerReachabilityCommand(program);
+    registerInstallScriptsCommand(program);
+    registerSbomCommand(program);
+    registerHistoryCommand(program);
+    registerConfigCommand(program);
+    registerPackageHealthCommand(program);
+    registerDependencyConfusionCommand(program);
+    registerGitHistoryCommand(program);
+    registerDockerScanCommand(program);
+    registerMonorepoCommand(program);
+    registerAuditRepoCommand(program);
+    registerUpgradePrCommand(program);
+    registerDiffCommand(program);
+    registerPublishCommand(program);
+    registerWatchCommand(program);
+    registerAnnounceCommand(program);
+    registerMcpCommand(program);
+    await program.parseAsync(process.argv);
+}
+catch (error) {
+    handleError(error);
+}
+//# sourceMappingURL=index.js.map

package/dist/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,kCAAkC,EAAE,MAAM,oCAAoC,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,QAAQ,CAAC;KACd,WAAW,CACV,sFAAsF,CACvF;KACA,OAAO,CAAC,cAAc,CAAC,CAAC;AAE3B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,2BAA2B,CAAC,OAAO,CAAC,CAAC;AACrC,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAC7B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAClC,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAC7B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAE9B,OAAO,CAAC,WAAW,CACjB,OAAO,EACP;;EAEA,KAAK,CAAC,GAAG,CACT,YAAY,aAAa,CAAC,IAAI,KAAK,aAAa,CAAC,MAAM,OAAO,aAAa,CAAC,MAAM,EAAE,CACrF,EAAE,CACF,CAAC;AAEF,OAAO,CAAC,YAAY,EAAE,CAAC;AAEvB,IAAI,CAAC;IACH,8BAA8B,CAAC,OAAO,CAAC,CAAC;IAE1C,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAEhC,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAErC,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAEvC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAE7B,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAEhC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE/B,4BAA4B,CAAC,OAAO,CAAC,CAAC;IAEtC,kCAAkC,CAAC,OAAO,CAAC,CAAC;IAE5C,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAEnC,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAEnC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAEjC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAElC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAElC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAE7B,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAEhC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAE9B,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAEjC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAE5B,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,WAAW,CAAC,KAAK,CAAC,CAAC;AACrB,CAAC"}

package/dist/src/mcp/server.d.ts

@@ -0,0 +1 @@
+export declare function startMcpServer(): Promise<void>;

package/dist/src/mcp/server.js

@@ -0,0 +1,64 @@
+import { TOOLIP_VERSION } from '../config/version.js';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { z } from 'zod';
+import { runSecurityDoctor } from '../core/security-doctor.js';
+import { generateSbom } from '../core/sbom/generate.js';
+import { securityDiff } from '../core/diff/security-diff.js';
+export async function startMcpServer() {
+    const server = new McpServer({
+        name: 'toolip',
+        version: TOOLIP_VERSION
+    });
+    server.registerTool('toolip_doctor', {
+        title: 'Toolip Security Doctor',
+        description: 'Run local Toolip security checks inside the approved workspace.',
+        inputSchema: {
+            root: z.string().default(process.cwd())
+        }
+    }, async ({ root }) => {
+        const report = await runSecurityDoctor(root);
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify(report, null, 2)
+                }]
+        };
+    });
+    server.registerTool('toolip_sbom', {
+        title: 'Generate SBOM',
+        description: 'Generate a local CycloneDX or SPDX SBOM.',
+        inputSchema: {
+            root: z.string().default(process.cwd()),
+            format: z.enum(['cyclonedx', 'spdx']).default('cyclonedx')
+        }
+    }, async ({ root, format }) => {
+        const report = await generateSbom(root, format);
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify(report, null, 2)
+                }]
+        };
+    });
+    server.registerTool('toolip_diff', {
+        title: 'Security Diff',
+        description: 'Summarize security-relevant Git changes.',
+        inputSchema: {
+            root: z.string().default(process.cwd()),
+            base: z.string(),
+            head: z.string().default('HEAD')
+        }
+    }, async ({ root, base, head }) => {
+        const result = await securityDiff(root, base, head);
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify(result, null, 2)
+                }]
+        };
+    });
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}
+//# sourceMappingURL=server.js.map

package/dist/src/mcp/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/mcp/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE7D,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,cAAc;KACxB,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,iEAAiE;QAC9E,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;SACxC;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACjB,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC7C,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;iBACtC,CAAC;SACH,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,0CAA0C;QACvD,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACvC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;SAC3D;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QACzB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;iBACtC,CAAC;SACH,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,0CAA0C;QACvD,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;SACjC;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACpD,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;iBACtC,CAAC;SACH,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC"}

package/dist/src/providers/depsdev/client.d.ts

@@ -0,0 +1,71 @@
+export type DepsDevVersionResponse = {
+    versionKey?: {
+        system?: string;
+        name?: string;
+        version?: string;
+    };
+    publishedAt?: string;
+    isDefault?: boolean;
+    isDeprecated?: boolean;
+    deprecatedReason?: string;
+    licenses?: string[];
+    advisoryKeys?: Array<{
+        id?: string;
+    }>;
+    links?: Array<{
+        label?: string;
+        url?: string;
+    }>;
+    slsaProvenances?: Array<{
+        sourceRepository?: string;
+        commit?: string;
+        url?: string;
+        verified?: boolean;
+    }>;
+    attestations?: Array<{
+        type?: string;
+        url?: string;
+        verified?: boolean;
+        sourceRepository?: string;
+        commit?: string;
+    }>;
+    registries?: string[];
+    relatedProjects?: Array<{
+        projectKey?: {
+            id?: string;
+        };
+        relationType?: string;
+        relationProvenance?: string;
+    }>;
+};
+export type DepsDevDependenciesResponse = {
+    nodes?: Array<{
+        versionKey?: {
+            system?: string;
+            name?: string;
+            version?: string;
+        };
+        relation?: string;
+        errors?: string[];
+    }>;
+    edges?: Array<{
+        fromNode?: number;
+        toNode?: number;
+        requirement?: string;
+    }>;
+    error?: string;
+};
+export type DepsDevClientOptions = {
+    endpoint?: string;
+    timeoutMs?: number;
+    fetchImplementation?: typeof fetch;
+};
+export declare class DepsDevClient {
+    private readonly endpoint;
+    private readonly timeoutMs;
+    private readonly fetchImplementation;
+    constructor(options?: DepsDevClientOptions);
+    getVersion(packageName: string, version: string, signal?: AbortSignal): Promise<DepsDevVersionResponse>;
+    getDependencies(packageName: string, version: string, signal?: AbortSignal): Promise<DepsDevDependenciesResponse>;
+    private getJson;
+}

package/dist/src/providers/depsdev/client.js

@@ -0,0 +1,44 @@
+export class DepsDevClient {
+    endpoint;
+    timeoutMs;
+    fetchImplementation;
+    constructor(options = {}) {
+        this.endpoint =
+            options.endpoint ?? 'https://api.deps.dev/v3';
+        this.timeoutMs = options.timeoutMs ?? 20_000;
+        this.fetchImplementation =
+            options.fetchImplementation ?? globalThis.fetch;
+    }
+    async getVersion(packageName, version, signal) {
+        return this.getJson(`/systems/npm/packages/${encodeURIComponent(packageName)}/versions/${encodeURIComponent(version)}`, signal);
+    }
+    async getDependencies(packageName, version, signal) {
+        return this.getJson(`/systems/npm/packages/${encodeURIComponent(packageName)}/versions/${encodeURIComponent(version)}:dependencies`, signal);
+    }
+    async getJson(pathname, outerSignal) {
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), this.timeoutMs);
+        const abort = () => controller.abort();
+        outerSignal?.addEventListener('abort', abort, {
+            once: true
+        });
+        try {
+            const response = await this.fetchImplementation(`${this.endpoint}${pathname}`, {
+                headers: {
+                    accept: 'application/json',
+                    'user-agent': 'toolip'
+                },
+                signal: controller.signal
+            });
+            if (!response.ok) {
+                throw new Error(`deps.dev request failed with HTTP ${response.status}.`);
+            }
+            return (await response.json());
+        }
+        finally {
+            clearTimeout(timeout);
+            outerSignal?.removeEventListener('abort', abort);
+        }
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/src/providers/depsdev/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../../src/providers/depsdev/client.ts"],"names":[],"mappings":"AAiEA,MAAM,OAAO,aAAa;IACP,QAAQ,CAAS;IACjB,SAAS,CAAS;IAClB,mBAAmB,CAAe;IAEnD,YAAY,UAAgC,EAAE;QAC5C,IAAI,CAAC,QAAQ;YACX,OAAO,CAAC,QAAQ,IAAI,yBAAyB,CAAC;QAChD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;QAC7C,IAAI,CAAC,mBAAmB;YACtB,OAAO,CAAC,mBAAmB,IAAI,UAAU,CAAC,KAAK,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,UAAU,CACd,WAAmB,EACnB,OAAe,EACf,MAAoB;QAEpB,OAAO,IAAI,CAAC,OAAO,CACjB,yBAAyB,kBAAkB,CACzC,WAAW,CACZ,aAAa,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAC3C,MAAM,CACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,WAAmB,EACnB,OAAe,EACf,MAAoB;QAEpB,OAAO,IAAI,CAAC,OAAO,CACjB,yBAAyB,kBAAkB,CACzC,WAAW,CACZ,aAAa,kBAAkB,CAC9B,OAAO,CACR,eAAe,EAChB,MAAM,CACP,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,QAAgB,EAChB,WAAyB;QAEzB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CACxB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EACxB,IAAI,CAAC,SAAS,CACf,CAAC;QAEF,MAAM,KAAK,GAAG,GAAS,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC7C,WAAW,EAAE,gBAAgB,CAC3B,OAAO,EACP,KAAK,EACL;YACE,IAAI,EAAE,IAAI;SACX,CACF,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,QAAQ,GACZ,MAAM,IAAI,CAAC,mBAAmB,CAC5B,GAAG,IAAI,CAAC,QAAQ,GAAG,QAAQ,EAAE,EAC7B;gBACE,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;oBAC1B,YAAY,EAAE,QAAQ;iBACvB;gBACD,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CACF,CAAC;YAEJ,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CACb,qCAAqC,QAAQ,CAAC,MAAM,GAAG,CACxD,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;QACtC,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,WAAW,EAAE,mBAAmB,CAC9B,OAAO,EACP,KAAK,CACN,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/src/providers/osv/client.d.ts

@@ -0,0 +1,15 @@
+import type { OsvBatchResponse, OsvQuery } from './types.js';
+export type OsvQueryResult = {
+    query: OsvQuery;
+    vulnerabilities: NonNullable<OsvBatchResponse['results'][number]['vulns']>;
+};
+export declare class OsvClient {
+    private readonly options;
+    constructor(options?: {
+        endpoint?: string;
+        timeoutMs?: number;
+        fetchImplementation?: typeof fetch;
+        batchSize?: number;
+    });
+    queryBatch(queries: OsvQuery[], signal?: AbortSignal): Promise<OsvQueryResult[]>;
+}

package/dist/src/providers/osv/client.js

@@ -0,0 +1,51 @@
+export class OsvClient {
+    options;
+    constructor(options = {}) {
+        this.options = options;
+    }
+    async queryBatch(queries, signal) {
+        const endpoint = this.options.endpoint ?? 'https://api.osv.dev/v1/querybatch';
+        const timeoutMs = this.options.timeoutMs ?? 20000;
+        const fetchImplementation = this.options.fetchImplementation ?? globalThis.fetch;
+        const batchSize = Math.max(1, this.options.batchSize ?? 500);
+        const results = [];
+        for (let start = 0; start < queries.length; start += batchSize) {
+            const batch = queries.slice(start, start + batchSize);
+            const controller = new AbortController();
+            const timeout = setTimeout(() => controller.abort(), timeoutMs);
+            const abortFromOuter = () => controller.abort();
+            signal?.addEventListener('abort', abortFromOuter, { once: true });
+            try {
+                const response = await fetchImplementation(endpoint, {
+                    method: 'POST',
+                    headers: { 'content-type': 'application/json', 'user-agent': 'toolip' },
+                    body: JSON.stringify({ queries: batch }),
+                    signal: controller.signal
+                });
+                if (!response.ok)
+                    throw new Error(`OSV request failed with HTTP ${response.status}.`);
+                const payload = (await response.json());
+                if (!Array.isArray(payload.results))
+                    throw new Error('OSV returned a malformed response.');
+                if (payload.results.length !== batch.length) {
+                    throw new Error(`OSV returned ${payload.results.length} results for ${batch.length} queries.`);
+                }
+                batch.forEach((query, index) => {
+                    results.push({ query, vulnerabilities: payload.results[index]?.vulns ?? [] });
+                });
+            }
+            catch (error) {
+                if (error instanceof Error && error.name === 'AbortError') {
+                    throw new Error('OSV vulnerability lookup timed out or was cancelled.');
+                }
+                throw error;
+            }
+            finally {
+                clearTimeout(timeout);
+                signal?.removeEventListener('abort', abortFromOuter);
+            }
+        }
+        return results;
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/src/providers/osv/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../../src/providers/osv/client.ts"],"names":[],"mappings":"AAOA,MAAM,OAAO,SAAS;IAED;IADnB,YACmB,UAKb,EAAE;QALW,YAAO,GAAP,OAAO,CAKlB;IACL,CAAC;IAEJ,KAAK,CAAC,UAAU,CAAC,OAAmB,EAAE,MAAoB;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,mCAAmC,CAAC;QAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;QAClD,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,UAAU,CAAC,KAAK,CAAC;QACjF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAqB,EAAE,CAAC;QAErC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,SAAS,EAAE,CAAC;YAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC,CAAC;YACtD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;YAChE,MAAM,cAAc,GAAG,GAAS,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAElE,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE;oBACnD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,YAAY,EAAE,QAAQ,EAAE;oBACvE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;oBACxC,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;gBACtF,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqB,CAAC;gBAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBAC3F,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;oBAC5C,MAAM,IAAI,KAAK,CAAC,gBAAgB,OAAO,CAAC,OAAO,CAAC,MAAM,gBAAgB,KAAK,CAAC,MAAM,WAAW,CAAC,CAAC;gBACjG,CAAC;gBAED,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;oBAC7B,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;gBAChF,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC1D,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;gBAC1E,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/src/providers/osv/types.d.ts

@@ -0,0 +1,38 @@
+export type OsvQuery = {
+    package: {
+        ecosystem: 'npm';
+        name: string;
+    };
+    version: string;
+};
+export type OsvVulnerability = {
+    id: string;
+    aliases?: string[];
+    summary?: string;
+    published?: string;
+    modified?: string;
+    severity?: Array<{
+        type?: string;
+        score?: string;
+    }>;
+    references?: Array<{
+        type?: string;
+        url?: string;
+    }>;
+    affected?: Array<{
+        ranges?: Array<{
+            type?: string;
+            events?: Array<{
+                introduced?: string;
+                fixed?: string;
+                last_affected?: string;
+            }>;
+        }>;
+    }>;
+    database_specific?: Record<string, unknown>;
+};
+export type OsvBatchResponse = {
+    results: Array<{
+        vulns?: OsvVulnerability[];
+    }>;
+};

package/dist/src/providers/osv/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/providers/osv/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/providers/osv/types.ts"],"names":[],"mappings":""}

package/dist/src/storage/memory-cache.d.ts

@@ -0,0 +1,7 @@
+import type { AnalyzerCache } from '../contracts/analyzer.js';
+export declare class MemoryCache implements AnalyzerCache {
+    private readonly entries;
+    get<T>(key: string): Promise<T | undefined>;
+    set<T>(key: string, value: T, ttlMs?: number): Promise<void>;
+    clear(): void;
+}

package/dist/src/storage/memory-cache.js

@@ -0,0 +1,25 @@
+export class MemoryCache {
+    entries = new Map();
+    async get(key) {
+        const entry = this.entries.get(key);
+        if (!entry) {
+            return undefined;
+        }
+        if (entry.expiresAt !== undefined &&
+            entry.expiresAt <= Date.now()) {
+            this.entries.delete(key);
+            return undefined;
+        }
+        return entry.value;
+    }
+    async set(key, value, ttlMs) {
+        this.entries.set(key, {
+            value,
+            expiresAt: ttlMs === undefined ? undefined : Date.now() + ttlMs
+        });
+    }
+    clear() {
+        this.entries.clear();
+    }
+}
+//# sourceMappingURL=memory-cache.js.map

package/dist/src/storage/memory-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-cache.js","sourceRoot":"","sources":["../../../src/storage/memory-cache.ts"],"names":[],"mappings":"AAOA,MAAM,OAAO,WAAW;IACL,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEzD,KAAK,CAAC,GAAG,CAAI,GAAW;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IACE,KAAK,CAAC,SAAS,KAAK,SAAS;YAC7B,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAC7B,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,KAAK,CAAC,KAAU,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,GAAG,CACP,GAAW,EACX,KAAQ,EACR,KAAc;QAEd,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;YACpB,KAAK;YACL,SAAS,EACP,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SACvD,CAAC,CAAC;IACL,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF"}

package/dist/src/utils/error-handler.d.ts

@@ -0,0 +1 @@
+export declare function handleError(error: unknown): never;

package/dist/src/utils/error-handler.js

@@ -0,0 +1,24 @@
+import chalk from 'chalk';
+import { CommanderError } from 'commander';
+import { ToolipError } from '../errors/toolip-error.js';
+export function handleError(error) {
+    if (error instanceof CommanderError) {
+        if (error.code === 'commander.version' || error.code === 'commander.helpDisplayed') {
+            process.exit(0);
+        }
+        console.error(`${chalk.red('✖')} ${error.message}`);
+        process.exit(error.exitCode || 1);
+    }
+    if (error instanceof ToolipError) {
+        console.error(`${chalk.red('✖')} ${error.message}`);
+        console.error(chalk.dim(`Code: ${error.code}`));
+        process.exit(error.exitCode);
+    }
+    if (error instanceof Error) {
+        console.error(`${chalk.red('✖')} ${error.message}`);
+        process.exit(1);
+    }
+    console.error(`${chalk.red('✖')} Unknown Toolip error.`);
+    process.exit(1);
+}
+//# sourceMappingURL=error-handler.js.map

package/dist/src/utils/error-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-handler.js","sourceRoot":"","sources":["../../../src/utils/error-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;QACjC,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/src/utils/output.d.ts

@@ -0,0 +1,6 @@
+import type { ProjectProfile } from '../core/profile-project.js';
+import type { ScannerContext } from '../core/scanner-context.js';
+import type { ToolipReport } from '../core/report.js';
+export declare function printProfile(profile: ProjectProfile): void;
+export declare function printScannerContext(context: ScannerContext): void;
+export declare function printReportSummary(report: ToolipReport): void;

package/dist/src/utils/output.js

@@ -0,0 +1,72 @@
+import chalk from 'chalk';
+export function printProfile(profile) {
+    console.log(chalk.bold('Toolip Project Profile'));
+    console.log('');
+    console.log(`${chalk.dim('Root:')} ${profile.root}`);
+    console.log(`${chalk.dim('Name:')} ${profile.name}`);
+    console.log(`${chalk.dim('Version:')} ${profile.version}`);
+    console.log(`${chalk.dim('Package Manager:')} ${profile.packageManager}`);
+    if (profile.description) {
+        console.log(`${chalk.dim('Description:')} ${profile.description}`);
+    }
+    console.log('');
+    if (profile.detected.length === 0) {
+        console.log(chalk.yellow('No major framework fingerprints detected yet.'));
+    }
+    else {
+        console.log(chalk.bold('Detected Stack'));
+        for (const item of profile.detected) {
+            console.log(`${chalk.green('✓')} ${item}`);
+        }
+    }
+    if (Object.keys(profile.languages).length > 0) {
+        console.log('');
+        console.log(chalk.bold('Language / File Signals'));
+        for (const [language, count] of Object.entries(profile.languages)) {
+            console.log(`${chalk.green('✓')} ${language}: ${count}`);
+        }
+    }
+    if (profile.packageScripts.length > 0) {
+        console.log('');
+        console.log(chalk.bold('Package Scripts'));
+        for (const script of profile.packageScripts) {
+            console.log(`${chalk.green('✓')} ${script}`);
+        }
+    }
+}
+export function printScannerContext(context) {
+    console.log(chalk.bold('Project Scan Context'));
+    console.log('');
+    console.log(`${chalk.dim('Root:')} ${context.root}`);
+    console.log(`${chalk.dim('Files Indexed:')} ${context.summary.totalFiles}`);
+    console.log(`${chalk.dim('Package Manager:')} ${context.profile.packageManager}`);
+    console.log('');
+    if (Object.keys(context.summary.extensions).length > 0) {
+        console.log(chalk.bold('File Types'));
+        for (const [extension, count] of Object.entries(context.summary.extensions)) {
+            console.log(`${chalk.green('✓')} ${extension}: ${count}`);
+        }
+    }
+}
+export function printReportSummary(report) {
+    console.log(chalk.bold('Report Summary'));
+    console.log('');
+    console.log(`${chalk.dim('Critical:')} ${severityColor('critical', report.summary.critical)}`);
+    console.log(`${chalk.dim('High:')} ${severityColor('high', report.summary.high)}`);
+    console.log(`${chalk.dim('Medium:')} ${severityColor('medium', report.summary.medium)}`);
+    console.log(`${chalk.dim('Low:')} ${severityColor('low', report.summary.low)}`);
+    console.log(`${chalk.dim('Info:')} ${severityColor('info', report.summary.info)}`);
+    console.log(`${chalk.dim('Total:')} ${report.summary.totalFindings}`);
+}
+function severityColor(severity, value) {
+    if (severity === 'critical')
+        return value > 0 ? chalk.red.bold(String(value)) : chalk.green(String(value));
+    if (severity === 'high')
+        return value > 0 ? chalk.red(String(value)) : chalk.green(String(value));
+    if (severity === 'medium')
+        return value > 0 ? chalk.yellow(String(value)) : chalk.green(String(value));
+    if (severity === 'low')
+        return value > 0 ? chalk.blue(String(value)) : chalk.green(String(value));
+    return chalk.dim(String(value));
+}
+//# sourceMappingURL=output.js.map

package/dist/src/utils/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../../src/utils/output.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B,MAAM,UAAU,YAAY,CAAC,OAAuB;IAClD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAE1E,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,+CAA+C,CAAC,CAAC,CAAC;IAC7E,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC;QACnD,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC3C,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAuB;IACzD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACtC,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5E,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAoB;IACrD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC/F,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzF,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,KAAa;IACpD,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3G,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClG,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACvG,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClG,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAClC,CAAC"}

package/dist/src/utils/package-output.d.ts

@@ -0,0 +1,4 @@
+import type { PackageHealth } from '../core/dependency-types.js';
+import type { PackageComparison } from '../core/compare-packages.js';
+export declare function printPackageHealth(pkg: PackageHealth): void;
+export declare function printPackageComparison(comparison: PackageComparison): void;