ts-node-client 3.2.5 → 3.3.1

package/.github/workflows/scan.yml

@@ -0,0 +1,31 @@
+name: Scan dependencies
+
+on:
+  push:
+    tags:
+      - '*.*.*'
+
+jobs:
+  scan:
+
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        include:
+          - node-version: 20.x
+
+    steps:
+      - uses: actions/checkout@v3
+      - name: Use Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@v3
+        with:
+          node-version: ${{ matrix.node-version }}
+          registry-url: 'https://registry.npmjs.org'
+      - name: Install yarn
+        run: npm install --global yarn
+      - name: Install dependencies
+        run: yarn
+      - name: Scan dependencies
+        run: yarn node ./bin/ts-node-client.js --branch main --tag $GITHUB_REF_NAME --project Scanner --url https://app.trustsource.io/ --apiKey ${{ secrets.TS_TOKEN }}
+

package/CHANGELOG.md

@@ -8,6 +8,19 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 
+## 3.3.1 - 2024-03-29
+
+### Changed
+* automate dependency scans
+
+
+## 3.3.0 - 2024-03-27
+
+### Changed
+* migrated to packageurl-js@1.2.1
+* Bump dependencies
+
+
 ## 3.2.5 - 2024-03-21
 
 ### Changed

package/SECURITY.md

@@ -2,20 +2,11 @@
 
 ## Supported Versions
 
-Use this section to tell people about which versions of your project are
-currently being supported with security updates.
-
 | Version | Supported          |
-| ------- | ------------------ |
-| 5.1.x   | :white_check_mark: |
-| 5.0.x   | :x:                |
-| 4.0.x   | :white_check_mark: |
-| < 4.0   | :x:                |
+|---------| ------------------ |
+| 3.3.x   | :white_check_mark: |
+| < 3.0   | :x:                |
 
 ## Reporting a Vulnerability
 
-Use this section to tell people how to report a vulnerability.
-
-Tell them where to go, how often they can expect to get an update on a
-reported vulnerability, what to expect if the vulnerability is accepted or
-declined, etc.
+No known vulnerabilities are available

package/lib/convertor.js

@@ -5,7 +5,7 @@
  * SPDX-License-Identifier:  Apache-2.0
  *********************************************************/
 /* eslint-enable */
-const PackageURL = require('./pkg');
+const { PackageURL } = require('packageurl-js');
 
 const Convertor = {};
 
@@ -65,7 +65,8 @@ function getPackageUrl(componentKey, version) {
         const org = parts.length > 1 ? parts[0] : null;
         const key = parts.length > 1 ? parts[1] : parts[0];
         if (key) {
-            return PackageURL.get(result.manager, org, key, version);
+            const purl = new PackageURL(result.manager, org, key, version);
+            return purl.toString();
         }
         return null;
     }

package/package-lock.json

@@ -1,18 +1,19 @@
 {
   "name": "ts-node-client",
-  "version": "3.2.5",
+  "version": "3.3.1",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "ts-node-client",
-      "version": "3.2.5",
+      "version": "3.3.1",
       "license": "Apache-2.0",
       "dependencies": {
         "@yarnpkg/lockfile": "1.1.0",
         "axios": "1.6.8",
         "debuglog": "1.0.1",
         "js-yaml": "4.1.0",
+        "packageurl-js": "1.2.1",
         "semver": "7.6.0",
         "yargs": "17.7.2"
       },
@@ -2311,6 +2312,11 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/packageurl-js": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz",
+      "integrity": "sha512-cZ6/MzuXaoFd16/k0WnwtI298UCaDHe/XlSh85SeOKbGZ1hq0xvNbx3ILyCMyk7uFQxl6scF3Aucj6/EO9NwcA=="
+    },
     "node_modules/parent-module": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/parent-module/-/parent-module-1.0.1.tgz",
@@ -4720,6 +4726,11 @@
         "p-limit": "^3.0.2"
       }
     },
+    "packageurl-js": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/packageurl-js/-/packageurl-js-1.2.1.tgz",
+      "integrity": "sha512-cZ6/MzuXaoFd16/k0WnwtI298UCaDHe/XlSh85SeOKbGZ1hq0xvNbx3ILyCMyk7uFQxl6scF3Aucj6/EO9NwcA=="
+    },
     "parent-module": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/parent-module/-/parent-module-1.0.1.tgz",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "ts-node-client",
   "description": "npm / node module to transfer dependency information to TrustSource server.",
-  "version": "3.2.5",
+  "version": "3.3.1",
   "homepage": "https://app.trustsource.io/",
   "author": {
     "name": "Oleksandr Dmukhovskyi",
@@ -18,7 +18,7 @@
   "main": "./lib/cli.js",
   "bin": "./bin/ts-node-client.js",
   "scripts": {
-    "scan": "yarn node ./bin/ts-node-client.js --debug true --saveAs test --saveAsFormat scan",
+    "scan": "yarn node ./bin/ts-node-client.js",
     "scan-with-brakes": "yarn node ./bin/ts-node-client.js --breakOnViolations true --breakOnWarnings false",
     "scan-to-file": "yarn node ./bin/ts-node-client.js --saveAs test --saveAsFormat scan --includeDevDependencies false",
     "lint": "eslint bin lib test",
@@ -31,6 +31,7 @@
     "axios": "1.6.8",
     "debuglog": "1.0.1",
     "js-yaml": "4.1.0",
+    "packageurl-js": "1.2.1",
     "semver": "7.6.0",
     "yargs": "17.7.2"
   },

package/lib/pkg.js

@@ -1,36 +0,0 @@
-/* eslint-disable */
-/**********************************************************
- * Copyright (c) 2022. Enterprise Architecture Group, EACG
- *
- * SPDX-License-Identifier:  Apache-2.0
- *********************************************************/
-/* eslint-enable */
-
-const PackageURL = {};
-
-PackageURL.get = function get(manager, org, key, version) {
-    // scheme:type/namespace/name@version?qualifiers#subpath
-    const parts = [];
-    let partVersion;
-    if (manager) {
-        parts.push(fixPart(manager));
-    }
-    if (org) {
-        parts.push(fixPart(org));
-    }
-    if (key) {
-        parts.push(fixPart(key));
-    }
-    if (version) {
-        partVersion = `@${fixPart(version)}`;
-    }
-    return `pkg:${parts.join('/')}${partVersion}`;
-};
-
-function fixPart(str) {
-    const newStr = encodeURI(str);
-    return newStr.split('%3A').join(':');
-}
-
-module.exports = PackageURL;
-