dotenv-diff 2.4.7 → 2.4.9
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +19 -0
- package/dist/src/cli/run.js +2 -2
- package/dist/src/cli/run.js.map +1 -1
- package/dist/src/commands/compare.js +1 -1
- package/dist/src/commands/compare.js.map +1 -1
- package/dist/src/commands/ensureFilesOrPrompt.d.ts +22 -0
- package/dist/src/commands/ensureFilesOrPrompt.d.ts.map +1 -0
- package/dist/src/commands/ensureFilesOrPrompt.js +76 -0
- package/dist/src/commands/ensureFilesOrPrompt.js.map +1 -0
- package/dist/src/commands/scanUsage.js +6 -6
- package/dist/src/commands/scanUsage.js.map +1 -1
- package/dist/src/config/types.d.ts +3 -2
- package/dist/src/config/types.d.ts.map +1 -1
- package/dist/src/config/types.js +2 -2
- package/dist/src/config/types.js.map +1 -1
- package/dist/src/core/computeHealthScore.d.ts.map +1 -1
- package/dist/src/core/computeHealthScore.js +3 -0
- package/dist/src/core/computeHealthScore.js.map +1 -1
- package/dist/src/core/detectInconsistentNaming.js +0 -7
- package/dist/src/core/detectInconsistentNaming.js.map +1 -1
- package/dist/src/core/duplicates.d.ts +5 -4
- package/dist/src/core/duplicates.d.ts.map +1 -0
- package/dist/src/core/duplicates.js +5 -2
- package/dist/src/core/duplicates.js.map +1 -0
- package/dist/src/core/envDiscovery.d.ts +19 -0
- package/dist/src/core/envDiscovery.d.ts.map +1 -0
- package/dist/src/core/envDiscovery.js +81 -0
- package/dist/src/core/envDiscovery.js.map +1 -0
- package/dist/src/core/exampleSecretDetector.d.ts.map +1 -1
- package/dist/src/core/exampleSecretDetector.js +2 -2
- package/dist/src/core/exampleSecretDetector.js.map +1 -1
- package/dist/src/core/frameworks/frameworkDetector.d.ts +14 -0
- package/dist/src/core/frameworks/frameworkDetector.d.ts.map +1 -0
- package/dist/src/core/frameworks/frameworkDetector.js +40 -0
- package/dist/src/core/frameworks/frameworkDetector.js.map +1 -0
- package/dist/src/core/frameworks/frameworkValidator.d.ts +10 -0
- package/dist/src/core/frameworks/frameworkValidator.d.ts.map +1 -0
- package/dist/src/core/frameworks/frameworkValidator.js +21 -0
- package/dist/src/core/frameworks/frameworkValidator.js.map +1 -0
- package/dist/src/core/frameworks/nextJsRules.d.ts.map +1 -1
- package/dist/src/core/frameworks/nextJsRules.js +4 -28
- package/dist/src/core/frameworks/nextJsRules.js.map +1 -1
- package/dist/src/core/frameworks/sveltekitRules.d.ts.map +1 -1
- package/dist/src/core/frameworks/sveltekitRules.js +37 -30
- package/dist/src/core/frameworks/sveltekitRules.js.map +1 -1
- package/dist/src/core/parseEnv.d.ts.map +1 -1
- package/dist/src/core/parseEnv.js +19 -1
- package/dist/src/core/parseEnv.js.map +1 -1
- package/dist/src/core/patterns.d.ts.map +1 -1
- package/dist/src/core/patterns.js +24 -1
- package/dist/src/core/patterns.js.map +1 -1
- package/dist/src/core/processComparisonFile.js +1 -1
- package/dist/src/core/processComparisonFile.js.map +1 -1
- package/dist/src/core/scan/scanJsonOutput.d.ts +85 -0
- package/dist/src/core/scan/scanJsonOutput.d.ts.map +1 -0
- package/dist/src/core/scan/scanJsonOutput.js +97 -0
- package/dist/src/core/scan/scanJsonOutput.js.map +1 -0
- package/dist/src/core/scan/secretDetectors.d.ts +28 -0
- package/dist/src/core/scan/secretDetectors.d.ts.map +1 -0
- package/dist/src/core/scan/secretDetectors.js +272 -0
- package/dist/src/core/scan/secretDetectors.js.map +1 -0
- package/dist/src/core/scanFile.d.ts.map +1 -1
- package/dist/src/core/scanFile.js +11 -1
- package/dist/src/core/scanFile.js.map +1 -1
- package/dist/src/core/security/entropy.d.ts +8 -0
- package/dist/src/core/security/entropy.d.ts.map +1 -0
- package/dist/src/core/security/entropy.js +23 -0
- package/dist/src/core/security/entropy.js.map +1 -0
- package/dist/src/core/security/exampleSecretDetector.d.ts +13 -0
- package/dist/src/core/security/exampleSecretDetector.d.ts.map +1 -0
- package/dist/src/core/security/exampleSecretDetector.js +61 -0
- package/dist/src/core/security/exampleSecretDetector.js.map +1 -0
- package/dist/src/core/security/secretDetectors.d.ts +28 -0
- package/dist/src/core/security/secretDetectors.d.ts.map +1 -0
- package/dist/src/core/security/secretDetectors.js +292 -0
- package/dist/src/core/security/secretDetectors.js.map +1 -0
- package/dist/src/index.js +0 -7
- package/dist/src/index.js.map +1 -1
- package/dist/src/services/printScanResult.d.ts +17 -0
- package/dist/src/services/printScanResult.d.ts.map +1 -0
- package/dist/src/services/printScanResult.js +127 -0
- package/dist/src/services/printScanResult.js.map +1 -0
- package/dist/src/services/scanCodebase.d.ts +8 -0
- package/dist/src/services/scanCodebase.d.ts.map +1 -0
- package/dist/src/services/scanCodebase.js +110 -0
- package/dist/src/services/scanCodebase.js.map +1 -0
- package/dist/src/ui/scan/printConsolelogWarning.d.ts.map +1 -1
- package/dist/src/ui/scan/printConsolelogWarning.js +5 -4
- package/dist/src/ui/scan/printConsolelogWarning.js.map +1 -1
- package/dist/src/ui/scan/printExampleWarnings.d.ts +1 -1
- package/dist/src/ui/scan/printExampleWarnings.d.ts.map +1 -1
- package/dist/src/ui/scan/printFrameworkWarnings.d.ts.map +1 -1
- package/dist/src/ui/scan/printFrameworkWarnings.js +4 -2
- package/dist/src/ui/scan/printFrameworkWarnings.js.map +1 -1
- package/dist/src/ui/scan/printSecrets.d.ts +1 -1
- package/dist/src/ui/scan/printSecrets.d.ts.map +1 -1
- package/package.json +8 -6
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"frameworkDetector.d.ts","sourceRoot":"","sources":["../../../../src/core/frameworks/frameworkDetector.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,UAAU,kBAAkB;IAC1B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,CAkC/D"}
|
|
@@ -0,0 +1,40 @@
|
|
|
1
|
+
import fs from 'fs';
|
|
2
|
+
import path from 'path';
|
|
3
|
+
/**
|
|
4
|
+
* Detects the framework being used in the project
|
|
5
|
+
* by checking package.json and file structure
|
|
6
|
+
* @param cwd The current working directory of the project
|
|
7
|
+
* @returns Detected framework and its version (if applicable)
|
|
8
|
+
*/
|
|
9
|
+
export function detectFramework(cwd) {
|
|
10
|
+
try {
|
|
11
|
+
const packageJsonPath = path.join(cwd, 'package.json');
|
|
12
|
+
if (!fs.existsSync(packageJsonPath)) {
|
|
13
|
+
return { framework: 'unknown' };
|
|
14
|
+
}
|
|
15
|
+
const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf-8'));
|
|
16
|
+
const deps = {
|
|
17
|
+
...packageJson.dependencies,
|
|
18
|
+
...packageJson.devDependencies,
|
|
19
|
+
};
|
|
20
|
+
// Check for SvelteKit
|
|
21
|
+
if (deps['@sveltejs/kit']) {
|
|
22
|
+
return {
|
|
23
|
+
framework: 'sveltekit',
|
|
24
|
+
version: deps['@sveltejs/kit'],
|
|
25
|
+
};
|
|
26
|
+
}
|
|
27
|
+
// Check for Next.js
|
|
28
|
+
if (deps['next']) {
|
|
29
|
+
return {
|
|
30
|
+
framework: 'nextjs',
|
|
31
|
+
version: deps['next'],
|
|
32
|
+
};
|
|
33
|
+
}
|
|
34
|
+
return { framework: 'unknown' };
|
|
35
|
+
}
|
|
36
|
+
catch {
|
|
37
|
+
return { framework: 'unknown' };
|
|
38
|
+
}
|
|
39
|
+
}
|
|
40
|
+
//# sourceMappingURL=frameworkDetector.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"frameworkDetector.js","sourceRoot":"","sources":["../../../../src/core/frameworks/frameworkDetector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAQxB;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAEvD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG;YACX,GAAG,WAAW,CAAC,YAAY;YAC3B,GAAG,WAAW,CAAC,eAAe;SAC/B,CAAC;QAEF,sBAAsB;QACtB,IAAI,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,SAAS,EAAE,WAAW;gBACtB,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC;aAC/B,CAAC;QACJ,CAAC;QAED,oBAAoB;QACpB,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACjB,OAAO;gBACL,SAAS,EAAE,QAAQ;gBACnB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC;aACtB,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAClC,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
import type { EnvUsage, FrameworkWarning } from '../../config/types.js';
|
|
2
|
+
/**
|
|
3
|
+
* Validates environment variable usages against framework-specific rules
|
|
4
|
+
* @param usages - Array of environment variable usages
|
|
5
|
+
* @param cwd - Current working directory to detect framework
|
|
6
|
+
* @param fileContentMap - Map of file paths to their content for detecting client components
|
|
7
|
+
* @returns Array of framework-specific warnings
|
|
8
|
+
*/
|
|
9
|
+
export declare function frameworkValidator(usages: EnvUsage[], cwd: string, fileContentMap?: Map<string, string>): FrameworkWarning[];
|
|
10
|
+
//# sourceMappingURL=frameworkValidator.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"frameworkValidator.d.ts","sourceRoot":"","sources":["../../../../src/core/frameworks/frameworkValidator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAIxE;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,QAAQ,EAAE,EAClB,GAAG,EAAE,MAAM,EACX,cAAc,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GACnC,gBAAgB,EAAE,CAUpB"}
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
import { detectFramework } from './frameworkDetector.js';
|
|
2
|
+
import { applySvelteKitRules, applyNextJsRules } from './index.js';
|
|
3
|
+
/**
|
|
4
|
+
* Validates environment variable usages against framework-specific rules
|
|
5
|
+
* @param usages - Array of environment variable usages
|
|
6
|
+
* @param cwd - Current working directory to detect framework
|
|
7
|
+
* @param fileContentMap - Map of file paths to their content for detecting client components
|
|
8
|
+
* @returns Array of framework-specific warnings
|
|
9
|
+
*/
|
|
10
|
+
export function frameworkValidator(usages, cwd, fileContentMap) {
|
|
11
|
+
const warnings = [];
|
|
12
|
+
const { framework } = detectFramework(cwd);
|
|
13
|
+
for (const u of usages) {
|
|
14
|
+
if (framework === 'sveltekit')
|
|
15
|
+
applySvelteKitRules(u, warnings);
|
|
16
|
+
if (framework === 'nextjs')
|
|
17
|
+
applyNextJsRules(u, warnings, fileContentMap);
|
|
18
|
+
}
|
|
19
|
+
return warnings;
|
|
20
|
+
}
|
|
21
|
+
//# sourceMappingURL=frameworkValidator.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"frameworkValidator.js","sourceRoot":"","sources":["../../../../src/core/frameworks/frameworkValidator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAkB,EAClB,GAAW,EACX,cAAoC;IAEpC,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,MAAM,EAAE,SAAS,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAE3C,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,SAAS,KAAK,WAAW;YAAE,mBAAmB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAChE,IAAI,SAAS,KAAK,QAAQ;YAAE,gBAAgB,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"nextJsRules.d.ts","sourceRoot":"","sources":["../../../../src/core/frameworks/nextJsRules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAGxE;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,CAAC,EAAE,QAAQ,EACX,QAAQ,EAAE,gBAAgB,EAAE,EAC5B,cAAc,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GACnC,IAAI,
|
|
1
|
+
{"version":3,"file":"nextJsRules.d.ts","sourceRoot":"","sources":["../../../../src/core/frameworks/nextJsRules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAGxE;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,CAAC,EAAE,QAAQ,EACX,QAAQ,EAAE,gBAAgB,EAAE,EAC5B,cAAc,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GACnC,IAAI,CAkEN"}
|
|
@@ -24,34 +24,10 @@ export function applyNextJsRules(u, warnings, fileContentMap) {
|
|
|
24
24
|
/^use client;?$/m.test(firstLines);
|
|
25
25
|
}
|
|
26
26
|
}
|
|
27
|
-
//
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
u.context.includes('"use client"') ||
|
|
32
|
-
u.context.includes("'use client'");
|
|
33
|
-
}
|
|
34
|
-
// Detect server-only files
|
|
35
|
-
const isServerOnlyFile = normalizedFile.includes('/app/api/') ||
|
|
36
|
-
normalizedFile.includes('/pages/api/') ||
|
|
37
|
-
normalizedFile.endsWith('.server.ts') ||
|
|
38
|
-
normalizedFile.endsWith('.server.tsx') ||
|
|
39
|
-
normalizedFile.endsWith('.server.js') ||
|
|
40
|
-
normalizedFile.endsWith('.server.jsx') ||
|
|
41
|
-
normalizedFile.endsWith('middleware.ts') ||
|
|
42
|
-
normalizedFile.endsWith('middleware.js') ||
|
|
43
|
-
/\/route\.(ts|js)$/.test(normalizedFile);
|
|
44
|
-
// Server-only files should NOT use NEXT_PUBLIC_ variables
|
|
45
|
-
if (isServerOnlyFile && u.variable.startsWith('NEXT_PUBLIC_')) {
|
|
46
|
-
warnings.push({
|
|
47
|
-
variable: u.variable,
|
|
48
|
-
reason: 'NEXT_PUBLIC_ variable used in server-only file',
|
|
49
|
-
file: normalizedFile,
|
|
50
|
-
line: u.line,
|
|
51
|
-
framework: 'nextjs',
|
|
52
|
-
});
|
|
53
|
-
return; // Stop processing other rules for this usage
|
|
54
|
-
}
|
|
27
|
+
// Pages Router: all non-API files are client components
|
|
28
|
+
const isPagesRouterClientFile = /(^|\/)pages\//.test(normalizedFile) &&
|
|
29
|
+
!/(^|\/)pages\/api\//.test(normalizedFile);
|
|
30
|
+
isClientComponent ||= isPagesRouterClientFile;
|
|
55
31
|
// Client components MUST use NEXT_PUBLIC_ prefix
|
|
56
32
|
if (isClientComponent && !u.variable.startsWith('NEXT_PUBLIC_')) {
|
|
57
33
|
warnings.push({
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"nextJsRules.js","sourceRoot":"","sources":["../../../../src/core/frameworks/nextJsRules.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,CAAW,EACX,QAA4B,EAC5B,cAAoC;IAEpC,2DAA2D;IAC3D,MAAM,cAAc,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAE7C,sBAAsB;IACtB,IAAI,cAAc,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,6DAA6D;IAC7D,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,WAAW,EAAE,CAAC;YAChB,mDAAmD;YACnD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnE,iBAAiB;gBACf,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC;oBACrC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,
|
|
1
|
+
{"version":3,"file":"nextJsRules.js","sourceRoot":"","sources":["../../../../src/core/frameworks/nextJsRules.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,CAAW,EACX,QAA4B,EAC5B,cAAoC;IAEpC,2DAA2D;IAC3D,MAAM,cAAc,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAE7C,sBAAsB;IACtB,IAAI,cAAc,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,6DAA6D;IAC7D,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,WAAW,EAAE,CAAC;YAChB,mDAAmD;YACnD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnE,iBAAiB;gBACf,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC;oBACrC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,wDAAwD;IACxD,MAAM,uBAAuB,GAC3B,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC;QACpC,CAAC,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAE7C,iBAAiB,KAAK,uBAAuB,CAAC;IAE9C,iDAAiD;IACjD,IAAI,iBAAiB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChE,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,gDAAgD;YACxD,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;QACH,OAAO,CAAC,6CAA6C;IACvD,CAAC;IAED,oCAAoC;IACpC,IAAI,CAAC,CAAC,OAAO,KAAK,iBAAiB,EAAE,CAAC;QACpC,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,6DAA6D;YACrE,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;QACH,OAAO,CAAC,6CAA6C;IACvD,CAAC;IAED,mDAAmD;IACnD,IACE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC;QACrC,mCAAmC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EACpD,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,iCAAiC;YACzC,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;QACH,OAAO,CAAC,6CAA6C;IACvD,CAAC;AACH,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sveltekitRules.d.ts","sourceRoot":"","sources":["../../../../src/core/frameworks/sveltekitRules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAGxE;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,CAAC,EAAE,QAAQ,EACX,QAAQ,EAAE,gBAAgB,EAAE,GAC3B,IAAI,
|
|
1
|
+
{"version":3,"file":"sveltekitRules.d.ts","sourceRoot":"","sources":["../../../../src/core/frameworks/sveltekitRules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAGxE;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,CAAC,EAAE,QAAQ,EACX,QAAQ,EAAE,gBAAgB,EAAE,GAC3B,IAAI,CAsHN"}
|
|
@@ -11,6 +11,19 @@ export function applySvelteKitRules(u, warnings) {
|
|
|
11
11
|
if (normalizedFile.includes('/node_modules/')) {
|
|
12
12
|
return;
|
|
13
13
|
}
|
|
14
|
+
const isServerFile =
|
|
15
|
+
// SvelteKit route server files
|
|
16
|
+
normalizedFile.includes('/+server.') ||
|
|
17
|
+
normalizedFile.includes('.server.') ||
|
|
18
|
+
// hooks.server.ts / handle.server.ts etc.
|
|
19
|
+
/\/(hooks|handle)\.server\.(ts|js)$/.test(normalizedFile) ||
|
|
20
|
+
// generic server.ts fallback
|
|
21
|
+
/\/server\.(ts|js)$/.test(normalizedFile);
|
|
22
|
+
const isClientFile = !normalizedFile.includes('.server.') &&
|
|
23
|
+
(normalizedFile.includes('/hooks.client.') ||
|
|
24
|
+
normalizedFile.includes('/+page.') ||
|
|
25
|
+
normalizedFile.includes('/+layout.'));
|
|
26
|
+
const isSvelteFile = /\.svelte$/.test(normalizedFile);
|
|
14
27
|
if (u.pattern === 'import.meta.env' && !u.variable.startsWith('VITE_')) {
|
|
15
28
|
warnings.push({
|
|
16
29
|
variable: u.variable,
|
|
@@ -21,21 +34,24 @@ export function applySvelteKitRules(u, warnings) {
|
|
|
21
34
|
});
|
|
22
35
|
return; // Stop processing other rules for this usage
|
|
23
36
|
}
|
|
24
|
-
if (u.pattern === 'process.env'
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
37
|
+
if (u.pattern === 'process.env') {
|
|
38
|
+
if (!isServerFile) {
|
|
39
|
+
warnings.push({
|
|
40
|
+
variable: u.variable,
|
|
41
|
+
reason: `process.env should only be used in server files`,
|
|
42
|
+
file: normalizedFile,
|
|
43
|
+
line: u.line,
|
|
44
|
+
framework: 'sveltekit',
|
|
45
|
+
});
|
|
46
|
+
return;
|
|
47
|
+
}
|
|
33
48
|
}
|
|
34
|
-
|
|
35
|
-
|
|
49
|
+
if (u.pattern === 'sveltekit' &&
|
|
50
|
+
u.imports?.includes('$env/dynamic/private') &&
|
|
51
|
+
(isSvelteFile || isClientFile)) {
|
|
36
52
|
warnings.push({
|
|
37
53
|
variable: u.variable,
|
|
38
|
-
reason:
|
|
54
|
+
reason: `$env/dynamic/private cannot be used in client files`,
|
|
39
55
|
file: normalizedFile,
|
|
40
56
|
line: u.line,
|
|
41
57
|
framework: 'sveltekit',
|
|
@@ -43,31 +59,21 @@ export function applySvelteKitRules(u, warnings) {
|
|
|
43
59
|
return;
|
|
44
60
|
}
|
|
45
61
|
// $env/static/private
|
|
46
|
-
if (u.pattern === 'sveltekit' && u.
|
|
62
|
+
if (u.pattern === 'sveltekit' && u.imports?.includes('$env/static/private')) {
|
|
47
63
|
if (u.variable.startsWith('VITE_')) {
|
|
48
64
|
warnings.push({
|
|
49
65
|
variable: u.variable,
|
|
50
|
-
reason: `$env/static/private variables must not start with "VITE_"`,
|
|
51
|
-
file: normalizedFile,
|
|
52
|
-
line: u.line,
|
|
53
|
-
framework: 'sveltekit',
|
|
54
|
-
});
|
|
55
|
-
return;
|
|
56
|
-
}
|
|
57
|
-
if (/\.svelte$/.test(normalizedFile)) {
|
|
58
|
-
warnings.push({
|
|
59
|
-
variable: u.variable,
|
|
60
|
-
reason: `Private env vars cannot be used in Svelte components`,
|
|
66
|
+
reason: `$env/static/private variables must not start with "PUBLIC_" or "VITE_"`,
|
|
61
67
|
file: normalizedFile,
|
|
62
68
|
line: u.line,
|
|
63
69
|
framework: 'sveltekit',
|
|
64
70
|
});
|
|
65
71
|
return;
|
|
66
72
|
}
|
|
67
|
-
if (
|
|
73
|
+
if (isSvelteFile || isClientFile) {
|
|
68
74
|
warnings.push({
|
|
69
75
|
variable: u.variable,
|
|
70
|
-
reason: `Private env vars
|
|
76
|
+
reason: `Private env vars cannot be used in client-side code`,
|
|
71
77
|
file: normalizedFile,
|
|
72
78
|
line: u.line,
|
|
73
79
|
framework: 'sveltekit',
|
|
@@ -77,7 +83,7 @@ export function applySvelteKitRules(u, warnings) {
|
|
|
77
83
|
if (u.variable.startsWith('PUBLIC_')) {
|
|
78
84
|
warnings.push({
|
|
79
85
|
variable: u.variable,
|
|
80
|
-
reason:
|
|
86
|
+
reason: `$env/static/private variables must not start with "PUBLIC_"`,
|
|
81
87
|
file: normalizedFile,
|
|
82
88
|
line: u.line,
|
|
83
89
|
framework: 'sveltekit',
|
|
@@ -87,15 +93,16 @@ export function applySvelteKitRules(u, warnings) {
|
|
|
87
93
|
}
|
|
88
94
|
// $env/static/public
|
|
89
95
|
if (u.pattern === 'sveltekit' &&
|
|
90
|
-
u.
|
|
91
|
-
u.variable.startsWith('
|
|
96
|
+
u.imports?.includes('$env/static/public') &&
|
|
97
|
+
!u.variable.startsWith('PUBLIC_')) {
|
|
92
98
|
warnings.push({
|
|
93
99
|
variable: u.variable,
|
|
94
|
-
reason: `$env/static/public variables must
|
|
100
|
+
reason: `$env/static/public variables must start with "PUBLIC_"`,
|
|
95
101
|
file: normalizedFile,
|
|
96
102
|
line: u.line,
|
|
97
103
|
framework: 'sveltekit',
|
|
98
104
|
});
|
|
105
|
+
return;
|
|
99
106
|
}
|
|
100
107
|
}
|
|
101
108
|
//# sourceMappingURL=sveltekitRules.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sveltekitRules.js","sourceRoot":"","sources":["../../../../src/core/frameworks/sveltekitRules.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAE9D;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,CAAW,EACX,QAA4B;IAE5B,2DAA2D;IAC3D,MAAM,cAAc,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAE7C,sBAAsB;IACtB,IAAI,cAAc,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,
|
|
1
|
+
{"version":3,"file":"sveltekitRules.js","sourceRoot":"","sources":["../../../../src/core/frameworks/sveltekitRules.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAE9D;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,CAAW,EACX,QAA4B;IAE5B,2DAA2D;IAC3D,MAAM,cAAc,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAE7C,sBAAsB;IACtB,IAAI,cAAc,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,MAAM,YAAY;IAClB,+BAA+B;IAC/B,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC;QACpC,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC;QAEnC,0CAA0C;QAC1C,oCAAoC,CAAC,IAAI,CAAC,cAAc,CAAC;QAEzD,6BAA6B;QAC7B,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAE1C,MAAM,YAAY,GAChB,CAAC,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC;QACpC,CAAC,cAAc,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACxC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC;YAClC,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IAE1C,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAEtD,IAAI,CAAC,CAAC,OAAO,KAAK,iBAAiB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACvE,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,oEAAoE;YAC5E,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,WAAW;SACvB,CAAC,CAAC;QACH,OAAO,CAAC,6CAA6C;IACvD,CAAC;IAED,IAAI,CAAC,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;QAChC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM,EAAE,iDAAiD;gBACzD,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,SAAS,EAAE,WAAW;aACvB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;IACH,CAAC;IAED,IACE,CAAC,CAAC,OAAO,KAAK,WAAW;QACzB,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,sBAAsB,CAAC;QAC3C,CAAC,YAAY,IAAI,YAAY,CAAC,EAC9B,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,qDAAqD;YAC7D,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,WAAW;SACvB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,sBAAsB;IACtB,IAAI,CAAC,CAAC,OAAO,KAAK,WAAW,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC5E,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM,EAAE,wEAAwE;gBAChF,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,SAAS,EAAE,WAAW;aACvB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,YAAY,IAAI,YAAY,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM,EAAE,qDAAqD;gBAC7D,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,SAAS,EAAE,WAAW;aACvB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM,EAAE,6DAA6D;gBACrE,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,SAAS,EAAE,WAAW;aACvB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,IACE,CAAC,CAAC,OAAO,KAAK,WAAW;QACzB,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,oBAAoB,CAAC;QACzC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EACjC,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,wDAAwD;YAChE,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,WAAW;SACvB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;AACH,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"parseEnv.d.ts","sourceRoot":"","sources":["../../../src/core/parseEnv.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,
|
|
1
|
+
{"version":3,"file":"parseEnv.d.ts","sourceRoot":"","sources":["../../../src/core/parseEnv.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAoBjE"}
|
|
@@ -9,13 +9,16 @@ import fs from 'fs';
|
|
|
9
9
|
* Multi-line or quoted values are not supported.
|
|
10
10
|
*/
|
|
11
11
|
export function parseEnvFile(path) {
|
|
12
|
-
const content =
|
|
12
|
+
const content = safeFileSync(path);
|
|
13
13
|
const lines = content.split('\n');
|
|
14
14
|
const result = {};
|
|
15
15
|
for (const line of lines) {
|
|
16
16
|
const trimmed = line.trim();
|
|
17
17
|
if (!trimmed || trimmed.startsWith('#'))
|
|
18
18
|
continue;
|
|
19
|
+
// Check for '=' sign
|
|
20
|
+
if (!trimmed.includes('='))
|
|
21
|
+
continue;
|
|
19
22
|
const [key, ...rest] = trimmed.split('=');
|
|
20
23
|
if (!key)
|
|
21
24
|
continue;
|
|
@@ -23,4 +26,19 @@ export function parseEnvFile(path) {
|
|
|
23
26
|
}
|
|
24
27
|
return result;
|
|
25
28
|
}
|
|
29
|
+
/**
|
|
30
|
+
* Safely reads a file and returns its content as a string.
|
|
31
|
+
* If the file does not exist or cannot be read, returns an empty string.
|
|
32
|
+
*
|
|
33
|
+
* @param path - The file path to read.
|
|
34
|
+
* @returns The file content as a string, or an empty string if unreadable.
|
|
35
|
+
*/
|
|
36
|
+
function safeFileSync(path) {
|
|
37
|
+
try {
|
|
38
|
+
return fs.readFileSync(path, 'utf-8');
|
|
39
|
+
}
|
|
40
|
+
catch {
|
|
41
|
+
return '';
|
|
42
|
+
}
|
|
43
|
+
}
|
|
26
44
|
//# sourceMappingURL=parseEnv.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"parseEnv.js","sourceRoot":"","sources":["../../../src/core/parseEnv.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,OAAO,GAAG,
|
|
1
|
+
{"version":3,"file":"parseEnv.js","sourceRoot":"","sources":["../../../src/core/parseEnv.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAElD,qBAAqB;QACrB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAErC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG;YAAE,SAAS;QAEnB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../../../src/core/patterns.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,YAAY;;;;;;;;;
|
|
1
|
+
{"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../../../src/core/patterns.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,YAAY;;;;;;;;;IA4CxB,CAAC;AAGF,eAAO,MAAM,0BAA0B,UAStC,CAAC;AAGF,eAAO,MAAM,wBAAwB,UAiBpC,CAAC"}
|
|
@@ -1,16 +1,39 @@
|
|
|
1
1
|
// Framework-specific patterns for finding environment variable usage
|
|
2
2
|
export const ENV_PATTERNS = [
|
|
3
|
+
// process.env.X
|
|
3
4
|
{
|
|
4
5
|
name: 'process.env',
|
|
5
6
|
regex: /process\.env\.([A-Z_][A-Z0-9_]*)/g,
|
|
6
7
|
},
|
|
8
|
+
// import.meta.env.X
|
|
7
9
|
{
|
|
8
10
|
name: 'import.meta.env',
|
|
9
11
|
regex: /import\.meta\.env\.([A-Z_][A-Z0-9_]*)/g,
|
|
10
12
|
},
|
|
13
|
+
// SvelteKit static named imports
|
|
14
|
+
// import { SECRET } from '$env/static/private';
|
|
15
|
+
// import { PUBLIC_URL } from '$env/static/public';
|
|
11
16
|
{
|
|
12
17
|
name: 'sveltekit',
|
|
13
|
-
regex:
|
|
18
|
+
regex: /import\s*\{\s*([A-Z_][A-Z0-9_]*)\s*\}\s*from\s*['"]\$env\/static\/(?:private|public)['"]/g,
|
|
19
|
+
},
|
|
20
|
+
// SvelteKit dynamic env object
|
|
21
|
+
// env.SECRET
|
|
22
|
+
{
|
|
23
|
+
name: 'sveltekit',
|
|
24
|
+
regex: /(?<!import\.meta\.)\benv\.([A-Z_][A-Z0-9_]*)/g,
|
|
25
|
+
},
|
|
26
|
+
// named import from dynamic is invalid in SvelteKit
|
|
27
|
+
// import { env } from '$env/dynamic/private';
|
|
28
|
+
{
|
|
29
|
+
name: 'sveltekit',
|
|
30
|
+
regex: /import\s*\{\s*([A-Z_][A-Z0-9_]*)\s*\}\s*from\s*['"]\$env\/dynamic\/(?:private|public)['"]/g,
|
|
31
|
+
},
|
|
32
|
+
// default import from any $env module is invalid in SvelteKit
|
|
33
|
+
// import SECRET from '$env/...';
|
|
34
|
+
{
|
|
35
|
+
name: 'sveltekit',
|
|
36
|
+
regex: /import\s+([A-Z_][A-Z0-9_]*)\s+from\s+['"]\$env\/(?:static|dynamic)\/(?:private|public)['"]/g,
|
|
14
37
|
},
|
|
15
38
|
];
|
|
16
39
|
// Default file extensions to include in scans
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../../../src/core/patterns.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B;QACE,IAAI,EAAE,aAAsB;QAC5B,KAAK,EAAE,mCAAmC;KAC3C;
|
|
1
|
+
{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../../../src/core/patterns.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,gBAAgB;IAChB;QACE,IAAI,EAAE,aAAsB;QAC5B,KAAK,EAAE,mCAAmC;KAC3C;IAED,oBAAoB;IACpB;QACE,IAAI,EAAE,iBAA0B;QAChC,KAAK,EAAE,wCAAwC;KAChD;IAED,iCAAiC;IACjC,gDAAgD;IAChD,mDAAmD;IACnD;QACE,IAAI,EAAE,WAAoB;QAC1B,KAAK,EACH,2FAA2F;KAC9F;IAED,+BAA+B;IAC/B,aAAa;IACb;QACE,IAAI,EAAE,WAAoB;QAC1B,KAAK,EAAE,+CAA+C;KACvD;IAED,oDAAoD;IACpD,8CAA8C;IAC9C;QACE,IAAI,EAAE,WAAoB;QAC1B,KAAK,EACH,4FAA4F;KAC/F;IAED,8DAA8D;IAC9D,iCAAiC;IACjC;QACE,IAAI,EAAE,WAAoB;QAC1B,KAAK,EACH,6FAA6F;KAChG;CACF,CAAC;AAEF,8CAA8C;AAC9C,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;IACT,MAAM;IACN,MAAM;CACP,CAAC;AAEF,yCAAyC;AACzC,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,cAAc;IACd,YAAY;IACZ,aAAa;IACb,UAAU;IACV,MAAM;IACN,OAAO;IACP,OAAO;IACP,OAAO;IACP,UAAU;IACV,MAAM;IACN,SAAS;IACT,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,WAAW;CACZ,CAAC"}
|
|
@@ -2,7 +2,7 @@ import fs from 'fs';
|
|
|
2
2
|
import { parseEnvFile } from './parseEnv.js';
|
|
3
3
|
import { filterIgnoredKeys } from './filterIgnoredKeys.js';
|
|
4
4
|
import { compareWithEnvFiles } from './compareScan.js';
|
|
5
|
-
import { findDuplicateKeys } from '
|
|
5
|
+
import { findDuplicateKeys } from './duplicates.js';
|
|
6
6
|
import { applyFixes } from './fixEnv.js';
|
|
7
7
|
import { toUpperSnakeCase } from './helpers/toUpperSnakeCase.js';
|
|
8
8
|
import { resolveFromCwd } from './helpers/resolveFromCwd.js';
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"processComparisonFile.js","sourceRoot":"","sources":["../../../src/core/processComparisonFile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,
|
|
1
|
+
{"version":3,"file":"processComparisonFile.js","sourceRoot":"","sources":["../../../src/core/processComparisonFile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAgCzE;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAsB,EACtB,WAA2C,EAC3C,IAAsB;IAEtB,IAAI,YAAY,GAAuC,EAAE,CAAC;IAC1D,IAAI,eAAe,GAAG,EAAE,CAAC;IACzB,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,OAAO,GAAgB,EAAE,CAAC;IAC9B,IAAI,MAAM,GAAgB,EAAE,CAAC;IAC7B,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,iBAAiB,GAAa,EAAE,CAAC;IACrC,IAAI,QAAQ,GAAa,EAAE,CAAC;IAC5B,IAAI,YAAY,GAAa,EAAE,CAAC;IAChC,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,WAAW,GAAuC,SAAS,CAAC;IAChE,IAAI,iBAAiB,GAAuB,EAAE,CAAC;IAC/C,IAAI,cAAc,GAChB,EAAE,CAAC;IACL,IAAI,0BAA0B,GAIzB,EAAE,CAAC;IAER,IAAI,CAAC;QACH,gCAAgC;QAChC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YAC/D,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/B,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,iBAAiB,CAC/B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EACpB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,CACjB,CAAC;QACF,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,UAAU,GAAG,mBAAmB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC3D,eAAe,GAAG,WAAW,CAAC,IAAI,CAAC;QAEnC,wBAAwB;QACxB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC9B,iBAAiB,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,MAAM,gBAAgB,GAAG,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAC5D,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC;YACnC,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC;YACjC,eAAe,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,cAAc,GAAG,iBAAiB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;QAED,0DAA0D;QAC1D,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;YACpC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAEpE,uCAAuC;YACvC,MAAM,OAAO,GAAG,CAAC,GAAG,WAAW,EAAE,GAAG,eAAe,CAAC,CAAC;YAErD,0BAA0B,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QACjE,CAAC;QAED,2DAA2D;QAC3D,IACE,IAAI,CAAC,GAAG;YACR,CAAC,eAAe,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,EAC1D,CAAC;YACD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;gBACrC,OAAO,EAAE,WAAW,CAAC,IAAI;gBACzB,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC3B,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC;oBAC5C,CAAC,CAAC,EAAE;gBACN,WAAW,EAAE,UAAU,CAAC,OAAO;gBAC/B,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;gBACxC,eAAe,EAAE,IAAI;aACtB,CAAC,CAAC;YAEH,IAAI,OAAO,EAAE,CAAC;gBACZ,UAAU,GAAG,IAAI,CAAC;gBAClB,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;gBAC7C,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;gBAC3B,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;gBACnC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;gBAE3C,UAAU,CAAC,OAAO,GAAG,EAAE,CAAC;gBACxB,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,GAAG,EAAE,CAAC;gBACZ,eAAe,GAAG,KAAK,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,IAAI,eAAe,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,UAAU,CAAC,UAAU;gBAAE,UAAU,CAAC,UAAU,GAAG,EAAE,CAAC;YACvD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,UAAU,CAAC,UAAU,CAAC,GAAG,GAAG,OAAO,CAAC;YAC5D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,UAAU,CAAC,UAAU,CAAC,OAAO,GAAG,MAAM,CAAC;QAChE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,kBAAkB,WAAW,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,MAAM,KAAK,EAAE,CAAC;QAC1F,OAAO;YACL,UAAU;YACV,YAAY;YACZ,eAAe;YACf,eAAe;YACf,OAAO;YACP,MAAM;YACN,UAAU;YACV,iBAAiB;YACjB,QAAQ;YACR,YAAY;YACZ,gBAAgB;YAChB,WAAW;YACX,iBAAiB;YACjB,cAAc;YACd,0BAA0B;YAC1B,KAAK,EAAE;gBACL,OAAO,EAAE,YAAY;gBACrB,UAAU,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK;aACnC;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,UAAU;QACV,YAAY;QACZ,eAAe;QACf,eAAe;QACf,OAAO;QACP,MAAM;QACN,UAAU;QACV,iBAAiB;QACjB,QAAQ;QACR,YAAY;QACZ,gBAAgB;QAChB,WAAW;QACX,iBAAiB;QACjB,cAAc;QACd,0BAA0B;KAC3B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CACtB,WAA2C,EAC3C,IAAsB;IAEtB,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,EAAE,CAChC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE7E,8BAA8B;IAC9B,MAAM,OAAO,GAAG,iBAAiB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CACrE,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;IAEF,6BAA6B;IAC7B,IAAI,MAAM,GAAgB,EAAE,CAAC;IAE7B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAE/D,MAAM,sBAAsB,GAC1B,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,WAAW,KAAK,WAAW,CAAC,IAAI,CAAC;QAEjE,IAAI,sBAAsB,EAAE,CAAC;YAC3B,MAAM,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CACzD,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAA4B,CAAC;AACvD,CAAC"}
|
|
@@ -0,0 +1,85 @@
|
|
|
1
|
+
import type { ScanResult, Duplicate, SupportedFramework } from '../../config/types.js';
|
|
2
|
+
/**
|
|
3
|
+
* JSON structure for scan results output
|
|
4
|
+
*/
|
|
5
|
+
interface ScanJsonOutput {
|
|
6
|
+
stats?: {
|
|
7
|
+
filesScanned: number;
|
|
8
|
+
totalUsages: number;
|
|
9
|
+
uniqueVariables: number;
|
|
10
|
+
warningsCount: number;
|
|
11
|
+
duration: number;
|
|
12
|
+
};
|
|
13
|
+
missing?: Array<{
|
|
14
|
+
variable: string;
|
|
15
|
+
usages: Array<{
|
|
16
|
+
file: string;
|
|
17
|
+
line: number;
|
|
18
|
+
pattern: string;
|
|
19
|
+
context: string;
|
|
20
|
+
}>;
|
|
21
|
+
}>;
|
|
22
|
+
unused?: string[];
|
|
23
|
+
allUsages?: Array<{
|
|
24
|
+
variable: string;
|
|
25
|
+
file: string;
|
|
26
|
+
line: number;
|
|
27
|
+
pattern: string;
|
|
28
|
+
context: string;
|
|
29
|
+
}>;
|
|
30
|
+
comparedAgainst?: string;
|
|
31
|
+
totalEnvVariables?: number;
|
|
32
|
+
secrets?: Array<{
|
|
33
|
+
file: string;
|
|
34
|
+
line: number;
|
|
35
|
+
message: string;
|
|
36
|
+
snippet: string;
|
|
37
|
+
}>;
|
|
38
|
+
duplicates?: {
|
|
39
|
+
env?: Duplicate[];
|
|
40
|
+
example?: Duplicate[];
|
|
41
|
+
};
|
|
42
|
+
logged?: Array<{
|
|
43
|
+
variable: string;
|
|
44
|
+
file: string;
|
|
45
|
+
line: number;
|
|
46
|
+
context: string;
|
|
47
|
+
}>;
|
|
48
|
+
expireWarnings?: Array<{
|
|
49
|
+
key: string;
|
|
50
|
+
date: string;
|
|
51
|
+
daysLeft: number;
|
|
52
|
+
}>;
|
|
53
|
+
uppercaseWarnings?: Array<{
|
|
54
|
+
key: string;
|
|
55
|
+
suggestion: string;
|
|
56
|
+
}>;
|
|
57
|
+
inconsistentNamingWarnings?: Array<{
|
|
58
|
+
key1: string;
|
|
59
|
+
key2: string;
|
|
60
|
+
suggestion: string;
|
|
61
|
+
}>;
|
|
62
|
+
frameworkWarnings?: Array<{
|
|
63
|
+
variable: string;
|
|
64
|
+
reason: string;
|
|
65
|
+
file: string;
|
|
66
|
+
line: number;
|
|
67
|
+
framework: SupportedFramework;
|
|
68
|
+
}>;
|
|
69
|
+
exampleWarnings?: Array<{
|
|
70
|
+
key: string;
|
|
71
|
+
value: string;
|
|
72
|
+
reason: string;
|
|
73
|
+
severity: string;
|
|
74
|
+
}>;
|
|
75
|
+
healthScore?: number;
|
|
76
|
+
}
|
|
77
|
+
/**
|
|
78
|
+
* Creates a JSON output for the scan results.
|
|
79
|
+
* @param scanResult - The result of the scan.
|
|
80
|
+
* @param comparedAgainst - The file being compared against.
|
|
81
|
+
* @returns The JSON output.
|
|
82
|
+
*/
|
|
83
|
+
export declare function createJsonOutput(scanResult: ScanResult, comparedAgainst: string): ScanJsonOutput;
|
|
84
|
+
export {};
|
|
85
|
+
//# sourceMappingURL=scanJsonOutput.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"scanJsonOutput.d.ts","sourceRoot":"","sources":["../../../../src/core/scan/scanJsonOutput.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EAEV,SAAS,EACT,kBAAkB,EACnB,MAAM,uBAAuB,CAAC;AAI/B;;GAEG;AACH,UAAU,cAAc;IACtB,KAAK,CAAC,EAAE;QACN,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,EAAE,MAAM,CAAC;QACxB,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,OAAO,CAAC,EAAE,KAAK,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,KAAK,CAAC;YACZ,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,MAAM,CAAC;YAChB,OAAO,EAAE,MAAM,CAAC;SACjB,CAAC,CAAC;KACJ,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,CAAC,EAAE,KAAK,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,KAAK,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH,UAAU,CAAC,EAAE;QACX,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC;QAClB,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;KACvB,CAAC;IACF,MAAM,CAAC,EAAE,KAAK,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH,cAAc,CAAC,EAAE,KAAK,CAAC;QACrB,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;IACH,iBAAiB,CAAC,EAAE,KAAK,CAAC;QACxB,GAAG,EAAE,MAAM,CAAC;QACZ,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IACH,0BAA0B,CAAC,EAAE,KAAK,CAAC;QACjC,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IACH,iBAAiB,CAAC,EAAE,KAAK,CAAC;QACxB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,kBAAkB,CAAC;KAC/B,CAAC,CAAC;IACH,eAAe,CAAC,EAAE,KAAK,CAAC;QACtB,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,UAAU,EACtB,eAAe,EAAE,MAAM,GACtB,cAAc,CAwGhB"}
|
|
@@ -0,0 +1,97 @@
|
|
|
1
|
+
import { computeHealthScore } from '../computeHealthScore.js';
|
|
2
|
+
import { normalizePath } from '../helpers/normalizePath.js';
|
|
3
|
+
/**
|
|
4
|
+
* Creates a JSON output for the scan results.
|
|
5
|
+
* @param scanResult - The result of the scan.
|
|
6
|
+
* @param comparedAgainst - The file being compared against.
|
|
7
|
+
* @returns The JSON output.
|
|
8
|
+
*/
|
|
9
|
+
export function createJsonOutput(scanResult, comparedAgainst) {
|
|
10
|
+
const output = {};
|
|
11
|
+
// Add comparison info if we compared against a file
|
|
12
|
+
if (comparedAgainst) {
|
|
13
|
+
output.comparedAgainst = comparedAgainst;
|
|
14
|
+
}
|
|
15
|
+
output.stats = scanResult.stats;
|
|
16
|
+
if (scanResult.secrets?.length) {
|
|
17
|
+
output.secrets = scanResult.secrets.map((s) => ({
|
|
18
|
+
file: normalizePath(s.file),
|
|
19
|
+
line: s.line,
|
|
20
|
+
message: s.message,
|
|
21
|
+
snippet: s.snippet,
|
|
22
|
+
}));
|
|
23
|
+
}
|
|
24
|
+
if (scanResult.missing?.length) {
|
|
25
|
+
const missingSet = new Set(scanResult.missing);
|
|
26
|
+
const usagesByVariable = new Map();
|
|
27
|
+
for (const usage of scanResult.used) {
|
|
28
|
+
if (missingSet.has(usage.variable)) {
|
|
29
|
+
const existing = usagesByVariable.get(usage.variable) ?? [];
|
|
30
|
+
existing.push(usage);
|
|
31
|
+
usagesByVariable.set(usage.variable, existing);
|
|
32
|
+
}
|
|
33
|
+
}
|
|
34
|
+
output.missing = scanResult.missing.map((variable) => ({
|
|
35
|
+
variable,
|
|
36
|
+
usages: (usagesByVariable.get(variable) ?? []).map((u) => ({
|
|
37
|
+
file: normalizePath(u.file),
|
|
38
|
+
line: u.line,
|
|
39
|
+
pattern: u.pattern,
|
|
40
|
+
context: u.context,
|
|
41
|
+
})),
|
|
42
|
+
}));
|
|
43
|
+
}
|
|
44
|
+
if (scanResult.unused?.length) {
|
|
45
|
+
output.unused = scanResult.unused;
|
|
46
|
+
}
|
|
47
|
+
if (scanResult.uppercaseWarnings?.length) {
|
|
48
|
+
output.uppercaseWarnings = scanResult.uppercaseWarnings.map((w) => ({
|
|
49
|
+
key: w.key,
|
|
50
|
+
suggestion: w.suggestion,
|
|
51
|
+
}));
|
|
52
|
+
}
|
|
53
|
+
if (scanResult.inconsistentNamingWarnings?.length) {
|
|
54
|
+
output.inconsistentNamingWarnings =
|
|
55
|
+
scanResult.inconsistentNamingWarnings.map((w) => ({
|
|
56
|
+
key1: w.key1,
|
|
57
|
+
key2: w.key2,
|
|
58
|
+
suggestion: w.suggestion,
|
|
59
|
+
}));
|
|
60
|
+
}
|
|
61
|
+
if (scanResult.frameworkWarnings?.length) {
|
|
62
|
+
output.frameworkWarnings = scanResult.frameworkWarnings.map((w) => ({
|
|
63
|
+
variable: w.variable,
|
|
64
|
+
reason: w.reason,
|
|
65
|
+
file: normalizePath(w.file),
|
|
66
|
+
line: w.line,
|
|
67
|
+
framework: w.framework,
|
|
68
|
+
}));
|
|
69
|
+
}
|
|
70
|
+
const hasDuplicates = (scanResult.duplicates.env?.length ?? 0) > 0 ||
|
|
71
|
+
(scanResult.duplicates.example?.length ?? 0) > 0;
|
|
72
|
+
if (hasDuplicates) {
|
|
73
|
+
output.duplicates = scanResult.duplicates;
|
|
74
|
+
}
|
|
75
|
+
// Add logged variables if any
|
|
76
|
+
if (scanResult.logged?.length) {
|
|
77
|
+
output.logged = scanResult.logged.map((l) => ({
|
|
78
|
+
variable: l.variable,
|
|
79
|
+
file: normalizePath(l.file),
|
|
80
|
+
line: l.line,
|
|
81
|
+
context: l.context,
|
|
82
|
+
}));
|
|
83
|
+
}
|
|
84
|
+
// Example warnings
|
|
85
|
+
if (scanResult.exampleWarnings?.length) {
|
|
86
|
+
output.exampleWarnings = scanResult.exampleWarnings.map((w) => ({
|
|
87
|
+
key: w.key,
|
|
88
|
+
value: w.value,
|
|
89
|
+
reason: w.reason,
|
|
90
|
+
severity: w.severity,
|
|
91
|
+
}));
|
|
92
|
+
}
|
|
93
|
+
const healthScore = computeHealthScore(scanResult);
|
|
94
|
+
output.healthScore = healthScore;
|
|
95
|
+
return output;
|
|
96
|
+
}
|
|
97
|
+
//# sourceMappingURL=scanJsonOutput.js.map
|