@fortressjs/cli 0.1.0 → 0.1.2

package/README.md

@@ -0,0 +1,70 @@
+# @fortressjs/cli
+
+Security auditing CLI for Express applications.
+
+Analyze Express projects and identify missing security protections such as rate limiting, request validation, security headers, and threat detection.
+
+## Installation
+
+### Global Installation
+
+```bash
+npm install -g @fortressjs/cli
+```
+
+### Run Without Installation
+
+```bash
+npx @fortressjs/cli audit
+```
+
+## Usage
+
+Audit the current project:
+
+```bash
+fortress audit
+```
+
+## Example Output
+
+```text
+🛡️ FortressJS Security Audit CLI
+
+Security Score: 70/100
+
+Missing Protections:
+✗ Threat Intelligence Engine
+✗ HTTPS Enforcement / HSTS
+
+Recommendations:
+• Add fortress.threatDetector()
+• Configure strict transport security
+```
+
+## What It Checks
+
+* Content Security Policy (CSP)
+* Security Headers
+* Rate Limiting
+* Request Size Limiting
+* Security Logging
+* Threat Detection
+* HTTPS / HSTS Configuration
+
+## Roadmap
+
+Planned improvements:
+
+* File and directory path support
+* AST-based code analysis
+* More advanced security checks
+* Framework-specific auditing
+
+## Repository
+
+https://github.com/davanesh/fortressjs
+
+## License
+
+MIT

package/dist/index.d.ts

@@ -1 +1 @@
-export declare function runAudit(): void;
+export declare function runAudit(targetPath?: string): void;

package/dist/index.js

@@ -17,6 +17,20 @@ const C = {
     yellow: "\x1b[33m",
     cyan: "\x1b[36m"
 };
+function getTargetFiles(targetPath) {
+    if (!fs_1.default.existsSync(targetPath)) {
+        throw new Error(`Path does not exist: ${targetPath}`);
+    }
+    const stat = fs_1.default.statSync(targetPath);
+    if (stat.isFile()) {
+        if (targetPath.endsWith(".ts") ||
+            targetPath.endsWith(".js")) {
+            return [targetPath];
+        }
+        return [];
+    }
+    return getFilesRecursively(targetPath);
+}
 function getFilesRecursively(dir, fileList = []) {
     if (!fs_1.default.existsSync(dir))
         return fileList;
@@ -44,15 +58,23 @@ function getFilesRecursively(dir, fileList = []) {
     }
     return fileList;
 }
-function runAudit() {
+function runAudit(targetPath) {
     console.log(`\n${C.bold}${C.cyan}🛡️  FortressJS Security Audit CLI${C.reset}`);
     console.log(`${C.dim}=========================================${C.reset}\n`);
-    const cwd = process.cwd();
-    const files = getFilesRecursively(cwd);
+    const target = path_1.default.resolve(targetPath || process.cwd());
+    let files;
+    try {
+        files = getTargetFiles(target);
+    }
+    catch (error) {
+        console.error(`${C.red}${error.message}${C.reset}`);
+        process.exit(1);
+    }
     if (files.length === 0) {
-        console.log(`${C.yellow}No JavaScript or TypeScript files found to scan in: ${cwd}${C.reset}`);
+        console.log(`${C.yellow}No JavaScript or TypeScript files found to scan in: ${target}${C.reset}`);
         return;
     }
+    console.log(`${C.dim}Target: ${target}${C.reset}`);
     console.log(`${C.dim}Scanning ${files.length} file(s)...${C.reset}`);
     const scanner = new scanner_1.RegexScanner();
     // Aggregate results across all files in the project
@@ -144,9 +166,14 @@ function runAudit() {
 // CLI entry point
 const args = process.argv.slice(2);
 if (args[0] === "audit") {
-    runAudit();
+    const target = args[1];
+    runAudit(target);
 }
 else {
     console.log(`\n${C.bold}FortressJS CLI${C.reset}`);
-    console.log(`${C.dim}Usage: npx fortress audit${C.reset}\n`);
+    console.log(`${C.dim}Usage:${C.reset}`);
+    console.log(`  fortress audit`);
+    console.log(`  fortress audit .`);
+    console.log(`  fortress audit ./src`);
+    console.log(`  fortress audit ./src/app.ts\n`);
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@fortressjs/cli",
-  "version": "0.1.0",
-  "description": "Security auditing CLI for FortressJS and Express applications",
+  "version": "0.1.2",
+  "description": "Security audit CLI for Express applications. Detect missing security headers, rate limits, request validation, and threat protection.",
   "license": "MIT",
   "author": "Davanesh Saminathan",
   "homepage": "https://github.com/davanesh/fortressjs",
@@ -26,21 +26,22 @@
     "node": ">=18"
   },
   "bin": {
-    "fortress": "./bin/fortress.js"
+    "fortress": "bin/fortress.js"
   },
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "files": [
     "dist",
-    "bin"
+    "bin",
+    "README.md"
   ],
   "scripts": {
     "build": "tsc"
   },
   "dependencies": {
-    "@fortressjs/core": "0.1.0"
+    "@fortressjs/core": "^0.1.2"
   },
   "devDependencies": {
     "typescript": "^5.0.0"
   }
-}
+}