# Copyright (c) 2026 MergeGuide, Inc. All rights reserved.
# SPDX-License-Identifier: Proprietary
"""Dependency vulnerability scanning module.

This module provides manifest parsing and vulnerability scanning capabilities
for detecting known CVEs in project dependencies via the OSV database.

Supported ecosystems:
- npm (package.json, package-lock.json)
- pip (requirements.txt, Pipfile, pyproject.toml)
- go (go.mod, go.sum)
- cargo (Cargo.toml, Cargo.lock)
- maven (pom.xml)
- gem (Gemfile, Gemfile.lock)
- composer (composer.json, composer.lock)
- nuget (packages.config, *.csproj)
"""

from .manifest_parser import (
    Dependency,
    Ecosystem,
    ManifestParser,
    parse_manifest,
)
from .osv_client import OSVClient, Vulnerability
from .vulnerability_scanner import ScanResult, VulnerabilityScanner

__all__ = [
    "Dependency",
    "Ecosystem",
    "ManifestParser",
    "OSVClient",
    "ScanResult",
    "Vulnerability",
    "VulnerabilityScanner",
    "parse_manifest",
]
