eslint-plugin-operability 3.0.16 → 3.1.0

package/README.md

@@ -16,6 +16,7 @@
   <a href="https://opensource.org/licenses/MIT" target="_blank"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="Package License" /></a>
   <a href="https://app.codecov.io/gh/ofri-peretz/eslint/components?components%5B0%5D=eslint-plugin-operability" target="_blank"><img src="https://codecov.io/gh/ofri-peretz/eslint/graph/badge.svg?component=eslint-plugin-operability" alt="Codecov" /></a>
   <a href="https://github.com/ofri-peretz/eslint" target="_blank"><img src="https://img.shields.io/badge/Since-Dec_2025-blue?logo=rocket&logoColor=white" alt="Since Dec 2025" /></a>
+  <a href="https://scorecard.dev/viewer/?uri=github.com/ofri-peretz/eslint" target="_blank"><img src="https://api.securityscorecards.dev/projects/github.com/ofri-peretz/eslint/badge" alt="OpenSSF Scorecard" /></a>
 </p>
 
 > ⭐ If this plugin caught a real bug for you, [**star the repo**](https://github.com/ofri-peretz/eslint) — it's the signal that keeps these rules maintained.
@@ -28,6 +29,45 @@ This plugin provides Operability rules — observability hooks, structured loggi
 
 **Interlace** fosters **strength through integration**. Instead of stacking isolated rules, we **interlace** security directly into your workflow to create a resilient fabric of code. We believe tools should **guide rather than gatekeep**, providing educational feedback that strengthens the developer with every interaction.
 
+<!-- AUTO-GENERATED:DOCTRINE:START - Do not edit manually -->
+
+## Why these rules are quiet
+
+**Noise creates apathy, and apathy is not a security posture.** A linter that reports
+a thousand things a week gets switched off in a month, and the real finding goes with
+it. So every rule here is built to be worth reading: we would rather miss a finding
+than spend your attention on one that was never real.
+
+That is a trade, and it is made deliberately. It costs recall, and we measure what it
+costs rather than assuming it is free.
+
+## How the rules decide
+
+**Evidence, not names.** A rule fires on what the code *does*, resolved through the
+AST and ESLint's own scope analysis — not on an identifier that happens to contain
+`query`, a method called `setItem`, or a file whose path contains `key`. Every one of
+those was a real false positive in this ecosystem, found by reading our own output on
+open-source projects and fixed with a test that fails on the unfixed rule.
+
+Where a rule has known false-positive shapes, its page carries a **Not a finding**
+section: what it deliberately stays quiet on, and what to check first when it fires
+and you disagree.
+
+## What you get
+
+The rules below. Security rules carry a CWE mapping and, where one is assigned, a
+CVSS score; every rule carries a fix on its message — in prose for a human and as
+structured JSON for an agent. Install it, enable
+`recommended`, and read the findings. If one of them is wrong,
+[open an issue](https://github.com/ofri-peretz/eslint/issues) — a false positive is a
+bug here, not a tuning exercise for you.
+
+How that is measured, on which projects, and where it falls short:
+[benchmark methodology](https://github.com/ofri-peretz/eslint/blob/main/BENCHMARK-METHODOLOGY.md)
+and [results](https://github.com/ofri-peretz/eslint/blob/main/BENCHMARK-RESULTS.md).
+
+<!-- AUTO-GENERATED:DOCTRINE:END -->
+
 ## Getting Started
 
 - To check out the [guide](https://eslint.interlace.tools/docs/quality/plugin-operability?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-operability), visit [eslint.interlace.tools](https://eslint.interlace.tools/?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-operability). 📚

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eslint-plugin-operability",
-  "version": "3.0.16",
+  "version": "3.1.0",
   "description": "ESLint plugin for production operability — bans debug code and console logging in production, verbose error messages, and process.exit calls.",
   "type": "commonjs",
   "main": "./src/index.js",
@@ -49,7 +49,7 @@
     "node": ">=18.0.0"
   },
   "dependencies": {
-    "@interlace/eslint-devkit": "^1.11.0"
+    "@interlace/eslint-devkit": "^1.17.0"
   },
   "repository": {
     "type": "git",

package/src/index.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.configs=exports.plugin=exports.rules=void 0;exports.rules={get"no-console-log"(){return require("./rules/operability/no-console-log").noConsoleLog},get"no-process-exit"(){return require("./rules/operability/no-process-exit").noProcessExit},get"no-debug-code-in-production"(){return require("./rules/operability/no-debug-code-in-production").noDebugCodeInProduction},get"no-verbose-error-messages"(){return require("./rules/operability/no-verbose-error-messages").noVerboseErrorMessages},get"require-code-minification"(){return require("./rules/operability/require-code-minification").requireCodeMinification},get"require-data-minimization"(){return require("./rules/operability/require-data-minimization").requireDataMinimization},get"operability/no-console-log"(){return require("./rules/operability/no-console-log").noConsoleLog},get"operability/no-process-exit"(){return require("./rules/operability/no-process-exit").noProcessExit},get"operability/no-debug-code-in-production"(){return require("./rules/operability/no-debug-code-in-production").noDebugCodeInProduction},get"operability/no-verbose-error-messages"(){return require("./rules/operability/no-verbose-error-messages").noVerboseErrorMessages},get"operability/require-code-minification"(){return require("./rules/operability/require-code-minification").requireCodeMinification},get"operability/require-data-minimization"(){return require("./rules/operability/require-data-minimization").requireDataMinimization}};exports.plugin={meta:{name:"eslint-plugin-operability",version:"3.0.16"},rules:exports.rules};exports.configs={recommended:{plugins:{"operability":exports.plugin},rules:{"operability/no-console-log":"warn","operability/no-debug-code-in-production":"error","operability/no-verbose-error-messages":"warn"}}};exports.default=exports.plugin;
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.configs=exports.plugin=exports.rules=void 0;exports.rules={get"no-console-log"(){return require("./rules/operability/no-console-log").noConsoleLog},get"no-process-exit"(){return require("./rules/operability/no-process-exit").noProcessExit},get"no-debug-code-in-production"(){return require("./rules/operability/no-debug-code-in-production").noDebugCodeInProduction},get"no-verbose-error-messages"(){return require("./rules/operability/no-verbose-error-messages").noVerboseErrorMessages},get"require-code-minification"(){return require("./rules/operability/require-code-minification").requireCodeMinification},get"require-data-minimization"(){return require("./rules/operability/require-data-minimization").requireDataMinimization},get"operability/no-console-log"(){return require("./rules/operability/no-console-log").noConsoleLog},get"operability/no-process-exit"(){return require("./rules/operability/no-process-exit").noProcessExit},get"operability/no-debug-code-in-production"(){return require("./rules/operability/no-debug-code-in-production").noDebugCodeInProduction},get"operability/no-verbose-error-messages"(){return require("./rules/operability/no-verbose-error-messages").noVerboseErrorMessages},get"operability/require-code-minification"(){return require("./rules/operability/require-code-minification").requireCodeMinification},get"operability/require-data-minimization"(){return require("./rules/operability/require-data-minimization").requireDataMinimization}};exports.plugin={meta:{name:"eslint-plugin-operability",version:"3.1.0"},rules:exports.rules};exports.configs={recommended:{plugins:{"operability":exports.plugin},rules:{"operability/no-console-log":"warn","operability/no-debug-code-in-production":"error","operability/no-verbose-error-messages":"warn"}}};exports.default=exports.plugin;

package/src/lib/non-production-paths.js

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.NON_PRODUCTION_SEGMENTS=void 0;exports.isNonProductionPath=isNonProductionPath;exports.NON_PRODUCTION_SEGMENTS=["scripts","tools","env","benchmarks","examples","example","demo","fixtures"];const BUILD_CONFIG_BASENAMES=/^(eslint|jest|vite|vitest|rollup|webpack|tsup|next|babel|karma|nuxt|astro|svelte|tailwind|postcss|playwright|cypress|commitlint|lint-staged|release|changeset|turbo|nx)\.config\.(js|cjs|mjs|ts|mts|cts)$/;function isNonProductionPath(filename,segments=exports.NON_PRODUCTION_SEGMENTS){const normalized=filename.replace(/\\/g,"/");const parts=normalized.split("/");if(parts.some(part=>segments.includes(part)))return true;const base=parts[parts.length-1];return BUILD_CONFIG_BASENAMES.test(base)||/^(Gruntfile|Gulpfile)\./i.test(base)}

package/src/rules/operability/no-console-log.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.noConsoleLog=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");const eslint_devkit_2=require("@interlace/eslint-devkit");const eslint_devkit_3=require("@interlace/eslint-devkit");const DEFAULT_SEVERITY_MAP={log:"debug"};exports.noConsoleLog=(0,eslint_devkit_2.createRule)({name:"no-console-log",meta:{type:"problem",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-operability/docs/rules/no-console-log.md",description:"Disallow console.log with configurable remediation strategies",cwe:"CWE-532",cvss:5},fixable:"code",hasSuggestions:false,messages:{consoleLogFound:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.WARNING,issueName:"console.log in production",cwe:"CWE-532",description:"console.log found in production code",severity:"MEDIUM",fix:"Use logger.debug() or remove statement",documentationLink:"https://owasp.org/www-project-log-review-guide/"}),strategyRemove:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.STRATEGY,issueName:"Remove Strategy",description:"Remove console.log statement",severity:"LOW",fix:"Delete the console.log statement",documentationLink:"https://owasp.org/www-project-log-review-guide/"}),strategyConvert:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.STRATEGY,issueName:"Convert Strategy",description:"Convert to logger method",severity:"LOW",fix:"logger.debug() or logger.info()",documentationLink:"https://github.com/winstonjs/winston"}),strategyComment:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.STRATEGY,issueName:"Comment Strategy",description:"Comment out console.log",severity:"LOW",fix:"// console.log(...)",documentationLink:"https://owasp.org/www-project-log-review-guide/"}),strategyWarn:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.STRATEGY,issueName:"Warn Strategy",description:"Replace with console.warn()",severity:"LOW",fix:"console.warn()",documentationLink:"https://developer.mozilla.org/en-US/docs/Web/API/console/warn"})},schema:[{type:"object",properties:{strategy:{type:"string",enum:["remove","convert","comment","warn"],default:"remove",description:"Strategy for handling console.log"},ignorePaths:{type:"array",items:{type:"string"},default:[],description:"File path patterns to ignore"},loggerName:{type:"string",default:"logger",description:'Name of the logger to use for convert strategy (e.g., "logger", "winston")'},maxOccurrences:{oneOf:[{type:"number",minimum:1,description:"Maximum number of occurrences to report"},{type:"string",enum:["all"],description:"Report all violations"}],description:'Maximum occurrences to report: number (e.g., 5), "all" (report all), or undefined (no limit)'},severityMap:{type:"object",additionalProperties:{type:"string"},default:{log:"debug"},description:'Advanced: Map console methods to logger methods, e.g., {"log": "info", "debug": "verbose"}'},autoDetectLogger:{type:"boolean",default:true,description:"Auto-detect logger import in file"},sourcePatterns:{type:"array",items:{type:"string"},default:["console"],description:'Object names to match and replace (e.g., ["console", "winston", "oldLogger"]). Uses exact string matching for safety.'}},additionalProperties:false}]},defaultOptions:[{strategy:"remove",ignorePaths:[],loggerName:"logger",severityMap:{log:"log"},autoDetectLogger:true,sourcePatterns:["console"]}],create(context){const options=context.options[0]||{};const{strategy="remove",ignorePaths=[],loggerName,maxOccurrences,severityMap={},autoDetectLogger=true,sourcePatterns=["console"]}=options;const effectiveSeverityMap={...DEFAULT_SEVERITY_MAP,...severityMap};const filename=context.filename;const sourceCode=context.sourceCode;const occurrences=[];let detectedLogger=null;if(autoDetectLogger){const ast=sourceCode.ast;const loggerPatterns=/^(logger|log|winston|bunyan|pino|console)$/i;for(const statement of ast.body){if(statement.type==="ImportDeclaration"){for(const specifier of statement.specifiers){if(specifier.type==="ImportDefaultSpecifier"||specifier.type==="ImportSpecifier"){const name=specifier.local.name;if(loggerPatterns.test(name)){detectedLogger=name;break}}}}if(statement.type==="VariableDeclaration"){for(const declarator of statement.declarations){if(declarator.init?.type==="CallExpression"&&declarator.init.callee.type==="Identifier"&&declarator.init.callee.name==="require"&&declarator.id.type==="Identifier"){const name=declarator.id.name;if(loggerPatterns.test(name)){detectedLogger=name;break}}}}if(detectedLogger)break}}const effectiveLogger=loggerName||detectedLogger||"logger";const shouldIgnoreFile=()=>{if(ignorePaths.length===0)return false;const normalizedPath=(0,eslint_devkit_3.normalizePath)(filename);return ignorePaths.some(pattern=>{const normalizedPattern=pattern.replace(/\\/g,"/");if(normalizedPath===normalizedPattern)return true;if(normalizedPath.startsWith(normalizedPattern+"/"))return true;const escaped=normalizedPattern.replace(/[.+^${}()|[\]\\*?]/g,"\\$&");const regexPattern=escaped.replace(/\\\*/g,".*").replace(/\\\?/g,".");return new RegExp(regexPattern).test(normalizedPath)})};if(shouldIgnoreFile()){return{}}return{CallExpression(node){if(node.callee.type!=="MemberExpression"||node.callee.object.type!=="Identifier"||node.callee.property.type!=="Identifier"){return}const sourceObject=node.callee.object.name;const methodName=node.callee.property.name;if(!sourcePatterns.includes(sourceObject)){return}if(!effectiveSeverityMap[methodName]){return}const line=node.loc?.start.line??0;occurrences.push(line);const shouldSkipReport=maxOccurrences!==void 0&&maxOccurrences!=="all"&&typeof maxOccurrences==="number"&&maxOccurrences>0&&occurrences.length>maxOccurrences;const relativePath=(0,eslint_devkit_3.getRelativePath)(process.cwd(),filename);const targetLoggerMethod=effectiveSeverityMap[methodName];const fix=fixer=>{const statement=findParentStatement(node);if(!statement)return null;switch(strategy){case"remove":return fixer.remove(statement);case"convert":return fixer.replaceText(node.callee,`${effectiveLogger}.${targetLoggerMethod}`);case"comment":{const text=sourceCode.getText(statement);return fixer.replaceText(statement,`// ${text}`)}case"warn":return fixer.replaceText(node.callee,"console.warn");default:return null}};let conversionInfo="";if(strategy==="convert"){conversionInfo=` \u2192 ${effectiveLogger}.${targetLoggerMethod}()`}if(!shouldSkipReport){context.report({node,messageId:"consoleLogFound",data:{consoleMethod:`${sourceObject}.${methodName}`,filePath:relativePath,line:String(line),strategy,conversionInfo,logger:effectiveLogger,method:targetLoggerMethod},fix})}}}}});function findParentStatement(node){let current=node;while(current){if(current.type==="ExpressionStatement"||current.type==="ReturnStatement"||current.type==="VariableDeclaration"){return current}current=current.parent}return null}
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.noConsoleLog=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");const eslint_devkit_2=require("@interlace/eslint-devkit");const eslint_devkit_3=require("@interlace/eslint-devkit");const non_production_paths_1=require("../../lib/non-production-paths");const DEFAULT_SEVERITY_MAP={log:"debug"};exports.noConsoleLog=(0,eslint_devkit_2.createRule)({name:"no-console-log",meta:{type:"problem",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-operability/docs/rules/no-console-log.md",description:"Disallow console.log with configurable remediation strategies",cwe:"CWE-532",cvss:5},fixable:"code",hasSuggestions:false,messages:{consoleLogFound:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.WARNING,issueName:"console.log in production",cwe:"CWE-532",description:"console.log found in production code",severity:"MEDIUM",fix:"Use logger.debug() or remove statement",documentationLink:"https://owasp.org/www-project-log-review-guide/"}),strategyRemove:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.STRATEGY,issueName:"Remove Strategy",description:"Remove console.log statement",severity:"LOW",fix:"Delete the console.log statement",documentationLink:"https://owasp.org/www-project-log-review-guide/"}),strategyConvert:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.STRATEGY,issueName:"Convert Strategy",description:"Convert to logger method",severity:"LOW",fix:"logger.debug() or logger.info()",documentationLink:"https://github.com/winstonjs/winston"}),strategyComment:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.STRATEGY,issueName:"Comment Strategy",description:"Comment out console.log",severity:"LOW",fix:"// console.log(...)",documentationLink:"https://owasp.org/www-project-log-review-guide/"}),strategyWarn:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.STRATEGY,issueName:"Warn Strategy",description:"Replace with console.warn()",severity:"LOW",fix:"console.warn()",documentationLink:"https://developer.mozilla.org/en-US/docs/Web/API/console/warn"})},schema:[{type:"object",properties:{strategy:{type:"string",enum:["remove","convert","comment","warn"],default:"remove",description:"Strategy for handling console.log"},ignoreNonProductionPaths:{type:"boolean",default:true},ignorePaths:{type:"array",items:{type:"string"},default:[],description:"File path patterns to ignore"},loggerName:{type:"string",default:"logger",description:'Name of the logger to use for convert strategy (e.g., "logger", "winston")'},maxOccurrences:{oneOf:[{type:"number",minimum:1,description:"Maximum number of occurrences to report"},{type:"string",enum:["all"],description:"Report all violations"}],description:'Maximum occurrences to report: number (e.g., 5), "all" (report all), or undefined (no limit)'},severityMap:{type:"object",additionalProperties:{type:"string"},default:{log:"debug"},description:'Advanced: Map console methods to logger methods, e.g., {"log": "info", "debug": "verbose"}'},autoDetectLogger:{type:"boolean",default:true,description:"Auto-detect logger import in file"},sourcePatterns:{type:"array",items:{type:"string"},default:["console"],description:'Object names to match and replace (e.g., ["console", "winston", "oldLogger"]). Uses exact string matching for safety.'}},additionalProperties:false}]},defaultOptions:[{strategy:"remove",ignorePaths:[],ignoreNonProductionPaths:true,loggerName:"logger",severityMap:{log:"log"},autoDetectLogger:true,sourcePatterns:["console"]}],create(context){const options=context.options[0]||{};const{strategy="remove",ignorePaths=[],ignoreNonProductionPaths=true,loggerName,maxOccurrences,severityMap={},autoDetectLogger=true,sourcePatterns=["console"]}=options;const effectiveSeverityMap={...DEFAULT_SEVERITY_MAP,...severityMap};const filename=context.filename;const sourceCode=context.sourceCode;const occurrences=[];let detectedLogger=null;if(autoDetectLogger){const ast=sourceCode.ast;const loggerPatterns=/^(logger|log|winston|bunyan|pino|console)$/i;for(const statement of ast.body){if(statement.type==="ImportDeclaration"){for(const specifier of statement.specifiers){if(specifier.type==="ImportDefaultSpecifier"||specifier.type==="ImportSpecifier"){const name=specifier.local.name;if(loggerPatterns.test(name)){detectedLogger=name;break}}}}if(statement.type==="VariableDeclaration"){for(const declarator of statement.declarations){if(declarator.init?.type==="CallExpression"&&declarator.init.callee.type==="Identifier"&&declarator.init.callee.name==="require"&&declarator.id.type==="Identifier"){const name=declarator.id.name;if(loggerPatterns.test(name)){detectedLogger=name;break}}}}if(detectedLogger)break}}const effectiveLogger=loggerName||detectedLogger||"logger";const shouldIgnoreFile=()=>{if(ignoreNonProductionPaths&&(0,non_production_paths_1.isNonProductionPath)(filename))return true;if(ignorePaths.length===0)return false;const normalizedPath=(0,eslint_devkit_3.normalizePath)(filename);return ignorePaths.some(pattern=>{const normalizedPattern=pattern.replace(/\\/g,"/");if(normalizedPath===normalizedPattern)return true;if(normalizedPath.startsWith(normalizedPattern+"/"))return true;const escaped=normalizedPattern.replace(/[.+^${}()|[\]\\*?]/g,"\\$&");const regexPattern=escaped.replace(/\\\*/g,".*").replace(/\\\?/g,".");return new RegExp(regexPattern).test(normalizedPath)})};if(shouldIgnoreFile()){return{}}return{CallExpression(node){if(node.callee.type!=="MemberExpression"||node.callee.object.type!=="Identifier"||node.callee.property.type!=="Identifier"){return}const sourceObject=node.callee.object.name;const methodName=node.callee.property.name;if(!sourcePatterns.includes(sourceObject)){return}if(!effectiveSeverityMap[methodName]){return}const line=node.loc?.start.line??0;occurrences.push(line);const shouldSkipReport=maxOccurrences!==void 0&&maxOccurrences!=="all"&&typeof maxOccurrences==="number"&&maxOccurrences>0&&occurrences.length>maxOccurrences;const relativePath=(0,eslint_devkit_3.getRelativePath)(process.cwd(),filename);const targetLoggerMethod=effectiveSeverityMap[methodName];const fix=fixer=>{const statement=findParentStatement(node);if(!statement)return null;switch(strategy){case"remove":return fixer.remove(statement);case"convert":return fixer.replaceText(node.callee,`${effectiveLogger}.${targetLoggerMethod}`);case"comment":{const text=sourceCode.getText(statement);return fixer.replaceText(statement,`// ${text}`)}case"warn":return fixer.replaceText(node.callee,"console.warn");default:return null}};let conversionInfo="";if(strategy==="convert"){conversionInfo=` \u2192 ${effectiveLogger}.${targetLoggerMethod}()`}if(!shouldSkipReport){context.report({node,messageId:"consoleLogFound",data:{consoleMethod:`${sourceObject}.${methodName}`,filePath:relativePath,line:String(line),strategy,conversionInfo,logger:effectiveLogger,method:targetLoggerMethod},fix})}}}}});function findParentStatement(node){let current=node;while(current){if(current.type==="ExpressionStatement"||current.type==="ReturnStatement"||current.type==="VariableDeclaration"){return current}current=current.parent}return null}

package/src/rules/operability/no-debug-code-in-production.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.noDebugCodeInProduction=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");exports.noDebugCodeInProduction=(0,eslint_devkit_1.createRule)({name:"no-debug-code-in-production",meta:{type:"problem",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-operability/docs/rules/no-debug-code-in-production.md",description:"Detect debug code in production",cwe:"CWE-489",cvss:7.5},messages:{violationDetected:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.SECURITY,issueName:"violation Detected",cwe:"CWE-489",description:"Detect debug code in production detected - DEBUG, __DEV__, console",severity:"HIGH",fix:"Review and apply secure practices",documentationLink:"https://cwe.mitre.org/data/definitions/489.html"})},schema:[]},defaultOptions:[],create(context){return{Identifier(node){if(["DEBUG","__DEV__"].includes(node.name)){context.report({node,messageId:"violationDetected"})}},CallExpression(node){if(node.callee.type===eslint_devkit_1.AST_NODE_TYPES.MemberExpression&&node.callee.object.type===eslint_devkit_1.AST_NODE_TYPES.Identifier&&node.callee.object.name==="console"&&node.callee.property.type===eslint_devkit_1.AST_NODE_TYPES.Identifier&&node.callee.property.name==="log"){context.report({node,messageId:"violationDetected"})}}}}});
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.noDebugCodeInProduction=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");const non_production_paths_1=require("../../lib/non-production-paths");exports.noDebugCodeInProduction=(0,eslint_devkit_1.createRule)({name:"no-debug-code-in-production",meta:{type:"problem",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-operability/docs/rules/no-debug-code-in-production.md",description:"Detect debug code in production",cwe:"CWE-489",cvss:7.5},messages:{violationDetected:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.SECURITY,issueName:"violation Detected",cwe:"CWE-489",description:"Detect debug code in production detected - DEBUG, __DEV__, console",severity:"HIGH",fix:"Review and apply secure practices",documentationLink:"https://cwe.mitre.org/data/definitions/489.html"})},schema:[{type:"object",properties:{ignoreNonProductionPaths:{type:"boolean",default:true}},additionalProperties:false}]},defaultOptions:[{ignoreNonProductionPaths:true}],create(context,[options={}]){const{ignoreNonProductionPaths=true}=options;if(ignoreNonProductionPaths&&(0,non_production_paths_1.isNonProductionPath)(context.filename)){return{}}return{Identifier(node){if(["DEBUG","__DEV__"].includes(node.name)){context.report({node,messageId:"violationDetected"})}},CallExpression(node){if(node.callee.type===eslint_devkit_1.AST_NODE_TYPES.MemberExpression&&node.callee.object.type===eslint_devkit_1.AST_NODE_TYPES.Identifier&&node.callee.object.name==="console"&&node.callee.property.type===eslint_devkit_1.AST_NODE_TYPES.Identifier&&node.callee.property.name==="log"){context.report({node,messageId:"violationDetected"})}}}}});