provenant-cli 0.0.8

Provenant is a high-performance Rust scanner for licenses, packages, and source provenance.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118

#[cfg(test)]
mod tests {
    use std::fs;
    use std::path::Path;

    use tempfile::tempdir;

    use crate::models::{DatasourceId, PackageType};
    use crate::parsers::{DenoParser, PackageParser};

    #[test]
    fn test_is_match() {
        assert!(DenoParser::is_match(Path::new("deno.json")));
        assert!(DenoParser::is_match(Path::new("deno.jsonc")));
        assert!(!DenoParser::is_match(Path::new("package.json")));
    }

    #[test]
    fn test_extract_from_deno_json_manifest() {
        let temp_dir = tempdir().unwrap();
        let file_path = temp_dir.path().join("deno.json");
        let content = r#"{
  "name": "@provenant/deno-sample",
  "version": "1.0.0",
  "exports": "./mod.ts",
  "imports": {
    "@std/assert": "jsr:@std/assert@^1.0.0",
    "chalk": "npm:chalk@5",
    "oak": "https://deno.land/x/oak/mod.ts"
  },
  "links": ["../local-package"],
  "scopes": {
    "https://deno.land/x/oak/": {
      "https://deno.land/x/dep/mod.ts": "./patched.ts"
    }
  },
  "tasks": { "test": "deno test" },
  "lock": { "path": "./deno.lock", "frozen": false }
}"#;
        fs::write(&file_path, content).unwrap();

        let package_data = DenoParser::extract_first_package(&file_path);

        assert_eq!(package_data.package_type, Some(PackageType::Deno));
        assert_eq!(package_data.primary_language.as_deref(), Some("TypeScript"));
        assert_eq!(package_data.datasource_id, Some(DatasourceId::DenoJson));
        assert_eq!(package_data.namespace.as_deref(), Some("@provenant"));
        assert_eq!(package_data.name.as_deref(), Some("deno-sample"));
        assert_eq!(package_data.version.as_deref(), Some("1.0.0"));
        assert_eq!(
            package_data.purl.as_deref(),
            Some("pkg:generic/%40provenant/deno-sample@1.0.0")
        );
        assert_eq!(package_data.dependencies.len(), 3);

        let jsr_dep = package_data
            .dependencies
            .iter()
            .find(|dep| dep.extracted_requirement.as_deref() == Some("jsr:@std/assert@^1.0.0"))
            .unwrap();
        assert_eq!(jsr_dep.is_direct, Some(true));
        assert_eq!(jsr_dep.is_runtime, Some(true));
        assert_eq!(
            jsr_dep.purl.as_deref(),
            Some("pkg:generic/jsr.io/%40std/assert")
        );

        let npm_dep = package_data
            .dependencies
            .iter()
            .find(|dep| dep.extracted_requirement.as_deref() == Some("npm:chalk@5"))
            .unwrap();
        assert_eq!(npm_dep.purl.as_deref(), Some("pkg:npm/chalk"));

        let remote_dep = package_data
            .dependencies
            .iter()
            .find(|dep| {
                dep.extracted_requirement.as_deref() == Some("https://deno.land/x/oak/mod.ts")
            })
            .unwrap();
        assert!(remote_dep.purl.is_some());

        let extra_data = package_data.extra_data.unwrap();
        assert!(extra_data.contains_key("exports"));
        assert!(extra_data.contains_key("scopes"));
        assert!(extra_data.contains_key("links"));
        assert!(extra_data.contains_key("tasks"));
        assert!(extra_data.contains_key("lock"));
    }

    #[test]
    fn test_extract_from_deno_jsonc_manifest() {
        let temp_dir = tempdir().unwrap();
        let file_path = temp_dir.path().join("deno.jsonc");
        let content = r#"{
  // package identity
  "name": "@std/jsonc",
  "version": "1.0.2",
  "exports": {
    ".": "./mod.ts",
    "./parse": "./parse.ts",
  },
  "imports": {
    "@std/assert": "jsr:@std/assert@1",
  },
}"#;
        fs::write(&file_path, content).unwrap();

        let package_data = DenoParser::extract_first_package(&file_path);

        assert_eq!(package_data.datasource_id, Some(DatasourceId::DenoJson));
        assert_eq!(package_data.namespace.as_deref(), Some("@std"));
        assert_eq!(package_data.name.as_deref(), Some("jsonc"));
        assert_eq!(package_data.version.as_deref(), Some("1.0.2"));
        assert_eq!(package_data.dependencies.len(), 1);
    }
}