- Define deterministic, offline-friendly scope for the Deno analyzer to move readiness from “status mismatch” to planned execution.
- Enumerate fixtures and evidence needed to mark Amber→Green once implemented.
deno.json / deno.jsonc (config and import maps).deno.lock (v2) with integrity hashes.- Source tree for
import/export graph; node_modules/ when npm: specifiers are used (npm compatibility mode). - Optional: cache dir (
~/.cache/deno) when present in extracted images.
- Inventory of modules:
pkg:deno/<specifier>@<version> for remote modules (normalize to URL without fragment).pkg:npm/<name>@<version> for npm: dependencies with lock hash.pkg:file/<path> for local modules (relative POSIX paths).
- Dependency edges:
- From importer to imported specifier with resolved path/URL.
- Include type (remote/local/npm), integrity (sha256 from lock), and media type when available.
- Metadata:
- Deno version (from lock/config if present).
- Import map path and hash.
- NPM compatibility flag + resolved registry scope when npm used.
- Never fetch network resources; rely solely on
deno.lock + on-disk files. - Normalize paths to POSIX; stable sorting (source path, then target).
- Hashes: prefer lock integrity; otherwise SHA-256 over file bytes for local modules.
- Remote-only project with
deno.lock (http imports) and import map. - Mixed project using
npm: specifiers with node_modules/ present. - Local-only project (relative imports) without lockfile → expect finding + no inventory.
- Image/extracted cache with populated
~/.cache/deno to verify offline reuse.
- Implement parser to ingest
deno.lock v2 and import map; add graph builder over source files. - Add fixtures under
src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Deno.Tests/Fixtures/** with goldens; keep hashes stable. - Update readiness checkpoints once fixtures land and TRX/binlogs captured.