@orionscanner/cli 0.5.1 → 0.5.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/README.md +137 -137
  2. package/assets/logo_report.png +0 -0
  3. package/bin/orion.js +1 -1
  4. package/dist/orion.exe +0 -0
  5. package/package.json +1 -1
package/README.md CHANGED
@@ -1,138 +1,138 @@
1
- # Orion Security Suite
2
-
3
- <p align="center">
4
- <img src="assets/logo.png" alt="Orion Security Suite" width="460" />
5
- </p>
6
-
7
- <p align="center">
8
- <strong>SEE. ANALYZE. IMPROVE.</strong><br>
9
- <em>The Autonomous, In-House Code Intelligence & Enterprise Security Audit Platform</em>
10
- </p>
11
-
12
- <p align="center">
13
- <a href="https://www.npmjs.com/package/@orionscanner/cli"><img src="https://img.shields.io/badge/npm-v0.5.1-cb3837?logo=npm" alt="npm" /></a>
14
- <img src="https://img.shields.io/badge/version-0.5.1-blue.svg" alt="Version 0.5.1" />
15
- <img src="https://img.shields.io/badge/security-In--House%20Core-emerald.svg" alt="Security" />
16
- <img src="https://img.shields.io/badge/platform-Windows%20%7C%20macOS%20%7C%20Linux-lightgrey.svg" alt="Platform" />
17
- </p>
18
-
19
- ---
20
-
21
- ## Why Choose Orion?
22
-
23
- Modern development teams face fragmented security tools, high false-alarm noise, and code privacy risks from sending proprietary source files to third-party clouds.
24
-
25
- **Orion Security Suite** solves this with a unified, zero-cloud, 100% in-house code audit powerhouse that runs entirely on your local infrastructure.
26
-
27
- ```
28
- ┌────────────────────────────────────────┐
29
- │ ORION SECURITY SUITE │
30
- │ SEE. ANALYZE. IMPROVE. │
31
- └───────────────────┬────────────────────┘
32
- │
33
- ┌────────────────────────────┼────────────────────────────┐
34
- ▼ ▼ ▼
35
- 🛡️ Application Security 🧠 AI & LLM Defense ⚡ Code Quality & Flow
36
- • Deep SAST & Sinks • Prompt Injection Shields • Complexity & O(n²) Guard
37
- • Taint Flow Analysis • Agent Trust Boundaries • Dead Code Elimination
38
- • Secret & Key Leak Hunter • Automated STRIDE Threat • Clean Architecture Graph
39
- ```
40
-
41
- ---
42
-
43
- ## Instant Quick Start
44
-
45
- ### 🚀 Install via NPM (One-Line Global Setup)
46
-
47
- ```bash
48
- npm install -g @orionscanner/cli
49
- ```
50
-
51
- *Or run instantly with `npx` (zero installation required):*
52
- ```bash
53
- npx @orionscanner/cli .
54
- ```
55
-
56
- ---
57
-
58
- ### 🐍 Install via Python
59
-
60
- ```bash
61
- # Clone the repository
62
- git clone https://github.com/chandrahotha/OrionEngine.git
63
- cd OrionEngine
64
-
65
- # Install locally in editable mode
66
- pip install -e .
67
- ```
68
-
69
- ---
70
-
71
- ## ⚡ Supercharged CLI Experience
72
-
73
- Audit your entire codebase in seconds with intuitive commands:
74
-
75
- ```bash
76
- # Complete Workspace Audit (All Security, Quality & Architecture Engines)
77
- orion .
78
-
79
- # Targeted Security & Deep SAST Audit
80
- orion . --security
81
-
82
- # Automated STRIDE Threat Modeling & PII Privacy Inspection
83
- orion . --threat
84
-
85
- # AI Agent Defense & Prompt Injection Testing
86
- orion . --ai
87
-
88
- # Cloud Configuration & Container Security Audit
89
- orion . --iac
90
-
91
- # Code Quality, Complexity & Architecture Sweep
92
- orion . --quality
93
-
94
- # Launch Interactive Terminal Management Console
95
- orion
96
- ```
97
-
98
- ---
99
-
100
- ## 💎 The Orion Advantage
101
-
102
- ### 🔒 100% In-House, Zero-Cloud Privacy
103
- Your proprietary source code never leaves your workstation or CI/CD runner. Every parser, AST visitor, heuristic rule, and taint-flow engine is 100% custom-built and executes locally with zero external subprocess dependencies.
104
-
105
- ### 📊 Beautiful, Executive-Ready Reports
106
- Every scan generates self-contained executive intelligence reports in `ORION SCANNER REPORTS/`:
107
- - **Interactive HTML Dashboard**: Filter findings by category (`Security`, `Code Quality`, `Architecture`, `Supply Chain`) and severity.
108
- - **One-Click PDF Export**: Clean, printable executive summary ready for stakeholders and compliance audits.
109
- - **Machine-Readable JSON**: Complete structured finding metadata with CWE mappings and confidence scores.
110
-
111
- ### 🎯 High-Precision Signal, Zero Fluff
112
- Orion suppresses duplicate/generated-file noise, learns from your `.orion-feedback.json` corrections, and honors inline `# orion:ignore` comments — delivering actionable findings you can trust.
113
-
114
- ### 🤖 Optional AI Verification (Bring Your Own Key)
115
- For an extra layer of confirmation on top of the fully offline static engines, Orion can optionally send its highest-severity findings to an LLM for a second opinion — using **your own API key** for Anthropic, OpenAI, DeepSeek, Grok, or OpenRouter. This is opt-in and disabled by default; without a key and explicit network permission, Orion runs entirely offline as always.
116
-
117
- ---
118
-
119
- ## 🛠️ Multi-Language Codebase Support
120
-
121
- Orion automatically detects and audits your entire multi-language stack:
122
-
123
- - **Languages**: Python, JavaScript, TypeScript, Go, Java, Rust, Ruby, PHP, C/C++, C#, Shell, SQL
124
- - **Cloud & DevOps**: Dockerfile, `docker-compose.yml`, Kubernetes Manifests, Terraform, GitHub Actions
125
- - **Dependency Manifests**: `package.json`, `requirements.txt`, `pyproject.toml`, `go.mod`, `Cargo.toml`, `pom.xml`
126
-
127
- ---
128
-
129
- ## 📦 NPM Package Links
130
-
131
- - **NPM Package**: [`https://www.npmjs.com/package/@orionscanner/cli`](https://www.npmjs.com/package/@orionscanner/cli)
132
- - **GitHub Repository**: [`https://github.com/chandrahotha/OrionEngine`](https://github.com/chandrahotha/OrionEngine)
133
-
134
- ---
135
-
136
- ## License & Intellectual Property
137
-
1
+ # Orion Security Suite
2
+
3
+ <p align="center">
4
+ <img src="assets/logo.png" alt="Orion Security Suite" width="460" />
5
+ </p>
6
+
7
+ <p align="center">
8
+ <strong>SEE. ANALYZE. IMPROVE.</strong><br>
9
+ <em>The Autonomous, In-House Code Intelligence & Enterprise Security Audit Platform</em>
10
+ </p>
11
+
12
+ <p align="center">
13
+ <a href="https://www.npmjs.com/package/@orionscanner/cli"><img src="https://img.shields.io/badge/npm-v0.5.1-cb3837?logo=npm" alt="npm" /></a>
14
+ <img src="https://img.shields.io/badge/version-0.5.1-blue.svg" alt="Version 0.5.1" />
15
+ <img src="https://img.shields.io/badge/security-In--House%20Core-emerald.svg" alt="Security" />
16
+ <img src="https://img.shields.io/badge/platform-Windows%20%7C%20macOS%20%7C%20Linux-lightgrey.svg" alt="Platform" />
17
+ </p>
18
+
19
+ ---
20
+
21
+ ## Why Choose Orion?
22
+
23
+ Modern development teams face fragmented security tools, high false-alarm noise, and code privacy risks from sending proprietary source files to third-party clouds.
24
+
25
+ **Orion Security Suite** solves this with a unified, zero-cloud, 100% in-house code audit powerhouse that runs entirely on your local infrastructure.
26
+
27
+ ```
28
+ ┌────────────────────────────────────────┐
29
+ │ ORION SECURITY SUITE │
30
+ │ SEE. ANALYZE. IMPROVE. │
31
+ └───────────────────┬────────────────────┘
32
+ │
33
+ ┌────────────────────────────┼────────────────────────────┐
34
+ ▼ ▼ ▼
35
+ 🛡️ Application Security 🧠 AI & LLM Defense ⚡ Code Quality & Flow
36
+ • Deep SAST & Sinks • Prompt Injection Shields • Complexity & O(n²) Guard
37
+ • Taint Flow Analysis • Agent Trust Boundaries • Dead Code Elimination
38
+ • Secret & Key Leak Hunter • Automated STRIDE Threat • Clean Architecture Graph
39
+ ```
40
+
41
+ ---
42
+
43
+ ## Instant Quick Start
44
+
45
+ ### 🚀 Install via NPM (One-Line Global Setup)
46
+
47
+ ```bash
48
+ npm install -g @orionscanner/cli
49
+ ```
50
+
51
+ *Or run instantly with `npx` (zero installation required):*
52
+ ```bash
53
+ npx @orionscanner/cli .
54
+ ```
55
+
56
+ ---
57
+
58
+ ### 🐍 Install via Python
59
+
60
+ ```bash
61
+ # Clone the repository
62
+ git clone https://github.com/chandrahotha/OrionEngine.git
63
+ cd OrionEngine
64
+
65
+ # Install locally in editable mode
66
+ pip install -e .
67
+ ```
68
+
69
+ ---
70
+
71
+ ## ⚡ Supercharged CLI Experience
72
+
73
+ Audit your entire codebase in seconds with intuitive commands:
74
+
75
+ ```bash
76
+ # Complete Workspace Audit (All Security, Quality & Architecture Engines)
77
+ orion .
78
+
79
+ # Targeted Security & Deep SAST Audit
80
+ orion . --security
81
+
82
+ # Automated STRIDE Threat Modeling & PII Privacy Inspection
83
+ orion . --threat
84
+
85
+ # AI Agent Defense & Prompt Injection Testing
86
+ orion . --ai
87
+
88
+ # Cloud Configuration & Container Security Audit
89
+ orion . --iac
90
+
91
+ # Code Quality, Complexity & Architecture Sweep
92
+ orion . --quality
93
+
94
+ # Launch Interactive Terminal Management Console
95
+ orion
96
+ ```
97
+
98
+ ---
99
+
100
+ ## 💎 The Orion Advantage
101
+
102
+ ### 🔒 100% In-House, Zero-Cloud Privacy
103
+ Your proprietary source code never leaves your workstation or CI/CD runner. Every parser, AST visitor, heuristic rule, and taint-flow engine is 100% custom-built and executes locally with zero external subprocess dependencies.
104
+
105
+ ### 📊 Beautiful, Executive-Ready Reports
106
+ Every scan generates self-contained executive intelligence reports in `ORION SCANNER REPORTS/`:
107
+ - **Interactive HTML Dashboard**: Filter findings by category (`Security`, `Code Quality`, `Architecture`, `Supply Chain`) and severity.
108
+ - **One-Click PDF Export**: Clean, printable executive summary ready for stakeholders and compliance audits.
109
+ - **Machine-Readable JSON**: Complete structured finding metadata with CWE mappings and confidence scores.
110
+
111
+ ### 🎯 High-Precision Signal, Zero Fluff
112
+ Orion suppresses duplicate/generated-file noise, learns from your `.orion-feedback.json` corrections, and honors inline `# orion:ignore` comments — delivering actionable findings you can trust.
113
+
114
+ ### 🤖 Optional AI Verification (Bring Your Own Key)
115
+ For an extra layer of confirmation on top of the fully offline static engines, Orion can optionally send its highest-severity findings to an LLM for a second opinion — using **your own API key** for Anthropic, OpenAI, DeepSeek, Grok, OpenRouter, or NVIDIA. This is opt-in and disabled by default; without a key and explicit network permission, Orion runs entirely offline as always.
116
+
117
+ ---
118
+
119
+ ## 🛠️ Multi-Language Codebase Support
120
+
121
+ Orion automatically detects and audits your entire multi-language stack:
122
+
123
+ - **Languages**: Python, JavaScript, TypeScript, Go, Java, Rust, Ruby, PHP, C/C++, C#, Shell, SQL
124
+ - **Cloud & DevOps**: Dockerfile, `docker-compose.yml`, Kubernetes Manifests, Terraform, GitHub Actions
125
+ - **Dependency Manifests**: `package.json`, `requirements.txt`, `pyproject.toml`, `go.mod`, `Cargo.toml`, `pom.xml`
126
+
127
+ ---
128
+
129
+ ## 📦 NPM Package Links
130
+
131
+ - **NPM Package**: [`https://www.npmjs.com/package/@orionscanner/cli`](https://www.npmjs.com/package/@orionscanner/cli)
132
+ - **GitHub Repository**: [`https://github.com/chandrahotha/OrionEngine`](https://github.com/chandrahotha/OrionEngine)
133
+
134
+ ---
135
+
136
+ ## License & Intellectual Property
137
+
138
138
  Orion Security Suite is a proprietary, in-house developed codebase intelligence platform. All engines, algorithms, and AST analyzers are original intellectual property built for high-performance security auditing.
package/assets/logo_report.png ADDED
Binary file
package/bin/orion.js CHANGED
@@ -1,6 +1,6 @@
1
1
  #!/usr/bin/env node
2
2
  /**
3
- * Orion Security Suite - Protected Standalone Binary Wrapper (v0.5.1)
3
+ * Orion Security Suite - Protected Standalone Binary Wrapper (v0.5.2)
4
4
  * 100% In-House Code Intelligence & SAST Platform
5
5
  * (Zero Python Source Code Distributed)
6
6
  */
package/dist/orion.exe CHANGED
Binary file
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@orionscanner/cli",
3
- "version": "0.5.1",
3
+ "version": "0.5.2",
4
4
  "description": "Orion Security Suite - Proprietary In-House Code Intelligence, SAST & Architecture Auditing Platform",
5
5
  "main": "bin/orion.js",
6
6
  "bin": {