export declare const BRACES_SECURITY_OVERRIDE = "https://github.com/micromatch/braces/archive/d44b9b1ee12e7804d4232d5a47a4a0c61d2fbefe.tar.gz";
export declare const NODE_FORGE_SECURITY_OVERRIDE = "https://github.com/matthewscottconroy/forge/archive/db05494352dd3c9a5a07c5270333dcc78866cad2.tar.gz";
export declare const EXPO_COMMONS_IO_PLUGIN = "./plugins/with-lattice-commons-io";
export declare function generatedDependencySecurityManifest(stack: 'nextjs' | 'expo'): {
    schemaVersion: number;
    generatedBy: string;
    stack: "nextjs" | "expo";
    auditPolicy: string;
    advisories: ({
        readonly package: "braces";
        readonly registryVersion: "3.0.3";
        readonly advisory: "GHSA-vfj7-8cjw-p6xm";
        readonly status: "unpublished-reviewed-backport";
        readonly source: {
            readonly repository: "https://github.com/micromatch/braces";
            readonly pullRequest: "https://github.com/micromatch/braces/pull/87";
            readonly commit: "d44b9b1ee12e7804d4232d5a47a4a0c61d2fbefe";
            readonly archive: "https://github.com/micromatch/braces/archive/d44b9b1ee12e7804d4232d5a47a4a0c61d2fbefe.tar.gz";
            readonly archiveSha256: "a9f118990f62667ed553678ed5a6d0fcd4a2f862d97002f6840890dbb328b551";
        };
        readonly license: {
            readonly spdx: "MIT";
            readonly source: "https://github.com/micromatch/braces/blob/d44b9b1ee12e7804d4232d5a47a4a0c61d2fbefe/LICENSE";
        };
        readonly productionFiles: {
            readonly 'lib/compile.js': "b651f7715e6db8942ce61d3394357b4d81c8ece88240aa31a458ea1165edd195";
            readonly 'lib/constants.js': "f9fb688959232eee3e6ad7906a5b0e3234815db49ee857ef86983d65b917dc7c";
            readonly 'lib/expand.js': "7ea3e14c2b2b256ef244fd3d83b8fcaa20aa2232b4e6d768c3bb6ab567f66cf5";
            readonly 'lib/parse.js': "b1bf766fba6a62035f78ecbda8a5fd94e921aa1c1ec0cdf3f467e9c836abed55";
            readonly 'lib/stringify.js': "49dc2d8bafa74f34715a18a845bcb82ce66caaf3bab4cf117998e06b1f9a50a9";
        };
    } | {
        readonly package: "node-forge";
        readonly registryVersion: "1.4.0";
        readonly candidateVersion: "1.4.1-0";
        readonly advisory: "GHSA-86w9-cpqp-85rv";
        readonly cve: "CVE-2026-85393";
        readonly status: "unpublished-reviewed-backport";
        readonly source: {
            readonly repository: "https://github.com/digitalbazaar/forge";
            readonly pullRequest: "https://github.com/digitalbazaar/forge/pull/1159";
            readonly commit: "db05494352dd3c9a5a07c5270333dcc78866cad2";
            readonly archive: "https://github.com/matthewscottconroy/forge/archive/db05494352dd3c9a5a07c5270333dcc78866cad2.tar.gz";
            readonly archiveSha256: "d08f40bfda39415d608a044b01d3d617dc44026b7cde10febc29cfbe90193b1f";
            readonly rsaSha256: "c7b72e7ef41f4fc0e5228dce3e37851e9ca064c789365d5e392c25d1c5f6e710";
        };
        readonly license: {
            readonly spdx: "BSD-3-Clause OR GPL-2.0-only";
            readonly source: "https://github.com/matthewscottconroy/forge/blob/db05494352dd3c9a5a07c5270333dcc78866cad2/LICENSE";
        };
    } | {
        readonly package: "commons-io:commons-io";
        readonly upstreamVersion: "1.4";
        readonly selectedVersion: "2.14.0";
        readonly advisory: "GHSA-gwrp-pvrq-jmwv";
        readonly additionalAdvisory: "CVE-2024-47554";
        readonly status: "patched-release-native-qualification-required";
        readonly source: {
            readonly repository: "https://github.com/apache/commons-io";
            readonly artifact: "https://repo1.maven.org/maven2/commons-io/commons-io/2.14.0/commons-io-2.14.0.jar";
            readonly security: "https://commons.apache.org/proper/commons-io/security.html";
        };
        readonly license: {
            readonly spdx: "Apache-2.0";
            readonly source: "https://github.com/apache/commons-io/blob/rel/commons-io-2.14.0/LICENSE.txt";
        };
        readonly guard: {
            readonly expoFileSystemVersion: "58.0.9";
            readonly expectedRequestedVersion: "1.4";
            readonly androidApiQualification: readonly [24, 25];
        };
    })[];
};
export declare const EXPO_COMMONS_IO_PLUGIN_SOURCE = "const { withProjectBuildGradle } = require(\"@expo/config-plugins\");\n\nconst EXPECTED_EXPO_FILE_SYSTEM_VERSION = \"58.0.9\";\nconst EXPECTED_REQUESTED_COMMONS_IO_VERSION = \"1.4\";\nconst SELECTED_COMMONS_IO_VERSION = \"2.14.0\";\nconst MARKER = \"// LATTICE_COMMONS_IO_2_14_0_GUARD\";\n\nconst resolutionRule = `${MARKER}\nallprojects {\n  configurations.configureEach {\n    resolutionStrategy.eachDependency { details ->\n      if (details.requested.group == \"commons-io\" && details.requested.name == \"commons-io\" && details.requested.version == \"${EXPECTED_REQUESTED_COMMONS_IO_VERSION}\") {\n        details.useVersion(\"${SELECTED_COMMONS_IO_VERSION}\")\n        details.because(\"GHSA-gwrp-pvrq-jmwv and CVE-2024-47554\")\n      }\n    }\n  }\n}`;\n\nmodule.exports = function withLatticeCommonsIo(config) {\n  const actualVersion = require(\"expo-file-system/package.json\").version;\n  if (actualVersion !== EXPECTED_EXPO_FILE_SYSTEM_VERSION) {\n    throw new Error(\n      `Lattice Commons IO guard requires expo-file-system ${EXPECTED_EXPO_FILE_SYSTEM_VERSION}; found ${actualVersion}. Review the native dependency before changing this guard.`,\n    );\n  }\n\n  return withProjectBuildGradle(config, (projectConfig) => {\n    if (projectConfig.modResults.language !== \"groovy\") {\n      throw new Error(\"Lattice Commons IO guard supports only the generated Groovy project build.gradle.\");\n    }\n\n    const contents = projectConfig.modResults.contents;\n    if (!contents.includes(MARKER)) {\n      projectConfig.modResults.contents = `${contents.trimEnd()}\n\n${resolutionRule}\n`;\n    }\n    return projectConfig;\n  });\n};\n";
//# sourceMappingURL=generated-dependency-security.d.ts.map