feat(scanner): implement VulnerabilitiesExtractor

.changeset/soft-buttons-bet.md

@@ -0,0 +1,5 @@
+---
+"@nodesecure/scanner": minor
+---
+
+Add a new Extraction probe for vulnerabilities

workspaces/scanner/src/extractors/probes/VulnerabilitiesExtractor.class.ts

@@ -0,0 +1,35 @@
+// Import Third-party Dependencies
+import type { StandardVulnerability } from "@nodesecure/vulnera";
+
+// Import Internal Dependencies
+import type {
+  PackumentProbeExtractor
+} from "../payload.js";
+import type { Dependency } from "../../types.js";
+
+export type VulnerabilitiesExtractorResult = {
+  vulnerabilities: StandardVulnerability[];
+};
+
+export class VulnerabilitiesExtractor implements PackumentProbeExtractor<VulnerabilitiesExtractorResult> {
+  level = "packument" as const;
+
+  #vulnerabilities: StandardVulnerability[] = [];
+
+  next(
+    _: string,
+    dependency: Dependency
+  ) {
+    const { vulnerabilities = [] } = dependency;
+
+    this.#vulnerabilities.push(
+      ...vulnerabilities
+    );
+  }
+
+  done() {
+    return {
+      vulnerabilities: this.#vulnerabilities
+    };
+  }
+}

workspaces/scanner/src/extractors/probes/index.ts

@@ -2,3 +2,4 @@ export * from "./SizeExtractor.class.js";
 export * from "./LicensesExtractor.class.js";
 export * from "./ContactExtractor.class.js";
 export * from "./WarningsExtractor.class.js";
+export * from "./VulnerabilitiesExtractor.class.js";

workspaces/scanner/test/extractors/payload.spec.ts

@@ -172,6 +172,37 @@ describe("Extractors.Probes", () => {
     });
   });
 
+  describe("VulnerabilitiesExtractor", () => {
+    it("should extract strnum warnings", () => {
+      const fakePayload: any = {
+        id: "random-id",
+        scannerVersion: "1.0.0",
+        dependencies: {
+          A: {
+            vulnerabilities: ["foo"]
+          },
+          B: {
+            vulnerabilities: ["bar"]
+          }
+        }
+      };
+
+      const extractor = new Extractors.Payload(
+        fakePayload,
+        [
+          new Extractors.Probes.VulnerabilitiesExtractor()
+        ]
+      );
+
+      const {
+        vulnerabilities
+      } = extractor.extractAndMerge();
+
+      assert.strictEqual(vulnerabilities.length, 2);
+      assert.deepEqual(vulnerabilities, ["foo", "bar"]);
+    });
+  });
+
   it("should extract data with multiple extractors in once", () => {
     const extractor = new Extractors.Payload(
       expressNodesecurePayload,