Function ParseComposerJsonWithLock

opensca/sca/php/composer.go:47–99

(json *ComposerJson, lock *ComposerLock)

}

func ParseComposerJsonWithLock(json *ComposerJson, lock *ComposerLock) *model.DepGraph {

	root := &model.DepGraph{Name: json.Name, Path: json.File.Relpath()}
	root.AppendLicense(json.License)

	_dep := model.NewDepGraphMap(nil, func(s ...string) *model.DepGraph { return &model.DepGraph{Name: s[0]} }).LoadOrStore

	// 第一次遍历记录依赖信息
	for _, pkg := range lock.Packages {
		dep := _dep(pkg.Name)
		dep.Version = pkg.Version
		for _, lic := range pkg.License {
			dep.AppendLicense(lic)
		}
	}
	for _, pkg := range lock.PackagesDev {
		dep := _dep(pkg.Name)
		dep.Version = pkg.Version
		dep.Develop = true
		for _, lic := range pkg.License {
			dep.AppendLicense(lic)
		}
	}

	// 第二次遍历记录依赖关系
	for _, pkg := range append(lock.Packages, lock.PackagesDev...) {
		dep := _dep(pkg.Name)
		for name := range pkg.Require {
			if skip(name) {
				continue
			}
			dep.AppendChild(_dep(name))
		}
	}

	// 记录直接依赖
	names := []string{}
	for name := range json.Require {
		names = append(names, name)
	}
	for name := range json.RequireDev {
		names = append(names, name)
	}
	sort.Strings(names)
	for _, name := range names {
		if skip(name) {
			continue
		}
		root.AppendChild(_dep(name))
	}

	return root
}

func ParseComposerJsonWithOrigin(json *ComposerJson) *model.DepGraph {