stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 3 Releases Wiki Activity

semi implemented and features implemented save checkpoint

Browse Source
This commit is contained in:
master
2026-02-08 18:00:49 +02:00
parent 04360dff63
commit 1bf6bbf395
20895 changed files with 716795 additions and 64 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
docs/features/unchecked/scanner/yarn-pnp-cache-package-parsing.md Normal file
View File

@@ -0,0 +1,30 @@
# Yarn PnP Cache Package Parsing
## Module
Scanner
## Status
IMPLEMENTED
## Description
Parses Yarn Plug'n'Play cache files (.pnp.cjs, .pnp.data.json) to discover installed packages in zero-install Yarn workspaces where traditional node_modules directories do not exist.
## Implementation Details
- **PnP Data Parser**:
- `src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node/Internal/YarnPnpData.cs` - `YarnPnpData` model parsing .pnp.data.json files containing the Yarn PnP package resolution map
- `src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node/Internal/NodePnpDataLoader.cs` - `NodePnpDataLoader` loading and parsing PnP data files (.pnp.cjs, .pnp.data.json)
- **Package Collection**:
- `src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node/Internal/NodePackageCollector.cs` - `NodePackageCollector` collecting packages from PnP resolution data
- `src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node/Internal/NodePackage.cs` - `NodePackage` model for collected packages
- `src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node/Internal/NodeInputNormalizer.cs` - `NodeInputNormalizer` normalizing PnP package references
- **Tests**:
- `src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Node.Tests/Internal/YarnPnpDataTests.cs` - PnP data parsing tests
- `src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Node.Tests/Node/NodeLanguageAnalyzerTests.cs` - Language analyzer integration tests
- `src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Node.Tests/Node/NodePackageCollectorTraversalTests.cs` - Package collector traversal tests
## E2E Test Plan
- [ ] Scan a container image with a Yarn Berry zero-install workspace and verify packages are discovered from .pnp.cjs/.pnp.data.json
- [ ] Verify all packages in the PnP resolution map are collected with correct names and versions
- [ ] Verify the parser handles nested workspaces with multiple .pnp.data.json files
- [ ] Verify the analyzer falls back to traditional node_modules scanning when PnP files are not present
- [ ] Verify PnP package references are correctly normalized to standard npm package identifiers