@lateos/npm-scan 0.11.2 → 0.11.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.de.md +2 -2
- package/README.fr.md +2 -2
- package/README.ja.md +2 -2
- package/README.md +4 -4
- package/README.zh.md +2 -2
- package/package.json +1 -1
package/README.de.md
CHANGED
|
@@ -109,9 +109,9 @@ Kein Node.js. Kein `npm install`. Keine globalen Pakete. Funktioniert auf jedem
|
|
|
109
109
|
|
|
110
110
|
---
|
|
111
111
|
|
|
112
|
-
## 🛡️ Behörden- & SOC 2
|
|
112
|
+
## 🛡️ Behörden- & SOC 2-bereit
|
|
113
113
|
|
|
114
|
-
| Funktion | SOC 2 | NIST 800-161 | STIG/FedRAMP |
|
|
114
|
+
| Funktion | SOC 2-Kontrollen | NIST 800-161 | STIG/FedRAMP-Ausrichtung |
|
|
115
115
|
|----------|-------|--------------|--------------|
|
|
116
116
|
| Audit-Protokolle (--audit-log) | CC6.8 | AU-2 | ✓ |
|
|
117
117
|
| FIPS-Krypto (--fips) | CC6.1 | SC-13 | ✓ |
|
package/README.fr.md
CHANGED
|
@@ -109,9 +109,9 @@ Pas de Node.js. Pas de `npm install`. Pas de paquets globaux. Fonctionne sur tou
|
|
|
109
109
|
|
|
110
110
|
---
|
|
111
111
|
|
|
112
|
-
## 🛡️ Prêt pour le Gouvernement et SOC 2
|
|
112
|
+
## 🛡️ Prêt pour le Gouvernement et SOC 2
|
|
113
113
|
|
|
114
|
-
| Fonctionnalité | SOC 2 | NIST 800-161 | STIG/FedRAMP |
|
|
114
|
+
| Fonctionnalité | Contrôles SOC 2 | NIST 800-161 | Alignement STIG/FedRAMP |
|
|
115
115
|
|----------------|-------|--------------|--------------|
|
|
116
116
|
| Journaux d'audit (--audit-log) | CC6.8 | AU-2 | ✓ |
|
|
117
117
|
| Crypto FIPS (--fips) | CC6.1 | SC-13 | ✓ |
|
package/README.ja.md
CHANGED
|
@@ -109,9 +109,9 @@ Node.js不要。`npm install`不要。グローバルパッケージ不要。Doc
|
|
|
109
109
|
|
|
110
110
|
---
|
|
111
111
|
|
|
112
|
-
## 🛡️ 政府機関・SOC 2
|
|
112
|
+
## 🛡️ 政府機関・SOC 2 対応
|
|
113
113
|
|
|
114
|
-
| 機能 | SOC 2 | NIST 800-161 | STIG/FedRAMP |
|
|
114
|
+
| 機能 | SOC 2 コントロール | NIST 800-161 | STIG/FedRAMP アライメント |
|
|
115
115
|
|------|-------|--------------|--------------|
|
|
116
116
|
| 監査ログ (--audit-log) | CC6.8 | AU-2 | ✓ |
|
|
117
117
|
| FIPS暗号化 (--fips) | CC6.1 | SC-13 | ✓ |
|
package/README.md
CHANGED
|
@@ -110,9 +110,9 @@ No Node.js. No `npm install`. No global packages. Works on any system with Docke
|
|
|
110
110
|
|
|
111
111
|
---
|
|
112
112
|
|
|
113
|
-
## 🛡️ Government & SOC 2
|
|
113
|
+
## 🛡️ Government & SOC 2 Ready
|
|
114
114
|
|
|
115
|
-
| Feature | SOC 2 | NIST 800-161 | STIG/FedRAMP |
|
|
115
|
+
| Feature | SOC 2 Controls | NIST 800-161 | STIG/FedRAMP Alignment |
|
|
116
116
|
|---------|-------|--------------|--------------|
|
|
117
117
|
| Audit logs (--audit-log) | CC6.8 | AU-2 | ✓ |
|
|
118
118
|
| FIPS crypto (--fips) | CC6.1 | SC-13 | ✓ |
|
|
@@ -127,8 +127,8 @@ npm-scan scan-lockfile --cache-dir /offline/cache --audit-log /var/log/npm-scan.
|
|
|
127
127
|
npm-scan report --stig
|
|
128
128
|
```
|
|
129
129
|
|
|
130
|
-
[](https://www.aicpa.org/interestareas/frc/assuranceadvisoryservices/sorhome.html#soc2)
|
|
131
|
+
[](https://fedramp.gov/baselines/)
|
|
132
132
|
|
|
133
133
|
---
|
|
134
134
|
|
package/README.zh.md
CHANGED
|
@@ -109,9 +109,9 @@ docker compose --profile pipeline up -d
|
|
|
109
109
|
|
|
110
110
|
---
|
|
111
111
|
|
|
112
|
-
## 🛡️ 政府与 SOC 2
|
|
112
|
+
## 🛡️ 政府与 SOC 2 就绪
|
|
113
113
|
|
|
114
|
-
| 功能 | SOC 2 | NIST 800-161 | STIG/FedRAMP |
|
|
114
|
+
| 功能 | SOC 2 控制 | NIST 800-161 | STIG/FedRAMP 对齐 |
|
|
115
115
|
|------|-------|--------------|--------------|
|
|
116
116
|
| 审计日志 (--audit-log) | CC6.8 | AU-2 | ✓ |
|
|
117
117
|
| FIPS 加密 (--fips) | CC6.1 | SC-13 | ✓ |
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@lateos/npm-scan",
|
|
3
|
-
"version": "0.11.
|
|
3
|
+
"version": "0.11.3",
|
|
4
4
|
"description": "Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.",
|
|
5
5
|
"main": "backend/index.js",
|
|
6
6
|
"bin": {
|