Skip to content

Implement scanner extraction probes in CLI, Report and CI #307

@fraxken

Description

@fraxken

A lot of our tools, such as the CLI, CI, and Report, rely on JSON payloads generated by the Scanner (via from/cwd APIs) to extract data, such as:

  • Contacts (author, maintainers, publishers)
  • Licenses
  • Size (tarball)
  • Flags
  • Files and dependencies (e.g., extensions, usage of Node.js core libs)
  • Warnings
  • Vulnerabilities

Here are examples from our projects:

There are likely a few other places where we have similar needs. If you spot any, please don't hesitate to comment.

One of the constraints in many of these projects is performance. Iterating over the entire payload multiple times can be quite costly. So we somewhat need to found an API design that match that need.

Metadata

Metadata

Assignees

Labels

help wantedExtra attention is needed

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions