External/pmg
1
0
Fork 0
mirror of https://github.com/safedep/pmg.git synced 2026-08-03 07:24:09 +02:00
Code Issues Packages Projects Releases Wiki Activity

replaced deps fetching from arborist to custom

Browse Source
This commit is contained in:
Sahilb315
2025-04-24 03:46:38 +05:30
parent 7167db9830
commit b8444d244b
5 changed files with 229 additions and 42 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/analyser/analysis.go
+17
View File
@@ -10,10 +10,27 @@ import (
packagev1 "buf.build/gen/go/safedep/api/protocolbuffers/go/safedep/messages/package/v1"
malysisv1 "buf.build/gen/go/safedep/api/protocolbuffers/go/safedep/services/malysis/v1"
"github.com/safedep/dry/log"
"github.com/safedep/pmg/pkg/common"
"github.com/safedep/pmg/pkg/common/utils"
"github.com/safedep/pmg/pkg/models"
vetUtils "github.com/safedep/vet/pkg/common/utils"
)
func FetchDependencies(packageName string) ([]string, error) {
fetcher := models.NewFlatteningFetcher()
name, version, err := utils.ParsePackageInfo(packageName)
if err != nil {
return nil, err
}
deps, err := fetcher.GetPackageDependencies(name, version)
flatDeps := common.FlattenDependencyTree(deps)
if err != nil {
return nil, fmt.Errorf("error while fetching package dependencies: %v\n", err)
}
return flatDeps, nil
}
func AnalysePackage(maliciousPkgs map[string]string, client malysisv1grpc.MalwareAnalysisServiceClient, ctx context.Context) vetUtils.WorkQueueFn[models.PackageAnalysisItem] {
return func(q *vetUtils.WorkQueue[models.PackageAnalysisItem], item models.PackageAnalysisItem) error {
var maliciousPkgsMutex sync.Mutex