Function classifyAuditPaths

scripts/security/check-osv-exceptions.mjs:44–56

(audit)

}

export function classifyAuditPaths(audit) {
  const unreviewed = [];
  const legacyDocs = [];
  for (const advisory of Object.values(audit.advisories ?? {})) {
    for (const finding of advisory.findings ?? []) {
      for (const dependencyPath of finding.paths ?? []) {
        const record = { id: advisory.github_advisory_id, package: advisory.module_name, version: finding.version, path: dependencyPath };
        (dependencyPath.startsWith('apps__rxjs.dev>') ? legacyDocs : unreviewed).push(record);
      }
    }
  }
  return { unreviewed, legacyDocs };
}

export function canonicalGithubAdvisoryId(vulnerability) {
  const githubIds = [vulnerability.id, ...(vulnerability.aliases ?? [])].filter((id) => /^GHSA-[a-z0-9-]+$/i.test(id));