@blamejs/exceptd-skills 0.18.21 → 0.18.23
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/ARCHITECTURE.md +1 -1
- package/CHANGELOG.md +10 -0
- package/bin/exceptd.js +4 -1
- package/data/_indexes/_meta.json +9 -9
- package/data/_indexes/activity-feed.json +15 -15
- package/data/_indexes/catalog-summaries.json +10 -10
- package/data/_indexes/chains.json +120168 -747
- package/data/_indexes/frequency.json +20 -0
- package/data/attack-techniques.json +437 -8
- package/data/cve-catalog.json +18623 -4
- package/data/cwe-catalog.json +765 -18
- package/data/framework-control-gaps.json +1020 -13
- package/data/zeroday-lessons.json +7616 -1
- package/lib/auto-discovery.js +54 -67
- package/lib/cve-batch.js +216 -0
- package/lib/cve-curation.js +4 -0
- package/lib/cve-enrich.js +172 -0
- package/lib/prefetch.js +189 -110
- package/lib/scoring.js +24 -0
- package/manifest.json +53 -53
- package/package.json +2 -2
- package/sbom.cdx.json +65 -35
package/sbom.cdx.json
CHANGED
|
@@ -1,23 +1,23 @@
|
|
|
1
1
|
{
|
|
2
2
|
"bomFormat": "CycloneDX",
|
|
3
3
|
"specVersion": "1.6",
|
|
4
|
-
"serialNumber": "urn:uuid:
|
|
4
|
+
"serialNumber": "urn:uuid:d5f9fab1-3ae4-4fcd-bb44-3c95eb27d264",
|
|
5
5
|
"version": 1,
|
|
6
6
|
"metadata": {
|
|
7
|
-
"timestamp": "
|
|
7
|
+
"timestamp": "2139-10-06T02:40:49.000Z",
|
|
8
8
|
"tools": [
|
|
9
9
|
{
|
|
10
10
|
"vendor": "blamejs",
|
|
11
11
|
"name": "scripts/refresh-sbom.js",
|
|
12
|
-
"version": "0.18.
|
|
12
|
+
"version": "0.18.23"
|
|
13
13
|
}
|
|
14
14
|
],
|
|
15
15
|
"component": {
|
|
16
|
-
"bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.18.
|
|
16
|
+
"bom-ref": "pkg:npm/@blamejs/exceptd-skills@0.18.23",
|
|
17
17
|
"type": "application",
|
|
18
18
|
"name": "@blamejs/exceptd-skills",
|
|
19
|
-
"version": "0.18.
|
|
20
|
-
"description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 51 skills, 11 catalogs (
|
|
19
|
+
"version": "0.18.23",
|
|
20
|
+
"description": "AI security skills grounded in mid-2026 threat reality, not stale framework documentation. 51 skills, 11 catalogs (719 CVEs / 213 CWEs / 805 ATT&CK + ICS / 170 ATLAS / 468 D3FEND / 8888 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gate, real XML parser + canonical-form diff + content-pattern regression detection, Ed25519-signed.",
|
|
21
21
|
"licenses": [
|
|
22
22
|
{
|
|
23
23
|
"license": {
|
|
@@ -25,17 +25,17 @@
|
|
|
25
25
|
}
|
|
26
26
|
}
|
|
27
27
|
],
|
|
28
|
-
"purl": "pkg:npm/%40blamejs/exceptd-skills@0.18.
|
|
28
|
+
"purl": "pkg:npm/%40blamejs/exceptd-skills@0.18.23",
|
|
29
29
|
"hashes": [
|
|
30
30
|
{
|
|
31
31
|
"alg": "SHA-256",
|
|
32
|
-
"content": "
|
|
32
|
+
"content": "7ec59c3f6a6086cf61fe1fae5be17708b29b341ef59d43274007f9aa6c348b75"
|
|
33
33
|
}
|
|
34
34
|
],
|
|
35
35
|
"externalReferences": [
|
|
36
36
|
{
|
|
37
37
|
"type": "distribution",
|
|
38
|
-
"url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.18.
|
|
38
|
+
"url": "https://www.npmjs.com/package/@blamejs/exceptd-skills/v/0.18.23"
|
|
39
39
|
},
|
|
40
40
|
{
|
|
41
41
|
"type": "vcs",
|
|
@@ -101,11 +101,11 @@
|
|
|
101
101
|
"hashes": [
|
|
102
102
|
{
|
|
103
103
|
"alg": "SHA-256",
|
|
104
|
-
"content": "
|
|
104
|
+
"content": "f37f105624ed7057ceb2bd3b64345098a1723d78ec7359b1a9ef07265f44869a"
|
|
105
105
|
},
|
|
106
106
|
{
|
|
107
107
|
"alg": "SHA3-512",
|
|
108
|
-
"content": "
|
|
108
|
+
"content": "43d52cb04832dbe09255143c65b17948e94ca5bca23340568a597ed67b2d45d73c2a90e59f8ae9dc2e9c7d1acd97a111fc1757b093019edb44ac3ac0cfa0d0e2"
|
|
109
109
|
}
|
|
110
110
|
]
|
|
111
111
|
},
|
|
@@ -116,11 +116,11 @@
|
|
|
116
116
|
"hashes": [
|
|
117
117
|
{
|
|
118
118
|
"alg": "SHA-256",
|
|
119
|
-
"content": "
|
|
119
|
+
"content": "9f6f75e835f341e709bc556fba33b63327577e8c1300b616e3bb9dd02198372f"
|
|
120
120
|
},
|
|
121
121
|
{
|
|
122
122
|
"alg": "SHA3-512",
|
|
123
|
-
"content": "
|
|
123
|
+
"content": "d252cd027f6dfedae6001b8445c047674658cedebb0755013b7f3fe6176163dc9d4c787f8d98e1a98e08760255c1183c8e1079670e4d2f0a293d0ff2baa364eb"
|
|
124
124
|
}
|
|
125
125
|
]
|
|
126
126
|
},
|
|
@@ -281,11 +281,11 @@
|
|
|
281
281
|
"hashes": [
|
|
282
282
|
{
|
|
283
283
|
"alg": "SHA-256",
|
|
284
|
-
"content": "
|
|
284
|
+
"content": "3cdb0ad9cb9b2ef36424d9a20df0e03fc44e53128ceee244042c7bf5c28c22b8"
|
|
285
285
|
},
|
|
286
286
|
{
|
|
287
287
|
"alg": "SHA3-512",
|
|
288
|
-
"content": "
|
|
288
|
+
"content": "b218e2778147802babe9796d2de3efc265af11bdac570ad2ac7dc842fa8f92e99eb6f3e31191fc9962b8cce54940a5937c7327782c0b32d6a2ac7d6b1c624a1a"
|
|
289
289
|
}
|
|
290
290
|
]
|
|
291
291
|
},
|
|
@@ -311,11 +311,11 @@
|
|
|
311
311
|
"hashes": [
|
|
312
312
|
{
|
|
313
313
|
"alg": "SHA-256",
|
|
314
|
-
"content": "
|
|
314
|
+
"content": "14fd17a88f5ddbd37dae6cface6114f95e4c6d8409f0cf8ce050a5369b88568d"
|
|
315
315
|
},
|
|
316
316
|
{
|
|
317
317
|
"alg": "SHA3-512",
|
|
318
|
-
"content": "
|
|
318
|
+
"content": "83e8d96be7d142927ed7736c6c5da7e61cdf6016f1dfb15439fff09616e65a48bc2d05beaf068558381b9766288720e51a34ac96771dbb5bc094b3d7c241785e"
|
|
319
319
|
}
|
|
320
320
|
]
|
|
321
321
|
},
|
|
@@ -326,11 +326,11 @@
|
|
|
326
326
|
"hashes": [
|
|
327
327
|
{
|
|
328
328
|
"alg": "SHA-256",
|
|
329
|
-
"content": "
|
|
329
|
+
"content": "f5d27d4ff1452fd0f40e45c9aaecae16a0910fb12b695e9353a6090d9d11608e"
|
|
330
330
|
},
|
|
331
331
|
{
|
|
332
332
|
"alg": "SHA3-512",
|
|
333
|
-
"content": "
|
|
333
|
+
"content": "2cfb7848d66567878d4ec8120753915371fe4f509da106a54838688ba0292fd9ede423b76eabf7158b4f848d7c831295aa9d51f10aa2bfc5424806b48a5f4f77"
|
|
334
334
|
}
|
|
335
335
|
]
|
|
336
336
|
},
|
|
@@ -341,11 +341,11 @@
|
|
|
341
341
|
"hashes": [
|
|
342
342
|
{
|
|
343
343
|
"alg": "SHA-256",
|
|
344
|
-
"content": "
|
|
344
|
+
"content": "ed975d2500ea655b89007cee5de3afac0f5cd5720d3175a92a4382ddd8774ff7"
|
|
345
345
|
},
|
|
346
346
|
{
|
|
347
347
|
"alg": "SHA3-512",
|
|
348
|
-
"content": "
|
|
348
|
+
"content": "4a201cb24ce063856792c691331f4b451f2f45029170e3a8dd5f54088a9fce2b11eee36557a1bea5ec0df2fa517919db3169fa9b3b838423ba9a242a77dfa161"
|
|
349
349
|
}
|
|
350
350
|
]
|
|
351
351
|
},
|
|
@@ -401,11 +401,11 @@
|
|
|
401
401
|
"hashes": [
|
|
402
402
|
{
|
|
403
403
|
"alg": "SHA-256",
|
|
404
|
-
"content": "
|
|
404
|
+
"content": "87a3ef8628ec7e1339a25ac047cf0c7cdaa82bd6d3db9e8257141d9656a9bd33"
|
|
405
405
|
},
|
|
406
406
|
{
|
|
407
407
|
"alg": "SHA3-512",
|
|
408
|
-
"content": "
|
|
408
|
+
"content": "e9b5aafca22a1463ea37d4e7fcb7b8a01a053570dd5c8dff745a4461e02fda9398167727c31f1bb504833888e70107dc93f032632ad527734862b75617d1caca"
|
|
409
409
|
}
|
|
410
410
|
]
|
|
411
411
|
},
|
|
@@ -941,11 +941,11 @@
|
|
|
941
941
|
"hashes": [
|
|
942
942
|
{
|
|
943
943
|
"alg": "SHA-256",
|
|
944
|
-
"content": "
|
|
944
|
+
"content": "bf2ef195d95d795c08e42b1ff3a214e4a637b108309afc69977d15f25dab10f6"
|
|
945
945
|
},
|
|
946
946
|
{
|
|
947
947
|
"alg": "SHA3-512",
|
|
948
|
-
"content": "
|
|
948
|
+
"content": "a4fcc4e753008009fdcafe46f311a018a97a7122e753c55a77a3568932898d62a565d42c79bd6061e90ab44c2806e9a988cbb082826af0b54303e8fd6c7707aa"
|
|
949
949
|
}
|
|
950
950
|
]
|
|
951
951
|
},
|
|
@@ -986,11 +986,11 @@
|
|
|
986
986
|
"hashes": [
|
|
987
987
|
{
|
|
988
988
|
"alg": "SHA-256",
|
|
989
|
-
"content": "
|
|
989
|
+
"content": "8b9a2d31de55c06b6ee677d5c11f88244b536efad9e94c2c8060195aebabd945"
|
|
990
990
|
},
|
|
991
991
|
{
|
|
992
992
|
"alg": "SHA3-512",
|
|
993
|
-
"content": "
|
|
993
|
+
"content": "0f752016c021bef90ff1df8df91ee346d0c01e7633f32a9d49347f0cef565230ed9a7370fa91e8314f39600f0edab3e76abe5385d392cd9a81c6d63638b13d44"
|
|
994
994
|
}
|
|
995
995
|
]
|
|
996
996
|
},
|
|
@@ -1279,6 +1279,21 @@
|
|
|
1279
1279
|
}
|
|
1280
1280
|
]
|
|
1281
1281
|
},
|
|
1282
|
+
{
|
|
1283
|
+
"bom-ref": "file:lib/cve-batch.js",
|
|
1284
|
+
"type": "file",
|
|
1285
|
+
"name": "lib/cve-batch.js",
|
|
1286
|
+
"hashes": [
|
|
1287
|
+
{
|
|
1288
|
+
"alg": "SHA-256",
|
|
1289
|
+
"content": "3088500b2e5c8f1915713cb74441160f94f4aa6f4609546c3ba79d439a66e07b"
|
|
1290
|
+
},
|
|
1291
|
+
{
|
|
1292
|
+
"alg": "SHA3-512",
|
|
1293
|
+
"content": "b815b4ff95f98c88a37ab1aaeaeefb812772b8994af5d2e378b2b0f0e32dcc87c64d462d95dd78cde353e00ae4c521d5a6fcf596d60a7b3a4a6fbe212e86864b"
|
|
1294
|
+
}
|
|
1295
|
+
]
|
|
1296
|
+
},
|
|
1282
1297
|
{
|
|
1283
1298
|
"bom-ref": "file:lib/cve-cli.js",
|
|
1284
1299
|
"type": "file",
|
|
@@ -1301,11 +1316,26 @@
|
|
|
1301
1316
|
"hashes": [
|
|
1302
1317
|
{
|
|
1303
1318
|
"alg": "SHA-256",
|
|
1304
|
-
"content": "
|
|
1319
|
+
"content": "55ecdf2f95e1b488a48228404cec4987aef865a58f6651262011e8598b0e35d2"
|
|
1320
|
+
},
|
|
1321
|
+
{
|
|
1322
|
+
"alg": "SHA3-512",
|
|
1323
|
+
"content": "8f1c68731f89a0b20a41c6b906f5330a46c18904e3d70a596d525fa9dc6a4316f4eda4bd5b1beb4f93c3967f3ef5a8a9bf17a3ed51df275a9450cd453a18b831"
|
|
1324
|
+
}
|
|
1325
|
+
]
|
|
1326
|
+
},
|
|
1327
|
+
{
|
|
1328
|
+
"bom-ref": "file:lib/cve-enrich.js",
|
|
1329
|
+
"type": "file",
|
|
1330
|
+
"name": "lib/cve-enrich.js",
|
|
1331
|
+
"hashes": [
|
|
1332
|
+
{
|
|
1333
|
+
"alg": "SHA-256",
|
|
1334
|
+
"content": "4281581abeadbd9ca0c84276e1d36b09041bedc117a50371e38194ebba9f7570"
|
|
1305
1335
|
},
|
|
1306
1336
|
{
|
|
1307
1337
|
"alg": "SHA3-512",
|
|
1308
|
-
"content": "
|
|
1338
|
+
"content": "5d2ca95d32de9e9409718265b9cd50494217329960362c008c281ddc71226dd7301a828b95f5bda7e6fad78430cf337529062d1593db9582a57e2a8b300b5bdf"
|
|
1309
1339
|
}
|
|
1310
1340
|
]
|
|
1311
1341
|
},
|
|
@@ -1481,11 +1511,11 @@
|
|
|
1481
1511
|
"hashes": [
|
|
1482
1512
|
{
|
|
1483
1513
|
"alg": "SHA-256",
|
|
1484
|
-
"content": "
|
|
1514
|
+
"content": "9e55bad46e765d06c4f578bfd55d20f218bc05bd56a88aa31181d3e6ce45891f"
|
|
1485
1515
|
},
|
|
1486
1516
|
{
|
|
1487
1517
|
"alg": "SHA3-512",
|
|
1488
|
-
"content": "
|
|
1518
|
+
"content": "259152e91dd4d895a4999c4e7cc252d52d928196dcd46b8d20981a174d3303118388f45e68b5fdc360fc8e2381b5cd16062e6f6fdd54371a496bc519b643860f"
|
|
1489
1519
|
}
|
|
1490
1520
|
]
|
|
1491
1521
|
},
|
|
@@ -1601,11 +1631,11 @@
|
|
|
1601
1631
|
"hashes": [
|
|
1602
1632
|
{
|
|
1603
1633
|
"alg": "SHA-256",
|
|
1604
|
-
"content": "
|
|
1634
|
+
"content": "ea08c7de69d13be2348aa49390828fd346dd580d6ccbce8f28f1dffcd20adebb"
|
|
1605
1635
|
},
|
|
1606
1636
|
{
|
|
1607
1637
|
"alg": "SHA3-512",
|
|
1608
|
-
"content": "
|
|
1638
|
+
"content": "368c0d22793eeba69740595d04742db3d51526eb7837a7270c5b1fc67ea0f3b62f671b18bd6794c802015290f3e60969e3d58eab76d892db62abfeffccd916b9"
|
|
1609
1639
|
}
|
|
1610
1640
|
]
|
|
1611
1641
|
},
|
|
@@ -1901,11 +1931,11 @@
|
|
|
1901
1931
|
"hashes": [
|
|
1902
1932
|
{
|
|
1903
1933
|
"alg": "SHA-256",
|
|
1904
|
-
"content": "
|
|
1934
|
+
"content": "6c40bb0b1c80d38a2756501524b074e0885bf99d234ecdc4c66176bd232ee699"
|
|
1905
1935
|
},
|
|
1906
1936
|
{
|
|
1907
1937
|
"alg": "SHA3-512",
|
|
1908
|
-
"content": "
|
|
1938
|
+
"content": "4e1d57b6174e745b4a3a70de3d8590eb8aab73ef9c74d0d4805035633ccdf8a33ece9c0c0ea4a62f4f38a33281ecd9b6eebf9f1c5e013474eb9bbe40d7290f33"
|
|
1909
1939
|
}
|
|
1910
1940
|
]
|
|
1911
1941
|
},
|