申请加固时第三方 SDK 清单为何关键：识别初始化、反射、自校验、Native 库与隐私边界

#!/usr/bin/env python3
import sys
import json
import re

def parse_lockfile(file_path):
    try:
        with open(file_path, 'r', encoding='utf-8') as f:
            lines = f.readlines()
    except FileNotFoundError:
        print(f'Error: Lockfile not found at {file_path}', file=sys.stderr)
        sys.exit(1)
    except IOError as e:
        print(f'Error: Unable to read file {file_path}: {e}', file=sys.stderr)
        sys.exit(1)

    pattern = re.compile(r'^([A-Za-z0-9.\-_]+):([A-Za-z0-9.\-_]+):([^\s]+)')
    modules = []
    
    for line in lines:
        stripped_line = line.strip()
        if not stripped_line or stripped_line.startswith('#'):
            continue
        
        match = pattern.match(stripped_line)
        if match:
            is_transitive = line.startswith('    ') or line.startswith('\t')
            modules.append({
                'groupId': match.group(1),
                'artifactId': match.group(2),
                'version': match.group(3),
                'source': 'transitive' if is_transitive else 'direct'
            })
    
    if not modules:
        print('Error: No dependency entries found in lockfile', file=sys.stderr)
        sys.exit(2)
    
    return modules

if __name__ == '__main__':
    if len(sys.argv) != 2:
        print('Usage: script.py <lockfile_path>', file=sys.stderr)
        sys.exit(3)
    
    input_file = sys.argv[1]
    dependencies = parse_lockfile(input_file)
    print(json.dumps(dependencies, indent=2, ensure_ascii=False))