init

Author: CC11001100

.gitignore

@@ -0,0 +1,4 @@
+.idea
+*.exe
+/output/*
+/logs/*

README.md

@@ -0,0 +1,17 @@
+Usage:
+
+```bash
+./class-version-tracker.exe track -g org.apache.dubbo -a dubbo -c org.apache.dubbo.rpc.protocol.DelegateExporterMap -o output
+./class-version-tracker.exe track -g org.apache.dubbo -a dubbo -c org.apache.dubbo.rpc.protocol.AbstractProtocol -o output
+./class-version-tracker.exe track -g org.apache.dubbo -a dubbo -c org.apache.dubbo.rpc.protocol.dubbo.DubboProtocol -o output
+./class-version-tracker.exe track -g org.apache.dubbo -a dubbo -c org.apache.dubbo.common.extension.ExtensionLoader -o output
+
+./class-version-tracker.exe track -g com.alibaba -a dubbo -c com.alibaba.dubbo.rpc.protocol.AbstractProtocol -o output
+./class-version-tracker.exe track -g com.alibaba -a dubbo -c com.alibaba.dubbo.common.extension.ExtensionLoader -o output
+./class-version-tracker.exe track -g com.alibaba -a dubbo -c com.alibaba.dubbo.rpc.protocol.dubbo.DubboProtocol -o output
+```
+
+# TODO
+
+- 支持指定是使用本地mvn配置的镜像仓库还是直接连中央仓库，因为某些镜像仓库有点坑，会有那种版本空洞，冷不丁给你来一下 
+

cmd/root.go

@@ -0,0 +1,37 @@
+package cmd
+
+import (
+	"fmt"
+	"github.com/fatih/color"
+	cc "github.com/ivanpirog/coloredcobra"
+	"github.com/spf13/cobra"
+	"os"
+)
+
+var rootCmd = &cobra.Command{
+	Use:   "class-version-tracker",
+	Short: "",
+	Long:  ``,
+	Run: func(cmd *cobra.Command, args []string) {
+		_ = cmd.Help()
+	},
+}
+
+func Execute() {
+
+	cc.Init(&cc.Config{
+		RootCmd:  rootCmd,
+		Headings: cc.HiCyan + cc.Bold + cc.Underline,
+		Commands: cc.HiYellow + cc.Bold,
+		Example:  cc.Italic,
+		ExecName: cc.Bold,
+		Flags:    cc.Bold,
+	})
+	// 官方文档没提，但是似乎不加这一句会乱码...
+	rootCmd.SetOut(color.Output)
+
+	if err := rootCmd.Execute(); err != nil {
+		_, _ = fmt.Fprintln(os.Stderr, err)
+		os.Exit(1)
+	}
+}

cmd/track.go

@@ -0,0 +1,82 @@
+package cmd
+
+import (
+	"encoding/json"
+	"github.com/java-sec/class-version-tracker/pkg/domain"
+	"github.com/java-sec/class-version-tracker/pkg/track"
+	"github.com/spf13/cobra"
+	"os"
+	"path/filepath"
+	"strings"
+)
+
+var (
+
+	// 要追踪的组ID
+	groupId string
+
+	// 要追踪的文档ID
+	artifactId string
+
+	// 要追踪的类
+	class string
+
+	// 结果的输出位置
+	output string
+)
+
+func init() {
+
+	trackCmd.Flags().StringVarP(&groupId, "groupId", "g", "", "Group ID for track")
+	trackCmd.Flags().StringVarP(&artifactId, "artifactId", "a", "", "Artifact ID for track")
+	trackCmd.Flags().StringVarP(&class, "class", "c", "", "class for track, example: org.springframework.web.servlet.mvc.method.RequestMappingInfo")
+	trackCmd.Flags().StringVarP(&output, "output", "o", "", "result output directory, default current directory")
+
+	rootCmd.AddCommand(trackCmd)
+}
+
+var trackCmd = &cobra.Command{
+	Use:   "track",
+	Short: "track for class",
+	Long:  ``,
+	RunE: func(cmd *cobra.Command, args []string) error {
+		report, err := track.Track(cmd.Context(), groupId, artifactId, class)
+		if err != nil {
+			return err
+		}
+		return saveReport(output, report)
+	},
+}
+
+// 把报告保存到给定的文件夹
+func saveReport(directory string, report *domain.Report) error {
+
+	// 确保输出目录存在
+	classDumpDirectory := filepath.Join(directory, strings.ReplaceAll(report.GroupId, ".", "."), report.ArtifactId, report.Class)
+	err := os.MkdirAll(classDumpDirectory, os.ModePerm)
+	if err != nil {
+		return err
+	}
+
+	// 把报告导出一份JSON格式的
+	marshal, err := json.Marshal(report)
+	if err != nil {
+		return err
+	}
+	reportPath := filepath.Join(classDumpDirectory, "report.json")
+	err = os.WriteFile(reportPath, marshal, 0644)
+	if err != nil {
+		return err
+	}
+
+	// 把每一组的类导出
+	for _, group := range report.Groups {
+		classFileName := filepath.Join(classDumpDirectory, group.Versions[0]+".class")
+		err := os.WriteFile(classFileName, group.Bytes, 0644)
+		if err != nil {
+			return err
+		}
+	}
+
+	return nil
+}

cmd/version.go

@@ -0,0 +1,21 @@
+package cmd
+
+import (
+	"github.com/fatih/color"
+	"github.com/spf13/cobra"
+)
+
+const Version = "v0.0.1"
+
+func init() {
+	rootCmd.AddCommand(versionCmd)
+}
+
+var versionCmd = &cobra.Command{
+	Use:   "version",
+	Short: "Show the version number of class version tracker",
+	Long:  ``,
+	Run: func(cmd *cobra.Command, args []string) {
+		color.HiGreen("version %s", Version)
+	},
+}

config.yaml

@@ -0,0 +1,67 @@
+module github.com/java-sec/class-version-tracker
+
+go 1.19
+
+require (
+	github.com/compression-algorithm-research-lab/go-unzip v0.0.0-20230602073303-1217108c498f
+	github.com/fatih/color v1.15.0
+	github.com/ivanpirog/coloredcobra v1.0.1
+	github.com/scagogogo/maven-crawler v0.0.0-20230619030815-61998034bc24
+	github.com/scagogogo/mvn-sdk v0.0.0-20230620031453-2d99a2094f36
+	github.com/spf13/cobra v1.7.0
+	github.com/stretchr/testify v1.8.4
+)
+
+require (
+	github.com/PuerkitoBio/goquery v1.8.1 // indirect
+	github.com/aliyun/aliyun-oss-go-sdk v2.2.7+incompatible // indirect
+	github.com/andybalholm/cascadia v1.3.2 // indirect
+	github.com/basgys/goxml2json v1.1.0 // indirect
+	github.com/crawler-go-go-go/go-requests v0.0.0-20230525030146-0f17843cff2c // indirect
+	github.com/davecgh/go-spew v1.1.1 // indirect
+	github.com/emirpasic/gods v1.18.1 // indirect
+	github.com/fsnotify/fsnotify v1.6.0 // indirect
+	github.com/go-redis/redis v6.15.9+incompatible // indirect
+	github.com/go-sql-driver/mysql v1.7.1 // indirect
+	github.com/golang-infrastructure/go-compare-anything v0.0.2-0.20230108071748-35501d697475 // indirect
+	github.com/golang-infrastructure/go-gtypes v0.0.1 // indirect
+	github.com/golang-infrastructure/go-how-run v0.0.0-20230107060855-56163adc7748 // indirect
+	github.com/golang-infrastructure/go-pointer v0.0.4 // indirect
+	github.com/golang-infrastructure/go-project-root-directory v0.0.1 // indirect
+	github.com/golang-infrastructure/go-reflect-utils v0.0.0-20221130143747-965ef2eb09c3 // indirect
+	github.com/golang-infrastructure/go-stack v0.0.2 // indirect
+	github.com/golang-infrastructure/go-tuple v0.0.0-20221215155811-4ed54fe7d579 // indirect
+	github.com/google/licensecheck v0.3.1 // indirect
+	github.com/hashicorp/hcl v1.0.0 // indirect
+	github.com/inconshreveable/mousetrap v1.1.0 // indirect
+	github.com/jmoiron/sqlx v1.3.5 // indirect
+	github.com/lestrrat-go/strftime v1.0.6 // indirect
+	github.com/magiconair/properties v1.8.7 // indirect
+	github.com/mattn/go-colorable v0.1.13 // indirect
+	github.com/mattn/go-isatty v0.0.19 // indirect
+	github.com/mitchellh/go-homedir v1.1.0 // indirect
+	github.com/mitchellh/mapstructure v1.5.0 // indirect
+	github.com/nxadm/tail v1.4.8 // indirect
+	github.com/pelletier/go-toml/v2 v2.0.8 // indirect
+	github.com/pkg/errors v0.9.1 // indirect
+	github.com/pmezard/go-difflib v1.0.0 // indirect
+	github.com/scagogogo/maven-pom-xml-render v0.0.0-20230522042741-86dd7c7d0e1f // indirect
+	github.com/scagogogo/versions v0.0.0-20230616073442-f7ffd332b5e8 // indirect
+	github.com/spf13/afero v1.9.5 // indirect
+	github.com/spf13/cast v1.5.1 // indirect
+	github.com/spf13/jwalterweatherman v1.1.0 // indirect
+	github.com/spf13/pflag v1.0.5 // indirect
+	github.com/spf13/viper v1.16.0 // indirect
+	github.com/subosito/gotenv v1.4.2 // indirect
+	github.com/valyala/fastjson v1.6.4 // indirect
+	go.uber.org/atomic v1.11.0 // indirect
+	go.uber.org/multierr v1.11.0 // indirect
+	go.uber.org/zap v1.24.0 // indirect
+	golang.org/x/net v0.11.0 // indirect
+	golang.org/x/sys v0.9.0 // indirect
+	golang.org/x/text v0.10.0 // indirect
+	golang.org/x/time v0.3.0 // indirect
+	gopkg.in/ini.v1 v1.67.0 // indirect
+	gopkg.in/yaml.v2 v2.4.0 // indirect
+	gopkg.in/yaml.v3 v3.0.1 // indirect
+)