feat(dependencies): add project dependencies model and inspections #316

Introduce `AutoDevProjectDependenciesModel` to handle project dependencies and integrate `VulnerableLibrariesLocalInspection` for dependency checks. Additionally, update the XML configuration to include the new model.

Author: phodal

exts/ext-dependencies/src/233/main/kotlin/cc/unitmesh/dependencies/AutoDevDependenciesCheck.kt

@@ -3,13 +3,17 @@ package cc.unitmesh.dependencies
 import cc.unitmesh.devti.AutoDevNotifications
 import cc.unitmesh.devti.provider.BuildSystemProvider
 import cc.unitmesh.devti.sketch.lint.SketchCodeInspection
+import com.intellij.codeInspection.InspectionManager
+import com.intellij.javascript.nodejs.packageJson.NodeInstalledPackageFinder
 import com.intellij.lang.annotation.HighlightSeverity
 import com.intellij.openapi.actionSystem.ActionUpdateThread
 import com.intellij.openapi.actionSystem.AnAction
 import com.intellij.openapi.actionSystem.AnActionEvent
 import com.intellij.openapi.actionSystem.PlatformDataKeys
 import com.intellij.openapi.fileEditor.FileDocumentManager
 import com.intellij.packageChecker.api.BuildFileProvider
+import com.intellij.packageChecker.inspection.VulnerableLibrariesLocalInspection
+import com.intellij.packageChecker.model.impl.ProjectDependenciesModelImpl
 import com.intellij.psi.PsiManager
 import org.jetbrains.security.`package`.Package
 import org.jetbrains.security.`package`.PackageType
@@ -47,6 +51,12 @@ class AutoDevDependenciesCheck : AnAction("Check dependencies has Issues") {
             Package(PackageType.fromString(it.type), it.namespace, it.name, it.version, it.qualifiers, it.subpath)
         }
 
+        val depModel = ProjectDependenciesModelImpl.getInstance(project)
+        val declaredDependencies = depModel.declaredDependencies(psiFile)
+        depModel.refresh(project)
+
+        val mgr = InspectionManager.getInstance(project)
+        val checkFile = VulnerableLibrariesLocalInspection().checkFile(psiFile, mgr, true)
         val runInspections = SketchCodeInspection.runInspections(
             project,
             psiFile,

exts/ext-dependencies/src/233/main/kotlin/cc/unitmesh/dependencies/AutoDevProjectDependenciesModel.kt

@@ -0,0 +1,46 @@
+package cc.unitmesh.dependencies
+
+import cc.unitmesh.devti.provider.BuildSystemProvider
+import cc.unitmesh.devti.util.AutoDevCoroutineScope
+import com.intellij.openapi.module.Module
+import com.intellij.openapi.project.Project
+import com.intellij.packageChecker.api.PackageDeclaration
+import com.intellij.packageChecker.model.Dependency
+import com.intellij.packageChecker.model.LibraryDependency
+import com.intellij.packageChecker.model.impl.MutableModuleModel
+import com.intellij.packageChecker.model.impl.ProjectDependenciesModelBase
+import com.intellij.psi.PsiFile
+import org.jetbrains.security.`package`.Package
+import org.jetbrains.security.`package`.PackageType
+
+class AutoDevProjectDependenciesModel(val project: Project) : ProjectDependenciesModelBase<MutableModuleModel>(
+    AutoDevCoroutineScope.scope(project).coroutineContext
+) {
+    override fun copyModule(
+        module: MutableModuleModel,
+        newDependencies: Iterable<Dependency>
+    ): MutableModuleModel = module.withDependencies(newDependencies)
+
+    override fun getAllModules(): Iterable<MutableModuleModel> = listOf()
+
+    override fun declaredDependencies(module: Module): List<PackageDeclaration> = listOf()
+
+    override fun declaredDependencies(psiFile: PsiFile): List<PackageDeclaration> {
+        return BuildSystemProvider.EP_NAME.extensionList.map {
+            it.collectDependencies(project, psiFile)
+        }.flatten().map {
+            val pkg =
+                Package(PackageType.fromString(it.type), it.namespace, it.name, it.version, it.qualifiers, it.subpath)
+            PackageDeclaration(pkg)
+        }
+    }
+
+    override fun libraryDependencies(module: Module): List<LibraryDependency> = listOf()
+
+    override fun supports(module: Module): Boolean = true
+
+    override fun supports(project: Project): Boolean = true
+
+    override fun supports(psiFile: PsiFile): Boolean = true
+
+}

exts/ext-dependencies/src/233/main/resources/cc.unitmesh.dependencies.xml

@@ -13,6 +13,10 @@
         </action>
     </actions>
 
+<!--    <extensions defaultExtensionNs="com.intellij.packageChecker">-->
+<!--        <dependencyModel implementation="cc.unitmesh.dependencies.AutoDevProjectDependenciesModel"/>-->
+<!--    </extensions>-->
+
     <extensions defaultExtensionNs="cc.unitmesh">
         <toolchainFunctionProvider implementation="cc.unitmesh.dependencies.DependenciesFunctionProvider"/>
     </extensions>