@quantakrypto/core 0.4.0 → 0.4.1

package/dist/codemods/config-toggle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-toggle.d.ts","sourceRoot":"","sources":["../../src/codemods/config-toggle.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C,eAAO,MAAM,mBAAmB,EAAE,OAsBjC,CAAC"}
+{"version":3,"file":"config-toggle.d.ts","sourceRoot":"","sources":["../../src/codemods/config-toggle.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C,eAAO,MAAM,mBAAmB,EAAE,OAqBjC,CAAC"}

package/dist/codemods/config-toggle.js

@@ -4,15 +4,13 @@ export const configToggleCodemod = {
         return finding.ruleId === "tls-legacy-version" || finding.ruleId === "tls-reject-unauthorized";
     },
     apply(content, finding) {
-        let out = content;
-        if (finding.ruleId === "tls-legacy-version") {
-            out = out
-                .replace(/((?:minVersion|maxVersion)\s*:\s*['"`])TLSv1(?:\.1)?(['"`])/g, "$1TLSv1.3$2")
-                .replace(/(secureProtocol\s*:\s*['"`])TLSv1(?:_1)?_method(['"`])/g, "$1TLSv1_3_method$2");
-        }
-        else if (finding.ruleId === "tls-reject-unauthorized") {
-            out = out.replace(/(rejectUnauthorized\s*:\s*)false/g, "$1true");
-        }
+        // Normalize ALL insecure TLS config in one pass (not just this finding's
+        // aspect), so a file with both issues is fully fixed by a single patch — the
+        // pipeline dedupes patches by file, and a partial patch would drop a sibling.
+        const out = content
+            .replace(/((?:minVersion|maxVersion)\s*:\s*['"`])TLSv1(?:\.1)?(['"`])/g, "$1TLSv1.3$2")
+            .replace(/(secureProtocol\s*:\s*['"`])TLSv1(?:_1)?_method(['"`])/g, "$1TLSv1_3_method$2")
+            .replace(/(rejectUnauthorized\s*:\s*)false/g, "$1true");
         if (out === content)
             return null;
         return {

package/dist/codemods/config-toggle.js.map

@@ -1 +1 @@
-{"version":3,"file":"config-toggle.js","sourceRoot":"","sources":["../../src/codemods/config-toggle.ts"],"names":[],"mappings":"AAYA,MAAM,CAAC,MAAM,mBAAmB,GAAY;IAC1C,EAAE,EAAE,eAAe;IACnB,OAAO,CAAC,OAAgB;QACtB,OAAO,OAAO,CAAC,MAAM,KAAK,oBAAoB,IAAI,OAAO,CAAC,MAAM,KAAK,yBAAyB,CAAC;IACjG,CAAC;IACD,KAAK,CAAC,OAAe,EAAE,OAAgB;QACrC,IAAI,GAAG,GAAG,OAAO,CAAC;QAClB,IAAI,OAAO,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;YAC5C,GAAG,GAAG,GAAG;iBACN,OAAO,CAAC,8DAA8D,EAAE,aAAa,CAAC;iBACtF,OAAO,CAAC,yDAAyD,EAAE,oBAAoB,CAAC,CAAC;QAC9F,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;YACxD,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,mCAAmC,EAAE,QAAQ,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,GAAG,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;YAC3B,UAAU,EAAE,GAAG;YACf,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,SAAS;SAClB,CAAC;IACJ,CAAC;CACF,CAAC"}
+{"version":3,"file":"config-toggle.js","sourceRoot":"","sources":["../../src/codemods/config-toggle.ts"],"names":[],"mappings":"AAYA,MAAM,CAAC,MAAM,mBAAmB,GAAY;IAC1C,EAAE,EAAE,eAAe;IACnB,OAAO,CAAC,OAAgB;QACtB,OAAO,OAAO,CAAC,MAAM,KAAK,oBAAoB,IAAI,OAAO,CAAC,MAAM,KAAK,yBAAyB,CAAC;IACjG,CAAC;IACD,KAAK,CAAC,OAAe,EAAE,OAAgB;QACrC,yEAAyE;QACzE,6EAA6E;QAC7E,8EAA8E;QAC9E,MAAM,GAAG,GAAG,OAAO;aAChB,OAAO,CAAC,8DAA8D,EAAE,aAAa,CAAC;aACtF,OAAO,CAAC,yDAAyD,EAAE,oBAAoB,CAAC;aACxF,OAAO,CAAC,mCAAmC,EAAE,QAAQ,CAAC,CAAC;QAC1D,IAAI,GAAG,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;YAC3B,UAAU,EAAE,GAAG;YACf,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,SAAS;SAClB,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/version.d.ts

@@ -3,5 +3,5 @@
  * the scan orchestrator can import it without creating a cycle through index.ts.
  * Keep in sync with packages/core/package.json.
  */
-export declare const VERSION = "0.4.0";
+export declare const VERSION = "0.4.1";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -3,5 +3,5 @@
  * the scan orchestrator can import it without creating a cycle through index.ts.
  * Keep in sync with packages/core/package.json.
  */
-export const VERSION = "0.4.0";
+export const VERSION = "0.4.1";
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantakrypto/core",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "Shared post-quantum readiness library: crypto detectors, vulnerable-dependency database, inventory + SARIF reporting. Zero runtime dependencies.",
   "license": "Apache-2.0",
   "author": "Dandelion Labs <hello@dandelionlabs.io> (https://dandelionlabs.io)",

package/src/codemods/config-toggle.ts

@@ -16,14 +16,13 @@ export const configToggleCodemod: Codemod = {
     return finding.ruleId === "tls-legacy-version" || finding.ruleId === "tls-reject-unauthorized";
   },
   apply(content: string, finding: Finding): Patch | null {
-    let out = content;
-    if (finding.ruleId === "tls-legacy-version") {
-      out = out
-        .replace(/((?:minVersion|maxVersion)\s*:\s*['"`])TLSv1(?:\.1)?(['"`])/g, "$1TLSv1.3$2")
-        .replace(/(secureProtocol\s*:\s*['"`])TLSv1(?:_1)?_method(['"`])/g, "$1TLSv1_3_method$2");
-    } else if (finding.ruleId === "tls-reject-unauthorized") {
-      out = out.replace(/(rejectUnauthorized\s*:\s*)false/g, "$1true");
-    }
+    // Normalize ALL insecure TLS config in one pass (not just this finding's
+    // aspect), so a file with both issues is fully fixed by a single patch — the
+    // pipeline dedupes patches by file, and a partial patch would drop a sibling.
+    const out = content
+      .replace(/((?:minVersion|maxVersion)\s*:\s*['"`])TLSv1(?:\.1)?(['"`])/g, "$1TLSv1.3$2")
+      .replace(/(secureProtocol\s*:\s*['"`])TLSv1(?:_1)?_method(['"`])/g, "$1TLSv1_3_method$2")
+      .replace(/(rejectUnauthorized\s*:\s*)false/g, "$1true");
     if (out === content) return null;
     return {
       path: finding.location.file,

package/src/version.ts

@@ -3,4 +3,4 @@
  * the scan orchestrator can import it without creating a cycle through index.ts.
  * Keep in sync with packages/core/package.json.
  */
-export const VERSION = "0.4.0";
+export const VERSION = "0.4.1";