AikidoSec-safe-chain/packages/safe-chain/src/scanning/packageNameVariants.js

import { ECOSYSTEM_PY } from "../config/settings.js";

/**
 * Normalises a Python package name per PEP 503: lowercase and collapse any
 * run of `.`, `_`, or `-` into a single hyphen.
 * @param {string} packageName
 * @returns {string}
 */
export function normalizePipPackageName(packageName) {
  return packageName.toLowerCase().replace(/[._-]+/g, "-");
}

/**
 * @param {string} packageName
 * @param {string} ecosystem
 * @returns {string[]}
 */
export function getEquivalentPackageNames(packageName, ecosystem) {
  if (ecosystem !== ECOSYSTEM_PY) {
    return [packageName];
  }

  const pythonSeparatorPattern = /[._-]/g;
  const hyphenName = packageName.replaceAll(pythonSeparatorPattern, "-");
  const underscoreName = packageName.replaceAll(pythonSeparatorPattern, "_");
  const dotName = packageName.replaceAll(pythonSeparatorPattern, ".");

  return [...new Set([packageName, hyphenName, underscoreName, dotName])];
}