devmap 0.3.1__tar.gz → 0.3.3__tar.gz

{devmap-0.3.1 → devmap-0.3.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devmap
-Version: 0.3.1
+Version: 0.3.3
 Summary: Map your machine's dev environment and surface issues (PATH conflicts, ghost binaries, multi-version collisions). fastfetch-for-dev-tools. This PyPI package ships the real devmap CLI (a bundled JavaScript app launched via Node.js or Bun), so `pip install devmap && devmap` works standalone.
 Author: devmap contributors
 License: MIT

{devmap-0.3.1 → devmap-0.3.3}/devmap/_devmap.mjs

@@ -2,7 +2,7 @@
 // @bun
 
 // src/version.ts
-var VERSION = "0.3.1";
+var VERSION = "0.3.3";
 
 // src/install.ts
 function isIsolated(i) {
@@ -239,8 +239,8 @@ function whichInDirs(name, dirs) {
   }
   return out;
 }
-var SEMVER_RE = /(?<![\d.])\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.]+)?(?![\d.])/;
-var LOOSE_VERSION_RE = /(?<![\d.])\d+\.\d+(?![\d.])/;
+var SEMVER_RE = /(?<![\d.])(\d+\.\d+\.\d+)(?:[-.+][0-9A-Za-z._-]+)*(?![\d.])/;
+var LOOSE_VERSION_RE = /(?<![\d.])(\d+\.\d+)(?:[-.+][0-9A-Za-z._-]+)*(?![\d.])/;
 function extractVersion(out, binPath) {
   const lines = out.split(/\r?\n/).map((l) => l.trim()).filter((l) => l && !l.startsWith("["));
   if (binPath) {
@@ -555,17 +555,26 @@ var SCA_TOOLS = [
     auditArgs: ["-f", "json"],
     parse: (json) => {
       const out = [];
+      const sevOf = (s) => s ? toSeverity(s) : "error";
+      const seen = new Set;
+      const push = (name, vid, sev, title, detail) => {
+        const key = `${name}|${vid}`;
+        if (seen.has(key))
+          return;
+        seen.add(key);
+        out.push(makeCheck(`security.deps.pipaudit.${vid}`, "vuln", sev, title, detail, [name]));
+      };
       for (const dep of json?.dependencies || []) {
         for (const v of dep?.vulns || []) {
-          const sev = toSeverity(v?.severity);
+          const sev = sevOf(v?.severity);
           const vid = v?.id || "UNKNOWN";
-          out.push(makeCheck(`security.deps.pipaudit.${vid}`, "vuln", sev, `${dep?.name || "?"}@${dep?.version || "?"} affected by ${vid} (${sev === "error" ? "HIGH" : "MEDIUM"})`, `${vid}: ${v?.description || ""}. Fix versions: ${(v?.fix_versions || []).join(", ") || "n/a"}.`, [dep?.name || ""]));
+          push(dep?.name || "?", vid, sev, `${dep?.name || "?"}@${dep?.version || "?"} affected by ${vid} (${sev === "error" ? "HIGH" : "MEDIUM"})`, `${vid}: ${v?.description || ""}. Fix versions: ${(v?.fix_versions || []).join(", ") || "n/a"}.`);
         }
       }
       for (const v of json?.vulnerabilities || []) {
-        const sev = toSeverity(v?.severity);
+        const sev = sevOf(v?.severity);
         const vid = v?.id || "UNKNOWN";
-        out.push(makeCheck(`security.deps.pipaudit.${vid}`, "vuln", sev, `${v?.name || "?"} affected by ${vid}`, `${vid}: ${v?.description || ""}.`, [v?.name || ""]));
+        push(v?.name || "?", vid, sev, `${v?.name || "?"} affected by ${vid}`, `${vid}: ${v?.description || ""}.`);
       }
       return out;
     }

{devmap-0.3.1 → devmap-0.3.3}/devmap.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devmap
-Version: 0.3.1
+Version: 0.3.3
 Summary: Map your machine's dev environment and surface issues (PATH conflicts, ghost binaries, multi-version collisions). fastfetch-for-dev-tools. This PyPI package ships the real devmap CLI (a bundled JavaScript app launched via Node.js or Bun), so `pip install devmap && devmap` works standalone.
 Author: devmap contributors
 License: MIT

{devmap-0.3.1 → devmap-0.3.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "devmap"
-version = "0.3.1"
+version = "0.3.3"
 description = "Map your machine's dev environment and surface issues (PATH conflicts, ghost binaries, multi-version collisions). fastfetch-for-dev-tools. This PyPI package ships the real devmap CLI (a bundled JavaScript app launched via Node.js or Bun), so `pip install devmap && devmap` works standalone."
 readme = "README.md"
 requires-python = ">=3.8"