@nikhil_telkar/codeshield 0.0.0-stage → 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +22 -0
- package/README.md +289 -2
- package/dist/cli.d.ts +3 -0
- package/dist/cli.d.ts.map +1 -0
- package/dist/cli.js +237 -0
- package/dist/cli.js.map +1 -0
- package/dist/engine/fileWalker.d.ts +15 -0
- package/dist/engine/fileWalker.d.ts.map +1 -0
- package/dist/engine/fileWalker.js +170 -0
- package/dist/engine/fileWalker.js.map +1 -0
- package/dist/engine/index.d.ts +4 -0
- package/dist/engine/index.d.ts.map +1 -0
- package/dist/engine/index.js +4 -0
- package/dist/engine/index.js.map +1 -0
- package/dist/engine/projectDetector.d.ts +10 -0
- package/dist/engine/projectDetector.d.ts.map +1 -0
- package/dist/engine/projectDetector.js +44 -0
- package/dist/engine/projectDetector.js.map +1 -0
- package/dist/engine/runner.d.ts +8 -0
- package/dist/engine/runner.d.ts.map +1 -0
- package/dist/engine/runner.js +87 -0
- package/dist/engine/runner.js.map +1 -0
- package/dist/fix/fixer.d.ts +17 -0
- package/dist/fix/fixer.d.ts.map +1 -0
- package/dist/fix/fixer.js +190 -0
- package/dist/fix/fixer.js.map +1 -0
- package/dist/fix/history.d.ts +23 -0
- package/dist/fix/history.d.ts.map +1 -0
- package/dist/fix/history.js +107 -0
- package/dist/fix/history.js.map +1 -0
- package/dist/fix/index.d.ts +3 -0
- package/dist/fix/index.d.ts.map +1 -0
- package/dist/fix/index.js +3 -0
- package/dist/fix/index.js.map +1 -0
- package/dist/index.d.ts +8 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +8 -0
- package/dist/index.js.map +1 -0
- package/dist/report/colors.d.ts +21 -0
- package/dist/report/colors.d.ts.map +1 -0
- package/dist/report/colors.js +70 -0
- package/dist/report/colors.js.map +1 -0
- package/dist/report/index.d.ts +15 -0
- package/dist/report/index.d.ts.map +1 -0
- package/dist/report/index.js +39 -0
- package/dist/report/index.js.map +1 -0
- package/dist/report/sarif.d.ts +44 -0
- package/dist/report/sarif.d.ts.map +1 -0
- package/dist/report/sarif.js +69 -0
- package/dist/report/sarif.js.map +1 -0
- package/dist/report/score.d.ts +14 -0
- package/dist/report/score.d.ts.map +1 -0
- package/dist/report/score.js +62 -0
- package/dist/report/score.js.map +1 -0
- package/dist/report/terminal.d.ts +10 -0
- package/dist/report/terminal.d.ts.map +1 -0
- package/dist/report/terminal.js +77 -0
- package/dist/report/terminal.js.map +1 -0
- package/dist/scanners/code.d.ts +22 -0
- package/dist/scanners/code.d.ts.map +1 -0
- package/dist/scanners/code.js +319 -0
- package/dist/scanners/code.js.map +1 -0
- package/dist/scanners/dependencies.d.ts +10 -0
- package/dist/scanners/dependencies.d.ts.map +1 -0
- package/dist/scanners/dependencies.js +240 -0
- package/dist/scanners/dependencies.js.map +1 -0
- package/dist/scanners/env.d.ts +7 -0
- package/dist/scanners/env.d.ts.map +1 -0
- package/dist/scanners/env.js +195 -0
- package/dist/scanners/env.js.map +1 -0
- package/dist/scanners/helper.d.ts +27 -0
- package/dist/scanners/helper.d.ts.map +1 -0
- package/dist/scanners/helper.js +50 -0
- package/dist/scanners/helper.js.map +1 -0
- package/dist/scanners/index.d.ts +6 -0
- package/dist/scanners/index.d.ts.map +1 -0
- package/dist/scanners/index.js +6 -0
- package/dist/scanners/index.js.map +1 -0
- package/dist/scanners/secrets.d.ts +19 -0
- package/dist/scanners/secrets.d.ts.map +1 -0
- package/dist/scanners/secrets.js +213 -0
- package/dist/scanners/secrets.js.map +1 -0
- package/dist/types.d.ts +43 -0
- package/dist/types.d.ts.map +1 -0
- package/dist/types.js +2 -0
- package/dist/types.js.map +1 -0
- package/dist/utils/constants.d.ts +9 -0
- package/dist/utils/constants.d.ts.map +1 -0
- package/dist/utils/constants.js +54 -0
- package/dist/utils/constants.js.map +1 -0
- package/dist/utils/levenshtein.d.ts +2 -0
- package/dist/utils/levenshtein.d.ts.map +1 -0
- package/dist/utils/levenshtein.js +35 -0
- package/dist/utils/levenshtein.js.map +1 -0
- package/dist/utils/registry.d.ts +18 -0
- package/dist/utils/registry.d.ts.map +1 -0
- package/dist/utils/registry.js +106 -0
- package/dist/utils/registry.js.map +1 -0
- package/dist/utils/sanitize.d.ts +3 -0
- package/dist/utils/sanitize.d.ts.map +1 -0
- package/dist/utils/sanitize.js +10 -0
- package/dist/utils/sanitize.js.map +1 -0
- package/package.json +56 -4
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
import { Severity } from '../types.js';
|
|
2
|
+
export declare const MAX_FILE_BYTES = 1048576;
|
|
3
|
+
export declare const MAX_FILE_COUNT = 5000;
|
|
4
|
+
export declare const SKIP_DIRS: Set<string>;
|
|
5
|
+
export declare const BINARY_EXTENSIONS: Set<string>;
|
|
6
|
+
export declare const TEXT_EXTENSIONS: Set<string>;
|
|
7
|
+
export declare const SEVERITIES: readonly Severity[];
|
|
8
|
+
export declare const SEVERITY_RANK: Record<Severity, number>;
|
|
9
|
+
//# sourceMappingURL=constants.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/utils/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,eAAO,MAAM,cAAc,UAAY,CAAC;AAExC,eAAO,MAAM,cAAc,OAAQ,CAAC;AAEpC,eAAO,MAAM,SAAS,aAUpB,CAAC;AAEH,eAAO,MAAM,iBAAiB,aAQ5B,CAAC;AAEH,eAAO,MAAM,eAAe,aAsB1B,CAAC;AAEH,eAAO,MAAM,UAAU,EAAE,SAAS,QAAQ,EAA2D,CAAC;AAEtG,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAMlD,CAAC"}
|
|
@@ -0,0 +1,54 @@
|
|
|
1
|
+
export const MAX_FILE_BYTES = 1_048_576;
|
|
2
|
+
export const MAX_FILE_COUNT = 5_000;
|
|
3
|
+
export const SKIP_DIRS = new Set([
|
|
4
|
+
'node_modules',
|
|
5
|
+
'.git',
|
|
6
|
+
'.codeshield',
|
|
7
|
+
'dist',
|
|
8
|
+
'dist-test',
|
|
9
|
+
'build',
|
|
10
|
+
'coverage',
|
|
11
|
+
'.yarn',
|
|
12
|
+
'.pnp',
|
|
13
|
+
]);
|
|
14
|
+
export const BINARY_EXTENSIONS = new Set([
|
|
15
|
+
'.png', '.jpg', '.jpeg', '.gif', '.webp', '.ico', '.bmp', '.tiff', '.svg',
|
|
16
|
+
'.mp3', '.mp4', '.wav', '.ogg', '.flac', '.avi', '.mov', '.mkv',
|
|
17
|
+
'.zip', '.tar', '.gz', '.bz2', '.xz', '.7z', '.rar',
|
|
18
|
+
'.exe', '.dll', '.so', '.dylib', '.class', '.pyc', '.wasm',
|
|
19
|
+
'.pdf', '.docx', '.xlsx', '.pptx',
|
|
20
|
+
'.ttf', '.otf', '.woff', '.woff2',
|
|
21
|
+
'.bin', '.lock',
|
|
22
|
+
]);
|
|
23
|
+
export const TEXT_EXTENSIONS = new Set([
|
|
24
|
+
'.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs',
|
|
25
|
+
'.json', '.jsonc',
|
|
26
|
+
'.env', '.env.local', '.env.development', '.env.production', '.env.test',
|
|
27
|
+
'.yaml', '.yml',
|
|
28
|
+
'.toml',
|
|
29
|
+
'.sh', '.bash', '.zsh',
|
|
30
|
+
'.py',
|
|
31
|
+
'.rb',
|
|
32
|
+
'.php',
|
|
33
|
+
'.go',
|
|
34
|
+
'.java',
|
|
35
|
+
'.cs',
|
|
36
|
+
'.c', '.cpp', '.h', '.hpp',
|
|
37
|
+
'.rs',
|
|
38
|
+
'.html', '.htm',
|
|
39
|
+
'.css', '.scss', '.sass',
|
|
40
|
+
'.md', '.mdx',
|
|
41
|
+
'.txt',
|
|
42
|
+
'.xml',
|
|
43
|
+
'.ini', '.cfg', '.conf',
|
|
44
|
+
'.Dockerfile', '',
|
|
45
|
+
]);
|
|
46
|
+
export const SEVERITIES = ['info', 'low', 'medium', 'high', 'critical'];
|
|
47
|
+
export const SEVERITY_RANK = {
|
|
48
|
+
info: 0,
|
|
49
|
+
low: 1,
|
|
50
|
+
medium: 2,
|
|
51
|
+
high: 3,
|
|
52
|
+
critical: 4,
|
|
53
|
+
};
|
|
54
|
+
//# sourceMappingURL=constants.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/utils/constants.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAAC;AAExC,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;AAEpC,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IAC/B,cAAc;IACd,MAAM;IACN,aAAa;IACb,MAAM;IACN,WAAW;IACX,OAAO;IACP,UAAU;IACV,OAAO;IACP,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IACvC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IACzE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC/D,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM;IACnD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO;IAC1D,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO;IACjC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ;IACjC,MAAM,EAAE,OAAO;CAChB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IACrC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC5C,OAAO,EAAE,QAAQ;IACjB,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,WAAW;IACxE,OAAO,EAAE,MAAM;IACf,OAAO;IACP,KAAK,EAAE,OAAO,EAAE,MAAM;IACtB,KAAK;IACL,KAAK;IACL,MAAM;IACN,KAAK;IACL,OAAO;IACP,KAAK;IACL,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;IAC1B,KAAK;IACL,OAAO,EAAE,MAAM;IACf,MAAM,EAAE,OAAO,EAAE,OAAO;IACxB,KAAK,EAAE,MAAM;IACb,MAAM;IACN,MAAM;IACN,MAAM,EAAE,MAAM,EAAE,OAAO;IACvB,aAAa,EAAE,EAAE;CAClB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAwB,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAU,CAAC;AAEtG,MAAM,CAAC,MAAM,aAAa,GAA6B;IACrD,IAAI,EAAE,CAAC;IACP,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"levenshtein.d.ts","sourceRoot":"","sources":["../../src/utils/levenshtein.ts"],"names":[],"mappings":"AAAA,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAmCxD"}
|
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
export function levenshtein(a, b) {
|
|
2
|
+
if (a === b)
|
|
3
|
+
return 0;
|
|
4
|
+
const aLen = a.length;
|
|
5
|
+
const bLen = b.length;
|
|
6
|
+
if (aLen === 0)
|
|
7
|
+
return bLen;
|
|
8
|
+
if (bLen === 0)
|
|
9
|
+
return aLen;
|
|
10
|
+
const d = [];
|
|
11
|
+
for (let i = 0; i <= aLen; i++) {
|
|
12
|
+
d[i] = new Array(bLen + 1).fill(0);
|
|
13
|
+
d[i][0] = i;
|
|
14
|
+
}
|
|
15
|
+
for (let j = 0; j <= bLen; j++) {
|
|
16
|
+
d[0][j] = j;
|
|
17
|
+
}
|
|
18
|
+
for (let i = 1; i <= aLen; i++) {
|
|
19
|
+
for (let j = 1; j <= bLen; j++) {
|
|
20
|
+
const cost = a[i - 1] === b[j - 1] ? 0 : 1;
|
|
21
|
+
const deletion = d[i - 1][j] + 1;
|
|
22
|
+
const insertion = d[i][j - 1] + 1;
|
|
23
|
+
const substitution = d[i - 1][j - 1] + cost;
|
|
24
|
+
let min = Math.min(deletion, insertion, substitution);
|
|
25
|
+
if (i > 1 && j > 1 && a[i - 1] === b[j - 2] && a[i - 2] === b[j - 1]) {
|
|
26
|
+
const transposition = d[i - 2][j - 2] + 1;
|
|
27
|
+
if (transposition < min)
|
|
28
|
+
min = transposition;
|
|
29
|
+
}
|
|
30
|
+
d[i][j] = min;
|
|
31
|
+
}
|
|
32
|
+
}
|
|
33
|
+
return d[aLen][bLen];
|
|
34
|
+
}
|
|
35
|
+
//# sourceMappingURL=levenshtein.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"levenshtein.js","sourceRoot":"","sources":["../../src/utils/levenshtein.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,WAAW,CAAC,CAAS,EAAE,CAAS;IAC9C,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5B,MAAM,CAAC,GAAe,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAS,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC;YACnC,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,GAAG,CAAC,CAAE,GAAG,CAAC,CAAC;YACpC,MAAM,YAAY,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,GAAG,CAAC,CAAE,GAAG,IAAI,CAAC;YAE9C,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;YAEtD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACrE,MAAM,aAAa,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,GAAG,CAAC,CAAE,GAAG,CAAC,CAAC;gBAC5C,IAAI,aAAa,GAAG,GAAG;oBAAE,GAAG,GAAG,aAAa,CAAC;YAC/C,CAAC;YAED,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,CAAC,IAAI,CAAE,CAAC,IAAI,CAAE,CAAC;AACzB,CAAC"}
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
import type { IncomingMessage, ClientRequest, RequestOptions } from 'node:http';
|
|
2
|
+
export interface RegistryData {
|
|
3
|
+
created: string;
|
|
4
|
+
latestScripts: Record<string, string>;
|
|
5
|
+
name: string;
|
|
6
|
+
}
|
|
7
|
+
export type RegistryResult = {
|
|
8
|
+
status: 'ok';
|
|
9
|
+
data: RegistryData;
|
|
10
|
+
} | {
|
|
11
|
+
status: 'not-found';
|
|
12
|
+
} | {
|
|
13
|
+
status: 'error';
|
|
14
|
+
reason: string;
|
|
15
|
+
};
|
|
16
|
+
export type RegistryFetchFn = (url: string, options: RequestOptions, callback: (res: IncomingMessage) => void) => ClientRequest;
|
|
17
|
+
export declare function fetchRegistry(packageName: string, timeoutMs?: number, fetchFn?: RegistryFetchFn): Promise<RegistryResult>;
|
|
18
|
+
//# sourceMappingURL=registry.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/utils/registry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhF,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,YAAY,CAAA;CAAE,GACpC;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAExC,MAAM,MAAM,eAAe,GAAG,CAC5B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,IAAI,KACrC,aAAa,CAAC;AAcnB,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,SAAS,SAAQ,EACjB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,cAAc,CAAC,CAgFzB"}
|
|
@@ -0,0 +1,106 @@
|
|
|
1
|
+
const REGISTRY_BASE = 'https://registry.npmjs.org/';
|
|
2
|
+
const MAX_BODY_BYTES = 25 * 1024 * 1024;
|
|
3
|
+
let httpsModule = null;
|
|
4
|
+
async function getRealFetch() {
|
|
5
|
+
if (!httpsModule) {
|
|
6
|
+
httpsModule = await import('node:https');
|
|
7
|
+
}
|
|
8
|
+
return (url, options, cb) => httpsModule.get(url, options, cb);
|
|
9
|
+
}
|
|
10
|
+
export async function fetchRegistry(packageName, timeoutMs = 5_000, fetchFn) {
|
|
11
|
+
const activeFetch = fetchFn ?? (await getRealFetch());
|
|
12
|
+
const encoded = encodeURIComponent(packageName);
|
|
13
|
+
const url = `${REGISTRY_BASE}${encoded}`;
|
|
14
|
+
return new Promise((resolve) => {
|
|
15
|
+
let settled = false;
|
|
16
|
+
const done = (result) => {
|
|
17
|
+
if (!settled) {
|
|
18
|
+
settled = true;
|
|
19
|
+
resolve(result);
|
|
20
|
+
}
|
|
21
|
+
};
|
|
22
|
+
const controller = new AbortController();
|
|
23
|
+
const timer = setTimeout(() => {
|
|
24
|
+
controller.abort();
|
|
25
|
+
done({ status: 'error', reason: 'Request timed out' });
|
|
26
|
+
}, timeoutMs);
|
|
27
|
+
let req;
|
|
28
|
+
try {
|
|
29
|
+
req = activeFetch(url, { signal: controller.signal }, (res) => {
|
|
30
|
+
clearTimeout(timer);
|
|
31
|
+
if (res.statusCode === 404) {
|
|
32
|
+
res.resume();
|
|
33
|
+
done({ status: 'not-found' });
|
|
34
|
+
return;
|
|
35
|
+
}
|
|
36
|
+
if (res.statusCode !== 200) {
|
|
37
|
+
res.resume();
|
|
38
|
+
done({ status: 'error', reason: `HTTP ${res.statusCode ?? 'unknown'}` });
|
|
39
|
+
return;
|
|
40
|
+
}
|
|
41
|
+
const chunks = [];
|
|
42
|
+
let totalBytes = 0;
|
|
43
|
+
res.on('data', (chunk) => {
|
|
44
|
+
totalBytes += chunk.length;
|
|
45
|
+
if (totalBytes > MAX_BODY_BYTES) {
|
|
46
|
+
res.destroy();
|
|
47
|
+
done({ status: 'error', reason: 'Response too large' });
|
|
48
|
+
return;
|
|
49
|
+
}
|
|
50
|
+
chunks.push(chunk);
|
|
51
|
+
});
|
|
52
|
+
res.on('end', () => {
|
|
53
|
+
try {
|
|
54
|
+
const body = Buffer.concat(chunks).toString('utf8');
|
|
55
|
+
const json = JSON.parse(body);
|
|
56
|
+
done({ status: 'ok', data: parseRegistryJson(json) });
|
|
57
|
+
}
|
|
58
|
+
catch {
|
|
59
|
+
done({ status: 'error', reason: 'Invalid JSON response' });
|
|
60
|
+
}
|
|
61
|
+
});
|
|
62
|
+
res.on('error', (err) => {
|
|
63
|
+
done({ status: 'error', reason: err.message });
|
|
64
|
+
});
|
|
65
|
+
});
|
|
66
|
+
}
|
|
67
|
+
catch (err) {
|
|
68
|
+
clearTimeout(timer);
|
|
69
|
+
const msg = err instanceof Error ? err.message : String(err);
|
|
70
|
+
done({ status: 'error', reason: msg });
|
|
71
|
+
return;
|
|
72
|
+
}
|
|
73
|
+
req.on('error', (err) => {
|
|
74
|
+
clearTimeout(timer);
|
|
75
|
+
if (!settled) {
|
|
76
|
+
done({ status: 'error', reason: err.message });
|
|
77
|
+
}
|
|
78
|
+
});
|
|
79
|
+
});
|
|
80
|
+
}
|
|
81
|
+
function parseRegistryJson(json) {
|
|
82
|
+
const name = typeof json['name'] === 'string' ? json['name'] : '';
|
|
83
|
+
const time = json['time'];
|
|
84
|
+
const created = time !== null && typeof time === 'object' && 'created' in time && typeof time['created'] === 'string'
|
|
85
|
+
? time['created']
|
|
86
|
+
: '';
|
|
87
|
+
const distTags = json['dist-tags'];
|
|
88
|
+
const latestVersion = distTags !== null && typeof distTags === 'object' && 'latest' in distTags
|
|
89
|
+
? distTags['latest']
|
|
90
|
+
: undefined;
|
|
91
|
+
let latestScripts = {};
|
|
92
|
+
if (latestVersion) {
|
|
93
|
+
const versions = json['versions'];
|
|
94
|
+
if (versions !== null && typeof versions === 'object' && latestVersion in versions) {
|
|
95
|
+
const latestPkg = versions[latestVersion];
|
|
96
|
+
if (latestPkg !== null && typeof latestPkg === 'object' && 'scripts' in latestPkg) {
|
|
97
|
+
const scripts = latestPkg['scripts'];
|
|
98
|
+
if (scripts !== null && typeof scripts === 'object') {
|
|
99
|
+
latestScripts = scripts;
|
|
100
|
+
}
|
|
101
|
+
}
|
|
102
|
+
}
|
|
103
|
+
}
|
|
104
|
+
return { name, created, latestScripts };
|
|
105
|
+
}
|
|
106
|
+
//# sourceMappingURL=registry.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/utils/registry.ts"],"names":[],"mappings":"AAoBA,MAAM,aAAa,GAAG,6BAA6B,CAAC;AACpD,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAExC,IAAI,WAAW,GAA4B,IAAI,CAAC;AAEhD,KAAK,UAAU,YAAY;IACzB,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,WAAW,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,WAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,WAAmB,EACnB,SAAS,GAAG,KAAK,EACjB,OAAyB;IAEzB,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,GAAG,aAAa,GAAG,OAAO,EAAE,CAAC;IAEzC,OAAO,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,EAAE;QAC7C,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,IAAI,GAAG,CAAC,MAAsB,EAAQ,EAAE;YAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACzD,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,IAAI,GAA8B,CAAC;QAEnC,IAAI,CAAC;YACH,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC5D,YAAY,CAAC,KAAK,CAAC,CAAC;gBAEpB,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;oBAC3B,GAAG,CAAC,MAAM,EAAE,CAAC;oBACb,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;oBAC9B,OAAO;gBACT,CAAC;gBAED,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;oBAC3B,GAAG,CAAC,MAAM,EAAE,CAAC;oBACb,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,GAAG,CAAC,UAAU,IAAI,SAAS,EAAE,EAAE,CAAC,CAAC;oBACzE,OAAO;gBACT,CAAC;gBAED,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,IAAI,UAAU,GAAG,CAAC,CAAC;gBAEnB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC/B,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;oBAC3B,IAAI,UAAU,GAAG,cAAc,EAAE,CAAC;wBAChC,GAAG,CAAC,OAAO,EAAE,CAAC;wBACd,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;wBACxD,OAAO;oBACT,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;wBACpD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;wBACzD,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACxD,CAAC;oBAAC,MAAM,CAAC;wBACP,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;oBAC7D,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;oBAC7B,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACjD,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QAED,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAC7B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,IAA6B;IACtD,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAElE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,OAAO,GACX,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,SAAS,IAAI,IAAI,IAAI,OAAQ,IAAgC,CAAC,SAAS,CAAC,KAAK,QAAQ;QAChI,CAAC,CAAE,IAA+B,CAAC,SAAS,CAAE;QAC9C,CAAC,CAAC,EAAE,CAAC;IAET,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,aAAa,GACjB,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,IAAI,QAAQ;QACvE,CAAC,CAAE,QAAmC,CAAC,QAAQ,CAAC;QAChD,CAAC,CAAC,SAAS,CAAC;IAEhB,IAAI,aAAa,GAA2B,EAAE,CAAC;IAC/C,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,aAAa,IAAK,QAAmB,EAAE,CAAC;YAC/F,MAAM,SAAS,GAAI,QAAoC,CAAC,aAAa,CAAC,CAAC;YACvE,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;gBAClF,MAAM,OAAO,GAAI,SAAqC,CAAC,SAAS,CAAC,CAAC;gBAClE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACpD,aAAa,GAAG,OAAiC,CAAC;gBACpD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AAC1C,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/utils/sanitize.ts"],"names":[],"mappings":"AAGA,wBAAgB,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE1C;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGhD"}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
const ANSI_RE = /\x1b\[[0-9;]*[A-Za-z]|\x1b\][^\x07]*(?:\x07|\x1b\\)|\x1b|[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g;
|
|
2
|
+
export function sanitize(s) {
|
|
3
|
+
return s.replace(ANSI_RE, '');
|
|
4
|
+
}
|
|
5
|
+
export function maskSecret(value) {
|
|
6
|
+
if (value.length <= 4)
|
|
7
|
+
return '****';
|
|
8
|
+
return `${value.slice(0, 4)}****`;
|
|
9
|
+
}
|
|
10
|
+
//# sourceMappingURL=sanitize.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../src/utils/sanitize.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,GACX,4FAA4F,CAAC;AAE/F,MAAM,UAAU,QAAQ,CAAC,CAAS;IAChC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;AACpC,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,58 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@nikhil_telkar/codeshield",
|
|
3
|
-
"version": "0.
|
|
4
|
-
"
|
|
5
|
-
"
|
|
6
|
-
|
|
3
|
+
"version": "0.1.0",
|
|
4
|
+
"description": "Security scanner for AI-generated codebases.",
|
|
5
|
+
"type": "module",
|
|
6
|
+
"main": "dist/index.js",
|
|
7
|
+
"types": "dist/index.d.ts",
|
|
8
|
+
"exports": {
|
|
9
|
+
".": {
|
|
10
|
+
"types": "./dist/index.d.ts",
|
|
11
|
+
"import": "./dist/index.js"
|
|
12
|
+
}
|
|
13
|
+
},
|
|
14
|
+
"bin": {
|
|
15
|
+
"codeshield": "dist/cli.js"
|
|
16
|
+
},
|
|
17
|
+
"files": [
|
|
18
|
+
"dist",
|
|
19
|
+
"README.md",
|
|
20
|
+
"LICENSE"
|
|
21
|
+
],
|
|
22
|
+
"engines": {
|
|
23
|
+
"node": ">=20.12"
|
|
24
|
+
},
|
|
25
|
+
"scripts": {
|
|
26
|
+
"build": "tsc",
|
|
27
|
+
"test": "tsc -p tsconfig.test.json && node --use-bundled-ca --test \"dist-test/tests/**/*.test.js\"",
|
|
28
|
+
"lint": "tsc --noEmit",
|
|
29
|
+
"prepublishOnly": "npm run lint && npm test && npm run build"
|
|
30
|
+
},
|
|
31
|
+
"author": "Nikhil Telkar <nikhiltelkar19@gmail.com>",
|
|
32
|
+
"license": "MIT",
|
|
33
|
+
"repository": {
|
|
34
|
+
"type": "git",
|
|
35
|
+
"url": "https://github.com/nikhiltelkar/codeshield.git"
|
|
36
|
+
},
|
|
37
|
+
"bugs": {
|
|
38
|
+
"url": "https://github.com/nikhiltelkar/codeshield/issues"
|
|
39
|
+
},
|
|
40
|
+
"homepage": "https://github.com/nikhiltelkar/codeshield#readme",
|
|
41
|
+
"keywords": [
|
|
42
|
+
"security",
|
|
43
|
+
"scanner",
|
|
44
|
+
"ai-generated-code",
|
|
45
|
+
"cursor",
|
|
46
|
+
"copilot",
|
|
47
|
+
"llm",
|
|
48
|
+
"sast",
|
|
49
|
+
"secrets",
|
|
50
|
+
"linter",
|
|
51
|
+
"vulnerabilities",
|
|
52
|
+
"zero-dependencies"
|
|
53
|
+
],
|
|
54
|
+
"devDependencies": {
|
|
55
|
+
"@types/node": "^22.0.0",
|
|
56
|
+
"typescript": "^5.5.0"
|
|
57
|
+
}
|
|
58
|
+
}
|