provenant-cli 0.0.8

Provenant is a high-performance Rust scanner for licenses, packages, and source provenance.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140

#[cfg(test)]
mod tests {
    use super::super::PackageParser;
    use super::super::swift_show_dependencies::*;
    use crate::models::DatasourceId;
    use crate::models::PackageType;
    use std::path::PathBuf;

    #[test]
    fn test_is_match() {
        assert!(SwiftShowDependenciesParser::is_match(&PathBuf::from(
            "/path/to/swift-show-dependencies.deplock"
        )));
        assert!(SwiftShowDependenciesParser::is_match(&PathBuf::from(
            "some/dir/swift-show-dependencies.deplock"
        )));
        assert!(SwiftShowDependenciesParser::is_match(&PathBuf::from(
            "swift-show-dependencies.deplock"
        )));
        assert!(!SwiftShowDependenciesParser::is_match(&PathBuf::from(
            "Package.swift"
        )));
        assert!(!SwiftShowDependenciesParser::is_match(&PathBuf::from(
            "dependencies.json"
        )));
    }

    #[test]
    fn test_parse_basic() {
        let content = r#"{"name": "MyPackage"}"#;
        let pkg = parse_swift_show_dependencies(content);

        assert_eq!(pkg.name.as_deref(), Some("MyPackage"));
        assert_eq!(pkg.package_type, Some(PackageType::Swift));
        assert_eq!(pkg.primary_language.as_deref(), Some("Swift"));
        assert_eq!(
            pkg.datasource_id,
            Some(DatasourceId::SwiftPackageShowDependencies)
        );
    }

    #[test]
    fn test_parse_invalid_json() {
        let content = "not json";
        let pkg = parse_swift_show_dependencies(content);

        assert_eq!(pkg.package_type, Some(PackageType::Swift));
        assert_eq!(
            pkg.datasource_id,
            Some(DatasourceId::SwiftPackageShowDependencies)
        );
    }

    #[test]
    fn test_parse_with_dependencies() {
        let content = r#"{
  "name": "VercelUI",
  "version": "1.0.0",
  "url": "https://github.com/vercel/VercelUI",
  "dependencies": [
    {
      "identity": "vercel",
      "name": "Vercel",
      "url": "https://github.com/swift-cloud/Vercel",
      "version": "1.15.2",
      "dependencies": [
        {
          "identity": "vapor",
          "name": "vapor",
          "url": "https://github.com/vapor/vapor",
          "version": "4.79.0",
          "dependencies": []
        }
      ]
    },
    {
      "identity": "swift-nio",
      "name": "swift-nio",
      "url": "https://github.com/apple/swift-nio.git",
      "version": "2.58.0",
      "dependencies": []
    }
  ]
}"#;
        let pkg = parse_swift_show_dependencies(content);

        assert_eq!(pkg.name.as_deref(), Some("VercelUI"));
        assert_eq!(pkg.version.as_deref(), Some("1.0.0"));
        assert_eq!(
            pkg.homepage_url.as_deref(),
            Some("https://github.com/vercel/VercelUI")
        );

        assert_eq!(pkg.dependencies.len(), 3);

        let vercel_dep = pkg
            .dependencies
            .iter()
            .find(|d| d.purl.as_deref() == Some("pkg:swift/github.com/swift-cloud/Vercel@1.15.2"));
        assert!(vercel_dep.is_some());
        let vercel = vercel_dep.unwrap();
        assert_eq!(vercel.extracted_requirement.as_deref(), Some("1.15.2"));
        assert_eq!(vercel.is_direct, Some(true));
        assert_eq!(vercel.is_runtime, None);

        let vapor_dep = pkg
            .dependencies
            .iter()
            .find(|d| d.purl.as_deref() == Some("pkg:swift/github.com/vapor/vapor@4.79.0"));
        assert!(vapor_dep.is_some());
        let vapor = vapor_dep.unwrap();
        assert_eq!(vapor.extracted_requirement.as_deref(), Some("4.79.0"));
        assert_eq!(vapor.is_direct, Some(false));
        assert_eq!(vapor.is_runtime, None);

        let nio_dep = pkg
            .dependencies
            .iter()
            .find(|d| d.purl.as_deref() == Some("pkg:swift/github.com/apple/swift-nio@2.58.0"));
        assert!(nio_dep.is_some());
        let nio = nio_dep.unwrap();
        assert_eq!(nio.extracted_requirement.as_deref(), Some("2.58.0"));
        assert_eq!(nio.is_direct, Some(true));
        assert_eq!(nio.is_runtime, None);
    }

    #[test]
    fn test_parse_no_dependencies() {
        let content = r#"{
  "name": "SimplePackage",
  "version": "1.0.0",
  "dependencies": []
}"#;
        let pkg = parse_swift_show_dependencies(content);

        assert_eq!(pkg.name.as_deref(), Some("SimplePackage"));
        assert_eq!(pkg.version.as_deref(), Some("1.0.0"));
        assert!(pkg.dependencies.is_empty());
    }
}