devmap 0.3.2__tar.gz → 0.3.4__tar.gz

{devmap-0.3.2 → devmap-0.3.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devmap
-Version: 0.3.2
+Version: 0.3.4
 Summary: Map your machine's dev environment and surface issues (PATH conflicts, ghost binaries, multi-version collisions). fastfetch-for-dev-tools. This PyPI package ships the real devmap CLI (a bundled JavaScript app launched via Node.js or Bun), so `pip install devmap && devmap` works standalone.
 Author: devmap contributors
 License: MIT

{devmap-0.3.2 → devmap-0.3.4}/devmap/_devmap.mjs

@@ -2,7 +2,7 @@
 // @bun
 
 // src/version.ts
-var VERSION = "0.3.2";
+var VERSION = "0.3.4";
 
 // src/install.ts
 function isIsolated(i) {
@@ -555,17 +555,26 @@ var SCA_TOOLS = [
     auditArgs: ["-f", "json"],
     parse: (json) => {
       const out = [];
+      const sevOf = (s) => s ? toSeverity(s) : "error";
+      const seen = new Set;
+      const push = (name, vid, sev, title, detail) => {
+        const key = `${name}|${vid}`;
+        if (seen.has(key))
+          return;
+        seen.add(key);
+        out.push(makeCheck(`security.deps.pipaudit.${vid}`, "vuln", sev, title, detail, [name]));
+      };
       for (const dep of json?.dependencies || []) {
         for (const v of dep?.vulns || []) {
-          const sev = toSeverity(v?.severity);
+          const sev = sevOf(v?.severity);
           const vid = v?.id || "UNKNOWN";
-          out.push(makeCheck(`security.deps.pipaudit.${vid}`, "vuln", sev, `${dep?.name || "?"}@${dep?.version || "?"} affected by ${vid} (${sev === "error" ? "HIGH" : "MEDIUM"})`, `${vid}: ${v?.description || ""}. Fix versions: ${(v?.fix_versions || []).join(", ") || "n/a"}.`, [dep?.name || ""]));
+          push(dep?.name || "?", vid, sev, `${dep?.name || "?"}@${dep?.version || "?"} affected by ${vid} (${sev === "error" ? "HIGH" : "MEDIUM"})`, `${vid}: ${v?.description || ""}. Fix versions: ${(v?.fix_versions || []).join(", ") || "n/a"}.`);
         }
       }
       for (const v of json?.vulnerabilities || []) {
-        const sev = toSeverity(v?.severity);
+        const sev = sevOf(v?.severity);
         const vid = v?.id || "UNKNOWN";
-        out.push(makeCheck(`security.deps.pipaudit.${vid}`, "vuln", sev, `${v?.name || "?"} affected by ${vid}`, `${vid}: ${v?.description || ""}.`, [v?.name || ""]));
+        push(v?.name || "?", vid, sev, `${v?.name || "?"} affected by ${vid}`, `${vid}: ${v?.description || ""}.`);
       }
       return out;
     }
@@ -1206,6 +1215,12 @@ var CANDIDATES = [
   "C:\\tools\\vcpkg\\vcpkg.exe",
   "C:\\vcpkg\\vcpkg"
 ];
+function parseVcpkgVersion(out) {
+  if (!out)
+    return null;
+  const m = out.match(/version\s+(\d{4}-\d{2}-\d{2}(?:-[0-9a-f]+)?)/i);
+  return m ? m[1] : null;
+}
 async function findVcpkg() {
   const cands = [];
   const seen = new Set;
@@ -1226,7 +1241,7 @@ async function findVcpkg() {
   }
   for (const p of whichInDirs("vcpkg", pathDirs()))
     add(p, true);
-  const versions = await pool(cands, 8, (c) => versionOfAsync(c.path, ["version", "--version"]));
+  const versions = await pool(cands, 8, (c) => runBinAsync(c.path, ["version"], 9000).then(parseVcpkgVersion));
   return cands.map((c, i) => ({ path: c.path, onPath: c.onPath, version: versions[i] }));
 }
 function parseList(out) {
@@ -2054,7 +2069,7 @@ function renderEnvironments(env) {
   const rule = "  " + "─".repeat(40);
   if (env.vcpkg?.installed) {
     console.log(rule);
-    console.log(`  \x1B[1mvcpkg\x1B[0m  ${plur(env.vcpkg.packages.length, "package")}  (\x1B[33m${plur(env.vcpkg.installs.length, "install")}\x1B[0m)`);
+    console.log(`  \x1B[1mvcpkg\x1B[0m  ${plur(env.vcpkg.packages.length, "package")}  (\x1B[33m${plur(env.vcpkg.installs.length, "vcpkg copy", "vcpkg copies")}\x1B[0m)`);
     for (const p of env.vcpkg.packages.slice(0, 6))
       console.log(`    ${p.name}@${p.version}  \x1B[2m${p.triplet}\x1B[0m`);
   }
@@ -2134,7 +2149,7 @@ function renderMarkdownLite(m) {
   const env = m.environments || {};
   const envLines = [];
   if (env.vcpkg?.installed)
-    envLines.push(`- vcpkg: ${plur(env.vcpkg.packages.length, "package")} / ${plur(env.vcpkg.installs.length, "install")}`);
+    envLines.push(`- vcpkg: ${plur(env.vcpkg.packages.length, "package")} / ${plur(env.vcpkg.installs.length, "vcpkg copy", "vcpkg copies")}`);
   if (env.pip?.perInterpreter?.length)
     envLines.push(`- pip: ${plur(env.pip.perInterpreter.length, "interpreter")} / ${plur(env.pip.perInterpreter.reduce((a, p) => a + p.packages.length, 0), "package")}`);
   if (env.apt?.available)

{devmap-0.3.2 → devmap-0.3.4}/devmap.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devmap
-Version: 0.3.2
+Version: 0.3.4
 Summary: Map your machine's dev environment and surface issues (PATH conflicts, ghost binaries, multi-version collisions). fastfetch-for-dev-tools. This PyPI package ships the real devmap CLI (a bundled JavaScript app launched via Node.js or Bun), so `pip install devmap && devmap` works standalone.
 Author: devmap contributors
 License: MIT

{devmap-0.3.2 → devmap-0.3.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "devmap"
-version = "0.3.2"
+version = "0.3.4"
 description = "Map your machine's dev environment and surface issues (PATH conflicts, ghost binaries, multi-version collisions). fastfetch-for-dev-tools. This PyPI package ships the real devmap CLI (a bundled JavaScript app launched via Node.js or Bun), so `pip install devmap && devmap` works standalone."
 readme = "README.md"
 requires-python = ">=3.8"