@voidagency/web-scanner 0.0.1

package/dist/coverage.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Test Coverage Tracker
+ * Tracks which test categories were run and their results
+ */
+import { Finding } from './types.js';
+import { CategoryResult } from './categories.js';
+/**
+ * Coverage summary for reporting
+ */
+export interface CoverageSummary {
+    totalCategories: number;
+    testedCategories: number;
+    categoriesWithFindings: number;
+    results: CategoryResult[];
+}
+/**
+ * Calculate test coverage from findings
+ * Each finding is counted in only ONE category (its best/first match)
+ * to avoid double-counting
+ */
+export declare function calculateCoverage(findings: Finding[]): CoverageSummary;
+/**
+ * Mark categories as tested based on scan profile
+ * In deep/standard profiles, we run more templates so more categories are "tested"
+ */
+export declare function markTestedCategories(coverage: CoverageSummary, profile: 'quick' | 'standard' | 'deep', ranTemplates: string[]): CoverageSummary;
+/**
+ * Format coverage for CLI output
+ */
+export declare function formatCoverageForCli(coverage: CoverageSummary): string;
+/**
+ * Get coverage data for HTML report
+ */
+export declare function getCoverageForReport(coverage: CoverageSummary): Array<{
+    name: string;
+    description: string;
+    tested: boolean;
+    status: 'pass' | 'fail' | 'info' | 'untested';
+    count: number;
+}>;
+/**
+ * Get passed security checks for the report footer
+ * Shows all tested categories with 0 findings
+ */
+export declare function getPassedChecksForReport(coverage: CoverageSummary): Array<{
+    name: string;
+    description: string;
+}>;
+//# sourceMappingURL=coverage.d.ts.map

package/dist/coverage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage.d.ts","sourceRoot":"","sources":["../src/coverage.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAGL,cAAc,EAGf,MAAM,iBAAiB,CAAC;AAEzB;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,eAAe,CAgEtE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,OAAO,GAAG,UAAU,GAAG,MAAM,EACtC,YAAY,EAAE,MAAM,EAAE,GACrB,eAAe,CAoDjB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM,CAwBtE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,eAAe,GAAG,KAAK,CAAC;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;IAC9C,KAAK,EAAE,MAAM,CAAC;CACf,CAAC,CAcD;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,eAAe,GAAG,KAAK,CAAC;IACzE,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAQD"}

package/dist/coverage.js

@@ -0,0 +1,165 @@
+/**
+ * Test Coverage Tracker
+ * Tracks which test categories were run and their results
+ */
+import { TEST_CATEGORIES, matchCategories } from './categories.js';
+/**
+ * Calculate test coverage from findings
+ * Each finding is counted in only ONE category (its best/first match)
+ * to avoid double-counting
+ */
+export function calculateCoverage(findings) {
+    // Initialize results for all categories
+    const categoryResults = new Map();
+    for (const category of TEST_CATEGORIES) {
+        categoryResults.set(category.id, {
+            category,
+            tested: false,
+            findingCount: 0,
+            findings: [],
+        });
+    }
+    // Track which findings have been assigned
+    const assignedFindings = new Set();
+    // Process each finding - assign to FIRST matching category only
+    for (const finding of findings) {
+        if (assignedFindings.has(finding.id))
+            continue;
+        const categories = matchCategories(finding.templateId || '', finding.tags || []);
+        // Only count in the FIRST (most specific) matching category
+        if (categories.length > 0) {
+            const categoryId = categories[0];
+            const result = categoryResults.get(categoryId);
+            if (result) {
+                result.tested = true;
+                result.findingCount++;
+                result.findings.push(finding.id);
+                assignedFindings.add(finding.id);
+            }
+        }
+    }
+    // Also mark categories as "tested" if templates ran (even with 0 findings)
+    for (const finding of findings) {
+        const categories = matchCategories(finding.templateId || '', finding.tags || []);
+        for (const categoryId of categories) {
+            const result = categoryResults.get(categoryId);
+            if (result) {
+                result.tested = true;
+            }
+        }
+    }
+    // Convert to array and calculate summary
+    const results = Array.from(categoryResults.values());
+    // Mark categories as "tested" if we ran templates that would have found them
+    // (For now, we mark all categories as tested in standard/deep profiles)
+    return {
+        totalCategories: TEST_CATEGORIES.length,
+        testedCategories: results.filter(r => r.tested).length,
+        categoriesWithFindings: results.filter(r => r.findingCount > 0).length,
+        results,
+    };
+}
+/**
+ * Mark categories as tested based on scan profile
+ * In deep/standard profiles, we run more templates so more categories are "tested"
+ */
+export function markTestedCategories(coverage, profile, ranTemplates) {
+    // Categories that are always tested (basic checks)
+    const alwaysTested = [
+        'security-headers',
+        'tech-detection',
+        'admin-panels',
+        'misconfigurations',
+    ];
+    // Additional categories for standard profile
+    const standardTested = [
+        'sensitive-files',
+        'info-disclosure',
+        'directory-listing',
+        'api-endpoints',
+        'client-policies',
+        'http-methods',
+        'known-cves',
+    ];
+    // Additional categories for deep profile (fuzzing)
+    const deepTested = [
+        'xss',
+        'sqli',
+        'lfi',
+        'rce',
+        'ssrf',
+        'redirect',
+    ];
+    // Determine which categories were tested based on profile
+    let testedIds = [...alwaysTested];
+    if (profile === 'standard' || profile === 'deep') {
+        testedIds = [...testedIds, ...standardTested];
+    }
+    if (profile === 'deep') {
+        testedIds = [...testedIds, ...deepTested];
+    }
+    // Mark categories as tested
+    for (const result of coverage.results) {
+        if (testedIds.includes(result.category.id)) {
+            result.tested = true;
+        }
+    }
+    // Recalculate summary
+    coverage.testedCategories = coverage.results.filter(r => r.tested).length;
+    return coverage;
+}
+/**
+ * Format coverage for CLI output
+ */
+export function formatCoverageForCli(coverage) {
+    const lines = [];
+    lines.push('\nTest Coverage:');
+    lines.push('─'.repeat(50));
+    for (const result of coverage.results) {
+        if (!result.tested)
+            continue; // Skip untested categories
+        const icon = result.findingCount > 0 ? '⚠️' : '✅';
+        const count = result.findingCount > 0
+            ? ` (${result.findingCount} issue${result.findingCount > 1 ? 's' : ''})`
+            : '';
+        const status = result.findingCount > 0
+            ? `${result.findingCount} found`
+            : 'Nothing found';
+        lines.push(`${icon} ${result.category.name} - ${status}`);
+    }
+    lines.push('─'.repeat(50));
+    lines.push(`Tested: ${coverage.testedCategories}/${coverage.totalCategories} categories`);
+    return lines.join('\n');
+}
+/**
+ * Get coverage data for HTML report
+ */
+export function getCoverageForReport(coverage) {
+    return coverage.results.map(result => ({
+        name: result.category.name,
+        description: result.category.description,
+        tested: result.tested,
+        status: !result.tested
+            ? 'untested'
+            : result.findingCount === 0
+                ? 'pass'
+                : result.category.id === 'tech-detection'
+                    ? 'info'
+                    : 'fail',
+        count: result.findingCount,
+    }));
+}
+/**
+ * Get passed security checks for the report footer
+ * Shows all tested categories with 0 findings
+ */
+export function getPassedChecksForReport(coverage) {
+    return coverage.results
+        .filter(result => result.tested && result.findingCount === 0)
+        .filter(result => result.category.id !== 'tech-detection') // Exclude tech detection (not a "security check")
+        .map(result => ({
+        name: result.category.name,
+        description: result.category.description,
+    }));
+}
+//# sourceMappingURL=coverage.js.map

package/dist/coverage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage.js","sourceRoot":"","sources":["../src/coverage.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EACL,eAAe,EAGf,eAAe,EAEhB,MAAM,iBAAiB,CAAC;AAYzB;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAmB;IACnD,wCAAwC;IACxC,MAAM,eAAe,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE1D,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;QACvC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE;YAC/B,QAAQ;YACR,MAAM,EAAE,KAAK;YACb,YAAY,EAAE,CAAC;YACf,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC;IACL,CAAC;IAED,0CAA0C;IAC1C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE3C,gEAAgE;IAChE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAAE,SAAS;QAE/C,MAAM,UAAU,GAAG,eAAe,CAChC,OAAO,CAAC,UAAU,IAAI,EAAE,EACxB,OAAO,CAAC,IAAI,IAAI,EAAE,CACnB,CAAC;QAEF,4DAA4D;QAC5D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC/C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;gBACrB,MAAM,CAAC,YAAY,EAAE,CAAC;gBACtB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACjC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,eAAe,CAChC,OAAO,CAAC,UAAU,IAAI,EAAE,EACxB,OAAO,CAAC,IAAI,IAAI,EAAE,CACnB,CAAC;QACF,KAAK,MAAM,UAAU,IAAI,UAAU,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC/C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAED,yCAAyC;IACzC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC;IAErD,6EAA6E;IAC7E,wEAAwE;IAExE,OAAO;QACL,eAAe,EAAE,eAAe,CAAC,MAAM;QACvC,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;QACtD,sBAAsB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,MAAM;QACtE,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAyB,EACzB,OAAsC,EACtC,YAAsB;IAEtB,mDAAmD;IACnD,MAAM,YAAY,GAAG;QACnB,kBAAkB;QAClB,gBAAgB;QAChB,cAAc;QACd,mBAAmB;KACpB,CAAC;IAEF,6CAA6C;IAC7C,MAAM,cAAc,GAAG;QACrB,iBAAiB;QACjB,iBAAiB;QACjB,mBAAmB;QACnB,eAAe;QACf,iBAAiB;QACjB,cAAc;QACd,YAAY;KACb,CAAC;IAEF,mDAAmD;IACnD,MAAM,UAAU,GAAG;QACjB,KAAK;QACL,MAAM;QACN,KAAK;QACL,KAAK;QACL,MAAM;QACN,UAAU;KACX,CAAC;IAEF,0DAA0D;IAC1D,IAAI,SAAS,GAAa,CAAC,GAAG,YAAY,CAAC,CAAC;IAE5C,IAAI,OAAO,KAAK,UAAU,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACjD,SAAS,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,cAAc,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,SAAS,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,UAAU,CAAC,CAAC;IAC5C,CAAC;IAED,4BAA4B;IAC5B,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,QAAQ,CAAC,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IAE1E,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAyB;IAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC/B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE3B,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,SAAS,CAAC,2BAA2B;QAEzD,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,GAAG,CAAC;YACnC,CAAC,CAAC,KAAK,MAAM,CAAC,YAAY,SAAS,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG;YACxE,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,GAAG,CAAC;YACpC,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY,QAAQ;YAChC,CAAC,CAAC,eAAe,CAAC;QAEpB,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,WAAW,QAAQ,CAAC,gBAAgB,IAAI,QAAQ,CAAC,eAAe,aAAa,CAAC,CAAC;IAE1F,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAyB;IAO5D,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;QAC1B,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;QACxC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM;YACpB,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,MAAM,CAAC,YAAY,KAAK,CAAC;gBACzB,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,gBAAgB;oBACvC,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,MAAM;QACd,KAAK,EAAE,MAAM,CAAC,YAAY;KAC3B,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAyB;IAIhE,OAAO,QAAQ,CAAC,OAAO;SACpB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,KAAK,CAAC,CAAC;SAC5D,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,gBAAgB,CAAC,CAAC,kDAAkD;SAC5G,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACd,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;QAC1B,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;KACzC,CAAC,CAAC,CAAC;AACR,CAAC"}

package/dist/enrichers/nvd.d.ts

@@ -0,0 +1,55 @@
+/**
+ * NVD API Enrichment
+ * Query NIST NVD for CVE details, CVSS scores, descriptions
+ *
+ * API Docs: https://nvd.nist.gov/developers/vulnerabilities
+ */
+export interface NvdCveData {
+    id: string;
+    description: string;
+    cvssScore?: number;
+    cvssVector?: string;
+    cweId?: string;
+    cweDescription?: string;
+    references: string[];
+    published?: string;
+    lastModified?: string;
+}
+export interface NvdEnrichment {
+    description: string;
+    cvssScore?: number;
+    cvssVector?: string;
+    cweId?: string;
+    references: string[];
+}
+/**
+ * Query NVD API for a specific CVE
+ */
+export declare function getCveDetails(cveId: string): Promise<NvdCveData | null>;
+/**
+ * Query NVD for CVEs affecting a specific software version (by CPE)
+ */
+export declare function getCvesByCpe(vendor: string, product: string, version: string, limit?: number): Promise<NvdCveData[]>;
+/**
+ * Get CPE mapping for a technology name
+ */
+export declare function getCpeMapping(techName: string): {
+    vendor: string;
+    product: string;
+} | null;
+/**
+ * Enrich a finding with NVD data
+ * Returns enrichment data to merge into finding
+ * Handles multiple CVEs in a single field
+ */
+export declare function enrichWithNvd(cveString: string): Promise<NvdEnrichment | null>;
+/**
+ * Query NVD API by keyword search
+ */
+export declare function getCvesByKeyword(keyword: string, limit?: number): Promise<NvdCveData[]>;
+/**
+ * Get CVEs for a specific technology and version
+ * Tries CPE first, falls back to keyword search
+ */
+export declare function getCvesForTechnology(technology: string, version: string, limit?: number): Promise<NvdCveData[]>;
+//# sourceMappingURL=nvd.d.ts.map

package/dist/enrichers/nvd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nvd.d.ts","sourceRoot":"","sources":["../../src/enrichers/nvd.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAUH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAiBD;;GAEG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CA8E7E;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,KAAK,GAAE,MAAW,GACjB,OAAO,CAAC,UAAU,EAAE,CAAC,CA+EvB;AA0BD;;GAEG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAG1F;AAWD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAqBpF;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,KAAK,GAAE,MAAW,GACjB,OAAO,CAAC,UAAU,EAAE,CAAC,CA4EvB;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,KAAK,GAAE,MAAW,GACjB,OAAO,CAAC,UAAU,EAAE,CAAC,CA0BvB"}

package/dist/enrichers/nvd.js

@@ -0,0 +1,326 @@
+/**
+ * NVD API Enrichment
+ * Query NIST NVD for CVE details, CVSS scores, descriptions
+ *
+ * API Docs: https://nvd.nist.gov/developers/vulnerabilities
+ */
+const NVD_API_BASE = 'https://services.nvd.nist.gov/rest/json/cves/2.0';
+// Rate limit: 5 requests per 30 seconds without API key
+// With API key: 50 requests per 30 seconds
+const RATE_LIMIT_DELAY = 6500; // 6.5 seconds between requests (safe without key)
+let lastRequestTime = 0;
+/**
+ * Wait for rate limit
+ */
+async function waitForRateLimit() {
+    const now = Date.now();
+    const timeSinceLastRequest = now - lastRequestTime;
+    if (timeSinceLastRequest < RATE_LIMIT_DELAY) {
+        const waitTime = RATE_LIMIT_DELAY - timeSinceLastRequest;
+        await new Promise(resolve => setTimeout(resolve, waitTime));
+    }
+    lastRequestTime = Date.now();
+}
+/**
+ * Query NVD API for a specific CVE
+ */
+export async function getCveDetails(cveId) {
+    if (!cveId || !cveId.startsWith('CVE-')) {
+        return null;
+    }
+    await waitForRateLimit();
+    try {
+        const url = `${NVD_API_BASE}?cveId=${encodeURIComponent(cveId)}`;
+        const response = await fetch(url, {
+            headers: {
+                'User-Agent': 'VoidSec-Scanner/0.1.0',
+            },
+        });
+        if (!response.ok) {
+            console.warn(`NVD API error for ${cveId}: ${response.status}`);
+            return null;
+        }
+        const data = await response.json();
+        if (!data.vulnerabilities || data.vulnerabilities.length === 0) {
+            return null;
+        }
+        const vuln = data.vulnerabilities[0].cve;
+        // Extract description (prefer English)
+        const descriptions = vuln.descriptions || [];
+        const engDesc = descriptions.find((d) => d.lang === 'en');
+        const description = engDesc?.value || descriptions[0]?.value || '';
+        // Extract CVSS (prefer v3.1, then v3.0, then v2)
+        const metrics = vuln.metrics || {};
+        let cvssScore;
+        let cvssVector;
+        if (metrics.cvssMetricV31?.[0]) {
+            cvssScore = metrics.cvssMetricV31[0].cvssData?.baseScore;
+            cvssVector = metrics.cvssMetricV31[0].cvssData?.vectorString;
+        }
+        else if (metrics.cvssMetricV30?.[0]) {
+            cvssScore = metrics.cvssMetricV30[0].cvssData?.baseScore;
+            cvssVector = metrics.cvssMetricV30[0].cvssData?.vectorString;
+        }
+        else if (metrics.cvssMetricV2?.[0]) {
+            cvssScore = metrics.cvssMetricV2[0].cvssData?.baseScore;
+            cvssVector = metrics.cvssMetricV2[0].cvssData?.vectorString;
+        }
+        // Extract CWE
+        const weaknesses = vuln.weaknesses || [];
+        let cweId;
+        for (const w of weaknesses) {
+            const desc = w.description?.find((d) => d.lang === 'en');
+            if (desc?.value && desc.value.startsWith('CWE-')) {
+                cweId = desc.value;
+                break;
+            }
+        }
+        // Extract references
+        const refs = vuln.references || [];
+        const references = refs.map((r) => r.url).slice(0, 5); // Limit to 5
+        return {
+            id: cveId,
+            description,
+            cvssScore,
+            cvssVector,
+            cweId,
+            references,
+            published: vuln.published,
+            lastModified: vuln.lastModified,
+        };
+    }
+    catch (error) {
+        console.warn(`Failed to fetch CVE ${cveId}: ${error}`);
+        return null;
+    }
+}
+/**
+ * Query NVD for CVEs affecting a specific software version (by CPE)
+ */
+export async function getCvesByCpe(vendor, product, version, limit = 10) {
+    await waitForRateLimit();
+    // Build CPE 2.3 string
+    const cpe = `cpe:2.3:a:${vendor}:${product}:${version}:*:*:*:*:*:*:*`;
+    try {
+        const url = `${NVD_API_BASE}?cpeName=${encodeURIComponent(cpe)}&resultsPerPage=${limit}`;
+        const response = await fetch(url, {
+            headers: {
+                'User-Agent': 'VoidSec-Scanner/0.1.0',
+            },
+        });
+        if (!response.ok) {
+            console.warn(`NVD API error for CPE ${cpe}: ${response.status}`);
+            return [];
+        }
+        const data = await response.json();
+        if (!data.vulnerabilities || data.vulnerabilities.length === 0) {
+            return [];
+        }
+        const results = [];
+        for (const item of data.vulnerabilities) {
+            const vuln = item.cve;
+            const descriptions = vuln.descriptions || [];
+            const engDesc = descriptions.find((d) => d.lang === 'en');
+            const description = engDesc?.value || descriptions[0]?.value || '';
+            const metrics = vuln.metrics || {};
+            let cvssScore;
+            let cvssVector;
+            if (metrics.cvssMetricV31?.[0]) {
+                cvssScore = metrics.cvssMetricV31[0].cvssData?.baseScore;
+                cvssVector = metrics.cvssMetricV31[0].cvssData?.vectorString;
+            }
+            else if (metrics.cvssMetricV30?.[0]) {
+                cvssScore = metrics.cvssMetricV30[0].cvssData?.baseScore;
+                cvssVector = metrics.cvssMetricV30[0].cvssData?.vectorString;
+            }
+            else if (metrics.cvssMetricV2?.[0]) {
+                cvssScore = metrics.cvssMetricV2[0].cvssData?.baseScore;
+                cvssVector = metrics.cvssMetricV2[0].cvssData?.vectorString;
+            }
+            const weaknesses = vuln.weaknesses || [];
+            let cweId;
+            for (const w of weaknesses) {
+                const desc = w.description?.find((d) => d.lang === 'en');
+                if (desc?.value && desc.value.startsWith('CWE-')) {
+                    cweId = desc.value;
+                    break;
+                }
+            }
+            const refs = vuln.references || [];
+            const references = refs.map((r) => r.url).slice(0, 3);
+            results.push({
+                id: vuln.id,
+                description,
+                cvssScore,
+                cvssVector,
+                cweId,
+                references,
+                published: vuln.published,
+                lastModified: vuln.lastModified,
+            });
+        }
+        return results;
+    }
+    catch (error) {
+        console.warn(`Failed to fetch CVEs for CPE ${cpe}: ${error}`);
+        return [];
+    }
+}
+// Common CPE vendor/product mappings for detected technologies
+const CPE_MAPPINGS = {
+    'nginx': { vendor: 'f5', product: 'nginx' },
+    'apache': { vendor: 'apache', product: 'http_server' },
+    'drupal': { vendor: 'drupal', product: 'drupal' },
+    'wordpress': { vendor: 'wordpress', product: 'wordpress' },
+    'php': { vendor: 'php', product: 'php' },
+    'mysql': { vendor: 'oracle', product: 'mysql' },
+    'postgresql': { vendor: 'postgresql', product: 'postgresql' },
+    'nodejs': { vendor: 'nodejs', product: 'node.js' },
+    'node.js': { vendor: 'nodejs', product: 'node.js' },
+    'openssl': { vendor: 'openssl', product: 'openssl' },
+    'jquery': { vendor: 'jquery', product: 'jquery' },
+    'bootstrap': { vendor: 'getbootstrap', product: 'bootstrap' },
+    'laravel': { vendor: 'laravel', product: 'laravel' },
+    'nextjs': { vendor: 'vercel', product: 'next.js' },
+    'next.js': { vendor: 'vercel', product: 'next.js' },
+    'react': { vendor: 'facebook', product: 'react' },
+    'vue': { vendor: 'vuejs', product: 'vue.js' },
+    'angular': { vendor: 'google', product: 'angular' },
+    'tomcat': { vendor: 'apache', product: 'tomcat' },
+    'iis': { vendor: 'microsoft', product: 'internet_information_services' },
+};
+/**
+ * Get CPE mapping for a technology name
+ */
+export function getCpeMapping(techName) {
+    const normalized = techName.toLowerCase().trim();
+    return CPE_MAPPINGS[normalized] || null;
+}
+/**
+ * Parse CVE string - may contain multiple CVEs separated by space
+ */
+function parseCveIds(cveString) {
+    // Match all CVE-XXXX-XXXXX patterns
+    const matches = cveString.match(/CVE-\d{4}-\d+/g);
+    return matches || [];
+}
+/**
+ * Enrich a finding with NVD data
+ * Returns enrichment data to merge into finding
+ * Handles multiple CVEs in a single field
+ */
+export async function enrichWithNvd(cveString) {
+    const cveIds = parseCveIds(cveString);
+    if (cveIds.length === 0) {
+        return null;
+    }
+    // For multiple CVEs, get data for the first one (usually the most relevant)
+    const cveData = await getCveDetails(cveIds[0]);
+    if (!cveData) {
+        return null;
+    }
+    return {
+        description: cveData.description,
+        cvssScore: cveData.cvssScore,
+        cvssVector: cveData.cvssVector,
+        cweId: cveData.cweId,
+        references: cveData.references,
+    };
+}
+/**
+ * Query NVD API by keyword search
+ */
+export async function getCvesByKeyword(keyword, limit = 10) {
+    await waitForRateLimit();
+    try {
+        const url = `${NVD_API_BASE}?keywordSearch=${encodeURIComponent(keyword)}&resultsPerPage=${limit}`;
+        const response = await fetch(url, {
+            headers: {
+                'User-Agent': 'VoidSec-Scanner/0.1.0',
+            },
+        });
+        if (!response.ok) {
+            console.warn(`NVD API error for keyword "${keyword}": ${response.status}`);
+            return [];
+        }
+        const data = await response.json();
+        if (!data.vulnerabilities || data.vulnerabilities.length === 0) {
+            return [];
+        }
+        const results = [];
+        for (const item of data.vulnerabilities) {
+            const vuln = item.cve;
+            const descriptions = vuln.descriptions || [];
+            const engDesc = descriptions.find((d) => d.lang === 'en');
+            const description = engDesc?.value || descriptions[0]?.value || '';
+            const metrics = vuln.metrics || {};
+            let cvssScore;
+            let cvssVector;
+            if (metrics.cvssMetricV31?.[0]) {
+                cvssScore = metrics.cvssMetricV31[0].cvssData?.baseScore;
+                cvssVector = metrics.cvssMetricV31[0].cvssData?.vectorString;
+            }
+            else if (metrics.cvssMetricV30?.[0]) {
+                cvssScore = metrics.cvssMetricV30[0].cvssData?.baseScore;
+                cvssVector = metrics.cvssMetricV30[0].cvssData?.vectorString;
+            }
+            else if (metrics.cvssMetricV2?.[0]) {
+                cvssScore = metrics.cvssMetricV2[0].cvssData?.baseScore;
+                cvssVector = metrics.cvssMetricV2[0].cvssData?.vectorString;
+            }
+            const weaknesses = vuln.weaknesses || [];
+            let cweId;
+            for (const w of weaknesses) {
+                const desc = w.description?.find((d) => d.lang === 'en');
+                if (desc?.value && desc.value.startsWith('CWE-')) {
+                    cweId = desc.value;
+                    break;
+                }
+            }
+            const refs = vuln.references || [];
+            const references = refs.map((r) => r.url).slice(0, 3);
+            results.push({
+                id: vuln.id,
+                description,
+                cvssScore,
+                cvssVector,
+                cweId,
+                references,
+                published: vuln.published,
+                lastModified: vuln.lastModified,
+            });
+        }
+        return results;
+    }
+    catch (error) {
+        console.warn(`Failed to fetch CVEs for keyword "${keyword}": ${error}`);
+        return [];
+    }
+}
+/**
+ * Get CVEs for a specific technology and version
+ * Tries CPE first, falls back to keyword search
+ */
+export async function getCvesForTechnology(technology, version, limit = 10) {
+    const cpeMapping = getCpeMapping(technology);
+    console.log(`  🔍 Looking up CVEs for ${technology} ${version}...`);
+    let cves = [];
+    // Try CPE-based search first
+    if (cpeMapping) {
+        cves = await getCvesByCpe(cpeMapping.vendor, cpeMapping.product, version, limit);
+    }
+    // If CPE search found nothing, try keyword search
+    if (cves.length === 0) {
+        const keyword = `${technology} ${version}`;
+        console.log(`  ⚠ No CPE results, trying keyword search: "${keyword}"...`);
+        cves = await getCvesByKeyword(keyword, limit);
+    }
+    if (cves.length > 0) {
+        console.log(`  ✓ Found ${cves.length} CVEs for ${technology} ${version}`);
+    }
+    else {
+        console.log(`  ⚠ No CVEs found for ${technology} ${version}`);
+    }
+    return cves;
+}
+//# sourceMappingURL=nvd.js.map

package/dist/enrichers/nvd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nvd.js","sourceRoot":"","sources":["../../src/enrichers/nvd.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,YAAY,GAAG,kDAAkD,CAAC;AAExE,wDAAwD;AACxD,2CAA2C;AAC3C,MAAM,gBAAgB,GAAG,IAAI,CAAC,CAAC,kDAAkD;AAEjF,IAAI,eAAe,GAAG,CAAC,CAAC;AAsBxB;;GAEG;AACH,KAAK,UAAU,gBAAgB;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,oBAAoB,GAAG,GAAG,GAAG,eAAe,CAAC;IAEnD,IAAI,oBAAoB,GAAG,gBAAgB,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,gBAAgB,GAAG,oBAAoB,CAAC;QACzD,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAa;IAC/C,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,gBAAgB,EAAE,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,YAAY,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,OAAO,EAAE;gBACP,YAAY,EAAE,uBAAuB;aACtC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,qBAAqB,KAAK,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnC,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAEzC,uCAAuC;QACvC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC5E,MAAM,WAAW,GAAG,OAAO,EAAE,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QAEnE,iDAAiD;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QACnC,IAAI,SAA6B,CAAC;QAClC,IAAI,UAA8B,CAAC;QAEnC,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC;YACzD,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC;QAC/D,CAAC;aAAM,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC;YACzD,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC;QAC/D,CAAC;aAAM,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC;YACxD,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC;QAC9D,CAAC;QAED,cAAc;QACd,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;QACzC,IAAI,KAAyB,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAC3E,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;gBACnB,MAAM;YACR,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa;QAErF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,WAAW;YACX,SAAS;YACT,UAAU;YACV,KAAK;YACL,UAAU;YACV,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,uBAAuB,KAAK,KAAK,KAAK,EAAE,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,OAAe,EACf,OAAe,EACf,QAAgB,EAAE;IAElB,MAAM,gBAAgB,EAAE,CAAC;IAEzB,uBAAuB;IACvB,MAAM,GAAG,GAAG,aAAa,MAAM,IAAI,OAAO,IAAI,OAAO,gBAAgB,CAAC;IAEtE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,YAAY,YAAY,kBAAkB,CAAC,GAAG,CAAC,mBAAmB,KAAK,EAAE,CAAC;QACzF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,OAAO,EAAE;gBACP,YAAY,EAAE,uBAAuB;aACtC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,yBAAyB,GAAG,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACjE,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnC,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/D,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAiB,EAAE,CAAC;QAEjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;YAEtB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAC5E,MAAM,WAAW,GAAG,OAAO,EAAE,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YAEnE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;YACnC,IAAI,SAA6B,CAAC;YAClC,IAAI,UAA8B,CAAC;YAEnC,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/B,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC;gBACzD,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC;YAC/D,CAAC;iBAAM,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtC,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC;gBACzD,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC;YAC/D,CAAC;iBAAM,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrC,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC;gBACxD,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC;YAC9D,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;YACzC,IAAI,KAAyB,CAAC;YAC9B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;gBAC3E,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBACjD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;oBACnB,MAAM;gBACR,CAAC;YACH,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAEvE,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,WAAW;gBACX,SAAS;gBACT,UAAU;gBACV,KAAK;gBACL,UAAU;gBACV,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,YAAY,EAAE,IAAI,CAAC,YAAY;aAChC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,gCAAgC,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC;QAC9D,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,MAAM,YAAY,GAAwD;IACxE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE;IAC3C,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE;IACtD,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE;IACjD,WAAW,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE;IAC1D,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE;IACxC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE;IAC/C,YAAY,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE;IAC7D,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE;IAClD,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE;IACnD,SAAS,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE;IACpD,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE;IACjD,WAAW,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE;IAC7D,SAAS,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE;IACpD,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE;IAClD,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE;IACnD,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE;IACjD,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC7C,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE;IACnD,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE;IACjD,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,+BAA+B,EAAE;CACzE,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACjD,OAAO,YAAY,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,SAAiB;IACpC,oCAAoC;IACpC,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAClD,OAAO,OAAO,IAAI,EAAE,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAiB;IACnD,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAEtC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4EAA4E;IAC5E,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAE/C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,QAAgB,EAAE;IAElB,MAAM,gBAAgB,EAAE,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,YAAY,kBAAkB,kBAAkB,CAAC,OAAO,CAAC,mBAAmB,KAAK,EAAE,CAAC;QACnG,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,OAAO,EAAE;gBACP,YAAY,EAAE,uBAAuB;aACtC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,8BAA8B,OAAO,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3E,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnC,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/D,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAiB,EAAE,CAAC;QAEjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;YAEtB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAC5E,MAAM,WAAW,GAAG,OAAO,EAAE,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YAEnE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;YACnC,IAAI,SAA6B,CAAC;YAClC,IAAI,UAA8B,CAAC;YAEnC,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/B,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC;gBACzD,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC;YAC/D,CAAC;iBAAM,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtC,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC;gBACzD,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC;YAC/D,CAAC;iBAAM,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrC,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC;gBACxD,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC;YAC9D,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;YACzC,IAAI,KAAyB,CAAC;YAC9B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;gBAC3E,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBACjD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;oBACnB,MAAM;gBACR,CAAC;YACH,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAEvE,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,WAAW;gBACX,SAAS;gBACT,UAAU;gBACV,KAAK;gBACL,UAAU;gBACV,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,YAAY,EAAE,IAAI,CAAC,YAAY;aAChC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,qCAAqC,OAAO,MAAM,KAAK,EAAE,CAAC,CAAC;QACxE,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAAkB,EAClB,OAAe,EACf,QAAgB,EAAE;IAElB,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAE7C,OAAO,CAAC,GAAG,CAAC,4BAA4B,UAAU,IAAI,OAAO,KAAK,CAAC,CAAC;IAEpE,IAAI,IAAI,GAAiB,EAAE,CAAC;IAE5B,6BAA6B;IAC7B,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACnF,CAAC;IAED,kDAAkD;IAClD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,UAAU,IAAI,OAAO,EAAE,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,+CAA+C,OAAO,MAAM,CAAC,CAAC;QAC1E,IAAI,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,MAAM,aAAa,UAAU,IAAI,OAAO,EAAE,CAAC,CAAC;IAC5E,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,yBAAyB,UAAU,IAAI,OAAO,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/report.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Report Generator
+ * Generate HTML reports from scan results
+ * Uses Tailwind CSS + Alpine.js for styling and interactivity
+ */
+import { Report } from './types.js';
+export declare function generateHtmlReport(report: Report): string;
+/**
+ * Generate JSON report from scan results
+ */
+export declare function generateJsonReport(report: Report): string;
+//# sourceMappingURL=report.d.ts.map

package/dist/report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,MAAM,EAAqB,MAAM,YAAY,CAAC;AAocvD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAOzD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEzD"}