@korayda4/vibe-security 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (183) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +240 -0
  3. package/dist/cli.d.ts +2 -0
  4. package/dist/cli.js +333 -0
  5. package/dist/cli.js.map +1 -0
  6. package/dist/engine/baseline.d.ts +19 -0
  7. package/dist/engine/baseline.js +48 -0
  8. package/dist/engine/baseline.js.map +1 -0
  9. package/dist/engine/config.d.ts +26 -0
  10. package/dist/engine/config.js +41 -0
  11. package/dist/engine/config.js.map +1 -0
  12. package/dist/engine/fixer.d.ts +22 -0
  13. package/dist/engine/fixer.js +87 -0
  14. package/dist/engine/fixer.js.map +1 -0
  15. package/dist/engine/language.d.ts +27 -0
  16. package/dist/engine/language.js +364 -0
  17. package/dist/engine/language.js.map +1 -0
  18. package/dist/engine/output.d.ts +6 -0
  19. package/dist/engine/output.js +155 -0
  20. package/dist/engine/output.js.map +1 -0
  21. package/dist/engine/reporter.d.ts +3 -0
  22. package/dist/engine/reporter.js +145 -0
  23. package/dist/engine/reporter.js.map +1 -0
  24. package/dist/engine/rules/_helpers.d.ts +9 -0
  25. package/dist/engine/rules/_helpers.js +64 -0
  26. package/dist/engine/rules/_helpers.js.map +1 -0
  27. package/dist/engine/rules/backend/fileUpload.d.ts +3 -0
  28. package/dist/engine/rules/backend/fileUpload.js +40 -0
  29. package/dist/engine/rules/backend/fileUpload.js.map +1 -0
  30. package/dist/engine/rules/backend/hashing.d.ts +3 -0
  31. package/dist/engine/rules/backend/hashing.js +40 -0
  32. package/dist/engine/rules/backend/hashing.js.map +1 -0
  33. package/dist/engine/rules/backend/idor.d.ts +3 -0
  34. package/dist/engine/rules/backend/idor.js +40 -0
  35. package/dist/engine/rules/backend/idor.js.map +1 -0
  36. package/dist/engine/rules/backend/index.d.ts +12 -0
  37. package/dist/engine/rules/backend/index.js +22 -0
  38. package/dist/engine/rules/backend/index.js.map +1 -0
  39. package/dist/engine/rules/backend/inputValidation.d.ts +3 -0
  40. package/dist/engine/rules/backend/inputValidation.js +37 -0
  41. package/dist/engine/rules/backend/inputValidation.js.map +1 -0
  42. package/dist/engine/rules/backend/jwt.d.ts +3 -0
  43. package/dist/engine/rules/backend/jwt.js +42 -0
  44. package/dist/engine/rules/backend/jwt.js.map +1 -0
  45. package/dist/engine/rules/backend/rateLimit.d.ts +3 -0
  46. package/dist/engine/rules/backend/rateLimit.js +45 -0
  47. package/dist/engine/rules/backend/rateLimit.js.map +1 -0
  48. package/dist/engine/rules/backend/sqlInjection.d.ts +3 -0
  49. package/dist/engine/rules/backend/sqlInjection.js +41 -0
  50. package/dist/engine/rules/backend/sqlInjection.js.map +1 -0
  51. package/dist/engine/rules/backend/tokenExpiry.d.ts +3 -0
  52. package/dist/engine/rules/backend/tokenExpiry.js +85 -0
  53. package/dist/engine/rules/backend/tokenExpiry.js.map +1 -0
  54. package/dist/engine/rules/backend/tokenInUrl.d.ts +3 -0
  55. package/dist/engine/rules/backend/tokenInUrl.js +112 -0
  56. package/dist/engine/rules/backend/tokenInUrl.js.map +1 -0
  57. package/dist/engine/rules/cicd/dependencies.d.ts +3 -0
  58. package/dist/engine/rules/cicd/dependencies.js +44 -0
  59. package/dist/engine/rules/cicd/dependencies.js.map +1 -0
  60. package/dist/engine/rules/cicd/dockerfile.d.ts +3 -0
  61. package/dist/engine/rules/cicd/dockerfile.js +42 -0
  62. package/dist/engine/rules/cicd/dockerfile.js.map +1 -0
  63. package/dist/engine/rules/cicd/index.d.ts +6 -0
  64. package/dist/engine/rules/cicd/index.js +10 -0
  65. package/dist/engine/rules/cicd/index.js.map +1 -0
  66. package/dist/engine/rules/cicd/secrets.d.ts +3 -0
  67. package/dist/engine/rules/cicd/secrets.js +41 -0
  68. package/dist/engine/rules/cicd/secrets.js.map +1 -0
  69. package/dist/engine/rules/database/encryption.d.ts +3 -0
  70. package/dist/engine/rules/database/encryption.js +37 -0
  71. package/dist/engine/rules/database/encryption.js.map +1 -0
  72. package/dist/engine/rules/database/index.d.ts +5 -0
  73. package/dist/engine/rules/database/index.js +8 -0
  74. package/dist/engine/rules/database/index.js.map +1 -0
  75. package/dist/engine/rules/database/privileges.d.ts +3 -0
  76. package/dist/engine/rules/database/privileges.js +40 -0
  77. package/dist/engine/rules/database/privileges.js.map +1 -0
  78. package/dist/engine/rules/frontend/clickjacking.d.ts +3 -0
  79. package/dist/engine/rules/frontend/clickjacking.js +41 -0
  80. package/dist/engine/rules/frontend/clickjacking.js.map +1 -0
  81. package/dist/engine/rules/frontend/cookies.d.ts +3 -0
  82. package/dist/engine/rules/frontend/cookies.js +35 -0
  83. package/dist/engine/rules/frontend/cookies.js.map +1 -0
  84. package/dist/engine/rules/frontend/envVars.d.ts +3 -0
  85. package/dist/engine/rules/frontend/envVars.js +34 -0
  86. package/dist/engine/rules/frontend/envVars.js.map +1 -0
  87. package/dist/engine/rules/frontend/eval.d.ts +3 -0
  88. package/dist/engine/rules/frontend/eval.js +35 -0
  89. package/dist/engine/rules/frontend/eval.js.map +1 -0
  90. package/dist/engine/rules/frontend/index.d.ts +9 -0
  91. package/dist/engine/rules/frontend/index.js +16 -0
  92. package/dist/engine/rules/frontend/index.js.map +1 -0
  93. package/dist/engine/rules/frontend/sourceMaps.d.ts +3 -0
  94. package/dist/engine/rules/frontend/sourceMaps.js +79 -0
  95. package/dist/engine/rules/frontend/sourceMaps.js.map +1 -0
  96. package/dist/engine/rules/frontend/xss.d.ts +3 -0
  97. package/dist/engine/rules/frontend/xss.js +70 -0
  98. package/dist/engine/rules/frontend/xss.js.map +1 -0
  99. package/dist/engine/rules/index.d.ts +8 -0
  100. package/dist/engine/rules/index.js +38 -0
  101. package/dist/engine/rules/index.js.map +1 -0
  102. package/dist/engine/rules/kotlin/index.d.ts +5 -0
  103. package/dist/engine/rules/kotlin/index.js +8 -0
  104. package/dist/engine/rules/kotlin/index.js.map +1 -0
  105. package/dist/engine/rules/kotlin/kotlinxHtml.d.ts +3 -0
  106. package/dist/engine/rules/kotlin/kotlinxHtml.js +54 -0
  107. package/dist/engine/rules/kotlin/kotlinxHtml.js.map +1 -0
  108. package/dist/engine/rules/kotlin/sqlInjection.d.ts +3 -0
  109. package/dist/engine/rules/kotlin/sqlInjection.js +57 -0
  110. package/dist/engine/rules/kotlin/sqlInjection.js.map +1 -0
  111. package/dist/engine/rules/network/cors.d.ts +3 -0
  112. package/dist/engine/rules/network/cors.js +106 -0
  113. package/dist/engine/rules/network/cors.js.map +1 -0
  114. package/dist/engine/rules/network/headers.d.ts +3 -0
  115. package/dist/engine/rules/network/headers.js +51 -0
  116. package/dist/engine/rules/network/headers.js.map +1 -0
  117. package/dist/engine/rules/network/index.d.ts +6 -0
  118. package/dist/engine/rules/network/index.js +10 -0
  119. package/dist/engine/rules/network/index.js.map +1 -0
  120. package/dist/engine/rules/network/tls.d.ts +3 -0
  121. package/dist/engine/rules/network/tls.js +40 -0
  122. package/dist/engine/rules/network/tls.js.map +1 -0
  123. package/dist/engine/rules/observability/errorHandler.d.ts +3 -0
  124. package/dist/engine/rules/observability/errorHandler.js +34 -0
  125. package/dist/engine/rules/observability/errorHandler.js.map +1 -0
  126. package/dist/engine/rules/observability/index.d.ts +5 -0
  127. package/dist/engine/rules/observability/index.js +8 -0
  128. package/dist/engine/rules/observability/index.js.map +1 -0
  129. package/dist/engine/rules/observability/logging.d.ts +3 -0
  130. package/dist/engine/rules/observability/logging.js +38 -0
  131. package/dist/engine/rules/observability/logging.js.map +1 -0
  132. package/dist/engine/rules/php/index.d.ts +6 -0
  133. package/dist/engine/rules/php/index.js +10 -0
  134. package/dist/engine/rules/php/index.js.map +1 -0
  135. package/dist/engine/rules/php/sqlInjection.d.ts +3 -0
  136. package/dist/engine/rules/php/sqlInjection.js +58 -0
  137. package/dist/engine/rules/php/sqlInjection.js.map +1 -0
  138. package/dist/engine/rules/php/weakHashing.d.ts +3 -0
  139. package/dist/engine/rules/php/weakHashing.js +36 -0
  140. package/dist/engine/rules/php/weakHashing.js.map +1 -0
  141. package/dist/engine/rules/php/xss.d.ts +3 -0
  142. package/dist/engine/rules/php/xss.js +56 -0
  143. package/dist/engine/rules/php/xss.js.map +1 -0
  144. package/dist/engine/rules/ruby/index.d.ts +6 -0
  145. package/dist/engine/rules/ruby/index.js +10 -0
  146. package/dist/engine/rules/ruby/index.js.map +1 -0
  147. package/dist/engine/rules/ruby/sqlInjection.d.ts +3 -0
  148. package/dist/engine/rules/ruby/sqlInjection.js +56 -0
  149. package/dist/engine/rules/ruby/sqlInjection.js.map +1 -0
  150. package/dist/engine/rules/ruby/strongParams.d.ts +3 -0
  151. package/dist/engine/rules/ruby/strongParams.js +35 -0
  152. package/dist/engine/rules/ruby/strongParams.js.map +1 -0
  153. package/dist/engine/rules/ruby/xss.d.ts +3 -0
  154. package/dist/engine/rules/ruby/xss.js +55 -0
  155. package/dist/engine/rules/ruby/xss.js.map +1 -0
  156. package/dist/engine/rules/rust/index.d.ts +6 -0
  157. package/dist/engine/rules/rust/index.js +10 -0
  158. package/dist/engine/rules/rust/index.js.map +1 -0
  159. package/dist/engine/rules/rust/secretInCode.d.ts +3 -0
  160. package/dist/engine/rules/rust/secretInCode.js +36 -0
  161. package/dist/engine/rules/rust/secretInCode.js.map +1 -0
  162. package/dist/engine/rules/rust/sqlInjection.d.ts +3 -0
  163. package/dist/engine/rules/rust/sqlInjection.js +55 -0
  164. package/dist/engine/rules/rust/sqlInjection.js.map +1 -0
  165. package/dist/engine/rules/rust/unsafeExpect.d.ts +3 -0
  166. package/dist/engine/rules/rust/unsafeExpect.js +56 -0
  167. package/dist/engine/rules/rust/unsafeExpect.js.map +1 -0
  168. package/dist/engine/scanner.d.ts +5 -0
  169. package/dist/engine/scanner.js +135 -0
  170. package/dist/engine/scanner.js.map +1 -0
  171. package/dist/engine/walker.d.ts +11 -0
  172. package/dist/engine/walker.js +90 -0
  173. package/dist/engine/walker.js.map +1 -0
  174. package/dist/index.d.ts +2 -0
  175. package/dist/index.js +7 -0
  176. package/dist/index.js.map +1 -0
  177. package/dist/server.d.ts +36 -0
  178. package/dist/server.js +360 -0
  179. package/dist/server.js.map +1 -0
  180. package/dist/types.d.ts +92 -0
  181. package/dist/types.js +2 -0
  182. package/dist/types.js.map +1 -0
  183. package/package.json +85 -0
package/package.json ADDED
@@ -0,0 +1,85 @@
1
+ {
2
+ "name": "@korayda4/vibe-security",
3
+ "version": "0.3.0",
4
+ "description": "Security guard MCP server for Vibe Coded projects — scans Frontend and Backend across every layer and language, plans + tests + fixes vulnerabilities. Claude Code and VS Code Anthropic Claude extension compatible.",
5
+ "type": "module",
6
+ "main": "dist/index.js",
7
+ "bin": {
8
+ "vibe-security": "dist/cli.js"
9
+ },
10
+ "files": [
11
+ "dist",
12
+ "README.md",
13
+ "LICENSE"
14
+ ],
15
+ "scripts": {
16
+ "build": "tsc",
17
+ "dev": "tsc --watch",
18
+ "start": "node dist/index.js",
19
+ "cli": "node dist/cli.js",
20
+ "test": "node --test --import tsx --test-reporter=spec test/test.ts",
21
+ "lint": "tsc --noEmit",
22
+ "scan": "node dist/cli.js scan",
23
+ "prepare": "npm run build",
24
+ "prepublishOnly": "npm run lint && npm test"
25
+ },
26
+ "keywords": [
27
+ "mcp",
28
+ "model-context-protocol",
29
+ "claude-code",
30
+ "claude-extension",
31
+ "vscode",
32
+ "anthropic",
33
+ "security",
34
+ "sast",
35
+ "scanner",
36
+ "vibe-coding",
37
+ "vibe-security",
38
+ "react",
39
+ "nextjs",
40
+ "vuejs",
41
+ "angular",
42
+ "express",
43
+ "fastapi",
44
+ "django",
45
+ "rails",
46
+ "laravel",
47
+ "dotnet",
48
+ "rust",
49
+ "ruby",
50
+ "php",
51
+ "kotlin",
52
+ "cpp",
53
+ "csharp",
54
+ "xss",
55
+ "sql-injection",
56
+ "owasp",
57
+ "sarif"
58
+ ],
59
+ "author": {
60
+ "name": "Koray Demir",
61
+ "email": "koraydemirmc@gmail.com",
62
+ "url": "https://github.com/korayda4"
63
+ },
64
+ "license": "MIT",
65
+ "repository": {
66
+ "type": "git",
67
+ "url": "git+https://github.com/korayda4/Vibe-Security.git"
68
+ },
69
+ "bugs": {
70
+ "url": "https://github.com/korayda4/Vibe-Security/issues",
71
+ "email": "koraydemirmc@gmail.com"
72
+ },
73
+ "homepage": "https://github.com/korayda4/Vibe-Security#readme",
74
+ "engines": {
75
+ "node": ">=18"
76
+ },
77
+ "dependencies": {
78
+ "@modelcontextprotocol/sdk": "^1.0.4"
79
+ },
80
+ "devDependencies": {
81
+ "@types/node": "^22.10.2",
82
+ "tsx": "^4.23.13",
83
+ "typescript": "^5.7.2"
84
+ }
85
+ }