@lateos/npm-scan 0.11.2 → 0.11.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.de.md CHANGED
@@ -109,9 +109,9 @@ Kein Node.js. Kein `npm install`. Keine globalen Pakete. Funktioniert auf jedem
109
109
 
110
110
  ---
111
111
 
112
- ## 🛡️ Behörden- & SOC 2 L2-bereit
112
+ ## 🛡️ Behörden- & SOC 2-bereit
113
113
 
114
- | Funktion | SOC 2 | NIST 800-161 | STIG/FedRAMP |
114
+ | Funktion | SOC 2-Kontrollen | NIST 800-161 | STIG/FedRAMP-Ausrichtung |
115
115
  |----------|-------|--------------|--------------|
116
116
  | Audit-Protokolle (--audit-log) | CC6.8 | AU-2 | ✓ |
117
117
  | FIPS-Krypto (--fips) | CC6.1 | SC-13 | ✓ |
@@ -306,10 +306,9 @@ npm-scan scan target --policy .npm-scan.yml
306
306
 
307
307
  ### Premium-Lizenzierung
308
308
 
309
- ```bash
310
- # Einen Entwicklerschlüssel generieren
311
- node -e "console.log(require('@lateos/npm-scan/backend/license').generateKey('premium'))"
309
+ Kontaktieren Sie leo@lateos.ai, um einen Premium/Enterprise-Lizenzschlüssel zu erhalten.
312
310
 
311
+ ```bash
313
312
  # Verwenden
314
313
  npm-scan scan target --license-key <key>
315
314
  npm-scan report --pdf --license-key <key>
package/README.fr.md CHANGED
@@ -109,9 +109,9 @@ Pas de Node.js. Pas de `npm install`. Pas de paquets globaux. Fonctionne sur tou
109
109
 
110
110
  ---
111
111
 
112
- ## 🛡️ Prêt pour le Gouvernement et SOC 2 L2
112
+ ## 🛡️ Prêt pour le Gouvernement et SOC 2
113
113
 
114
- | Fonctionnalité | SOC 2 | NIST 800-161 | STIG/FedRAMP |
114
+ | Fonctionnalité | Contrôles SOC 2 | NIST 800-161 | Alignement STIG/FedRAMP |
115
115
  |----------------|-------|--------------|--------------|
116
116
  | Journaux d'audit (--audit-log) | CC6.8 | AU-2 | ✓ |
117
117
  | Crypto FIPS (--fips) | CC6.1 | SC-13 | ✓ |
@@ -306,10 +306,9 @@ npm-scan scan target --policy .npm-scan.yml
306
306
 
307
307
  ### Licence premium
308
308
 
309
- ```bash
310
- # Générer une clé de développement
311
- node -e "console.log(require('@lateos/npm-scan/backend/license').generateKey('premium'))"
309
+ Contactez leo@lateos.ai pour obtenir une clé de licence premium/enterprise.
312
310
 
311
+ ```bash
313
312
  # L'utiliser
314
313
  npm-scan scan target --license-key <key>
315
314
  npm-scan report --pdf --license-key <key>
package/README.ja.md CHANGED
@@ -109,9 +109,9 @@ Node.js不要。`npm install`不要。グローバルパッケージ不要。Doc
109
109
 
110
110
  ---
111
111
 
112
- ## 🛡️ 政府機関・SOC 2 L2 対応
112
+ ## 🛡️ 政府機関・SOC 2 対応
113
113
 
114
- | 機能 | SOC 2 | NIST 800-161 | STIG/FedRAMP |
114
+ | 機能 | SOC 2 コントロール | NIST 800-161 | STIG/FedRAMP アライメント |
115
115
  |------|-------|--------------|--------------|
116
116
  | 監査ログ (--audit-log) | CC6.8 | AU-2 | ✓ |
117
117
  | FIPS暗号化 (--fips) | CC6.1 | SC-13 | ✓ |
@@ -302,10 +302,9 @@ npm-scan scan target --policy .npm-scan.yml
302
302
 
303
303
  ### プレミアムライセンス
304
304
 
305
- ```bash
306
- # 開発用キーを生成
307
- node -e "console.log(require('@lateos/npm-scan/backend/license').generateKey('premium'))"
305
+ leo@lateos.ai までお問い合わせいただき、高级版/エンタープライズ版ライセンスキーを取得してください。
308
306
 
307
+ ```bash
309
308
  # それを使用
310
309
  npm-scan scan target --license-key <key>
311
310
  npm-scan report --pdf --license-key <key>
package/README.md CHANGED
@@ -110,9 +110,9 @@ No Node.js. No `npm install`. No global packages. Works on any system with Docke
110
110
 
111
111
  ---
112
112
 
113
- ## 🛡️ Government & SOC 2 L2 Ready
113
+ ## 🛡️ Government & SOC 2 Ready
114
114
 
115
- | Feature | SOC 2 | NIST 800-161 | STIG/FedRAMP |
115
+ | Feature | SOC 2 Controls | NIST 800-161 | STIG/FedRAMP Alignment |
116
116
  |---------|-------|--------------|--------------|
117
117
  | Audit logs (--audit-log) | CC6.8 | AU-2 | ✓ |
118
118
  | FIPS crypto (--fips) | CC6.1 | SC-13 | ✓ |
@@ -127,8 +127,8 @@ npm-scan scan-lockfile --cache-dir /offline/cache --audit-log /var/log/npm-scan.
127
127
  npm-scan report --stig
128
128
  ```
129
129
 
130
- [![SOC 2 L2](https://img.shields.io/badge/SOC%202-L2-green?style=flat-square&logo=aicpa)](https://www.aicpa.org/interestareas/frc/assuranceadvisoryservices/sorhome.html)
131
- [![FedRAMP](https://img.shields.io/badge/FedRAMP-Moderate-blue?style=flat-square)](https://fedramp.gov/)
130
+ [![SOC 2 Ready](https://img.shields.io/badge/SOC%202-Ready-green?style=flat-square&logo=aicpa)](https://www.aicpa.org/interestareas/frc/assuranceadvisoryservices/sorhome.html#soc2)
131
+ [![FedRAMP Aligned](https://img.shields.io/badge/FedRAMP-Aligned-blue?style=flat-square&logo=fedramp)](https://fedramp.gov/baselines/)
132
132
 
133
133
  ---
134
134
 
@@ -343,10 +343,9 @@ npm-scan scan target --policy .npm-scan.yml
343
343
 
344
344
  ### Premium licensing
345
345
 
346
- ```bash
347
- # Generate a development key
348
- node -e "console.log(require('@lateos/npm-scan/backend/license').generateKey('premium'))"
346
+ Contact leo@lateos.ai for a premium/enterprise license key.
349
347
 
348
+ ```bash
350
349
  # Use it
351
350
  npm-scan scan target --license-key <key>
352
351
  npm-scan report --pdf --license-key <key>
package/README.zh.md CHANGED
@@ -109,9 +109,9 @@ docker compose --profile pipeline up -d
109
109
 
110
110
  ---
111
111
 
112
- ## 🛡️ 政府与 SOC 2 L2 就绪
112
+ ## 🛡️ 政府与 SOC 2 就绪
113
113
 
114
- | 功能 | SOC 2 | NIST 800-161 | STIG/FedRAMP |
114
+ | 功能 | SOC 2 控制 | NIST 800-161 | STIG/FedRAMP 对齐 |
115
115
  |------|-------|--------------|--------------|
116
116
  | 审计日志 (--audit-log) | CC6.8 | AU-2 | ✓ |
117
117
  | FIPS 加密 (--fips) | CC6.1 | SC-13 | ✓ |
@@ -306,10 +306,9 @@ npm-scan scan target --policy .npm-scan.yml
306
306
 
307
307
  ### 高级版许可
308
308
 
309
- ```bash
310
- # 生成开发密钥
311
- node -e "console.log(require('@lateos/npm-scan/backend/license').generateKey('premium'))"
309
+ 请联系 leo@lateos.ai 获取高级版/企业版许可密钥。
312
310
 
311
+ ```bash
313
312
  # 使用它
314
313
  npm-scan scan target --license-key <key>
315
314
  npm-scan report --pdf --license-key <key>
package/cli/cli.js CHANGED
@@ -7,7 +7,7 @@ function requirePremium(feature, licenseKey) {
7
7
  if (!isFeatureEnabled(feature, licenseKey)) {
8
8
  console.error(`Error: "${feature}" requires a premium license key.`);
9
9
  console.error(` Pass --license-key <key> or set NPM_SCAN_LICENSE_KEY env var.`);
10
- console.error(` Generate a dev key: require('@lateos/npm-scan/backend/license').generateKey('premium')`);
10
+ console.error(` Contact leo@lateos.ai for a premium license.`);
11
11
  process.exit(1);
12
12
  }
13
13
  }
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@lateos/npm-scan",
3
- "version": "0.11.2",
3
+ "version": "0.11.4",
4
4
  "description": "Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.",
5
5
  "main": "backend/index.js",
6
6
  "bin": {