@vyuhlabs/dxkit 1.5.1 → 1.6.1

package/dist/analyzers/scoring.js

@@ -0,0 +1,410 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scoreTest = scoreTest;
+exports.scoreQuality = scoreQuality;
+exports.scoreDocumentation = scoreDocumentation;
+exports.scoreSecurity = scoreSecurity;
+exports.scoreMaintainability = scoreMaintainability;
+exports.scoreDeveloperExperience = scoreDeveloperExperience;
+exports.computeOverall = computeOverall;
+function status(score) {
+    if (score >= 80)
+        return 'excellent';
+    if (score >= 60)
+        return 'good';
+    if (score >= 40)
+        return 'fair';
+    if (score >= 20)
+        return 'poor';
+    return 'critical';
+}
+function clamp(value, min = 0, max = 100) {
+    return Math.round(Math.max(min, Math.min(max, value)));
+}
+/** Testing: 0-100 */
+function scoreTest(m) {
+    const sourceCount = Math.max(m.sourceFiles, 1);
+    const testRatio = m.testFiles / sourceCount;
+    let score;
+    if (m.testFiles === 0) {
+        score = 0;
+    }
+    else {
+        score = Math.min(testRatio * 200, 60);
+        if (m.coverageConfigExists)
+            score += 10;
+        if (m.testsPass === true)
+            score += 15;
+        if (m.coveragePercent !== null && m.coveragePercent >= 60)
+            score += 10;
+        if (m.coveragePercent !== null && m.coveragePercent >= 80)
+            score += 5;
+    }
+    // AST enhancement: detect commented-out code files
+    if (m.commentedCodeRatio !== null && m.commentedCodeRatio > 0.5) {
+        score -= 15;
+    }
+    score = clamp(score);
+    return {
+        score,
+        maxScore: 100,
+        status: status(score),
+        metrics: {
+            sourceFiles: m.sourceFiles,
+            testFiles: m.testFiles,
+            testRatio: Math.round(testRatio * 100) / 100,
+            testsPass: m.testsPass,
+            coveragePercent: m.coveragePercent,
+            coverageConfigExists: m.coverageConfigExists,
+            testFramework: m.testFramework,
+            commentedCodeRatio: m.commentedCodeRatio,
+        },
+        details: m.testFiles === 0
+            ? `No test files found across ${m.sourceFiles} source files. 0% test coverage.`
+            : `${m.testFiles} test files for ${m.sourceFiles} source files (ratio: ${(testRatio * 100).toFixed(1)}%). ` +
+                `Tests ${m.testsPass === true ? 'pass' : m.testsPass === false ? 'fail' : 'not run'}. ` +
+                (m.coveragePercent !== null
+                    ? `Coverage: ${m.coveragePercent}%. `
+                    : 'No coverage data. ') +
+                (m.testFramework ? `Framework: ${m.testFramework}.` : '') +
+                (m.commentedCodeRatio !== null && m.commentedCodeRatio > 0.5
+                    ? ` Warning: ${(m.commentedCodeRatio * 100).toFixed(0)}% of source files appear to contain only comments.`
+                    : ''),
+    };
+}
+/** Code Quality: 0-100 */
+function scoreQuality(m) {
+    const sourceCount = Math.max(m.sourceFiles, 1);
+    let score = 100;
+    // Lint errors
+    if (m.lintErrors > 0) {
+        const errorRatio = m.lintErrors / sourceCount;
+        score -= Math.min(errorRatio * 100, 40);
+    }
+    // Large files
+    if (m.filesOver500Lines > 5)
+        score -= 10;
+    if (m.filesOver500Lines > 20)
+        score -= 10;
+    if (m.largestFileLines > 5000)
+        score -= 10;
+    if (m.largestFileLines > 10000)
+        score -= 10;
+    // Console/debug statements
+    const consoleDensity = m.consoleLogCount / sourceCount;
+    if (consoleDensity > 3)
+        score -= 15;
+    else if (consoleDensity > 1)
+        score -= 10;
+    else if (consoleDensity > 0.3)
+        score -= 5;
+    // Loose typing
+    const anyDensity = m.anyTypeCount / sourceCount;
+    if (anyDensity > 10)
+        score -= 15;
+    else if (anyDensity > 5)
+        score -= 10;
+    else if (anyDensity > 1)
+        score -= 5;
+    // Type errors
+    if (m.typeErrors !== null && m.typeErrors > 0) {
+        score -= Math.min((m.typeErrors / sourceCount) * 50, 15);
+    }
+    // AST enhancements
+    if (m.maxFunctionsInFile !== null && m.maxFunctionsInFile > 50)
+        score -= 10;
+    if (m.deadImportCount !== null && m.deadImportCount > 20)
+        score -= 5;
+    score = clamp(score);
+    return {
+        score,
+        maxScore: 100,
+        status: status(score),
+        metrics: {
+            lintErrors: m.lintErrors,
+            lintWarnings: m.lintWarnings,
+            lintTool: m.lintTool,
+            filesOver500Lines: m.filesOver500Lines,
+            largestFileLines: m.largestFileLines,
+            largestFilePath: m.largestFilePath,
+            consoleLogCount: m.consoleLogCount,
+            anyTypeCount: m.anyTypeCount,
+            typeErrors: m.typeErrors,
+            maxFunctionsInFile: m.maxFunctionsInFile,
+            deadImportCount: m.deadImportCount,
+        },
+        details: `${m.lintErrors} lint errors, ${m.lintWarnings} warnings` +
+            (m.lintTool ? ` (${m.lintTool})` : '') +
+            `. ${m.filesOver500Lines} files exceed 500 lines` +
+            `. Largest file: ${m.largestFilePath} (${m.largestFileLines} lines)` +
+            `. ${m.consoleLogCount} console/debug statements` +
+            (m.anyTypeCount > 0 ? `. ${m.anyTypeCount} loose type annotations` : '') +
+            (m.maxFunctionsInFile !== null ? `. Densest file: ${m.maxFunctionsInFile} functions` : '') +
+            '.',
+    };
+}
+/** Documentation: 0-100 */
+function scoreDocumentation(m) {
+    const sourceCount = Math.max(m.sourceFiles, 1);
+    let score = 0;
+    if (m.readmeExists) {
+        if (m.readmeLines > 100)
+            score += 25;
+        else if (m.readmeLines > 50)
+            score += 20;
+        else if (m.readmeLines > 20)
+            score += 15;
+        else
+            score += 5;
+    }
+    const docRatio = m.docCommentFiles / sourceCount;
+    if (docRatio > 0.5)
+        score += 25;
+    else if (docRatio > 0.2)
+        score += 15;
+    else if (docRatio > 0.05)
+        score += 5;
+    if (m.apiDocsExist)
+        score += 20;
+    if (m.architectureDocsExist)
+        score += 15;
+    if (m.contributingExists)
+        score += 10;
+    if (m.changelogExists)
+        score += 5;
+    score = clamp(score);
+    return {
+        score,
+        maxScore: 100,
+        status: status(score),
+        metrics: {
+            readmeExists: m.readmeExists,
+            readmeLines: m.readmeLines,
+            docCommentFiles: m.docCommentFiles,
+            docRatio: Math.round(docRatio * 100) / 100,
+            apiDocsExist: m.apiDocsExist,
+            architectureDocsExist: m.architectureDocsExist,
+            contributingExists: m.contributingExists,
+            changelogExists: m.changelogExists,
+        },
+        details: `README: ${m.readmeExists ? `${m.readmeLines} lines` : 'missing'}` +
+            `. ${m.docCommentFiles}/${m.sourceFiles} files have doc comments (${(docRatio * 100).toFixed(1)}%)` +
+            `. API docs: ${m.apiDocsExist ? 'yes' : 'no'}` +
+            `. Architecture docs: ${m.architectureDocsExist ? 'yes' : 'no'}` +
+            `. Contributing: ${m.contributingExists ? 'yes' : 'no'}` +
+            '.',
+    };
+}
+/** Security: 0-100 */
+function scoreSecurity(m) {
+    let score = 100;
+    // Hardcoded secrets (max -25)
+    if (m.secretFindings > 10)
+        score -= 25;
+    else if (m.secretFindings > 5)
+        score -= 20;
+    else if (m.secretFindings > 0)
+        score -= 15;
+    // Private keys in repo (max -20)
+    if (m.privateKeyFiles > 0)
+        score -= 20;
+    // eval/exec (max -10)
+    if (m.evalCount > 3)
+        score -= 10;
+    else if (m.evalCount > 0)
+        score -= 5;
+    // .env in git (max -10)
+    if (m.envFilesInGit > 0)
+        score -= 10;
+    // TLS disabled (max -10)
+    if (m.tlsDisabledCount > 0)
+        score -= 10;
+    // Dependency vulnerabilities (max -25)
+    if (m.depVulnCritical > 0)
+        score -= 15;
+    if (m.depVulnHigh > 5)
+        score -= 10;
+    else if (m.depVulnHigh > 0)
+        score -= 5;
+    score = clamp(score);
+    return {
+        score,
+        maxScore: 100,
+        status: status(score),
+        metrics: {
+            secretFindings: m.secretFindings,
+            privateKeyFiles: m.privateKeyFiles,
+            evalCount: m.evalCount,
+            envFilesInGit: m.envFilesInGit,
+            tlsDisabledCount: m.tlsDisabledCount,
+            depVulnCritical: m.depVulnCritical,
+            depVulnHigh: m.depVulnHigh,
+            depVulnMedium: m.depVulnMedium,
+            depVulnLow: m.depVulnLow,
+            depAuditTool: m.depAuditTool,
+        },
+        details: `${m.secretFindings} hardcoded secret patterns found` +
+            `. ${m.privateKeyFiles} private key files in repo` +
+            `. ${m.evalCount} eval/exec calls` +
+            `. ${m.envFilesInGit} .env files tracked in git` +
+            `. ${m.tlsDisabledCount} TLS verification disabled` +
+            `. Dependency vulns: ${m.depVulnCritical} critical, ${m.depVulnHigh} high, ${m.depVulnMedium} medium, ${m.depVulnLow} low` +
+            (m.depAuditTool ? ` (${m.depAuditTool})` : '') +
+            '.',
+    };
+}
+/** Maintainability: 0-100 */
+function scoreMaintainability(m) {
+    let score = 70;
+    // God files penalty
+    if (m.largestFileLines > 10000)
+        score -= 25;
+    else if (m.largestFileLines > 5000)
+        score -= 15;
+    else if (m.largestFileLines > 2000)
+        score -= 10;
+    else if (m.largestFileLines > 1000)
+        score -= 5;
+    if (m.filesOver500Lines > 30)
+        score -= 15;
+    else if (m.filesOver500Lines > 15)
+        score -= 10;
+    else if (m.filesOver500Lines > 5)
+        score -= 5;
+    if (m.consoleLogCount > 500)
+        score -= 10;
+    else if (m.consoleLogCount > 100)
+        score -= 5;
+    // Outdated Node engine
+    if (m.nodeEngineVersion) {
+        const majorMatch = m.nodeEngineVersion.match(/(\d+)/);
+        if (majorMatch) {
+            const major = parseInt(majorMatch[1]);
+            if (major < 16)
+                score -= 10;
+            else if (major < 18)
+                score -= 5;
+        }
+    }
+    // Small codebase bonus
+    if (m.sourceFiles < 50)
+        score += 10;
+    if (m.sourceFiles < 20)
+        score += 5;
+    // AST enhancements (calibrated for real-world repos)
+    if (m.godNodeCount !== null) {
+        const godRatio = m.godNodeCount / Math.max(m.sourceFiles, 1);
+        if (godRatio > 0.1)
+            score -= 10;
+        else if (godRatio > 0.05)
+            score -= 5;
+    }
+    if (m.avgCohesion !== null && m.avgCohesion < 0.15)
+        score -= 5;
+    score = clamp(score);
+    return {
+        score,
+        maxScore: 100,
+        status: status(score),
+        metrics: {
+            sourceFiles: m.sourceFiles,
+            controllers: m.controllers,
+            models: m.models,
+            directories: m.directories,
+            largestFileLines: m.largestFileLines,
+            filesOver500Lines: m.filesOver500Lines,
+            nodeEngineVersion: m.nodeEngineVersion,
+            godNodeCount: m.godNodeCount,
+            communityCount: m.communityCount,
+            avgCohesion: m.avgCohesion,
+            orphanModuleCount: m.orphanModuleCount,
+        },
+        details: `${m.sourceFiles} source files across ${m.directories} directories` +
+            `. ${m.controllers} controllers/handlers, ${m.models} models` +
+            `. Largest file: ${m.largestFileLines} lines` +
+            `. ${m.filesOver500Lines} files over 500 lines` +
+            (m.nodeEngineVersion ? `. Node engine: ${m.nodeEngineVersion}` : '') +
+            (m.communityCount !== null ? `. ${m.communityCount} architectural communities` : '') +
+            (m.avgCohesion !== null ? `. Avg cohesion: ${m.avgCohesion.toFixed(2)}` : '') +
+            '.',
+    };
+}
+/** Developer Experience: 0-100 */
+function scoreDeveloperExperience(m) {
+    let score = 0;
+    if (m.ciConfigCount > 0)
+        score += 20;
+    if (m.dockerConfigCount > 0)
+        score += 15;
+    if (m.precommitConfigCount > 0)
+        score += 10;
+    if (m.makefileExists)
+        score += 10;
+    if (m.envExampleExists)
+        score += 10;
+    if (m.npmScriptsCount >= 8)
+        score += 15;
+    else if (m.npmScriptsCount >= 4)
+        score += 10;
+    else if (m.npmScriptsCount >= 1)
+        score += 5;
+    if (m.contributingExists)
+        score += 10;
+    if (m.readmeLines > 50)
+        score += 5;
+    if (m.changelogExists)
+        score += 5;
+    score = clamp(score);
+    return {
+        score,
+        maxScore: 100,
+        status: status(score),
+        metrics: {
+            ciConfigCount: m.ciConfigCount,
+            dockerConfigCount: m.dockerConfigCount,
+            precommitConfigCount: m.precommitConfigCount,
+            makefileExists: m.makefileExists,
+            envExampleExists: m.envExampleExists,
+            npmScriptsCount: m.npmScriptsCount,
+            contributingExists: m.contributingExists,
+            changelogExists: m.changelogExists,
+        },
+        details: `CI configs: ${m.ciConfigCount}` +
+            `. Docker: ${m.dockerConfigCount > 0 ? 'yes' : 'no'}` +
+            `. Pre-commit hooks: ${m.precommitConfigCount > 0 ? 'yes' : 'no'}` +
+            `. Makefile: ${m.makefileExists ? 'yes' : 'no'}` +
+            `. .env.example: ${m.envExampleExists ? 'yes' : 'no'}` +
+            `. npm scripts: ${m.npmScriptsCount}` +
+            '.',
+    };
+}
+/** Compute overall weighted score and grade. */
+function computeOverall(dimensions) {
+    const weights = {
+        testing: 0.25,
+        quality: 0.2,
+        documentation: 0.1,
+        security: 0.2,
+        maintainability: 0.1,
+        developerExperience: 0.15,
+    };
+    const overallScore = Math.round(dimensions.testing.score * weights.testing +
+        dimensions.quality.score * weights.quality +
+        dimensions.documentation.score * weights.documentation +
+        dimensions.security.score * weights.security +
+        dimensions.maintainability.score * weights.maintainability +
+        dimensions.developerExperience.score * weights.developerExperience);
+    let grade;
+    if (overallScore >= 80)
+        grade = 'A';
+    else if (overallScore >= 60)
+        grade = 'B';
+    else if (overallScore >= 40)
+        grade = 'C';
+    else if (overallScore >= 20)
+        grade = 'D';
+    else
+        grade = 'F';
+    return { overallScore, grade };
+}
+//# sourceMappingURL=scoring.js.map

package/dist/analyzers/scoring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoring.js","sourceRoot":"","sources":["../../src/analyzers/scoring.ts"],"names":[],"mappings":";;AAqBA,8BAgDC;AAGD,oCAiEC;AAGD,gDA4CC;AAGD,sCAqDC;AAGD,oDAkEC;AAGD,4DAyCC;AAGD,wCAkCC;AA9XD,SAAS,MAAM,CAAC,KAAa;IAC3B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,WAAW,CAAC;IACpC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC;IAC/B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC;IAC/B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC;IAC/B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,KAAK,CAAC,KAAa,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,GAAG;IAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,qBAAqB;AACrB,SAAgB,SAAS,CAAC,CAAgB;IACxC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,GAAG,WAAW,CAAC;IAE5C,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;QACtB,KAAK,GAAG,CAAC,CAAC;IACZ,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC,oBAAoB;YAAE,KAAK,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI;YAAE,KAAK,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,CAAC,eAAe,KAAK,IAAI,IAAI,CAAC,CAAC,eAAe,IAAI,EAAE;YAAE,KAAK,IAAI,EAAE,CAAC;QACvE,IAAI,CAAC,CAAC,eAAe,KAAK,IAAI,IAAI,CAAC,CAAC,eAAe,IAAI,EAAE;YAAE,KAAK,IAAI,CAAC,CAAC;IACxE,CAAC;IAED,mDAAmD;IACnD,IAAI,CAAC,CAAC,kBAAkB,KAAK,IAAI,IAAI,CAAC,CAAC,kBAAkB,GAAG,GAAG,EAAE,CAAC;QAChE,KAAK,IAAI,EAAE,CAAC;IACd,CAAC;IAED,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO;QACL,KAAK;QACL,QAAQ,EAAE,GAAG;QACb,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;QACrB,OAAO,EAAE;YACP,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,GAAG;YAC5C,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,oBAAoB,EAAE,CAAC,CAAC,oBAAoB;YAC5C,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;SACzC;QACD,OAAO,EACL,CAAC,CAAC,SAAS,KAAK,CAAC;YACf,CAAC,CAAC,8BAA8B,CAAC,CAAC,WAAW,kCAAkC;YAC/E,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,mBAAmB,CAAC,CAAC,WAAW,yBAAyB,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;gBACzG,SAAS,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI;gBACvF,CAAC,CAAC,CAAC,eAAe,KAAK,IAAI;oBACzB,CAAC,CAAC,aAAa,CAAC,CAAC,eAAe,KAAK;oBACrC,CAAC,CAAC,oBAAoB,CAAC;gBACzB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,CAAC,CAAC,CAAC,kBAAkB,KAAK,IAAI,IAAI,CAAC,CAAC,kBAAkB,GAAG,GAAG;oBAC1D,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,kBAAkB,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,oDAAoD;oBAC1G,CAAC,CAAC,EAAE,CAAC;KACd,CAAC;AACJ,CAAC;AAED,0BAA0B;AAC1B,SAAgB,YAAY,CAAC,CAAgB;IAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC/C,IAAI,KAAK,GAAG,GAAG,CAAC;IAEhB,cAAc;IACd,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,GAAG,WAAW,CAAC;QAC9C,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,cAAc;IACd,IAAI,CAAC,CAAC,iBAAiB,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,CAAC,iBAAiB,GAAG,EAAE;QAAE,KAAK,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,CAAC,gBAAgB,GAAG,IAAI;QAAE,KAAK,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,CAAC,gBAAgB,GAAG,KAAK;QAAE,KAAK,IAAI,EAAE,CAAC;IAE5C,2BAA2B;IAC3B,MAAM,cAAc,GAAG,CAAC,CAAC,eAAe,GAAG,WAAW,CAAC;IACvD,IAAI,cAAc,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;SAC/B,IAAI,cAAc,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;SACpC,IAAI,cAAc,GAAG,GAAG;QAAE,KAAK,IAAI,CAAC,CAAC;IAE1C,eAAe;IACf,MAAM,UAAU,GAAG,CAAC,CAAC,YAAY,GAAG,WAAW,CAAC;IAChD,IAAI,UAAU,GAAG,EAAE;QAAE,KAAK,IAAI,EAAE,CAAC;SAC5B,IAAI,UAAU,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;SAChC,IAAI,UAAU,GAAG,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IAEpC,cAAc;IACd,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QAC9C,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,mBAAmB;IACnB,IAAI,CAAC,CAAC,kBAAkB,KAAK,IAAI,IAAI,CAAC,CAAC,kBAAkB,GAAG,EAAE;QAAE,KAAK,IAAI,EAAE,CAAC;IAC5E,IAAI,CAAC,CAAC,eAAe,KAAK,IAAI,IAAI,CAAC,CAAC,eAAe,GAAG,EAAE;QAAE,KAAK,IAAI,CAAC,CAAC;IAErE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO;QACL,KAAK;QACL,QAAQ,EAAE,GAAG;QACb,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;QACrB,OAAO,EAAE;YACP,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;YACtC,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;YACpC,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;YACxC,eAAe,EAAE,CAAC,CAAC,eAAe;SACnC;QACD,OAAO,EACL,GAAG,CAAC,CAAC,UAAU,iBAAiB,CAAC,CAAC,YAAY,WAAW;YACzD,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,KAAK,CAAC,CAAC,iBAAiB,yBAAyB;YACjD,mBAAmB,CAAC,CAAC,eAAe,KAAK,CAAC,CAAC,gBAAgB,SAAS;YACpE,KAAK,CAAC,CAAC,eAAe,2BAA2B;YACjD,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,CAAC,CAAC,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,kBAAkB,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F,GAAG;KACN,CAAC;AACJ,CAAC;AAED,2BAA2B;AAC3B,SAAgB,kBAAkB,CAAC,CAAgB;IACjD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC/C,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;QACnB,IAAI,CAAC,CAAC,WAAW,GAAG,GAAG;YAAE,KAAK,IAAI,EAAE,CAAC;aAChC,IAAI,CAAC,CAAC,WAAW,GAAG,EAAE;YAAE,KAAK,IAAI,EAAE,CAAC;aACpC,IAAI,CAAC,CAAC,WAAW,GAAG,EAAE;YAAE,KAAK,IAAI,EAAE,CAAC;;YACpC,KAAK,IAAI,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,CAAC,eAAe,GAAG,WAAW,CAAC;IACjD,IAAI,QAAQ,GAAG,GAAG;QAAE,KAAK,IAAI,EAAE,CAAC;SAC3B,IAAI,QAAQ,GAAG,GAAG;QAAE,KAAK,IAAI,EAAE,CAAC;SAChC,IAAI,QAAQ,GAAG,IAAI;QAAE,KAAK,IAAI,CAAC,CAAC;IAErC,IAAI,CAAC,CAAC,YAAY;QAAE,KAAK,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,CAAC,qBAAqB;QAAE,KAAK,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,CAAC,kBAAkB;QAAE,KAAK,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,CAAC,eAAe;QAAE,KAAK,IAAI,CAAC,CAAC;IAElC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO;QACL,KAAK;QACL,QAAQ,EAAE,GAAG;QACb,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;QACrB,OAAO,EAAE;YACP,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,GAAG,GAAG;YAC1C,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,qBAAqB,EAAE,CAAC,CAAC,qBAAqB;YAC9C,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;YACxC,eAAe,EAAE,CAAC,CAAC,eAAe;SACnC;QACD,OAAO,EACL,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE;YAClE,KAAK,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,WAAW,6BAA6B,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;YACnG,eAAe,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YAC9C,wBAAwB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YAChE,mBAAmB,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YACxD,GAAG;KACN,CAAC;AACJ,CAAC;AAED,sBAAsB;AACtB,SAAgB,aAAa,CAAC,CAAgB;IAC5C,IAAI,KAAK,GAAG,GAAG,CAAC;IAEhB,8BAA8B;IAC9B,IAAI,CAAC,CAAC,cAAc,GAAG,EAAE;QAAE,KAAK,IAAI,EAAE,CAAC;SAClC,IAAI,CAAC,CAAC,cAAc,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;SACtC,IAAI,CAAC,CAAC,cAAc,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;IAE3C,iCAAiC;IACjC,IAAI,CAAC,CAAC,eAAe,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;IAEvC,sBAAsB;IACtB,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;SAC5B,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IAErC,wBAAwB;IACxB,IAAI,CAAC,CAAC,aAAa,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;IAErC,yBAAyB;IACzB,IAAI,CAAC,CAAC,gBAAgB,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;IAExC,uCAAuC;IACvC,IAAI,CAAC,CAAC,eAAe,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,CAAC,WAAW,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;SAC9B,IAAI,CAAC,CAAC,WAAW,GAAG,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IAEvC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO;QACL,KAAK;QACL,QAAQ,EAAE,GAAG;QACb,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;QACrB,OAAO,EAAE;YACP,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;YACpC,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,YAAY,EAAE,CAAC,CAAC,YAAY;SAC7B;QACD,OAAO,EACL,GAAG,CAAC,CAAC,cAAc,kCAAkC;YACrD,KAAK,CAAC,CAAC,eAAe,4BAA4B;YAClD,KAAK,CAAC,CAAC,SAAS,kBAAkB;YAClC,KAAK,CAAC,CAAC,aAAa,4BAA4B;YAChD,KAAK,CAAC,CAAC,gBAAgB,4BAA4B;YACnD,uBAAuB,CAAC,CAAC,eAAe,cAAc,CAAC,CAAC,WAAW,UAAU,CAAC,CAAC,aAAa,YAAY,CAAC,CAAC,UAAU,MAAM;YAC1H,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,GAAG;KACN,CAAC;AACJ,CAAC;AAED,6BAA6B;AAC7B,SAAgB,oBAAoB,CAAC,CAAgB;IACnD,IAAI,KAAK,GAAG,EAAE,CAAC;IAEf,oBAAoB;IACpB,IAAI,CAAC,CAAC,gBAAgB,GAAG,KAAK;QAAE,KAAK,IAAI,EAAE,CAAC;SACvC,IAAI,CAAC,CAAC,gBAAgB,GAAG,IAAI;QAAE,KAAK,IAAI,EAAE,CAAC;SAC3C,IAAI,CAAC,CAAC,gBAAgB,GAAG,IAAI;QAAE,KAAK,IAAI,EAAE,CAAC;SAC3C,IAAI,CAAC,CAAC,gBAAgB,GAAG,IAAI;QAAE,KAAK,IAAI,CAAC,CAAC;IAE/C,IAAI,CAAC,CAAC,iBAAiB,GAAG,EAAE;QAAE,KAAK,IAAI,EAAE,CAAC;SACrC,IAAI,CAAC,CAAC,iBAAiB,GAAG,EAAE;QAAE,KAAK,IAAI,EAAE,CAAC;SAC1C,IAAI,CAAC,CAAC,iBAAiB,GAAG,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IAE7C,IAAI,CAAC,CAAC,eAAe,GAAG,GAAG;QAAE,KAAK,IAAI,EAAE,CAAC;SACpC,IAAI,CAAC,CAAC,eAAe,GAAG,GAAG;QAAE,KAAK,IAAI,CAAC,CAAC;IAE7C,uBAAuB;IACvB,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACtC,IAAI,KAAK,GAAG,EAAE;gBAAE,KAAK,IAAI,EAAE,CAAC;iBACvB,IAAI,KAAK,GAAG,EAAE;gBAAE,KAAK,IAAI,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,IAAI,CAAC,CAAC,WAAW,GAAG,EAAE;QAAE,KAAK,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,CAAC,WAAW,GAAG,EAAE;QAAE,KAAK,IAAI,CAAC,CAAC;IAEnC,qDAAqD;IACrD,IAAI,CAAC,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC7D,IAAI,QAAQ,GAAG,GAAG;YAAE,KAAK,IAAI,EAAE,CAAC;aAC3B,IAAI,QAAQ,GAAG,IAAI;YAAE,KAAK,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,GAAG,IAAI;QAAE,KAAK,IAAI,CAAC,CAAC;IAE/D,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO;QACL,KAAK;QACL,QAAQ,EAAE,GAAG;QACb,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;QACrB,OAAO,EAAE;YACP,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;YACpC,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;YACtC,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;YACtC,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;SACvC;QACD,OAAO,EACL,GAAG,CAAC,CAAC,WAAW,wBAAwB,CAAC,CAAC,WAAW,cAAc;YACnE,KAAK,CAAC,CAAC,WAAW,0BAA0B,CAAC,CAAC,MAAM,SAAS;YAC7D,mBAAmB,CAAC,CAAC,gBAAgB,QAAQ;YAC7C,KAAK,CAAC,CAAC,iBAAiB,uBAAuB;YAC/C,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,CAAC,CAAC,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,cAAc,4BAA4B,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,CAAC,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,GAAG;KACN,CAAC;AACJ,CAAC;AAED,kCAAkC;AAClC,SAAgB,wBAAwB,CAAC,CAAgB;IACvD,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,IAAI,CAAC,CAAC,aAAa,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,CAAC,iBAAiB,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,CAAC,oBAAoB,GAAG,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;IAC5C,IAAI,CAAC,CAAC,cAAc;QAAE,KAAK,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,CAAC,gBAAgB;QAAE,KAAK,IAAI,EAAE,CAAC;IAEpC,IAAI,CAAC,CAAC,eAAe,IAAI,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;SACnC,IAAI,CAAC,CAAC,eAAe,IAAI,CAAC;QAAE,KAAK,IAAI,EAAE,CAAC;SACxC,IAAI,CAAC,CAAC,eAAe,IAAI,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IAE5C,IAAI,CAAC,CAAC,kBAAkB;QAAE,KAAK,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,CAAC,WAAW,GAAG,EAAE;QAAE,KAAK,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC,eAAe;QAAE,KAAK,IAAI,CAAC,CAAC;IAElC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO;QACL,KAAK;QACL,QAAQ,EAAE,GAAG;QACb,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;QACrB,OAAO,EAAE;YACP,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;YACtC,oBAAoB,EAAE,CAAC,CAAC,oBAAoB;YAC5C,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;YACpC,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;YACxC,eAAe,EAAE,CAAC,CAAC,eAAe;SACnC;QACD,OAAO,EACL,eAAe,CAAC,CAAC,aAAa,EAAE;YAChC,aAAa,CAAC,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YACrD,uBAAuB,CAAC,CAAC,oBAAoB,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YAClE,eAAe,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YAChD,mBAAmB,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YACtD,kBAAkB,CAAC,CAAC,eAAe,EAAE;YACrC,GAAG;KACN,CAAC;AACJ,CAAC;AAED,gDAAgD;AAChD,SAAgB,cAAc,CAAC,UAO9B;IACC,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,GAAG;QACZ,aAAa,EAAE,GAAG;QAClB,QAAQ,EAAE,GAAG;QACb,eAAe,EAAE,GAAG;QACpB,mBAAmB,EAAE,IAAI;KAC1B,CAAC;IAEF,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAC7B,UAAU,CAAC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,OAAO;QACxC,UAAU,CAAC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,OAAO;QAC1C,UAAU,CAAC,aAAa,CAAC,KAAK,GAAG,OAAO,CAAC,aAAa;QACtD,UAAU,CAAC,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC,QAAQ;QAC5C,UAAU,CAAC,eAAe,CAAC,KAAK,GAAG,OAAO,CAAC,eAAe;QAC1D,UAAU,CAAC,mBAAmB,CAAC,KAAK,GAAG,OAAO,CAAC,mBAAmB,CACrE,CAAC;IAEF,IAAI,KAAkC,CAAC;IACvC,IAAI,YAAY,IAAI,EAAE;QAAE,KAAK,GAAG,GAAG,CAAC;SAC/B,IAAI,YAAY,IAAI,EAAE;QAAE,KAAK,GAAG,GAAG,CAAC;SACpC,IAAI,YAAY,IAAI,EAAE;QAAE,KAAK,GAAG,GAAG,CAAC;SACpC,IAAI,YAAY,IAAI,EAAE;QAAE,KAAK,GAAG,GAAG,CAAC;;QACpC,KAAK,GAAG,GAAG,CAAC;IAEjB,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;AACjC,CAAC"}

package/dist/analyzers/security/actions.d.ts

@@ -0,0 +1,7 @@
+import { RemediationAction } from '../remediation';
+import { SecurityReport } from './types';
+import { SecurityCounts } from './scoring';
+/** Project a SecurityReport into the counts shape used for scoring. */
+export declare function countsFromReport(report: SecurityReport): SecurityCounts;
+export declare function buildSecurityActions(report: SecurityReport): RemediationAction<SecurityCounts>[];
+//# sourceMappingURL=actions.d.ts.map

package/dist/analyzers/security/actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../../src/analyzers/security/actions.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,cAAc,EAA6B,MAAM,SAAS,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C,uEAAuE;AACvE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,cAAc,GAAG,cAAc,CAavE;AAyCD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,iBAAiB,CAAC,cAAc,CAAC,EAAE,CAwDhG"}

package/dist/analyzers/security/actions.js

@@ -0,0 +1,104 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.countsFromReport = countsFromReport;
+exports.buildSecurityActions = buildSecurityActions;
+/** Project a SecurityReport into the counts shape used for scoring. */
+function countsFromReport(report) {
+    const s = report.summary.findings;
+    const d = report.summary.dependencies;
+    return {
+        critical: s.critical,
+        high: s.high,
+        medium: s.medium,
+        low: s.low,
+        depCritical: d.critical,
+        depHigh: d.high,
+        depMedium: d.medium,
+        depLow: d.low,
+    };
+}
+/** Deduct N findings of the given severity from counts, clamped to 0. */
+function deductSeverity(counts, severity, n, depsOnly = false) {
+    const key = depsOnly
+        ? ('dep' + severity[0].toUpperCase() + severity.slice(1))
+        : severity;
+    return { ...counts, [key]: Math.max(0, counts[key] - n) };
+}
+/** Convert a finding into generic evidence. */
+function findingToEvidence(f) {
+    return {
+        file: f.file,
+        line: f.line,
+        rule: f.rule,
+        tool: f.tool,
+        message: `${f.severity.toUpperCase()}: ${f.title}${f.cwe ? ` (${f.cwe})` : ''}`,
+    };
+}
+/** Group findings by rule id; sorted within-group by severity then file. */
+function groupByRule(findings) {
+    const groups = new Map();
+    const order = { critical: 0, high: 1, medium: 2, low: 3 };
+    for (const f of findings) {
+        const arr = groups.get(f.rule) || [];
+        arr.push(f);
+        groups.set(f.rule, arr);
+    }
+    for (const arr of groups.values()) {
+        arr.sort((a, b) => order[a.severity] - order[b.severity] || a.file.localeCompare(b.file));
+    }
+    return groups;
+}
+function buildSecurityActions(report) {
+    const actions = [];
+    const groups = groupByRule(report.findings);
+    // One action per rule group — fix ALL findings matching that rule.
+    for (const [rule, findings] of groups) {
+        const topSeverity = findings[0].severity;
+        const counts = {
+            critical: findings.filter((f) => f.severity === 'critical').length,
+            high: findings.filter((f) => f.severity === 'high').length,
+            medium: findings.filter((f) => f.severity === 'medium').length,
+            low: findings.filter((f) => f.severity === 'low').length,
+        };
+        actions.push({
+            id: `security.fix-${rule}`,
+            title: `Fix ${findings.length} ${rule} finding${findings.length === 1 ? '' : 's'} (${topSeverity.toUpperCase()})`,
+            rationale: `Rule ${rule} (${findings[0].tool}). ${findings[0].cwe || 'No CWE tag'}.`,
+            evidence: findings.slice(0, 50).map(findingToEvidence),
+            patch: (c) => {
+                let next = c;
+                next = deductSeverity(next, 'critical', counts.critical);
+                next = deductSeverity(next, 'high', counts.high);
+                next = deductSeverity(next, 'medium', counts.medium);
+                next = deductSeverity(next, 'low', counts.low);
+                return next;
+            },
+        });
+    }
+    // Dependency updates — one action covering all dep vulns.
+    const d = report.summary.dependencies;
+    if (d.total > 0 && d.tool) {
+        actions.push({
+            id: 'security.update-vulnerable-deps',
+            title: `Update ${d.total} vulnerable dependenc${d.total === 1 ? 'y' : 'ies'} (${d.critical}C ${d.high}H ${d.medium}M ${d.low}L)`,
+            rationale: `Run \`${d.tool} fix\` or bump affected packages. Most CVEs are fixed in newer minor versions.`,
+            evidence: [
+                {
+                    file: d.tool === 'npm-audit' ? 'package-lock.json' : 'requirements.txt',
+                    rule: 'dep-vuln',
+                    tool: d.tool,
+                    message: `${d.total} vulnerable dependencies`,
+                },
+            ],
+            patch: (c) => ({
+                ...c,
+                depCritical: 0,
+                depHigh: 0,
+                depMedium: 0,
+                depLow: 0,
+            }),
+        });
+    }
+    return actions;
+}
+//# sourceMappingURL=actions.js.map

package/dist/analyzers/security/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../../src/analyzers/security/actions.ts"],"names":[],"mappings":";;AAYA,4CAaC;AAyCD,oDAwDC;AA/GD,uEAAuE;AACvE,SAAgB,gBAAgB,CAAC,MAAsB;IACrD,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;IACtC,OAAO;QACL,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,WAAW,EAAE,CAAC,CAAC,QAAQ;QACvB,OAAO,EAAE,CAAC,CAAC,IAAI;QACf,SAAS,EAAE,CAAC,CAAC,MAAM;QACnB,MAAM,EAAE,CAAC,CAAC,GAAG;KACd,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,SAAS,cAAc,CACrB,MAAsB,EACtB,QAAkB,EAClB,CAAS,EACT,QAAQ,GAAG,KAAK;IAEhB,MAAM,GAAG,GAAG,QAAQ;QAClB,CAAC,CAAE,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAA0B;QACnF,CAAC,CAAE,QAAiC,CAAC;IACvC,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,+CAA+C;AAC/C,SAAS,iBAAiB,CAAC,CAAkB;IAC3C,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;KAChF,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,SAAS,WAAW,CAAC,QAA2B;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6B,CAAC;IACpD,MAAM,KAAK,GAA6B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACpF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,oBAAoB,CAAC,MAAsB;IACzD,MAAM,OAAO,GAAwC,EAAE,CAAC;IACxD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE5C,mEAAmE;IACnE,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACzC,MAAM,MAAM,GAAG;YACb,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;YAClE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;YAC1D,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM;YAC9D,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM;SACzD,CAAC;QAEF,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,gBAAgB,IAAI,EAAE;YAC1B,KAAK,EAAE,OAAO,QAAQ,CAAC,MAAM,IAAI,IAAI,WAAW,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,WAAW,CAAC,WAAW,EAAE,GAAG;YACjH,SAAS,EAAE,QAAQ,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,YAAY,GAAG;YACpF,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;YACtD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE;gBACX,IAAI,IAAI,GAAG,CAAC,CAAC;gBACb,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACzD,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBACjD,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBACrD,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC/C,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,0DAA0D;IAC1D,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;IACtC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,iCAAiC;YACrC,KAAK,EAAE,UAAU,CAAC,CAAC,KAAK,wBAAwB,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,GAAG,IAAI;YAChI,SAAS,EAAE,SAAS,CAAC,CAAC,IAAI,gFAAgF;YAC1G,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,kBAAkB;oBACvE,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,0BAA0B;iBAC9C;aACF;YACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACb,GAAG,CAAC;gBACJ,WAAW,EAAE,CAAC;gBACd,OAAO,EAAE,CAAC;gBACV,SAAS,EAAE,CAAC;gBACZ,MAAM,EAAE,CAAC;aACV,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/analyzers/security/detailed.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Detailed security report — JSON schema + markdown formatter.
+ */
+import { SecurityReport } from './types';
+import { RankedAction } from '../remediation';
+import { SecurityCounts } from './scoring';
+export interface SecurityDetailedReport extends SecurityReport {
+    schemaVersion: string;
+    securityScore: number;
+    actions: Array<RankedAction<SecurityCounts>>;
+}
+export declare function buildSecurityDetailed(report: SecurityReport): SecurityDetailedReport;
+export declare function formatSecurityDetailedMarkdown(detailed: SecurityDetailedReport, elapsed: string): string;
+//# sourceMappingURL=detailed.d.ts.map

package/dist/analyzers/security/detailed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detailed.d.ts","sourceRoot":"","sources":["../../../src/analyzers/security/detailed.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,cAAc,EAA6B,MAAM,SAAS,CAAC;AACpE,OAAO,EAAE,YAAY,EAAQ,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,cAAc,EAAuB,MAAM,WAAW,CAAC;AAEhE,MAAM,WAAW,sBAAuB,SAAQ,cAAc;IAC5D,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC;CAC9C;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,cAAc,GAAG,sBAAsB,CASpF;AAID,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,sBAAsB,EAChC,OAAO,EAAE,MAAM,GACd,MAAM,CAmHR"}