@quantracode/vibecheck 0.0.1 → 0.0.2

package/dist/scanners/network/missing-timeout.js

@@ -1,93 +0,0 @@
-import { resolvePath } from "../../utils/file-utils.js";
-import { generateFingerprint, generateFindingId } from "../../utils/fingerprint.js";
-const RULE_ID = "VC-NET-004";
-/**
- * VC-NET-004: Missing request timeout on outbound calls
- *
- * Detects axios/fetch usage without explicit timeout:
- * - axios(...) without timeout option
- * - fetch(...) without AbortController / timeout wrapper
- *
- * Precision rule:
- * - Only flag when outbound call is inside a route handler (app/api/**) AND
- * - Call appears to hit non-localhost URL (string literal starting http)
- */
-export async function scanMissingTimeout(context) {
-    const { repoRoot, fileIndex, helpers } = context;
-    const findings = [];
-    // Only scan API route files
-    for (const relPath of fileIndex.apiRouteFiles) {
-        const absPath = resolvePath(repoRoot, relPath);
-        const sourceFile = helpers.parseFile(absPath);
-        if (!sourceFile)
-            continue;
-        const handlers = helpers.findRouteHandlers(sourceFile);
-        for (const handler of handlers) {
-            const outboundCalls = helpers.findOutboundCalls(handler.functionNode);
-            for (const call of outboundCalls) {
-                // Only flag external URLs without timeout
-                if (!call.isExternalUrl || call.hasTimeout)
-                    continue;
-                const evidence = [
-                    {
-                        file: relPath,
-                        startLine: call.line,
-                        endLine: call.line,
-                        snippet: call.snippet,
-                        label: `${call.method} call to external URL without timeout`,
-                    },
-                ];
-                const fingerprint = generateFingerprint({
-                    ruleId: RULE_ID,
-                    file: relPath,
-                    symbol: call.method,
-                    startLine: call.line,
-                });
-                findings.push({
-                    id: generateFindingId({
-                        ruleId: RULE_ID,
-                        file: relPath,
-                        symbol: call.method,
-                        startLine: call.line,
-                    }),
-                    ruleId: RULE_ID,
-                    title: `Missing timeout on ${call.method} call`,
-                    description: `The outbound ${call.method} call to an external URL lacks a timeout configuration. If the external service is slow or unresponsive, this could cause your API handler to hang indefinitely, consuming server resources and potentially causing denial of service.`,
-                    severity: "low",
-                    confidence: 0.75,
-                    category: "network",
-                    evidence,
-                    remediation: {
-                        recommendedFix: `Add a timeout to prevent indefinite hangs. For fetch, use AbortController; for axios, use the timeout option.`,
-                        patch: `// For fetch, use AbortController:
-const controller = new AbortController();
-const timeoutId = setTimeout(() => controller.abort(), 5000);
-
-try {
-  const response = await fetch(url, {
-    signal: controller.signal,
-  });
-  clearTimeout(timeoutId);
-  return response;
-} catch (error) {
-  if (error.name === 'AbortError') {
-    throw new Error('Request timed out');
-  }
-  throw error;
-}
-
-// For axios:
-const response = await axios.get(url, {
-  timeout: 5000,
-});`,
-                    },
-                    links: {
-                        cwe: "https://cwe.mitre.org/data/definitions/400.html",
-                    },
-                    fingerprint,
-                });
-            }
-        }
-    }
-    return findings;
-}

package/dist/scanners/network/open-redirect.d.ts

@@ -1,15 +0,0 @@
-import type { Finding } from "@vibecheck/schema";
-import type { ScanContext } from "../types.js";
-/**
- * VC-NET-002: Open Redirect
- *
- * Detects server-side redirects where user-controlled input determines destination:
- * - NextResponse.redirect(userValue)
- * - res.redirect(userValue)
- * - redirect(userValue) (next/navigation on server)
- *
- * Two-signal requirement:
- * - Must identify user-controlled source AND redirect call uses that value
- */
-export declare function scanOpenRedirect(context: ScanContext): Promise<Finding[]>;
-//# sourceMappingURL=open-redirect.d.ts.map

package/dist/scanners/network/open-redirect.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"open-redirect.d.ts","sourceRoot":"","sources":["../../../src/scanners/network/open-redirect.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAgB,MAAM,mBAAmB,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAM/C;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAiF/E"}

package/dist/scanners/network/open-redirect.js

@@ -1,88 +0,0 @@
-import { resolvePath } from "../../utils/file-utils.js";
-import { generateFingerprint, generateFindingId } from "../../utils/fingerprint.js";
-const RULE_ID = "VC-NET-002";
-/**
- * VC-NET-002: Open Redirect
- *
- * Detects server-side redirects where user-controlled input determines destination:
- * - NextResponse.redirect(userValue)
- * - res.redirect(userValue)
- * - redirect(userValue) (next/navigation on server)
- *
- * Two-signal requirement:
- * - Must identify user-controlled source AND redirect call uses that value
- */
-export async function scanOpenRedirect(context) {
-    const { repoRoot, fileIndex, helpers } = context;
-    const findings = [];
-    // Scan API route files and server components
-    const filesToScan = [...fileIndex.apiRouteFiles, ...fileIndex.routeFiles];
-    for (const relPath of filesToScan) {
-        const absPath = resolvePath(repoRoot, relPath);
-        const sourceFile = helpers.parseFile(absPath);
-        if (!sourceFile)
-            continue;
-        const handlers = helpers.findRouteHandlers(sourceFile);
-        for (const handler of handlers) {
-            const redirectCalls = helpers.findRedirectCalls(handler.functionNode);
-            for (const redirect of redirectCalls) {
-                if (!redirect.isUserControlled)
-                    continue;
-                const evidence = [
-                    {
-                        file: relPath,
-                        startLine: redirect.line,
-                        endLine: redirect.line,
-                        snippet: redirect.snippet,
-                        label: `User-controlled redirect via ${redirect.userControlledSource}`,
-                    },
-                ];
-                const fingerprint = generateFingerprint({
-                    ruleId: RULE_ID,
-                    file: relPath,
-                    symbol: redirect.method,
-                    startLine: redirect.line,
-                });
-                findings.push({
-                    id: generateFindingId({
-                        ruleId: RULE_ID,
-                        file: relPath,
-                        symbol: redirect.method,
-                        startLine: redirect.line,
-                    }),
-                    ruleId: RULE_ID,
-                    title: `Open redirect via ${redirect.method}`,
-                    description: `The ${redirect.method} call uses user-controlled input (${redirect.userControlledSource}) to determine the redirect destination. An attacker could craft a malicious link that redirects users to a phishing site or malicious domain, abusing the trust users place in your domain.`,
-                    severity: "high",
-                    confidence: 0.85,
-                    category: "network",
-                    evidence,
-                    remediation: {
-                        recommendedFix: `Validate the redirect URL against an allowlist of permitted paths or domains. Never redirect to arbitrary user-provided URLs without validation.`,
-                        patch: `// Validate redirect URL before use
-const allowedPaths = ['/dashboard', '/profile', '/settings'];
-const redirectUrl = searchParams.get('next') || '/';
-
-// Option 1: Only allow relative paths
-if (!redirectUrl.startsWith('/') || redirectUrl.startsWith('//')) {
-  return NextResponse.redirect(new URL('/', request.url));
-}
-
-// Option 2: Allowlist check
-if (!allowedPaths.some(path => redirectUrl.startsWith(path))) {
-  return NextResponse.redirect(new URL('/', request.url));
-}
-
-return NextResponse.redirect(new URL(redirectUrl, request.url));`,
-                    },
-                    links: {
-                        cwe: "https://cwe.mitre.org/data/definitions/601.html",
-                        owasp: "https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html",
-                    },
-                    fingerprint,
-                });
-            }
-        }
-    }
-    return findings;
-}

package/dist/scanners/network/ssrf-prone-fetch.d.ts

@@ -1,12 +0,0 @@
-import type { Finding } from "@vibecheck/schema";
-import type { ScanContext } from "../types.js";
-/**
- * VC-NET-001: SSRF-prone fetch
- *
- * Detects fetch/axios calls using direct user-controlled input:
- * - fetch(body.url) / fetch(query.url) / axios.get(body.url)
- *
- * Only flags if the argument is a property named url/uri/link coming from req.json()/req.query
- */
-export declare function scanSsrfProneFetch(context: ScanContext): Promise<Finding[]>;
-//# sourceMappingURL=ssrf-prone-fetch.d.ts.map

package/dist/scanners/network/ssrf-prone-fetch.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ssrf-prone-fetch.d.ts","sourceRoot":"","sources":["../../../src/scanners/network/ssrf-prone-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAgB,MAAM,mBAAmB,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAM/C;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAqFjF"}

package/dist/scanners/network/ssrf-prone-fetch.js

@@ -1,90 +0,0 @@
-import { resolvePath } from "../../utils/file-utils.js";
-import { generateFingerprint, generateFindingId } from "../../utils/fingerprint.js";
-const RULE_ID = "VC-NET-001";
-/**
- * VC-NET-001: SSRF-prone fetch
- *
- * Detects fetch/axios calls using direct user-controlled input:
- * - fetch(body.url) / fetch(query.url) / axios.get(body.url)
- *
- * Only flags if the argument is a property named url/uri/link coming from req.json()/req.query
- */
-export async function scanSsrfProneFetch(context) {
-    const { repoRoot, fileIndex, helpers } = context;
-    const findings = [];
-    // Scan API route files (most likely to have SSRF issues)
-    for (const relPath of fileIndex.apiRouteFiles) {
-        const absPath = resolvePath(repoRoot, relPath);
-        const sourceFile = helpers.parseFile(absPath);
-        if (!sourceFile)
-            continue;
-        const handlers = helpers.findRouteHandlers(sourceFile);
-        for (const handler of handlers) {
-            const ssrfCalls = helpers.findSsrfProneFetch(handler.functionNode);
-            for (const ssrf of ssrfCalls) {
-                const evidence = [
-                    {
-                        file: relPath,
-                        startLine: ssrf.line,
-                        endLine: ssrf.line,
-                        snippet: ssrf.snippet,
-                        label: `User-controlled URL passed to ${ssrf.fetchMethod}`,
-                    },
-                ];
-                const fingerprint = generateFingerprint({
-                    ruleId: RULE_ID,
-                    file: relPath,
-                    symbol: ssrf.fetchMethod,
-                    startLine: ssrf.line,
-                });
-                findings.push({
-                    id: generateFindingId({
-                        ruleId: RULE_ID,
-                        file: relPath,
-                        symbol: ssrf.fetchMethod,
-                        startLine: ssrf.line,
-                    }),
-                    ruleId: RULE_ID,
-                    title: `SSRF-prone ${ssrf.fetchMethod} call`,
-                    description: `The ${ssrf.fetchMethod} call uses user-controlled input (${ssrf.userInputSource}) as the URL. An attacker could manipulate this to make requests to internal services, cloud metadata endpoints, or other sensitive destinations.`,
-                    severity: "high",
-                    confidence: 0.85,
-                    category: "network",
-                    evidence,
-                    remediation: {
-                        recommendedFix: `Validate and sanitize the URL before use. Use an allowlist of permitted domains or URL patterns. Never allow requests to internal networks, localhost, or cloud metadata endpoints.`,
-                        patch: `// Validate URL before fetching
-const url = new URL(userProvidedUrl);
-
-// Check against allowlist
-const allowedHosts = ["api.example.com", "cdn.example.com"];
-if (!allowedHosts.includes(url.hostname)) {
-  throw new Error("URL not allowed");
-}
-
-// Block internal addresses
-const blockedPatterns = [
-  /^localhost$/i,
-  /^127\\.\\d+\\.\\d+\\.\\d+$/,
-  /^10\\.\\d+\\.\\d+\\.\\d+$/,
-  /^172\\.(1[6-9]|2[0-9]|3[0-1])\\.\\d+\\.\\d+$/,
-  /^192\\.168\\.\\d+\\.\\d+$/,
-  /^169\\.254\\.169\\.254$/, // AWS metadata
-];
-if (blockedPatterns.some(p => p.test(url.hostname))) {
-  throw new Error("URL not allowed");
-}
-
-const response = await fetch(url.toString());`,
-                    },
-                    links: {
-                        cwe: "https://cwe.mitre.org/data/definitions/918.html",
-                        owasp: "https://owasp.org/Top10/A10_2021-Server-Side_Request_Forgery_%28SSRF%29/",
-                    },
-                    fingerprint,
-                });
-            }
-        }
-    }
-    return findings;
-}

package/dist/scanners/nextjs-middleware.d.ts

@@ -1,26 +0,0 @@
-import type { Finding } from "@vibecheck/schema";
-import type { ScanContext } from "./types.js";
-/**
- * Parse matcher config from middleware file
- *
- * Looks for patterns like:
- * - export const config = { matcher: '/api/:path*' }
- * - export const config = { matcher: ['/api/:path*', '/admin/:path*'] }
- *
- * Limitations:
- * - Uses regex, may have false positives/negatives
- * - Does not handle dynamic matcher generation
- * - Does not parse complex expressions
- */
-export declare function parseMatcherConfig(content: string): string[] | null;
-/**
- * Check if any matcher pattern covers /api routes
- */
-export declare function matcherCoversApi(matchers: string[]): boolean;
-/**
- * Next.js Middleware Gap Scanner
- *
- * Checks if middleware properly covers API routes
- */
-export declare function scanNextjsMiddleware(context: ScanContext): Promise<Finding[]>;
-//# sourceMappingURL=nextjs-middleware.d.ts.map

package/dist/scanners/nextjs-middleware.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"nextjs-middleware.d.ts","sourceRoot":"","sources":["../../src/scanners/nextjs-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAgB,MAAM,mBAAmB,CAAC;AAS/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAwD9C;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAkCnE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAyB5D;AAkBD;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CA8InF"}

package/dist/scanners/nextjs-middleware.js

@@ -1,246 +0,0 @@
-import { readFileSync, fileExists, resolvePath, readJsonSync, findFiles, } from "../utils/file-utils.js";
-import { generateFingerprint, generateFindingId } from "../utils/fingerprint.js";
-const RULE_MW_001 = "VC-MW-001";
-const RULE_AUTH_INFO_001 = "VC-AUTH-INFO-001";
-/**
- * Check if project has next-auth dependency
- */
-function hasNextAuth(targetDir) {
-    const pkgPath = resolvePath(targetDir, "package.json");
-    const pkg = readJsonSync(pkgPath);
-    if (!pkg)
-        return false;
-    return Boolean(pkg.dependencies?.["next-auth"] || pkg.devDependencies?.["next-auth"]);
-}
-/**
- * Check if project is a Next.js project
- */
-function isNextProject(targetDir) {
-    const pkgPath = resolvePath(targetDir, "package.json");
-    const pkg = readJsonSync(pkgPath);
-    if (!pkg)
-        return false;
-    return Boolean(pkg.dependencies?.["next"] || pkg.devDependencies?.["next"]);
-}
-/**
- * Find middleware file in Next.js project
- * Can be at root or in src directory
- */
-function findMiddlewarePath(targetDir) {
-    const candidates = [
-        "middleware.ts",
-        "middleware.js",
-        "src/middleware.ts",
-        "src/middleware.js",
-    ];
-    for (const candidate of candidates) {
-        const fullPath = resolvePath(targetDir, candidate);
-        if (fileExists(fullPath)) {
-            return candidate;
-        }
-    }
-    return null;
-}
-/**
- * Parse matcher config from middleware file
- *
- * Looks for patterns like:
- * - export const config = { matcher: '/api/:path*' }
- * - export const config = { matcher: ['/api/:path*', '/admin/:path*'] }
- *
- * Limitations:
- * - Uses regex, may have false positives/negatives
- * - Does not handle dynamic matcher generation
- * - Does not parse complex expressions
- */
-export function parseMatcherConfig(content) {
-    // Look for config export with matcher
-    const configMatch = content.match(/export\s+const\s+config\s*=\s*\{[^}]*matcher\s*:\s*([^}]+)\}/s);
-    if (!configMatch) {
-        return null; // No config export found
-    }
-    const matcherPart = configMatch[1];
-    // Check for array matcher: ['/path1', '/path2']
-    const arrayMatch = matcherPart.match(/\[([^\]]+)\]/);
-    if (arrayMatch) {
-        const items = arrayMatch[1];
-        const paths = [];
-        // Extract string literals
-        const stringMatches = items.matchAll(/['"]([^'"]+)['"]/g);
-        for (const m of stringMatches) {
-            paths.push(m[1]);
-        }
-        return paths;
-    }
-    // Check for single string matcher: '/path'
-    const stringMatch = matcherPart.match(/['"]([^'"]+)['"]/);
-    if (stringMatch) {
-        return [stringMatch[1]];
-    }
-    return null;
-}
-/**
- * Check if any matcher pattern covers /api routes
- */
-export function matcherCoversApi(matchers) {
-    for (const matcher of matchers) {
-        // Direct /api match
-        if (matcher === "/api" || matcher === "/api/:path*") {
-            return true;
-        }
-        // Pattern starts with /api
-        if (matcher.startsWith("/api/") || matcher.startsWith("/api:")) {
-            return true;
-        }
-        // Catch-all that would include /api
-        if (matcher === "/:path*" || matcher === "/(.*)" || matcher === "/(.*)") {
-            return true;
-        }
-        // Negation pattern - check if it's excluding something else but including api
-        // e.g., '/((?!_next/static|_next/image|favicon.ico).*)'
-        if (matcher.includes("(?!") && !matcher.includes("api")) {
-            return true;
-        }
-    }
-    return false;
-}
-/**
- * Find API routes in Next.js app directory
- */
-async function findApiRoutes(targetDir) {
-    // Look for API routes in app directory (App Router)
-    const appApiRoutes = await findFiles(["app/**/route.{ts,js}", "src/app/**/route.{ts,js}"], { cwd: targetDir });
-    // Filter to only /api routes
-    return appApiRoutes.filter((r) => r.includes("/api/") || r.includes("\\api\\"));
-}
-/**
- * Next.js Middleware Gap Scanner
- *
- * Checks if middleware properly covers API routes
- */
-export async function scanNextjsMiddleware(context) {
-    const { targetDir } = context;
-    const findings = [];
-    // Only run for Next.js projects
-    if (!isNextProject(targetDir)) {
-        return findings;
-    }
-    // Find API routes
-    const apiRoutes = await findApiRoutes(targetDir);
-    const hasApiRoutes = apiRoutes.length > 0;
-    if (!hasApiRoutes) {
-        return findings; // No API routes to protect
-    }
-    // Check for middleware
-    const middlewarePath = findMiddlewarePath(targetDir);
-    if (!middlewarePath) {
-        // No middleware file exists
-        if (hasNextAuth(targetDir)) {
-            // Has next-auth but no middleware - likely missing protection
-            const evidence = [
-                {
-                    file: "package.json",
-                    startLine: 1,
-                    endLine: 1,
-                    label: "next-auth dependency present",
-                },
-                ...apiRoutes.slice(0, 3).map((route) => ({
-                    file: route,
-                    startLine: 1,
-                    endLine: 1,
-                    label: "API route without middleware protection",
-                })),
-            ];
-            const fingerprint = generateFingerprint({
-                ruleId: RULE_AUTH_INFO_001,
-                file: "middleware.ts",
-                symbol: "missing",
-            });
-            findings.push({
-                id: generateFindingId({
-                    ruleId: RULE_AUTH_INFO_001,
-                    file: "middleware.ts",
-                    symbol: "missing",
-                }),
-                severity: "medium",
-                confidence: 0.7,
-                category: "auth",
-                ruleId: RULE_AUTH_INFO_001,
-                title: "Next.js middleware missing with next-auth dependency",
-                description: `This Next.js project uses next-auth but has no middleware.ts file. API routes (${apiRoutes.length} found) may lack server-side authentication enforcement. While next-auth provides session management, middleware is recommended for edge-level protection.`,
-                evidence,
-                remediation: {
-                    recommendedFix: "Create a middleware.ts file that checks authentication for protected routes. See: https://next-auth.js.org/configuration/nextjs#middleware",
-                },
-                links: {
-                    owasp: "https://owasp.org/Top10/A01_2021-Broken_Access_Control/",
-                },
-                fingerprint,
-            });
-        }
-        return findings;
-    }
-    // Middleware exists - check if it covers API routes
-    const middlewareContent = readFileSync(resolvePath(targetDir, middlewarePath));
-    if (!middlewareContent) {
-        return findings;
-    }
-    const matchers = parseMatcherConfig(middlewareContent);
-    // If no matcher config, middleware applies to all routes (except static)
-    if (matchers === null) {
-        return findings; // Likely covers everything
-    }
-    // Check if matchers cover /api
-    if (!matcherCoversApi(matchers)) {
-        const lines = middlewareContent.split("\n");
-        let configLine = 1;
-        for (let i = 0; i < lines.length; i++) {
-            if (lines[i].includes("config") && lines[i].includes("matcher")) {
-                configLine = i + 1;
-                break;
-            }
-        }
-        const evidence = [
-            {
-                file: middlewarePath,
-                startLine: configLine,
-                endLine: configLine,
-                snippet: `matcher: ${JSON.stringify(matchers)}`,
-                label: "Middleware matcher does not include /api routes",
-            },
-            ...apiRoutes.slice(0, 2).map((route) => ({
-                file: route,
-                startLine: 1,
-                endLine: 1,
-                label: "API route not covered by middleware",
-            })),
-        ];
-        const fingerprint = generateFingerprint({
-            ruleId: RULE_MW_001,
-            file: middlewarePath,
-            symbol: "matcher",
-        });
-        findings.push({
-            id: generateFindingId({
-                ruleId: RULE_MW_001,
-                file: middlewarePath,
-                symbol: "matcher",
-            }),
-            severity: "high",
-            confidence: 0.85,
-            category: "middleware",
-            ruleId: RULE_MW_001,
-            title: "Next.js middleware matcher does not cover API routes",
-            description: `The middleware.ts file has a matcher configuration that does not include /api routes. Found ${apiRoutes.length} API route(s) that are not protected by middleware. Current matcher: ${JSON.stringify(matchers)}`,
-            evidence,
-            remediation: {
-                recommendedFix: `Update the middleware matcher to include API routes. Example: matcher: ['/((?!_next/static|_next/image|favicon.ico).*)', '/api/:path*']`,
-            },
-            links: {
-                owasp: "https://owasp.org/Top10/A01_2021-Broken_Access_Control/",
-            },
-            fingerprint,
-        });
-    }
-    return findings;
-}

package/dist/scanners/privacy/debug-flags.d.ts

@@ -1,13 +0,0 @@
-import type { Finding } from "@vibecheck/schema";
-import type { ScanContext } from "../types.js";
-/**
- * VC-PRIV-003: Debug flags enabled in production-ish config
- *
- * Detect:
- * - next.config.* or server config with `dev: true`, `debug: true`, or logging level "debug"
- *
- * Precision:
- * - Only if NODE_ENV is checked or project appears production-ready
- */
-export declare function scanDebugFlags(context: ScanContext): Promise<Finding[]>;
-//# sourceMappingURL=debug-flags.d.ts.map

package/dist/scanners/privacy/debug-flags.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"debug-flags.d.ts","sourceRoot":"","sources":["../../../src/scanners/privacy/debug-flags.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAgB,MAAM,mBAAmB,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAM/C;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CA0H7E"}