refactor: typing for return value of getBuildtimeInfo

package.json

@@ -54,7 +54,7 @@
     }
   ],
   "dependencies": {
-    "@cyclonedx/cyclonedx-library": "^8.4.0",
+    "@cyclonedx/cyclonedx-library": "portal:../cyclonedx-javascript-library",
     "@yarnpkg/cli": "^4",
     "@yarnpkg/core": "^4",
     "@yarnpkg/fslib": "^3",

src/_buildtimeInfo.ts

@@ -17,11 +17,14 @@ SPDX-License-Identifier: Apache-2.0
 Copyright (c) OWASP Foundation. All Rights Reserved.
 */
 
+import type { NodePackageJson } from "@cyclonedx/cyclonedx-library/Types";
+
+interface BuildtimeInfo {
+  self: NodePackageJson
+  [key: string]: NodePackageJson
+}
+
 /* eslint-disable-next-line @typescript-eslint/explicit-function-return-type -- dynamic import helper */
-export async function getBuildtimeInfo () {
-  /*
-  The included file is generated by `../tools/gather-buildtime-info.cjs`.
-  Its content is pseudo-dynamic and so is the return type of this function.
-  */
-  return (await import('./__buildtimeInfo.json')).default
+export async function getBuildtimeInfo (): Promise<BuildtimeInfo> {
+  return (await import('./__buildtimeInfo.json')).default satisfies BuildtimeInfo
 }