/**
 * Dependency Vulnerability Scanner
 * Cross-references package lock files (package-lock.json, yarn.lock, pnpm-lock.yaml,
 * Cargo.lock, Pipfile.lock, go.sum) against known vulnerability patterns.
 * Checks for outdated packages, known-vulnerable version ranges, and security advisories.
 * Integrates with npm audit for real-time vulnerability detection.
 */
export interface VulnDependency {
    name: string;
    version: string;
    severity: 'critical' | 'high' | 'medium' | 'low' | 'info';
    reason: string;
    file: string;
    ecosystem: 'npm' | 'cargo' | 'pip' | 'go' | 'unknown';
    recommendation?: string;
}
export interface DepVulnResult {
    vulnerabilities: VulnDependency[];
    totalDeps: number;
    outdatedCount: number;
    ecosystems: string[];
    lockFiles: string[];
    summary: {
        critical: number;
        high: number;
        medium: number;
        low: number;
        info: number;
    };
}
/**
 * Main vulnerability scan function.
 * @param cwd - The working directory to scan
 * @returns Vulnerability scan results with findings and summary
 */
export declare function scanDependencyVulns(cwd: string): Promise<DepVulnResult>;
//# sourceMappingURL=dep-vuln.d.ts.map