@maverick006/vibeguard 1.0.0 → 1.0.2

package/dist/index.js

@@ -9,7 +9,6 @@ const commander_1 = require("commander");
 const chalk_1 = __importDefault(require("chalk"));
 const ora_1 = __importDefault(require("ora"));
 const ai_engine_1 = require("@maverick006/ai-engine");
-const types_1 = require("@maverick006/types");
 const fs_1 = require("fs");
 const path_1 = require("path");
 const program = new commander_1.Command();
@@ -25,21 +24,19 @@ program
     .action(async (options) => {
     console.log(chalk_1.default.bold.magenta('\n🛡️  VibeGuard Orchestrator Initiated\n'));
     const spinner = (0, ora_1.default)('Scanning repository for vulnerabilities...').start();
-    // Simulate orchestration of underlying tools since this is the demo CLI
-    await new Promise(resolve => setTimeout(resolve, 2000));
+    // Initialize the real security orchestrator and npm audit scanner
+    const { Orchestrator } = require('@maverick006/security-engine');
+    const { NpmAuditScanner } = require('@maverick006/scanner-npm-audit');
+    const orchestrator = new Orchestrator([new NpmAuditScanner()]);
+    // Run the actual scan on the current directory
+    const scanResult = await orchestrator.runScan({
+        scanId: `scan-${Date.now()}`,
+        repositoryUrl: 'local',
+        repositoryPath: process.cwd(),
+        branch: 'main'
+    });
     spinner.succeed('Scans completed via deterministic engines');
-    // Generate mock findings that would come from the scanners
-    const findings = [
-        {
-            id: 'vg-001',
-            title: 'SQL Injection Vulnerability',
-            description: 'User input is directly concatenated into a SQL query, allowing for injection attacks.',
-            severity: types_1.Severity.HIGH,
-            scanner: 'Semgrep',
-            file: 'src/api/users.ts',
-            line: 42
-        }
-    ];
+    const findings = scanResult.findings;
     console.log(chalk_1.default.bold(`\nFound ${findings.length} vulnerabilities.`));
     for (const finding of findings) {
         console.log(chalk_1.default.red(`\n[${finding.severity}] ${finding.title}`));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maverick006/vibeguard",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "VibeGuard CLI",
   "main": "dist/index.js",
   "bin": {
@@ -13,6 +13,8 @@
   },
   "dependencies": {
     "@maverick006/ai-engine": "*",
+    "@maverick006/security-engine": "*",
+    "@maverick006/scanner-npm-audit": "*",
     "@maverick006/types": "*",
     "chalk": "^4.1.2",
     "commander": "^11.1.0",

package/src/index.ts

@@ -25,23 +25,23 @@ program
     
     const spinner = ora('Scanning repository for vulnerabilities...').start();
     
-    // Simulate orchestration of underlying tools since this is the demo CLI
-    await new Promise(resolve => setTimeout(resolve, 2000));
+    // Initialize the real security orchestrator and npm audit scanner
+    const { Orchestrator } = require('@maverick006/security-engine');
+    const { NpmAuditScanner } = require('@maverick006/scanner-npm-audit');
     
+    const orchestrator = new Orchestrator([new NpmAuditScanner()]);
+    
+    // Run the actual scan on the current directory
+    const scanResult = await orchestrator.runScan({
+      scanId: `scan-${Date.now()}`,
+      repositoryUrl: 'local',
+      repositoryPath: process.cwd(),
+      branch: 'main'
+    });
+
     spinner.succeed('Scans completed via deterministic engines');
 
-    // Generate mock findings that would come from the scanners
-    const findings: NormalizedFinding[] = [
-      {
-        id: 'vg-001',
-        title: 'SQL Injection Vulnerability',
-        description: 'User input is directly concatenated into a SQL query, allowing for injection attacks.',
-        severity: Severity.HIGH,
-        scanner: 'Semgrep',
-        file: 'src/api/users.ts',
-        line: 42
-      }
-    ];
+    const findings = scanResult.findings;
 
     console.log(chalk.bold(`\nFound ${findings.length} vulnerabilities.`));