@vibgrate/cli 1.0.26 → 1.0.27

package/dist/cli.js

@@ -4,7 +4,7 @@ import {
 } from "./chunk-GN3IWKSY.js";
 import {
   baselineCommand
-} from "./chunk-7EEUYKZI.js";
+} from "./chunk-K4ZGFGP2.js";
 import {
   VERSION,
   dsnCommand,
@@ -15,7 +15,7 @@ import {
   readJsonFile,
   scanCommand,
   writeDefaultConfig
-} from "./chunk-27LB7QTA.js";
+} from "./chunk-PROF25OR.js";
 
 // src/cli.ts
 import { Command as Command4 } from "commander";
@@ -38,7 +38,7 @@ var initCommand = new Command("init").description("Initialize vibgrate in a proj
     console.log(chalk.green("\u2714") + ` Created ${chalk.bold("vibgrate.config.ts")}`);
   }
   if (opts.baseline) {
-    const { runBaseline } = await import("./baseline-KXUPTMQ2.js");
+    const { runBaseline } = await import("./baseline-B5K5M2XJ.js");
     await runBaseline(rootDir);
   }
   console.log("");

package/dist/index.d.ts

@@ -107,6 +107,10 @@ interface ScanOptions {
 interface ScannerToggle {
     enabled: boolean;
 }
+type OwaspScannerMode = 'fast' | 'cache-input';
+interface OwaspScannerConfig extends ScannerToggle {
+    mode?: OwaspScannerMode;
+}
 interface ScannersConfig {
     platformMatrix?: ScannerToggle;
     dependencyRisk?: ScannerToggle;
@@ -117,8 +121,11 @@ interface ScannersConfig {
     breakingChangeExposure?: ScannerToggle;
     fileHotspots?: ScannerToggle;
     securityPosture?: ScannerToggle;
+    securityScanners?: ScannerToggle;
     serviceDependencies?: ScannerToggle;
     architecture?: ScannerToggle;
+    codeQuality?: ScannerToggle;
+    owaspCategoryMapping?: OwaspScannerConfig;
 }
 interface VibgrateConfig {
     include?: string[];
@@ -258,6 +265,32 @@ interface ServiceDependenciesResult {
     storage: ServiceDependencyItem[];
     search: ServiceDependencyItem[];
 }
+type SecurityScannerStatus = 'up-to-date' | 'review-needed' | 'unknown' | 'unavailable';
+interface SecurityToolAssessment {
+    name: 'semgrep' | 'gitleaks' | 'trufflehog';
+    category: 'sast' | 'secrets';
+    command: string;
+    available: boolean;
+    version: string | null;
+    minRecommendedVersion: string;
+    status: SecurityScannerStatus;
+    risks: string[];
+}
+interface SecretHeuristicFinding {
+    file: string;
+    detector: string;
+    sample: string;
+}
+interface SecurityScannersResult {
+    semgrep: SecurityToolAssessment;
+    secretScanners: SecurityToolAssessment[];
+    configFiles: {
+        semgrep: boolean;
+        gitleaks: boolean;
+        trufflehog: boolean;
+    };
+    heuristicFindings: SecretHeuristicFinding[];
+}
 /** Detected project archetype (fingerprint) */
 type ProjectArchetype = 'nextjs' | 'remix' | 'sveltekit' | 'nuxt' | 'nestjs' | 'express' | 'fastify' | 'hono' | 'koa' | 'serverless' | 'library' | 'cli' | 'monorepo' | 'unknown';
 /** Architectural layer classification */
@@ -300,6 +333,22 @@ interface ArchitectureResult {
     /** Files that could not be classified */
     unclassified: number;
 }
+interface GodFile {
+    path: string;
+    lines: number;
+    functionCount: number;
+    averageComplexity: number;
+}
+interface CodeQualityResult {
+    filesAnalyzed: number;
+    functionsAnalyzed: number;
+    avgCyclomaticComplexity: number;
+    avgFunctionLength: number;
+    maxNestingDepth: number;
+    godFiles: GodFile[];
+    circularDependencies: number;
+    deadCodePercent: number;
+}
 interface ExtendedScanResults {
     platformMatrix?: PlatformMatrixResult;
     dependencyRisk?: DependencyRiskResult;
@@ -310,8 +359,30 @@ interface ExtendedScanResults {
     breakingChangeExposure?: BreakingChangeExposureResult;
     fileHotspots?: FileHotspotsResult;
     securityPosture?: SecurityPostureResult;
+    securityScanners?: SecurityScannersResult;
     serviceDependencies?: ServiceDependenciesResult;
     architecture?: ArchitectureResult;
+    codeQuality?: CodeQualityResult;
+    owaspCategoryMapping?: OwaspCategoryMappingResult;
+}
+interface OwaspFinding {
+    ruleId: string;
+    path: string;
+    line: number;
+    endLine?: number;
+    message: string;
+    severity: 'low' | 'medium' | 'high';
+    categories: string[];
+    cwe: string | null;
+}
+interface OwaspCategoryMappingResult {
+    scanner: 'semgrep';
+    available: boolean;
+    mode: OwaspScannerMode;
+    scannedFiles: number;
+    findings: OwaspFinding[];
+    categoryCounts: Record<string, number>;
+    errors: string[];
 }
 
 declare function runScan(rootDir: string, opts: ScanOptions): Promise<ScanArtifact>;

package/dist/index.js

@@ -7,7 +7,7 @@ import {
   formatText,
   generateFindings,
   runScan
-} from "./chunk-27LB7QTA.js";
+} from "./chunk-PROF25OR.js";
 export {
   computeDriftScore,
   formatMarkdown,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibgrate/cli",
-  "version": "1.0.26",
+  "version": "1.0.27",
   "description": "CLI for measuring upgrade drift across Node & .NET projects",
   "type": "module",
   "bin": {