/**
 * Dependency Vulnerability Scanner
 *
 * Scans package dependencies for known vulnerabilities using npm audit.
 *
 * Monorepo-aware: discovers all independently auditable package directories
 * (declared workspaces UNION undeclared sub-projects with a lockfile) via
 * `discoverPackageDirs`, runs `npm audit --json` per package, and aggregates
 * findings. A per-package audit failure emits a loud "did-not-run —
 * coverage INCOMPLETE" info finding rather than failing the whole scanner.
 *
 * @module scanners/dependencies
 */
import type { ScannerResult } from "./types.js";
/**
 * Run npm audit across all independently auditable package directories and
 * aggregate findings.
 *
 * Monorepo-aware: uses `discoverPackageDirs` (declared workspaces UNION
 * undeclared sub-projects with a lockfile) so nested packages like `apps/web`
 * are audited even when they are NOT declared in root `workspaces`.
 *
 * Dedup key: `pkgRelDir:ruleId` — the same advisory per package is reported
 * once even if multiple sub-dependencies transitively trigger it.
 *
 * Returns `success: true` if at least one package was audited successfully.
 * Per-package errors emit a loud info finding and are otherwise non-fatal.
 */
export declare function runDependencyAudit(projectPath: string): Promise<ScannerResult>;
/**
 * Check if npm is available
 */
export declare function checkNpmAvailable(): Promise<{
    available: boolean;
    version?: string;
    error?: string;
}>;
//# sourceMappingURL=dependencies.d.ts.map