@darrenjcoxon/vibeguard 1.0.0

package/dist/scanners/eslint.js

@@ -0,0 +1,196 @@
+/**
+ * ESLint Scanner
+ *
+ * Code quality and style scanning for JavaScript/TypeScript projects
+ * Covers: quality, style, security (with security plugins)
+ */
+import { exec } from 'child_process';
+import { promisify } from 'util';
+import { existsSync } from 'fs';
+import { join } from 'path';
+import { generateFingerprint } from '../types.js';
+const execAsync = promisify(exec);
+export class ESLintScanner {
+    name = 'eslint';
+    categories = ['quality', 'style', 'security'];
+    // Security-related ESLint rule prefixes
+    securityRulePrefixes = [
+        'security/',
+        '@typescript-eslint/no-unsafe',
+        'no-eval',
+        'no-implied-eval',
+        'no-new-func',
+        'no-script-url'
+    ];
+    async isAvailable() {
+        try {
+            await execAsync('npx eslint --version', { timeout: 10000 });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async scan(target, config) {
+        const startTime = Date.now();
+        // Check for ESLint config or package.json
+        const hasESLintConfig = this.hasESLintConfig(target.path);
+        const hasPackageJson = existsSync(join(target.path, 'package.json'));
+        if (!hasESLintConfig && !hasPackageJson) {
+            return {
+                scanner: this.name,
+                success: true,
+                findings: [],
+                metrics: { duration: Date.now() - startTime },
+                metadata: { skipped: true, reason: 'No ESLint config or package.json found' }
+            };
+        }
+        if (!await this.isAvailable()) {
+            return {
+                scanner: this.name,
+                success: false,
+                error: 'ESLint not available. Run `npm install eslint` in your project',
+                findings: [],
+                metrics: { duration: Date.now() - startTime }
+            };
+        }
+        try {
+            const findings = await this.runESLint(target);
+            return {
+                scanner: this.name,
+                success: true,
+                findings,
+                metrics: {
+                    duration: Date.now() - startTime,
+                    filesScanned: findings.length > 0 ? new Set(findings.map(f => f.file)).size : 0
+                }
+            };
+        }
+        catch (error) {
+            return {
+                scanner: this.name,
+                success: false,
+                error: error instanceof Error ? error.message : String(error),
+                findings: [],
+                metrics: { duration: Date.now() - startTime }
+            };
+        }
+    }
+    hasESLintConfig(path) {
+        const configFiles = [
+            '.eslintrc',
+            '.eslintrc.js',
+            '.eslintrc.cjs',
+            '.eslintrc.json',
+            '.eslintrc.yml',
+            '.eslintrc.yaml',
+            'eslint.config.js',
+            'eslint.config.mjs',
+            'eslint.config.cjs'
+        ];
+        return configFiles.some(f => existsSync(join(path, f)));
+    }
+    async runESLint(target) {
+        const extensions = '--ext .js,.jsx,.ts,.tsx,.mjs,.cjs';
+        const ignorePattern = '--ignore-pattern "node_modules/**" --ignore-pattern "dist/**" --ignore-pattern "build/**"';
+        const cmd = `cd "${target.path}" && npx eslint . ${extensions} ${ignorePattern} --format json --no-error-on-unmatched-pattern 2>/dev/null || true`;
+        try {
+            const { stdout, stderr } = await execAsync(cmd, {
+                timeout: 180000, // 3 minutes
+                maxBuffer: 20 * 1024 * 1024
+            });
+            if (!stdout.trim() || stdout.trim() === '[]') {
+                return [];
+            }
+            const results = JSON.parse(stdout);
+            return this.transformFindings(results, target.path);
+        }
+        catch (error) {
+            // ESLint exits with 1 when there are linting errors
+            if (error.stdout) {
+                try {
+                    const results = JSON.parse(error.stdout);
+                    return this.transformFindings(results, target.path);
+                }
+                catch {
+                    return [];
+                }
+            }
+            // Config errors etc. - just return empty
+            return [];
+        }
+    }
+    transformFindings(results, basePath) {
+        const findings = [];
+        for (const result of results) {
+            for (const msg of result.messages) {
+                if (!msg.ruleId)
+                    continue; // Skip parsing errors without rule IDs
+                const category = this.categorizeRule(msg.ruleId);
+                const severity = this.mapSeverity(msg.severity, category);
+                // Make path relative
+                const relativePath = result.filePath.startsWith(basePath)
+                    ? result.filePath.slice(basePath.length + 1)
+                    : result.filePath;
+                const finding = {
+                    id: `eslint-${msg.ruleId}-${relativePath}-${msg.line}`,
+                    source: this.name,
+                    severity,
+                    category,
+                    file: relativePath,
+                    line: msg.line,
+                    endLine: msg.endLine,
+                    column: msg.column,
+                    endColumn: msg.endColumn,
+                    title: msg.ruleId,
+                    description: msg.message,
+                    suggestion: msg.suggestions?.[0]?.desc || (msg.fix ? 'Auto-fix available' : undefined),
+                    fixAvailable: !!(msg.fix || msg.suggestions?.length),
+                    autoFixable: !!msg.fix,
+                    ruleId: msg.ruleId,
+                    ruleUrl: `https://eslint.org/docs/rules/${msg.ruleId}`,
+                    confidence: 'high',
+                    effort: msg.fix ? 'trivial' : 'easy',
+                    fingerprint: ''
+                };
+                finding.fingerprint = generateFingerprint(finding);
+                findings.push(finding);
+            }
+        }
+        return findings;
+    }
+    categorizeRule(ruleId) {
+        // Check if it's a security rule
+        if (this.securityRulePrefixes.some(prefix => ruleId.startsWith(prefix) || ruleId.includes(prefix))) {
+            return 'security';
+        }
+        // Style rules
+        const stylePatterns = [
+            'indent', 'quotes', 'semi', 'comma', 'spacing', 'newline',
+            'brace', 'curly', 'padding', 'wrap', 'linebreak'
+        ];
+        if (stylePatterns.some(p => ruleId.toLowerCase().includes(p))) {
+            return 'style';
+        }
+        // Complexity rules
+        if (ruleId.includes('complexity') || ruleId.includes('max-')) {
+            return 'complexity';
+        }
+        // Default to quality
+        return 'quality';
+    }
+    mapSeverity(eslintSeverity, category) {
+        // Security issues get elevated severity
+        if (category === 'security') {
+            return eslintSeverity === 2 ? 'high' : 'medium';
+        }
+        // Style issues are low priority
+        if (category === 'style') {
+            return 'low';
+        }
+        // Quality issues
+        return eslintSeverity === 2 ? 'medium' : 'low';
+    }
+}
+export default ESLintScanner;
+//# sourceMappingURL=eslint.js.map

package/dist/scanners/eslint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eslint.js","sourceRoot":"","sources":["../../src/scanners/eslint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAQL,mBAAmB,EACpB,MAAM,aAAa,CAAC;AAErB,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AA8BlC,MAAM,OAAO,aAAa;IACxB,IAAI,GAAG,QAAQ,CAAC;IAChB,UAAU,GAAsB,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAEjE,wCAAwC;IAChC,oBAAoB,GAAG;QAC7B,WAAW;QACX,8BAA8B;QAC9B,SAAS;QACT,iBAAiB;QACjB,aAAa;QACb,eAAe;KAChB,CAAC;IAEF,KAAK,CAAC,WAAW;QACf,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAkB,EAAE,MAAsB;QACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,0CAA0C;QAC1C,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;QAErE,IAAI,CAAC,eAAe,IAAI,CAAC,cAAc,EAAE,CAAC;YACxC,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,IAAI;gBAClB,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,EAAE;gBACZ,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE;gBAC7C,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,wCAAwC,EAAE;aAC9E,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YAC9B,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,IAAI;gBAClB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,gEAAgE;gBACvE,QAAQ,EAAE,EAAE;gBACZ,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE;aAC9C,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAE9C,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,IAAI;gBAClB,OAAO,EAAE,IAAI;gBACb,QAAQ;gBACR,OAAO,EAAE;oBACP,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBAChC,YAAY,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;iBAChF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,IAAI;gBAClB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,QAAQ,EAAE,EAAE;gBACZ,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE;aAC9C,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,IAAY;QAClC,MAAM,WAAW,GAAG;YAClB,WAAW;YACX,cAAc;YACd,eAAe;YACf,gBAAgB;YAChB,eAAe;YACf,gBAAgB;YAChB,kBAAkB;YAClB,mBAAmB;YACnB,mBAAmB;SACpB,CAAC;QAEF,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,MAAkB;QACxC,MAAM,UAAU,GAAG,mCAAmC,CAAC;QACvD,MAAM,aAAa,GAAG,2FAA2F,CAAC;QAElH,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,IAAI,qBAAqB,UAAU,IAAI,aAAa,oEAAoE,CAAC;QAEnJ,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;gBAC9C,OAAO,EAAE,MAAM,EAAE,YAAY;gBAC7B,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC5B,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAC7C,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,OAAO,GAAmB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAEtD,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,oDAAoD;YACpD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,MAAM,OAAO,GAAmB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACzD,OAAO,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBACtD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YACD,yCAAyC;YACzC,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,OAAuB,EAAE,QAAgB;QACjE,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAClC,IAAI,CAAC,GAAG,CAAC,MAAM;oBAAE,SAAS,CAAC,uCAAuC;gBAElE,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBAE1D,qBAAqB;gBACrB,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;oBACvD,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;oBAC5C,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAEpB,MAAM,OAAO,GAAY;oBACvB,EAAE,EAAE,UAAU,GAAG,CAAC,MAAM,IAAI,YAAY,IAAI,GAAG,CAAC,IAAI,EAAE;oBACtD,MAAM,EAAE,IAAI,CAAC,IAAI;oBACjB,QAAQ;oBACR,QAAQ;oBACR,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,KAAK,EAAE,GAAG,CAAC,MAAM;oBACjB,WAAW,EAAE,GAAG,CAAC,OAAO;oBACxB,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;oBACtF,YAAY,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC;oBACpD,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG;oBACtB,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,OAAO,EAAE,iCAAiC,GAAG,CAAC,MAAM,EAAE;oBACtD,UAAU,EAAE,MAAM;oBAClB,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;oBACpC,WAAW,EAAE,EAAE;iBAChB,CAAC;gBAEF,OAAO,CAAC,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;gBACnD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,cAAc,CAAC,MAAc;QACnC,gCAAgC;QAChC,IAAI,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACnG,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,cAAc;QACd,MAAM,aAAa,GAAG;YACpB,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;YACzD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW;SACjD,CAAC;QACF,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,mBAAmB;QACnB,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7D,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,qBAAqB;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,WAAW,CAAC,cAAqB,EAAE,QAAyB;QAClE,wCAAwC;QACxC,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,OAAO,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;QAClD,CAAC;QAED,gCAAgC;QAChC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,iBAAiB;QACjB,OAAO,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;IACjD,CAAC;CACF;AAED,eAAe,aAAa,CAAC"}

package/dist/scanners/gitleaks.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Gitleaks Scanner
+ *
+ * Secret detection scanner using Gitleaks CLI
+ * Covers: secret category
+ */
+import { Scanner, ScanTarget, ScannerConfig, ScannerResult, FindingCategory } from '../types.js';
+export declare class GitleaksScanner implements Scanner {
+    name: string;
+    categories: FindingCategory[];
+    isAvailable(): Promise<boolean>;
+    scan(target: ScanTarget, config?: ScannerConfig): Promise<ScannerResult>;
+    private runGitleaks;
+    private transformFindings;
+    private determineSeverity;
+    private redactSecret;
+    private redactSnippet;
+    private getSuggestion;
+}
+export default GitleaksScanner;
+//# sourceMappingURL=gitleaks.d.ts.map

package/dist/scanners/gitleaks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitleaks.d.ts","sourceRoot":"","sources":["../../src/scanners/gitleaks.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EACL,OAAO,EACP,UAAU,EACV,aAAa,EACb,aAAa,EAEb,eAAe,EAGhB,MAAM,aAAa,CAAC;AAyBrB,qBAAa,eAAgB,YAAW,OAAO;IAC7C,IAAI,SAAc;IAClB,UAAU,EAAE,eAAe,EAAE,CAAc;IAErC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAS/B,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;YAoChE,WAAW;IAkCzB,OAAO,CAAC,iBAAiB;IAgCzB,OAAO,CAAC,iBAAiB;IA4BzB,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,aAAa;CAYtB;AAED,eAAe,eAAe,CAAC"}

package/dist/scanners/gitleaks.js

@@ -0,0 +1,158 @@
+/**
+ * Gitleaks Scanner
+ *
+ * Secret detection scanner using Gitleaks CLI
+ * Covers: secret category
+ */
+import { execSync, exec } from 'child_process';
+import { promisify } from 'util';
+const execAsync = promisify(exec);
+export class GitleaksScanner {
+    name = 'gitleaks';
+    categories = ['secret'];
+    async isAvailable() {
+        try {
+            execSync('gitleaks version', { stdio: 'pipe' });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async scan(target, config) {
+        const startTime = Date.now();
+        if (!await this.isAvailable()) {
+            return {
+                scanner: this.name,
+                success: false,
+                error: 'Gitleaks not installed. Install with: brew install gitleaks (or download from GitHub)',
+                findings: [],
+                metrics: { duration: Date.now() - startTime }
+            };
+        }
+        try {
+            const findings = await this.runGitleaks(target);
+            return {
+                scanner: this.name,
+                success: true,
+                findings,
+                metrics: {
+                    duration: Date.now() - startTime,
+                    filesScanned: findings.length > 0 ? new Set(findings.map(f => f.file)).size : 0
+                }
+            };
+        }
+        catch (error) {
+            return {
+                scanner: this.name,
+                success: false,
+                error: error instanceof Error ? error.message : String(error),
+                findings: [],
+                metrics: { duration: Date.now() - startTime }
+            };
+        }
+    }
+    async runGitleaks(target) {
+        // Use 'dir' mode for scanning directories, 'git' mode for git repos
+        const scanMode = target.git ? 'git' : 'dir';
+        const cmd = `gitleaks ${scanMode} --source "${target.path}" --report-format json --report-path /dev/stdout --no-banner 2>/dev/null || true`;
+        try {
+            const { stdout } = await execAsync(cmd, {
+                timeout: 120000, // 2 minutes
+                maxBuffer: 10 * 1024 * 1024
+            });
+            if (!stdout.trim() || stdout.trim() === '[]') {
+                return [];
+            }
+            const findings = JSON.parse(stdout);
+            return this.transformFindings(findings);
+        }
+        catch (error) {
+            // Try to parse output even on error
+            if (error.stdout) {
+                try {
+                    const findings = JSON.parse(error.stdout);
+                    return this.transformFindings(findings);
+                }
+                catch {
+                    // Empty or invalid output - no findings
+                    return [];
+                }
+            }
+            throw error;
+        }
+    }
+    transformFindings(gitleaksFindings) {
+        return gitleaksFindings.map(gf => {
+            const severity = this.determineSeverity(gf);
+            // Redact the actual secret value
+            const redactedSecret = this.redactSecret(gf.Secret);
+            const finding = {
+                id: `gitleaks-${gf.Fingerprint}`,
+                source: this.name,
+                severity,
+                category: 'secret',
+                file: gf.File,
+                line: gf.StartLine,
+                endLine: gf.EndLine,
+                column: gf.StartColumn,
+                endColumn: gf.EndColumn,
+                title: `Exposed Secret: ${gf.RuleID}`,
+                description: `${gf.Description}\n\nRedacted value: ${redactedSecret}`,
+                snippet: gf.Match ? this.redactSnippet(gf.Match, gf.Secret) : undefined,
+                suggestion: this.getSuggestion(gf.RuleID),
+                fixAvailable: true,
+                autoFixable: false, // Secrets require manual rotation
+                ruleId: gf.RuleID,
+                confidence: gf.Entropy > 4 ? 'high' : 'medium',
+                fingerprint: gf.Fingerprint
+            };
+            return finding;
+        });
+    }
+    determineSeverity(gf) {
+        const ruleId = gf.RuleID.toLowerCase();
+        // Critical: Production/API keys, AWS credentials
+        if (ruleId.includes('aws') ||
+            ruleId.includes('private-key') ||
+            ruleId.includes('api-key') ||
+            ruleId.includes('stripe') ||
+            ruleId.includes('github-token')) {
+            return 'critical';
+        }
+        // High: Database credentials, generic secrets
+        if (ruleId.includes('password') ||
+            ruleId.includes('database') ||
+            ruleId.includes('jwt') ||
+            ruleId.includes('oauth')) {
+            return 'high';
+        }
+        // Medium: Other secrets
+        return 'high'; // Default to high for any exposed secret
+    }
+    redactSecret(secret) {
+        if (secret.length <= 8) {
+            return '*'.repeat(secret.length);
+        }
+        const visible = Math.min(4, Math.floor(secret.length / 4));
+        return secret.slice(0, visible) + '*'.repeat(secret.length - visible * 2) + secret.slice(-visible);
+    }
+    redactSnippet(snippet, secret) {
+        if (!secret)
+            return snippet;
+        return snippet.replace(secret, this.redactSecret(secret));
+    }
+    getSuggestion(ruleId) {
+        const suggestions = {
+            'aws-access-key-id': 'Rotate the AWS access key immediately and use environment variables or AWS Secrets Manager',
+            'aws-secret-access-key': 'Rotate the AWS secret key immediately and use environment variables or AWS Secrets Manager',
+            'github-token': 'Revoke this GitHub token and generate a new one with minimum required permissions',
+            'generic-api-key': 'Rotate this API key and store securely using environment variables or a secrets manager',
+            'private-key': 'This private key is exposed. Generate a new key pair and revoke the compromised one',
+            'jwt-base64': 'Rotate the JWT signing secret and invalidate any tokens signed with the old secret'
+        };
+        return suggestions[ruleId] || 'Rotate this credential immediately and store it securely using environment variables or a secrets manager';
+    }
+}
+export default GitleaksScanner;
+//# sourceMappingURL=gitleaks.js.map

package/dist/scanners/gitleaks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitleaks.js","sourceRoot":"","sources":["../../src/scanners/gitleaks.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAYjC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAuBlC,MAAM,OAAO,eAAe;IAC1B,IAAI,GAAG,UAAU,CAAC;IAClB,UAAU,GAAsB,CAAC,QAAQ,CAAC,CAAC;IAE3C,KAAK,CAAC,WAAW;QACf,IAAI,CAAC;YACH,QAAQ,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAkB,EAAE,MAAsB;QACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YAC9B,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,IAAI;gBAClB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,uFAAuF;gBAC9F,QAAQ,EAAE,EAAE;gBACZ,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE;aAC9C,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAEhD,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,IAAI;gBAClB,OAAO,EAAE,IAAI;gBACb,QAAQ;gBACR,OAAO,EAAE;oBACP,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBAChC,YAAY,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;iBAChF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,IAAI;gBAClB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,QAAQ,EAAE,EAAE;gBACZ,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE;aAC9C,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,MAAkB;QAC1C,oEAAoE;QACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAE5C,MAAM,GAAG,GAAG,YAAY,QAAQ,cAAc,MAAM,CAAC,IAAI,kFAAkF,CAAC;QAE5I,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;gBACtC,OAAO,EAAE,MAAM,EAAE,YAAY;gBAC7B,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC5B,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAC7C,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,QAAQ,GAAsB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACvD,OAAO,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAE1C,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,oCAAoC;YACpC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAsB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC7D,OAAO,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;gBAC1C,CAAC;gBAAC,MAAM,CAAC;oBACP,wCAAwC;oBACxC,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,gBAAmC;QAC3D,OAAO,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;YAE5C,iCAAiC;YACjC,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;YAEpD,MAAM,OAAO,GAAY;gBACvB,EAAE,EAAE,YAAY,EAAE,CAAC,WAAW,EAAE;gBAChC,MAAM,EAAE,IAAI,CAAC,IAAI;gBACjB,QAAQ;gBACR,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,IAAI,EAAE,EAAE,CAAC,SAAS;gBAClB,OAAO,EAAE,EAAE,CAAC,OAAO;gBACnB,MAAM,EAAE,EAAE,CAAC,WAAW;gBACtB,SAAS,EAAE,EAAE,CAAC,SAAS;gBACvB,KAAK,EAAE,mBAAmB,EAAE,CAAC,MAAM,EAAE;gBACrC,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW,uBAAuB,cAAc,EAAE;gBACrE,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;gBACvE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC;gBACzC,YAAY,EAAE,IAAI;gBAClB,WAAW,EAAE,KAAK,EAAE,kCAAkC;gBACtD,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;gBAC9C,WAAW,EAAE,EAAE,CAAC,WAAW;aAC5B,CAAC;YAEF,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,iBAAiB,CAAC,EAAmB;QAC3C,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAEvC,iDAAiD;QACjD,IACE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtB,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC9B,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC1B,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzB,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAC/B,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,8CAA8C;QAC9C,IACE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC3B,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC3B,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EACxB,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,wBAAwB;QACxB,OAAO,MAAM,CAAC,CAAC,yCAAyC;IAC1D,CAAC;IAEO,YAAY,CAAC,MAAc;QACjC,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,OAAO,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;IACrG,CAAC;IAEO,aAAa,CAAC,OAAe,EAAE,MAAc;QACnD,IAAI,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC;QAC5B,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,CAAC;IAEO,aAAa,CAAC,MAAc;QAClC,MAAM,WAAW,GAA2B;YAC1C,mBAAmB,EAAE,4FAA4F;YACjH,uBAAuB,EAAE,4FAA4F;YACrH,cAAc,EAAE,mFAAmF;YACnG,iBAAiB,EAAE,yFAAyF;YAC5G,aAAa,EAAE,qFAAqF;YACpG,YAAY,EAAE,oFAAoF;SACnG,CAAC;QAEF,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,2GAA2G,CAAC;IAC5I,CAAC;CACF;AAED,eAAe,eAAe,CAAC"}

package/dist/scanners/index.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Scanner Index
+ *
+ * Exports all available scanners
+ */
+export { SemgrepScanner } from './semgrep.js';
+export { GitleaksScanner } from './gitleaks.js';
+export { NpmAuditScanner } from './npm-audit.js';
+export { ESLintScanner } from './eslint.js';
+export { ComplexityScanner } from './complexity.js';
+import type { Scanner } from '../types.js';
+/**
+ * Get all available scanners
+ * Ordered by priority (security first)
+ */
+export declare function getAllScanners(): Scanner[];
+/**
+ * Get scanners by category
+ */
+export declare function getScannersByCategory(categories: string[]): Scanner[];
+/**
+ * Scanner coverage matrix for documentation
+ */
+export declare const SCANNER_COVERAGE: {
+    semgrep: {
+        categories: string[];
+        description: string;
+        languages: string[];
+        requirements: string;
+    };
+    gitleaks: {
+        categories: string[];
+        description: string;
+        languages: string[];
+        requirements: string;
+    };
+    'npm-audit': {
+        categories: string[];
+        description: string;
+        languages: string[];
+        requirements: string;
+    };
+    eslint: {
+        categories: string[];
+        description: string;
+        languages: string[];
+        requirements: string;
+    };
+    complexity: {
+        categories: string[];
+        description: string;
+        languages: string[];
+        requirements: string;
+    };
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/scanners/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/scanners/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAOpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C;;;GAGG;AACH,wBAAgB,cAAc,IAAI,OAAO,EAAE,CAQ1C;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAKrE;AAED;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+B5B,CAAC"}

package/dist/scanners/index.js

@@ -0,0 +1,71 @@
+/**
+ * Scanner Index
+ *
+ * Exports all available scanners
+ */
+export { SemgrepScanner } from './semgrep.js';
+export { GitleaksScanner } from './gitleaks.js';
+export { NpmAuditScanner } from './npm-audit.js';
+export { ESLintScanner } from './eslint.js';
+export { ComplexityScanner } from './complexity.js';
+import { SemgrepScanner } from './semgrep.js';
+import { GitleaksScanner } from './gitleaks.js';
+import { NpmAuditScanner } from './npm-audit.js';
+import { ESLintScanner } from './eslint.js';
+import { ComplexityScanner } from './complexity.js';
+/**
+ * Get all available scanners
+ * Ordered by priority (security first)
+ */
+export function getAllScanners() {
+    return [
+        new SemgrepScanner(), // Security + Quality (SAST)
+        new GitleaksScanner(), // Secrets
+        new NpmAuditScanner(), // Dependencies (SCA)
+        new ESLintScanner(), // Quality + Style
+        new ComplexityScanner() // Complexity + Code Smells
+    ];
+}
+/**
+ * Get scanners by category
+ */
+export function getScannersByCategory(categories) {
+    const allScanners = getAllScanners();
+    return allScanners.filter(scanner => scanner.categories.some(cat => categories.includes(cat)));
+}
+/**
+ * Scanner coverage matrix for documentation
+ */
+export const SCANNER_COVERAGE = {
+    semgrep: {
+        categories: ['security', 'quality', 'style'],
+        description: 'Static Application Security Testing (SAST)',
+        languages: ['JavaScript', 'TypeScript', 'Python', 'Go', 'Ruby', 'Java', 'C', 'PHP', 'and more'],
+        requirements: 'semgrep CLI'
+    },
+    gitleaks: {
+        categories: ['secret'],
+        description: 'Secret and credential detection',
+        languages: ['All (content-based scanning)'],
+        requirements: 'gitleaks CLI'
+    },
+    'npm-audit': {
+        categories: ['dependency'],
+        description: 'Dependency vulnerability scanning',
+        languages: ['JavaScript', 'TypeScript (Node.js)'],
+        requirements: 'npm'
+    },
+    eslint: {
+        categories: ['quality', 'style', 'security'],
+        description: 'JavaScript/TypeScript linting',
+        languages: ['JavaScript', 'TypeScript'],
+        requirements: 'eslint (project dependency)'
+    },
+    complexity: {
+        categories: ['complexity', 'quality'],
+        description: 'Code complexity and smell detection',
+        languages: ['JavaScript', 'TypeScript', 'Python', 'Ruby', 'PHP', 'Java', 'C#', 'Go'],
+        requirements: 'None (built-in)'
+    }
+};
+//# sourceMappingURL=index.js.map

package/dist/scanners/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/scanners/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGpD;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO;QACL,IAAI,cAAc,EAAE,EAAO,4BAA4B;QACvD,IAAI,eAAe,EAAE,EAAM,UAAU;QACrC,IAAI,eAAe,EAAE,EAAM,qBAAqB;QAChD,IAAI,aAAa,EAAE,EAAQ,kBAAkB;QAC7C,IAAI,iBAAiB,EAAE,CAAI,2BAA2B;KACvD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,UAAoB;IACxD,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,OAAO,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAClC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CACzD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,OAAO,EAAE;QACP,UAAU,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC;QAC5C,WAAW,EAAE,4CAA4C;QACzD,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC;QAC/F,YAAY,EAAE,aAAa;KAC5B;IACD,QAAQ,EAAE;QACR,UAAU,EAAE,CAAC,QAAQ,CAAC;QACtB,WAAW,EAAE,iCAAiC;QAC9C,SAAS,EAAE,CAAC,8BAA8B,CAAC;QAC3C,YAAY,EAAE,cAAc;KAC7B;IACD,WAAW,EAAE;QACX,UAAU,EAAE,CAAC,YAAY,CAAC;QAC1B,WAAW,EAAE,mCAAmC;QAChD,SAAS,EAAE,CAAC,YAAY,EAAE,sBAAsB,CAAC;QACjD,YAAY,EAAE,KAAK;KACpB;IACD,MAAM,EAAE;QACN,UAAU,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC;QAC5C,WAAW,EAAE,+BAA+B;QAC5C,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;QACvC,YAAY,EAAE,6BAA6B;KAC5C;IACD,UAAU,EAAE;QACV,UAAU,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;QACrC,WAAW,EAAE,qCAAqC;QAClD,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC;QACpF,YAAY,EAAE,iBAAiB;KAChC;CACF,CAAC"}

package/dist/scanners/npm-audit.d.ts

@@ -0,0 +1,19 @@
+/**
+ * NPM Audit Scanner
+ *
+ * Dependency vulnerability scanning for JavaScript/Node.js projects
+ * Covers: dependency category
+ */
+import { Scanner, ScanTarget, ScannerConfig, ScannerResult, FindingCategory } from '../types.js';
+export declare class NpmAuditScanner implements Scanner {
+    name: string;
+    categories: FindingCategory[];
+    isAvailable(): Promise<boolean>;
+    scan(target: ScanTarget, config?: ScannerConfig): Promise<ScannerResult>;
+    private runNpmAudit;
+    private transformFindings;
+    private mapSeverity;
+    private getFixInfo;
+}
+export default NpmAuditScanner;
+//# sourceMappingURL=npm-audit.d.ts.map

package/dist/scanners/npm-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-audit.d.ts","sourceRoot":"","sources":["../../src/scanners/npm-audit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,EACL,OAAO,EACP,UAAU,EACV,aAAa,EACb,aAAa,EAEb,eAAe,EAGhB,MAAM,aAAa,CAAC;AAuDrB,qBAAa,eAAgB,YAAW,OAAO;IAC7C,IAAI,SAAe;IACnB,UAAU,EAAE,eAAe,EAAE,CAAkB;IAEzC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAS/B,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;YA+ChE,WAAW;IA8BzB,OAAO,CAAC,iBAAiB;IA2CzB,OAAO,CAAC,WAAW;IAWnB,OAAO,CAAC,UAAU;CAuCnB;AAED,eAAe,eAAe,CAAC"}