@nikhil_telkar/codeshield 0.0.0-stage → 0.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (103) hide show
  1. package/LICENSE +22 -0
  2. package/README.md +239 -2
  3. package/dist/cli.d.ts +3 -0
  4. package/dist/cli.d.ts.map +1 -0
  5. package/dist/cli.js +237 -0
  6. package/dist/cli.js.map +1 -0
  7. package/dist/engine/fileWalker.d.ts +15 -0
  8. package/dist/engine/fileWalker.d.ts.map +1 -0
  9. package/dist/engine/fileWalker.js +170 -0
  10. package/dist/engine/fileWalker.js.map +1 -0
  11. package/dist/engine/index.d.ts +4 -0
  12. package/dist/engine/index.d.ts.map +1 -0
  13. package/dist/engine/index.js +4 -0
  14. package/dist/engine/index.js.map +1 -0
  15. package/dist/engine/projectDetector.d.ts +10 -0
  16. package/dist/engine/projectDetector.d.ts.map +1 -0
  17. package/dist/engine/projectDetector.js +44 -0
  18. package/dist/engine/projectDetector.js.map +1 -0
  19. package/dist/engine/runner.d.ts +8 -0
  20. package/dist/engine/runner.d.ts.map +1 -0
  21. package/dist/engine/runner.js +87 -0
  22. package/dist/engine/runner.js.map +1 -0
  23. package/dist/fix/fixer.d.ts +17 -0
  24. package/dist/fix/fixer.d.ts.map +1 -0
  25. package/dist/fix/fixer.js +190 -0
  26. package/dist/fix/fixer.js.map +1 -0
  27. package/dist/fix/history.d.ts +23 -0
  28. package/dist/fix/history.d.ts.map +1 -0
  29. package/dist/fix/history.js +107 -0
  30. package/dist/fix/history.js.map +1 -0
  31. package/dist/fix/index.d.ts +3 -0
  32. package/dist/fix/index.d.ts.map +1 -0
  33. package/dist/fix/index.js +3 -0
  34. package/dist/fix/index.js.map +1 -0
  35. package/dist/index.d.ts +8 -0
  36. package/dist/index.d.ts.map +1 -0
  37. package/dist/index.js +8 -0
  38. package/dist/index.js.map +1 -0
  39. package/dist/report/colors.d.ts +21 -0
  40. package/dist/report/colors.d.ts.map +1 -0
  41. package/dist/report/colors.js +70 -0
  42. package/dist/report/colors.js.map +1 -0
  43. package/dist/report/index.d.ts +15 -0
  44. package/dist/report/index.d.ts.map +1 -0
  45. package/dist/report/index.js +39 -0
  46. package/dist/report/index.js.map +1 -0
  47. package/dist/report/sarif.d.ts +44 -0
  48. package/dist/report/sarif.d.ts.map +1 -0
  49. package/dist/report/sarif.js +69 -0
  50. package/dist/report/sarif.js.map +1 -0
  51. package/dist/report/score.d.ts +14 -0
  52. package/dist/report/score.d.ts.map +1 -0
  53. package/dist/report/score.js +62 -0
  54. package/dist/report/score.js.map +1 -0
  55. package/dist/report/terminal.d.ts +10 -0
  56. package/dist/report/terminal.d.ts.map +1 -0
  57. package/dist/report/terminal.js +77 -0
  58. package/dist/report/terminal.js.map +1 -0
  59. package/dist/scanners/code.d.ts +22 -0
  60. package/dist/scanners/code.d.ts.map +1 -0
  61. package/dist/scanners/code.js +319 -0
  62. package/dist/scanners/code.js.map +1 -0
  63. package/dist/scanners/dependencies.d.ts +10 -0
  64. package/dist/scanners/dependencies.d.ts.map +1 -0
  65. package/dist/scanners/dependencies.js +240 -0
  66. package/dist/scanners/dependencies.js.map +1 -0
  67. package/dist/scanners/env.d.ts +7 -0
  68. package/dist/scanners/env.d.ts.map +1 -0
  69. package/dist/scanners/env.js +195 -0
  70. package/dist/scanners/env.js.map +1 -0
  71. package/dist/scanners/helper.d.ts +27 -0
  72. package/dist/scanners/helper.d.ts.map +1 -0
  73. package/dist/scanners/helper.js +50 -0
  74. package/dist/scanners/helper.js.map +1 -0
  75. package/dist/scanners/index.d.ts +6 -0
  76. package/dist/scanners/index.d.ts.map +1 -0
  77. package/dist/scanners/index.js +6 -0
  78. package/dist/scanners/index.js.map +1 -0
  79. package/dist/scanners/secrets.d.ts +19 -0
  80. package/dist/scanners/secrets.d.ts.map +1 -0
  81. package/dist/scanners/secrets.js +213 -0
  82. package/dist/scanners/secrets.js.map +1 -0
  83. package/dist/types.d.ts +43 -0
  84. package/dist/types.d.ts.map +1 -0
  85. package/dist/types.js +2 -0
  86. package/dist/types.js.map +1 -0
  87. package/dist/utils/constants.d.ts +9 -0
  88. package/dist/utils/constants.d.ts.map +1 -0
  89. package/dist/utils/constants.js +54 -0
  90. package/dist/utils/constants.js.map +1 -0
  91. package/dist/utils/levenshtein.d.ts +2 -0
  92. package/dist/utils/levenshtein.d.ts.map +1 -0
  93. package/dist/utils/levenshtein.js +35 -0
  94. package/dist/utils/levenshtein.js.map +1 -0
  95. package/dist/utils/registry.d.ts +18 -0
  96. package/dist/utils/registry.d.ts.map +1 -0
  97. package/dist/utils/registry.js +106 -0
  98. package/dist/utils/registry.js.map +1 -0
  99. package/dist/utils/sanitize.d.ts +3 -0
  100. package/dist/utils/sanitize.d.ts.map +1 -0
  101. package/dist/utils/sanitize.js +10 -0
  102. package/dist/utils/sanitize.js.map +1 -0
  103. package/package.json +59 -4
@@ -0,0 +1,9 @@
1
+ import { Severity } from '../types.js';
2
+ export declare const MAX_FILE_BYTES = 1048576;
3
+ export declare const MAX_FILE_COUNT = 5000;
4
+ export declare const SKIP_DIRS: Set<string>;
5
+ export declare const BINARY_EXTENSIONS: Set<string>;
6
+ export declare const TEXT_EXTENSIONS: Set<string>;
7
+ export declare const SEVERITIES: readonly Severity[];
8
+ export declare const SEVERITY_RANK: Record<Severity, number>;
9
+ //# sourceMappingURL=constants.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/utils/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,eAAO,MAAM,cAAc,UAAY,CAAC;AAExC,eAAO,MAAM,cAAc,OAAQ,CAAC;AAEpC,eAAO,MAAM,SAAS,aAUpB,CAAC;AAEH,eAAO,MAAM,iBAAiB,aAQ5B,CAAC;AAEH,eAAO,MAAM,eAAe,aAsB1B,CAAC;AAEH,eAAO,MAAM,UAAU,EAAE,SAAS,QAAQ,EAA2D,CAAC;AAEtG,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAMlD,CAAC"}
@@ -0,0 +1,54 @@
1
+ export const MAX_FILE_BYTES = 1_048_576;
2
+ export const MAX_FILE_COUNT = 5_000;
3
+ export const SKIP_DIRS = new Set([
4
+ 'node_modules',
5
+ '.git',
6
+ '.codeshield',
7
+ 'dist',
8
+ 'dist-test',
9
+ 'build',
10
+ 'coverage',
11
+ '.yarn',
12
+ '.pnp',
13
+ ]);
14
+ export const BINARY_EXTENSIONS = new Set([
15
+ '.png', '.jpg', '.jpeg', '.gif', '.webp', '.ico', '.bmp', '.tiff', '.svg',
16
+ '.mp3', '.mp4', '.wav', '.ogg', '.flac', '.avi', '.mov', '.mkv',
17
+ '.zip', '.tar', '.gz', '.bz2', '.xz', '.7z', '.rar',
18
+ '.exe', '.dll', '.so', '.dylib', '.class', '.pyc', '.wasm',
19
+ '.pdf', '.docx', '.xlsx', '.pptx',
20
+ '.ttf', '.otf', '.woff', '.woff2',
21
+ '.bin', '.lock',
22
+ ]);
23
+ export const TEXT_EXTENSIONS = new Set([
24
+ '.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs',
25
+ '.json', '.jsonc',
26
+ '.env', '.env.local', '.env.development', '.env.production', '.env.test',
27
+ '.yaml', '.yml',
28
+ '.toml',
29
+ '.sh', '.bash', '.zsh',
30
+ '.py',
31
+ '.rb',
32
+ '.php',
33
+ '.go',
34
+ '.java',
35
+ '.cs',
36
+ '.c', '.cpp', '.h', '.hpp',
37
+ '.rs',
38
+ '.html', '.htm',
39
+ '.css', '.scss', '.sass',
40
+ '.md', '.mdx',
41
+ '.txt',
42
+ '.xml',
43
+ '.ini', '.cfg', '.conf',
44
+ '.Dockerfile', '',
45
+ ]);
46
+ export const SEVERITIES = ['info', 'low', 'medium', 'high', 'critical'];
47
+ export const SEVERITY_RANK = {
48
+ info: 0,
49
+ low: 1,
50
+ medium: 2,
51
+ high: 3,
52
+ critical: 4,
53
+ };
54
+ //# sourceMappingURL=constants.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/utils/constants.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAAC;AAExC,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;AAEpC,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IAC/B,cAAc;IACd,MAAM;IACN,aAAa;IACb,MAAM;IACN,WAAW;IACX,OAAO;IACP,UAAU;IACV,OAAO;IACP,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IACvC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IACzE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC/D,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM;IACnD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO;IAC1D,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO;IACjC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ;IACjC,MAAM,EAAE,OAAO;CAChB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IACrC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC5C,OAAO,EAAE,QAAQ;IACjB,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,WAAW;IACxE,OAAO,EAAE,MAAM;IACf,OAAO;IACP,KAAK,EAAE,OAAO,EAAE,MAAM;IACtB,KAAK;IACL,KAAK;IACL,MAAM;IACN,KAAK;IACL,OAAO;IACP,KAAK;IACL,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;IAC1B,KAAK;IACL,OAAO,EAAE,MAAM;IACf,MAAM,EAAE,OAAO,EAAE,OAAO;IACxB,KAAK,EAAE,MAAM;IACb,MAAM;IACN,MAAM;IACN,MAAM,EAAE,MAAM,EAAE,OAAO;IACvB,aAAa,EAAE,EAAE;CAClB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAwB,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAU,CAAC;AAEtG,MAAM,CAAC,MAAM,aAAa,GAA6B;IACrD,IAAI,EAAE,CAAC;IACP,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAC"}
@@ -0,0 +1,2 @@
1
+ export declare function levenshtein(a: string, b: string): number;
2
+ //# sourceMappingURL=levenshtein.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"levenshtein.d.ts","sourceRoot":"","sources":["../../src/utils/levenshtein.ts"],"names":[],"mappings":"AAAA,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAmCxD"}
@@ -0,0 +1,35 @@
1
+ export function levenshtein(a, b) {
2
+ if (a === b)
3
+ return 0;
4
+ const aLen = a.length;
5
+ const bLen = b.length;
6
+ if (aLen === 0)
7
+ return bLen;
8
+ if (bLen === 0)
9
+ return aLen;
10
+ const d = [];
11
+ for (let i = 0; i <= aLen; i++) {
12
+ d[i] = new Array(bLen + 1).fill(0);
13
+ d[i][0] = i;
14
+ }
15
+ for (let j = 0; j <= bLen; j++) {
16
+ d[0][j] = j;
17
+ }
18
+ for (let i = 1; i <= aLen; i++) {
19
+ for (let j = 1; j <= bLen; j++) {
20
+ const cost = a[i - 1] === b[j - 1] ? 0 : 1;
21
+ const deletion = d[i - 1][j] + 1;
22
+ const insertion = d[i][j - 1] + 1;
23
+ const substitution = d[i - 1][j - 1] + cost;
24
+ let min = Math.min(deletion, insertion, substitution);
25
+ if (i > 1 && j > 1 && a[i - 1] === b[j - 2] && a[i - 2] === b[j - 1]) {
26
+ const transposition = d[i - 2][j - 2] + 1;
27
+ if (transposition < min)
28
+ min = transposition;
29
+ }
30
+ d[i][j] = min;
31
+ }
32
+ }
33
+ return d[aLen][bLen];
34
+ }
35
+ //# sourceMappingURL=levenshtein.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"levenshtein.js","sourceRoot":"","sources":["../../src/utils/levenshtein.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,WAAW,CAAC,CAAS,EAAE,CAAS;IAC9C,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5B,MAAM,CAAC,GAAe,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAS,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC;YACnC,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,GAAG,CAAC,CAAE,GAAG,CAAC,CAAC;YACpC,MAAM,YAAY,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,GAAG,CAAC,CAAE,GAAG,IAAI,CAAC;YAE9C,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;YAEtD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACrE,MAAM,aAAa,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,GAAG,CAAC,CAAE,GAAG,CAAC,CAAC;gBAC5C,IAAI,aAAa,GAAG,GAAG;oBAAE,GAAG,GAAG,aAAa,CAAC;YAC/C,CAAC;YAED,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,CAAC,IAAI,CAAE,CAAC,IAAI,CAAE,CAAC;AACzB,CAAC"}
@@ -0,0 +1,18 @@
1
+ import type { IncomingMessage, ClientRequest, RequestOptions } from 'node:http';
2
+ export interface RegistryData {
3
+ created: string;
4
+ latestScripts: Record<string, string>;
5
+ name: string;
6
+ }
7
+ export type RegistryResult = {
8
+ status: 'ok';
9
+ data: RegistryData;
10
+ } | {
11
+ status: 'not-found';
12
+ } | {
13
+ status: 'error';
14
+ reason: string;
15
+ };
16
+ export type RegistryFetchFn = (url: string, options: RequestOptions, callback: (res: IncomingMessage) => void) => ClientRequest;
17
+ export declare function fetchRegistry(packageName: string, timeoutMs?: number, fetchFn?: RegistryFetchFn): Promise<RegistryResult>;
18
+ //# sourceMappingURL=registry.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/utils/registry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhF,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,YAAY,CAAA;CAAE,GACpC;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAExC,MAAM,MAAM,eAAe,GAAG,CAC5B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,IAAI,KACrC,aAAa,CAAC;AAcnB,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,SAAS,SAAQ,EACjB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,cAAc,CAAC,CAgFzB"}
@@ -0,0 +1,106 @@
1
+ const REGISTRY_BASE = 'https://registry.npmjs.org/';
2
+ const MAX_BODY_BYTES = 25 * 1024 * 1024;
3
+ let httpsModule = null;
4
+ async function getRealFetch() {
5
+ if (!httpsModule) {
6
+ httpsModule = await import('node:https');
7
+ }
8
+ return (url, options, cb) => httpsModule.get(url, options, cb);
9
+ }
10
+ export async function fetchRegistry(packageName, timeoutMs = 5_000, fetchFn) {
11
+ const activeFetch = fetchFn ?? (await getRealFetch());
12
+ const encoded = encodeURIComponent(packageName);
13
+ const url = `${REGISTRY_BASE}${encoded}`;
14
+ return new Promise((resolve) => {
15
+ let settled = false;
16
+ const done = (result) => {
17
+ if (!settled) {
18
+ settled = true;
19
+ resolve(result);
20
+ }
21
+ };
22
+ const controller = new AbortController();
23
+ const timer = setTimeout(() => {
24
+ controller.abort();
25
+ done({ status: 'error', reason: 'Request timed out' });
26
+ }, timeoutMs);
27
+ let req;
28
+ try {
29
+ req = activeFetch(url, { signal: controller.signal }, (res) => {
30
+ clearTimeout(timer);
31
+ if (res.statusCode === 404) {
32
+ res.resume();
33
+ done({ status: 'not-found' });
34
+ return;
35
+ }
36
+ if (res.statusCode !== 200) {
37
+ res.resume();
38
+ done({ status: 'error', reason: `HTTP ${res.statusCode ?? 'unknown'}` });
39
+ return;
40
+ }
41
+ const chunks = [];
42
+ let totalBytes = 0;
43
+ res.on('data', (chunk) => {
44
+ totalBytes += chunk.length;
45
+ if (totalBytes > MAX_BODY_BYTES) {
46
+ res.destroy();
47
+ done({ status: 'error', reason: 'Response too large' });
48
+ return;
49
+ }
50
+ chunks.push(chunk);
51
+ });
52
+ res.on('end', () => {
53
+ try {
54
+ const body = Buffer.concat(chunks).toString('utf8');
55
+ const json = JSON.parse(body);
56
+ done({ status: 'ok', data: parseRegistryJson(json) });
57
+ }
58
+ catch {
59
+ done({ status: 'error', reason: 'Invalid JSON response' });
60
+ }
61
+ });
62
+ res.on('error', (err) => {
63
+ done({ status: 'error', reason: err.message });
64
+ });
65
+ });
66
+ }
67
+ catch (err) {
68
+ clearTimeout(timer);
69
+ const msg = err instanceof Error ? err.message : String(err);
70
+ done({ status: 'error', reason: msg });
71
+ return;
72
+ }
73
+ req.on('error', (err) => {
74
+ clearTimeout(timer);
75
+ if (!settled) {
76
+ done({ status: 'error', reason: err.message });
77
+ }
78
+ });
79
+ });
80
+ }
81
+ function parseRegistryJson(json) {
82
+ const name = typeof json['name'] === 'string' ? json['name'] : '';
83
+ const time = json['time'];
84
+ const created = time !== null && typeof time === 'object' && 'created' in time && typeof time['created'] === 'string'
85
+ ? time['created']
86
+ : '';
87
+ const distTags = json['dist-tags'];
88
+ const latestVersion = distTags !== null && typeof distTags === 'object' && 'latest' in distTags
89
+ ? distTags['latest']
90
+ : undefined;
91
+ let latestScripts = {};
92
+ if (latestVersion) {
93
+ const versions = json['versions'];
94
+ if (versions !== null && typeof versions === 'object' && latestVersion in versions) {
95
+ const latestPkg = versions[latestVersion];
96
+ if (latestPkg !== null && typeof latestPkg === 'object' && 'scripts' in latestPkg) {
97
+ const scripts = latestPkg['scripts'];
98
+ if (scripts !== null && typeof scripts === 'object') {
99
+ latestScripts = scripts;
100
+ }
101
+ }
102
+ }
103
+ }
104
+ return { name, created, latestScripts };
105
+ }
106
+ //# sourceMappingURL=registry.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/utils/registry.ts"],"names":[],"mappings":"AAoBA,MAAM,aAAa,GAAG,6BAA6B,CAAC;AACpD,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAExC,IAAI,WAAW,GAA4B,IAAI,CAAC;AAEhD,KAAK,UAAU,YAAY;IACzB,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,WAAW,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,WAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,WAAmB,EACnB,SAAS,GAAG,KAAK,EACjB,OAAyB;IAEzB,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,GAAG,aAAa,GAAG,OAAO,EAAE,CAAC;IAEzC,OAAO,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,EAAE;QAC7C,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,IAAI,GAAG,CAAC,MAAsB,EAAQ,EAAE;YAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACzD,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,IAAI,GAA8B,CAAC;QAEnC,IAAI,CAAC;YACH,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC5D,YAAY,CAAC,KAAK,CAAC,CAAC;gBAEpB,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;oBAC3B,GAAG,CAAC,MAAM,EAAE,CAAC;oBACb,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;oBAC9B,OAAO;gBACT,CAAC;gBAED,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;oBAC3B,GAAG,CAAC,MAAM,EAAE,CAAC;oBACb,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,GAAG,CAAC,UAAU,IAAI,SAAS,EAAE,EAAE,CAAC,CAAC;oBACzE,OAAO;gBACT,CAAC;gBAED,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,IAAI,UAAU,GAAG,CAAC,CAAC;gBAEnB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC/B,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;oBAC3B,IAAI,UAAU,GAAG,cAAc,EAAE,CAAC;wBAChC,GAAG,CAAC,OAAO,EAAE,CAAC;wBACd,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;wBACxD,OAAO;oBACT,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;wBACpD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;wBACzD,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACxD,CAAC;oBAAC,MAAM,CAAC;wBACP,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;oBAC7D,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;oBAC7B,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACjD,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QAED,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAC7B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,IAA6B;IACtD,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAElE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,OAAO,GACX,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,SAAS,IAAI,IAAI,IAAI,OAAQ,IAAgC,CAAC,SAAS,CAAC,KAAK,QAAQ;QAChI,CAAC,CAAE,IAA+B,CAAC,SAAS,CAAE;QAC9C,CAAC,CAAC,EAAE,CAAC;IAET,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,aAAa,GACjB,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,IAAI,QAAQ;QACvE,CAAC,CAAE,QAAmC,CAAC,QAAQ,CAAC;QAChD,CAAC,CAAC,SAAS,CAAC;IAEhB,IAAI,aAAa,GAA2B,EAAE,CAAC;IAC/C,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,aAAa,IAAK,QAAmB,EAAE,CAAC;YAC/F,MAAM,SAAS,GAAI,QAAoC,CAAC,aAAa,CAAC,CAAC;YACvE,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;gBAClF,MAAM,OAAO,GAAI,SAAqC,CAAC,SAAS,CAAC,CAAC;gBAClE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACpD,aAAa,GAAG,OAAiC,CAAC;gBACpD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AAC1C,CAAC"}
@@ -0,0 +1,3 @@
1
+ export declare function sanitize(s: string): string;
2
+ export declare function maskSecret(value: string): string;
3
+ //# sourceMappingURL=sanitize.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/utils/sanitize.ts"],"names":[],"mappings":"AAGA,wBAAgB,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE1C;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGhD"}
@@ -0,0 +1,10 @@
1
+ const ANSI_RE = /\x1b\[[0-9;]*[A-Za-z]|\x1b\][^\x07]*(?:\x07|\x1b\\)|\x1b|[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g;
2
+ export function sanitize(s) {
3
+ return s.replace(ANSI_RE, '');
4
+ }
5
+ export function maskSecret(value) {
6
+ if (value.length <= 4)
7
+ return '****';
8
+ return `${value.slice(0, 4)}****`;
9
+ }
10
+ //# sourceMappingURL=sanitize.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../src/utils/sanitize.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,GACX,4FAA4F,CAAC;AAE/F,MAAM,UAAU,QAAQ,CAAC,CAAS;IAChC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;AACpC,CAAC"}
package/package.json CHANGED
@@ -1,6 +1,61 @@
1
1
  {
2
2
  "name": "@nikhil_telkar/codeshield",
3
- "version": "0.0.0-stage",
4
- "stub": true,
5
- "description": "Temporary package placeholder for staged publishing"
6
- }
3
+ "version": "0.1.1",
4
+ "description": "Security scanner for AI-generated codebases.",
5
+ "type": "module",
6
+ "main": "dist/index.js",
7
+ "types": "dist/index.d.ts",
8
+ "exports": {
9
+ ".": {
10
+ "types": "./dist/index.d.ts",
11
+ "import": "./dist/index.js"
12
+ }
13
+ },
14
+ "bin": {
15
+ "codeshield": "dist/cli.js"
16
+ },
17
+ "files": [
18
+ "dist",
19
+ "README.md",
20
+ "LICENSE"
21
+ ],
22
+ "engines": {
23
+ "node": ">=20.12"
24
+ },
25
+ "scripts": {
26
+ "build": "tsc",
27
+ "test": "tsc -p tsconfig.test.json && node --use-bundled-ca --test \"dist-test/tests/**/*.test.js\"",
28
+ "lint": "tsc --noEmit",
29
+ "prepublishOnly": "npm run lint && npm test && npm run build"
30
+ },
31
+ "author": "Nikhil Telkar <nikhiltelkar19@gmail.com>",
32
+ "license": "MIT",
33
+ "repository": {
34
+ "type": "git",
35
+ "url": "https://github.com/nikhiltelkar2005-glitch/codeshield_npm_package.git"
36
+ },
37
+ "bugs": {
38
+ "url": "https://github.com/nikhiltelkar2005-glitch/codeshield_npm_package/issues"
39
+ },
40
+ "homepage": "https://github.com/nikhiltelkar2005-glitch/codeshield_npm_package#readme",
41
+ "keywords": [
42
+ "security",
43
+ "scanner",
44
+ "ai-generated-code",
45
+ "cursor",
46
+ "copilot",
47
+ "llm",
48
+ "sast",
49
+ "secrets",
50
+ "linter",
51
+ "vulnerabilities",
52
+ "zero-dependencies"
53
+ ],
54
+ "devDependencies": {
55
+ "@types/node": "^22.0.0",
56
+ "typescript": "^5.5.0"
57
+ },
58
+ "dependencies": {
59
+ "@nikhil_telkar/codeshield": "^0.1.0"
60
+ }
61
+ }