import type { ShellThreat } from "./shell-threats.js";
export type PackageEcosystem = "npm" | "PyPI";
export interface PackageRef {
    ecosystem: PackageEcosystem;
    name: string;
}
export interface PackageCheckOptions {
    fetch?: typeof fetch;
    signal?: AbortSignal;
}
/** Packages named by install commands in `command`. Local paths/URLs are skipped. */
export declare function parsePackageInstalls(command: string): PackageRef[];
/** Optimal-string-alignment Damerau-Levenshtein distance. */
export declare function damerauLevenshtein(a: string, b: string): number;
/** Typosquat warnings (local) and known-malware blocks (OSV, fail-open). */
export declare function checkPackageInstall(command: string, options?: PackageCheckOptions): Promise<ShellThreat[]>;
/** Test hook: forget cached OSV answers. */
export declare function clearPackageThreatCache(): void;