cryptoserve 0.1.2 → 0.1.3

package/lib/pqc-engine.mjs

@@ -487,7 +487,15 @@ function calculateQuantumScore(libraries, classifications) {
 
   if (total === 0) return 100.0;
 
-  let score = (safe / total) * 100;
+  // Two scoring approaches:
+  // - Ratio: safe / total (good for large samples)
+  // - Penalty: 100 - 30 per vulnerable (good for small samples)
+  // Small samples (≤3 algorithms) produce extreme ratios (1/1 = 0% or 100%),
+  // so use whichever approach gives the more representative score.
+  const ratioScore = (safe / total) * 100;
+  const penaltyScore = Math.max(0, 100 - vulnerable * 30);
+  let score = total <= 3 ? Math.max(ratioScore, penaltyScore) : ratioScore;
+
   if (classifications.some(c => c.category === 'pqc')) {
     score = Math.min(100, score + 20);
   }

package/lib/scanner.mjs

@@ -179,9 +179,26 @@ export function scanProject(projectDir) {
     filesScanned: 0,
   };
 
-  // 1. Scan package.json for crypto dependencies
-  const pkgPath = join(projectDir, 'package.json');
-  if (existsSync(pkgPath)) {
+  // 1. Scan package.json for crypto dependencies (root + monorepo workspaces)
+  const pkgPaths = [join(projectDir, 'package.json')];
+  // Check common monorepo locations for nested package.json files
+  const monorepoGlobs = ['apps', 'packages', 'libs', 'modules', 'services'];
+  for (const sub of monorepoGlobs) {
+    const subDir = join(projectDir, sub);
+    try {
+      const entries = readdirSync(subDir, { withFileTypes: true });
+      for (const entry of entries) {
+        if (entry.isDirectory()) {
+          const nested = join(subDir, entry.name, 'package.json');
+          if (existsSync(nested)) pkgPaths.push(nested);
+        }
+      }
+    } catch { /* dir doesn't exist */ }
+  }
+
+  const seenPkgs = new Set();
+  for (const pkgPath of pkgPaths) {
+    if (!existsSync(pkgPath)) continue;
     try {
       const pkg = JSON.parse(readFileSync(pkgPath, 'utf-8'));
       const allDeps = {
@@ -190,7 +207,8 @@ export function scanProject(projectDir) {
       };
 
       for (const [name, version] of Object.entries(allDeps)) {
-        if (name in CRYPTO_PACKAGES) {
+        if (name in CRYPTO_PACKAGES && !seenPkgs.has(name)) {
+          seenPkgs.add(name);
           const info = CRYPTO_PACKAGES[name];
           results.libraries.push({
             name,
@@ -198,7 +216,7 @@ export function scanProject(projectDir) {
             algorithms: info.algorithms,
             quantumRisk: info.quantumRisk,
             category: info.category,
-            source: 'package.json',
+            source: pkgPath.replace(projectDir + '/', ''),
           });
         }
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cryptoserve",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "CryptoServe CLI - Cryptographic scanning, PQC analysis, encryption, and local key management",
   "type": "module",
   "bin": {