eslint-plugin-operability 4.0.1 → 4.1.1

package/README.md

@@ -1,5 +1,5 @@
 <p align="center">
-  <a href="https://eslint.interlace.tools/?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-operability" target="blank"><picture><source media="(prefers-color-scheme: dark)" srcset="https://eslint.interlace.tools/logos/interlace-dark.svg"><img src="https://eslint.interlace.tools/logos/interlace-light.svg" alt="Interlace" height="90" /></picture></a>
+  <a href="https://eslint.interlace.tools/docs/quality/plugin-operability?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-operability" target="blank"><picture><source media="(prefers-color-scheme: dark)" srcset="https://eslint.interlace.tools/logos/interlace-dark.svg"><img src="https://eslint.interlace.tools/logos/interlace-light.svg" alt="Interlace" height="90" /></picture></a>
   &nbsp;&nbsp;
   <a href="https://oxc.rs" target="_blank"><picture><source media="(prefers-color-scheme: dark)" srcset="https://eslint.interlace.tools/logos/oxlint-dark.svg"><img src="https://eslint.interlace.tools/logos/oxlint-light.svg" alt="oxlint" height="90" /></picture></a>
   &nbsp;&nbsp;
@@ -229,5 +229,5 @@ MIT © [Ofri Peretz](https://github.com/ofri-peretz)
 </p>
 
 <p align="center">
-  <a href="https://eslint.interlace.tools/?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-operability" target="blank"><picture><source media="(prefers-color-scheme: dark)" srcset="https://eslint.interlace.tools/logos/interlace-dark.svg"><img src="https://eslint.interlace.tools/logos/interlace-light.svg" alt="Interlace" height="70" /></picture></a>
+  <a href="https://eslint.interlace.tools/docs/quality/plugin-operability?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-operability" target="blank"><picture><source media="(prefers-color-scheme: dark)" srcset="https://eslint.interlace.tools/logos/interlace-dark.svg"><img src="https://eslint.interlace.tools/logos/interlace-light.svg" alt="Interlace" height="70" /></picture></a>
 </p>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eslint-plugin-operability",
-  "version": "4.0.1",
+  "version": "4.1.1",
   "description": "ESLint plugin for production operability — bans debug code and console logging in production, verbose error messages, and process.exit calls.",
   "type": "commonjs",
   "main": "./src/index.js",
@@ -49,7 +49,7 @@
     "node": ">=18.0.0"
   },
   "dependencies": {
-    "@interlace/eslint-devkit": "^1.18.2"
+    "@interlace/eslint-devkit": "^1.19.0"
   },
   "repository": {
     "type": "git",
@@ -66,5 +66,11 @@
   "funding": {
     "type": "github",
     "url": "git+https://github.com/ofri-peretz/eslint.git"
+  },
+  "interlace": {
+    "surface": {
+      "kind": "language",
+      "note": "Logging, metrics and failure handling over plain JS/TS. No external SDK."
+    }
   }
 }

package/src/index.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.configs=exports.plugin=exports.rules=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");exports.rules={get"no-console-log"(){return require("./rules/operability/no-console-log").noConsoleLog},get"no-process-exit"(){return require("./rules/operability/no-process-exit").noProcessExit},get"no-debug-code-in-production"(){return require("./rules/operability/no-debug-code-in-production").noDebugCodeInProduction},get"no-verbose-error-messages"(){return require("./rules/operability/no-verbose-error-messages").noVerboseErrorMessages},get"require-code-minification"(){return require("./rules/operability/require-code-minification").requireCodeMinification},get"require-data-minimization"(){return require("./rules/operability/require-data-minimization").requireDataMinimization},get"operability/no-console-log"(){return require("./rules/operability/no-console-log").noConsoleLog},get"operability/no-process-exit"(){return require("./rules/operability/no-process-exit").noProcessExit},get"operability/no-debug-code-in-production"(){return require("./rules/operability/no-debug-code-in-production").noDebugCodeInProduction},get"operability/no-verbose-error-messages"(){return require("./rules/operability/no-verbose-error-messages").noVerboseErrorMessages},get"operability/require-code-minification"(){return require("./rules/operability/require-code-minification").requireCodeMinification},get"operability/require-data-minimization"(){return require("./rules/operability/require-data-minimization").requireDataMinimization}};(0,eslint_devkit_1.withCanonicalDocsUrls)("plugin-operability",exports.rules);exports.plugin={meta:{name:"eslint-plugin-operability",version:"4.0.1"},rules:exports.rules};exports.configs={recommended:{plugins:{"operability":exports.plugin},rules:{"operability/no-console-log":"warn","operability/no-debug-code-in-production":"error","operability/no-verbose-error-messages":"warn"}}};exports.default=exports.plugin;
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.configs=exports.plugin=exports.rules=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");exports.rules={get"no-console-log"(){return require("./rules/operability/no-console-log").noConsoleLog},get"no-process-exit"(){return require("./rules/operability/no-process-exit").noProcessExit},get"no-debug-code-in-production"(){return require("./rules/operability/no-debug-code-in-production").noDebugCodeInProduction},get"no-verbose-error-messages"(){return require("./rules/operability/no-verbose-error-messages").noVerboseErrorMessages},get"require-code-minification"(){return require("./rules/operability/require-code-minification").requireCodeMinification},get"require-data-minimization"(){return require("./rules/operability/require-data-minimization").requireDataMinimization},get"operability/no-console-log"(){return require("./rules/operability/no-console-log").noConsoleLog},get"operability/no-process-exit"(){return require("./rules/operability/no-process-exit").noProcessExit},get"operability/no-debug-code-in-production"(){return require("./rules/operability/no-debug-code-in-production").noDebugCodeInProduction},get"operability/no-verbose-error-messages"(){return require("./rules/operability/no-verbose-error-messages").noVerboseErrorMessages},get"operability/require-code-minification"(){return require("./rules/operability/require-code-minification").requireCodeMinification},get"operability/require-data-minimization"(){return require("./rules/operability/require-data-minimization").requireDataMinimization}};(0,eslint_devkit_1.withCanonicalDocsUrls)("plugin-operability",exports.rules);exports.plugin={meta:{name:"eslint-plugin-operability",version:"4.1.1"},rules:exports.rules};exports.configs={recommended:{plugins:{"operability":exports.plugin},rules:{"operability/no-console-log":"warn","operability/no-debug-code-in-production":"error","operability/no-verbose-error-messages":"warn"}}};exports.default=exports.plugin;

package/src/rules/operability/no-console-log.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.noConsoleLog=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");const eslint_devkit_2=require("@interlace/eslint-devkit");const eslint_devkit_3=require("@interlace/eslint-devkit");const non_production_paths_1=require("../../lib/non-production-paths");const DEFAULT_SEVERITY_MAP={log:"debug"};exports.noConsoleLog=(0,eslint_devkit_2.createRule)({name:"no-console-log",meta:{type:"problem",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-operability/docs/rules/no-console-log.md",description:"Disallow console.log with configurable remediation strategies",cwe:"CWE-532",cvss:5},fixable:"code",hasSuggestions:false,messages:{consoleLogFound:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.WARNING,issueName:"console.log in production",cwe:"CWE-532",description:"console.log found in production code",severity:"MEDIUM",fix:"Use logger.debug() or remove statement",documentationLink:"https://owasp.org/www-project-log-review-guide/"}),strategyRemove:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.STRATEGY,issueName:"Remove Strategy",description:"Remove console.log statement",severity:"LOW",fix:"Delete the console.log statement",documentationLink:"https://owasp.org/www-project-log-review-guide/"}),strategyConvert:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.STRATEGY,issueName:"Convert Strategy",description:"Convert to logger method",severity:"LOW",fix:"logger.debug() or logger.info()",documentationLink:"https://github.com/winstonjs/winston"}),strategyComment:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.STRATEGY,issueName:"Comment Strategy",description:"Comment out console.log",severity:"LOW",fix:"// console.log(...)",documentationLink:"https://owasp.org/www-project-log-review-guide/"}),strategyWarn:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.STRATEGY,issueName:"Warn Strategy",description:"Replace with console.warn()",severity:"LOW",fix:"console.warn()",documentationLink:"https://developer.mozilla.org/en-US/docs/Web/API/console/warn"})},schema:[{type:"object",properties:{strategy:{type:"string",enum:["remove","convert","comment","warn"],default:"remove",description:"Strategy for handling console.log"},ignoreNonProductionPaths:{type:"boolean",default:true},ignorePaths:{type:"array",items:{type:"string"},default:[],description:"File path patterns to ignore"},loggerName:{type:"string",default:"logger",description:'Name of the logger to use for convert strategy (e.g., "logger", "winston")'},maxOccurrences:{oneOf:[{type:"number",minimum:1,description:"Maximum number of occurrences to report"},{type:"string",enum:["all"],description:"Report all violations"}],description:'Maximum occurrences to report: number (e.g., 5), "all" (report all), or undefined (no limit)'},severityMap:{type:"object",additionalProperties:{type:"string"},default:{log:"debug"},description:'Advanced: Map console methods to logger methods, e.g., {"log": "info", "debug": "verbose"}'},autoDetectLogger:{type:"boolean",default:true,description:"Auto-detect logger import in file"},sourcePatterns:{type:"array",items:{type:"string"},default:["console"],description:'Object names to match and replace (e.g., ["console", "winston", "oldLogger"]). Uses exact string matching for safety.'}},additionalProperties:false}]},defaultOptions:[{strategy:"remove",ignorePaths:[],ignoreNonProductionPaths:true,loggerName:"logger",severityMap:{log:"log"},autoDetectLogger:true,sourcePatterns:["console"]}],create(context){const options=context.options[0]||{};const{strategy="remove",ignorePaths=[],ignoreNonProductionPaths=true,loggerName,maxOccurrences,severityMap={},autoDetectLogger=true,sourcePatterns=["console"]}=options;const effectiveSeverityMap={...DEFAULT_SEVERITY_MAP,...severityMap};const filename=context.filename;const sourceCode=context.sourceCode;const occurrences=[];let detectedLogger=null;if(autoDetectLogger){const ast=sourceCode.ast;const loggerPatterns=/^(logger|log|winston|bunyan|pino|console)$/i;for(const statement of ast.body){if(statement.type==="ImportDeclaration"){for(const specifier of statement.specifiers){if(specifier.type==="ImportDefaultSpecifier"||specifier.type==="ImportSpecifier"){const name=specifier.local.name;if(loggerPatterns.test(name)){detectedLogger=name;break}}}}if(statement.type==="VariableDeclaration"){for(const declarator of statement.declarations){if(declarator.init?.type==="CallExpression"&&declarator.init.callee.type==="Identifier"&&declarator.init.callee.name==="require"&&declarator.id.type==="Identifier"){const name=declarator.id.name;if(loggerPatterns.test(name)){detectedLogger=name;break}}}}if(detectedLogger)break}}const effectiveLogger=loggerName||detectedLogger||"logger";const shouldIgnoreFile=()=>{if(ignoreNonProductionPaths&&(0,non_production_paths_1.isNonProductionPath)(filename))return true;if(ignorePaths.length===0)return false;const normalizedPath=(0,eslint_devkit_3.normalizePath)(filename);return ignorePaths.some(pattern=>{const normalizedPattern=pattern.replace(/\\/g,"/");if(normalizedPath===normalizedPattern)return true;if(normalizedPath.startsWith(normalizedPattern+"/"))return true;const escaped=normalizedPattern.replace(/[.+^${}()|[\]\\*?]/g,"\\$&");const regexPattern=escaped.replace(/\\\*/g,".*").replace(/\\\?/g,".");return new RegExp(regexPattern).test(normalizedPath)})};if(shouldIgnoreFile()){return{}}return{CallExpression(node){if(node.callee.type!=="MemberExpression"||node.callee.object.type!=="Identifier"||node.callee.property.type!=="Identifier"){return}const sourceObject=node.callee.object.name;const methodName=node.callee.property.name;if(!sourcePatterns.includes(sourceObject)){return}if(!effectiveSeverityMap[methodName]){return}const line=node.loc?.start.line??0;occurrences.push(line);const shouldSkipReport=maxOccurrences!==void 0&&maxOccurrences!=="all"&&typeof maxOccurrences==="number"&&maxOccurrences>0&&occurrences.length>maxOccurrences;const relativePath=(0,eslint_devkit_3.getRelativePath)(process.cwd(),filename);const targetLoggerMethod=effectiveSeverityMap[methodName];const fix=fixer=>{const statement=findParentStatement(node);if(!statement)return null;switch(strategy){case"remove":return fixer.remove(statement);case"convert":return fixer.replaceText(node.callee,`${effectiveLogger}.${targetLoggerMethod}`);case"comment":{const text=sourceCode.getText(statement);return fixer.replaceText(statement,`// ${text}`)}case"warn":return fixer.replaceText(node.callee,"console.warn");default:return null}};let conversionInfo="";if(strategy==="convert"){conversionInfo=` \u2192 ${effectiveLogger}.${targetLoggerMethod}()`}if(!shouldSkipReport){context.report({node,messageId:"consoleLogFound",data:{consoleMethod:`${sourceObject}.${methodName}`,filePath:relativePath,line:String(line),strategy,conversionInfo,logger:effectiveLogger,method:targetLoggerMethod},fix})}}}}});function findParentStatement(node){let current=node;while(current){if(current.type==="ExpressionStatement"||current.type==="ReturnStatement"||current.type==="VariableDeclaration"){return current}current=current.parent}return null}
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.noConsoleLog=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");const eslint_devkit_2=require("@interlace/eslint-devkit");const eslint_devkit_3=require("@interlace/eslint-devkit");const non_production_paths_1=require("../../lib/non-production-paths");const DEFAULT_SEVERITY_MAP={log:"debug"};exports.noConsoleLog=(0,eslint_devkit_2.createRule)({name:"no-console-log",meta:{type:"problem",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-operability/docs/rules/no-console-log.md",description:"Disallow console.log with configurable remediation strategies",cwe:"CWE-532",cvss:5},fixable:"code",hasSuggestions:false,messages:{consoleLogFound:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.WARNING,issueName:"console.log in production",cwe:"CWE-532",description:"console.log found in production code",severity:"MEDIUM",fix:"Use logger.debug() or remove statement",documentationLink:"https://owasp.org/www-project-log-review-guide/"}),strategyRemove:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.STRATEGY,issueName:"Remove Strategy",description:"Remove console.log statement",severity:"LOW",fix:"Delete the console.log statement",documentationLink:"https://owasp.org/www-project-log-review-guide/"}),strategyConvert:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.STRATEGY,issueName:"Convert Strategy",description:"Convert to logger method",severity:"LOW",fix:"logger.debug() or logger.info()",documentationLink:"https://github.com/winstonjs/winston"}),strategyComment:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.STRATEGY,issueName:"Comment Strategy",description:"Comment out console.log",severity:"LOW",fix:"// console.log(...)",documentationLink:"https://owasp.org/www-project-log-review-guide/"}),strategyWarn:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.STRATEGY,issueName:"Warn Strategy",description:"Replace with console.warn()",severity:"LOW",fix:"console.warn()",documentationLink:"https://developer.mozilla.org/en-US/docs/Web/API/console/warn"})},schema:[{type:"object",properties:{strategy:{type:"string",enum:["remove","convert","comment","warn"],default:"remove",description:"Strategy for handling console.log"},ignoreNonProductionPaths:{type:"boolean",default:true},ignorePaths:{type:"array",items:{type:"string"},default:[],description:"File path patterns to ignore"},loggerName:{type:"string",default:"logger",description:'Name of the logger to use for convert strategy (e.g., "logger", "winston")'},maxOccurrences:{oneOf:[{type:"number",minimum:1,description:"Maximum number of occurrences to report"},{type:"string",enum:["all"],description:"Report all violations"}],description:'Maximum occurrences to report: number (e.g., 5), "all" (report all), or undefined (no limit)'},severityMap:{type:"object",additionalProperties:{type:"string"},default:{log:"debug"},description:'Advanced: Map console methods to logger methods, e.g., {"log": "info", "debug": "verbose"}'},autoDetectLogger:{type:"boolean",default:true,description:"Auto-detect logger import in file"},sourcePatterns:{type:"array",items:{type:"string"},default:["console"],description:'Object names to match and replace (e.g., ["console", "winston", "oldLogger"]). Uses exact string matching for safety.'}},additionalProperties:false}]},defaultOptions:[{strategy:"remove",ignorePaths:[],ignoreNonProductionPaths:true,loggerName:"logger",severityMap:{log:"log"},autoDetectLogger:true,sourcePatterns:["console"]}],create(context){const options=context.options[0]||{};const{strategy="remove",ignorePaths=[],ignoreNonProductionPaths=true,loggerName,maxOccurrences,severityMap={},autoDetectLogger=true,sourcePatterns=["console"]}=options;const effectiveSeverityMap={...DEFAULT_SEVERITY_MAP,...severityMap};const filename=context.filename;const sourceCode=context.sourceCode;const occurrences=[];let detectedLogger=null;if(autoDetectLogger){const ast=sourceCode.ast;const loggerPatterns=/^(logger|log|winston|bunyan|pino|console)$/i;for(const statement of ast.body){if(statement.type==="ImportDeclaration"){for(const specifier of statement.specifiers){if(specifier.type==="ImportDefaultSpecifier"||specifier.type==="ImportSpecifier"){const name=specifier.local.name;if(loggerPatterns.test(name)){detectedLogger=name;break}}}}if(statement.type==="VariableDeclaration"){for(const declarator of statement.declarations){if(declarator.init?.type==="CallExpression"&&declarator.init.callee.type==="Identifier"&&declarator.init.callee.name==="require"&&declarator.id.type==="Identifier"){const name=declarator.id.name;if(loggerPatterns.test(name)){detectedLogger=name;break}}}}if(detectedLogger)break}}const effectiveLogger=loggerName||detectedLogger||"logger";const shouldIgnoreFile=()=>{if(ignoreNonProductionPaths&&(0,non_production_paths_1.isNonProductionPath)(filename))return true;if(ignorePaths.length===0)return false;const normalizedPath=(0,eslint_devkit_3.normalizePath)(filename);return ignorePaths.some(pattern=>{const normalizedPattern=pattern.replace(/\\/g,"/");if(normalizedPath===normalizedPattern)return true;if(normalizedPath.startsWith(normalizedPattern+"/"))return true;const escaped=normalizedPattern.replace(/[.+^${}()|[\]\\*?]/g,"\\$&");const regexPattern=escaped.replace(/\\\*/g,".*").replace(/\\\?/g,".");return new RegExp(regexPattern).test(normalizedPath)})};if(shouldIgnoreFile()){return{}}return{CallExpression(node){if(node.callee.type!=="MemberExpression"||node.callee.object.type!=="Identifier"){return}const sourceObject=node.callee.object.name;const methodName=(0,eslint_devkit_1.propertyName)(node.callee);if(methodName===null){return}if(!sourcePatterns.includes(sourceObject)){return}if(!effectiveSeverityMap[methodName]){return}const line=node.loc?.start.line??0;occurrences.push(line);const shouldSkipReport=maxOccurrences!==void 0&&maxOccurrences!=="all"&&typeof maxOccurrences==="number"&&maxOccurrences>0&&occurrences.length>maxOccurrences;const relativePath=(0,eslint_devkit_3.getRelativePath)(process.cwd(),filename);const targetLoggerMethod=effectiveSeverityMap[methodName];const fix=fixer=>{const statement=findParentStatement(node);if(!statement)return null;switch(strategy){case"remove":return fixer.remove(statement);case"convert":return fixer.replaceText(node.callee,`${effectiveLogger}.${targetLoggerMethod}`);case"comment":{const text=sourceCode.getText(statement);return fixer.replaceText(statement,`// ${text}`)}case"warn":return fixer.replaceText(node.callee,"console.warn");default:return null}};let conversionInfo="";if(strategy==="convert"){conversionInfo=` \u2192 ${effectiveLogger}.${targetLoggerMethod}()`}if(!shouldSkipReport){context.report({node,messageId:"consoleLogFound",data:{consoleMethod:`${sourceObject}.${methodName}`,filePath:relativePath,line:String(line),strategy,conversionInfo,logger:effectiveLogger,method:targetLoggerMethod},fix})}}}}});function findParentStatement(node){let current=node;while(current){if(current.type==="ExpressionStatement"||current.type==="ReturnStatement"||current.type==="VariableDeclaration"){return current}current=current.parent}return null}

package/src/rules/operability/no-debug-code-in-production.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.noDebugCodeInProduction=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");const non_production_paths_1=require("../../lib/non-production-paths");exports.noDebugCodeInProduction=(0,eslint_devkit_1.createRule)({name:"no-debug-code-in-production",meta:{type:"problem",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-operability/docs/rules/no-debug-code-in-production.md",description:"Detect debug code in production",cwe:"CWE-489",cvss:7.5},messages:{violationDetected:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.SECURITY,issueName:"violation Detected",cwe:"CWE-489",description:"Detect debug code in production detected - DEBUG, __DEV__, console",severity:"HIGH",fix:"Review and apply secure practices",documentationLink:"https://cwe.mitre.org/data/definitions/489.html"})},schema:[{type:"object",properties:{ignoreNonProductionPaths:{type:"boolean",default:true}},additionalProperties:false}]},defaultOptions:[{ignoreNonProductionPaths:true}],create(context,[options={}]){const{ignoreNonProductionPaths=true}=options;if(ignoreNonProductionPaths&&(0,non_production_paths_1.isNonProductionPath)(context.filename)){return{}}return{Identifier(node){if(["DEBUG","__DEV__"].includes(node.name)){context.report({node,messageId:"violationDetected"})}},CallExpression(node){if(node.callee.type===eslint_devkit_1.AST_NODE_TYPES.MemberExpression&&node.callee.object.type===eslint_devkit_1.AST_NODE_TYPES.Identifier&&node.callee.object.name==="console"&&node.callee.property.type===eslint_devkit_1.AST_NODE_TYPES.Identifier&&node.callee.property.name==="log"){context.report({node,messageId:"violationDetected"})}}}}});
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.noDebugCodeInProduction=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");const non_production_paths_1=require("../../lib/non-production-paths");exports.noDebugCodeInProduction=(0,eslint_devkit_1.createRule)({name:"no-debug-code-in-production",meta:{type:"problem",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-operability/docs/rules/no-debug-code-in-production.md",description:"Detect debug code in production",cwe:"CWE-489",cvss:7.5},messages:{violationDetected:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.SECURITY,issueName:"violation Detected",cwe:"CWE-489",description:"Detect debug code in production detected - DEBUG, __DEV__, console",severity:"HIGH",fix:"Review and apply secure practices",documentationLink:"https://cwe.mitre.org/data/definitions/489.html"})},schema:[{type:"object",properties:{ignoreNonProductionPaths:{type:"boolean",default:true}},additionalProperties:false}]},defaultOptions:[{ignoreNonProductionPaths:true}],create(context,[options={}]){const{ignoreNonProductionPaths=true}=options;if(ignoreNonProductionPaths&&(0,non_production_paths_1.isNonProductionPath)(context.filename)){return{}}return{Identifier(node){if(["DEBUG","__DEV__"].includes(node.name)){context.report({node,messageId:"violationDetected"})}},CallExpression(node){if(node.callee.type===eslint_devkit_1.AST_NODE_TYPES.MemberExpression&&node.callee.object.type===eslint_devkit_1.AST_NODE_TYPES.Identifier&&node.callee.object.name==="console"&&(0,eslint_devkit_1.propertyName)(node.callee)==="log"){context.report({node,messageId:"violationDetected"})}}}}});

package/src/rules/operability/no-process-exit.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.noProcessExit=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");const eslint_devkit_2=require("@interlace/eslint-devkit");exports.noProcessExit=(0,eslint_devkit_1.createRule)({name:"no-process-exit",meta:{type:"problem",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-operability/docs/rules/no-process-exit.md",description:"Prevent usage of process.exit() which can terminate the process unexpectedly"},hasSuggestions:false,messages:{noProcessExit:(0,eslint_devkit_2.formatLLMMessage)({icon:eslint_devkit_2.MessageIcons.WARNING,issueName:"Process Exit",description:"Avoid using process.exit()",severity:"HIGH",fix:"Use throw error or return exit code instead",documentationLink:"https://github.com/sindresorhus/eslint-plugin-unicorn/blob/main/docs/rules/no-process-exit.md"})},schema:[{type:"object",properties:{allow:{type:"array",items:{type:"string"},default:[]}},additionalProperties:false}]},defaultOptions:[{allow:[]}],create(context){function isInAllowedContext(){return false}function isProcessExitCall(node){function isProcessExitMember(callee){if(callee.type==="MemberExpression"&&callee.object.type==="Identifier"&&callee.object.name==="process"&&callee.property.type==="Identifier"&&callee.property.name==="exit"){return true}return false}return isProcessExitMember(node.callee)}return{CallExpression(node){if(isProcessExitCall(node)&&!isInAllowedContext()){context.report({node,messageId:"noProcessExit",data:{current:"process.exit()",fix:"throw error or return"}})}}}}});
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.noProcessExit=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");const eslint_devkit_2=require("@interlace/eslint-devkit");exports.noProcessExit=(0,eslint_devkit_1.createRule)({name:"no-process-exit",meta:{type:"problem",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-operability/docs/rules/no-process-exit.md",description:"Prevent usage of process.exit() which can terminate the process unexpectedly"},hasSuggestions:false,messages:{noProcessExit:(0,eslint_devkit_2.formatLLMMessage)({icon:eslint_devkit_2.MessageIcons.WARNING,issueName:"Process Exit",description:"Avoid using process.exit()",severity:"HIGH",fix:"Use throw error or return exit code instead",documentationLink:"https://github.com/sindresorhus/eslint-plugin-unicorn/blob/main/docs/rules/no-process-exit.md"})},schema:[{type:"object",properties:{allow:{type:"array",items:{type:"string"},default:[]}},additionalProperties:false}]},defaultOptions:[{allow:[]}],create(context){function isInAllowedContext(){return false}function isProcessExitCall(node){function isProcessExitMember(callee){if(callee.type==="MemberExpression"&&callee.object.type==="Identifier"&&callee.object.name==="process"&&(0,eslint_devkit_1.propertyName)(callee)==="exit"){return true}return false}return isProcessExitMember(node.callee)}return{CallExpression(node){if(isProcessExitCall(node)&&!isInAllowedContext()){context.report({node,messageId:"noProcessExit",data:{current:"process.exit()",fix:"throw error or return"}})}}}}});

package/src/rules/operability/no-verbose-error-messages.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.noVerboseErrorMessages=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");exports.noVerboseErrorMessages=(0,eslint_devkit_1.createRule)({name:"no-verbose-error-messages",meta:{type:"problem",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-operability/docs/rules/no-verbose-error-messages.md",description:"Prevent exposing stack traces to users",cwe:"CWE-209",cvss:5},messages:{violationDetected:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.SECURITY,issueName:"violation Detected",cwe:"CWE-209",description:"Prevent exposing stack traces to users detected - this is a security risk",severity:"MEDIUM",fix:"Review and apply secure practices",documentationLink:"https://cwe.mitre.org/data/definitions/209.html"})},schema:[]},defaultOptions:[],create(context){function report(node){context.report({node,messageId:"violationDetected"})}return{CallExpression(node){if(node.type===eslint_devkit_1.AST_NODE_TYPES.CallExpression&&node.callee.type===eslint_devkit_1.AST_NODE_TYPES.MemberExpression&&node.callee.property.type===eslint_devkit_1.AST_NODE_TYPES.Identifier&&["send","json"].includes(node.callee.property.name)){const arg=node.arguments[0];if(arg?.type===eslint_devkit_1.AST_NODE_TYPES.MemberExpression&&arg.property.type===eslint_devkit_1.AST_NODE_TYPES.Identifier&&arg.property.name==="stack"){report(node)}if(arg?.type===eslint_devkit_1.AST_NODE_TYPES.ObjectExpression){const stackProp=arg.properties.find(p=>p.type===eslint_devkit_1.AST_NODE_TYPES.Property&&p.key.type===eslint_devkit_1.AST_NODE_TYPES.Identifier&&(p.key.name==="stack"||p.value.type===eslint_devkit_1.AST_NODE_TYPES.MemberExpression&&p.value.property.type===eslint_devkit_1.AST_NODE_TYPES.Identifier&&p.value.property.name==="stack"));if(stackProp){report(node)}}}}}}});
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.noVerboseErrorMessages=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");exports.noVerboseErrorMessages=(0,eslint_devkit_1.createRule)({name:"no-verbose-error-messages",meta:{type:"problem",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-operability/docs/rules/no-verbose-error-messages.md",description:"Prevent exposing stack traces to users",cwe:"CWE-209",cvss:5},messages:{violationDetected:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.SECURITY,issueName:"violation Detected",cwe:"CWE-209",description:"Prevent exposing stack traces to users detected - this is a security risk",severity:"MEDIUM",fix:"Review and apply secure practices",documentationLink:"https://cwe.mitre.org/data/definitions/209.html"})},schema:[]},defaultOptions:[],create(context){function report(node){context.report({node,messageId:"violationDetected"})}return{CallExpression(node){if(node.type===eslint_devkit_1.AST_NODE_TYPES.CallExpression&&node.callee.type===eslint_devkit_1.AST_NODE_TYPES.MemberExpression&&(0,eslint_devkit_1.namesOneOf)((0,eslint_devkit_1.propertyName)(node.callee),["send","json"])){const arg=node.arguments[0];if(arg?.type===eslint_devkit_1.AST_NODE_TYPES.MemberExpression&&(0,eslint_devkit_1.propertyName)(arg)==="stack"){report(node)}if(arg?.type===eslint_devkit_1.AST_NODE_TYPES.ObjectExpression){const stackProp=arg.properties.find(p=>p.type===eslint_devkit_1.AST_NODE_TYPES.Property&&p.key.type===eslint_devkit_1.AST_NODE_TYPES.Identifier&&(p.key.name==="stack"||p.value.type===eslint_devkit_1.AST_NODE_TYPES.MemberExpression&&(0,eslint_devkit_1.propertyName)(p.value)==="stack"));if(stackProp){report(node)}}}}}}});