// SPDX-License-Identifier: LicenseRef-ConusAI-Template-1.0
// The types of scripts/sbom.mjs, for the tests that read its output.

export interface Component {
  type: string
  "bom-ref": string
  group?: string
  name: string
  version: string
  purl: string
  licenses: Array<{
    expression?: string
    license?: { id?: string; name?: string; text?: { contentType: string; content: string } }
  }>
  properties?: Array<{ name: string; value: string }>
  externalReferences?: Array<{ type: string; url: string }>
}

export interface Bom {
  bomFormat: string
  specVersion: string
  version: number
  metadata?: { component?: { type: string; name: string; version: string } }
  components: Component[]
}

export function npmComponents(root: string): Component[]
export function dpkgComponents(statusFile: string, docRoot?: string): Component[]
export function sbom(options: {
  root: string
  dpkg?: string
  name?: string
  version?: string
  nodeVersion?: string
}): Bom