@ash-technologia/fathom 0.1.0

package/dist/analyzers/project/index.js

@@ -0,0 +1,95 @@
+import { createFindingId } from '../../core/findings.js';
+import { createTimer } from '../../utils/timing.js';
+export class ProjectAnalyzer {
+    id = 'project';
+    name = 'Project';
+    category = 'project';
+    description = 'Detects ecosystems, frameworks, package managers, and repository size.';
+    async analyze(context) {
+        const elapsed = createTimer();
+        const findings = [];
+        const warnings = [];
+        const sourceFiles = context.files.filter((f) => f.isSource);
+        const testFiles = context.files.filter((f) => f.isTest);
+        const totalSizeMb = +(context.metadata.totalSizeBytes / (1024 * 1024)).toFixed(2);
+        const metrics = {
+            totalFiles: context.files.length,
+            sourceFiles: sourceFiles.length,
+            testFiles: testFiles.length,
+            totalSizeMb,
+            languages: context.languages.map((l) => l.name),
+            frameworks: context.frameworks.map((f) => f.name),
+            packageManagers: context.packageManagers.map((pm) => pm.name),
+            projectType: context.projectType.type,
+        };
+        // PROJ-001: Ecosystem (informational)
+        if (context.languages.length === 0) {
+            findings.push({
+                id: createFindingId('PROJ-001', undefined, undefined),
+                ruleId: 'PROJ-001',
+                category: 'project',
+                severity: 'info',
+                title: 'No recognized ecosystem detected',
+                description: 'Fathom could not detect a primary programming ecosystem.',
+                recommendation: 'Verify that source files are present and not excluded.',
+                confidence: 0.8,
+                autoFixable: false,
+            });
+        }
+        // PROJ-002: Frameworks detected
+        if (context.frameworks.length > 0) {
+            const fwNames = context.frameworks.map((f) => f.name).join(', ');
+            findings.push({
+                id: createFindingId('PROJ-002', undefined, undefined),
+                ruleId: 'PROJ-002',
+                category: 'project',
+                severity: 'info',
+                title: `Frameworks detected: ${fwNames}`,
+                description: `Detected frameworks/libraries: ${fwNames}.`,
+                recommendation: 'Keep framework dependencies up to date with security releases.',
+                confidence: 0.95,
+                autoFixable: false,
+            });
+        }
+        // PROJ-003: Package managers detected
+        if (context.packageManagers.length > 0) {
+            const pmNames = context.packageManagers.map((p) => p.name).join(', ');
+            findings.push({
+                id: createFindingId('PROJ-003', undefined, undefined),
+                ruleId: 'PROJ-003',
+                category: 'project',
+                severity: 'info',
+                title: `Package manager detected: ${pmNames}`,
+                description: `Detected package manager(s): ${pmNames}.`,
+                recommendation: 'Ensure consistent package manager usage across your team.',
+                confidence: 0.95,
+                autoFixable: false,
+            });
+        }
+        // PROJ-004: Large repository notice
+        if (context.files.length > 10000) {
+            findings.push({
+                id: createFindingId('PROJ-004', undefined, undefined),
+                ruleId: 'PROJ-004',
+                category: 'project',
+                severity: 'info',
+                title: 'Large repository',
+                description: `This repository contains ${context.files.length.toLocaleString()} files (${totalSizeMb} MB). Analysis may be slower.`,
+                recommendation: 'Consider reviewing .fathomignore to exclude generated directories.',
+                confidence: 0.99,
+                autoFixable: false,
+            });
+        }
+        return {
+            analyzerId: this.id,
+            analyzerName: this.name,
+            category: this.category,
+            status: 'success',
+            findings,
+            metrics,
+            durationMs: elapsed(),
+            warnings,
+        };
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/analyzers/project/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/analyzers/project/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,MAAM,OAAO,eAAe;IACjB,EAAE,GAAG,SAAS,CAAC;IACf,IAAI,GAAG,SAAS,CAAC;IACjB,QAAQ,GAAG,SAAkB,CAAC;IAC9B,WAAW,GAAG,wEAAwE,CAAC;IAEhG,KAAK,CAAC,OAAO,CAAC,OAA0B;QACtC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAElF,MAAM,OAAO,GAAY;YACvB,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;YAChC,WAAW,EAAE,WAAW,CAAC,MAAM;YAC/B,SAAS,EAAE,SAAS,CAAC,MAAM;YAC3B,WAAW;YACX,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/C,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACjD,eAAe,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC;YAC7D,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI;SACtC,CAAC;QAEF,sCAAsC;QACtC,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,eAAe,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC;gBACrD,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,kCAAkC;gBACzC,WAAW,EAAE,0DAA0D;gBACvE,cAAc,EAAE,wDAAwD;gBACxE,UAAU,EAAE,GAAG;gBACf,WAAW,EAAE,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QAED,gCAAgC;QAChC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjE,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,eAAe,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC;gBACrD,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,wBAAwB,OAAO,EAAE;gBACxC,WAAW,EAAE,kCAAkC,OAAO,GAAG;gBACzD,cAAc,EAAE,gEAAgE;gBAChF,UAAU,EAAE,IAAI;gBAChB,WAAW,EAAE,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QAED,sCAAsC;QACtC,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtE,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,eAAe,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC;gBACrD,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,6BAA6B,OAAO,EAAE;gBAC7C,WAAW,EAAE,gCAAgC,OAAO,GAAG;gBACvD,cAAc,EAAE,2DAA2D;gBAC3E,UAAU,EAAE,IAAI;gBAChB,WAAW,EAAE,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QAED,oCAAoC;QACpC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,eAAe,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC;gBACrD,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,kBAAkB;gBACzB,WAAW,EAAE,4BAA4B,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,WAAW,WAAW,+BAA+B;gBACnI,cAAc,EAAE,oEAAoE;gBACpF,UAAU,EAAE,IAAI;gBAChB,WAAW,EAAE,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,EAAE;YACnB,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,SAAS;YACjB,QAAQ;YACR,OAAO;YACP,UAAU,EAAE,OAAO,EAAE;YACrB,QAAQ;SACT,CAAC;IACJ,CAAC;CACF"}

package/dist/analyzers/quality/index.d.ts

@@ -0,0 +1,11 @@
+import type { Analyzer } from '../../core/analyzer.js';
+import type { RepositoryContext } from '../../core/context.js';
+import type { AnalyzerResult } from '../../core/result.js';
+export declare class QualityAnalyzer implements Analyzer {
+    readonly id = "quality";
+    readonly name = "Code Quality";
+    readonly category: "quality";
+    readonly description = "Scans source files for maintainability signals: TODOs, debug statements, large files, and empty catch blocks.";
+    analyze(context: RepositoryContext): Promise<AnalyzerResult>;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/analyzers/quality/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/analyzers/quality/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAW,MAAM,sBAAsB,CAAC;AAuCpE,qBAAa,eAAgB,YAAW,QAAQ;IAC9C,QAAQ,CAAC,EAAE,aAAa;IACxB,QAAQ,CAAC,IAAI,kBAAkB;IAC/B,QAAQ,CAAC,QAAQ,EAAG,SAAS,CAAU;IACvC,QAAQ,CAAC,WAAW,mHAC8F;IAE5G,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,cAAc,CAAC;CAmLnE"}

package/dist/analyzers/quality/index.js

@@ -0,0 +1,198 @@
+import { createFindingId } from '../../core/findings.js';
+import { createTimer } from '../../utils/timing.js';
+import { readFileSafe } from '../../utils/filesystem.js';
+import { computeDepth } from '../../utils/paths.js';
+const COMMENT_TODO_PATTERN = /(?:\/\/|#)\s*TODO\b|^\s*(?:\/\*|\*)\s*TODO\b/i;
+const COMMENT_FIXME_PATTERN = /(?:\/\/|#)\s*FIXME\b|^\s*(?:\/\*|\*)\s*FIXME\b/i;
+/** Debug statement patterns for JS/TS */
+const DEBUG_PATTERNS_JS = [
+    /\bconsole\.(log|debug|info|warn|error|trace|dir)\s*\(/,
+    /\bdebugger\b/,
+    /\bdd\s*\(/, // Laravel dd()
+    /\bvar_dump\s*\(/, // PHP
+];
+/** Debug statement patterns for Python only */
+const DEBUG_PATTERNS_PYTHON = [
+    /\bpdb\.set_trace\(\)/,
+    /\bbreakpoint\(\)/,
+    /\bprint\s*\(/, // print() is a debug signal in Python source (not test/script) files
+];
+/** Empty catch block patterns */
+const EMPTY_CATCH_PATTERNS = [
+    // JS/TS: catch (e) {}  or  catch {}
+    /catch\s*\([^)]*\)\s*\{\s*\}/,
+    /catch\s*\{\s*\}/,
+    // Python: except: pass  or  except Exception: pass
+    /except\s*[^:]*:\s*\n\s*pass\s*\n/,
+    // Java: catch (Exception e) {}
+    /catch\s*\([^)]+\)\s*\{\s*\}/,
+];
+const LARGE_FILE_LINE_THRESHOLD = 500;
+const DEEP_NESTING_THRESHOLD = 6;
+export class QualityAnalyzer {
+    id = 'quality';
+    name = 'Code Quality';
+    category = 'quality';
+    description = 'Scans source files for maintainability signals: TODOs, debug statements, large files, and empty catch blocks.';
+    async analyze(context) {
+        const elapsed = createTimer();
+        const findings = [];
+        const warnings = [];
+        let totalTodos = 0;
+        let totalFixmes = 0;
+        let totalDebugStatements = 0;
+        let emptyCatchCount = 0;
+        const largeFiles = [];
+        const sourceFiles = context.files.filter((f) => f.isSource && !f.isTest);
+        for (const file of sourceFiles) {
+            if (file.sizeBytes > 2 * 1024 * 1024) {
+                warnings.push(`Skipped quality scan for oversized file: ${file.relativePath}`);
+                continue;
+            }
+            const content = await readFileSafe(file.absolutePath);
+            if (!content)
+                continue;
+            const lines = content.split('\n');
+            // QUAL-003: Debug statements — language-aware
+            const isPython = file.extension === '.py' || file.extension === '.pyw';
+            const debugPatterns = isPython ? DEBUG_PATTERNS_PYTHON : DEBUG_PATTERNS_JS;
+            for (const line of lines) {
+                // QUAL-001 & QUAL-002: Comment-scoped TODOs and FIXMEs
+                if (COMMENT_TODO_PATTERN.test(line)) {
+                    totalTodos++;
+                }
+                if (COMMENT_FIXME_PATTERN.test(line)) {
+                    totalFixmes++;
+                }
+                // Skip pure comment lines for debug statement scan
+                if (/^\s*(\/\/|#|\/\*)/.test(line))
+                    continue;
+                for (const pattern of debugPatterns) {
+                    if (pattern.test(line)) {
+                        totalDebugStatements++;
+                        break;
+                    }
+                }
+            }
+            // QUAL-004: Empty catch blocks
+            const strippedContent = content
+                .replace(/\/\*[\s\S]*?\*\//g, '')
+                .replace(/\/\/.*/g, '')
+                .replace(/#.*/g, '');
+            for (const pattern of EMPTY_CATCH_PATTERNS) {
+                if (pattern.test(strippedContent)) {
+                    emptyCatchCount++;
+                    findings.push({
+                        id: createFindingId('QUAL-004', file.relativePath),
+                        ruleId: 'QUAL-004',
+                        category: 'quality',
+                        severity: 'medium',
+                        title: `Empty catch block in ${file.relativePath}`,
+                        description: 'An empty catch block silently swallows errors, making debugging difficult.',
+                        recommendation: 'Add error handling or at minimum log the error inside the catch block.',
+                        confidence: 0.75,
+                        location: { file: file.relativePath },
+                        autoFixable: false,
+                    });
+                    break; // One finding per file
+                }
+            }
+            // QUAL-005: Large files
+            if (lines.length > LARGE_FILE_LINE_THRESHOLD) {
+                largeFiles.push(file.relativePath);
+                findings.push({
+                    id: createFindingId('QUAL-005', file.relativePath),
+                    ruleId: 'QUAL-005',
+                    category: 'quality',
+                    severity: 'low',
+                    title: `Large source file: ${file.relativePath}`,
+                    description: `This file has ${lines.length} lines. Large files can be harder to maintain and test.`,
+                    recommendation: 'Consider splitting this into smaller, focused modules.',
+                    confidence: 0.85,
+                    location: { file: file.relativePath },
+                    evidence: `${lines.length} lines`,
+                    autoFixable: false,
+                });
+            }
+        }
+        // QUAL-001/002: Aggregate findings
+        if (totalTodos > 0) {
+            findings.push({
+                id: createFindingId('QUAL-001'),
+                ruleId: 'QUAL-001',
+                category: 'quality',
+                severity: 'low',
+                title: `${totalTodos} TODO comment${totalTodos > 1 ? 's' : ''} found`,
+                description: 'TODO comments indicate unfinished work.',
+                recommendation: 'Review and resolve TODO comments, or convert them to tracked issues.',
+                confidence: 0.99,
+                evidence: `${totalTodos} occurrences`,
+                autoFixable: false,
+            });
+        }
+        if (totalFixmes > 0) {
+            findings.push({
+                id: createFindingId('QUAL-002'),
+                ruleId: 'QUAL-002',
+                category: 'quality',
+                severity: 'low',
+                title: `${totalFixmes} FIXME comment${totalFixmes > 1 ? 's' : ''} found`,
+                description: 'FIXME comments indicate known broken or problematic code.',
+                recommendation: 'Prioritize resolving FIXME comments before shipping.',
+                confidence: 0.99,
+                evidence: `${totalFixmes} occurrences`,
+                autoFixable: false,
+            });
+        }
+        if (totalDebugStatements > 3) {
+            findings.push({
+                id: createFindingId('QUAL-003'),
+                ruleId: 'QUAL-003',
+                category: 'quality',
+                severity: 'low',
+                title: `${totalDebugStatements} debug statements found`,
+                description: 'Debug statements left in production code add noise and can expose sensitive information.',
+                recommendation: 'Remove or replace debug statements with proper logging.',
+                confidence: 0.75,
+                evidence: `${totalDebugStatements} occurrences`,
+                autoFixable: false,
+            });
+        }
+        // QUAL-006: Deep directory nesting
+        const maxDepth = context.files.reduce((max, f) => Math.max(max, computeDepth(f.relativePath)), 0);
+        if (maxDepth >= DEEP_NESTING_THRESHOLD) {
+            findings.push({
+                id: createFindingId('QUAL-006'),
+                ruleId: 'QUAL-006',
+                category: 'quality',
+                severity: 'low',
+                title: `Deep directory nesting detected (depth: ${maxDepth})`,
+                description: 'Very deep directory structures can make navigation and imports harder.',
+                recommendation: 'Consider flattening the directory structure where practical.',
+                confidence: 0.7,
+                evidence: `Maximum depth: ${maxDepth}`,
+                autoFixable: false,
+            });
+        }
+        const metrics = {
+            todoCount: totalTodos,
+            fixmeCount: totalFixmes,
+            debugStatements: totalDebugStatements,
+            emptyCatchBlocks: emptyCatchCount,
+            largeFilesCount: largeFiles.length,
+            maxDirectoryDepth: maxDepth,
+            sourceFilesScanned: sourceFiles.length,
+        };
+        return {
+            analyzerId: this.id,
+            analyzerName: this.name,
+            category: this.category,
+            status: 'success',
+            findings,
+            metrics,
+            durationMs: elapsed(),
+            warnings,
+        };
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/analyzers/quality/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/analyzers/quality/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,MAAM,oBAAoB,GAAG,+CAA+C,CAAC;AAC7E,MAAM,qBAAqB,GAAG,iDAAiD,CAAC;AAEhF,yCAAyC;AACzC,MAAM,iBAAiB,GAAa;IAClC,uDAAuD;IACvD,cAAc;IACd,WAAW,EAAE,eAAe;IAC5B,iBAAiB,EAAE,MAAM;CAC1B,CAAC;AAEF,+CAA+C;AAC/C,MAAM,qBAAqB,GAAa;IACtC,sBAAsB;IACtB,kBAAkB;IAClB,cAAc,EAAE,qEAAqE;CACtF,CAAC;AAEF,iCAAiC;AACjC,MAAM,oBAAoB,GAAa;IACrC,oCAAoC;IACpC,6BAA6B;IAC7B,iBAAiB;IACjB,mDAAmD;IACnD,kCAAkC;IAClC,+BAA+B;IAC/B,6BAA6B;CAC9B,CAAC;AAEF,MAAM,yBAAyB,GAAG,GAAG,CAAC;AACtC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC,MAAM,OAAO,eAAe;IACjB,EAAE,GAAG,SAAS,CAAC;IACf,IAAI,GAAG,cAAc,CAAC;IACtB,QAAQ,GAAG,SAAkB,CAAC;IAC9B,WAAW,GAClB,+GAA+G,CAAC;IAElH,KAAK,CAAC,OAAO,CAAC,OAA0B;QACtC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,oBAAoB,GAAG,CAAC,CAAC;QAC7B,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAEzE,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;gBACrC,QAAQ,CAAC,IAAI,CAAC,4CAA4C,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;gBAC/E,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACtD,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElC,8CAA8C;YAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,KAAK,KAAK,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC;YACvE,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,iBAAiB,CAAC;YAC3E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,uDAAuD;gBACvD,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpC,UAAU,EAAE,CAAC;gBACf,CAAC;gBACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrC,WAAW,EAAE,CAAC;gBAChB,CAAC;gBAED,mDAAmD;gBACnD,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAC7C,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;oBACpC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;wBACvB,oBAAoB,EAAE,CAAC;wBACvB,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YAED,+BAA+B;YAC/B,MAAM,eAAe,GAAG,OAAO;iBAC5B,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;iBAChC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;iBACtB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACvB,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;gBAC3C,IAAI,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;oBAClC,eAAe,EAAE,CAAC;oBAClB,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC;wBAClD,MAAM,EAAE,UAAU;wBAClB,QAAQ,EAAE,SAAS;wBACnB,QAAQ,EAAE,QAAQ;wBAClB,KAAK,EAAE,wBAAwB,IAAI,CAAC,YAAY,EAAE;wBAClD,WAAW,EACT,4EAA4E;wBAC9E,cAAc,EACZ,wEAAwE;wBAC1E,UAAU,EAAE,IAAI;wBAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE;wBACrC,WAAW,EAAE,KAAK;qBACnB,CAAC,CAAC;oBACH,MAAM,CAAC,uBAAuB;gBAChC,CAAC;YACH,CAAC;YAED,wBAAwB;YACxB,IAAI,KAAK,CAAC,MAAM,GAAG,yBAAyB,EAAE,CAAC;gBAC7C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACnC,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC;oBAClD,MAAM,EAAE,UAAU;oBAClB,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,KAAK;oBACf,KAAK,EAAE,sBAAsB,IAAI,CAAC,YAAY,EAAE;oBAChD,WAAW,EAAE,iBAAiB,KAAK,CAAC,MAAM,yDAAyD;oBACnG,cAAc,EAAE,wDAAwD;oBACxE,UAAU,EAAE,IAAI;oBAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE;oBACrC,QAAQ,EAAE,GAAG,KAAK,CAAC,MAAM,QAAQ;oBACjC,WAAW,EAAE,KAAK;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,eAAe,CAAC,UAAU,CAAC;gBAC/B,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,GAAG,UAAU,gBAAgB,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ;gBACrE,WAAW,EAAE,yCAAyC;gBACtD,cAAc,EAAE,sEAAsE;gBACtF,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,GAAG,UAAU,cAAc;gBACrC,WAAW,EAAE,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,eAAe,CAAC,UAAU,CAAC;gBAC/B,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,GAAG,WAAW,iBAAiB,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ;gBACxE,WAAW,EAAE,2DAA2D;gBACxE,cAAc,EAAE,sDAAsD;gBACtE,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,GAAG,WAAW,cAAc;gBACtC,WAAW,EAAE,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,oBAAoB,GAAG,CAAC,EAAE,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,eAAe,CAAC,UAAU,CAAC;gBAC/B,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,GAAG,oBAAoB,yBAAyB;gBACvD,WAAW,EACT,0FAA0F;gBAC5F,cAAc,EAAE,yDAAyD;gBACzE,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,GAAG,oBAAoB,cAAc;gBAC/C,WAAW,EAAE,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QAED,mCAAmC;QACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CACnC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EACvD,CAAC,CACF,CAAC;QACF,IAAI,QAAQ,IAAI,sBAAsB,EAAE,CAAC;YACvC,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,eAAe,CAAC,UAAU,CAAC;gBAC/B,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,2CAA2C,QAAQ,GAAG;gBAC7D,WAAW,EAAE,wEAAwE;gBACrF,cAAc,EAAE,8DAA8D;gBAC9E,UAAU,EAAE,GAAG;gBACf,QAAQ,EAAE,kBAAkB,QAAQ,EAAE;gBACtC,WAAW,EAAE,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAY;YACvB,SAAS,EAAE,UAAU;YACrB,UAAU,EAAE,WAAW;YACvB,eAAe,EAAE,oBAAoB;YACrC,gBAAgB,EAAE,eAAe;YACjC,eAAe,EAAE,UAAU,CAAC,MAAM;YAClC,iBAAiB,EAAE,QAAQ;YAC3B,kBAAkB,EAAE,WAAW,CAAC,MAAM;SACvC,CAAC;QAEF,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,EAAE;YACnB,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,SAAS;YACjB,QAAQ;YACR,OAAO;YACP,UAAU,EAAE,OAAO,EAAE;YACrB,QAAQ;SACT,CAAC;IACJ,CAAC;CACF"}

package/dist/analyzers/security/index.d.ts

@@ -0,0 +1,11 @@
+import type { Analyzer } from '../../core/analyzer.js';
+import type { RepositoryContext } from '../../core/context.js';
+import type { AnalyzerResult } from '../../core/result.js';
+export declare class SecurityAnalyzer implements Analyzer {
+    readonly id = "security";
+    readonly name = "Security";
+    readonly category: "security";
+    readonly description = "Checks for common security hygiene issues including exposed secrets and poor gitignore configuration.";
+    analyze(context: RepositoryContext): Promise<AnalyzerResult>;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/analyzers/security/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/analyzers/security/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAW,MAAM,sBAAsB,CAAC;AAyFpE,qBAAa,gBAAiB,YAAW,QAAQ;IAC/C,QAAQ,CAAC,EAAE,cAAc;IACzB,QAAQ,CAAC,IAAI,cAAc;IAC3B,QAAQ,CAAC,QAAQ,EAAG,UAAU,CAAU;IACxC,QAAQ,CAAC,WAAW,2GACsF;IAEpG,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,cAAc,CAAC;CAuKnE"}

package/dist/analyzers/security/index.js

@@ -0,0 +1,236 @@
+import path from 'node:path';
+import { createFindingId } from '../../core/findings.js';
+import { createTimer } from '../../utils/timing.js';
+import { readFileSafe } from '../../utils/filesystem.js';
+import { isPathMentionedInGitignore } from '../../utils/git.js';
+/**
+ * Secret patterns — conservative regexes that minimize false positives.
+ * NEVER log the matched value.
+ */
+const SECRET_PATTERNS = [
+    // AWS
+    { name: 'AWS Access Key ID', pattern: /AKIA[0-9A-Z]{16}/, confidence: 0.97 },
+    {
+        name: 'AWS Secret Access Key',
+        pattern: /(?:aws[_\-.]?secret[_\-.]?(?:access[_\-.]?)?key|AWS_SECRET_ACCESS_KEY)\s*[:=]\s*["']?[A-Za-z0-9/+]{40}["']?/i,
+        confidence: 0.85,
+    },
+    // GitHub tokens
+    { name: 'GitHub Personal Access Token', pattern: /ghp_[0-9a-zA-Z]{36}/, confidence: 0.99 },
+    { name: 'GitHub OAuth Token', pattern: /gho_[0-9a-zA-Z]{36}/, confidence: 0.99 },
+    { name: 'GitHub App Token', pattern: /ghs_[0-9a-zA-Z]{36}/, confidence: 0.99 },
+    // Generic API keys
+    {
+        name: 'Generic API Key',
+        pattern: /(?:api[_\-.]?key|apikey)\s*[:=]\s*["']?[A-Za-z0-9_-]{20,}["']?/i,
+        confidence: 0.7,
+    },
+    // Private keys
+    {
+        name: 'Private Key Block',
+        pattern: /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/,
+        confidence: 0.99,
+    },
+    // Database URLs with credentials
+    {
+        name: 'Database Connection String',
+        pattern: /(?:postgres|postgresql|mysql|mongodb|redis):\/\/[^:]+:[^@]+@/,
+        confidence: 0.92,
+    },
+    // Stripe
+    { name: 'Stripe Secret Key', pattern: /sk_(?:live|test)_[0-9a-zA-Z]{24,}/, confidence: 0.99 },
+    // Twilio
+    { name: 'Twilio Account SID', pattern: /AC[0-9a-f]{32}/, confidence: 0.8 },
+    // Google API Key
+    { name: 'Google API Key', pattern: /AIza[0-9A-Za-z\-_]{35}/, confidence: 0.95 },
+    // Slack token
+    { name: 'Slack Token', pattern: /xox[boaprs]-[0-9a-zA-Z-]{10,}/, confidence: 0.95 },
+    // Generic "password = value" in config
+    {
+        name: 'Hardcoded Password',
+        pattern: /(?:password|passwd|pwd)\s*[:=]\s*["'][^"']{8,}["']/i,
+        confidence: 0.6,
+    },
+];
+/**
+ * Files that are often credential containers and should not be tracked.
+ */
+const SENSITIVE_FILE_PATTERNS = [
+    /^\.env$/,
+    /^\.env\..+$/,
+    /^\.env\.local$/,
+    /^secrets?\.(json|yaml|yml|toml|ini)$/i,
+    /^credentials?\.(json|yaml|yml|toml|ini)$/i,
+    /^config\/secrets\//,
+];
+/**
+ * Private key file extensions / names.
+ */
+const PRIVATE_KEY_PATTERNS = [
+    /\.pem$/,
+    /\.key$/,
+    /^id_rsa$/,
+    /^id_ecdsa$/,
+    /^id_ed25519$/,
+    /^id_dsa$/,
+    /\.p12$/,
+    /\.pfx$/,
+];
+/**
+ * URL credential pattern.
+ */
+const URL_CREDENTIAL_PATTERN = /https?:\/\/[^:@\s]+:[^@\s]+@[^\s]+/g;
+export class SecurityAnalyzer {
+    id = 'security';
+    name = 'Security';
+    category = 'security';
+    description = 'Checks for common security hygiene issues including exposed secrets and poor gitignore configuration.';
+    async analyze(context) {
+        const elapsed = createTimer();
+        const findings = [];
+        const warnings = [];
+        let secretPatternCount = 0;
+        // SEC-001: .env not ignored
+        const envFiles = context.files.filter((f) => /^\.env($|\..+)/.test(path.basename(f.relativePath)));
+        for (const envFile of envFiles) {
+            const basename = path.basename(envFile.relativePath);
+            // Skip example/sample env files
+            if (/\.(example|sample|template)$/.test(basename))
+                continue;
+            const isIgnored = context.git.gitignoreContent
+                ? isPathMentionedInGitignore(context.git.gitignoreContent, basename) ||
+                    isPathMentionedInGitignore(context.git.gitignoreContent, '.env')
+                : false;
+            if (!isIgnored) {
+                findings.push({
+                    id: createFindingId('SEC-001', envFile.relativePath),
+                    ruleId: 'SEC-001',
+                    category: 'security',
+                    severity: 'high',
+                    title: `Environment file may not be gitignored: ${envFile.relativePath}`,
+                    description: 'Environment files often contain secrets and should not be committed to Git.',
+                    recommendation: `Add "${basename}" to .gitignore to prevent accidental commits.`,
+                    confidence: 0.95,
+                    location: { file: envFile.relativePath },
+                    autoFixable: false,
+                    references: ['https://12factor.net/config'],
+                });
+            }
+        }
+        // SEC-003: Private key files
+        for (const file of context.files) {
+            const basename = path.basename(file.relativePath);
+            const isPrivateKey = PRIVATE_KEY_PATTERNS.some((p) => p.test(basename));
+            if (isPrivateKey && !file.relativePath.includes('node_modules')) {
+                findings.push({
+                    id: createFindingId('SEC-003', file.relativePath),
+                    ruleId: 'SEC-003',
+                    category: 'security',
+                    severity: 'critical',
+                    title: `Potential private key file: ${file.relativePath}`,
+                    description: 'This file may contain a private key and should not be committed to the repository.',
+                    recommendation: 'Add this file to .gitignore and rotate any associated credentials.',
+                    confidence: 0.88,
+                    location: { file: file.relativePath },
+                    autoFixable: false,
+                });
+            }
+        }
+        // SEC-004: Tracked credential/config files
+        for (const file of context.files) {
+            const basename = path.basename(file.relativePath).toLowerCase();
+            const isSensitive = SENSITIVE_FILE_PATTERNS.some((p) => p.test(basename));
+            if (isSensitive) {
+                // SEC-001 already handles .env; avoid duplicate
+                if (basename.startsWith('.env'))
+                    continue;
+                findings.push({
+                    id: createFindingId('SEC-004', file.relativePath),
+                    ruleId: 'SEC-004',
+                    category: 'security',
+                    severity: 'high',
+                    title: `Potentially sensitive config file tracked: ${file.relativePath}`,
+                    description: 'This file may contain credentials or secrets.',
+                    recommendation: 'Move secrets to environment variables and add this file to .gitignore.',
+                    confidence: 0.75,
+                    location: { file: file.relativePath },
+                    autoFixable: false,
+                });
+            }
+        }
+        // SEC-002 and SEC-005: Scan source/config files for secrets
+        const filesToScan = context.files.filter((f) => !f.isBinary &&
+            (f.isSource || f.isConfig || f.extension === '.yaml' || f.extension === '.yml'));
+        for (const file of filesToScan) {
+            if (file.sizeBytes > 512 * 1024) {
+                warnings.push(`Skipped large file for secret scan: ${file.relativePath}`);
+                continue;
+            }
+            const content = await readFileSafe(file.absolutePath);
+            if (!content)
+                continue;
+            const lines = content.split('\n');
+            // SEC-002: Secret patterns
+            for (const { name: patternName, pattern, confidence } of SECRET_PATTERNS) {
+                let lineIndex = 0;
+                for (const line of lines) {
+                    lineIndex++;
+                    // Skip comment lines
+                    if (/^\s*(#|\/\/|\/\*)/.test(line))
+                        continue;
+                    if (pattern.test(line)) {
+                        secretPatternCount++;
+                        findings.push({
+                            id: createFindingId('SEC-002', file.relativePath, lineIndex),
+                            ruleId: 'SEC-002',
+                            category: 'security',
+                            severity: 'high',
+                            title: `Potential credential detected: ${patternName}`,
+                            description: `A value resembling a ${patternName} was found in a source file.`,
+                            recommendation: 'Move credentials to environment variables and rotate the compromised value.',
+                            confidence,
+                            location: { file: file.relativePath, line: lineIndex },
+                            // Deliberately no evidence value — never print the secret
+                            autoFixable: false,
+                            references: ['https://12factor.net/config'],
+                        });
+                    }
+                }
+            }
+            // SEC-005: URL credentials
+            const urlMatches = [...content.matchAll(URL_CREDENTIAL_PATTERN)];
+            for (const match of urlMatches) {
+                // Find the line number
+                const lineIndex = content.slice(0, match.index).split('\n').length;
+                findings.push({
+                    id: createFindingId('SEC-005', file.relativePath, lineIndex),
+                    ruleId: 'SEC-005',
+                    category: 'security',
+                    severity: 'high',
+                    title: 'Credentials embedded in URL',
+                    description: 'A URL containing embedded credentials was detected.',
+                    recommendation: 'Use environment variables for usernames and passwords in connection strings.',
+                    confidence: 0.88,
+                    location: { file: file.relativePath, line: lineIndex },
+                    autoFixable: false,
+                });
+            }
+        }
+        const metrics = {
+            envFilesFound: envFiles.length,
+            secretPatternsFound: secretPatternCount,
+            filesScanned: filesToScan.length,
+        };
+        return {
+            analyzerId: this.id,
+            analyzerName: this.name,
+            category: this.category,
+            status: 'success',
+            findings,
+            metrics,
+            durationMs: elapsed(),
+            warnings,
+        };
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/analyzers/security/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/analyzers/security/index.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAK7B,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAEhE;;;GAGG;AACH,MAAM,eAAe,GAAiE;IACpF,MAAM;IACN,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,IAAI,EAAE;IAC5E;QACE,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EACL,8GAA8G;QAChH,UAAU,EAAE,IAAI;KACjB;IACD,gBAAgB;IAChB,EAAE,IAAI,EAAE,8BAA8B,EAAE,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,IAAI,EAAE;IAC1F,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,IAAI,EAAE;IAChF,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,IAAI,EAAE;IAC9E,mBAAmB;IACnB;QACE,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,iEAAiE;QAC1E,UAAU,EAAE,GAAG;KAChB;IACD,eAAe;IACf;QACE,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,mDAAmD;QAC5D,UAAU,EAAE,IAAI;KACjB;IACD,iCAAiC;IACjC;QACE,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,8DAA8D;QACvE,UAAU,EAAE,IAAI;KACjB;IACD,SAAS;IACT,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,mCAAmC,EAAE,UAAU,EAAE,IAAI,EAAE;IAC7F,SAAS;IACT,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,EAAE;IAC1E,iBAAiB;IACjB,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,wBAAwB,EAAE,UAAU,EAAE,IAAI,EAAE;IAC/E,cAAc;IACd,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,+BAA+B,EAAE,UAAU,EAAE,IAAI,EAAE;IACnF,uCAAuC;IACvC;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,qDAAqD;QAC9D,UAAU,EAAE,GAAG;KAChB;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,uBAAuB,GAAG;IAC9B,SAAS;IACT,aAAa;IACb,gBAAgB;IAChB,uCAAuC;IACvC,2CAA2C;IAC3C,oBAAoB;CACrB,CAAC;AAEF;;GAEG;AACH,MAAM,oBAAoB,GAAG;IAC3B,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,YAAY;IACZ,cAAc;IACd,UAAU;IACV,QAAQ;IACR,QAAQ;CACT,CAAC;AAEF;;GAEG;AACH,MAAM,sBAAsB,GAAG,qCAAqC,CAAC;AAErE,MAAM,OAAO,gBAAgB;IAClB,EAAE,GAAG,UAAU,CAAC;IAChB,IAAI,GAAG,UAAU,CAAC;IAClB,QAAQ,GAAG,UAAmB,CAAC;IAC/B,WAAW,GAClB,uGAAuG,CAAC;IAE1G,KAAK,CAAC,OAAO,CAAC,OAA0B;QACtC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,kBAAkB,GAAG,CAAC,CAAC;QAE3B,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1C,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CACrD,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACrD,gCAAgC;YAChC,IAAI,8BAA8B,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAE5D,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB;gBAC5C,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC;oBAClE,0BAA0B,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC;gBAClE,CAAC,CAAC,KAAK,CAAC;YAEV,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC;oBACpD,MAAM,EAAE,SAAS;oBACjB,QAAQ,EAAE,UAAU;oBACpB,QAAQ,EAAE,MAAM;oBAChB,KAAK,EAAE,2CAA2C,OAAO,CAAC,YAAY,EAAE;oBACxE,WAAW,EACT,6EAA6E;oBAC/E,cAAc,EAAE,QAAQ,QAAQ,gDAAgD;oBAChF,UAAU,EAAE,IAAI;oBAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE;oBACxC,WAAW,EAAE,KAAK;oBAClB,UAAU,EAAE,CAAC,6BAA6B,CAAC;iBAC5C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAClD,MAAM,YAAY,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YACxE,IAAI,YAAY,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;gBAChE,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;oBACjD,MAAM,EAAE,SAAS;oBACjB,QAAQ,EAAE,UAAU;oBACpB,QAAQ,EAAE,UAAU;oBACpB,KAAK,EAAE,+BAA+B,IAAI,CAAC,YAAY,EAAE;oBACzD,WAAW,EACT,oFAAoF;oBACtF,cAAc,EAAE,oEAAoE;oBACpF,UAAU,EAAE,IAAI;oBAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE;oBACrC,WAAW,EAAE,KAAK;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;YAChE,MAAM,WAAW,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1E,IAAI,WAAW,EAAE,CAAC;gBAChB,gDAAgD;gBAChD,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;oBAAE,SAAS;gBAE1C,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;oBACjD,MAAM,EAAE,SAAS;oBACjB,QAAQ,EAAE,UAAU;oBACpB,QAAQ,EAAE,MAAM;oBAChB,KAAK,EAAE,8CAA8C,IAAI,CAAC,YAAY,EAAE;oBACxE,WAAW,EAAE,+CAA+C;oBAC5D,cAAc,EAAE,wEAAwE;oBACxF,UAAU,EAAE,IAAI;oBAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE;oBACrC,WAAW,EAAE,KAAK;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,4DAA4D;QAC5D,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CACtC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,QAAQ;YACX,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,CAClF,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,SAAS,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC,uCAAuC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;gBAC1E,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACtD,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElC,2BAA2B;YAC3B,KAAK,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,eAAe,EAAE,CAAC;gBACzE,IAAI,SAAS,GAAG,CAAC,CAAC;gBAClB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,SAAS,EAAE,CAAC;oBACZ,qBAAqB;oBACrB,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,SAAS;oBAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;wBACvB,kBAAkB,EAAE,CAAC;wBACrB,QAAQ,CAAC,IAAI,CAAC;4BACZ,EAAE,EAAE,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC;4BAC5D,MAAM,EAAE,SAAS;4BACjB,QAAQ,EAAE,UAAU;4BACpB,QAAQ,EAAE,MAAM;4BAChB,KAAK,EAAE,kCAAkC,WAAW,EAAE;4BACtD,WAAW,EAAE,wBAAwB,WAAW,8BAA8B;4BAC9E,cAAc,EACZ,6EAA6E;4BAC/E,UAAU;4BACV,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;4BACtD,0DAA0D;4BAC1D,WAAW,EAAE,KAAK;4BAClB,UAAU,EAAE,CAAC,6BAA6B,CAAC;yBAC5C,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAED,2BAA2B;YAC3B,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC;YACjE,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;gBAC/B,uBAAuB;gBACvB,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;gBACnE,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC;oBAC5D,MAAM,EAAE,SAAS;oBACjB,QAAQ,EAAE,UAAU;oBACpB,QAAQ,EAAE,MAAM;oBAChB,KAAK,EAAE,6BAA6B;oBACpC,WAAW,EAAE,qDAAqD;oBAClE,cAAc,EACZ,8EAA8E;oBAChF,UAAU,EAAE,IAAI;oBAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;oBACtD,WAAW,EAAE,KAAK;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAY;YACvB,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,mBAAmB,EAAE,kBAAkB;YACvC,YAAY,EAAE,WAAW,CAAC,MAAM;SACjC,CAAC;QAEF,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,EAAE;YACnB,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,SAAS;YACjB,QAAQ;YACR,OAAO;YACP,UAAU,EAAE,OAAO,EAAE;YACrB,QAAQ;SACT,CAAC;IACJ,CAAC;CACF"}

package/dist/analyzers/testing/index.d.ts

@@ -0,0 +1,11 @@
+import type { Analyzer } from '../../core/analyzer.js';
+import type { RepositoryContext } from '../../core/context.js';
+import type { AnalyzerResult } from '../../core/result.js';
+export declare class TestingAnalyzer implements Analyzer {
+    readonly id = "testing";
+    readonly name = "Testing";
+    readonly category: "testing";
+    readonly description = "Checks for test infrastructure: directories, test files, and test scripts.";
+    analyze(context: RepositoryContext): Promise<AnalyzerResult>;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/analyzers/testing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/analyzers/testing/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAW,MAAM,sBAAsB,CAAC;AAgCpE,qBAAa,eAAgB,YAAW,QAAQ;IAC9C,QAAQ,CAAC,EAAE,aAAa;IACxB,QAAQ,CAAC,IAAI,aAAa;IAC1B,QAAQ,CAAC,QAAQ,EAAG,SAAS,CAAU;IACvC,QAAQ,CAAC,WAAW,gFAC2D;IAEzE,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,cAAc,CAAC;CA8GnE"}