Support for deno in devenv (#1827)

prabhu · web-flow · commit 8533c7faaad5 · 2025-05-31T01:00:01.000+01:00
* Support for deno in devenv

Signed-off-by: Prabhu Subramanian &lt;prabhu@appthreat.com&gt;

Use @appthreat/sqlite3 in deno

Signed-off-by: Prabhu Subramanian &lt;prabhu@appthreat.com&gt;

* Use @appthreat/sqlite3 in deno

Signed-off-by: Prabhu Subramanian &lt;prabhu@appthreat.com&gt;

* Use @appthreat/sqlite3 in deno

Signed-off-by: Prabhu Subramanian &lt;prabhu@appthreat.com&gt;

* lint fix

Signed-off-by: Prabhu Subramanian &lt;prabhu@appthreat.com&gt;

* Update sqlite3 to 6.0.3 to get pre-built binaries for napi 10

Signed-off-by: Prabhu Subramanian &lt;prabhu@appthreat.com&gt;

* Force build from source on certain old images

Signed-off-by: Prabhu Subramanian &lt;prabhu@appthreat.com&gt;

---------

Signed-off-by: Prabhu Subramanian &lt;prabhu@appthreat.com&gt;
diff --git a/.devcontainer.json b/.devcontainer.json
@@ -1,7 +1,9 @@
 {
   "customizations": {
     "vscode": {
-      "extensions": ["mkhl.direnv"]
+      "extensions": [
+        "mkhl.direnv"
+      ]
     }
   },
   "image": "ghcr.io/cachix/devenv/devcontainer:latest",
diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
@@ -81,21 +81,15 @@ jobs:
               deno compile --allow-read --allow-env --allow-run --allow-sys=uid,systemMemoryInfo,gid,osRelease,homedir --allow-write --allow-net --include=./data --include=./package.json --output cdxgenx.exe bin/cdxgen.js
               .\cdxgenx.exe --help
               (Get-FileHash .\cdxgenx.exe).hash | Out-File -FilePath .\cdxgenx.exe.sha256
-              deno compile --allow-read --allow-env --allow-run --allow-sys=uid,systemMemoryInfo,gid,osRelease,homedir --allow-write --allow-net --node-modules-dir=auto --allow-ffi --allow-scripts=npm:sqlite3@5.1.7 --include=./data --include=./package.json --include=node_modules/.deno/sqlite3@5.1.7/node_modules/sqlite3/build/Release --output evinse.exe bin/evinse.js
+              deno compile --allow-read --allow-env --allow-run --allow-sys=uid,systemMemoryInfo,gid,osRelease,homedir --allow-write --allow-net --node-modules-dir=auto --allow-ffi --allow-scripts=npm:@appthreat/sqlite3@6.0.3 --include=./data --include=./package.json --include=node_modules/sqlite3/build/Release --output evinse.exe bin/evinse.js
               .\evinse.exe --help
               (Get-FileHash .\evinse.exe).hash | Out-File -FilePath .\evinse.exe.sha256
             artifact: cdxgenx.exe
           - os: macos
             build: |
-              rm -rf node_modules
-              deno compile --allow-read --allow-env --allow-run --allow-sys=uid,systemMemoryInfo,gid,homedir --allow-write --allow-net --include=./data --include=./package.json --target x86_64-apple-darwin --output cdxgenx-darwin-amd64 bin/cdxgen.js
-              ./cdxgenx-darwin-amd64 --help
-              shasum -a 256 cdxgenx-darwin-amd64 > cdxgenx-darwin-amd64.sha256
-              rm -rf node_modules
               deno compile --allow-read --allow-env --allow-run --allow-sys=uid,systemMemoryInfo,gid,homedir --allow-write --allow-net --include=./data --include=./package.json --target aarch64-apple-darwin --output cdxgenx-darwin-arm64 bin/cdxgen.js
               shasum -a 256 cdxgenx-darwin-arm64 > cdxgenx-darwin-arm64.sha256
-              rm -rf node_modules
-              deno compile --allow-read --allow-env --allow-run --allow-sys=uid,systemMemoryInfo,gid,homedir --allow-write --allow-net --node-modules-dir=auto --allow-ffi --allow-scripts=npm:sqlite3@5.1.7 --include=./data --include=./package.json --include=node_modules/.deno/sqlite3@5.1.7/node_modules/sqlite3/build/Release --target aarch64-apple-darwin --output evinse-darwin-arm64 bin/evinse.js
+              deno compile --allow-read --allow-env --allow-run --allow-sys=uid,systemMemoryInfo,gid,homedir --allow-write --allow-net --node-modules-dir=auto --allow-ffi --allow-scripts=npm:@appthreat/sqlite3@6.0.3 --include=./data --include=./package.json --include=node_modules/sqlite3/build/Release --target aarch64-apple-darwin --output evinse-darwin-arm64 bin/evinse.js
               shasum -a 256 evinse-darwin-arm64 > evinse-darwin-arm64.sha256
               ./evinse-darwin-arm64 --help
             artifact: cdxgenx-darwin-arm64
@@ -105,17 +99,25 @@ jobs:
               shasum -a 256 cdxgenx > cdxgenx.sha256
               chmod + cdxgenx
               ./cdxgenx --help
-              deno compile --allow-read --allow-env --allow-run --allow-sys=uid,systemMemoryInfo,gid,homedir --allow-write --allow-net --node-modules-dir=auto --allow-ffi --allow-scripts=npm:sqlite3@5.1.7 --include=./data --include=./package.json --include=node_modules/.deno/sqlite3@5.1.7/node_modules/sqlite3/build/Release --output evinse bin/evinse.js
+              deno compile --allow-read --allow-env --allow-run --allow-sys=uid,systemMemoryInfo,gid,homedir --allow-write --allow-net --node-modules-dir=auto --allow-ffi --allow-scripts=npm:@appthreat/sqlite3@6.0.3 --include=./data --include=./package.json --include=node_modules/sqlite3/build/Release --output evinse bin/evinse.js
               shasum -a 256 evinse > evinse.sha256
               chmod + evinse
               ./evinse --help
             artifact: cdxgenx
     runs-on: ${{ matrix.os }}-latest
     steps:
       - uses: actions/checkout@v4
+      - name: Use Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '24.x'
       - uses: denoland/setup-deno@v2
         with:
           deno-version: v${{ matrix.deno_version }}
+      - name: pnpm install, build and test
+        run: |
+          npm install -g pnpm@latest
+          pnpm install --config.strict-dep-builds=true --package-import-method copy --frozen-lockfile
       - name: deno compile
         run: |
           deno info bin/cdxgen.js
diff --git a/README.md b/README.md
@@ -534,7 +534,7 @@ Use `pnpm add -g` command to quickly test the main branch.
 ```shell
 corepack pnpm bin -g
 corepack pnpm setup
-corepack pnpm add -g --allow-build sqlite3 https://github.com/CycloneDX/cdxgen
+corepack pnpm add -g --allow-build @appthreat/sqlite3 https://github.com/CycloneDX/cdxgen
 cdxgen --help
 ```
 
diff --git a/biome.json b/biome.json
@@ -50,7 +50,7 @@
   },
   "formatter": {
     "enabled": true,
-    "ignore": ["types/**", "contrib/**"],
+    "ignore": ["types/**", "contrib/**", ".devcontainer.json"],
     "indentStyle": "space",
     "indentWidth": 2
   },
diff --git a/ci/Dockerfile-deno b/ci/Dockerfile-deno
@@ -88,7 +88,7 @@ RUN set -e; \
     && python${PYTHON_VERSION} -m pip install --no-cache-dir --upgrade setuptools==77.0.3 wheel pip virtualenv \
     && python${PYTHON_VERSION} -m pip install --no-cache-dir --upgrade pipenv poetry blint atom-tools uv --target /opt/pypi \
     && curl -fsSL https://deno.land/x/install/install.sh | sh \
-    && deno install -g --node-modules-dir=auto --allow-scripts=npm:sqlite3@5.1.7 --allow-read --allow-env --allow-run --allow-sys=uid,systemMemoryInfo,gid,homedir --allow-write --allow-net -n cdxgen "npm:@cyclonedx/cdxgen/cdxgen" \
+    && deno install -g --node-modules-dir=auto --allow-scripts=npm:@appthreat/sqlite3@6.0.3 --allow-read --allow-env --allow-run --allow-sys=uid,systemMemoryInfo,gid,homedir --allow-write --allow-net -n cdxgen "npm:@cyclonedx/cdxgen/cdxgen" \
     && deno install -g --allow-read --allow-env --allow-run --allow-sys=uid,systemMemoryInfo,gid,homedir --allow-write -n atom "npm:@appthreat/atom/atom" \
     && deno install -g --allow-read --allow-env --allow-run --allow-sys=uid,systemMemoryInfo,gid,homedir --allow-write -n astgen "npm:@appthreat/atom/astgen" \
     && deno install -g --allow-read --allow-env --allow-run --allow-sys=uid,systemMemoryInfo,gid,homedir --allow-write -n phpastgen "npm:@appthreat/atom/phpastgen" \
diff --git a/ci/base-images/debian/Dockerfile.dotnet6 b/ci/base-images/debian/Dockerfile.dotnet6
@@ -8,7 +8,8 @@ ENV DOTNET_GENERATE_ASPNET_CERTIFICATE=false \
     NUGET_XMLDOC_MODE=skip \
     DOTNET_RUNNING_IN_CONTAINER=true \
     DOTNET_CLI_TELEMETRY_OPTOUT=1 \
-    NVM_DIR="/root/.nvm"
+    NVM_DIR="/root/.nvm" \
+    npm_config_build_from_source=true
 ENV PATH=${PATH}:/root/.nvm/versions/node/v${NODE_VERSION}/bin:/usr/local/bin:/root/.local/bin:
 
 COPY ci/base-images/debian/install.sh /tmp/
diff --git a/ci/base-images/debian/Dockerfile.dotnet8 b/ci/base-images/debian/Dockerfile.dotnet8
@@ -8,7 +8,8 @@ ENV DOTNET_GENERATE_ASPNET_CERTIFICATE=false \
     NUGET_XMLDOC_MODE=skip \
     DOTNET_RUNNING_IN_CONTAINER=true \
     DOTNET_CLI_TELEMETRY_OPTOUT=1 \
-    NVM_DIR="/root/.nvm"
+    NVM_DIR="/root/.nvm" \
+    npm_config_build_from_source=true
 ENV PATH=${PATH}:/root/.nvm/versions/node/v${NODE_VERSION}/bin:/usr/local/bin:/root/.local/bin:
 
 COPY ci/base-images/debian/install.sh /tmp/
diff --git a/ci/base-images/debian/Dockerfile.ruby18 b/ci/base-images/debian/Dockerfile.ruby18
@@ -15,7 +15,8 @@ ENV JAVA_VERSION=$JAVA_VERSION \
     BUNDLER_VERSION=$BUNDLER_VERSION \
     RAKE_VERSION=$RAKE_VERSION \
     RMAGICK_VERSION=$RMAGICK_VERSION \
-    BUNDLE_SILENCE_ROOT_WARNING=true
+    BUNDLE_SILENCE_ROOT_WARNING=true \
+    npm_config_build_from_source=true
 ENV PATH=/usr/local/rvm/gems/ruby-${RUBY_VERSION}/bin:/usr/local/rvm/gems/ruby-${RUBY_VERSION}@global/bin:/usr/local/rvm/rubies/ruby-${RUBY_VERSION}/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/rvm/bin:${PATH}:/usr/local/bin:/root/.local/bin:/root/.rbenv/bin:
 
 COPY ci/base-images/debian/install.sh /tmp/
diff --git a/ci/base-images/debian/Dockerfile.ruby26 b/ci/base-images/debian/Dockerfile.ruby26
@@ -9,7 +9,8 @@ ENV JAVA_VERSION=$JAVA_VERSION \
     ATOM_RUBY_VERSION=$ATOM_RUBY_VERSION \
     BUNDLE_SILENCE_ROOT_WARNING=true \
     JAVA_TOOL_OPTIONS="-Dfile.encoding=UTF-8" \
-    NVM_DIR="/root/.nvm"
+    NVM_DIR="/root/.nvm" \
+    npm_config_build_from_source=true
 ENV PATH=/root/.nvm/versions/node/v${NODE_VERSION}/bin:${PATH}:/usr/local/bin:/root/.local/bin:/root/.rbenv/bin:
 
 COPY ci/base-images/debian/install.sh /tmp/
diff --git a/ci/base-images/opensuse/Dockerfile.python310 b/ci/base-images/opensuse/Dockerfile.python310
@@ -8,6 +8,7 @@ ENV CC=gcc \
     LANGUAGE=en_US.UTF-8 \
     GOPATH=/opt/app-root/go \
     npm_config_python=/usr/bin/python3.10 \
+    npm_config_build_from_source=true \
     PYTHONPATH=/opt/pypi:${PYTHONPATH}
 
 ENV PATH=${PATH}:/usr/local/bin:/opt/pypi/bin:${GOPATH}/bin:/usr/local/go/bin:
diff --git a/ci/base-images/opensuse/Dockerfile.python39 b/ci/base-images/opensuse/Dockerfile.python39
@@ -5,6 +5,7 @@ ENV CC=gcc \
     LANG=en_US.UTF-8 \
     LANGUAGE=en_US.UTF-8 \
     npm_config_python=/usr/bin/python3.9 \
+    npm_config_build_from_source=true \
     PYTHONPATH=/opt/pypi:${PYTHONPATH}
 
 ENV PATH=${PATH}:/usr/local/bin:/opt/pypi/bin:
diff --git a/ci/base-images/sle/Dockerfile.dotnet6 b/ci/base-images/sle/Dockerfile.dotnet6
@@ -6,7 +6,8 @@ ENV DOTNET_GENERATE_ASPNET_CERTIFICATE=false \
     NUGET_XMLDOC_MODE=skip \
     DOTNET_RUNNING_IN_CONTAINER=true \
     DOTNET_CLI_TELEMETRY_OPTOUT=1 \
-    npm_config_python=/usr/bin/python3.11
+    npm_config_python=/usr/bin/python3.11 \
+    npm_config_build_from_source=true
 ENV PATH=${PATH}:/usr/local/bin:
 
 RUN zypper refresh && zypper --non-interactive update && zypper --non-interactive install -l --no-recommends git-core nodejs20 npm20 \
diff --git a/ci/base-images/sle/Dockerfile.dotnet7 b/ci/base-images/sle/Dockerfile.dotnet7
@@ -6,7 +6,8 @@ ENV DOTNET_GENERATE_ASPNET_CERTIFICATE=false \
     NUGET_XMLDOC_MODE=skip \
     DOTNET_RUNNING_IN_CONTAINER=true \
     DOTNET_CLI_TELEMETRY_OPTOUT=1 \
-    npm_config_python=/usr/bin/python3.11
+    npm_config_python=/usr/bin/python3.11 \
+    npm_config_build_from_source=true
 ENV PATH=${PATH}:/usr/local/bin:
 
 RUN zypper refresh && zypper --non-interactive update && zypper --non-interactive install -l --no-recommends git-core nodejs20 npm20 python311 python311-pip wget zip unzip make gawk curl \
diff --git a/ci/base-images/sle/Dockerfile.java11 b/ci/base-images/sle/Dockerfile.java11
@@ -15,7 +15,8 @@ ENV SBT_VERSION=$SBT_VERSION \
     LANG=en_US.UTF-8 \
     LANGUAGE=en_US.UTF-8 \
     JAVA_OPTIONS="-Dhttps.protocols=TLSv1.1,TLSv1.2" \
-    npm_config_python=/usr/bin/python3.11
+    npm_config_python=/usr/bin/python3.11 \
+    npm_config_build_from_source=true
 ENV PATH=${PATH}:${MAVEN_HOME}/bin:${GRADLE_HOME}/bin:${SBT_HOME}/bin:
 
 RUN set -e; \
diff --git a/ci/base-images/sle/Dockerfile.java17 b/ci/base-images/sle/Dockerfile.java17
@@ -14,7 +14,8 @@ ENV SBT_VERSION=$SBT_VERSION \
     LC_ALL=en_US.UTF-8 \
     LANG=en_US.UTF-8 \
     LANGUAGE=en_US.UTF-8 \
-    npm_config_python=/usr/bin/python3.11
+    npm_config_python=/usr/bin/python3.11 \
+    npm_config_build_from_source=true
 ENV PATH=${PATH}:${MAVEN_HOME}/bin:${GRADLE_HOME}/bin:${SBT_HOME}/bin:
 
 RUN set -e; \
diff --git a/ci/base-images/sle/Dockerfile.java17-slim b/ci/base-images/sle/Dockerfile.java17-slim
@@ -14,7 +14,8 @@ ENV SBT_VERSION=$SBT_VERSION \
     LC_ALL=en_US.UTF-8 \
     LANG=en_US.UTF-8 \
     LANGUAGE=en_US.UTF-8 \
-    npm_config_python=/usr/bin/python3.11
+    npm_config_python=/usr/bin/python3.11 \
+    npm_config_build_from_source=true
 ENV PATH=${PATH}:${MAVEN_HOME}/bin:${GRADLE_HOME}/bin:${SBT_HOME}/bin:
 
 RUN set -e; \
diff --git a/ci/base-images/sle/Dockerfile.node20 b/ci/base-images/sle/Dockerfile.node20
@@ -6,7 +6,8 @@ ENV NVM_DIR="/root/.nvm" \
     LC_ALL=en_US.UTF-8 \
     LANG=en_US.UTF-8 \
     LANGUAGE=en_US.UTF-8 \
-    npm_config_python=/usr/bin/python3.11
+    npm_config_python=/usr/bin/python3.11 \
+    npm_config_build_from_source=true
 ENV PATH=${PATH}:/usr/local/bin:
 RUN set -e; \
     ARCH_NAME="$(rpm --eval '%{_arch}')"; \
diff --git a/ci/base-images/sle/Dockerfile.python311 b/ci/base-images/sle/Dockerfile.python311
@@ -16,7 +16,8 @@ ENV JAVA_VERSION=$JAVA_VERSION \
     LANGUAGE=en_US.UTF-8 \
     NVM_DIR="/root/.nvm" \
     PYTHONPATH=/opt/pypi:${PYTHONPATH} \
-    npm_config_python=/usr/bin/python3.11
+    npm_config_python=/usr/bin/python3.11 \
+    npm_config_build_from_source=true
 ENV PATH=${PATH}:/root/.nvm/versions/node/v${NODE_VERSION}/bin:${JAVA_HOME}/bin:${MAVEN_HOME}/bin:/usr/local/bin:/opt/pypi/bin:${GOPATH}/bin:/usr/local/go/bin:
 RUN set -e; \
     ARCH_NAME="$(rpm --eval '%{_arch}')"; \
diff --git a/ci/base-images/sle/Dockerfile.python36 b/ci/base-images/sle/Dockerfile.python36
@@ -13,7 +13,8 @@ ENV JAVA_VERSION=$JAVA_VERSION \
     LANG=en_US.UTF-8 \
     LANGUAGE=en_US.UTF-8 \
     NVM_DIR="/root/.nvm" \
-    npm_config_python=/usr/bin/python3.6
+    npm_config_python=/usr/bin/python3.6 \
+    npm_config_build_from_source=true
 ENV PATH=${PATH}:/root/.nvm/versions/node/v${NODE_VERSION}/bin:${JAVA_HOME}/bin:${MAVEN_HOME}/bin:/usr/local/bin:
 RUN set -e; \
     ARCH_NAME="$(rpm --eval '%{_arch}')"; \
diff --git a/ci/base-images/sle/Dockerfile.ruby25 b/ci/base-images/sle/Dockerfile.ruby25
@@ -11,7 +11,8 @@ ENV LC_ALL=en_US.UTF-8 \
     JAVA_OPTIONS="-Dhttps.protocols=TLSv1.1,TLSv1.2" \
     RUBY_BUILD_BUILD_PATH="/tmp/rbenv" \
     RUBY_BUILD_HTTP_CLIENT=curl \
-    npm_config_python=/usr/bin/python3.11
+    npm_config_python=/usr/bin/python3.11 \
+    npm_config_build_from_source=true
 
 ENV PATH=${PATH}:/usr/local/bin:/root/.local/bin:/root/.rbenv/bin:
 
diff --git a/ci/base-images/temurin/Dockerfile.java21 b/ci/base-images/temurin/Dockerfile.java21
@@ -27,7 +27,8 @@ ENV SBT_VERSION=$SBT_VERSION \
     PYTHONPATH=/opt/pypi:${PYTHONPATH} \
     CDXGEN_IN_CONTAINER=true \
     SDKMAN_DIR=/root/.sdkman \
-    SDKMAN_CANDIDATES_DIR=/root/.sdkman/candidates
+    SDKMAN_CANDIDATES_DIR=/root/.sdkman/candidates \
+    npm_config_build_from_source=true
 ENV PATH=${PATH}:/root/.nvm/versions/node/v${NODE_VERSION}/bin:${MAVEN_HOME}/bin:${GRADLE_HOME}/bin:${SCALA_HOME}/bin:${SBT_HOME}/bin:/usr/local/bin/:/root/.local/bin:/opt/pypi/bin:
 
 RUN set -e; \
diff --git a/ci/base-images/temurin/Dockerfile.java8 b/ci/base-images/temurin/Dockerfile.java8
@@ -24,7 +24,8 @@ ENV SBT_VERSION=$SBT_VERSION \
     PYTHONPATH=/opt/pypi:${PYTHONPATH} \
     CDXGEN_IN_CONTAINER=true \
     SDKMAN_DIR=/root/.sdkman \
-    SDKMAN_CANDIDATES_DIR=/root/.sdkman/candidates
+    SDKMAN_CANDIDATES_DIR=/root/.sdkman/candidates \
+    npm_config_build_from_source=true
 ENV PATH=${PATH}:/root/.nvm/versions/node/v${NODE_VERSION}/bin:${MAVEN_HOME}/bin:${GRADLE_HOME}/bin:${SBT_HOME}/bin:/usr/local/bin/:/root/.local/bin:/opt/pypi/bin:
 
 RUN set -e; \
diff --git a/contrib/rebuild-sqlite3.sh b/contrib/rebuild-sqlite3.sh
diff --git a/deno.json b/deno.json
@@ -14,7 +14,16 @@
     "ci/",
     "tools_config/",
     ".github/",
-    ".*"
+    ".*",
+    "devenv*",
+    "jest.config.js",
+    "docker-compose.yml",
+    "ADVANCED.md",
+    "pnpm-lock.yaml",
+    "biome.json",
+    "plugins",
+    "tsconfig.json",
+    "index.cjs"
   ],
   "compile": {
     "include": ["data", "package.json"]
@@ -82,7 +91,7 @@
     "jest": "npm:jest@^29.7.0",
     "@jest/globals": "npm:@jest/globals@^29.7.0",
     "sequelize": "npm:sequelize@^6.37.7",
-    "sqlite3": "npm:sqlite3@^5.1.7",
+    "sqlite3": "npm:@appthreat/sqlite3@^6.0.3",
     "body-parser": "npm:body-parser@^2.2.0",
     "compression": "npm:compression@^1.7.5",
     "connect": "npm:connect@^3.7.0",
diff --git a/devenv.lock b/devenv.lock
@@ -3,10 +3,10 @@
     "devenv": {
       "locked": {
         "dir": "src/modules",
-        "lastModified": 1748273445,
+        "lastModified": 1748361913,
         "owner": "cachix",
         "repo": "devenv",
-        "rev": "668a50d8b7bdb19a0131f53c9f6c25c9071e1ffb",
+        "rev": "b510085f1ca92779782d1e3de631b2292a30edb2",
         "type": "github"
       },
       "original": {
@@ -177,10 +177,10 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1748248602,
+        "lastModified": 1748506378,
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "ad331efcaf680eb1c838cb339472399ea7b3cdab",
+        "rev": "3866ad91cfc172f08a6839def503d8fc2923c603",
         "type": "github"
       },
       "original": {
diff --git a/devenv.nix b/devenv.nix
@@ -5,7 +5,7 @@ in
   # Language-specific topions
   options = {
     profile = lib.mkOption {
-      type = lib.types.enum [ "ruby" "php" "c" "cplusplus" "go" "swift" "scala" "sbt" "mill" "rust" "python" "poetry" "uv" "dotnet" "android" "flutter" "reactNative" "basic" ];
+      type = lib.types.enum [ "deno" "ruby" "php" "c" "cplusplus" "go" "swift" "scala" "sbt" "mill" "rust" "python" "poetry" "uv" "dotnet" "android" "flutter" "reactNative" "basic" ];
       default = "basic";
       description = "Development profile to use";
     };
@@ -34,6 +34,9 @@ in
           enable = true;
           package = pkgs-unstable.nodejs_24;
         };
+        deno = lib.mkIf (lib.elem config.profile [ "deno" ] == true) {
+          enable = true;
+        };
         java = lib.mkIf (lib.elem config.profile [ "android" "flutter" "reactNative" ] == false) {
           enable = true;
           jdk.package = pkgs.jdk23_headless;
@@ -89,8 +92,13 @@ in
       difftastic.enable = true;
       # Setup the latest cdxgen using pnpm
       enterShell = ''
-        set -e
-        pnpm install --config.strict-dep-builds=true --package-import-method copy --frozen-lockfile
+        if command -v node >/dev/null 2>&1; then
+            rm -rf .devenv/state/deno
+            pnpm install --config.strict-dep-builds=true --package-import-method copy --frozen-lockfile
+        elif command -v deno >/dev/null 2>&1; then
+            rm -rf node_modules
+            deno install --allow-scripts=npm:@biomejs/biome@1.9.4,npm:@appthreat/sqlite3@6.0.3
+        fi
       '';
 
       # Tasks
@@ -105,5 +113,37 @@ in
         pnpm outdated
         '';
       };
+
+      tasks."deno:prepare" = {
+        exec = ''
+        rm -rf node_modules
+        deno install --allow-scripts=npm:@biomejs/biome@1.9.4,npm:@appthreat/sqlite3@6.0.3
+        deno info bin/cdxgen.js
+        deno info bin/evinse.js
+        '';
+      };
+
+      tasks."deno:checks" = {
+        exec = ''
+        deno info bin/cdxgen.js
+        deno info bin/evinse.js
+        '';
+      };
+
+      tasks."deno:compile:macos" = {
+        exec = ''
+        rm -f cdxgenx-darwin-arm64
+        deno compile --allow-read --allow-env --allow-run --allow-sys=uid,systemMemoryInfo,gid,homedir --allow-write --allow-net --include=./data --include=./package.json --target aarch64-apple-darwin --output cdxgenx-darwin-arm64 bin/cdxgen.js
+        ./cdxgenx-darwin-arm64 --help
+        '';
+      };
+
+      tasks."deno:compile:linux" = {
+        exec = ''
+        rm -f cdxgenx
+        deno compile --allow-read --allow-env --allow-run --allow-sys=uid,systemMemoryInfo,gid,homedir --allow-write --allow-net --include=./data --include=./package.json --output cdxgenx bin/cdxgen.js
+        ./cdxgenx --help
+        '';
+      };
   };
 }
diff --git a/docs/GETTING_STARTED.md b/docs/GETTING_STARTED.md
diff --git a/jsr.json b/jsr.json
diff --git a/package.json b/package.json
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml

Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,9 @@`
`1`	`1`	`{`
`2`	`2`	`"customizations": {`
`3`	`3`	`"vscode": {`
`4`		`- "extensions": ["mkhl.direnv"]`
	`4`	`+ "extensions": [`
	`5`	`+ "mkhl.direnv"`
	`6`	`+ ]`
`5`	`7`	`}`
`6`	`8`	`},`
`7`	`9`	`"image": "ghcr.io/cachix/devenv/devcontainer:latest",`