export interface TransitiveCveResult {
    packageName: string;
    totalVulns: number;
    critical: number;
    high: number;
    moderate: number;
    low: number;
    vulnDetails: NpmAuditVuln[];
}
export interface NpmAuditVuln {
    id: string;
    severity: 'critical' | 'high' | 'moderate' | 'low';
    title: string;
    url: string;
    packageName: string;
    range: string;
    isDirect: boolean;
}
/**
 * Runs `npm audit --json` against the installed package in a temp workspace.
 * This resolves the FULL transitive dependency tree — not just top-level deps.
 */
export declare function scanTransitiveCves(packageName: string, version: string): Promise<TransitiveCveResult>;
//# sourceMappingURL=transitive-cve-scanner.d.ts.map