Moved from 'js-yaml' to 'yaml', because of parsing errors

Author: malice00

bin/cdxgen.js

@@ -6,7 +6,7 @@ import { basename, dirname, join, resolve } from "node:path";
 import process from "node:process";
 import { findUpSync } from "find-up";
 import globalAgent from "global-agent";
-import { load as _load } from "js-yaml";
+import { parse as _load } from "yaml";
 import jws from "jws";
 import { createBom, submitBom } from "../lib/cli/index.js";
 import {

bin/evinse.js

@@ -3,7 +3,7 @@
 import fs from "node:fs";
 import process from "node:process";
 import { findUpSync } from "find-up";
-import { load as _load } from "js-yaml";
+import { parse as _load } from "yaml";
 // Evinse (Evinse Verification Is Nearly SBOM Evidence)
 import yargs from "yargs";
 import { hideBin } from "yargs/helpers";

lib/cli/index.js

@@ -16,7 +16,7 @@ import { platform as _platform, arch, homedir } from "node:os";
 import { basename, dirname, join, relative, resolve, sep } from "node:path";
 import process from "node:process";
 import got from "got";
-import { load as loadYaml } from "js-yaml";
+import { parse as loadYaml } from "yaml";
 import { PackageURL } from "packageurl-js";
 import { gte, lte } from "semver";
 import { parse } from "ssri";

lib/helpers/utils.js

@@ -35,7 +35,7 @@ import { parseEDNString } from "edn-data";
 import { globSync } from "glob";
 import got from "got";
 import iconv from "iconv-lite";
-import { load as _load } from "js-yaml";
+import { parse as _load } from "yaml";
 import StreamZip from "node-stream-zip";
 import { PackageURL } from "packageurl-js";
 import propertiesReader from "properties-reader";

lib/helpers/utils.test.js

@@ -2,7 +2,7 @@ import { Buffer } from "node:buffer";
 import { readFileSync } from "node:fs";
 import path from "node:path";
 import { afterAll, beforeAll, describe, expect, test } from "@jest/globals";
-import { load as loadYaml } from "js-yaml";
+import { parse as loadYaml } from "yaml";
 import { parse } from "ssri";
 import {
   buildObjectForCocoaPod,

package.json

@@ -93,7 +93,6 @@
     "global-agent": "^3.0.0",
     "got": "^14.4.7",
     "iconv-lite": "^0.6.3",
-    "js-yaml": "^4.1.0",
     "jws": "^4.0.0",
     "node-stream-zip": "^1.15.0",
     "packageurl-js": "1.0.2",
@@ -106,6 +105,7 @@
     "uuid": "^11.0.2",
     "validate-iri": "^1.0.1",
     "xml-js": "^1.6.11",
+    "yaml": "^2.8.0",
     "yargs": "^17.7.2",
     "yoctocolors": "^2.1.1"
   },