Function validate_package

src/package_scanner.rs:418–438

Validate package dependency against public registry

(
    package: &mut PackageDependency,
    client: &Client,
)

/// Validate package dependency against public registry
pub async fn validate_package(
    package: &mut PackageDependency,
    client: &Client,
) -> Result<(), String> {
    sleep(Duration::from_millis(100)).await; // Rate limiting

    let (exists, registry_url, error) = match package.package_type {
        PackageType::NPM => validate_npm_package(&package.package_name, client).await,
        PackageType::PIP => validate_pip_package(&package.package_name, client).await,
        PackageType::GO => validate_go_package(&package.package_name, client).await,
    };

    package.exists_in_public_registry = exists;
    package.registry_url = registry_url;
    package.validation_error = error;

    // Mark as potential dependency confusion if package doesn't exist publicly
    package.potential_confusion = !exists && package.validation_error.is_none();

    Ok(())
}

/// Information about a JS file and where it was referenced
#[derive(Debug, Clone)]