@defai.digital/ax-cli 3.4.6 → 3.5.4

package/dist/analyzers/security/detectors/weak-crypto-detector.js

@@ -0,0 +1,104 @@
+/**
+ * Weak Cryptography Detector
+ *
+ * Detects use of weak or deprecated cryptographic algorithms
+ * OWASP A02:2021 - Cryptographic Failures
+ */
+import { BaseSecurityDetector } from '../base-detector.js';
+export class WeakCryptoDetector extends BaseSecurityDetector {
+    constructor() {
+        super({
+            id: 'weak-cryptography',
+            name: 'Weak Cryptography',
+            description: 'Detects use of weak or deprecated cryptographic algorithms',
+            severity: 'high',
+            owaspCategory: 'A02:2021 - Cryptographic Failures',
+            cweId: 'CWE-327',
+        });
+    }
+    async scan(content, filePath) {
+        if (!this.appliesTo(filePath)) {
+            return [];
+        }
+        const vulnerabilities = [];
+        // Pattern 1: Weak hashing algorithms
+        const weakHashAlgorithms = ['md5', 'sha1', 'md4', 'md2'];
+        for (const algorithm of weakHashAlgorithms) {
+            const pattern = new RegExp(`createHash\\(['"\`]${algorithm}['"\`]\\)`, 'gi');
+            let match;
+            while ((match = pattern.exec(content)) !== null) {
+                if (this.shouldIgnore(content, match.index)) {
+                    continue;
+                }
+                const line = this.findLineNumber(content, match.index);
+                const code = this.extractCodeSnippet(content, match.index, 1);
+                vulnerabilities.push(this.createVulnerability(filePath, line, code, `Weak hashing algorithm ${algorithm.toUpperCase()} detected`, `Use SHA-256, SHA-384, or SHA-512 instead of ${algorithm.toUpperCase()}`, [
+                    'https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/',
+                    'https://cheatsheetseries.owasp.org/cheatsheets/Cryptographic_Storage_Cheat_Sheet.html',
+                ]));
+            }
+        }
+        // Pattern 2: Weak cipher algorithms
+        const weakCipherAlgorithms = ['des', 'des-ede', 'des-ede-cbc', 'des3', 'rc4', 'rc2', 'blowfish'];
+        for (const algorithm of weakCipherAlgorithms) {
+            const pattern = new RegExp(`createCipher(?:iv)?\\(['"\`]${algorithm}['"\`]`, 'gi');
+            let match;
+            while ((match = pattern.exec(content)) !== null) {
+                if (this.shouldIgnore(content, match.index)) {
+                    continue;
+                }
+                const line = this.findLineNumber(content, match.index);
+                const code = this.extractCodeSnippet(content, match.index, 1);
+                vulnerabilities.push(this.createVulnerability(filePath, line, code, `Weak cipher algorithm ${algorithm.toUpperCase()} detected`, 'Use AES-256-GCM or ChaCha20-Poly1305 for encryption', [
+                    'https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/',
+                ]));
+            }
+        }
+        // Pattern 3: ECB mode (insecure block cipher mode)
+        const ecbPattern = /createCipher(?:iv)?\(['"`][^'"`]*-ecb['"`]/gi;
+        let match;
+        while ((match = ecbPattern.exec(content)) !== null) {
+            if (this.shouldIgnore(content, match.index)) {
+                continue;
+            }
+            const line = this.findLineNumber(content, match.index);
+            const code = this.extractCodeSnippet(content, match.index, 1);
+            vulnerabilities.push(this.createVulnerability(filePath, line, code, 'ECB mode is insecure and should not be used', 'Use GCM or CBC mode with proper IV instead of ECB', [
+                'https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/',
+            ]));
+        }
+        // Pattern 4: Deprecated createCipher (should use createCipheriv)
+        const createCipherPattern = /createCipher\(/g;
+        while ((match = createCipherPattern.exec(content)) !== null) {
+            if (this.shouldIgnore(content, match.index)) {
+                continue;
+            }
+            // Check if it's not createCipheriv
+            const afterMatch = content.substring(match.index, match.index + 20);
+            if (!afterMatch.includes('createCipheriv')) {
+                const line = this.findLineNumber(content, match.index);
+                const code = this.extractCodeSnippet(content, match.index, 1);
+                vulnerabilities.push(this.createVulnerability(filePath, line, code, 'createCipher is deprecated and insecure', 'Use createCipheriv with a random IV instead', [
+                    'https://nodejs.org/api/crypto.html#cryptocreatecipherivalgorithm-key-iv-options',
+                ]));
+            }
+        }
+        // Pattern 5: Small RSA key sizes
+        const rsaKeyPattern = /(?:modulusLength|keySize)['"\s:]*(\d+)/gi;
+        while ((match = rsaKeyPattern.exec(content)) !== null) {
+            if (this.shouldIgnore(content, match.index)) {
+                continue;
+            }
+            const keySize = parseInt(match[1], 10);
+            if (keySize < 2048) {
+                const line = this.findLineNumber(content, match.index);
+                const code = this.extractCodeSnippet(content, match.index, 1);
+                vulnerabilities.push(this.createVulnerability(filePath, line, code, `RSA key size of ${keySize} bits is too small`, 'Use at least 2048 bits for RSA keys, preferably 4096 bits', [
+                    'https://cheatsheetseries.owasp.org/cheatsheets/Cryptographic_Storage_Cheat_Sheet.html',
+                ]));
+            }
+        }
+        return vulnerabilities;
+    }
+}
+//# sourceMappingURL=weak-crypto-detector.js.map

package/dist/analyzers/security/detectors/weak-crypto-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"weak-crypto-detector.js","sourceRoot":"","sources":["../../../../src/analyzers/security/detectors/weak-crypto-detector.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAG3D,MAAM,OAAO,kBAAmB,SAAQ,oBAAoB;IAC1D;QACE,KAAK,CAAC;YACJ,EAAE,EAAE,mBAAmB;YACvB,IAAI,EAAE,mBAAmB;YACzB,WAAW,EAAE,4DAA4D;YACzE,QAAQ,EAAE,MAAM;YAChB,aAAa,EAAE,mCAAmC;YAClD,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,QAAgB;QAC1C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,eAAe,GAA4B,EAAE,CAAC;QAEpD,qCAAqC;QACrC,MAAM,kBAAkB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACzD,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,sBAAsB,SAAS,WAAW,EAAE,IAAI,CAAC,CAAC;YAC7E,IAAI,KAAK,CAAC;YAEV,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAChD,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC5C,SAAS;gBACX,CAAC;gBAED,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBACvD,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBAE9D,eAAe,CAAC,IAAI,CAClB,IAAI,CAAC,mBAAmB,CACtB,QAAQ,EACR,IAAI,EACJ,IAAI,EACJ,0BAA0B,SAAS,CAAC,WAAW,EAAE,WAAW,EAC5D,+CAA+C,SAAS,CAAC,WAAW,EAAE,EAAE,EACxE;oBACE,sIAAsI;oBACtI,uFAAuF;iBACxF,CACF,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,oCAAoC;QACpC,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACjG,KAAK,MAAM,SAAS,IAAI,oBAAoB,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,+BAA+B,SAAS,QAAQ,EAAE,IAAI,CAAC,CAAC;YACnF,IAAI,KAAK,CAAC;YAEV,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAChD,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC5C,SAAS;gBACX,CAAC;gBAED,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBACvD,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBAE9D,eAAe,CAAC,IAAI,CAClB,IAAI,CAAC,mBAAmB,CACtB,QAAQ,EACR,IAAI,EACJ,IAAI,EACJ,yBAAyB,SAAS,CAAC,WAAW,EAAE,WAAW,EAC3D,qDAAqD,EACrD;oBACE,sIAAsI;iBACvI,CACF,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,mDAAmD;QACnD,MAAM,UAAU,GAAG,8CAA8C,CAAC;QAClE,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACnD,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5C,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAE9D,eAAe,CAAC,IAAI,CAClB,IAAI,CAAC,mBAAmB,CACtB,QAAQ,EACR,IAAI,EACJ,IAAI,EACJ,6CAA6C,EAC7C,mDAAmD,EACnD;gBACE,sIAAsI;aACvI,CACF,CACF,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;QAC9C,OAAO,CAAC,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5D,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5C,SAAS;YACX,CAAC;YAED,mCAAmC;YACnC,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;YACpE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBACvD,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBAE9D,eAAe,CAAC,IAAI,CAClB,IAAI,CAAC,mBAAmB,CACtB,QAAQ,EACR,IAAI,EACJ,IAAI,EACJ,yCAAyC,EACzC,6CAA6C,EAC7C;oBACE,iFAAiF;iBAClF,CACF,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,MAAM,aAAa,GAAG,0CAA0C,CAAC;QACjE,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACtD,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5C,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvC,IAAI,OAAO,GAAG,IAAI,EAAE,CAAC;gBACnB,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBACvD,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBAE9D,eAAe,CAAC,IAAI,CAClB,IAAI,CAAC,mBAAmB,CACtB,QAAQ,EACR,IAAI,EACJ,IAAI,EACJ,mBAAmB,OAAO,oBAAoB,EAC9C,2DAA2D,EAC3D;oBACE,uFAAuF;iBACxF,CACF,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;CACF"}

package/dist/analyzers/security/detectors/xss-detector.d.ts

@@ -0,0 +1,12 @@
+/**
+ * XSS (Cross-Site Scripting) Detector
+ *
+ * Detects potential XSS vulnerabilities
+ * OWASP A03:2021 - Injection
+ */
+import { BaseSecurityDetector } from '../base-detector.js';
+import type { SecurityVulnerability } from '../types.js';
+export declare class XSSDetector extends BaseSecurityDetector {
+    constructor();
+    scan(content: string, filePath: string): Promise<SecurityVulnerability[]>;
+}

package/dist/analyzers/security/detectors/xss-detector.js

@@ -0,0 +1,90 @@
+/**
+ * XSS (Cross-Site Scripting) Detector
+ *
+ * Detects potential XSS vulnerabilities
+ * OWASP A03:2021 - Injection
+ */
+import { BaseSecurityDetector } from '../base-detector.js';
+export class XSSDetector extends BaseSecurityDetector {
+    constructor() {
+        super({
+            id: 'xss-vulnerability',
+            name: 'Cross-Site Scripting (XSS)',
+            description: 'Detects potential XSS vulnerabilities',
+            severity: 'high',
+            owaspCategory: 'A03:2021 - Injection',
+            cweId: 'CWE-79',
+        });
+    }
+    async scan(content, filePath) {
+        if (!this.appliesTo(filePath)) {
+            return [];
+        }
+        const vulnerabilities = [];
+        // Pattern 1: dangerouslySetInnerHTML in React
+        const dangerouslySetInnerHTMLPattern = /dangerouslySetInnerHTML\s*=\s*\{\{?\s*__html:\s*(?!['"`])[^}]+\}\}?/gi;
+        let match;
+        while ((match = dangerouslySetInnerHTMLPattern.exec(content)) !== null) {
+            if (this.shouldIgnore(content, match.index)) {
+                continue;
+            }
+            const line = this.findLineNumber(content, match.index);
+            const code = this.extractCodeSnippet(content, match.index, 1);
+            vulnerabilities.push(this.createVulnerability(filePath, line, code, 'Using dangerouslySetInnerHTML with unsanitized content may lead to XSS', 'Sanitize HTML content using a library like DOMPurify before rendering', [
+                'https://owasp.org/www-community/attacks/xss/',
+                'https://react.dev/reference/react-dom/components/common#dangerously-setting-the-inner-html',
+            ]));
+        }
+        // Pattern 2: innerHTML assignment
+        const innerHTMLPattern = /\.innerHTML\s*=\s*(?!['"`])[^;]+/gi;
+        while ((match = innerHTMLPattern.exec(content)) !== null) {
+            if (this.shouldIgnore(content, match.index)) {
+                continue;
+            }
+            const line = this.findLineNumber(content, match.index);
+            const code = this.extractCodeSnippet(content, match.index, 1);
+            vulnerabilities.push(this.createVulnerability(filePath, line, code, 'Direct innerHTML assignment with dynamic content may lead to XSS', 'Use textContent for text or sanitize HTML before assignment', [
+                'https://owasp.org/www-community/attacks/xss/',
+                'https://cheatsheetseries.owasp.org/cheatsheets/DOM_based_XSS_Prevention_Cheat_Sheet.html',
+            ]));
+        }
+        // Pattern 3: document.write with user input
+        const documentWritePattern = /document\.write\([^)]*(?:req\.|params\.|input|user|query)/gi;
+        while ((match = documentWritePattern.exec(content)) !== null) {
+            if (this.shouldIgnore(content, match.index)) {
+                continue;
+            }
+            const line = this.findLineNumber(content, match.index);
+            const code = this.extractCodeSnippet(content, match.index, 1);
+            vulnerabilities.push(this.createVulnerability(filePath, line, code, 'document.write with user input may lead to XSS', 'Avoid document.write. Use DOM manipulation methods and sanitize input', [
+                'https://owasp.org/www-community/attacks/xss/',
+            ]));
+        }
+        // Pattern 4: eval() with user input
+        const evalPattern = /eval\([^)]*(?:req\.|params\.|input|user|query)/gi;
+        while ((match = evalPattern.exec(content)) !== null) {
+            if (this.shouldIgnore(content, match.index)) {
+                continue;
+            }
+            const line = this.findLineNumber(content, match.index);
+            const code = this.extractCodeSnippet(content, match.index, 1);
+            vulnerabilities.push(this.createVulnerability(filePath, line, code, 'eval() with user input is extremely dangerous and may lead to code injection', 'Never use eval() with user input. Find alternative solutions', [
+                'https://owasp.org/www-community/attacks/Code_Injection',
+            ]));
+        }
+        // Pattern 5: Unescaped template rendering (Express, etc.)
+        const unescapedRenderPattern = /res\.send\([^)]*\$\{(?:req\.|params\.|input|user|query)/gi;
+        while ((match = unescapedRenderPattern.exec(content)) !== null) {
+            if (this.shouldIgnore(content, match.index)) {
+                continue;
+            }
+            const line = this.findLineNumber(content, match.index);
+            const code = this.extractCodeSnippet(content, match.index, 1);
+            vulnerabilities.push(this.createVulnerability(filePath, line, code, 'Sending unescaped user input in response may lead to XSS', 'Escape HTML entities or use a templating engine with auto-escaping', [
+                'https://owasp.org/www-community/attacks/xss/',
+            ]));
+        }
+        return vulnerabilities;
+    }
+}
+//# sourceMappingURL=xss-detector.js.map

package/dist/analyzers/security/detectors/xss-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xss-detector.js","sourceRoot":"","sources":["../../../../src/analyzers/security/detectors/xss-detector.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAG3D,MAAM,OAAO,WAAY,SAAQ,oBAAoB;IACnD;QACE,KAAK,CAAC;YACJ,EAAE,EAAE,mBAAmB;YACvB,IAAI,EAAE,4BAA4B;YAClC,WAAW,EAAE,uCAAuC;YACpD,QAAQ,EAAE,MAAM;YAChB,aAAa,EAAE,sBAAsB;YACrC,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,QAAgB;QAC1C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,eAAe,GAA4B,EAAE,CAAC;QAEpD,8CAA8C;QAC9C,MAAM,8BAA8B,GAAG,uEAAuE,CAAC;QAC/G,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACvE,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5C,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAE9D,eAAe,CAAC,IAAI,CAClB,IAAI,CAAC,mBAAmB,CACtB,QAAQ,EACR,IAAI,EACJ,IAAI,EACJ,wEAAwE,EACxE,uEAAuE,EACvE;gBACE,8CAA8C;gBAC9C,4FAA4F;aAC7F,CACF,CACF,CAAC;QACJ,CAAC;QAED,kCAAkC;QAClC,MAAM,gBAAgB,GAAG,oCAAoC,CAAC;QAC9D,OAAO,CAAC,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACzD,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5C,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAE9D,eAAe,CAAC,IAAI,CAClB,IAAI,CAAC,mBAAmB,CACtB,QAAQ,EACR,IAAI,EACJ,IAAI,EACJ,kEAAkE,EAClE,6DAA6D,EAC7D;gBACE,8CAA8C;gBAC9C,0FAA0F;aAC3F,CACF,CACF,CAAC;QACJ,CAAC;QAED,4CAA4C;QAC5C,MAAM,oBAAoB,GAAG,6DAA6D,CAAC;QAC3F,OAAO,CAAC,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7D,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5C,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAE9D,eAAe,CAAC,IAAI,CAClB,IAAI,CAAC,mBAAmB,CACtB,QAAQ,EACR,IAAI,EACJ,IAAI,EACJ,gDAAgD,EAChD,uEAAuE,EACvE;gBACE,8CAA8C;aAC/C,CACF,CACF,CAAC;QACJ,CAAC;QAED,oCAAoC;QACpC,MAAM,WAAW,GAAG,kDAAkD,CAAC;QACvE,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5C,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAE9D,eAAe,CAAC,IAAI,CAClB,IAAI,CAAC,mBAAmB,CACtB,QAAQ,EACR,IAAI,EACJ,IAAI,EACJ,8EAA8E,EAC9E,8DAA8D,EAC9D;gBACE,wDAAwD;aACzD,CACF,CACF,CAAC;QACJ,CAAC;QAED,0DAA0D;QAC1D,MAAM,sBAAsB,GAAG,2DAA2D,CAAC;QAC3F,OAAO,CAAC,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/D,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5C,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAE9D,eAAe,CAAC,IAAI,CAClB,IAAI,CAAC,mBAAmB,CACtB,QAAQ,EACR,IAAI,EACJ,IAAI,EACJ,0DAA0D,EAC1D,oEAAoE,EACpE;gBACE,8CAA8C;aAC/C,CACF,CACF,CAAC;QACJ,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;CACF"}

package/dist/analyzers/security/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Security Analyzer Module
+ *
+ * Provides security vulnerability detection with OWASP-aligned detectors
+ */
+export { SecurityAnalyzer } from './security-analyzer.js';
+export { BaseSecurityDetector } from './base-detector.js';
+export * from './types.js';
+export { SQLInjectionDetector } from './detectors/sql-injection-detector.js';
+export { XSSDetector } from './detectors/xss-detector.js';
+export { HardcodedSecretsDetector } from './detectors/hardcoded-secrets-detector.js';
+export { InsecureRandomDetector } from './detectors/insecure-random-detector.js';
+export { PathTraversalDetector } from './detectors/path-traversal-detector.js';
+export { CommandInjectionDetector } from './detectors/command-injection-detector.js';
+export { WeakCryptoDetector } from './detectors/weak-crypto-detector.js';
+export { InsecureDeserializationDetector } from './detectors/insecure-deserialization-detector.js';

package/dist/analyzers/security/index.js

@@ -0,0 +1,18 @@
+/**
+ * Security Analyzer Module
+ *
+ * Provides security vulnerability detection with OWASP-aligned detectors
+ */
+export { SecurityAnalyzer } from './security-analyzer.js';
+export { BaseSecurityDetector } from './base-detector.js';
+export * from './types.js';
+// Export all detectors
+export { SQLInjectionDetector } from './detectors/sql-injection-detector.js';
+export { XSSDetector } from './detectors/xss-detector.js';
+export { HardcodedSecretsDetector } from './detectors/hardcoded-secrets-detector.js';
+export { InsecureRandomDetector } from './detectors/insecure-random-detector.js';
+export { PathTraversalDetector } from './detectors/path-traversal-detector.js';
+export { CommandInjectionDetector } from './detectors/command-injection-detector.js';
+export { WeakCryptoDetector } from './detectors/weak-crypto-detector.js';
+export { InsecureDeserializationDetector } from './detectors/insecure-deserialization-detector.js';
+//# sourceMappingURL=index.js.map

package/dist/analyzers/security/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/analyzers/security/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,cAAc,YAAY,CAAC;AAE3B,uBAAuB;AACvB,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,+BAA+B,EAAE,MAAM,kDAAkD,CAAC"}

package/dist/analyzers/security/security-analyzer.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Security Analyzer
+ *
+ * Main orchestrator for security vulnerability detection
+ */
+import type { SecurityDetector, FileSecurityResult, BatchSecurityResult, SecurityScanOptions } from './types.js';
+export declare class SecurityAnalyzer {
+    private detectors;
+    constructor();
+    /**
+     * Register all default security detectors
+     */
+    private registerDefaultDetectors;
+    /**
+     * Scan a single file for security vulnerabilities
+     */
+    scanFile(filePath: string, options?: SecurityScanOptions): Promise<FileSecurityResult>;
+    /**
+     * Scan multiple files in batch
+     */
+    scanBatch(files: string[], options?: SecurityScanOptions): Promise<BatchSecurityResult>;
+    /**
+     * Scan directory with pattern
+     */
+    scanDirectory(directory: string, pattern?: string, options?: SecurityScanOptions): Promise<BatchSecurityResult>;
+    /**
+     * Calculate risk score for a file based on vulnerabilities
+     */
+    private calculateRiskScore;
+    /**
+     * Get list of all registered detectors
+     */
+    getDetectors(): SecurityDetector[];
+    /**
+     * Get detector by ID
+     */
+    getDetector(id: string): SecurityDetector | undefined;
+}

package/dist/analyzers/security/security-analyzer.js

@@ -0,0 +1,215 @@
+/**
+ * Security Analyzer
+ *
+ * Main orchestrator for security vulnerability detection
+ */
+import { promises as fs } from 'fs';
+import { glob } from 'glob';
+// Import all detectors
+import { SQLInjectionDetector } from './detectors/sql-injection-detector.js';
+import { XSSDetector } from './detectors/xss-detector.js';
+import { HardcodedSecretsDetector } from './detectors/hardcoded-secrets-detector.js';
+import { InsecureRandomDetector } from './detectors/insecure-random-detector.js';
+import { PathTraversalDetector } from './detectors/path-traversal-detector.js';
+import { CommandInjectionDetector } from './detectors/command-injection-detector.js';
+import { WeakCryptoDetector } from './detectors/weak-crypto-detector.js';
+import { InsecureDeserializationDetector } from './detectors/insecure-deserialization-detector.js';
+export class SecurityAnalyzer {
+    detectors;
+    constructor() {
+        this.detectors = new Map();
+        this.registerDefaultDetectors();
+    }
+    /**
+     * Register all default security detectors
+     */
+    registerDefaultDetectors() {
+        const detectors = [
+            new SQLInjectionDetector(),
+            new XSSDetector(),
+            new HardcodedSecretsDetector(),
+            new InsecureRandomDetector(),
+            new PathTraversalDetector(),
+            new CommandInjectionDetector(),
+            new WeakCryptoDetector(),
+            new InsecureDeserializationDetector(),
+        ];
+        for (const detector of detectors) {
+            this.detectors.set(detector.id, detector);
+        }
+    }
+    /**
+     * Scan a single file for security vulnerabilities
+     */
+    async scanFile(filePath, options = {}) {
+        const startTime = Date.now();
+        try {
+            // Read file content
+            const content = await fs.readFile(filePath, 'utf-8');
+            // Check file size limit
+            const maxFileSize = options.maxFileSize || 1024 * 1024; // 1MB default
+            if (content.length > maxFileSize) {
+                return Object.freeze({
+                    file: filePath,
+                    vulnerabilities: Object.freeze([]),
+                    riskScore: 0,
+                    timestamp: new Date(),
+                    durationMs: Date.now() - startTime,
+                });
+            }
+            // Run all applicable detectors in parallel
+            const detectorPromises = [];
+            for (const detector of this.detectors.values()) {
+                // Check if detector is enabled
+                const detectorConfig = options.detectors?.[detector.id];
+                if (detectorConfig && !detectorConfig.enabled) {
+                    continue;
+                }
+                // Check if detector applies to this file
+                if (!detector.appliesTo(filePath)) {
+                    continue;
+                }
+                // Run detector
+                detectorPromises.push(detector.scan(content, filePath));
+            }
+            // Wait for all detectors to complete
+            const results = await Promise.all(detectorPromises);
+            // Flatten vulnerabilities
+            let vulnerabilities = results.flat();
+            // Filter out info-level findings if not requested
+            if (!options.includeInfo) {
+                vulnerabilities = vulnerabilities.filter(v => v.severity !== 'info');
+            }
+            // Calculate risk score
+            const riskScore = this.calculateRiskScore(vulnerabilities);
+            return Object.freeze({
+                file: filePath,
+                vulnerabilities: Object.freeze(vulnerabilities),
+                riskScore,
+                timestamp: new Date(),
+                durationMs: Date.now() - startTime,
+            });
+        }
+        catch (error) {
+            // Return empty result on error
+            return Object.freeze({
+                file: filePath,
+                vulnerabilities: Object.freeze([]),
+                riskScore: 0,
+                timestamp: new Date(),
+                durationMs: Date.now() - startTime,
+            });
+        }
+    }
+    /**
+     * Scan multiple files in batch
+     */
+    async scanBatch(files, options = {}) {
+        const timestamp = new Date();
+        // Scan files with concurrency control
+        const maxConcurrent = 5;
+        const fileResults = [];
+        for (let i = 0; i < files.length; i += maxConcurrent) {
+            const batch = files.slice(i, i + maxConcurrent);
+            const batchResults = await Promise.all(batch.map(file => this.scanFile(file, options)));
+            fileResults.push(...batchResults);
+        }
+        // Calculate summary statistics
+        const totalVulnerabilities = fileResults.reduce((sum, result) => sum + result.vulnerabilities.length, 0);
+        let criticalCount = 0;
+        let highCount = 0;
+        let mediumCount = 0;
+        let lowCount = 0;
+        let infoCount = 0;
+        for (const result of fileResults) {
+            for (const vuln of result.vulnerabilities) {
+                switch (vuln.severity) {
+                    case 'critical':
+                        criticalCount++;
+                        break;
+                    case 'high':
+                        highCount++;
+                        break;
+                    case 'medium':
+                        mediumCount++;
+                        break;
+                    case 'low':
+                        lowCount++;
+                        break;
+                    case 'info':
+                        infoCount++;
+                        break;
+                }
+            }
+        }
+        // Calculate average risk score
+        const averageRiskScore = fileResults.length > 0
+            ? fileResults.reduce((sum, r) => sum + r.riskScore, 0) / fileResults.length
+            : 0;
+        // Find highest risk files
+        const highestRiskFiles = fileResults
+            .filter(r => r.riskScore > 0)
+            .sort((a, b) => b.riskScore - a.riskScore)
+            .slice(0, 10)
+            .map(r => ({ file: r.file, score: r.riskScore }));
+        return Object.freeze({
+            files: Object.freeze(fileResults),
+            totalVulnerabilities,
+            criticalCount,
+            highCount,
+            mediumCount,
+            lowCount,
+            infoCount,
+            averageRiskScore,
+            highestRiskFiles: Object.freeze(highestRiskFiles),
+            timestamp,
+        });
+    }
+    /**
+     * Scan directory with pattern
+     */
+    async scanDirectory(directory, pattern = '**/*.{ts,tsx,js,jsx}', options = {}) {
+        // Find all matching files
+        const files = await glob(pattern, {
+            cwd: directory,
+            absolute: true,
+            nodir: true,
+            ignore: ['**/node_modules/**', '**/dist/**', '**/build/**', '**/.git/**'],
+        });
+        return this.scanBatch(files, options);
+    }
+    /**
+     * Calculate risk score for a file based on vulnerabilities
+     */
+    calculateRiskScore(vulnerabilities) {
+        if (vulnerabilities.length === 0)
+            return 0;
+        const severityWeights = {
+            critical: 10,
+            high: 7,
+            medium: 4,
+            low: 2,
+            info: 1,
+        };
+        let totalScore = 0;
+        for (const vuln of vulnerabilities) {
+            totalScore += severityWeights[vuln.severity];
+        }
+        // Normalize to 0-100 scale
+        const maxScore = vulnerabilities.length * 10; // Assume all critical
+        return Math.min(100, Math.round((totalScore / maxScore) * 100));
+    }
+    /**
+     * Get list of all registered detectors
+     */
+    getDetectors() {
+        return Array.from(this.detectors.values());
+    }
+    /**
+     * Get detector by ID
+     */
+    getDetector(id) {
+        return this.detectors.get(id);
+    }
+}
+//# sourceMappingURL=security-analyzer.js.map

package/dist/analyzers/security/security-analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-analyzer.js","sourceRoot":"","sources":["../../../src/analyzers/security/security-analyzer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,uBAAuB;AACvB,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,+BAA+B,EAAE,MAAM,kDAAkD,CAAC;AAEnG,MAAM,OAAO,gBAAgB;IACnB,SAAS,CAAgC;IAEjD;QACE,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC;QAC3B,IAAI,CAAC,wBAAwB,EAAE,CAAC;IAClC,CAAC;IAED;;OAEG;IACK,wBAAwB;QAC9B,MAAM,SAAS,GAAG;YAChB,IAAI,oBAAoB,EAAE;YAC1B,IAAI,WAAW,EAAE;YACjB,IAAI,wBAAwB,EAAE;YAC9B,IAAI,sBAAsB,EAAE;YAC5B,IAAI,qBAAqB,EAAE;YAC3B,IAAI,wBAAwB,EAAE;YAC9B,IAAI,kBAAkB,EAAE;YACxB,IAAI,+BAA+B,EAAE;SACtC,CAAC;QAEF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,QAAgB,EAAE,UAA+B,EAAE;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,CAAC;YACH,oBAAoB;YACpB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAErD,wBAAwB;YACxB,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,cAAc;YACtE,IAAI,OAAO,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;gBACjC,OAAO,MAAM,CAAC,MAAM,CAAC;oBACnB,IAAI,EAAE,QAAQ;oBACd,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClC,SAAS,EAAE,CAAC;oBACZ,SAAS,EAAE,IAAI,IAAI,EAAE;oBACrB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBACnC,CAAC,CAAC;YACL,CAAC;YAED,2CAA2C;YAC3C,MAAM,gBAAgB,GAAuC,EAAE,CAAC;YAEhE,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC/C,+BAA+B;gBAC/B,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACxD,IAAI,cAAc,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;oBAC9C,SAAS;gBACX,CAAC;gBAED,yCAAyC;gBACzC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAClC,SAAS;gBACX,CAAC;gBAED,eAAe;gBACf,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC1D,CAAC;YAED,qCAAqC;YACrC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAEpD,0BAA0B;YAC1B,IAAI,eAAe,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAErC,kDAAkD;YAClD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBACzB,eAAe,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;YACvE,CAAC;YAED,uBAAuB;YACvB,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC;YAE3D,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,IAAI,EAAE,QAAQ;gBACd,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;gBAC/C,SAAS;gBACT,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,+BAA+B;YAC/B,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,IAAI,EAAE,QAAQ;gBACd,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClC,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,KAAe,EACf,UAA+B,EAAE;QAEjC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAE7B,sCAAsC;QACtC,MAAM,aAAa,GAAG,CAAC,CAAC;QACxB,MAAM,WAAW,GAAyB,EAAE,CAAC;QAE7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,aAAa,EAAE,CAAC;YACrD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC;YAChD,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,CACpC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAChD,CAAC;YACF,WAAW,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;QACpC,CAAC;QAED,+BAA+B;QAC/B,MAAM,oBAAoB,GAAG,WAAW,CAAC,MAAM,CAC7C,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,EACpD,CAAC,CACF,CAAC;QAEF,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;gBAC1C,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACtB,KAAK,UAAU;wBACb,aAAa,EAAE,CAAC;wBAChB,MAAM;oBACR,KAAK,MAAM;wBACT,SAAS,EAAE,CAAC;wBACZ,MAAM;oBACR,KAAK,QAAQ;wBACX,WAAW,EAAE,CAAC;wBACd,MAAM;oBACR,KAAK,KAAK;wBACR,QAAQ,EAAE,CAAC;wBACX,MAAM;oBACR,KAAK,MAAM;wBACT,SAAS,EAAE,CAAC;wBACZ,MAAM;gBACV,CAAC;YACH,CAAC;QACH,CAAC;QAED,+BAA+B;QAC/B,MAAM,gBAAgB,GACpB,WAAW,CAAC,MAAM,GAAG,CAAC;YACpB,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM;YAC3E,CAAC,CAAC,CAAC,CAAC;QAER,0BAA0B;QAC1B,MAAM,gBAAgB,GAAG,WAAW;aACjC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;aAC5B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;aACzC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;aACZ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAEpD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;YACjC,oBAAoB;YACpB,aAAa;YACb,SAAS;YACT,WAAW;YACX,QAAQ;YACR,SAAS;YACT,gBAAgB;YAChB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;YACjD,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,SAAiB,EACjB,UAAkB,sBAAsB,EACxC,UAA+B,EAAE;QAEjC,0BAA0B;QAC1B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;YAChC,GAAG,EAAE,SAAS;YACd,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,CAAC,oBAAoB,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,CAAC;SAC1E,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,eAAiD;QAC1E,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAE3C,MAAM,eAAe,GAAqC;YACxD,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,CAAC;SACR,CAAC;QAEF,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,UAAU,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC;QAED,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,sBAAsB;QACpE,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,EAAU;QACpB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC;CACF"}

package/dist/analyzers/security/types.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Security Analyzer Types
+ *
+ * Type definitions for security vulnerability detection
+ */
+/**
+ * Severity level for security vulnerabilities
+ */
+export type SecuritySeverity = 'critical' | 'high' | 'medium' | 'low' | 'info';
+/**
+ * OWASP Top 10 categories
+ */
+export type OWASPCategory = 'A01:2021 - Broken Access Control' | 'A02:2021 - Cryptographic Failures' | 'A03:2021 - Injection' | 'A04:2021 - Insecure Design' | 'A05:2021 - Security Misconfiguration' | 'A06:2021 - Vulnerable and Outdated Components' | 'A07:2021 - Identification and Authentication Failures' | 'A08:2021 - Software and Data Integrity Failures' | 'A09:2021 - Security Logging and Monitoring Failures' | 'A10:2021 - Server-Side Request Forgery';
+/**
+ * Security vulnerability finding
+ */
+export interface SecurityVulnerability {
+    readonly id: string;
+    readonly name: string;
+    readonly description: string;
+    readonly severity: SecuritySeverity;
+    readonly owaspCategory?: OWASPCategory;
+    readonly cweId?: string;
+    readonly file: string;
+    readonly line: number;
+    readonly column?: number;
+    readonly code: string;
+    readonly recommendation: string;
+    readonly references: readonly string[];
+}
+/**
+ * Security scan result for a single file
+ */
+export interface FileSecurityResult {
+    readonly file: string;
+    readonly vulnerabilities: readonly SecurityVulnerability[];
+    readonly riskScore: number;
+    readonly timestamp: Date;
+    readonly durationMs: number;
+}
+/**
+ * Batch security scan result
+ */
+export interface BatchSecurityResult {
+    readonly files: readonly FileSecurityResult[];
+    readonly totalVulnerabilities: number;
+    readonly criticalCount: number;
+    readonly highCount: number;
+    readonly mediumCount: number;
+    readonly lowCount: number;
+    readonly infoCount: number;
+    readonly averageRiskScore: number;
+    readonly highestRiskFiles: readonly {
+        file: string;
+        score: number;
+    }[];
+    readonly timestamp: Date;
+}
+/**
+ * Security detector configuration
+ */
+export interface SecurityDetectorConfig {
+    readonly enabled: boolean;
+    readonly severity?: SecuritySeverity;
+    readonly customPatterns?: readonly string[];
+    readonly excludePatterns?: readonly string[];
+}
+/**
+ * Security scan options
+ */
+export interface SecurityScanOptions {
+    readonly detectors?: Record<string, SecurityDetectorConfig>;
+    readonly includeInfo?: boolean;
+    readonly maxFileSize?: number;
+}
+/**
+ * Base security detector interface
+ */
+export interface SecurityDetector {
+    readonly id: string;
+    readonly name: string;
+    readonly description: string;
+    readonly severity: SecuritySeverity;
+    readonly owaspCategory?: OWASPCategory;
+    readonly cweId?: string;
+    readonly enabled: boolean;
+    /**
+     * Scan file content for vulnerabilities
+     */
+    scan(content: string, filePath: string): Promise<SecurityVulnerability[]>;
+    /**
+     * Check if detector applies to this file type
+     */
+    appliesTo(filePath: string): boolean;
+}

package/dist/analyzers/security/types.js

@@ -0,0 +1,7 @@
+/**
+ * Security Analyzer Types
+ *
+ * Type definitions for security vulnerability detection
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/analyzers/security/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/analyzers/security/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/hooks/use-enhanced-input.d.ts

@@ -3,7 +3,6 @@ export interface Key {
     ctrl?: boolean;
     meta?: boolean;
     shift?: boolean;
-    paste?: boolean;
     sequence?: string;
     upArrow?: boolean;
     downArrow?: boolean;