Initial

packages/safe-chain/src/scanning/packageNameVariants.js

@@ -1,5 +1,15 @@
 import { ECOSYSTEM_PY } from "../config/settings.js";
 
+/**
+ * Normalises a Python package name per PEP 503: lowercase and collapse any
+ * run of `.`, `_`, or `-` into a single hyphen.
+ * @param {string} packageName
+ * @returns {string}
+ */
+export function normalizePipPackageName(packageName) {
+  return packageName.toLowerCase().replace(/[._-]+/g, "-");
+}
+
 /**
  * @param {string} packageName
  * @param {string} ecosystem