@dxworks/insider 2.9.1

package/insider/config/rules/frameworks/rust.json

@@ -0,0 +1,77 @@
+[
+  {
+    "name": "Development Framework: Rocket",
+    "id": "AI025610",
+    "description": "Development Framework: Rocket",
+    "applies_to": [ "rust" ],
+    "tags": [ "Framework.Development.Rocket" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "extern crate rocket|use rocket",
+        "type": "regex",
+        "scopes": [ "code" ]
+      }
+    ]
+  },
+  {
+    "name": "Development Framework: ActixWeb",
+    "id": "AI025620",
+    "description": "Development Framework: ActixWeb",
+    "applies_to": [ "rust" ],
+    "tags": [ "Framework.Development.ActixWeb" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "use actix_web",
+        "type": "string",
+        "scopes": [ "code" ]
+      }
+    ]
+  },
+  {
+    "name": "Development Framework: Nickel",
+    "id": "AI025630",
+    "description": "Development Framework: Nickel",
+    "applies_to": [ "rust" ],
+    "tags": [ "Framework.Development.Nickel" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "use Nickel",
+        "type": "string",
+        "scopes": [ "code" ]
+      }
+    ]
+  },
+  {
+    "name": "Development Framework: Yew",
+    "id": "AI025640",
+    "description": "Development Framework: Yew",
+    "applies_to": [ "rust" ],
+    "tags": [ "Framework.Development.Yew" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "use yew",
+        "type": "string",
+        "scopes": [ "code" ]
+      }
+    ]
+  },
+  {
+    "name": "Development Framework: Azul",
+    "id": "AI025650",
+    "description": "Development Framework: Azul",
+    "applies_to": [ "rust" ],
+    "tags": [ "Framework.Development.Azul" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "use azul",
+        "type": "string",
+        "scopes": [ "code" ]
+      }
+    ]
+  }
+]

package/insider/config/rules/general/OSS_license.json

@@ -0,0 +1,146 @@
+[
+  {
+    "name": "Open Source License: MIT",
+    "id": "AI027600",
+    "description": "Open Source License: MIT",
+    "tags":[ "Miscellaneous.OpenSourceLicense.MIT" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "MIT License",
+        "type": "string",
+        "scopes": [ "code", "comment" ],
+        "modifiers": [ "i" ],
+        "confidence": "high"
+      }
+    ]
+  },
+  {
+    "name": "Open Source License: Apache",
+    "id": "AI027700",
+    "description": "Open Source License: Apache",
+    "tags":[ "Miscellaneous.OpenSourceLicense.Apache" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "Apache License",
+        "type": "string",
+        "scopes": [ "code", "comment" ],
+        "modifiers": [ "i" ],
+        "confidence": "high"
+      }
+    ]
+  },
+  {
+    "name": "Open Source License: BSD",
+    "id": "AI027800",
+    "description": "Open Source License: BSD",
+    "tags":[ "Miscellaneous.OpenSourceLicense.BSD" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "BSD.+License",
+        "type": "regex",
+        "scopes": [ "code", "comment" ],
+        "modifiers": [ "i" ],
+        "confidence": "high"
+      }
+    ]
+  },
+  {
+    "name": "Open Source License: GPL",
+    "id": "AI027900",
+    "description": "Open Source License: GPL",
+    "tags":[ "Miscellaneous.OpenSourceLicense.GPL" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "GNU GENERAL PUBLIC LICENSE",
+        "type": "string",
+        "scopes": [ "code", "comment" ],
+        "modifiers": [ "i" ],
+        "confidence": "high"
+      }
+    ]
+  },
+  {
+    "name": "Open Source License: LGPL",
+    "id": "AI028000",
+    "description": "Open Source License: LGPL",
+    "tags":[ "Miscellaneous.OpenSourceLicense.LGPL" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "GNU LESSER GENERAL PUBLIC LICENSE",
+        "type": "string",
+        "scopes": [ "code", "comment" ],
+        "modifiers": [ "i" ],
+        "confidence": "high"
+      }
+    ]
+  },
+  {
+    "name": "Open Source License: Mozilla",
+    "id": "AI028100",
+    "description": "Open Source License: Mozilla",
+    "tags":[ "Miscellaneous.OpenSourceLicense.Mozilla" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "Mozilla Public License",
+        "type": "string",
+        "scopes": [ "code", "comment" ],
+        "modifiers": [ "i" ],
+        "confidence": "high"
+      }
+    ]
+  },
+  {
+    "name": "Open Source License: Eclipse",
+    "id": "AI028200",
+    "description": "Open Source License: Eclipse",
+    "tags":[ "Miscellaneous.OpenSourceLicense.Eclipse" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "Eclipse Public License",
+        "type": "string",
+        "scopes": [ "code", "comment" ],
+        "modifiers": [ "i" ],
+        "confidence": "high"
+      }
+    ]
+  },
+  {
+    "name": "Open Source License: Creative Commons",
+    "id": "AI028300",
+    "description": "Open Source License: Creative Commons",
+    "tags":[ "Miscellaneous.OpenSourceLicense.CreativeCommons" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "Creative Commons License",
+        "type": "string",
+        "scopes": [ "code", "comment" ],
+        "modifiers": [ "i" ],
+        "confidence": "high"
+      }
+    ]
+  },
+  {
+    "name": "Open Source License: Microsoft",
+    "id": "AI028400",
+    "description": "Open Source License: Microsoft",
+    "tags":[ "Miscellaneous.OpenSourceLicense.Microsoft" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "Microsoft Public License",
+        "type": "string",
+        "scopes": [ "code", "comment" ],
+        "modifiers": [ "i" ],
+        "confidence": "high"
+      }
+    ]
+  }
+]

package/insider/config/rules/general/code_metrics.json

@@ -0,0 +1,132 @@
+[
+  {
+    "name": "Metric: Class Definition",
+    "id": "AI025700",
+    "description": "Metric: Classes Defined",
+    "tags":[ "Metric.Code.Class.Defined" ],
+    "severity": "moderate",
+    "applies_to": [ "csharp", "cpp", "javascript", "python", "vb", "ruby", "groovy", "php" ],
+    "patterns": [
+      {
+        "pattern": "class",
+        "type": "string",
+        "scopes": [ "code" ],
+        "confidence": "high",
+        "_comment": "data structure which provides complexity/size insight"
+      }
+    ]
+  },
+  {
+    "name": "Metric: Struct Definition",
+    "id": "AI025710",
+    "description": "Metric: Struct Defined",
+    "tags":[ "Metric.Code.Class.Defined" ],
+    "severity": "moderate",
+    "applies_to": [ "c", "cpp", "csharp", "objective-c", "rust" ],
+    "patterns": [
+      {
+        "pattern": "struct",
+        "type": "string",
+        "scopes": [ "code" ],
+        "confidence": "high"
+      }
+    ]
+  },
+  {
+    "name": "Metric: Function Definition",
+    "id": "AI025800",
+    "description": "Metric: Function Defined",
+    "tags":[ "Metric.Code.Function.Defined" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "(def|function|fun) (.*)",
+        "type": "regexword",
+        "scopes": [ "code" ],
+        "confidence": "medium",
+        "_comment": "doesn't detect a number of other potential patterns at present"
+      }
+    ]
+  },
+  {
+    "name": "Metric: HTML Form Definition",
+    "id": "AI025900",
+    "description": "Metric: HTML Form Defined",
+    "tags":[ "Metric.Code.HTMLForm.Defined" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "<form",
+        "type": "string",
+        "scopes": [ "code" ],
+        "confidence": "high"
+      }
+    ]
+  },
+  {
+    "name": "Metric: Exception Caught",
+    "id": "AI026000",
+    "description": "Metric: Exception Caught",
+    "tags":[ "Metric.Code.Exception.Caught" ],
+    "severity": "moderate",
+    "_comment": "may need to divide results by 2 to get more accurate counts i.e. pairs=single handling",
+    "patterns": [
+      {
+        "pattern": "catch|except|exception",
+        "type": "regexword",
+        "scopes": [ "code" ],
+        "confidence": "medium",
+        "modifiers": [ "i" ]
+      }
+    ]
+  },
+  {
+    "name": "Metric: Logging Call",
+    "id": "AI026100",
+    "description": "Logging Call",
+    "tags":[ "Metric.Code.Logging.Call" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "log|logger",
+        "type": "regexword",
+        "scopes": [ "code" ],
+        "confidence": "high",
+        "modifiers": [ "i" ]
+      }
+    ]
+  },
+  {
+    "name": "Metric: Sample Code",
+    "id": "AI026200",
+    "description": "Sample Code",
+    "tags":[ "Metric.Code.SampleCode" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "(sample|example) code",
+        "type": "regex",
+        "scopes": [ "code" ],
+        "confidence": "high",
+        "_comment": "only matched if sample exclusions arg set",
+        "modifiers": [ "i" ]
+      }
+    ]
+  },
+  {
+    "name": "Metric: URL Reference",
+    "id": "AI026300",
+    "description": "URL Reference",
+    "tags":[ "Metric.Code.URL" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "https?://",
+        "type": "regex",
+        "scopes": [ "code" ],
+        "confidence": "high",
+        "modifiers": [ "i" ]
+      }
+    ]
+  }
+]

package/insider/config/rules/general/dependencies.json

@@ -0,0 +1,199 @@
+[
+  {
+    "name": "Dependency: Included Source",
+    "id": "AI026400",
+    "description": "Dependency: Included Source",
+    "tags":[ "Dependency.SourceInclude" ],
+    "applies_to": [ "c", "cpp" ],
+    "severity": "moderate",
+    "confidence": "high",
+    "patterns": [
+      {
+        "pattern": "#include ?[\\\"<]([A-Za-z])[\\\">]",
+        "type": "regex",
+        "scopes": [ "code" ],
+        "confidence": "high"
+      }
+    ]
+  },
+  {
+    "name": "Dependency: Included Source",
+    "id": "AI026500",
+    "description": "Dependency: Included Source",
+    "tags":[ "Dependency.SourceInclude" ],
+    "applies_to": [ "php" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "(include|require) [^\\s;]{1,50};",
+        "type": "regex",
+        "scopes": [ "code" ],
+        "confidence": "high"
+      }
+    ]
+  },
+  {
+    "name": "Dependency: Included Source",
+    "id": "AI026600",
+    "description": "Dependency: Included Source",
+    "tags":[ "Dependency.SourceInclude" ],
+    "applies_to": [ "objective-c" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "#import [A-Za-z]",
+        "type": "regex",
+        "scopes": [ "code" ],
+        "confidence": "high"
+      }
+    ]
+  },
+  {
+    "name": "Dependency: Included Source",
+    "id": "AI026700",
+    "description": "Dependency: Included Source",
+    "tags":[ "Dependency.SourceInclude" ],
+    "applies_to": [ "groovy" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "import [A-Za-z]",
+        "type": "regex",
+        "scopes": [ "code" ],
+        "confidence": "high"
+      },
+      {
+        "pattern": "loadScriptByName",
+        "type": "regex",
+        "scopes": [ "code" ],
+        "confidence": "high"
+      },
+      {
+        "pattern": "evaluate ?\\(",
+        "type": "regex",
+        "scopes": [ "code" ]
+      },
+      {
+        "pattern": "shell\\.parse ?\\(?",
+        "type": "regex",
+        "scopes": [ "code" ],
+        "confidence": "high"
+      }
+    ]
+  },
+  {
+    "name": "Dependency: Included Source",
+    "id": "AI026800",
+    "description": "Dependency: Included Source",
+    "tags":[ "Dependency.SourceInclude" ],
+    "applies_to": [ "python", "java", "swift", "go" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "import [A-Za-z]",
+        "type": "regex",
+        "scopes": [ "code" ],
+        "confidence": "high"
+      },
+      {
+        "pattern": "package [A-Za-z]",
+        "type": "regex",
+        "scopes": [ "code" ],
+        "confidence": "high"
+      }
+    ]
+  },
+  {
+    "name": "Dependency: Included Source",
+    "id": "AI026900",
+    "description": "Dependency: Included Source",
+    "tags":[ "Dependency.SourceInclude" ],
+    "applies_to": [ "perl", "rust"],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "use [A-Za-z];",
+        "type": "regex",
+        "scopes": [ "code" ],
+        "confidence": "high"
+      },
+      {
+        "pattern": "package [A-Za-z];",
+        "type": "regex",
+        "scopes": [ "code" ],
+        "confidence": "high"
+      }
+    ]
+  },
+  {
+    "name": "Dependency: Included Source",
+    "id": "AI027000",
+    "description": "Dependency: Included Source",
+    "tags":[ "Dependency.SourceInclude" ],
+    "applies_to": [ "ruby" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "load [A-Za-z]",
+        "type": "regex",
+        "scopes": [ "code" ],
+        "confidence": "high"
+      },
+      {
+        "pattern": "require [A-Za-z]",
+        "type": "regex",
+        "scopes": [ "code" ],
+        "confidence": "high"
+      }
+    ]
+  },
+  {
+    "name": "Dependency: Included Source",
+    "id": "AI027100",
+    "description": "Dependency: Included Source",
+    "tags":[ "Dependency.SourceInclude" ],
+    "applies_to": [ "csharp" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "using [A-Za-z];",
+        "type": "regex",
+        "scopes": [ "code" ]
+      }
+    ]
+  },
+  {
+    "name": "Dependency: Included Source",
+    "id": "AI027200",
+    "description": "Dependency: Included Source",
+    "tags":[ "Dependency.SourceInclude" ],
+    "applies_to": [ "javascript", "typescript" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "import [A-Za-z];",
+        "type": "regex",
+        "scopes": [ "code" ],
+        "confidence": "high"
+      },
+      {
+        "pattern": "fetchInject ?\\([A-Za-z]",
+        "type": "regex",
+        "scopes": [ "code" ],
+        "confidence": "high"
+      },
+      {
+        "pattern": "require ?\\(['\\\"]([^'\\\"]+);",
+        "type": "regex",
+        "scopes": [ "code" ],
+        "confidence": "high"
+      },
+      {
+        "pattern": "\\$\\.getScript\\([A-Za-z]",
+        "type": "regex",
+        "scopes": [ "code" ],
+        "confidence": "high"
+      }
+    ]
+  }
+]

package/insider/config/rules/general/hygiene.json

@@ -0,0 +1,47 @@
+[
+  {
+    "name": "Hygiene: Todo Comment",
+    "id": "AI027300",
+    "description": "Hygiene: Todo Comment",
+    "tags":[ "Miscellaneous.CodeHygiene.Comment.Todo" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "todo",
+        "type": "regex",
+        "scopes": [ "comment" ],
+        "modifiers": [ "i" ]
+      }
+    ]
+  },
+  {
+    "name": "Hygiene: Fix Comment",
+    "id": "AI027400",
+    "description": "Hygiene: Fix Comment",
+    "tags":[ "Miscellaneous.CodeHygiene.Comment.Fix" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "fixme|broke|broken",
+        "type": "regex",
+        "scopes": [ "comment" ],
+        "modifiers": [ "i" ]
+      }
+    ]
+  },
+  {
+    "name": "Hygiene: Suspicious Comment",
+    "id": "AI027500",
+    "description": "Hygiene: Suspicious Comment",
+    "tags":[ "Miscellaneous.CodeHygiene.Comment.Suspicious" ],
+    "severity": "moderate",
+    "patterns": [
+      {
+        "pattern": "hack|insecure|black magic|high risk|risky|riskiest|obfuscation|obfuscate|obfuscated",
+        "type": "regex",
+        "scopes": [ "comment" ],
+        "modifiers": [ "i" ]
+      }
+    ]
+  }
+]