Giters

corgibytes / freshli

Issue only repository for tracking Freshli website and other high level Freshli issues.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[EPIC] JavaScript support

mscottford opened this issue · comments

commented

Build out JavaScript language support.

This should support both NPM and Yarn dependency manifest formats.

  • Create GitHub repository for freshli-agent-javascript

(The following issues should be moved to the repository that's created above once it exists.)

  • Add skeleton command line application
  • Implement detect-manifest
  • Implement process-manifest
  • Implement validating-repositories
  • Implement retrieve-release-history
  • Implement validating-package-urls
  • Validate against freshli agents verify command

(The following issue should belong to this project)

  • Add freshli-agent-javascript to production docker container image
commented

I did a little work on this yesterday and noted my findings in my journal from Thursday, September 28, 2023. Basically, it looks like GET https://registry.npmjs.org/{packageName} and then parse the JSON for the time array and get the time for the given version.

Also, it seems like freshli-agent-syft to detect and process manifests, and then use some Javascript native logic to get the release history.