@mitre/hdf-mappings 3.5.0 → 3.5.1

package/README.md

@@ -74,15 +74,78 @@ import {
   getNISTFamily,
 } from '@mitre/hdf-mappings';
 
-// Get control description
-const desc = getNISTDescription('AC-1');
+// Get control description (IDs are zero-padded; defaults to the selected
+// revision — Rev 5 unless overridden)
+const desc = getNISTDescription('AC-01');
+// Returns: "Policy and Procedures"
+
+// Rev 4 text via the explicit revision argument
+const descRev4 = getNISTDescription('AC-01', 4);
 // Returns: "ACCESS CONTROL POLICY AND PROCEDURES"
 
 // Get control family
-const family = getNISTFamily('AC-1');
+const family = getNISTFamily('AC-01');
 // Returns: "AC"
 ```
 
+#### Rev 4 ↔ Rev 5 crosswalk
+
+Translates control IDs between 800-53 Rev 4 and Rev 5 using NIST's own
+comparison workbooks (the Rev 4→Rev 5 comparison workbook and the Appendix J
+privacy-control comparison, both from the SP 800-53 Rev 5 final publication
+page). Regenerated via `scripts/generate-nist-crosswalk.mjs`; both the Go and
+TS copies are written byte-identically (`--check` gates drift). The full
+revision contract — selection, guarantees, and data-consumer guidance — is
+documented in the site guide
+[NIST 800-53 revision handling](../site/docs/guides/nist-revisions.md).
+
+```typescript
+import { translateNistControl, translateNistControls } from '@mitre/hdf-mappings';
+
+translateNistControl('IR-10', 4, 5);
+// { control: 'IR-10', targets: ['IR-4(11)'], relation: 'moved', detail: 'Moved to IR-4(11)' }
+
+translateNistControl('AC-1', 4, 5);
+// { control: 'AC-1', targets: ['AC-1'], relation: 'identity' }  (present in both revisions)
+
+const { translated, unmapped } = translateNistControls(['AC-1', 'IR-10', 'SC-19'], 4, 5);
+// translated: ['AC-1', 'IR-4(11)']; unmapped: [{ control: 'SC-19', relation: 'none', ... }]
+```
+
+Relations: `identity` (same ID at both revisions), `moved` / `incorporated`
+(NIST names a successor), `pointer` (Appendix J privacy controls — NIST calls
+these pointers, not equivalences), `family` (incorporated into a whole family,
+kept as a marker rather than expanded), `none` (NIST names no successor), and
+`unknown` (not a control at the source revision). Controls NIST withdrew in
+Rev 4 itself (e.g. `AC-13`) are valid at neither revision but still redirect to
+their incorporation targets from either direction, so stale tags resolve.
+
+> **Interpretation.** A crosswalk edge means NIST relocated or absorbed the
+> requirement text — it does not make the target control's full scope
+> equivalent to the source control. Treat translated tags as candidate control
+> associations, exactly like the tool-specific mappings below.
+
+#### Per-table revision handling
+
+Every tool mapping table declares the NIST revision it was authored against,
+and its default lookups translate to the current module-global revision
+(`--nist-rev` / `setCurrentNistRevision`) through the crosswalk — so every
+NIST-emitting converter honors the requested revision, not just aws-config:
+
+| Table | Native revision | Notes |
+|-------|-----------------|-------|
+| awsconfig | 4 + 5 (dual) | native rows per revision + crosswalk backfill (see below) |
+| cwe | 4 + 5 (dual) | control IDs are byte-identical across revisions |
+| nessus | 4 | carries AU-8(1), which translates to SC-45(1) at Rev 5 |
+| cci | 4 | DISA refs incl. Appendix J privacy controls; translated with statement suffixes |
+| nikto, owasp, scoutsuite | 4 | content identical at both revisions today; a test guards that invariant |
+| hipcheck | 5 | SR-family controls have no Rev 4 equivalent and drop at Rev 4 |
+
+Translation semantics: statement-style suffixes ("AC-1 a") survive identity and
+are dropped on redirects; controls with no equivalent at the requested revision
+are dropped rather than mistranslated; tokens outside both NIST catalogs (tool
+placeholders like Nessus's "UM-1") pass through unchanged.
+
 ### OWASP Top 10
 
 ```typescript
@@ -197,13 +260,14 @@ import {
   awsConfigIdentifierExists,
 } from '@mitre/hdf-mappings';
 
-// By source identifier (uppercase, underscores)
+// By source identifier (uppercase, underscores). Resolved at the selected
+// NIST revision (Rev 5 default; the Rev 4 tags for this rule are 'AC-2(1)|AC-2(j)').
 const nistId = getAwsConfigNistControlByIdentifier('SECRETSMANAGER_SCHEDULED_ROTATION_SUCCESS_CHECK');
-// Returns: 'AC-2(1)|AC-2(j)'
+// Returns: 'AC-2(1)|AC-3(15)'
 
 // By rule name (lowercase, hyphens)
 const nistId2 = getAwsConfigNistControlByName('secretsmanager-scheduled-rotation-success-check');
-// Returns: 'AC-2(1)|AC-2(j)'
+// Returns: 'AC-2(1)|AC-3(15)'
 
 if (awsConfigIdentifierExists('SECRETSMANAGER_SCHEDULED_ROTATION_SUCCESS_CHECK')) { /* ... */ }
 ```
@@ -211,15 +275,25 @@ if (awsConfigIdentifierExists('SECRETSMANAGER_SCHEDULED_ROTATION_SUCCESS_CHECK')
 #### Coverage tiers and semantics
 
 The AWS Config→NIST table is regenerated (via `scripts/generate-awsconfig-mappings.mjs`) from
-three tiers, in precedence order:
+four tiers, in precedence order; each row records its tier in the `Source` field:
 
 1. **config-pack** — AWS Config's "Operational Best Practices for NIST 800-53" docs (Rev 4 + Rev 5).
 2. **security-hub** — AWS Security Hub's NIST 800-53 r5 standard control pages (Rev 5).
-3. **derived** — for a managed rule the authoritative tiers miss but whose name matches a strong
+3. **derived-theme** — for a managed rule the authoritative tiers miss but whose name matches a strong
    theme (encryption-at-rest, in-transit/TLS, logging/audit, public-access), the controls that
    ≥75% of AWS's *own* same-theme mapped rules carry. Nothing is invented — controls are reused
    from AWS's authoritative mappings. Rules matching no theme stay unmapped, and the
    `aws-config-to-hdf` converter floors them to **CM-6** (Configuration Settings) at conversion time.
+4. **crosswalk** — per-revision completeness: a rule mapped at exactly one revision gets a row at
+   the other revision by translating its controls through the NIST Rev 4↔Rev 5 crosswalk (above).
+   Native rows are never modified. When the whole control set has no equivalent at the other
+   revision, the row is an explicit **empty-`NIST-ID` marker** — "no mapping exists at this
+   revision" is recorded as an answer, not left as a silent gap. Crosswalk rows inherit the
+   confidence of the native row they were translated from.
+
+With tier 4, every rule in the table has a defined outcome at both supported revisions: native,
+crosswalk-derived, or explicitly unmapped. A single-revision view of the table is therefore
+complete — filtering by `Rev` never silently drops a rule.
 
 > **Interpretation.** These NIST tags are *candidate control associations for triage*, not evidence
 > that a control is assessed or satisfied. A passed Config / Security Hub rule is evidence *toward*
@@ -265,12 +339,13 @@ Each mapping is also available as a Go package:
 hdf-mappings/go/
   cci/        — CCI↔NIST lookups (GetCCINistMappings, NISTToCCI, CCIToNIST)
   cwe/        — CWE→NIST lookups (NISTControls)
-  owasp/      — OWASP→NIST lookups (NISTControls)
+  owasp/      — OWASP→NIST lookups (NISTControl)
   nessus/     — Nessus plugin→NIST lookups (NISTControls, with family+pluginID)
-  nikto/      — Nikto test→NIST lookups (NISTControls)
+  nikto/      — Nikto test→NIST lookups (NISTControl, NISTControlByInt)
   hipcheck/   — Hipcheck analysis→NIST lookups (NISTControls, Exists, AllAnalyses)
   scoutsuite/ — ScoutSuite rule→NIST lookups (NISTControls)
   awsconfig/  — AWS Config→NIST lookups (NISTControls, GetByRuleName, GetByIdentifier)
+  nist/       — revision selection (Revision, SetRevision) + Rev 4↔5 crosswalk (Translate, TranslateControls)
 ```
 
 ```go
@@ -301,6 +376,16 @@ mapping  := awsconfig.GetByIdentifier("SECRETSMANAGER_SCHEDULED_ROTATION_SUCCESS
 mapping   = awsconfig.GetByRuleName("secretsmanager-scheduled-rotation-success-check")
 ```
 
+```go
+import "github.com/mitre/hdf-libs/hdf-mappings/go/v3/nist"
+
+tr := nist.Translate("IR-10", 4, 5)
+// Translation{Targets: []string{"IR-4(11)"}, Relation: "moved", ...}
+
+translated, unmapped := nist.TranslateControls([]string{"AC-1", "IR-10", "SC-19"}, 4, 5)
+// translated: ["AC-1", "IR-4(11)"]; unmapped: [{Control: "SC-19", Relation: "none", ...}]
+```
+
 ## Data Sources
 
 | Data | Source |
@@ -313,6 +398,7 @@ mapping   = awsconfig.GetByRuleName("secretsmanager-scheduled-rotation-success-c
 | Nikto→NIST | heimdall2 mapping tables |
 | ScoutSuite→NIST | heimdall2 mapping tables |
 | AWS Config→NIST | AWS Config OBP for NIST 800-53 docs + Security Hub NIST r5 standard + derived (see Coverage tiers) |
+| NIST Rev 4↔5 crosswalk | NIST SP 800-53 Rev 4→Rev 5 comparison workbook + Appendix J comparison (csrc.nist.gov, Rev 5 final) |
 
 ## License
 

package/dist/index.d.ts

@@ -103,6 +103,71 @@ declare function getNistCCIMappings(nistControl: string): string[] | undefined;
  */
 declare function nistToCci(nistControls: string[]): string[];
 //#endregion
+//#region src/nist/crosswalk.d.ts
+/**
+ * NIST SP 800-53 Rev 4 <-> Rev 5 control crosswalk, generated from NIST's own
+ * comparison workbooks (see scripts/generate-nist-crosswalk.mjs). Identity is
+ * implicit: a control present in both revisions translates to itself; edges
+ * cover only non-identity cases (withdrawn, moved, incorporated, Appendix J
+ * pointers, and controls new in Rev 5).
+ */
+/**
+ * Relations a translation can carry. `identity` means the control exists at
+ * both revisions under the same ID; `moved`/`incorporated`/`pointer`/`family`
+ * come from NIST's comparison workbooks; `none` means NIST names no successor;
+ * `unknown` means the control is not part of the source revision's catalog (or
+ * the revision pair is unsupported).
+ */
+type NistCrosswalkRelation = 'identity' | 'moved' | 'incorporated' | 'pointer' | 'family' | 'none' | 'unknown';
+interface NistControlTranslation {
+  control: string;
+  targets: string[];
+  relation: NistCrosswalkRelation;
+  /**
+   * Set only for relation `family` ("incorporated into <XX> family"): a
+   * marker, deliberately never expanded into member controls.
+   */
+  family?: string;
+  /** NIST's raw comparison text for redirects. */
+  detail?: string;
+}
+/**
+ * Translates one NIST control ID between 800-53 revisions 4 and 5. A control
+ * present in both revisions translates to itself (identity); withdrawn, moved,
+ * incorporated, and Appendix J controls follow NIST's published successors; a
+ * control with no equivalent at the target revision gets relation `none` and
+ * no targets. Statement-letter suffixes ("AC-2(j)") survive identity
+ * translation and are dropped on redirects.
+ */
+declare function translateNistControl(control: string, from: number, to: number): NistControlTranslation;
+/**
+ * Translates a list of control IDs between revisions, flattening redirect
+ * targets and deduplicating while preserving first-seen order. Controls with
+ * no target at the destination revision (withdrawn without successor,
+ * family-level, or unknown) are returned in `unmapped`, in input order, so
+ * callers can surface them instead of silently dropping.
+ */
+declare function translateNistControls(controls: string[], from: number, to: number): {
+  translated: string[];
+  unmapped: NistControlTranslation[];
+};
+/**
+ * Number of control IDs in the crosswalk's catalog for the given revision, or
+ * 0 for unsupported revisions.
+ */
+declare function nistRosterSize(rev: number): number;
+/**
+ * Translates a control list authored against `nativeRev` into `rev`. Identity
+ * when the revisions are equal (or either is unsupported). Per token: the
+ * crosswalk redirect is followed when one exists; statement-style suffixes
+ * ("AC-1 a", "AC-1.2 (i)") are kept on identity and dropped on redirects;
+ * tokens with no equivalent at the target revision are dropped (the analog of
+ * the awsconfig empty-NIST-ID marker); tokens outside both NIST catalogs
+ * (tool placeholders like "UM-1") pass through unchanged — they are not ours
+ * to drop. Output is deduplicated preserving first-seen order.
+ */
+declare function nistControlsAtRevision(controls: string[], nativeRev: number, rev: number): string[];
+//#endregion
 //#region src/nist/types.d.ts
 /**
  * NIST control descriptions database structure
@@ -144,22 +209,27 @@ declare function isNistStrict(): boolean;
  */
 declare function setNistStrict(strict: boolean): void;
 /**
- * Get the description for a NIST control ID.
+ * Get the description for a NIST control ID at the selected revision.
  *
- * @param nistId - The NIST control ID (e.g., 'AC-01', 'AC-01 a', 'AC-01 a 01')
- * @returns The NIST control description, or undefined if not found
+ * @param nistId - The NIST control ID (e.g., 'AC-01', 'AC-01 a', 'AC-02 01')
+ * @param rev - NIST revision to look up; defaults to the module-global revision
+ * @returns The control's Rev-specific description, or undefined if not found at
+ *   that revision (e.g. a Rev 5-only SR/PT control at Rev 4, or a Rev 4 control
+ *   withdrawn in Rev 5)
  *
  * @example
  * ```typescript
- * const desc = getNISTDescription('AC-01');
- * // Returns: "ACCESS CONTROL POLICY AND PROCEDURES"
+ * getNISTDescription('AC-01');    // Rev 5 default -> "Policy and Procedures"
+ * getNISTDescription('AC-01', 4); // -> "ACCESS CONTROL POLICY AND PROCEDURES"
  * ```
  */
-declare function getNISTDescription(nistId: string): string | undefined;
+declare function getNISTDescription(nistId: string, rev?: number): string | undefined;
 /**
- * Get all NIST control IDs available in the database.
+ * Get all NIST control IDs present at the selected revision.
  *
- * @returns Array of all NIST control IDs
+ * @param rev - NIST revision to enumerate; defaults to the module-global revision
+ * @returns Array of NIST control IDs for that revision (Rev 5 includes the
+ *   SR/PT families; Rev 4 includes controls withdrawn in Rev 5)
  *
  * @example
  * ```typescript
@@ -167,12 +237,14 @@ declare function getNISTDescription(nistId: string): string | undefined;
  * // Returns: ['AC-01', 'AC-01 a', 'AC-02', ...]
  * ```
  */
-declare function getAllNISTIds(): string[];
+declare function getAllNISTIds(rev?: number): string[];
 /**
- * Check if a NIST control ID exists in the database.
+ * Check if a NIST control ID exists at the selected revision.
  *
  * @param nistId - The NIST control ID to check
- * @returns true if the NIST control exists, false otherwise
+ * @param rev - NIST revision to check against; defaults to the module-global revision
+ * @returns true if the control exists at that revision (e.g. an SR/PT control is
+ *   present at Rev 5 but not Rev 4)
  *
  * @example
  * ```typescript
@@ -181,12 +253,15 @@ declare function getAllNISTIds(): string[];
  * }
  * ```
  */
-declare function nistExists(nistId: string): boolean;
+declare function nistExists(nistId: string, rev?: number): boolean;
 /**
- * Extract the NIST family from a NIST control ID.
+ * Extract the NIST family from a NIST control ID, if that family exists at the
+ * selected revision.
  *
  * @param nistId - The NIST control ID (e.g., 'AC-01', 'AC-01 a')
- * @returns The NIST family code (e.g., 'AC'), or undefined if invalid
+ * @param rev - NIST revision to validate against; defaults to the module-global revision
+ * @returns The NIST family code (e.g., 'AC'), or undefined if invalid or the
+ *   family is absent at that revision (the SR/PT families are Rev 5-only)
  *
  * @example
  * ```typescript
@@ -197,7 +272,7 @@ declare function nistExists(nistId: string): boolean;
  * // Returns: 'AC'
  * ```
  */
-declare function getNISTFamily(nistId: string): string | undefined;
+declare function getNISTFamily(nistId: string, rev?: number): string | undefined;
 /**
  * Canonical NIST 800-53 fallback tags for converters when a finding has no
  * CWE or the CWE has no NIST mapping. Categories match heimdall2's global.ts.
@@ -456,6 +531,12 @@ interface AwsConfigNistMapping {
   AwsConfigRuleName: string;
   'NIST-ID': string;
   Rev: number;
+  /**
+   * Generator tier the row came from: config-pack, security-hub,
+   * derived-theme, or crosswalk (rev-translated from the rule's native
+   * revision; an empty NIST-ID means no equivalent exists at this Rev).
+   */
+  Source: string;
 }
 type AwsConfigNistMappings = AwsConfigNistMapping[];
 //#endregion
@@ -520,5 +601,5 @@ declare function getAllHipcheckAnalyses(): string[];
 /** Get all Hipcheck to NIST mappings. */
 declare function getAllHipcheckMappings(): HipcheckNistMappings;
 //#endregion
-export { type AwsConfigNistMapping, type AwsConfigNistMappings, type CCIItem, type CCIMappings, type CweNistMapping, type CweNistMappings, DEFAULT_COMPONENT_MANAGEMENT_NIST_TAGS, DEFAULT_CONFIG_MANAGEMENT_NIST_TAGS, DEFAULT_NIST_REVISION, DEFAULT_REMEDIATION_NIST_TAGS, DEFAULT_STATIC_ANALYSIS_NIST_TAGS, type HipcheckNistMapping, type HipcheckNistMappings, type NISTDescriptions, type NessusNistMapping, type NessusNistMappings, type NiktoNistMappings, type NistCCIMappings, type OwaspNistMapping, type OwaspNistMappings, SUPPORTED_NIST_REVISIONS, type ScoutsuiteNistMapping, type ScoutsuiteNistMappings, awsConfigIdentifierExists, awsConfigMappedRevisions, awsConfigRuleNameExists, cciExists, cweExists, getAllAwsConfigIdentifiers, getAllAwsConfigMappings, getAllAwsConfigRuleNames, getAllCCIIds, getAllCweIds, getAllCweMappings, getAllHipcheckAnalyses, getAllHipcheckMappings, getAllNISTIds, getAllNessusMappings, getAllNessusPluginFamilies, getAllNiktoIds, getAllNiktoMappings, getAllOwaspIds, getAllOwaspMappings, getAllScoutsuiteMappings, getAllScoutsuiteRules, getAwsConfigNistControlByIdentifier, getAwsConfigNistControlByName, getAwsConfigNistControlsBySubstring, getAwsConfigNistMappingByIdentifier, getAwsConfigNistMappingByName, getCCIDescription, getCCINistMappings, getCurrentNistRevision, getCweName, getCweNistControl, getCweNistMapping, getHipcheckNistControls, getNISTDescription, getNISTFamily, getNessusNistControl, getNessusPluginFamilyMappings, getNiktoNistControl, getNistCCIMappings, getOwaspName, getOwaspNistControl, getOwaspNistMapping, getScoutsuiteNistControl, getScoutsuiteNistMapping, hipcheckAnalysisExists, isNistStrict, nessusPluginFamilyExists, niktoExists, nistExists, nistToCci, owaspExists, resetNistRevision, scoutsuiteRuleExists, setCurrentNistRevision, setNistStrict };
+export { type AwsConfigNistMapping, type AwsConfigNistMappings, type CCIItem, type CCIMappings, type CweNistMapping, type CweNistMappings, DEFAULT_COMPONENT_MANAGEMENT_NIST_TAGS, DEFAULT_CONFIG_MANAGEMENT_NIST_TAGS, DEFAULT_NIST_REVISION, DEFAULT_REMEDIATION_NIST_TAGS, DEFAULT_STATIC_ANALYSIS_NIST_TAGS, type HipcheckNistMapping, type HipcheckNistMappings, type NISTDescriptions, type NessusNistMapping, type NessusNistMappings, type NiktoNistMappings, type NistCCIMappings, type NistControlTranslation, type NistCrosswalkRelation, type OwaspNistMapping, type OwaspNistMappings, SUPPORTED_NIST_REVISIONS, type ScoutsuiteNistMapping, type ScoutsuiteNistMappings, awsConfigIdentifierExists, awsConfigMappedRevisions, awsConfigRuleNameExists, cciExists, cweExists, getAllAwsConfigIdentifiers, getAllAwsConfigMappings, getAllAwsConfigRuleNames, getAllCCIIds, getAllCweIds, getAllCweMappings, getAllHipcheckAnalyses, getAllHipcheckMappings, getAllNISTIds, getAllNessusMappings, getAllNessusPluginFamilies, getAllNiktoIds, getAllNiktoMappings, getAllOwaspIds, getAllOwaspMappings, getAllScoutsuiteMappings, getAllScoutsuiteRules, getAwsConfigNistControlByIdentifier, getAwsConfigNistControlByName, getAwsConfigNistControlsBySubstring, getAwsConfigNistMappingByIdentifier, getAwsConfigNistMappingByName, getCCIDescription, getCCINistMappings, getCurrentNistRevision, getCweName, getCweNistControl, getCweNistMapping, getHipcheckNistControls, getNISTDescription, getNISTFamily, getNessusNistControl, getNessusPluginFamilyMappings, getNiktoNistControl, getNistCCIMappings, getOwaspName, getOwaspNistControl, getOwaspNistMapping, getScoutsuiteNistControl, getScoutsuiteNistMapping, hipcheckAnalysisExists, isNistStrict, nessusPluginFamilyExists, niktoExists, nistControlsAtRevision, nistExists, nistRosterSize, nistToCci, owaspExists, resetNistRevision, scoutsuiteRuleExists, setCurrentNistRevision, setNistStrict, translateNistControl, translateNistControls };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/cci/types.ts","../src/cci/index.ts","../src/nist/types.ts","../src/nist/index.ts","../src/owasp/types.ts","../src/owasp/index.ts","../src/cwe/types.ts","../src/cwe/index.ts","../src/nessus/types.ts","../src/nessus/index.ts","../src/nikto/types.ts","../src/nikto/index.ts","../src/scoutsuite/types.ts","../src/scoutsuite/index.ts","../src/awsconfig/types.ts","../src/awsconfig/index.ts","../src/hipcheck/types.ts","../src/hipcheck/index.ts"],"mappings":";;;;UAGiB;;EAEf;;EAEA;;;;;KAMU,cAAc,eAAe;;;;;KAM7B,kBAAkB;;;;;;;;;;;;;;;;;;iBCId,kBAAkB;;;;;;;;;;;;;iBAqBlB,mBAAmB;;;;;;;;;;;;iBAoBnB;;;;;;;;;;;;;;iBAiBA,UAAU;;;;;;;;;;;;;;iBA8BV,mBAAmB;;;;;;;;;;;;;;iBAqBnB,UAAU;;;;;;KCjId,mBAAmB;;;;;;;;;;;;;;;;cCiBlB;;cAGA;;iBAKG;;;;;iBAQA,uBAAuB;;iBAUvB;;iBAOA;;;;;;iBASA,cAAc;;;;;;;;;;;;;iBAgBd,mBAAmB;;;;;;;;;;;;iBAmBnB;;;;;;;;;;;;;;iBAiBA,WAAW;;;;;;;;;;;;;;;;iBAuBX,cAAc;;;;;;;;;;;cAgCjB;;cAGA;;cAGA;;cAGA;;;;;;UC9KI;EACf;EACA;EACA;EACA;EACA;;KAGU,oBAAoB;;;;;;;;;;;;;;;iBCYhB,oBAAoB,kBAAkB;;;;;;;;;;;;;iBAoBtC,oBAAoB;;;;;;;;;;;;;iBAiBpB,aAAa;;;;;;;;;;;;iBAgBb;;;;;;;;;;;;;;iBAiBA,YAAY;;;;;;;;;;;;iBAmBZ,uBAAuB;;;;;;UC7GtB;EACf;EACA;EACA;EACA;EACA;;KAGU,kBAAkB;;;;iBCiBd,kBACd,eACA,eACC;;iBAKa,kBAAkB,eAAe;;iBAKjC,WAAW,eAAe;;iBAK1B,aAAa;;iBAKb,UAAU,eAAe;;iBAKzB,qBAAqB;;;;;;UCrDpB;EACf;EACA;EACA;;KAGU,qBAAqB;;;;;;;;;iBCKjB,qBACd,sBACA;;;;;;iBAwBc,8BACd,uBACC;;;;;iBAQa;;;;;;iBAUA,yBAAyB;;;;;iBAQzB,wBAAwB;;;;;;KCjE5B,oBAAoB;;;;;;;;iBCUhB,oBAAoB;;;;;iBASpB;;;;;;iBASA,YAAY;;;;;iBASZ,uBAAuB;;;;;;UCrCtB;EACf;EACA;;KAGU,yBAAyB;;;;;;;;iBCQrB,yBAAyB,eAAe;;;;;;iBASxC,yBAAyB;;;;;iBASzB;;;;;;iBASA,qBAAqB;;;;;iBAQrB,4BAA4B;;;;;;UChD3B;EACf;EACA;EACA;EACA;;KAGU,wBAAwB;;;;iBCsBpB,oCACd,oBACA,eACC;;iBAKa,8BACd,kBACA,eACC;;iBAKa,oCACd,oBACA;;iBAMc,8BACd,kBACA;;;;;;;iBAWc,oCACd,cACA;;iBAoBc,2BAA2B;;iBAK3B,yBAAyB;;iBAKzB,0BAA0B,oBAAoB;;iBAK9C,wBAAwB,kBAAkB;;;;;;;;iBAW1C,yBAAyB,oBAAoB;;iBAa7C,2BAA2B;;;;;;UC/H1B;EACf;EACA;EACA;EACA;;KAGU,uBAAuB;;;;;;;;iBCqBnB,wBAAwB;;iBAUxB,uBAAuB;;iBAKvB;;iBAKA,0BAA0B"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/cci/types.ts","../src/cci/index.ts","../src/nist/crosswalk.ts","../src/nist/types.ts","../src/nist/index.ts","../src/owasp/types.ts","../src/owasp/index.ts","../src/cwe/types.ts","../src/cwe/index.ts","../src/nessus/types.ts","../src/nessus/index.ts","../src/nikto/types.ts","../src/nikto/index.ts","../src/scoutsuite/types.ts","../src/scoutsuite/index.ts","../src/awsconfig/types.ts","../src/awsconfig/index.ts","../src/hipcheck/types.ts","../src/hipcheck/index.ts"],"mappings":";;;;UAGiB;;EAEf;;EAEA;;;;;KAMU,cAAc,eAAe;;;;;KAM7B,kBAAkB;;;;;;;;;;;;;;;;;;iBCUd,kBAAkB;;;;;;;;;;;;;iBAqBlB,mBAAmB;;;;;;;;;;;;iBAqBnB;;;;;;;;;;;;;;iBAiBA,UAAU;;;;;;;;;;;;;;iBA8BV,mBAAmB;;;;;;;;;;;;;;iBAqBnB,UAAU;;;;;;;;;;;;;;;;;KC1Hd;UASK;EACf;EACA;EACA,UAAU;;;;;EAKV;;EAEA;;;;;;;;;;iBA4Dc,qBACd,iBACA,cACA,aACC;;;;;;;;iBA8Ba,sBACd,oBACA,cACA;EACG;EAAsB,UAAU;;;;;;iBAwBrB,eAAe;;;;;;;;;;;iBAoBf,uBACd,oBACA,mBACA;;;;;;KClLU,mBAAmB;;;;;;;;;;;;;;;;cCyBlB;;cAWA;;iBAKG;;;;;iBAQA,uBAAuB;;iBAUvB;;iBAOA;;;;;;iBASA,cAAc;;;;;;;;;;;;;;;;iBAmBd,mBACd,gBACA;;;;;;;;;;;;;;iBAsBc,cAAc;;;;;;;;;;;;;;;;iBAmBd,WAAW,gBAAgB;;;;;;;;;;;;;;;;;;;iBA0B3B,cACd,gBACA;;;;;;;;;;;cAiCW;;cAGA;;cAGA;;cAGA;;;;;;UC9MI;EACf;EACA;EACA;EACA;EACA;;KAGU,oBAAoB;;;;;;;;;;;;;;;iBCoBhB,oBAAoB,kBAAkB;;;;;;;;;;;;;iBAoBtC,oBAAoB;;;;;;;;;;;;;iBAiBpB,aAAa;;;;;;;;;;;;iBAgBb;;;;;;;;;;;;;;iBAiBA,YAAY;;;;;;;;;;;;iBAmBZ,uBAAuB;;;;;;UCrHtB;EACf;EACA;EACA;EACA;EACA;;KAGU,kBAAkB;;;;iBCiBd,kBACd,eACA,eACC;;iBAKa,kBAAkB,eAAe;;iBAKjC,WAAW,eAAe;;iBAK1B,aAAa;;iBAKb,UAAU,eAAe;;iBAKzB,qBAAqB;;;;;;UCrDpB;EACf;EACA;EACA;;KAGU,qBAAqB;;;;;;;;;iBCajB,qBACd,sBACA;;;;;;iBAwBc,8BACd,uBACC;;;;;iBAQa;;;;;;iBAUA,yBAAyB;;;;;iBAQzB,wBAAwB;;;;;;KCzE5B,oBAAoB;;;;;;;;iBCkBhB,oBAAoB;;;;;iBAUpB;;;;;;iBASA,YAAY;;;;;iBASZ,uBAAuB;;;;;;UC9CtB;EACf;EACA;;KAGU,yBAAyB;;;;;;;;iBCgBrB,yBAAyB,eAAe;;;;;;iBASxC,yBAAyB;;;;;iBASzB;;;;;;iBASA,qBAAqB;;;;;iBAQrB,4BAA4B;;;;;;UCxD3B;EACf;EACA;EACA;EACA;;;;;;EAMA;;KAGU,wBAAwB;;;;iBCgBpB,oCACd,oBACA,eACC;;iBAKa,8BACd,kBACA,eACC;;iBAKa,oCACd,oBACA;;iBAMc,8BACd,kBACA;;;;;;;iBAWc,oCACd,cACA;;iBAoBc,2BAA2B;;iBAK3B,yBAAyB;;iBAKzB,0BAA0B,oBAAoB;;iBAK9C,wBAAwB,kBAAkB;;;;;;;;iBAW1C,yBAAyB,oBAAoB;;iBAa7C,2BAA2B;;;;;;UC/H1B;EACf;EACA;EACA;EACA;;KAGU,uBAAuB;;;;;;;;iBC2BnB,wBAAwB;;iBAWxB,uBAAuB;;iBAKvB;;iBAKA,0BAA0B"}