@kevinrabun/judges 3.25.1 → 3.27.1

package/dist/language-patterns.d.ts

@@ -37,6 +37,8 @@ export declare const ENV_ACCESS: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
+    bash: string;
 };
 export declare const HARDCODED_ENV: {
     jsts: string;
@@ -46,6 +48,8 @@ export declare const HARDCODED_ENV: {
     java: string;
     go: string;
     powershell: string;
+    dart: string;
+    bash: string;
 };
 export declare const FUNCTION_DEF: {
     jsts: string;
@@ -59,6 +63,9 @@ export declare const FUNCTION_DEF: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
+    bash: string;
+    sql: string;
 };
 export declare const TRY_CATCH: {
     jsts: string;
@@ -72,6 +79,8 @@ export declare const TRY_CATCH: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
+    bash: string;
 };
 export declare const EMPTY_CATCH: {
     jsts: string;
@@ -85,6 +94,8 @@ export declare const EMPTY_CATCH: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
+    bash: string;
 };
 export declare const GENERIC_CATCH: {
     jsts: string;
@@ -96,6 +107,8 @@ export declare const GENERIC_CATCH: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
+    bash: string;
 };
 export declare const PANIC_UNWRAP: {
     rust: string;
@@ -109,6 +122,8 @@ export declare const PANIC_UNWRAP: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
+    bash: string;
 };
 export declare const WEAK_TYPE: {
     jsts: string;
@@ -121,6 +136,7 @@ export declare const WEAK_TYPE: {
     php: string;
     kotlin: string;
     swift: string;
+    dart: string;
 };
 export declare const ASYNC_FUNCTION: {
     jsts: string;
@@ -134,6 +150,8 @@ export declare const ASYNC_FUNCTION: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
+    bash: string;
 };
 export declare const MISSING_AWAIT: {
     jsts: string;
@@ -141,6 +159,7 @@ export declare const MISSING_AWAIT: {
     rust: string;
     csharp: string;
     java: string;
+    dart: string;
 };
 export declare const SHARED_MUTABLE: {
     jsts: string;
@@ -153,6 +172,7 @@ export declare const SHARED_MUTABLE: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
 };
 export declare const WILDCARD_IMPORT: {
     jsts: string;
@@ -161,6 +181,7 @@ export declare const WILDCARD_IMPORT: {
     csharp: string;
     php: string;
     kotlin: string;
+    dart: string;
 };
 export declare const DEPRECATED_IMPORT: {
     jsts: string;
@@ -179,6 +200,8 @@ export declare const SQL_INJECTION: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
+    sql: string;
 };
 export declare const COMMAND_INJECTION: {
     jsts: string;
@@ -192,6 +215,8 @@ export declare const COMMAND_INJECTION: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
+    bash: string;
 };
 export declare const HARDCODED_PASSWORD: {
     all: string;
@@ -214,6 +239,7 @@ export declare const WEAK_HASH: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
 };
 export declare const EVAL_USAGE: {
     jsts: string;
@@ -227,6 +253,8 @@ export declare const EVAL_USAGE: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
+    bash: string;
 };
 export declare const TLS_DISABLED: {
     jsts: string;
@@ -240,6 +268,7 @@ export declare const TLS_DISABLED: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
 };
 export declare const CORS_WILDCARD: {
     jsts: string;
@@ -251,6 +280,7 @@ export declare const CORS_WILDCARD: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
 };
 export declare const HTTP_ROUTE: {
     jsts: string;
@@ -263,6 +293,7 @@ export declare const HTTP_ROUTE: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
 };
 export declare const CONSOLE_LOG: {
     jsts: string;
@@ -276,6 +307,8 @@ export declare const CONSOLE_LOG: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
+    bash: string;
 };
 export declare const STRUCTURED_LOG: {
     jsts: string;
@@ -288,6 +321,7 @@ export declare const STRUCTURED_LOG: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
 };
 export declare const TEST_FUNCTION: {
     jsts: string;
@@ -301,6 +335,8 @@ export declare const TEST_FUNCTION: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
+    bash: string;
 };
 export declare const ASSERTION: {
     jsts: string;
@@ -314,6 +350,8 @@ export declare const ASSERTION: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
+    bash: string;
 };
 export declare const DOC_COMMENT: {
     jsts: string;
@@ -327,6 +365,8 @@ export declare const DOC_COMMENT: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
+    sql: string;
 };
 export declare const FOR_LOOP: {
     jsts: string;
@@ -340,6 +380,9 @@ export declare const FOR_LOOP: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
+    bash: string;
+    sql: string;
 };
 export declare const CLASS_DEF: {
     jsts: string;
@@ -353,6 +396,7 @@ export declare const CLASS_DEF: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
 };
 export declare const MANIFEST_FILES: Record<LangFamily, string[]>;
 export declare const INPUT_VALIDATION: {
@@ -367,6 +411,7 @@ export declare const INPUT_VALIDATION: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
 };
 export declare const MUTEX: {
     jsts: string;
@@ -379,6 +424,7 @@ export declare const MUTEX: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
 };
 export declare const DB_QUERY: {
     jsts: string;
@@ -392,6 +438,8 @@ export declare const DB_QUERY: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
+    sql: string;
 };
 export declare const HTTP_CLIENT: {
     jsts: string;
@@ -405,6 +453,8 @@ export declare const HTTP_CLIENT: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
+    bash: string;
 };
 export declare const MAGIC_NUMBER: {
     jsts: string;
@@ -414,6 +464,8 @@ export declare const MAGIC_NUMBER: {
     java: string;
     go: string;
     powershell: string;
+    dart: string;
+    bash: string;
 };
 export declare const TODO_FIXME: {
     all: string;
@@ -430,6 +482,9 @@ export declare const LINTER_DISABLE: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
+    bash: string;
+    sql: string;
 };
 export declare const UNSAFE_DESERIALIZATION: {
     jsts: string;
@@ -443,6 +498,8 @@ export declare const UNSAFE_DESERIALIZATION: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
+    bash: string;
 };
 export declare const RESOURCE_LEAK: {
     jsts: string;
@@ -456,6 +513,8 @@ export declare const RESOURCE_LEAK: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
+    bash: string;
 };
 export declare const DEPRECATED_API: {
     jsts: string;
@@ -468,6 +527,7 @@ export declare const DEPRECATED_API: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
 };
 /** Flask/Django debug mode or insecure settings */
 export declare const FRAMEWORK_DEBUG_MODE: {
@@ -479,6 +539,7 @@ export declare const FRAMEWORK_DEBUG_MODE: {
     ruby: string;
     kotlin: string;
     swift: string;
+    dart: string;
 };
 /** Missing HTTPS / security middleware in frameworks */
 export declare const FRAMEWORK_MISSING_SECURITY: {
@@ -490,6 +551,7 @@ export declare const FRAMEWORK_MISSING_SECURITY: {
     php: string;
     ruby: string;
     swift: string;
+    dart: string;
 };
 /** Framework-specific secret key / session misconfigurations */
 export declare const FRAMEWORK_SECRET_KEY: {

package/dist/language-patterns.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"language-patterns.d.ts","sourceRoot":"","sources":["../src/language-patterns.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAyD7C;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,CAG9D;AAED;;GAEG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAEhD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAUrD;AAED;;GAEG;AACH,wBAAgB,KAAK,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAE/C;AAID;;;GAGG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,GAAG,MAAM,GAAG,KAAK,EAAE,MAAM,CAAC,CAAC,GAC7D,MAAM,GAAG,IAAI,CA+Bf;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,CAW7F;AAQD,eAAO,MAAM,UAAU;;;;;;;;;;;;CAYtB,CAAC;AAEF,eAAO,MAAM,aAAa;;;;;;;;CAQzB,CAAC;AAIF,eAAO,MAAM,YAAY;;;;;;;;;;;;CAYxB,CAAC;AAIF,eAAO,MAAM,SAAS;;;;;;;;;;;;CAYrB,CAAC;AAEF,eAAO,MAAM,WAAW;;;;;;;;;;;;CAYvB,CAAC;AAEF,eAAO,MAAM,aAAa;;;;;;;;;;CAWzB,CAAC;AAEF,eAAO,MAAM,YAAY;;;;;;;;;;;;CAYxB,CAAC;AAIF,eAAO,MAAM,SAAS;;;;;;;;;;;CAcrB,CAAC;AAIF,eAAO,MAAM,cAAc;;;;;;;;;;;;CAY1B,CAAC;AAEF,eAAO,MAAM,aAAa;;;;;;CAMzB,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;;;;;;;CAc1B,CAAC;AAIF,eAAO,MAAM,eAAe;;;;;;;CAO3B,CAAC;AAEF,eAAO,MAAM,iBAAiB;;;;CAI7B,CAAC;AAIF,eAAO,MAAM,aAAa;;;;;;;;;;;;CAYzB,CAAC;AAIF,eAAO,MAAM,iBAAiB;;;;;;;;;;;;CAY7B,CAAC;AAIF,eAAO,MAAM,kBAAkB;;CAE9B,CAAC;AAEF,eAAO,MAAM,iBAAiB;;CAE7B,CAAC;AAEF,eAAO,MAAM,gBAAgB;;CAE5B,CAAC;AAIF,eAAO,MAAM,SAAS;;;;;;;;;;;;CAYrB,CAAC;AAIF,eAAO,MAAM,UAAU;;;;;;;;;;;;CAYtB,CAAC;AAIF,eAAO,MAAM,YAAY;;;;;;;;;;;;CAYxB,CAAC;AAIF,eAAO,MAAM,aAAa;;;;;;;;;;CAUzB,CAAC;AAIF,eAAO,MAAM,UAAU;;;;;;;;;;;CAWtB,CAAC;AAIF,eAAO,MAAM,WAAW;;;;;;;;;;;;CAYvB,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;;;;;;;CAW1B,CAAC;AAIF,eAAO,MAAM,aAAa;;;;;;;;;;;;CAYzB,CAAC;AAEF,eAAO,MAAM,SAAS;;;;;;;;;;;;CAYrB,CAAC;AAIF,eAAO,MAAM,WAAW;;;;;;;;;;;;CAYvB,CAAC;AAIF,eAAO,MAAM,QAAQ;;;;;;;;;;;;CAYpB,CAAC;AAIF,eAAO,MAAM,SAAS;;;;;;;;;;;;CAYrB,CAAC;AAIF,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,CAmBvD,CAAC;AAIF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;CAY5B,CAAC;AAIF,eAAO,MAAM,KAAK;;;;;;;;;;;CAWjB,CAAC;AAIF,eAAO,MAAM,QAAQ;;;;;;;;;;;;CAYpB,CAAC;AAIF,eAAO,MAAM,WAAW;;;;;;;;;;;;CAYvB,CAAC;AAIF,eAAO,MAAM,YAAY;;;;;;;;CAQxB,CAAC;AAIF,eAAO,MAAM,UAAU;;CAEtB,CAAC;AAIF,eAAO,MAAM,cAAc;;;;;;;;;;;;CAY1B,CAAC;AAIF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;CAYlC,CAAC;AAIF,eAAO,MAAM,aAAa;;;;;;;;;;;;CAYzB,CAAC;AAIF,eAAO,MAAM,cAAc;;;;;;;;;;;CAW1B,CAAC;AAKF,mDAAmD;AACnD,eAAO,MAAM,oBAAoB;;;;;;;;;CAShC,CAAC;AAEF,wDAAwD;AACxD,eAAO,MAAM,0BAA0B;;;;;;;;;CAStC,CAAC;AAEF,gEAAgE;AAChE,eAAO,MAAM,oBAAoB;;;;;;;CAOhC,CAAC;AAEF,wEAAwE;AACxE,eAAO,MAAM,yBAAyB;;;;;;;CAOrC,CAAC;AAEF,oDAAoD;AACpD,eAAO,MAAM,gBAAgB;;CAE5B,CAAC;AAEF,wDAAwD;AACxD,eAAO,MAAM,kBAAkB;;CAE9B,CAAC;AAIF,+BAA+B;AAC/B,eAAO,MAAM,gBAAgB;;;;CAI5B,CAAC;AAEF,+CAA+C;AAC/C,eAAO,MAAM,oBAAoB;;;;CAIhC,CAAC;AAEF,qCAAqC;AACrC,eAAO,MAAM,sBAAsB;;;;CAIlC,CAAC;AAEF,gCAAgC;AAChC,eAAO,MAAM,iBAAiB;;;;CAI7B,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,gBAAgB;;;;CAI5B,CAAC;AAEF,uCAAuC;AACvC,eAAO,MAAM,sBAAsB;;;;CAIlC,CAAC;AAEF,0CAA0C;AAC1C,eAAO,MAAM,iBAAiB;;;;CAI7B,CAAC;AAEF,uCAAuC;AACvC,eAAO,MAAM,mBAAmB;;;;CAI/B,CAAC;AAEF,mDAAmD;AACnD,eAAO,MAAM,sBAAsB;;;;CAIlC,CAAC;AAEF,6CAA6C;AAC7C,eAAO,MAAM,sBAAsB;;;;CAIlC,CAAC;AAEF,+DAA+D;AAC/D,eAAO,MAAM,oBAAoB;;;;CAIhC,CAAC;AAEF,oDAAoD;AACpD,eAAO,MAAM,kBAAkB;;;;CAI9B,CAAC"}
+{"version":3,"file":"language-patterns.d.ts","sourceRoot":"","sources":["../src/language-patterns.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAoE7C;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,CAG9D;AAED;;GAEG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAEhD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAYrD;AAED;;GAEG;AACH,wBAAgB,KAAK,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAE/C;AAID;;;GAGG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,GAAG,MAAM,GAAG,KAAK,EAAE,MAAM,CAAC,CAAC,GAC7D,MAAM,GAAG,IAAI,CA+Bf;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,CAW7F;AAQD,eAAO,MAAM,UAAU;;;;;;;;;;;;;;CActB,CAAC;AAEF,eAAO,MAAM,aAAa;;;;;;;;;;CAUzB,CAAC;AAIF,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;CAexB,CAAC;AAIF,eAAO,MAAM,SAAS;;;;;;;;;;;;;;CAcrB,CAAC;AAEF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;CAcvB,CAAC;AAEF,eAAO,MAAM,aAAa;;;;;;;;;;;;CAazB,CAAC;AAEF,eAAO,MAAM,YAAY;;;;;;;;;;;;;;CAcxB,CAAC;AAIF,eAAO,MAAM,SAAS;;;;;;;;;;;;CAerB,CAAC;AAIF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;CAc1B,CAAC;AAEF,eAAO,MAAM,aAAa;;;;;;;CAOzB,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;;;;;;;;CAe1B,CAAC;AAIF,eAAO,MAAM,eAAe;;;;;;;;CAQ3B,CAAC;AAEF,eAAO,MAAM,iBAAiB;;;;CAI7B,CAAC;AAIF,eAAO,MAAM,aAAa;;;;;;;;;;;;;;CAczB,CAAC;AAIF,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;CAc7B,CAAC;AAIF,eAAO,MAAM,kBAAkB;;CAE9B,CAAC;AAEF,eAAO,MAAM,iBAAiB;;CAE7B,CAAC;AAEF,eAAO,MAAM,gBAAgB;;CAE5B,CAAC;AAIF,eAAO,MAAM,SAAS;;;;;;;;;;;;;CAarB,CAAC;AAIF,eAAO,MAAM,UAAU;;;;;;;;;;;;;;CActB,CAAC;AAIF,eAAO,MAAM,YAAY;;;;;;;;;;;;;CAaxB,CAAC;AAIF,eAAO,MAAM,aAAa;;;;;;;;;;;CAWzB,CAAC;AAIF,eAAO,MAAM,UAAU;;;;;;;;;;;;CAYtB,CAAC;AAIF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;CAcvB,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;;;;;;;;CAY1B,CAAC;AAIF,eAAO,MAAM,aAAa;;;;;;;;;;;;;;CAczB,CAAC;AAEF,eAAO,MAAM,SAAS;;;;;;;;;;;;;;CAcrB,CAAC;AAIF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;CAcvB,CAAC;AAIF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;CAepB,CAAC;AAIF,eAAO,MAAM,SAAS;;;;;;;;;;;;;CAarB,CAAC;AAIF,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,CAsBvD,CAAC;AAIF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;CAa5B,CAAC;AAIF,eAAO,MAAM,KAAK;;;;;;;;;;;;CAYjB,CAAC;AAIF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;CAcpB,CAAC;AAIF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;CAcvB,CAAC;AAIF,eAAO,MAAM,YAAY;;;;;;;;;;CAUxB,CAAC;AAIF,eAAO,MAAM,UAAU;;CAEtB,CAAC;AAIF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;CAe1B,CAAC;AAIF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;CAclC,CAAC;AAIF,eAAO,MAAM,aAAa;;;;;;;;;;;;;;CAczB,CAAC;AAIF,eAAO,MAAM,cAAc;;;;;;;;;;;;CAY1B,CAAC;AAKF,mDAAmD;AACnD,eAAO,MAAM,oBAAoB;;;;;;;;;;CAUhC,CAAC;AAEF,wDAAwD;AACxD,eAAO,MAAM,0BAA0B;;;;;;;;;;CAUtC,CAAC;AAEF,gEAAgE;AAChE,eAAO,MAAM,oBAAoB;;;;;;;CAOhC,CAAC;AAEF,wEAAwE;AACxE,eAAO,MAAM,yBAAyB;;;;;;;CAOrC,CAAC;AAEF,oDAAoD;AACpD,eAAO,MAAM,gBAAgB;;CAE5B,CAAC;AAEF,wDAAwD;AACxD,eAAO,MAAM,kBAAkB;;CAE9B,CAAC;AAIF,+BAA+B;AAC/B,eAAO,MAAM,gBAAgB;;;;CAI5B,CAAC;AAEF,+CAA+C;AAC/C,eAAO,MAAM,oBAAoB;;;;CAIhC,CAAC;AAEF,qCAAqC;AACrC,eAAO,MAAM,sBAAsB;;;;CAIlC,CAAC;AAEF,gCAAgC;AAChC,eAAO,MAAM,iBAAiB;;;;CAI7B,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,gBAAgB;;;;CAI5B,CAAC;AAEF,uCAAuC;AACvC,eAAO,MAAM,sBAAsB;;;;CAIlC,CAAC;AAEF,0CAA0C;AAC1C,eAAO,MAAM,iBAAiB;;;;CAI7B,CAAC;AAEF,uCAAuC;AACvC,eAAO,MAAM,mBAAmB;;;;CAI/B,CAAC;AAEF,mDAAmD;AACnD,eAAO,MAAM,sBAAsB;;;;CAIlC,CAAC;AAEF,6CAA6C;AAC7C,eAAO,MAAM,sBAAsB;;;;CAIlC,CAAC;AAEF,+DAA+D;AAC/D,eAAO,MAAM,oBAAoB;;;;CAIhC,CAAC;AAEF,oDAAoD;AACpD,eAAO,MAAM,kBAAkB;;;;CAI9B,CAAC"}

package/dist/language-patterns.js

@@ -52,6 +52,17 @@ const LANG_ALIAS_MAP = {
     kt: "kotlin",
     kts: "kotlin",
     swift: "swift",
+    dart: "dart",
+    flutter: "dart",
+    bash: "bash",
+    sh: "bash",
+    shell: "bash",
+    zsh: "bash",
+    sql: "sql",
+    plsql: "sql",
+    tsql: "sql",
+    mysql: "sql",
+    postgresql: "sql",
     dockerfile: "dockerfile",
     docker: "dockerfile",
     containerfile: "dockerfile",
@@ -75,6 +86,8 @@ export function isJsTs(lang) {
 export function isBraceLang(lang) {
     return (lang !== "python" &&
         lang !== "ruby" &&
+        lang !== "bash" &&
+        lang !== "sql" &&
         lang !== "unknown" &&
         lang !== "terraform" &&
         lang !== "bicep" &&
@@ -161,6 +174,8 @@ export const ENV_ACCESS = {
     ruby: String.raw `ENV\[|ENV\.fetch\s*\(`,
     kotlin: String.raw `System\.getenv\s*\(`,
     swift: String.raw `ProcessInfo\.processInfo\.environment\[`,
+    dart: String.raw `Platform\.environment\[|String\.fromEnvironment\s*\(`,
+    bash: String.raw `\$\{?\w+\}?|\$\(printenv\s`,
 };
 export const HARDCODED_ENV = {
     jsts: String.raw `process\.env\.\w+\s*\|\|\s*["'][^"']+["']`,
@@ -170,6 +185,8 @@ export const HARDCODED_ENV = {
     java: String.raw `getenv\s*\(.*\)\s*(?:!=\s*null\s*\?|==\s*null)`,
     go: String.raw `os\.Getenv\s*\(.*\)\s*==\s*["']`,
     powershell: String.raw `\$env:\w+\s*=\s*["'][^"']+["']`,
+    dart: String.raw `String\.fromEnvironment\s*\(\s*["'][^"']+["']\s*,\s*defaultValue:\s*["'][^"']+["']\)`,
+    bash: String.raw `\w+=\s*["'][^"']+["']\s*$`,
 };
 // ── Function Definitions ─────────────────────────────────────────────────────
 export const FUNCTION_DEF = {
@@ -184,6 +201,9 @@ export const FUNCTION_DEF = {
     ruby: String.raw `def\s+\w+`,
     kotlin: String.raw `(?:fun|suspend\s+fun)\s+\w+\s*\(`,
     swift: String.raw `(?:func|class\s+func|static\s+func)\s+\w+\s*\(`,
+    dart: String.raw `(?:void|Future|Stream|int|double|String|bool|dynamic|\w+)\s+\w+\s*\(|\w+\s+\w+\s*\(`,
+    bash: String.raw `(?:function\s+\w+|\w+\s*\(\s*\))\s*\{`,
+    sql: String.raw `CREATE\s+(?:OR\s+REPLACE\s+)?(?:FUNCTION|PROCEDURE)\s+\w+`,
 };
 // ── Error Handling ───────────────────────────────────────────────────────────
 export const TRY_CATCH = {
@@ -198,6 +218,8 @@ export const TRY_CATCH = {
     ruby: String.raw `begin\s*$|rescue\b`,
     kotlin: String.raw `try\s*\{`,
     swift: String.raw `do\s*\{.*catch`,
+    dart: String.raw `try\s*\{`,
+    bash: String.raw `trap\s|\|\|\s`,
 };
 export const EMPTY_CATCH = {
     jsts: String.raw `catch\s*(?:\([^)]*\))?\s*\{\s*(?:\/\/[^\n]*)?\s*\}`,
@@ -211,6 +233,8 @@ export const EMPTY_CATCH = {
     ruby: String.raw `rescue\s*(?:=>\s*\w+)?\s*$`,
     kotlin: String.raw `catch\s*\([^)]*\)\s*\{\s*(?:\/\/[^\n]*)?\s*\}`,
     swift: String.raw `catch\s*\{\s*(?:\/\/[^\n]*)?\s*\}`,
+    dart: String.raw `catch\s*\([^)]*\)\s*\{\s*(?:\/\/[^\n]*)?\s*\}`,
+    bash: String.raw `\|\|\s*true|\|\|\s*:`,
 };
 export const GENERIC_CATCH = {
     jsts: String.raw `catch\s*\(\s*\w+\s*\)`,
@@ -223,6 +247,8 @@ export const GENERIC_CATCH = {
     ruby: String.raw `rescue\s*$|rescue\s+(?:Exception|StandardError)\b`,
     kotlin: String.raw `catch\s*\(\s*\w+\s*:\s*(?:Exception|Throwable)\s*\)`,
     swift: String.raw `catch\s*\{|catch\s+let\s+\w+\s*\{`,
+    dart: String.raw `catch\s*\(\s*e\s*\)`,
+    bash: String.raw `trap\s+['"]-?['"']`,
 };
 export const PANIC_UNWRAP = {
     rust: String.raw `\.unwrap\(\)|\.expect\(|panic!\(|unreachable!\(`,
@@ -236,6 +262,8 @@ export const PANIC_UNWRAP = {
     ruby: String.raw `exit\s*\(!?|abort\s*\(|Kernel\.exit`,
     kotlin: String.raw `exitProcess\s*\(|(?<![.\w])error\s*\(`,
     swift: String.raw `fatalError\s*\(|preconditionFailure\s*\(|exit\s*\(`,
+    dart: String.raw `exit\s*\(|throw\s+StateError`,
+    bash: String.raw `exit\s+\d|kill\s`,
 };
 // ── Weak / Dynamic Types ────────────────────────────────────────────────────
 export const WEAK_TYPE = {
@@ -252,6 +280,7 @@ export const WEAK_TYPE = {
     php: String.raw `mixed\b|\$\w+\s*\/\*\*.*@var\s+mixed`,
     kotlin: String.raw `:\s*Any\??\b|as\??\s+Any\b`,
     swift: String.raw `:\s*Any\b|as!\s|unsafeBitCast\s*\(`,
+    dart: String.raw `\bdynamic\b`,
 };
 // ── Async / Concurrency ─────────────────────────────────────────────────────
 export const ASYNC_FUNCTION = {
@@ -266,6 +295,8 @@ export const ASYNC_FUNCTION = {
     ruby: String.raw `Async\b|Thread\.new|Concurrent::`,
     kotlin: String.raw `suspend\s+fun|launch\s*\{|async\s*\{|withContext\s*\(`,
     swift: String.raw `async\s+func|Task\s*\{|TaskGroup`,
+    dart: String.raw `async\s+\{|Future<|Stream<|async\*`,
+    bash: String.raw `&\s*$|\bwait\b|\bnohup\b`,
 };
 export const MISSING_AWAIT = {
     jsts: String.raw `(?:^|\s)(?!await\s)(?:fetch|axios|got|request)\s*\(`,
@@ -273,6 +304,7 @@ export const MISSING_AWAIT = {
     rust: String.raw `(?:^|\s)(?!\.await)tokio::`,
     csharp: String.raw `(?:^|\s)(?!await\s)(?:HttpClient|Task\.Run)`,
     java: String.raw `(?:^|\s)(?!\.get\(\))CompletableFuture`,
+    dart: String.raw `(?:^|\s)(?!await\s)(?:http\.get|http\.post|dio\.get)`,
 };
 export const SHARED_MUTABLE = {
     jsts: String.raw `(?:let|var|const)\s+\w+\s*(?::[^=]+)?\s*=\s*(?:\{|\[|\d+|new\s)`,
@@ -288,6 +320,7 @@ export const SHARED_MUTABLE = {
     ruby: String.raw `(?:@@\w+\s*=|\$\w+\s*=)`,
     kotlin: String.raw `(?:companion\s+object.*var\b|@Volatile)`,
     swift: String.raw `(?:static\s+var\b|class\s+var\b)`,
+    dart: String.raw `(?:static\s+(?!final|const)\w+\s+\w+\s*=)`,
 };
 // ── Imports / Dependencies ───────────────────────────────────────────────────
 export const WILDCARD_IMPORT = {
@@ -297,6 +330,7 @@ export const WILDCARD_IMPORT = {
     csharp: String.raw `using\s+static\s+[\w.]+\.\*`,
     php: String.raw `use\s+[\w\\]+\\\{[^}]*\}`,
     kotlin: String.raw `import\s+[\w.]+\.\*\s*$`,
+    dart: String.raw `import\s+['"][^'"]+['"]\s+show\s`,
 };
 export const DEPRECATED_IMPORT = {
     jsts: String.raw `require\s*\(\s*["'](?:crypto|http|url|querystring|path)["']\s*\)`,
@@ -316,6 +350,8 @@ export const SQL_INJECTION = {
     ruby: String.raw `(?:ActiveRecord|\w+\.(?:where|find_by_sql|execute))\s*\(\s*(?:["'].*#\{|["'].*\+)`,
     kotlin: String.raw `(?:executeQuery|createQuery|nativeQuery|createStatement)\s*\(\s*(?:["'].*\+|\$?["'].*\$\w+)`,
     swift: String.raw `(?:execute|prepare)\s*\(\s*(?:["'].*\\\(|["'].*\+)`,
+    dart: String.raw `(?:rawQuery|execute|rawInsert)\s*\(\s*(?:["'].*\$|["'].*\+)`,
+    sql: String.raw `EXECUTE\s*\(\s*@|EXEC\s*\(\s*@|\+\s*@\w+`,
 };
 // ── Security: Command Injection ──────────────────────────────────────────────
 export const COMMAND_INJECTION = {
@@ -330,6 +366,8 @@ export const COMMAND_INJECTION = {
     ruby: String.raw `(?:system|exec|\x60|%x).*#\{|Kernel\.system\s*\(.*\+`,
     kotlin: String.raw `Runtime\.getRuntime\(\)\.exec\s*\(.*\+|ProcessBuilder\s*\(.*\+`,
     swift: String.raw `Process\(\).*arguments.*\+|NSTask\b`,
+    dart: String.raw `Process\.(?:run|start)\s*\(.*(?:\+|\$)`,
+    bash: String.raw `eval\s+\$|\$\(.*\$\{`,
 };
 // ── Security: Hardcoded Secrets ──────────────────────────────────────────────
 export const HARDCODED_PASSWORD = {
@@ -354,6 +392,7 @@ export const WEAK_HASH = {
     ruby: String.raw `Digest::(?:MD5|SHA1)`,
     kotlin: String.raw `MessageDigest\.getInstance\s*\(\s*["'](?:MD5|SHA-?1)["']\)`,
     swift: String.raw `CC_MD5|CC_SHA1|Insecure\.(?:MD5|SHA1)`,
+    dart: String.raw `md5\.convert|sha1\.convert|Digest\.(?:md5|sha1)`,
 };
 // ── Security: Eval / Dynamic Execution ───────────────────────────────────────
 export const EVAL_USAGE = {
@@ -368,6 +407,8 @@ export const EVAL_USAGE = {
     ruby: String.raw `\beval\s*\(|\bsend\s*\(|\binstance_eval\s*\(|\bclass_eval\s*\(`,
     kotlin: String.raw `ScriptEngine\.eval\s*\(`,
     swift: String.raw `NSExpression\b|JSContext\b.*evaluateScript`,
+    dart: String.raw `(?!)`,
+    bash: String.raw `\beval\s|source\s`,
 };
 // ── Security: TLS / Certificate ──────────────────────────────────────────────
 export const TLS_DISABLED = {
@@ -382,6 +423,7 @@ export const TLS_DISABLED = {
     ruby: String.raw `verify_mode\s*=\s*OpenSSL::SSL::VERIFY_NONE|ssl_verify_mode.*VERIFY_NONE`,
     kotlin: String.raw `TrustAllCerts|X509TrustManager|trustAllCerts`,
     swift: String.raw `ServerTrustPolicy\.disableEvaluation|allowsSelfSignedCertificates\s*=\s*true`,
+    dart: String.raw `badCertificateCallback.*true|allowBadCertificates\s*=\s*true`,
 };
 // ── Security: CORS ───────────────────────────────────────────────────────────
 export const CORS_WILDCARD = {
@@ -394,6 +436,7 @@ export const CORS_WILDCARD = {
     ruby: String.raw `allow_origin\s+["']\*["']|origins\s+["']\*["']`,
     kotlin: String.raw `@CrossOrigin\s*$|allowedOrigins\s*=.*\*`,
     swift: String.raw `Access-Control-Allow-Origin.*\*`,
+    dart: String.raw `Access-Control-Allow-Origin.*\*|allowedOrigins.*\*`,
 };
 // ── Web Framework Routes ─────────────────────────────────────────────────────
 export const HTTP_ROUTE = {
@@ -407,6 +450,7 @@ export const HTTP_ROUTE = {
     ruby: String.raw `(?:get|post|put|delete|patch)\s+["']/|resources?\s+:\w+`,
     kotlin: String.raw `@(?:Get|Post|Put|Delete|Patch)Mapping|routing\s*\{`,
     swift: String.raw `\.(?:get|post|put|delete|patch)\s*\(|@(?:GET|POST|PUT|DELETE)`,
+    dart: String.raw `@(?:Route|Get|Post|Put|Delete)\s*\(|app\.(?:get|post|put|delete)\s*\(`,
 };
 // ── Logging ──────────────────────────────────────────────────────────────────
 export const CONSOLE_LOG = {
@@ -421,6 +465,8 @@ export const CONSOLE_LOG = {
     ruby: String.raw `(?:puts|p|pp|print|warn)\s`,
     kotlin: String.raw `println\s*\(|print\s*\(`,
     swift: String.raw `print\s*\(|debugPrint\s*\(|dump\s*\(`,
+    dart: String.raw `print\s*\(|debugPrint\s*\(`,
+    bash: String.raw `echo\s|printf\s`,
 };
 export const STRUCTURED_LOG = {
     jsts: String.raw `(?:winston|bunyan|pino|log4js|logger)\.\w+\s*\(`,
@@ -433,6 +479,7 @@ export const STRUCTURED_LOG = {
     ruby: String.raw `(?:Rails\.logger|Logger\.new|logger)\.\w+\s*\(`,
     kotlin: String.raw `(?:Logger|log|logger)\.\w+\s*\(|LoggerFactory\.getLogger`,
     swift: String.raw `(?:Logger|os_log|OSLog)\.\w+\s*\(|Logger\(`,
+    dart: String.raw `(?:Logger|log|logger)\.\w+\s*\(|logging\.Logger`,
 };
 // ── Testing ──────────────────────────────────────────────────────────────────
 export const TEST_FUNCTION = {
@@ -447,6 +494,8 @@ export const TEST_FUNCTION = {
     ruby: String.raw `(?:describe|it|context|before|after)\s+["']|def\s+test_`,
     kotlin: String.raw `@Test\b|@BeforeEach|@AfterEach`,
     swift: String.raw `func\s+test\w+\s*\(|XCTAssert`,
+    dart: String.raw `(?:test|testWidgets|group)\s*\(|void\s+main\s*\(\)\s*\{`,
+    bash: String.raw `@test\b|assert\s|bats\b`,
 };
 export const ASSERTION = {
     jsts: String.raw `(?:expect|assert|should)\s*[\.(]`,
@@ -460,6 +509,8 @@ export const ASSERTION = {
     ruby: String.raw `(?:expect\(|assert_|should\b|must_)`,
     kotlin: String.raw `assert(?:Equals|True|False|NotNull|Throws)\s*\(|assertEquals\s*\(`,
     swift: String.raw `XCTAssert\w*\s*\(|#expect\s*\(`,
+    dart: String.raw `expect\s*\(|assert\s*\(`,
+    bash: String.raw `\[\s+-(?:eq|ne|lt|gt|le|ge)\s|assert\b`,
 };
 // ── Documentation ────────────────────────────────────────────────────────────
 export const DOC_COMMENT = {
@@ -474,6 +525,8 @@ export const DOC_COMMENT = {
     ruby: String.raw `#\s+@(?:param|return|note|example)|=begin[\s\S]*?=end`,
     kotlin: String.raw `/\*\*[\s\S]*?\*/|///\s`,
     swift: String.raw `///\s|/\*\*[\s\S]*?\*/`,
+    dart: String.raw `///\s|/\*\*[\s\S]*?\*/`,
+    sql: String.raw `--\s|/\*\*[\s\S]*?\*/`,
 };
 // ── Loop Constructs ──────────────────────────────────────────────────────────
 export const FOR_LOOP = {
@@ -488,6 +541,9 @@ export const FOR_LOOP = {
     ruby: String.raw `\.each\b|\.map\b|\.select\b|\.inject\b|for\s+\w+\s+in\b`,
     kotlin: String.raw `for\s*\(|\.forEach\s*\{|\.map\s*\{`,
     swift: String.raw `for\s+\w+\s+in\s|\.forEach\s*\{|\.map\s*\{`,
+    dart: String.raw `for\s*\(|\.forEach\s*\(|\.map\s*\(`,
+    bash: String.raw `for\s+\w+\s+in\s|while\s+`,
+    sql: String.raw `CURSOR\s+\w+|WHILE\s+|LOOP\b`,
 };
 // ── Type / Class Definitions ─────────────────────────────────────────────────
 export const CLASS_DEF = {
@@ -502,6 +558,7 @@ export const CLASS_DEF = {
     ruby: String.raw `(?:class|module)\s+\w+`,
     kotlin: String.raw `(?:class|data\s+class|object|interface|sealed\s+class|enum\s+class)\s+\w+`,
     swift: String.raw `(?:class|struct|enum|protocol|actor)\s+\w+`,
+    dart: String.raw `(?:class|abstract\s+class|mixin|extension)\s+\w+`,
 };
 // ── Package Manifests ────────────────────────────────────────────────────────
 export const MANIFEST_FILES = {
@@ -521,6 +578,9 @@ export const MANIFEST_FILES = {
     ruby: ["Gemfile", "Gemfile.lock", "*.gemspec"],
     kotlin: ["build.gradle.kts", "build.gradle", "pom.xml"],
     swift: ["Package.swift", "*.xcodeproj", "Podfile"],
+    dart: ["pubspec.yaml", "pubspec.lock"],
+    bash: [],
+    sql: [],
     dockerfile: ["Dockerfile", "Containerfile", ".dockerignore"],
     unknown: [],
 };
@@ -537,6 +597,7 @@ export const INPUT_VALIDATION = {
     ruby: String.raw `params\[|params\.(?:require|permit)\s*\(`,
     kotlin: String.raw `@RequestParam|@PathVariable|@RequestBody|call\.receive\b`,
     swift: String.raw `request\.(?:content|query|parameters)\b|req\.(?:content|query)\b`,
+    dart: String.raw `request\.(?:body|params|query|uri)\b`,
 };
 // ── Mutex / Lock ─────────────────────────────────────────────────────────────
 export const MUTEX = {
@@ -550,6 +611,7 @@ export const MUTEX = {
     ruby: String.raw `Mutex\.new|Monitor\.new|\bsynchronize\b`,
     kotlin: String.raw `(?:synchronized\b|Mutex|ReentrantLock|Semaphore)`,
     swift: String.raw `NSLock|NSRecursiveLock|DispatchSemaphore|os_unfair_lock`,
+    dart: String.raw `Lock\b|Completer\b|synchronized\b`,
 };
 // ── Database Access ──────────────────────────────────────────────────────────
 export const DB_QUERY = {
@@ -564,6 +626,8 @@ export const DB_QUERY = {
     ruby: String.raw `ActiveRecord|\w+\.(?:where|find|find_by|select|pluck)\s*\(`,
     kotlin: String.raw `\.(?:executeQuery|createQuery|persist|find)\s*\(|transaction\s*\{`,
     swift: String.raw `\.(?:execute|prepare|query)\s*\(|NSFetchRequest`,
+    dart: String.raw `\.(?:rawQuery|rawInsert|rawUpdate|rawDelete|query|execute)\s*\(`,
+    sql: String.raw `SELECT\s+|INSERT\s+|UPDATE\s+|DELETE\s+|EXEC(?:UTE)?\s+`,
 };
 // ── HTTP Client ──────────────────────────────────────────────────────────────
 export const HTTP_CLIENT = {
@@ -578,6 +642,8 @@ export const HTTP_CLIENT = {
     ruby: String.raw `Net::HTTP|HTTParty|Faraday|RestClient`,
     kotlin: String.raw `HttpClient\.\w+\s*\(|OkHttpClient|Fuel\.\w+\s*\(|ktor.*client`,
     swift: String.raw `URLSession\.\w+\s*\(|URLRequest\s*\(|Alamofire`,
+    dart: String.raw `http\.(?:get|post|put|delete)\s*\(|Dio\(|HttpClient\(`,
+    bash: String.raw `curl\s|wget\s`,
 };
 // ── Config / Constants ───────────────────────────────────────────────────────
 export const MAGIC_NUMBER = {
@@ -588,6 +654,8 @@ export const MAGIC_NUMBER = {
     java: String.raw `(?:==|!=|<=?|>=?|&&|\|\|)\s*\d{2,}|(?:TIMEOUT|DELAY|LIMIT|MAX|MIN|SIZE|COUNT|PORT)\s*=\s*\d{3,}`,
     go: String.raw `(?:==|!=|<=?|>=?|&&|\|\|)\s*\d{2,}|(?:timeout|delay|limit|max|min|size|count|port)\s*[:=]\s*\d{3,}`,
     powershell: String.raw `(?:-eq|-ne|-lt|-le|-gt|-ge)\s*\d{2,}|(?:Timeout|Delay|Limit|Max|Min|Size|Count|Port)\s*=\s*\d{3,}`,
+    dart: String.raw `(?:==|!=|<=?|>=?|&&|\|\|)\s*\d{2,}|(?:timeout|delay|limit|max|min|size|count|port)\s*[:=]\s*\d{3,}`,
+    bash: String.raw `(?:-eq|-ne|-lt|-le|-gt|-ge)\s*\d{2,}|(?:TIMEOUT|DELAY|LIMIT|MAX|MIN|SIZE|COUNT|PORT)=\s*\d{3,}`,
 };
 // ── TODO / FIXME ─────────────────────────────────────────────────────────────
 export const TODO_FIXME = {
@@ -606,6 +674,9 @@ export const LINTER_DISABLE = {
     ruby: String.raw `rubocop:disable|# :nocov:|# :reek:`,
     kotlin: String.raw `@Suppress\(|@SuppressWarnings|detekt:`,
     swift: String.raw `swiftlint:disable|nolint`,
+    dart: String.raw `// ignore:|// ignore_for_file:`,
+    bash: String.raw `# shellcheck\s+disable`,
+    sql: String.raw `-- noqa|-- noinspection`,
 };
 // ── Serialization ────────────────────────────────────────────────────────────
 export const UNSAFE_DESERIALIZATION = {
@@ -620,6 +691,8 @@ export const UNSAFE_DESERIALIZATION = {
     ruby: String.raw `Marshal\.load|YAML\.load(?!_safe)|Oj\.load`,
     kotlin: String.raw `ObjectInputStream\.readObject|readObject\s*\(`,
     swift: String.raw `NSKeyedUnarchiver\.unarchiveObject|JSONDecoder\(\)\.decode.*(?:request|input)`,
+    dart: String.raw `jsonDecode\s*\(.*(?:request|body|input)`,
+    bash: String.raw `eval\s+\$\(cat\s`,
 };
 // ── Memory / Resource ────────────────────────────────────────────────────────
 export const RESOURCE_LEAK = {
@@ -634,6 +707,8 @@ export const RESOURCE_LEAK = {
     ruby: String.raw `File\.open\s*\((?!.*\bdo\b)|IO\.(?:popen|sysopen)\s*\(`,
     kotlin: String.raw `FileInputStream\s*\(|FileOutputStream\s*\(|Socket\s*\(`,
     swift: String.raw `FileHandle\(|InputStream\(|OutputStream\(`,
+    dart: String.raw `File\(|HttpClient\(|Socket\.connect`,
+    bash: String.raw `exec\s+\d+>|mkfifo\s`,
 };
 // ── Deprecated APIs ──────────────────────────────────────────────────────────
 export const DEPRECATED_API = {
@@ -647,6 +722,7 @@ export const DEPRECATED_API = {
     ruby: String.raw `File\.exists\?|URI\.escape|Fixnum\b|Bignum\b`,
     kotlin: String.raw `\.newInstance\s*\(\s*\)|Date\s*\(\s*\)`,
     swift: String.raw `URLRequest.*HTTPBody|NSURLConnection\b`,
+    dart: String.raw `\.then\s*\(.*\.catchError|new\s+HttpClient\(`,
 };
 // ── Framework-Specific Security Patterns ─────────────────────────────────────
 // Detect common security misconfigurations in popular web frameworks.
@@ -660,6 +736,7 @@ export const FRAMEWORK_DEBUG_MODE = {
     ruby: String.raw `config\.consider_all_requests_local\s*=\s*true`,
     kotlin: String.raw `server\.error\.include-stacktrace\s*=\s*always`,
     swift: String.raw `\.environment\s*=\s*\.development`,
+    dart: String.raw `kDebugMode|kReleaseMode\s*==\s*false`,
 };
 /** Missing HTTPS / security middleware in frameworks */
 export const FRAMEWORK_MISSING_SECURITY = {
@@ -671,6 +748,7 @@ export const FRAMEWORK_MISSING_SECURITY = {
     php: String.raw `Route::(?:get|post)\s*\((?!.*middleware|.*auth)`,
     ruby: String.raw `skip_before_action\s*:\s*(?:authenticate|verify)`,
     swift: String.raw `app\.http\.server\.configuration\.hostname\s*=\s*["']0\.0\.0\.0`,
+    dart: String.raw `app\.listen\s*\(\s*(?:80|3000)\b`,
 };
 /** Framework-specific secret key / session misconfigurations */
 export const FRAMEWORK_SECRET_KEY = {