crx-gate 0.1.0 → 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 crx-gate contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,23 +1,39 @@
 # crx-gate
 
-Zero-Dependency CLI for Pre-Commit Extension Security, Permission Blast-Radius Auditing, and CWS Rejection Prediction.
+Static security analyzer and permission linter for Chrome extensions. Statically inspects unpacked extension directories, `.zip` bundles, or `.crx` binaries in under 3ms.
 
-## Usage with NPX
+[![GitHub](https://img.shields.io/badge/GitHub-jaw0r3k%2Fcrx--gate-blue?logo=github)](https://github.com/jaw0r3k/crx-gate)
+[![License: MIT OR Apache-2.0](https://img.shields.io/badge/License-MIT%20OR%20Apache--2.0-blue.svg)](https://github.com/jaw0r3k/crx-gate/blob/master/LICENSE)
 
-Run without installing:
+---
 
-```bash
-npx crx-gate audit ./path-to-extension
-```
+## Instant usage via `npx`
 
-Diff two extension builds:
+No installation required:
 
 ```bash
-npx crx-gate diff ./v1.0.0 ./v1.1.0
-```
+# Audit an extension directory
+npx crx-gate audit ./dist
 
-Export SARIF report for GitHub Code Scanning:
+# Generate standalone interactive HTML report
+npx crx-gate audit ./dist --format html --output report.html
 
-```bash
+# Audit a packed .crx binary archive
+npx crx-gate audit ./extension.crx
+
+# Diff two versions to prevent permission creep
+npx crx-gate diff ./v1.0.0 ./v1.1.0 --fail-on-degradation
+
+# Export SARIF for GitHub Code Scanning
 npx crx-gate audit ./dist --format sarif --output crx-gate.sarif
+
+# List all built-in rules
+npx crx-gate rules
 ```
+
+---
+
+## Documentation
+
+Full documentation, GitHub Actions setup, and pre-commit hook integrations:
+[https://github.com/jaw0r3k/crx-gate](https://github.com/jaw0r3k/crx-gate)

package/bin/crx-gate.js

@@ -6,8 +6,8 @@ const path = require("path");
 const os = require("os");
 const https = require("https");
 
-const VERSION = "0.1.0";
-const REPO = "crx-gate/crx-gate";
+const VERSION = "0.2.0";
+const REPO = "jaw0r3k/crx-gate";
 
 function getBinaryName() {
   const platform = os.platform();
@@ -64,6 +64,26 @@ function runBinary(binPath, args) {
   process.exit(result.status !== null ? result.status : 0);
 }
 
+function downloadBinary(url, dest, cb) {
+  https.get(url, (res) => {
+    if (res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
+      downloadBinary(res.headers.location, dest, cb);
+      return;
+    }
+    if (res.statusCode !== 200) {
+      cb(new Error(`Failed to download binary: HTTP ${res.statusCode}`));
+      return;
+    }
+    const file = fs.createWriteStream(dest);
+    res.pipe(file);
+    file.on("finish", () => {
+      file.close(() => cb(null));
+    });
+  }).on("error", (err) => {
+    cb(err);
+  });
+}
+
 function main() {
   const args = process.argv.slice(2);
   const binPath = getLocalBinaryPath();
@@ -73,19 +93,46 @@ function main() {
     return;
   }
 
-  console.log(`crx-gate: Standalone binary not found locally. Running native cargo build or download...`);
-  // Try running via cargo if installed
-  const cargoRun = spawnSync("cargo", ["run", "--release", "--quiet", "--", ...args], {
-    stdio: "inherit",
-    cwd: path.join(__dirname, "..", ".."),
-  });
+  const { artifact, binaryName, isZip } = getBinaryName();
+  const cacheDir = path.join(os.homedir(), ".crx-gate", `v${VERSION}`);
+  fs.mkdirSync(cacheDir, { recursive: true });
 
-  if (cargoRun.status === 0) {
-    process.exit(0);
-  }
+  const archivePath = path.join(cacheDir, artifact);
+  const downloadUrl = `https://github.com/${REPO}/releases/download/v${VERSION}/${artifact}`;
 
-  console.error(`crx-gate error: Could not locate binary. Install via cargo: 'cargo install crx-gate' or download from GitHub releases.`);
-  process.exit(1);
+  console.log(`crx-gate: Fetching pre-compiled release binary (v${VERSION})...`);
+  downloadBinary(downloadUrl, archivePath, (err) => {
+    if (!err) {
+      try {
+        if (isZip) {
+          spawnSync("powershell", ["-Command", `Expand-Archive -Path '${archivePath}' -DestinationPath '${cacheDir}' -Force`]);
+        } else {
+          spawnSync("tar", ["-xzf", archivePath, "-C", cacheDir]);
+        }
+        if (fs.existsSync(binPath)) {
+          if (process.platform !== "win32") {
+            fs.chmodSync(binPath, 0o755);
+          }
+          try { fs.unlinkSync(archivePath); } catch (_) {}
+          runBinary(binPath, args);
+          return;
+        }
+      } catch (_) {}
+    }
+
+    // Fallback to cargo run if developing in repo
+    const cargoRun = spawnSync("cargo", ["run", "--release", "--quiet", "--", ...args], {
+      stdio: "inherit",
+      cwd: path.join(__dirname, "..", ".."),
+    });
+
+    if (cargoRun.status === 0) {
+      process.exit(0);
+    }
+
+    console.error(`crx-gate error: Could not run or download binary. Please install via cargo: 'cargo install crx-gate'`);
+    process.exit(1);
+  });
 }
 
 main();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "crx-gate",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Zero-dependency pre-commit extension security, permission blast-radius auditing, and CWS rejection prediction",
   "bin": {
     "crx-gate": "bin/crx-gate.js"
@@ -20,10 +20,23 @@
   ],
   "author": "crx-gate contributors",
   "license": "MIT",
+  "homepage": "https://github.com/jaw0r3k/crx-gate#readme",
+  "bugs": {
+    "url": "https://github.com/jaw0r3k/crx-gate/issues"
+  },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/crx-gate/crx-gate.git"
+    "url": "git+https://github.com/jaw0r3k/crx-gate.git"
+  },
+  "funding": {
+    "type": "individual",
+    "url": "https://github.com/jaw0r3k/crx-gate"
   },
+  "files": [
+    "bin",
+    "README.md",
+    "LICENSE"
+  ],
   "engines": {
     "node": ">=16.0.0"
   }