@slashgear/gdpr-cookie-scanner 3.8.1 → 3.8.2

package/tests/e2e/scanner.test.ts

@@ -1,14 +1,12 @@
-import { describe, it, expect, beforeAll, afterAll } from "vitest";
+import { describe, it, expect, beforeAll, afterAll } from "bun:test";
 import { mkdtemp, rm } from "fs/promises";
 import { tmpdir } from "os";
 import { join } from "path";
+import type { ScanResult } from "../../src/types.js";
 import { Scanner } from "../../src/scanner/index.js";
 import { startTestServer, type TestServer } from "../helpers/test-server.js";
 
-// E2E tests spin up real Playwright browsers — allow generous timeouts
-const E2E_TIMEOUT = 60_000;
-
-describe("Scanner E2E", { timeout: E2E_TIMEOUT }, () => {
+describe("Scanner E2E", () => {
   let server: TestServer;
   let outputDir: string;
 
@@ -34,98 +32,88 @@ describe("Scanner E2E", { timeout: E2E_TIMEOUT }, () => {
   }
 
   describe("compliant-site.html", () => {
-    it("detects the consent modal", async () => {
-      const scanner = new Scanner(makeOptions("compliant-site.html"));
-      const result = await scanner.run();
+    let result: ScanResult;
+
+    beforeAll(async () => {
+      result = await new Scanner(makeOptions("compliant-site.html")).run();
+    });
+
+    it("detects the consent modal", () => {
       expect(result.modal.detected).toBe(true);
     });
 
-    it("finds both accept and reject buttons", async () => {
-      const scanner = new Scanner(makeOptions("compliant-site.html"));
-      const result = await scanner.run();
+    it("finds both accept and reject buttons", () => {
       const types = result.modal.buttons.map((b) => b.type);
       expect(types).toContain("accept");
       expect(types).toContain("reject");
     });
 
-    it("finds the privacy policy link in the modal", async () => {
-      const scanner = new Scanner(makeOptions("compliant-site.html"));
-      const result = await scanner.run();
+    it("finds the privacy policy link in the modal", () => {
       expect(result.modal.privacyPolicyUrl).toBeTruthy();
     });
 
-    it("finds a privacy policy link on the page", async () => {
-      const scanner = new Scanner(makeOptions("compliant-site.html"));
-      const result = await scanner.run();
+    it("finds a privacy policy link on the page", () => {
       expect(result.privacyPolicyUrl).toBeTruthy();
     });
 
-    it("assigns a passing compliance grade (A or B)", async () => {
-      const scanner = new Scanner(makeOptions("compliant-site.html"));
-      const result = await scanner.run();
+    it("assigns a passing compliance grade (A or B)", () => {
       expect(["A", "B"]).toContain(result.compliance.grade);
     });
 
-    it("does not flag pre-consent cookies", async () => {
-      const scanner = new Scanner(makeOptions("compliant-site.html"));
-      const result = await scanner.run();
+    it("does not flag pre-consent cookies", () => {
       const illegalPreConsent = result.cookiesBeforeInteraction.filter((c) => c.requiresConsent);
       expect(illegalPreConsent).toHaveLength(0);
     });
   });
 
   describe("non-compliant-site.html", () => {
-    it("detects the consent modal", async () => {
-      const scanner = new Scanner(makeOptions("non-compliant-site.html"));
-      const result = await scanner.run();
+    let result: ScanResult;
+
+    beforeAll(async () => {
+      result = await new Scanner(makeOptions("non-compliant-site.html")).run();
+    });
+
+    it("detects the consent modal", () => {
       expect(result.modal.detected).toBe(true);
     });
 
-    it("detects _ga cookie set before any interaction", async () => {
-      const scanner = new Scanner(makeOptions("non-compliant-site.html"));
-      const result = await scanner.run();
+    it("detects _ga cookie set before any interaction", () => {
       const gaBeforeInteraction = result.cookiesBeforeInteraction.some(
         (c) => c.name === "_ga" && c.requiresConsent,
       );
       expect(gaBeforeInteraction).toBe(true);
     });
 
-    it("raises an auto-consent issue for pre-interaction cookies", async () => {
-      const scanner = new Scanner(makeOptions("non-compliant-site.html"));
-      const result = await scanner.run();
+    it("raises an auto-consent issue for pre-interaction cookies", () => {
       const issue = result.compliance.issues.find((i) => i.type === "auto-consent");
       expect(issue).toBeDefined();
     });
 
-    it("assigns a failing grade (C, D, or F)", async () => {
-      const scanner = new Scanner(makeOptions("non-compliant-site.html"));
-      const result = await scanner.run();
+    it("assigns a failing grade (C, D, or F)", () => {
       expect(["C", "D", "F"]).toContain(result.compliance.grade);
     });
   });
 
   describe("no-modal-site.html", () => {
-    it("reports modal as not detected", async () => {
-      const scanner = new Scanner(makeOptions("no-modal-site.html"));
-      const result = await scanner.run();
+    let result: ScanResult;
+
+    beforeAll(async () => {
+      result = await new Scanner(makeOptions("no-modal-site.html")).run();
+    });
+
+    it("reports modal as not detected", () => {
       expect(result.modal.detected).toBe(false);
     });
 
-    it("still finds the page-level privacy policy link", async () => {
-      const scanner = new Scanner(makeOptions("no-modal-site.html"));
-      const result = await scanner.run();
+    it("still finds the page-level privacy policy link", () => {
       expect(result.privacyPolicyUrl).toBeTruthy();
     });
 
-    it("assigns grade A — no consent mechanism needed for a tracking-free site", async () => {
-      const scanner = new Scanner(makeOptions("no-modal-site.html"));
-      const result = await scanner.run();
+    it("assigns grade A — no consent mechanism needed for a tracking-free site", () => {
       expect(result.compliance.grade).toBe("A");
     });
 
-    it("raises no compliance issues for a tracking-free site without a modal", async () => {
-      const scanner = new Scanner(makeOptions("no-modal-site.html"));
-      const result = await scanner.run();
+    it("raises no compliance issues for a tracking-free site without a modal", () => {
       expect(result.compliance.issues).toHaveLength(0);
     });
   });

package/tests/scanner/button-classification.test.ts

@@ -1,4 +1,4 @@
-import { describe, it, expect } from "vitest";
+import { describe, it, expect } from "bun:test";
 import { classifyButtonText } from "../../src/scanner/consent-modal.js";
 
 // ── English ───────────────────────────────────────────────────────────────────

package/tests/scanner/contrast-ratio.test.ts

@@ -1,4 +1,4 @@
-import { describe, it, expect } from "vitest";
+import { describe, it, expect } from "bun:test";
 import {
   computeContrastRatio,
   parseRgb,

package/tests/unit/compliance.test.ts

@@ -1,4 +1,4 @@
-import { describe, it, expect } from "vitest";
+import { describe, it, expect } from "bun:test";
 import { analyzeCompliance } from "../../src/analyzers/compliance.js";
 import type {
   ConsentModal,

package/tests/unit/cookie-classifier.test.ts

@@ -1,4 +1,4 @@
-import { describe, it, expect } from "vitest";
+import { describe, it, expect } from "bun:test";
 import { classifyCookie } from "../../src/classifiers/cookie-classifier.js";
 
 describe("classifyCookie", () => {

package/tests/unit/network-classifier.test.ts

@@ -1,4 +1,4 @@
-import { describe, it, expect } from "vitest";
+import { describe, it, expect } from "bun:test";
 import { classifyNetworkRequest } from "../../src/classifiers/network-classifier.js";
 
 describe("classifyNetworkRequest", () => {

package/tests/unit/wording.test.ts

@@ -1,4 +1,4 @@
-import { describe, it, expect } from "vitest";
+import { describe, it, expect } from "bun:test";
 import { analyzeButtonWording, analyzeModalText } from "../../src/analyzers/wording.js";
 import type { ConsentButton } from "../../src/types.js";
 

package/pnpm-workspace.yaml

@@ -1,3 +0,0 @@
-packages:
-  - "."
-  - website

package/vitest.config.ts

@@ -1,9 +0,0 @@
-import { defineConfig } from "vitest/config";
-
-export default defineConfig({
-  test: {
-    environment: "node",
-    include: ["tests/**/*.test.ts"],
-    globals: false,
-  },
-});

package/website/Dockerfile

@@ -1,55 +0,0 @@
-# Build context: repo root (docker build -f website/Dockerfile .)
-
-# ── Stage 1: build ────────────────────────────────────────────────────────────
-FROM node:24-slim AS builder
-WORKDIR /app
-
-# Install compression tools (brotli, zstd, zopfli)
-RUN apt-get update && apt-get install -y --no-install-recommends brotli zstd zopfli \
-    && rm -rf /var/lib/apt/lists/*
-
-RUN npm install -g pnpm@latest
-
-# Copy workspace manifests for layer caching
-COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
-COPY website/package.json ./website/
-
-# Install website deps only (no playwright, no CLI deps)
-RUN pnpm install --frozen-lockfile --filter @slashgear/gdpr-website
-
-# Copy source and compile
-COPY website/tsconfig.json ./website/
-COPY website/src ./website/src
-RUN pnpm --filter @slashgear/gdpr-website build
-
-# Copy static assets and precompress them
-COPY website/public ./website/public
-RUN find /app/website/public -type f \( -name "*.html" -o -name "*.css" -o -name "*.js" -o -name "*.json" -o -name "*.svg" \) | \
-    while read f; do \
-      brotli --best -k "$f"; \
-      zstd --ultra -22 -k "$f"; \
-      zopfli --gzip "$f"; \
-    done
-
-# ── Stage 2: runtime ──────────────────────────────────────────────────────────
-FROM node:24-slim
-WORKDIR /app
-ENV NODE_ENV=production
-
-RUN npm install -g pnpm@latest
-
-COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
-COPY website/package.json ./website/
-RUN pnpm install --prod --frozen-lockfile --filter @slashgear/gdpr-website
-
-# Static assets with precompressed variants (.br, .zst, .gz)
-COPY --from=builder /app/website/public ./website/public
-
-# Compiled server
-COPY --from=builder /app/website/dist ./website/dist
-
-WORKDIR /app/website
-ENV PORT=8080
-EXPOSE 8080
-
-CMD ["node", "dist/index.js"]

package/website/node_modules/.bin/oxfmt

@@ -1,21 +0,0 @@
-#!/bin/sh
-basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
-
-case `uname` in
-    *CYGWIN*|*MINGW*|*MSYS*)
-        if command -v cygpath > /dev/null 2>&1; then
-            basedir=`cygpath -w "$basedir"`
-        fi
-    ;;
-esac
-
-if [ -z "$NODE_PATH" ]; then
-  export NODE_PATH="/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/oxfmt@0.34.0/node_modules/oxfmt/node_modules:/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/oxfmt@0.34.0/node_modules:/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/node_modules"
-else
-  export NODE_PATH="/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/oxfmt@0.34.0/node_modules/oxfmt/node_modules:/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/oxfmt@0.34.0/node_modules:/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/node_modules:$NODE_PATH"
-fi
-if [ -x "$basedir/node" ]; then
-  exec "$basedir/node"  "$basedir/../oxfmt/bin/oxfmt" "$@"
-else
-  exec node  "$basedir/../oxfmt/bin/oxfmt" "$@"
-fi

package/website/node_modules/.bin/oxlint

@@ -1,21 +0,0 @@
-#!/bin/sh
-basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
-
-case `uname` in
-    *CYGWIN*|*MINGW*|*MSYS*)
-        if command -v cygpath > /dev/null 2>&1; then
-            basedir=`cygpath -w "$basedir"`
-        fi
-    ;;
-esac
-
-if [ -z "$NODE_PATH" ]; then
-  export NODE_PATH="/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/oxlint@1.49.0/node_modules/oxlint/node_modules:/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/oxlint@1.49.0/node_modules:/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/node_modules"
-else
-  export NODE_PATH="/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/oxlint@1.49.0/node_modules/oxlint/node_modules:/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/oxlint@1.49.0/node_modules:/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/node_modules:$NODE_PATH"
-fi
-if [ -x "$basedir/node" ]; then
-  exec "$basedir/node"  "$basedir/../oxlint/bin/oxlint" "$@"
-else
-  exec node  "$basedir/../oxlint/bin/oxlint" "$@"
-fi

package/website/node_modules/.bin/tsc

@@ -1,21 +0,0 @@
-#!/bin/sh
-basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
-
-case `uname` in
-    *CYGWIN*|*MINGW*|*MSYS*)
-        if command -v cygpath > /dev/null 2>&1; then
-            basedir=`cygpath -w "$basedir"`
-        fi
-    ;;
-esac
-
-if [ -z "$NODE_PATH" ]; then
-  export NODE_PATH="/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/node_modules:/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/typescript@5.9.3/node_modules:/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/node_modules"
-else
-  export NODE_PATH="/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/node_modules:/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/typescript@5.9.3/node_modules:/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/node_modules:$NODE_PATH"
-fi
-if [ -x "$basedir/node" ]; then
-  exec "$basedir/node"  "$basedir/../typescript/bin/tsc" "$@"
-else
-  exec node  "$basedir/../typescript/bin/tsc" "$@"
-fi

package/website/node_modules/.bin/tsserver

@@ -1,21 +0,0 @@
-#!/bin/sh
-basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
-
-case `uname` in
-    *CYGWIN*|*MINGW*|*MSYS*)
-        if command -v cygpath > /dev/null 2>&1; then
-            basedir=`cygpath -w "$basedir"`
-        fi
-    ;;
-esac
-
-if [ -z "$NODE_PATH" ]; then
-  export NODE_PATH="/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/node_modules:/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/typescript@5.9.3/node_modules:/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/node_modules"
-else
-  export NODE_PATH="/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/node_modules:/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/typescript@5.9.3/node_modules:/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/node_modules:$NODE_PATH"
-fi
-if [ -x "$basedir/node" ]; then
-  exec "$basedir/node"  "$basedir/../typescript/bin/tsserver" "$@"
-else
-  exec node  "$basedir/../typescript/bin/tsserver" "$@"
-fi

package/website/node_modules/.bin/tsx

@@ -1,21 +0,0 @@
-#!/bin/sh
-basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
-
-case `uname` in
-    *CYGWIN*|*MINGW*|*MSYS*)
-        if command -v cygpath > /dev/null 2>&1; then
-            basedir=`cygpath -w "$basedir"`
-        fi
-    ;;
-esac
-
-if [ -z "$NODE_PATH" ]; then
-  export NODE_PATH="/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/tsx@4.21.0/node_modules/tsx/node_modules:/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/tsx@4.21.0/node_modules:/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/node_modules"
-else
-  export NODE_PATH="/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/tsx@4.21.0/node_modules/tsx/node_modules:/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/tsx@4.21.0/node_modules:/home/runner/work/gdpr-cookie-scanner/gdpr-cookie-scanner/node_modules/.pnpm/node_modules:$NODE_PATH"
-fi
-if [ -x "$basedir/node" ]; then
-  exec "$basedir/node"  "$basedir/../tsx/dist/cli.mjs" "$@"
-else
-  exec node  "$basedir/../tsx/dist/cli.mjs" "$@"
-fi

package/website/package.json

@@ -1,29 +0,0 @@
-{
-  "name": "@slashgear/gdpr-website",
-  "version": "0.1.0",
-  "private": true,
-  "description": "Web interface for gdpr-cookie-scanner",
-  "type": "module",
-  "scripts": {
-    "build": "tsc",
-    "dev": "tsx src/index.ts",
-    "start": "node dist/index.js",
-    "typecheck": "tsc --noEmit",
-    "lint": "oxlint .",
-    "format": "oxfmt ."
-  },
-  "dependencies": {
-    "@hono/node-server": "^1.14.0",
-    "hono": "^4.7.0"
-  },
-  "devDependencies": {
-    "@types/node": "^22.0.0",
-    "oxfmt": "^0.34.0",
-    "oxlint": "^1.48.0",
-    "tsx": "^4.19.0",
-    "typescript": "^5.5.0"
-  },
-  "engines": {
-    "node": ">=24.0.0"
-  }
-}

package/website/src/index.ts

@@ -1,15 +0,0 @@
-import { serve } from "@hono/node-server";
-import { serveStatic } from "@hono/node-server/serve-static";
-import { Hono } from "hono";
-import { securityHeaders } from "./security.js";
-
-const app = new Hono();
-
-app.use("/*", securityHeaders);
-app.use("/*", serveStatic({ root: "./public", precompressed: true }));
-
-const port = Number(process.env.PORT) || 8080;
-
-serve({ fetch: app.fetch, port }, (info) => {
-  console.log(`Server running on http://localhost:${info.port}`);
-});

package/website/src/security.ts

@@ -1,26 +0,0 @@
-import type { MiddlewareHandler } from "hono";
-
-const CSP = [
-  "default-src 'self'",
-  "script-src 'self'",
-  "style-src 'self' 'unsafe-inline'",
-  "img-src 'self' data: https:",
-  "font-src 'self'",
-  "connect-src 'self'",
-  "frame-ancestors 'none'",
-  "base-uri 'self'",
-  "form-action 'self'",
-  "upgrade-insecure-requests",
-].join("; ");
-
-export const securityHeaders: MiddlewareHandler = async (c, next) => {
-  await next();
-  c.header("X-Frame-Options", "DENY");
-  c.header("X-Content-Type-Options", "nosniff");
-  c.header("X-XSS-Protection", "1; mode=block");
-  c.header("Referrer-Policy", "strict-origin-when-cross-origin");
-  c.header("Permissions-Policy", "geolocation=(), microphone=(), camera=()");
-  if (process.env.NODE_ENV === "production") {
-    c.header("Content-Security-Policy", CSP);
-  }
-};

package/website/tsconfig.json

@@ -1,14 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "ES2022",
-    "module": "NodeNext",
-    "moduleResolution": "NodeNext",
-    "outDir": "dist",
-    "rootDir": "src",
-    "strict": true,
-    "esModuleInterop": true,
-    "skipLibCheck": true
-  },
-  "include": ["src/**/*"],
-  "exclude": ["node_modules", "dist"]
-}