@lateos/npm-scan 0.11.2 → 0.11.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.de.md +4 -5
- package/README.fr.md +4 -5
- package/README.ja.md +4 -5
- package/README.md +6 -7
- package/README.zh.md +4 -5
- package/cli/cli.js +1 -1
- package/package.json +1 -1
package/README.de.md
CHANGED
|
@@ -109,9 +109,9 @@ Kein Node.js. Kein `npm install`. Keine globalen Pakete. Funktioniert auf jedem
|
|
|
109
109
|
|
|
110
110
|
---
|
|
111
111
|
|
|
112
|
-
## 🛡️ Behörden- & SOC 2
|
|
112
|
+
## 🛡️ Behörden- & SOC 2-bereit
|
|
113
113
|
|
|
114
|
-
| Funktion | SOC 2 | NIST 800-161 | STIG/FedRAMP |
|
|
114
|
+
| Funktion | SOC 2-Kontrollen | NIST 800-161 | STIG/FedRAMP-Ausrichtung |
|
|
115
115
|
|----------|-------|--------------|--------------|
|
|
116
116
|
| Audit-Protokolle (--audit-log) | CC6.8 | AU-2 | ✓ |
|
|
117
117
|
| FIPS-Krypto (--fips) | CC6.1 | SC-13 | ✓ |
|
|
@@ -306,10 +306,9 @@ npm-scan scan target --policy .npm-scan.yml
|
|
|
306
306
|
|
|
307
307
|
### Premium-Lizenzierung
|
|
308
308
|
|
|
309
|
-
|
|
310
|
-
# Einen Entwicklerschlüssel generieren
|
|
311
|
-
node -e "console.log(require('@lateos/npm-scan/backend/license').generateKey('premium'))"
|
|
309
|
+
Kontaktieren Sie leo@lateos.ai, um einen Premium/Enterprise-Lizenzschlüssel zu erhalten.
|
|
312
310
|
|
|
311
|
+
```bash
|
|
313
312
|
# Verwenden
|
|
314
313
|
npm-scan scan target --license-key <key>
|
|
315
314
|
npm-scan report --pdf --license-key <key>
|
package/README.fr.md
CHANGED
|
@@ -109,9 +109,9 @@ Pas de Node.js. Pas de `npm install`. Pas de paquets globaux. Fonctionne sur tou
|
|
|
109
109
|
|
|
110
110
|
---
|
|
111
111
|
|
|
112
|
-
## 🛡️ Prêt pour le Gouvernement et SOC 2
|
|
112
|
+
## 🛡️ Prêt pour le Gouvernement et SOC 2
|
|
113
113
|
|
|
114
|
-
| Fonctionnalité | SOC 2 | NIST 800-161 | STIG/FedRAMP |
|
|
114
|
+
| Fonctionnalité | Contrôles SOC 2 | NIST 800-161 | Alignement STIG/FedRAMP |
|
|
115
115
|
|----------------|-------|--------------|--------------|
|
|
116
116
|
| Journaux d'audit (--audit-log) | CC6.8 | AU-2 | ✓ |
|
|
117
117
|
| Crypto FIPS (--fips) | CC6.1 | SC-13 | ✓ |
|
|
@@ -306,10 +306,9 @@ npm-scan scan target --policy .npm-scan.yml
|
|
|
306
306
|
|
|
307
307
|
### Licence premium
|
|
308
308
|
|
|
309
|
-
|
|
310
|
-
# Générer une clé de développement
|
|
311
|
-
node -e "console.log(require('@lateos/npm-scan/backend/license').generateKey('premium'))"
|
|
309
|
+
Contactez leo@lateos.ai pour obtenir une clé de licence premium/enterprise.
|
|
312
310
|
|
|
311
|
+
```bash
|
|
313
312
|
# L'utiliser
|
|
314
313
|
npm-scan scan target --license-key <key>
|
|
315
314
|
npm-scan report --pdf --license-key <key>
|
package/README.ja.md
CHANGED
|
@@ -109,9 +109,9 @@ Node.js不要。`npm install`不要。グローバルパッケージ不要。Doc
|
|
|
109
109
|
|
|
110
110
|
---
|
|
111
111
|
|
|
112
|
-
## 🛡️ 政府機関・SOC 2
|
|
112
|
+
## 🛡️ 政府機関・SOC 2 対応
|
|
113
113
|
|
|
114
|
-
| 機能 | SOC 2 | NIST 800-161 | STIG/FedRAMP |
|
|
114
|
+
| 機能 | SOC 2 コントロール | NIST 800-161 | STIG/FedRAMP アライメント |
|
|
115
115
|
|------|-------|--------------|--------------|
|
|
116
116
|
| 監査ログ (--audit-log) | CC6.8 | AU-2 | ✓ |
|
|
117
117
|
| FIPS暗号化 (--fips) | CC6.1 | SC-13 | ✓ |
|
|
@@ -302,10 +302,9 @@ npm-scan scan target --policy .npm-scan.yml
|
|
|
302
302
|
|
|
303
303
|
### プレミアムライセンス
|
|
304
304
|
|
|
305
|
-
|
|
306
|
-
# 開発用キーを生成
|
|
307
|
-
node -e "console.log(require('@lateos/npm-scan/backend/license').generateKey('premium'))"
|
|
305
|
+
leo@lateos.ai までお問い合わせいただき、高级版/エンタープライズ版ライセンスキーを取得してください。
|
|
308
306
|
|
|
307
|
+
```bash
|
|
309
308
|
# それを使用
|
|
310
309
|
npm-scan scan target --license-key <key>
|
|
311
310
|
npm-scan report --pdf --license-key <key>
|
package/README.md
CHANGED
|
@@ -110,9 +110,9 @@ No Node.js. No `npm install`. No global packages. Works on any system with Docke
|
|
|
110
110
|
|
|
111
111
|
---
|
|
112
112
|
|
|
113
|
-
## 🛡️ Government & SOC 2
|
|
113
|
+
## 🛡️ Government & SOC 2 Ready
|
|
114
114
|
|
|
115
|
-
| Feature | SOC 2 | NIST 800-161 | STIG/FedRAMP |
|
|
115
|
+
| Feature | SOC 2 Controls | NIST 800-161 | STIG/FedRAMP Alignment |
|
|
116
116
|
|---------|-------|--------------|--------------|
|
|
117
117
|
| Audit logs (--audit-log) | CC6.8 | AU-2 | ✓ |
|
|
118
118
|
| FIPS crypto (--fips) | CC6.1 | SC-13 | ✓ |
|
|
@@ -127,8 +127,8 @@ npm-scan scan-lockfile --cache-dir /offline/cache --audit-log /var/log/npm-scan.
|
|
|
127
127
|
npm-scan report --stig
|
|
128
128
|
```
|
|
129
129
|
|
|
130
|
-
[](https://www.aicpa.org/interestareas/frc/assuranceadvisoryservices/sorhome.html#soc2)
|
|
131
|
+
[](https://fedramp.gov/baselines/)
|
|
132
132
|
|
|
133
133
|
---
|
|
134
134
|
|
|
@@ -343,10 +343,9 @@ npm-scan scan target --policy .npm-scan.yml
|
|
|
343
343
|
|
|
344
344
|
### Premium licensing
|
|
345
345
|
|
|
346
|
-
|
|
347
|
-
# Generate a development key
|
|
348
|
-
node -e "console.log(require('@lateos/npm-scan/backend/license').generateKey('premium'))"
|
|
346
|
+
Contact leo@lateos.ai for a premium/enterprise license key.
|
|
349
347
|
|
|
348
|
+
```bash
|
|
350
349
|
# Use it
|
|
351
350
|
npm-scan scan target --license-key <key>
|
|
352
351
|
npm-scan report --pdf --license-key <key>
|
package/README.zh.md
CHANGED
|
@@ -109,9 +109,9 @@ docker compose --profile pipeline up -d
|
|
|
109
109
|
|
|
110
110
|
---
|
|
111
111
|
|
|
112
|
-
## 🛡️ 政府与 SOC 2
|
|
112
|
+
## 🛡️ 政府与 SOC 2 就绪
|
|
113
113
|
|
|
114
|
-
| 功能 | SOC 2 | NIST 800-161 | STIG/FedRAMP |
|
|
114
|
+
| 功能 | SOC 2 控制 | NIST 800-161 | STIG/FedRAMP 对齐 |
|
|
115
115
|
|------|-------|--------------|--------------|
|
|
116
116
|
| 审计日志 (--audit-log) | CC6.8 | AU-2 | ✓ |
|
|
117
117
|
| FIPS 加密 (--fips) | CC6.1 | SC-13 | ✓ |
|
|
@@ -306,10 +306,9 @@ npm-scan scan target --policy .npm-scan.yml
|
|
|
306
306
|
|
|
307
307
|
### 高级版许可
|
|
308
308
|
|
|
309
|
-
|
|
310
|
-
# 生成开发密钥
|
|
311
|
-
node -e "console.log(require('@lateos/npm-scan/backend/license').generateKey('premium'))"
|
|
309
|
+
请联系 leo@lateos.ai 获取高级版/企业版许可密钥。
|
|
312
310
|
|
|
311
|
+
```bash
|
|
313
312
|
# 使用它
|
|
314
313
|
npm-scan scan target --license-key <key>
|
|
315
314
|
npm-scan report --pdf --license-key <key>
|
package/cli/cli.js
CHANGED
|
@@ -7,7 +7,7 @@ function requirePremium(feature, licenseKey) {
|
|
|
7
7
|
if (!isFeatureEnabled(feature, licenseKey)) {
|
|
8
8
|
console.error(`Error: "${feature}" requires a premium license key.`);
|
|
9
9
|
console.error(` Pass --license-key <key> or set NPM_SCAN_LICENSE_KEY env var.`);
|
|
10
|
-
console.error(`
|
|
10
|
+
console.error(` Contact leo@lateos.ai for a premium license.`);
|
|
11
11
|
process.exit(1);
|
|
12
12
|
}
|
|
13
13
|
}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@lateos/npm-scan",
|
|
3
|
-
"version": "0.11.
|
|
3
|
+
"version": "0.11.4",
|
|
4
4
|
"description": "Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.",
|
|
5
5
|
"main": "backend/index.js",
|
|
6
6
|
"bin": {
|