Merge pull request #34 from kyoshidajp/dart_pub

Support dart pub

README.md

@@ -12,6 +12,7 @@ However, some libraries have archived their source code repositories or have had
 
 | language | package manager | dependencies file (e.g.) | status |
 | -------- | ------------- | -- | :----: |
+| Dart | pub | pubspec.lock | :heavy_check_mark: |
 | Go | golang | go.mod | :heavy_check_mark: |
 | JavaScript | npm | package-lock.json | :heavy_check_mark: |
 | JavaScript | yarn | yarn.lock | :heavy_check_mark: |

cmd/dart/pub/pub.go

@@ -0,0 +1,86 @@
+package dart
+
+import (
+	"encoding/json"
+	"errors"
+	"fmt"
+	"io"
+	"net/http"
+
+	"github.com/aquasecurity/go-dep-parser/pkg/dart/pub"
+	parser_io "github.com/aquasecurity/go-dep-parser/pkg/io"
+	"github.com/aquasecurity/go-dep-parser/pkg/types"
+)
+
+const PUB_REGISTRY_API = "https://pub.dev/api/packages/%s"
+
+type PubRegistryResponse struct {
+	Latest struct {
+		Pubspec struct {
+			Repository   string `json:"repository"`
+			Homepage     string `json:"homepage"`
+			IssueTracker string `json:"issue_tracker"`
+		} `json:"pubspec"`
+	} `json:"latest"`
+}
+
+type Pub struct {
+	lib types.Library
+}
+
+func (n *Pub) fetchURLFromRegistry(client http.Client) (string, error) {
+	url := fmt.Sprintf(PUB_REGISTRY_API, n.lib.Name)
+	req, err := http.NewRequest(http.MethodGet, url, nil)
+	if err != nil {
+		return "", err
+	}
+
+	resp, err := client.Do(req)
+	if err != nil {
+		return "", nil
+	}
+
+	defer resp.Body.Close()
+	if resp.StatusCode < 200 || 299 < resp.StatusCode {
+		m := fmt.Sprintf("Got status code: %d from %s", resp.StatusCode, url)
+		return "", errors.New(m)
+	}
+
+	body, _ := io.ReadAll(resp.Body)
+
+	var PubRegistryResponse PubRegistryResponse
+	err = json.Unmarshal(body, &PubRegistryResponse)
+	if err != nil {
+		return "", nil
+	}
+
+	if PubRegistryResponse.Latest.Pubspec.Repository != "" {
+		return PubRegistryResponse.Latest.Pubspec.Repository, nil
+	}
+
+	if PubRegistryResponse.Latest.Pubspec.Homepage != "" {
+		return PubRegistryResponse.Latest.Pubspec.Homepage, nil
+	}
+
+	return PubRegistryResponse.Latest.Pubspec.IssueTracker, nil
+}
+
+type PubDoctor struct {
+	HTTPClient http.Client
+}
+
+func NewPubDoctor() *PubDoctor {
+	return &PubDoctor{}
+}
+
+func (d *PubDoctor) Libraries(r parser_io.ReadSeekerAt) []types.Library {
+	p := pub.NewParser()
+	libs, _, _ := p.Parse(r)
+	return libs
+}
+
+func (d *PubDoctor) SourceCodeURL(lib types.Library) (string, error) {
+	pub := Pub{lib: lib}
+	url, err := pub.fetchURLFromRegistry(d.HTTPClient)
+	return url, err
+}

cmd/dart/pub/testdata/podspec.lock

@@ -0,0 +1,25 @@
+# Generated by pub
+# See https://dart.dev/tools/pub/glossary#lockfile
+packages:
+  crypto:
+    dependency: "direct main"
+    description:
+      name: crypto
+      url: "https://pub.flutter-io.cn"
+    source: hosted
+    version: "3.0.2"
+  flutter_test:
+    dependency: "direct dev"
+    description: flutter
+    source: sdk
+    version: "0.0.0"
+  uuid:
+    dependency: transitive
+    description:
+      name: uuid
+      url: "https://pub.flutter-io.cn"
+    source: hosted
+    version: "3.0.6"
+sdks:
+  dart: ">=2.18.0 <3.0.0"
+  flutter: ">=3.3.0"

cmd/diagnose.go

@@ -14,6 +14,7 @@ import (
 	parser_io "github.com/aquasecurity/go-dep-parser/pkg/io"
 	"github.com/aquasecurity/go-dep-parser/pkg/types"
 	"github.com/fatih/color"
+	dart "github.com/kyoshidajp/dep-doctor/cmd/dart/pub"
 	"github.com/kyoshidajp/dep-doctor/cmd/github"
 	"github.com/kyoshidajp/dep-doctor/cmd/golang"
 	"github.com/kyoshidajp/dep-doctor/cmd/nodejs"
@@ -216,6 +217,7 @@ var doctors = Doctors{
 	"yarn":      nodejs.NewYarnDoctor(),
 	"pip":       python.NewPipDoctor(),
 	"pipenv":    python.NewPipenvDoctor(),
+	"pub":       dart.NewPubDoctor(),
 	"npm":       nodejs.NewNPMDoctor(),
 	"composer":  php.NewComposerDoctor(),
 	"golang":    golang.NewGolangDoctor(),

cmd/golang/proxy_golang.go

@@ -38,7 +38,7 @@ func (g *ProxyGolang) fetchURLFromRegistry(client http.Client) (string, error) {
 
 	defer resp.Body.Close()
 	if resp.StatusCode < 200 || 299 < resp.StatusCode {
-		m := fmt.Sprintf("Got status code: %d from %s", resp.StatusCode, PROXY_GOLANG_REGISTRY_API)
+		m := fmt.Sprintf("Got status code: %d from %s", resp.StatusCode, url)
 		return "", errors.New(m)
 	}
 

cmd/nodejs/nodejs.go

@@ -37,7 +37,7 @@ func (n *Nodejs) fetchURLFromRegistry(client http.Client) (string, error) {
 
 	defer resp.Body.Close()
 	if resp.StatusCode < 200 || 299 < resp.StatusCode {
-		m := fmt.Sprintf("Got status code: %d from %s", resp.StatusCode, NODEJS_REGISTRY_API)
+		m := fmt.Sprintf("Got status code: %d from %s", resp.StatusCode, url)
 		return "", errors.New(m)
 	}
 

cmd/php/packagist.go

@@ -39,7 +39,7 @@ func (p *Packagist) fetchURLFromRegistry(client http.Client) (string, error) {
 
 	defer resp.Body.Close()
 	if resp.StatusCode < 200 || 299 < resp.StatusCode {
-		m := fmt.Sprintf("Got status code: %d from %s", resp.StatusCode, PACKAGIST_REGISTRY_API)
+		m := fmt.Sprintf("Got status code: %d from %s", resp.StatusCode, url)
 		return "", errors.New(m)
 	}
 

cmd/python/pypi.go

@@ -40,7 +40,7 @@ func (p *Pypi) fetchURLFromRegistry(client http.Client) (string, error) {
 
 	defer resp.Body.Close()
 	if resp.StatusCode < 200 || 299 < resp.StatusCode {
-		m := fmt.Sprintf("Got status code: %d from %s", resp.StatusCode, PYPI_REGISTRY_API)
+		m := fmt.Sprintf("Got status code: %d from %s", resp.StatusCode, url)
 		return "", errors.New(m)
 	}
 

cmd/ruby/ruby_gems.go

@@ -35,7 +35,7 @@ func (g *RubyGems) fetchURLFromRegistry(client http.Client) (string, error) {
 
 	defer resp.Body.Close()
 	if resp.StatusCode < 200 || 299 < resp.StatusCode {
-		m := fmt.Sprintf("Got status code: %d from %s", resp.StatusCode, RUBY_GEMS_REGISTRY_API)
+		m := fmt.Sprintf("Got status code: %d from %s", resp.StatusCode, url)
 		return "", errors.New(m)
 	}