cryptoserve 0.2.0 → 0.2.1

package/lib/client.mjs

@@ -120,12 +120,12 @@ export async function login(serverUrl = DEFAULT_SERVER) {
       const authUrl = `${server}/auth/cli?redirect=http://localhost:${CALLBACK_PORT}/callback`;
       console.log(`\nOpen this URL to log in:\n  ${authUrl}\n`);
 
-      // Try to open browser
-      const { exec } = import('node:child_process').then(m => {
+      // Try to open browser (use spawn with array args to prevent command injection)
+      import('node:child_process').then(m => {
         const cmd = process.platform === 'darwin' ? 'open'
           : process.platform === 'win32' ? 'start'
           : 'xdg-open';
-        m.exec(`${cmd} "${authUrl}"`);
+        m.spawn(cmd, [authUrl], { stdio: 'ignore', detached: true }).unref();
       });
     });
 

package/lib/init.mjs

@@ -142,13 +142,13 @@ function protectAider(projectDir, result) {
 }
 
 function addInstructions(filePath, result) {
-  let content = existsSync(filePath) ? readFileSync(filePath, 'utf-8') : '';
+  const existed = existsSync(filePath);
+  let content = existed ? readFileSync(filePath, 'utf-8') : '';
   if (content.includes(MARKER)) return;
 
   content += buildSecretlessInstructions();
   writeFileSync(filePath, content);
 
-  const existed = existsSync(filePath);
   if (existed) {
     result.filesModified.push(filePath);
   } else {

package/lib/pqc-engine.mjs

@@ -531,7 +531,7 @@ function calculateQuantumScore(libraries, classifications) {
   // Score by individual algorithm classifications, not library count.
   // A project with 5 symmetric + 1 asymmetric algorithm is mostly ready, not 0%.
   const safe = classifications.filter(
-    c => c.category !== 'asymmetric' || c.category === 'pqc'
+    c => c.category !== 'asymmetric'
   ).length;
   const vulnerable = classifications.filter(
     c => c.category === 'asymmetric'

package/lib/scanner.mjs

@@ -214,8 +214,9 @@ export function scanProject(projectDir, options = {}) {
 
       const langResult = scanSourceFile(filePath, content, language);
       for (const algo of langResult.algorithms) {
-        if (!seenSourceAlgos.has(algo.algorithm)) {
-          seenSourceAlgos.add(algo.algorithm);
+        const sourceAlgoKey = `${algo.algorithm}:${language}`;
+        if (!seenSourceAlgos.has(sourceAlgoKey)) {
+          seenSourceAlgos.add(sourceAlgoKey);
           const dbEntry = lookupAlgorithm(algo.algorithm);
           results.sourceAlgorithms.push({
             algorithm: algo.algorithm,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cryptoserve",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "CryptoServe CLI - Cryptographic scanning, PQC analysis, encryption, and local key management",
   "type": "module",
   "bin": {