/**
 * NuGet/.NET supply-chain scanner.
 *
 * Detects supply-chain risks in packages.lock.json, *.csproj, and
 * nuget.config: packages matching curated threat-intel IOCs (nuget:
 * prefixed package entries, ids compared case-insensitively) and plain
 * http package feeds. XML is scanned with hand-rolled regexes - no XML
 * library is used.
 */
import type { Finding } from "./types.js";
import { type FeedIOC } from "./threat-intel.js";
/**
 * Check if a file is a NuGet-related file.
 */
export declare function isNuGetFile(filename: string): boolean;
/**
 * Check if a directory contains NuGet-related files (scanner entry gate).
 */
export declare function hasNuGetFiles(dir: string): boolean;
/**
 * Scan NuGet files in a directory.
 */
export declare function scanNuGetFiles(dir: string): Finding[];
/**
 * Scan packages.lock.json content (dependencies tree with resolved versions).
 */
export declare function scanPackagesLockContent(content: string, relativePath: string, feed?: FeedIOC[]): Finding[];
/**
 * Scan *.csproj content (PackageReference / RestoreSources).
 */
export declare function scanCsprojContent(content: string, relativePath: string, feed?: FeedIOC[]): Finding[];
/**
 * Scan nuget.config content for plain-http package feeds.
 */
export declare function scanNuGetConfigContent(content: string, relativePath: string): Finding[];
//# sourceMappingURL=nuget-scanner.d.ts.map