dotenv-diff 2.5.0 → 2.5.2

package/dist/src/core/scan/secretDetectors.js

@@ -1,272 +0,0 @@
-import { shannonEntropyNormalized } from '../entropy.js';
-// Regular expressions for detecting suspicious keys and provider patterns
-export const SUSPICIOUS_KEYS = /\b(pass(word)?|secret|token|apikey|api_key|key|auth|bearer|private|client_secret|access[_-]?token)\b/i;
-// Regular expressions for detecting provider patterns
-export const PROVIDER_PATTERNS = [
-    /\bAKIA[0-9A-Z]{16}\b/, // AWS access key id
-    /\bASIA[0-9A-Z]{16}\b/, // AWS temp key
-    /\bghp_[0-9A-Za-z]{30,}\b/, // GitHub token
-    /\bsk_live_[0-9a-zA-Z]{24,}\b/, // Stripe live secret
-    /\bsk_test_[0-9a-zA-Z]{24,}\b/, // Stripe test secret
-    /\bAIza[0-9A-Za-z\-_]{20,}\b/, // Google API key
-    /\bya29\.[0-9A-Za-z\-_]+\b/, // Google OAuth access token
-    /\b[A-Za-z0-9_-]{21}:[A-Za-z0-9_-]{140}\b/, // Firebase token
-    /\b0x[a-fA-F0-9]{40}\b/, // Ethereum address
-    /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/, // JWT token
-    /\bAC[0-9a-fA-F]{32}\b/, // Twilio Account SID
-];
-const LONG_LITERAL = /["'`]{1}([A-Za-z0-9+/_\-]{24,})["'`]{1}/g;
-const HTTPS_PATTERN = /["'`](https?:\/\/(?!localhost)[^"'`]*)["'`]/g;
-// List of harmless URL patterns to ignore
-const HARMLESS_URLS = [
-    /https?:\/\/(www\.)?placeholder\.com/i,
-    /https?:\/\/(www\.)?example\.com/i,
-    /https?:\/\/127\.0\.0\.1(:\d+)?/i,
-    /http:\/\/www\.w3\.org\/2000\/svg/i,
-    /xmlns=["']http:\/\/www\.w3\.org\/2000\/svg["']/i, // SVG namespace
-];
-// Known harmless attribute keys commonly used in UI / analytics
-const HARMLESS_ATTRIBUTE_KEYS = /\b(trackingId|trackingContext|data-testid|data-test|aria-label)\b/i;
-/**
- * Determines the severity of a secret finding.
- * @param kind 'pattern' | 'entropy'
- * @param message The message describing the finding
- * @param literalLength The length of the literal string (if applicable)
- * @returns The severity level of the secret finding
- */
-function determineSeverity(kind, message, literalLength) {
-    // HIGH: Known provider key patterns
-    if (message.includes('known provider key pattern')) {
-        return 'high';
-    }
-    // HIGH: Very high-entropy long strings
-    if (kind === 'entropy' && literalLength && literalLength >= 48) {
-        return 'high';
-    }
-    // MEDIUM: Password/secret/token patterns
-    if (message.includes('password/secret/token-like')) {
-        return 'medium';
-    }
-    // MEDIUM: Medium high-entropy strings
-    if (kind === 'entropy' && literalLength && literalLength >= 32) {
-        return 'medium';
-    }
-    // MEDIUM: HTTP URLs
-    if (message.includes('HTTP URL detected')) {
-        return 'medium';
-    }
-    // LOW: HTTPS URLs
-    if (message.includes('HTTPS URL detected')) {
-        return 'low';
-    }
-    // Default to medium if we can't determine
-    return 'medium';
-}
-/**
- * Checks if a line has an ignore comment
- * fx: // dotenv-diff-ignore or /* dotenv-diff-ignore *\/ or <!-- dotenv-diff-ignore -->
- * @param line - The line to check
- * @returns True if the line should be ignored
- */
-export function hasIgnoreComment(line) {
-    const normalized = line.trim();
-    // Allow mixed casing, extra spaces, and optional dashes
-    return (/\/\/.*dotenv[\s-]*diff[\s-]*ignore/i.test(normalized) ||
-        /\/\*.*dotenv[\s-]*diff[\s-]*ignore.*\*\//i.test(normalized) ||
-        /<!--.*dotenv[\s-]*diff[\s-]*ignore.*-->/i.test(normalized) ||
-        /\bdotenv[\s-]*diff[\s-]*ignore\b/i.test(normalized));
-}
-/**
- * Checks if a URL should be ignored based on ignoreUrls from config.
- * @param url - The URL that might be a potential secret
- * @param ignoreUrls - List of URLs to ignore (from config)
- * @returns true if the URL matches any ignore pattern
- */
-function ignoreUrlsMatch(url, ignoreUrls) {
-    if (!ignoreUrls?.length)
-        return false;
-    // case-insensitive substring match
-    return ignoreUrls.some((pattern) => url.toLowerCase().includes(pattern.toLowerCase()));
-}
-/**
- * Checks if a string looks like a harmless literal.
- * @param s - The string to check.
- * @returns True if the string looks harmless, false otherwise.
- */
-function looksHarmlessLiteral(s) {
-    return (/\S+@\S+/.test(s) || // emails
-        /^data:[a-z]+\/[a-z0-9.+-]+;base64,/i.test(s) || // data URIs
-        /^\.{0,2}\//.test(s) || // relative paths
-        /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(s) || // UUID
-        /^[0-9a-f]{32,128}$/i.test(s) || // MD5, SHA1, SHA256, etc.
-        /^[A-Za-z0-9+/_\-]{16,20}={0,2}$/.test(s) || // short base64
-        /^[A-Za-z0-9+/_\-]*(_PUBLIC|_PRIVATE|VITE_|NEXT_PUBLIC|VUE_)[A-Za-z0-9+/_\-]*={0,2}$/.test(s) || // env-like keys
-        /^[MmZzLlHhVvCcSsQqTtAa][0-9eE+.\- ,MmZzLlHhVvCcSsQqTtAa]*$/.test(s) || // SVG path data
-        /<svg[\s\S]*?>[\s\S]*?<\/svg>/i.test(s) || // SVG markup
-        HARMLESS_URLS.some((rx) => rx.test(s)) // Allowlisted URLs
-    );
-}
-/**
- * Checks if a line looks like a URL construction pattern.
- * @param line - The line to check.
- * @returns True if the line looks like URL construction, false otherwise.
- */
-function looksLikeUrlConstruction(line) {
-    // Check for template literals or string concatenation that looks like URLs
-    return (
-    // Template literals with URL-like patterns
-    /=\s*`[^`]*\$\{[^}]+\}[^`]*\/[^`]*`/.test(line) ||
-        // String concatenation with slashes
-        /=\s*["'][^"']*\/[^"']*["']\s*\+/.test(line) ||
-        // Contains common URL patterns
-        /=\s*["'`][^"'`]*\/[^"'`]*(auth|api|login|redirect|callback|protocol)[^"'`]*\/[^"'`]*["'`]/.test(line) ||
-        // Keycloak-specific patterns
-        /realms\/.*\/protocol\/openid-connect/.test(line));
-}
-/**
- * Checks if a file path is probably a test path.
- * This is determined by looking for common test folder names and file extensions.
- * @param p - The file path to check.
- * @returns True if the file path is probably a test path, false otherwise.
- */
-function isProbablyTestPath(p) {
-    return (/\b(__tests__|__mocks__|fixtures|sandbox|samples)\b/i.test(p) ||
-        /\.(spec|test)\.[jt]sx?$/.test(p));
-}
-/**
- * Checks if a string is a pure interpolation template.
- * @param s - The string to check.
- * @returns True if the string is a pure interpolation template, false otherwise.
- */
-function isPureInterpolationTemplate(s) {
-    // Matches templates like `${a}`, `${a}:${b}`, `${a}|${b}|${c}`
-    // i.e. no meaningful static content
-    const withoutInterpolations = s.replace(/\$\{[^}]+\}/g, '');
-    return /^[\s:|,._-]*$/.test(withoutInterpolations);
-}
-// Threshold is the value between 0 and 1 that determines the sensitivity of the detection.
-const DEFAULT_SECRET_THRESHOLD = 0.85;
-/**
- * Optimized for sveltekit and vite env accessors
- * @param line - A line of code to check.
- * @returns True if the line is an environment variable accessor, false otherwise.
- */
-function isEnvAccessor(line) {
-    return /\b(process\.env|import\.meta\.env|\$env\/(static|dynamic)\/(public|private))\b/.test(line);
-}
-/**
- * Detects secrets in the source code of a file.
- * @param file - The file path to check.
- * @param source - The source code to scan for secrets.
- * @returns An array of secret findings.
- */
-export function detectSecretsInSource(file, source, opts) {
-    const threshold = isProbablyTestPath(file) ? 0.95 : DEFAULT_SECRET_THRESHOLD;
-    const findings = [];
-    const lines = source.split(/\r?\n/);
-    let insideIgnoreBlock = false;
-    for (let i = 0; i < lines.length; i++) {
-        const lineNo = i + 1;
-        const line = lines[i] || '';
-        if (/<!--\s*dotenv[\s-]*diff[\s-]*ignore[\s-]*start\s*-->/i.test(line)) {
-            insideIgnoreBlock = true;
-            continue;
-        }
-        if (/<!--\s*dotenv[\s-]*diff[\s-]*ignore[\s-]*end\s*-->/i.test(line)) {
-            insideIgnoreBlock = false;
-            continue;
-        }
-        // Skip if inside ignore block
-        if (insideIgnoreBlock)
-            continue;
-        // Skip comments
-        if (/^\s*\/\//.test(line))
-            continue;
-        // Check if line has ignore comment
-        if (hasIgnoreComment(line))
-            continue;
-        // Check for HTTPS URLs
-        HTTPS_PATTERN.lastIndex = 0;
-        let httpsMatch;
-        while ((httpsMatch = HTTPS_PATTERN.exec(line))) {
-            const url = httpsMatch[1] || '';
-            if (url && !looksHarmlessLiteral(url)) {
-                if (ignoreUrlsMatch(url, opts?.ignoreUrls))
-                    continue;
-                const protocol = url.startsWith('https') ? 'HTTPS' : 'HTTP';
-                findings.push({
-                    file,
-                    line: lineNo,
-                    kind: 'pattern',
-                    message: `${protocol} URL detected – consider moving to an environment variable`,
-                    snippet: line.trim().slice(0, 180),
-                    severity: protocol === 'HTTP' ? 'medium' : 'low',
-                });
-            }
-        }
-        // 1) Suspicious key literal assignments
-        if (SUSPICIOUS_KEYS.test(line)) {
-            // Ignore known harmless UI / analytics attributes
-            if (HARMLESS_ATTRIBUTE_KEYS.test(line))
-                continue;
-            const m = line.match(/=\s*["'`](.+?)["'`]/);
-            if (m &&
-                m[1] &&
-                !looksHarmlessLiteral(m[1]) &&
-                !looksLikeUrlConstruction(line) &&
-                m[1].length >= 12 &&
-                !isEnvAccessor(line) &&
-                !isPureInterpolationTemplate(m[1])) {
-                findings.push({
-                    file,
-                    line: lineNo,
-                    kind: 'pattern',
-                    message: 'matches password/secret/token-like literal assignment',
-                    snippet: line.trim().slice(0, 180),
-                    severity: 'medium',
-                });
-            }
-        }
-        // 2) Provider patterns
-        for (const rx of PROVIDER_PATTERNS) {
-            if (rx.test(line)) {
-                findings.push({
-                    file,
-                    line: lineNo,
-                    kind: 'pattern',
-                    message: 'matches known provider key pattern',
-                    snippet: line.trim().slice(0, 180),
-                    severity: 'high',
-                });
-            }
-        }
-        // 3) High-entropy long literals
-        LONG_LITERAL.lastIndex = 0;
-        let lm;
-        while ((lm = LONG_LITERAL.exec(line))) {
-            const literal = lm[1] || '';
-            if (looksHarmlessLiteral(literal))
-                continue;
-            if (literal.length < 32)
-                continue;
-            const ent = shannonEntropyNormalized(literal);
-            if (ent >= threshold) {
-                const message = `found high-entropy string (len ${literal.length}, H≈${ent.toFixed(2)})`;
-                findings.push({
-                    file,
-                    line: lineNo,
-                    kind: 'entropy',
-                    message,
-                    snippet: line.trim().slice(0, 180),
-                    severity: determineSeverity('entropy', message, literal.length),
-                });
-            }
-        }
-    }
-    const uniqueFindings = findings.filter((f, idx, arr) => idx ===
-        arr.findIndex((other) => other.file === f.file &&
-            other.line === f.line &&
-            other.snippet === f.snippet));
-    return uniqueFindings;
-}
-//# sourceMappingURL=secretDetectors.js.map

package/dist/src/core/scan/secretDetectors.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"secretDetectors.js","sourceRoot":"","sources":["../../../../src/core/scan/secretDetectors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAczD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,eAAe,GAC1B,uGAAuG,CAAC;AAE1G,sDAAsD;AACtD,MAAM,CAAC,MAAM,iBAAiB,GAAa;IACzC,sBAAsB,EAAE,oBAAoB;IAC5C,sBAAsB,EAAE,eAAe;IACvC,0BAA0B,EAAE,eAAe;IAC3C,8BAA8B,EAAE,qBAAqB;IACrD,8BAA8B,EAAE,qBAAqB;IACrD,6BAA6B,EAAE,iBAAiB;IAChD,2BAA2B,EAAE,4BAA4B;IACzD,0CAA0C,EAAE,iBAAiB;IAC7D,uBAAuB,EAAE,mBAAmB;IAC5C,uDAAuD,EAAE,YAAY;IACrE,uBAAuB,EAAE,qBAAqB;CAC/C,CAAC;AAEF,MAAM,YAAY,GAAG,0CAA0C,CAAC;AAEhE,MAAM,aAAa,GAAG,8CAA8C,CAAC;AAErE,0CAA0C;AAC1C,MAAM,aAAa,GAAG;IACpB,sCAAsC;IACtC,kCAAkC;IAClC,iCAAiC;IACjC,mCAAmC;IACnC,iDAAiD,EAAE,gBAAgB;CACpE,CAAC;AAEF,gEAAgE;AAChE,MAAM,uBAAuB,GAC3B,oEAAoE,CAAC;AAEvE;;;;;;GAMG;AACH,SAAS,iBAAiB,CACxB,IAA2B,EAC3B,OAAe,EACf,aAAsB;IAEtB,oCAAoC;IACpC,IAAI,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,CAAC;QACnD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,uCAAuC;IACvC,IAAI,IAAI,KAAK,SAAS,IAAI,aAAa,IAAI,aAAa,IAAI,EAAE,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,yCAAyC;IACzC,IAAI,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,CAAC;QACnD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,sCAAsC;IACtC,IAAI,IAAI,KAAK,SAAS,IAAI,aAAa,IAAI,aAAa,IAAI,EAAE,EAAE,CAAC;QAC/D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,oBAAoB;IACpB,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC1C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,kBAAkB;IAClB,IAAI,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,0CAA0C;IAC1C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAE/B,wDAAwD;IACxD,OAAO,CACL,qCAAqC,CAAC,IAAI,CAAC,UAAU,CAAC;QACtD,2CAA2C,CAAC,IAAI,CAAC,UAAU,CAAC;QAC5D,0CAA0C,CAAC,IAAI,CAAC,UAAU,CAAC;QAC3D,mCAAmC,CAAC,IAAI,CAAC,UAAU,CAAC,CACrD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,GAAW,EAAE,UAAqB;IACzD,IAAI,CAAC,UAAU,EAAE,MAAM;QAAE,OAAO,KAAK,CAAC;IAEtC,mCAAmC;IACnC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACjC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAClD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,CAAS;IACrC,OAAO,CACL,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,SAAS;QAC9B,qCAAqC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,YAAY;QAC7D,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,iBAAiB;QACzC,iEAAiE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO;QACpF,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,0BAA0B;QAC3D,iCAAiC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,eAAe;QAC5D,qFAAqF,CAAC,IAAI,CACxF,CAAC,CACF,IAAI,gBAAgB;QACrB,4DAA4D,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,gBAAgB;QACxF,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,aAAa;QACxD,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB;KAC3D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,IAAY;IAC5C,2EAA2E;IAC3E,OAAO;IACL,2CAA2C;IAC3C,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/C,oCAAoC;QACpC,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5C,+BAA+B;QAC/B,2FAA2F,CAAC,IAAI,CAC9F,IAAI,CACL;QACD,6BAA6B;QAC7B,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAClD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,CAAS;IACnC,OAAO,CACL,qDAAqD,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAClC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,2BAA2B,CAAC,CAAS;IAC5C,+DAA+D;IAC/D,oCAAoC;IACpC,MAAM,qBAAqB,GAAG,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAC5D,OAAO,eAAe,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AACrD,CAAC;AAED,2FAA2F;AAC3F,MAAM,wBAAwB,GAAG,IAAa,CAAC;AAE/C;;;;GAIG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,gFAAgF,CAAC,IAAI,CAC1F,IAAI,CACL,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAY,EACZ,MAAc,EACd,IAAgC;IAEhC,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC;IAE7E,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAEpC,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAE9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE5B,IAAI,uDAAuD,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvE,iBAAiB,GAAG,IAAI,CAAC;YACzB,SAAS;QACX,CAAC;QAED,IAAI,qDAAqD,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,iBAAiB,GAAG,KAAK,CAAC;YAC1B,SAAS;QACX,CAAC;QAED,8BAA8B;QAC9B,IAAI,iBAAiB;YAAE,SAAS;QAEhC,gBAAgB;QAChB,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAEpC,mCAAmC;QACnC,IAAI,gBAAgB,CAAC,IAAI,CAAC;YAAE,SAAS;QAErC,uBAAuB;QACvB,aAAa,CAAC,SAAS,GAAG,CAAC,CAAC;QAC5B,IAAI,UAAkC,CAAC;QACvC,OAAO,CAAC,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtC,IAAI,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC;oBAAE,SAAS;gBACrD,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;gBAE5D,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI;oBACJ,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,GAAG,QAAQ,4DAA4D;oBAChF,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBAClC,QAAQ,EAAE,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;iBACjD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,kDAAkD;YAClD,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEjD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAC5C,IACE,CAAC;gBACD,CAAC,CAAC,CAAC,CAAC;gBACJ,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3B,CAAC,wBAAwB,CAAC,IAAI,CAAC;gBAC/B,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE;gBACjB,CAAC,aAAa,CAAC,IAAI,CAAC;gBACpB,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAClC,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI;oBACJ,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,uDAAuD;oBAChE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBAClC,QAAQ,EAAE,QAAQ;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,KAAK,MAAM,EAAE,IAAI,iBAAiB,EAAE,CAAC;YACnC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI;oBACJ,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,oCAAoC;oBAC7C,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBAClC,QAAQ,EAAE,MAAM;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,YAAY,CAAC,SAAS,GAAG,CAAC,CAAC;QAC3B,IAAI,EAA0B,CAAC;QAC/B,OAAO,CAAC,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,oBAAoB,CAAC,OAAO,CAAC;gBAAE,SAAS;YAC5C,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE;gBAAE,SAAS;YAClC,MAAM,GAAG,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,GAAG,IAAI,SAAS,EAAE,CAAC;gBACrB,MAAM,OAAO,GAAG,kCAAkC,OAAO,CAAC,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;gBACzF,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI;oBACJ,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,SAAS;oBACf,OAAO;oBACP,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBAClC,QAAQ,EAAE,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC;iBAChE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CACpC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CACd,GAAG;QACH,GAAG,CAAC,SAAS,CACX,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;YACrB,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;YACrB,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,CAC9B,CACJ,CAAC;IAEF,OAAO,cAAc,CAAC;AACxB,CAAC"}

package/dist/src/core/scanFile.d.ts

@@ -1,10 +0,0 @@
-import type { EnvUsage, ScanOptions } from '../config/types.js';
-/**
- * Scans a file for environment variable usage.
- * @param filePath - The path to the file being scanned.
- * @param content - The content of the file.
- * @param opts - The scan options.
- * @returns An array of environment variable usages found in the file.
- */
-export declare function scanFile(filePath: string, content: string, opts: ScanOptions): EnvUsage[];
-//# sourceMappingURL=scanFile.d.ts.map

package/dist/src/core/scanFile.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"scanFile.d.ts","sourceRoot":"","sources":["../../../src/core/scanFile.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAKhE;;;;;;GAMG;AACH,wBAAgB,QAAQ,CACtB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,WAAW,GAChB,QAAQ,EAAE,CAsEZ"}

package/dist/src/core/scanFile.js

@@ -1,65 +0,0 @@
-import path from 'path';
-import { ENV_PATTERNS } from './patterns.js';
-import { hasIgnoreComment } from './security/secretDetectors.js';
-import { normalizePath } from './helpers/normalizePath.js';
-/**
- * Scans a file for environment variable usage.
- * @param filePath - The path to the file being scanned.
- * @param content - The content of the file.
- * @param opts - The scan options.
- * @returns An array of environment variable usages found in the file.
- */
-export function scanFile(filePath, content, opts) {
-    const usages = [];
-    const lines = content.split('\n');
-    // Get relative path from cwd corss-platform compatible
-    const relativePath = normalizePath(path.relative(opts.cwd, filePath));
-    // Collect all $env imports used in this file
-    const envImports = [];
-    const importRegex = /import\s+(?:\{[^}]*\}|\w+)\s+from\s+['"](\$env\/(?:static|dynamic)\/(?:private|public))['"]/g;
-    let importMatch;
-    while ((importMatch = importRegex.exec(content)) !== null) {
-        if (importMatch[1]) {
-            envImports.push(importMatch[1]);
-        }
-    }
-    for (const pattern of ENV_PATTERNS) {
-        let match;
-        const regex = new RegExp(pattern.regex.source, pattern.regex.flags);
-        while ((match = regex.exec(content)) !== null) {
-            const variable = match[1];
-            if (!variable)
-                continue;
-            const matchIndex = match.index;
-            // Find line and column
-            const beforeMatch = content.substring(0, matchIndex);
-            const lineNumber = beforeMatch.split('\n').length;
-            const lastNewlineIndex = beforeMatch.lastIndexOf('\n');
-            const column = lastNewlineIndex === -1
-                ? matchIndex + 1
-                : matchIndex - lastNewlineIndex;
-            // Get the context (the actual line)
-            const contextLine = lines[lineNumber - 1] ?? '';
-            // Determine previous line for ignore detection
-            const prevLine = lines[lineNumber - 2] ?? '';
-            const isIgnored = hasIgnoreComment(contextLine) || hasIgnoreComment(prevLine);
-            // If usage is ignored, skip it entirely
-            if (isIgnored)
-                continue;
-            // Check if console.log
-            const isLogged = /\bconsole\.(log|error|warn|info|debug)\s*\(/.test(contextLine);
-            usages.push({
-                variable,
-                file: relativePath,
-                line: lineNumber,
-                column,
-                pattern: pattern.name,
-                imports: envImports,
-                context: contextLine,
-                isLogged,
-            });
-        }
-    }
-    return usages;
-}
-//# sourceMappingURL=scanFile.js.map

package/dist/src/core/scanFile.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"scanFile.js","sourceRoot":"","sources":["../../../src/core/scanFile.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAE3D;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CACtB,QAAgB,EAChB,OAAe,EACf,IAAiB;IAEjB,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,uDAAuD;IACvD,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IAEtE,6CAA6C;IAC7C,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,MAAM,WAAW,GACf,8FAA8F,CAAC;IAEjG,IAAI,WAAmC,CAAC;IAExC,OAAO,CAAC,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1D,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YACnB,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,IAAI,KAA6B,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEpE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,QAAQ;gBAAE,SAAS;YACxB,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC;YAE/B,uBAAuB;YACvB,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;YACrD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YAClD,MAAM,gBAAgB,GAAG,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACvD,MAAM,MAAM,GACV,gBAAgB,KAAK,CAAC,CAAC;gBACrB,CAAC,CAAC,UAAU,GAAG,CAAC;gBAChB,CAAC,CAAC,UAAU,GAAG,gBAAgB,CAAC;YAEpC,oCAAoC;YACpC,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAEhD,+CAA+C;YAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAE7C,MAAM,SAAS,GACb,gBAAgB,CAAC,WAAW,CAAC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAE9D,wCAAwC;YACxC,IAAI,SAAS;gBAAE,SAAS;YAExB,uBAAuB;YACvB,MAAM,QAAQ,GAAG,6CAA6C,CAAC,IAAI,CACjE,WAAW,CACZ,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ;gBACR,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,UAAU;gBAChB,MAAM;gBACN,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,OAAO,EAAE,UAAU;gBACnB,OAAO,EAAE,WAAW;gBACpB,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/core/scanJsonOutput.d.ts

@@ -1,85 +0,0 @@
-import type { ScanResult, Duplicate, SupportedFramework } from '../config/types.js';
-/**
- * JSON structure for scan results output
- */
-interface ScanJsonOutput {
-    stats?: {
-        filesScanned: number;
-        totalUsages: number;
-        uniqueVariables: number;
-        warningsCount: number;
-        duration: number;
-    };
-    missing?: Array<{
-        variable: string;
-        usages: Array<{
-            file: string;
-            line: number;
-            pattern: string;
-            context: string;
-        }>;
-    }>;
-    unused?: string[];
-    allUsages?: Array<{
-        variable: string;
-        file: string;
-        line: number;
-        pattern: string;
-        context: string;
-    }>;
-    comparedAgainst?: string;
-    totalEnvVariables?: number;
-    secrets?: Array<{
-        file: string;
-        line: number;
-        message: string;
-        snippet: string;
-    }>;
-    duplicates?: {
-        env?: Duplicate[];
-        example?: Duplicate[];
-    };
-    logged?: Array<{
-        variable: string;
-        file: string;
-        line: number;
-        context: string;
-    }>;
-    expireWarnings?: Array<{
-        key: string;
-        date: string;
-        daysLeft: number;
-    }>;
-    uppercaseWarnings?: Array<{
-        key: string;
-        suggestion: string;
-    }>;
-    inconsistentNamingWarnings?: Array<{
-        key1: string;
-        key2: string;
-        suggestion: string;
-    }>;
-    frameworkWarnings?: Array<{
-        variable: string;
-        reason: string;
-        file: string;
-        line: number;
-        framework: SupportedFramework;
-    }>;
-    exampleWarnings?: Array<{
-        key: string;
-        value: string;
-        reason: string;
-        severity: string;
-    }>;
-    healthScore?: number;
-}
-/**
- * Creates a JSON output for the scan results.
- * @param scanResult - The result of the scan.
- * @param comparedAgainst - The file being compared against.
- * @returns The JSON output.
- */
-export declare function createJsonOutput(scanResult: ScanResult, comparedAgainst: string): ScanJsonOutput;
-export {};
-//# sourceMappingURL=scanJsonOutput.d.ts.map

package/dist/src/core/scanJsonOutput.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"scanJsonOutput.d.ts","sourceRoot":"","sources":["../../../src/core/scanJsonOutput.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EAEV,SAAS,EACT,kBAAkB,EACnB,MAAM,oBAAoB,CAAC;AAI5B;;GAEG;AACH,UAAU,cAAc;IACtB,KAAK,CAAC,EAAE;QACN,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,EAAE,MAAM,CAAC;QACxB,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,OAAO,CAAC,EAAE,KAAK,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,KAAK,CAAC;YACZ,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,MAAM,CAAC;YAChB,OAAO,EAAE,MAAM,CAAC;SACjB,CAAC,CAAC;KACJ,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,CAAC,EAAE,KAAK,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,KAAK,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH,UAAU,CAAC,EAAE;QACX,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC;QAClB,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;KACvB,CAAC;IACF,MAAM,CAAC,EAAE,KAAK,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH,cAAc,CAAC,EAAE,KAAK,CAAC;QACrB,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;IACH,iBAAiB,CAAC,EAAE,KAAK,CAAC;QACxB,GAAG,EAAE,MAAM,CAAC;QACZ,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IACH,0BAA0B,CAAC,EAAE,KAAK,CAAC;QACjC,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IACH,iBAAiB,CAAC,EAAE,KAAK,CAAC;QACxB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,kBAAkB,CAAC;KAC/B,CAAC,CAAC;IACH,eAAe,CAAC,EAAE,KAAK,CAAC;QACtB,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,UAAU,EACtB,eAAe,EAAE,MAAM,GACtB,cAAc,CAwGhB"}

package/dist/src/core/scanJsonOutput.js

@@ -1,97 +0,0 @@
-import { computeHealthScore } from './computeHealthScore.js';
-import { normalizePath } from './helpers/normalizePath.js';
-/**
- * Creates a JSON output for the scan results.
- * @param scanResult - The result of the scan.
- * @param comparedAgainst - The file being compared against.
- * @returns The JSON output.
- */
-export function createJsonOutput(scanResult, comparedAgainst) {
-    const output = {};
-    // Add comparison info if we compared against a file
-    if (comparedAgainst) {
-        output.comparedAgainst = comparedAgainst;
-    }
-    output.stats = scanResult.stats;
-    if (scanResult.secrets?.length) {
-        output.secrets = scanResult.secrets.map((s) => ({
-            file: normalizePath(s.file),
-            line: s.line,
-            message: s.message,
-            snippet: s.snippet,
-        }));
-    }
-    if (scanResult.missing?.length) {
-        const missingSet = new Set(scanResult.missing);
-        const usagesByVariable = new Map();
-        for (const usage of scanResult.used) {
-            if (missingSet.has(usage.variable)) {
-                const existing = usagesByVariable.get(usage.variable) ?? [];
-                existing.push(usage);
-                usagesByVariable.set(usage.variable, existing);
-            }
-        }
-        output.missing = scanResult.missing.map((variable) => ({
-            variable,
-            usages: (usagesByVariable.get(variable) ?? []).map((u) => ({
-                file: normalizePath(u.file),
-                line: u.line,
-                pattern: u.pattern,
-                context: u.context,
-            })),
-        }));
-    }
-    if (scanResult.unused?.length) {
-        output.unused = scanResult.unused;
-    }
-    if (scanResult.uppercaseWarnings?.length) {
-        output.uppercaseWarnings = scanResult.uppercaseWarnings.map((w) => ({
-            key: w.key,
-            suggestion: w.suggestion,
-        }));
-    }
-    if (scanResult.inconsistentNamingWarnings?.length) {
-        output.inconsistentNamingWarnings =
-            scanResult.inconsistentNamingWarnings.map((w) => ({
-                key1: w.key1,
-                key2: w.key2,
-                suggestion: w.suggestion,
-            }));
-    }
-    if (scanResult.frameworkWarnings?.length) {
-        output.frameworkWarnings = scanResult.frameworkWarnings.map((w) => ({
-            variable: w.variable,
-            reason: w.reason,
-            file: normalizePath(w.file),
-            line: w.line,
-            framework: w.framework,
-        }));
-    }
-    const hasDuplicates = (scanResult.duplicates.env?.length ?? 0) > 0 ||
-        (scanResult.duplicates.example?.length ?? 0) > 0;
-    if (hasDuplicates) {
-        output.duplicates = scanResult.duplicates;
-    }
-    // Add logged variables if any
-    if (scanResult.logged?.length) {
-        output.logged = scanResult.logged.map((l) => ({
-            variable: l.variable,
-            file: normalizePath(l.file),
-            line: l.line,
-            context: l.context,
-        }));
-    }
-    // Example warnings
-    if (scanResult.exampleWarnings?.length) {
-        output.exampleWarnings = scanResult.exampleWarnings.map((w) => ({
-            key: w.key,
-            value: w.value,
-            reason: w.reason,
-            severity: w.severity,
-        }));
-    }
-    const healthScore = computeHealthScore(scanResult);
-    output.healthScore = healthScore;
-    return output;
-}
-//# sourceMappingURL=scanJsonOutput.js.map

package/dist/src/core/scanJsonOutput.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"scanJsonOutput.js","sourceRoot":"","sources":["../../../src/core/scanJsonOutput.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AA8E3D;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAsB,EACtB,eAAuB;IAEvB,MAAM,MAAM,GAAmB,EAAE,CAAC;IAElC,oDAAoD;IACpD,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,CAAC,eAAe,GAAG,eAAe,CAAC;IAC3C,CAAC;IAED,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAEhC,IAAI,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QAC/B,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9C,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;YAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,IAAI,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAsB,CAAC;QAEvD,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YACpC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC5D,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAED,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACrD,QAAQ;YACR,MAAM,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzD,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,OAAO,EAAE,CAAC,CAAC,OAAO;aACnB,CAAC,CAAC;SACJ,CAAC,CAAC,CAAC;IACN,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IACpC,CAAC;IAED,IAAI,UAAU,CAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;QACzC,MAAM,CAAC,iBAAiB,GAAG,UAAU,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClE,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,UAAU,EAAE,CAAC,CAAC,UAAU;SACzB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,IAAI,UAAU,CAAC,0BAA0B,EAAE,MAAM,EAAE,CAAC;QAClD,MAAM,CAAC,0BAA0B;YAC/B,UAAU,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChD,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,UAAU,EAAE,CAAC,CAAC,UAAU;aACzB,CAAC,CAAC,CAAC;IACR,CAAC;IAED,IAAI,UAAU,CAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;QACzC,MAAM,CAAC,iBAAiB,GAAG,UAAU,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClE,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;YAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,MAAM,aAAa,GACjB,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;QAC5C,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAEnD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC5C,CAAC;IAED,8BAA8B;IAC9B,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5C,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;YAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,mBAAmB;IACnB,IAAI,UAAU,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;QACvC,MAAM,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9D,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,CAAC,WAAW,GAAG,WAAW,CAAC;IAEjC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/core/secretDetectors.d.ts

@@ -1,28 +0,0 @@
-export type SecretSeverity = 'high' | 'medium' | 'low';
-export type SecretFinding = {
-    file: string;
-    line: number;
-    kind: 'pattern' | 'entropy';
-    message: string;
-    snippet: string;
-    severity: SecretSeverity;
-};
-export declare const SUSPICIOUS_KEYS: RegExp;
-export declare const PROVIDER_PATTERNS: RegExp[];
-/**
- * Checks if a line has an ignore comment
- * fx: // dotenv-diff-ignore or /* dotenv-diff-ignore *\/ or <!-- dotenv-diff-ignore -->
- * @param line - The line to check
- * @returns True if the line should be ignored
- */
-export declare function hasIgnoreComment(line: string): boolean;
-/**
- * Detects secrets in the source code of a file.
- * @param file - The file path to check.
- * @param source - The source code to scan for secrets.
- * @returns An array of secret findings.
- */
-export declare function detectSecretsInSource(file: string, source: string, opts?: {
-    ignoreUrls?: string[];
-}): SecretFinding[];
-//# sourceMappingURL=secretDetectors.d.ts.map

package/dist/src/core/secretDetectors.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"secretDetectors.d.ts","sourceRoot":"","sources":["../../../src/core/secretDetectors.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAGvD,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,cAAc,CAAC;CAC1B,CAAC;AAGF,eAAO,MAAM,eAAe,QAC6E,CAAC;AAG1G,eAAO,MAAM,iBAAiB,EAAE,MAAM,EAYrC,CAAC;AAiEF;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAUtD;AAmGD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAC/B,aAAa,EAAE,CA4HjB"}