Abhisek Datta and GitHub
5022d64ce4
chore: Improve UX ( #22 )
2025-05-15 18:03:46 +05:30
Abhisek Datta and GitHub
cfde1d7632
ci: Add CodeQL and OpenSSF Scorecard action ( #21 )
2025-05-15 16:59:13 +05:30
Abhisek Datta and GitHub
e86b6ef056
feat: Refactor PMG to Maintain Separation of Concerns and Clean Architecture ( #19 )
...
* feat: Add separate package manager and resolver
* fix: Npm dependency resolver
* feat: Add analyzer for malysis query
* feat: Add package manager guard as the orchestrator
* feat: Add PMG to orchestrate installation
* Add concurrent scan execution
* Introduce package manager interaction abstraction
* feat: Add UI port for guard
* Remove refactored source files
* Update README
* fix: CI script for multi-arch build
* ci: goreleaser CI fix
* fix: npm command parser to extract package names
* feat: Introduce global config primitive
* fix: Close results channel for clean goroutine exit
* ci: Add container image releaser
* test: Improve test for npm resolver
* refactor: Analyzer to generalise
* Improve UI with additional info
* fix: Goreleaser config
* fix: npm resolver bug
* fix: Fail when command exec workflow fails
* fix: Bug with transitive dependency resolution
* fix: Synchronize common data update in dependency resolver
* chore: Improve log handling
* docs: Update README
* fix: UI text wrapping
* fix: UI handling bugs
* feat: Use concurrent dependency resolver
2025-05-15 16:50:59 +05:30
8b46964c7a
fix(npm): handle multiple packages and flag parsing correctly ( #17 )
...
* fix(npm): handle multiple packages and flag parsing correctly
- Fixes issue where only the first package was scanned; now all packages in install command are parsed and processed.
- Correctly separates flags (e.g., --save-dev) from package names to avoid treating them as packages.
- Applies same fixes to both npm and pnpm flows.
- Updated wrapper to scan all packages before installing, maintaining original CLI behavior.
* refactor: fixed the registry type
* feat: continue installing other packages if one is denied
* Update pkg/wrapper/npm_base.go
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com >
* fix(wrapper): exit gracefully for user-rejected packages
* fix: remove env validation
---------
Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-05-12 09:23:08 +05:30
Sahil Bansal and GitHub
f7855e99a2
docs: add CONTRIBUTORS and MAINTAINERS files, update README ( #18 )
...
* docs: README update
* docs: introduce CONTRIBUTING.md
* docs: introduce MAINTAINERS.txt
2025-05-11 22:42:27 +05:30
Sahil Bansal and GitHub
86f8bd42b7
replace AnalysePackage with QueryPackageAnalysis API & use community API ( #15 )
2025-05-11 22:41:34 +05:30
6a28fb16a1
refactor: improve progress bar logic and update display ( #14 )
...
* fix: Revise progress tracking mechanism
* chore: remove unused getDependencies func
* chore: removed unused property & add fetcher check
* Update pkg/wrapper/npm_base.go
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com >
* refactor: make SetProgressTracker common for all fetchers
---------
Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-05-06 16:35:59 +05:30
df754ccc82
Add colorful outputs & remove md text ( #13 )
...
* fix: parsePackageInfo to handle pkg names with special character
* Enhance pmg outputs by adding colors and removing markdown notions
* Update pkg/wrapper/npm_base.go
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com >
* Update npm_base.go
Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com >
* test: add tests for removeMarkdown
* chore: remove duplicate code
* refactor: convert TerminalColors to global var and split markdown utils
---------
Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-05-05 23:32:34 +05:30
Sahil Bansal and GitHub
88f39b56ff
fix: parsePackageInfo to handle pkg names with special character ( #11 )
...
* fix: parsePackageInfo to handle pkg names with special character
* test: add tests for CleanVersion and ParsePackageInfo util functions
2025-05-04 18:50:13 +05:30
Sahil Bansal and GitHub
5a6b842360
add goreleaser & goreleaser workflow ( #8 )
2025-05-02 12:37:27 +05:30
Sahil Bansal and GitHub
1aa4b06f41
Pnpm suppport ( #6 )
...
* fix: resolves issues #3 and #4
* feat: add pnpm support & introduce pkg manager wrap for npm
2025-04-30 14:26:38 +05:30
Abhisek Datta and GitHub
ec010c7d6b
Merge pull request #1 from safedep/feat/npm-support
...
project initialisation & added npm cmd support
2025-04-29 09:06:05 +05:30
Sahilb315
4f13dfbb40
chore: clean unused deps
2025-04-29 01:52:35 +05:30
Sahilb315
d4a31b14c0
ci: add vet ci
2025-04-29 01:41:50 +05:30
Sahilb315
8b31fd458b
feat: add progress bar and add debug & silent flags
2025-04-29 01:33:27 +05:30
5ea85fa1f3
Update pkg/common/utils/utils.go
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com >
2025-04-28 20:48:07 +05:30
Sahilb315
6ae594a896
readme installation update
2025-04-28 20:02:20 +05:30
Sahilb315
1abcc28259
refactor: introduce PackageAnalyser struct and remove unused arborist files
2025-04-28 19:23:36 +05:30
Sahilb315
d60fe87236
Add support for defaulting to latest version and improve code structure
2025-04-25 20:53:07 +05:30
Sahilb315
b8444d244b
replaced deps fetching from arborist to custom
2025-04-24 03:46:38 +05:30
Sahilb315
7167db9830
added workers queue
2025-04-23 22:38:39 +05:30
Sahilb315
1085b73c90
readme update
2025-04-23 02:21:44 +05:30
Sahilb315
cdc43d3a14
function name change
2025-04-23 01:12:26 +05:30
Sahilb315
d636a928c4
added Makefile
2025-04-21 21:13:23 +05:30
Sahilb315
2d2f0fdee9
added arborist.js file & support for npm auth token for arborist lib to scan private deps
2025-04-10 01:10:56 +05:30
Sahilb315
ed8f9b6d53
minimal implementation for pmg
2025-04-09 23:27:46 +05:30
Sahilb315
4805f443f5
common functions for grpc
2025-04-09 01:53:05 +05:30
Sahilb315
a190d945ec
replaced arborist with arborist bundle & common func for analysis
2025-04-09 00:58:14 +05:30
Sahilb315
e1e57a3ecd
embedded arborist.js file & common func for pkg extracting
2025-04-09 00:09:36 +05:30
Sahilb315
b09e34c3eb
npm token removal
2025-04-08 02:45:53 +05:30
Sahilb315
3e79d2a53f
project initialisation & added npm cmd support
2025-04-08 02:37:15 +05:30
Abhisek Datta and GitHub
1d45698137
Update README.md
...
Signed-off-by: Abhisek Datta <abhisek.datta@gmail.com >
2025-03-20 08:00:09 +05:30
Abhisek Datta and GitHub
c22c97b257
Initial commit
2025-03-20 07:59:48 +05:30
