lint

Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>

Author: prabhu

index.js

@@ -9,8 +9,8 @@ export {
   commandsExecuted,
   safeExistsSync,
   safeMkdirSync,
-  safeReadFileSync,
   safeReaddirSync,
+  safeReadFileSync,
   safeSpawnSync,
 } from "./src/common/safe.js";
 export {
@@ -64,7 +64,9 @@ export const SUPPORTED_TARGETS = Object.freeze([
  */
 export function getCommandPlan(options = {}) {
   const platform = normalizePlatform(options.platform ?? process.platform);
-  const architecture = normalizeArchitecture(options.architecture ?? process.arch);
+  const architecture = normalizeArchitecture(
+    options.architecture ?? process.arch,
+  );
 
   if (platform === "darwin" && architecture === "arm64") {
     return getDarwinArm64CommandPlan();
@@ -99,7 +101,9 @@ export function getCommandPlan(options = {}) {
  */
 export async function collectHardware(options = {}) {
   const platform = normalizePlatform(options.platform ?? process.platform);
-  const architecture = normalizeArchitecture(options.architecture ?? process.arch);
+  const architecture = normalizeArchitecture(
+    options.architecture ?? process.arch,
+  );
 
   if (platform === "darwin" && architecture === "arm64") {
     return collectDarwinArm64Hardware(options);
@@ -176,7 +180,9 @@ export async function collectHardware(options = {}) {
  */
 export function buildHardwareFromSources(options) {
   const platform = normalizePlatform(options?.platform ?? process.platform);
-  const architecture = normalizeArchitecture(options?.architecture ?? process.arch);
+  const architecture = normalizeArchitecture(
+    options?.architecture ?? process.arch,
+  );
 
   if (platform === "darwin" && architecture === "arm64") {
     return buildDarwinArm64Hbom(options);

jsr.json

@@ -3,11 +3,7 @@
   "version": "0.1.0",
   "license": "MIT",
   "exports": "./index.js",
-  "include": [
-    "index.js",
-    "src/",
-    "README.md"
-  ],
+  "include": ["index.js", "src/", "README.md"],
   "exclude": [
     ".github/",
     "bin/",
@@ -17,4 +13,4 @@
     "*-hbom*.json",
     "*.tgz"
   ]
-}
+}

src/common/safe.js

@@ -1,6 +1,6 @@
-import { existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
-import { basename, resolve } from "node:path";
 import { spawnSync } from "node:child_process";
+import { existsSync, mkdirSync, readdirSync, readFileSync } from "node:fs";
+import { basename, resolve } from "node:path";
 import process from "node:process";
 
 /**
@@ -143,20 +143,33 @@ export function safeSpawnSync(command, args = [], options = {}) {
   const allowedCommands = normalizeAllowedCommands(options.allowedCommands);
   const commandName = basename(command);
 
-  if (allowedCommands && !allowedCommands.has(command) && !allowedCommands.has(commandName)) {
+  if (
+    allowedCommands &&
+    !allowedCommands.has(command) &&
+    !allowedCommands.has(commandName)
+  ) {
     return {
       status: 1,
       stdout: options.encoding === "buffer" ? Buffer.alloc(0) : "",
-      stderr: options.encoding === "buffer" ? Buffer.from("Command blocked by allowlist") : "Command blocked by allowlist",
+      stderr:
+        options.encoding === "buffer"
+          ? Buffer.from("Command blocked by allowlist")
+          : "Command blocked by allowlist",
       error: new Error(`Command blocked by allowlist: ${command}`),
     };
   }
 
-  if (options.shell === true && isWindowsShellHijackRisk(command, options.cwd)) {
+  if (
+    options.shell === true &&
+    isWindowsShellHijackRisk(command, options.cwd)
+  ) {
     return {
       status: 1,
       stdout: options.encoding === "buffer" ? Buffer.alloc(0) : "",
-      stderr: options.encoding === "buffer" ? Buffer.from("Blocked potential Windows shell hijack") : "Blocked potential Windows shell hijack",
+      stderr:
+        options.encoding === "buffer"
+          ? Buffer.from("Blocked potential Windows shell hijack")
+          : "Blocked potential Windows shell hijack",
       error: new Error("Blocked potential Windows shell hijack"),
     };
   }
@@ -184,11 +197,14 @@ export function safeSpawnSync(command, args = [], options = {}) {
  */
 function normalizeAllowedCommands(allowedCommands) {
   if (Array.isArray(allowedCommands) && allowedCommands.length > 0) {
-    return new Set(allowedCommands.map((entry) => entry.trim()).filter(Boolean));
+    return new Set(
+      allowedCommands.map((entry) => entry.trim()).filter(Boolean),
+    );
   }
 
   const envValue =
-    process.env.CDX_HBOM_ALLOWED_COMMANDS ?? process.env.CDXGEN_ALLOWED_COMMANDS;
+    process.env.CDX_HBOM_ALLOWED_COMMANDS ??
+    process.env.CDXGEN_ALLOWED_COMMANDS;
 
   if (!envValue) {
     return null;
@@ -220,7 +236,12 @@ function isWindowsShellHijackRisk(command, cwd) {
     .filter(Boolean)
     .map((extension) => extension.toLowerCase());
   const cwdPath = resolve(cwd);
-  const candidates = [candidateBase, ...pathExt.map((extension) => `${candidateBase}${extension}`)];
+  const candidates = [
+    candidateBase,
+    ...pathExt.map((extension) => `${candidateBase}${extension}`),
+  ];
 
-  return candidates.some((candidate) => safeExistsSync(resolve(cwdPath, candidate)));
+  return candidates.some((candidate) =>
+    safeExistsSync(resolve(cwdPath, candidate)),
+  );
 }

src/common/schema.js

@@ -2,7 +2,8 @@ import { randomUUID } from "node:crypto";
 
 export const HBOM_BOM_FORMAT = "CycloneDX";
 export const HBOM_SPEC_VERSION = "1.7";
-export const HBOM_SCHEMA_URL = "http://cyclonedx.org/schema/bom-1.7.schema.json";
+export const HBOM_SCHEMA_URL =
+  "http://cyclonedx.org/schema/bom-1.7.schema.json";
 
 /**
  * Create a CycloneDX 1.7 BOM envelope for hardware inventory.

src/darwin/arm64/commands.js

@@ -118,7 +118,11 @@ export const DARWIN_ARM64_COMMANDS = Object.freeze([
     purpose:
       "Planned enrichment for low-level Apple platform model and registry-backed identifiers via plist output.",
     phase: "planned-enrichment",
-    sensitiveFields: ["IOPlatformSerialNumber", "IOPlatformUUID", "serial-number"],
+    sensitiveFields: [
+      "IOPlatformSerialNumber",
+      "IOPlatformUUID",
+      "serial-number",
+    ],
   }),
   Object.freeze({
     id: "storage-plist",
@@ -158,7 +162,8 @@ export const DARWIN_ARM64_COMMANDS = Object.freeze([
     command: "/usr/bin/sw_vers",
     args: [],
     parser: "sw-vers-text",
-    purpose: "Planned metadata enrichment for Darwin version and build context.",
+    purpose:
+      "Planned metadata enrichment for Darwin version and build context.",
     phase: "planned-enrichment",
   }),
 ]);