frontend-guardian-core 2.6.0

package/dist/scanners/platform-scanner.js

@@ -0,0 +1,320 @@
+"use strict";
+/**
+ * 多端平台适配 Scanner
+ * 迁移自 scan-platform.sh，检测多端项目的平台适配问题
+ *
+ * 规则列表：
+ * 1. platform-mp-size — 小程序包体积检查
+ * 2. platform-mp-base64 — base64 图片检查
+ * 3. platform-mp-http — HTTP 协议检查
+ * 4. platform-mobile-safearea — 安全区域适配
+ * 5. platform-harmony — 鸿蒙 ArkTS 规范
+ * 6. platform-responsive — 响应式断点配置
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.platformRules = void 0;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+exports.platformRules = [
+    {
+        id: "platform-mp-size",
+        name: "小程序包体积检查",
+        description: "小程序主包体积不应超过 2MB",
+        severity: "critical",
+        category: "platform",
+        defaultEnabled: true,
+        docsUrl: "https://github.com/wzm111/frontend-guardian/blob/main/docs/rules/platform-mp-size.md",
+        platforms: ["wechat-mp", "alipay-mp", "douyin-mp"],
+        execute(context) {
+            const issues = [];
+            // 检查构建输出目录
+            const buildDirs = ["dist/build/mp-weixin", "unpackage/dist/build/mp-weixin", "dist", "build/mp-weixin"];
+            for (const dir of buildDirs) {
+                const fullPath = (0, node_path_1.resolve)((0, node_path_1.dirname)(context.filePath), dir);
+                if (!(0, node_fs_1.existsSync)(fullPath))
+                    continue;
+                try {
+                    const stats = (0, node_fs_1.statSync)(fullPath);
+                    if (!stats.isDirectory())
+                        continue;
+                    // 粗略计算目录大小
+                    let totalSize = 0;
+                    const calcSize = (d) => {
+                        const entries = (0, node_fs_1.readdirSync)(d, { withFileTypes: true });
+                        for (const entry of entries) {
+                            const entryPath = (0, node_path_1.resolve)(d, entry.name);
+                            if (entry.isDirectory()) {
+                                calcSize(entryPath);
+                            }
+                            else {
+                                totalSize += (0, node_fs_1.statSync)(entryPath).size;
+                            }
+                        }
+                    };
+                    calcSize(fullPath);
+                    const sizeKB = Math.round(totalSize / 1024);
+                    if (sizeKB > 2048) {
+                        issues.push({
+                            ruleId: "platform-mp-size",
+                            title: `小程序包体积过大: ${sizeKB}KB`,
+                            description: `小程序主包体积 ${sizeKB}KB 超过 2MB 限制，建议启用分包加载、压缩图片、移除未使用代码`,
+                            severity: "critical",
+                            file: context.filePath,
+                            line: 1,
+                            column: 1,
+                            source: `${dir}: ${sizeKB}KB`,
+                        });
+                    }
+                    else if (sizeKB > 1800) {
+                        issues.push({
+                            ruleId: "platform-mp-size",
+                            title: `小程序包体积接近上限: ${sizeKB}KB`,
+                            description: `小程序主包体积 ${sizeKB}KB 接近 2MB 限制，建议优化`,
+                            severity: "warning",
+                            file: context.filePath,
+                            line: 1,
+                            column: 1,
+                            source: `${dir}: ${sizeKB}KB`,
+                        });
+                    }
+                    // 只检查第一个存在的目录
+                    break;
+                }
+                catch {
+                    // 跳过
+                }
+            }
+            return issues;
+        },
+    },
+    {
+        id: "platform-mp-base64",
+        name: "小程序 base64 图片检查",
+        description: "小程序中不应内联大图 base64",
+        severity: "warning",
+        category: "platform",
+        defaultEnabled: true,
+        docsUrl: "https://github.com/wzm111/frontend-guardian/blob/main/docs/rules/platform-mp-base64.md",
+        platforms: ["wechat-mp", "alipay-mp", "douyin-mp"],
+        execute(context) {
+            const issues = [];
+            const source = context.source;
+            // 检测 base64 图片（较长的 base64 字符串暗示大图）
+            const base64Regex = /data:image\/[^;]+;base64,[A-Za-z0-9+/]{1000,}/g;
+            let match;
+            while ((match = base64Regex.exec(source)) !== null) {
+                const line = source.slice(0, match.index).split("\n").length;
+                issues.push({
+                    ruleId: "platform-mp-base64",
+                    title: "包含大图 base64 编码",
+                    description: "检测到较大的 base64 图片内联，会增加包体积。建议改为网络图片或放到 static 目录",
+                    severity: "warning",
+                    file: context.filePath,
+                    line,
+                    column: 1,
+                    source: match[0].slice(0, 50) + "...",
+                });
+            }
+            return issues;
+        },
+    },
+    {
+        id: "platform-mp-http",
+        name: "应使用 HTTPS",
+        description: "小程序中不应使用 HTTP 协议",
+        severity: "critical",
+        category: "platform",
+        defaultEnabled: true,
+        docsUrl: "https://github.com/wzm111/frontend-guardian/blob/main/docs/rules/platform-mp-http.md",
+        platforms: ["wechat-mp", "alipay-mp", "douyin-mp", "app"],
+        execute(context) {
+            const issues = [];
+            const lines = context.source.split("\n");
+            for (let i = 0; i < lines.length; i++) {
+                const line = lines[i];
+                // 检测 http://（排除 localhost 和注释）
+                const match = line.match(/http:\/\/[^\s"'`]+/);
+                if (match) {
+                    const url = match[0];
+                    if (url.includes("localhost") || url.includes("127.0.0.1"))
+                        continue;
+                    if (line.trim().startsWith("//"))
+                        continue;
+                    issues.push({
+                        ruleId: "platform-mp-http",
+                        title: "使用 HTTP 协议",
+                        description: `检测到 HTTP 请求地址 ${url}，小程序和移动端要求使用 HTTPS`,
+                        severity: "critical",
+                        file: context.filePath,
+                        line: i + 1,
+                        column: (match.index || 0) + 1,
+                        source: line.trim(),
+                    });
+                }
+            }
+            return issues;
+        },
+    },
+    {
+        id: "platform-mobile-safearea",
+        name: "移动端安全区域适配",
+        description: "固定定位元素应适配安全区域",
+        severity: "warning",
+        category: "platform",
+        defaultEnabled: true,
+        docsUrl: "https://github.com/wzm111/frontend-guardian/blob/main/docs/rules/platform-mobile-safearea.md",
+        platforms: ["h5", "app", "react-native", "flutter"],
+        execute(context) {
+            const issues = [];
+            const ext = (0, node_path_1.extname)(context.filePath).toLowerCase();
+            // CSS 文件检测
+            if ([".css", ".scss", ".less"].includes(ext)) {
+                const source = context.source;
+                // 检测固定定位但未适配安全区域
+                if (/position\s*:\s*fixed|fixed\s*:\s*bottom/i.test(source)) {
+                    if (!/safe-area-inset|env\(/i.test(source)) {
+                        issues.push({
+                            ruleId: "platform-mobile-safearea",
+                            title: "固定定位元素缺少安全区域适配",
+                            description: "检测到 position: fixed 布局，建议添加 safe-area-inset-bottom 适配刘海屏/全面屏",
+                            severity: "warning",
+                            file: context.filePath,
+                            line: 1,
+                            column: 1,
+                            source: "position: fixed",
+                        });
+                    }
+                }
+                // 检测点击区域过小
+                const sizeRegex = /width\s*:\s*(\d+)px.*height\s*:\s*(\d+)px/gi;
+                let match;
+                while ((match = sizeRegex.exec(source)) !== null) {
+                    const w = parseInt(match[1], 10);
+                    const h = parseInt(match[2], 10);
+                    if (w < 44 || h < 44) {
+                        const line = source.slice(0, match.index).split("\n").length;
+                        issues.push({
+                            ruleId: "platform-mobile-safearea",
+                            title: "点击区域可能小于 44x44px",
+                            description: `检测到元素尺寸 ${w}x${h}px，移动端点击区域建议不小于 44x44px（WCAG 推荐）`,
+                            severity: "suggestion",
+                            file: context.filePath,
+                            line,
+                            column: (match.index || 0) + 1,
+                            source: match[0],
+                        });
+                    }
+                }
+            }
+            return issues;
+        },
+    },
+    {
+        id: "platform-harmony",
+        name: "鸿蒙 ArkTS 规范",
+        description: "鸿蒙项目应遵循 ArkTS 编码规范",
+        severity: "warning",
+        category: "platform",
+        defaultEnabled: true,
+        docsUrl: "https://github.com/wzm111/frontend-guardian/blob/main/docs/rules/platform-harmony.md",
+        platforms: ["harmony"],
+        execute(context) {
+            const issues = [];
+            const ext = (0, node_path_1.extname)(context.filePath).toLowerCase();
+            if (ext !== ".ets")
+                return issues;
+            const source = context.source;
+            const lines = source.split("\n");
+            // 检测 struct 缺少装饰器
+            for (let i = 0; i < lines.length; i++) {
+                const line = lines[i];
+                if (/\bstruct\s+\w+/.test(line)) {
+                    // 检查前面几行是否有 @Component 或 @Entry
+                    const prevLines = lines.slice(Math.max(0, i - 5), i).join("\n");
+                    if (!/@Component|@Entry|@Preview|@Builder/i.test(prevLines)) {
+                        issues.push({
+                            ruleId: "platform-harmony",
+                            title: "ArkTS struct 缺少装饰器",
+                            description: "ArkTS struct 应使用 @Component、@Entry 或 @Preview 装饰器声明",
+                            severity: "warning",
+                            file: context.filePath,
+                            line: i + 1,
+                            column: 1,
+                            source: line.trim(),
+                        });
+                    }
+                }
+            }
+            // 检测 let 声明的状态未使用装饰器
+            const letRegex = /\blet\s+(\w+)\s*:\s*\w+/g;
+            let match;
+            while ((match = letRegex.exec(source)) !== null) {
+                const nearby = source.slice(Math.max(0, match.index - 100), match.index);
+                if (!/@State|@Prop|@Link|@Provide|@Consume|@ObjectLink|@StorageLink/i.test(nearby)) {
+                    const line = source.slice(0, match.index).split("\n").length;
+                    issues.push({
+                        ruleId: "platform-harmony",
+                        title: `状态变量 '${match[1]}' 未使用装饰器管理`,
+                        description: "ArkTS 中可变状态应使用 @State/@Prop/@Link 等装饰器管理，确保 UI 正确更新",
+                        severity: "warning",
+                        file: context.filePath,
+                        line,
+                        column: (match.index || 0) + 1,
+                        source: match[0],
+                    });
+                }
+            }
+            return issues;
+        },
+    },
+    {
+        id: "platform-responsive",
+        name: "响应式断点配置",
+        description: "PC/H5 项目应配置响应式断点",
+        severity: "suggestion",
+        category: "platform",
+        defaultEnabled: true,
+        docsUrl: "https://github.com/wzm111/frontend-guardian/blob/main/docs/rules/platform-responsive.md",
+        platforms: ["pc", "h5"],
+        execute(context) {
+            const issues = [];
+            const ext = (0, node_path_1.extname)(context.filePath).toLowerCase();
+            // CSS 文件检测媒体查询
+            if ([".css", ".scss", ".less"].includes(ext)) {
+                if (/@media\s*\(/.test(context.source)) {
+                    // 有媒体查询，通过
+                    return [];
+                }
+            }
+            // JS/TS 文件检测响应式 hook
+            if ([".js", ".ts", ".jsx", ".tsx", ".vue"].includes(ext)) {
+                if (/innerWidth|matchMedia|useBreakpoint|breakpoints/i.test(context.source)) {
+                    return [];
+                }
+            }
+            // 如果不是样式文件或 JS 文件，不检查
+            if (![".css", ".scss", ".less", ".js", ".ts", ".jsx", ".tsx", ".vue"].includes(ext)) {
+                return [];
+            }
+            // 只在入口文件或全局样式文件中提示
+            const fileName = context.filePath.toLowerCase();
+            if (fileName.includes("global") ||
+                fileName.includes("index") ||
+                fileName.includes("app") ||
+                fileName.includes("main")) {
+                issues.push({
+                    ruleId: "platform-responsive",
+                    title: "未检测到响应式断点配置",
+                    description: "PC/H5 项目建议配置响应式断点（@media query 或 JS hook），以适配不同屏幕尺寸",
+                    severity: "suggestion",
+                    file: context.filePath,
+                    line: 1,
+                    column: 1,
+                    source: "无响应式配置",
+                });
+            }
+            return issues;
+        },
+    },
+];
+//# sourceMappingURL=platform-scanner.js.map

package/dist/scanners/platform-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-scanner.js","sourceRoot":"","sources":["../../src/scanners/platform-scanner.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAEH,qCAA4D;AAC5D,yCAAsD;AAGzC,QAAA,aAAa,GAAW;IACjC;QACI,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,iBAAiB;QAC9B,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,sFAAsF;QAC/F,SAAS,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC;QAClD,OAAO,CAAC,OAAoB;YACxB,MAAM,MAAM,GAAY,EAAE,CAAC;YAE3B,WAAW;YACX,MAAM,SAAS,GAAG,CAAC,sBAAsB,EAAE,gCAAgC,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;YAExG,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;gBAC1B,MAAM,QAAQ,GAAG,IAAA,mBAAO,EAAC,IAAA,mBAAO,EAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;gBACzD,IAAI,CAAC,IAAA,oBAAU,EAAC,QAAQ,CAAC;oBAAE,SAAS;gBAEpC,IAAI,CAAC;oBACD,MAAM,KAAK,GAAG,IAAA,kBAAQ,EAAC,QAAQ,CAAC,CAAC;oBACjC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;wBAAE,SAAS;oBAEnC,WAAW;oBACX,IAAI,SAAS,GAAG,CAAC,CAAC;oBAClB,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE;wBAC3B,MAAM,OAAO,GAAG,IAAA,qBAAW,EAAC,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;wBACxD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;4BAC1B,MAAM,SAAS,GAAG,IAAA,mBAAO,EAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;4BACzC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gCACtB,QAAQ,CAAC,SAAS,CAAC,CAAC;4BACxB,CAAC;iCAAM,CAAC;gCACJ,SAAS,IAAI,IAAA,kBAAQ,EAAC,SAAS,CAAC,CAAC,IAAI,CAAC;4BAC1C,CAAC;wBACL,CAAC;oBACL,CAAC,CAAC;oBACF,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBAEnB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;oBAC5C,IAAI,MAAM,GAAG,IAAI,EAAE,CAAC;wBAChB,MAAM,CAAC,IAAI,CAAC;4BACR,MAAM,EAAE,kBAAkB;4BAC1B,KAAK,EAAE,aAAa,MAAM,IAAI;4BAC9B,WAAW,EAAE,WAAW,MAAM,oCAAoC;4BAClE,QAAQ,EAAE,UAAU;4BACpB,IAAI,EAAE,OAAO,CAAC,QAAQ;4BACtB,IAAI,EAAE,CAAC;4BACP,MAAM,EAAE,CAAC;4BACT,MAAM,EAAE,GAAG,GAAG,KAAK,MAAM,IAAI;yBAChC,CAAC,CAAC;oBACP,CAAC;yBAAM,IAAI,MAAM,GAAG,IAAI,EAAE,CAAC;wBACvB,MAAM,CAAC,IAAI,CAAC;4BACR,MAAM,EAAE,kBAAkB;4BAC1B,KAAK,EAAE,eAAe,MAAM,IAAI;4BAChC,WAAW,EAAE,WAAW,MAAM,mBAAmB;4BACjD,QAAQ,EAAE,SAAS;4BACnB,IAAI,EAAE,OAAO,CAAC,QAAQ;4BACtB,IAAI,EAAE,CAAC;4BACP,MAAM,EAAE,CAAC;4BACT,MAAM,EAAE,GAAG,GAAG,KAAK,MAAM,IAAI;yBAChC,CAAC,CAAC;oBACP,CAAC;oBAED,cAAc;oBACd,MAAM;gBACV,CAAC;gBAAC,MAAM,CAAC;oBACL,KAAK;gBACT,CAAC;YACL,CAAC;YAED,OAAO,MAAM,CAAC;QAClB,CAAC;KACJ;IAED;QACI,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,mBAAmB;QAChC,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,wFAAwF;QACjG,SAAS,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC;QAClD,OAAO,CAAC,OAAoB;YACxB,MAAM,MAAM,GAAY,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAE9B,mCAAmC;YACnC,MAAM,WAAW,GAAG,gDAAgD,CAAC;YACrE,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACjD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;gBAC7D,MAAM,CAAC,IAAI,CAAC;oBACR,MAAM,EAAE,oBAAoB;oBAC5B,KAAK,EAAE,gBAAgB;oBACvB,WAAW,EAAE,iDAAiD;oBAC9D,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,OAAO,CAAC,QAAQ;oBACtB,IAAI;oBACJ,MAAM,EAAE,CAAC;oBACT,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;iBACxC,CAAC,CAAC;YACP,CAAC;YAED,OAAO,MAAM,CAAC;QAClB,CAAC;KACJ;IAED;QACI,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,kBAAkB;QAC/B,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,sFAAsF;QAC/F,SAAS,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC;QACzD,OAAO,CAAC,OAAoB;YACxB,MAAM,MAAM,GAAY,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAEzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,+BAA+B;gBAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;gBAC/C,IAAI,KAAK,EAAE,CAAC;oBACR,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBACrB,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;wBAAE,SAAS;oBACrE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;wBAAE,SAAS;oBAE3C,MAAM,CAAC,IAAI,CAAC;wBACR,MAAM,EAAE,kBAAkB;wBAC1B,KAAK,EAAE,YAAY;wBACnB,WAAW,EAAE,iBAAiB,GAAG,oBAAoB;wBACrD,QAAQ,EAAE,UAAU;wBACpB,IAAI,EAAE,OAAO,CAAC,QAAQ;wBACtB,IAAI,EAAE,CAAC,GAAG,CAAC;wBACX,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;wBAC9B,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE;qBACtB,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;YAED,OAAO,MAAM,CAAC;QAClB,CAAC;KACJ;IAED;QACI,EAAE,EAAE,0BAA0B;QAC9B,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,eAAe;QAC5B,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,8FAA8F;QACvG,SAAS,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,CAAC;QACnD,OAAO,CAAC,OAAoB;YACxB,MAAM,MAAM,GAAY,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YAEpD,WAAW;YACX,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;gBAC9B,iBAAiB;gBACjB,IAAI,0CAA0C,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC1D,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;wBACzC,MAAM,CAAC,IAAI,CAAC;4BACR,MAAM,EAAE,0BAA0B;4BAClC,KAAK,EAAE,gBAAgB;4BACvB,WAAW,EACP,8DAA8D;4BAClE,QAAQ,EAAE,SAAS;4BACnB,IAAI,EAAE,OAAO,CAAC,QAAQ;4BACtB,IAAI,EAAE,CAAC;4BACP,MAAM,EAAE,CAAC;4BACT,MAAM,EAAE,iBAAiB;yBAC5B,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;gBAED,WAAW;gBACX,MAAM,SAAS,GAAG,6CAA6C,CAAC;gBAChE,IAAI,KAAK,CAAC;gBACV,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC/C,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACjC,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACjC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;wBACnB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;wBAC7D,MAAM,CAAC,IAAI,CAAC;4BACR,MAAM,EAAE,0BAA0B;4BAClC,KAAK,EAAE,kBAAkB;4BACzB,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,kCAAkC;4BAChE,QAAQ,EAAE,YAAY;4BACtB,IAAI,EAAE,OAAO,CAAC,QAAQ;4BACtB,IAAI;4BACJ,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;4BAC9B,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;yBACnB,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;YACL,CAAC;YAED,OAAO,MAAM,CAAC;QAClB,CAAC;KACJ;IAED;QACI,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,oBAAoB;QACjC,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,sFAAsF;QAC/F,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,OAAO,CAAC,OAAoB;YACxB,MAAM,MAAM,GAAY,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACpD,IAAI,GAAG,KAAK,MAAM;gBAAE,OAAO,MAAM,CAAC;YAElC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAEjC,kBAAkB;YAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9B,gCAAgC;oBAChC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAChE,IAAI,CAAC,sCAAsC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC1D,MAAM,CAAC,IAAI,CAAC;4BACR,MAAM,EAAE,kBAAkB;4BAC1B,KAAK,EAAE,oBAAoB;4BAC3B,WAAW,EAAE,qDAAqD;4BAClE,QAAQ,EAAE,SAAS;4BACnB,IAAI,EAAE,OAAO,CAAC,QAAQ;4BACtB,IAAI,EAAE,CAAC,GAAG,CAAC;4BACX,MAAM,EAAE,CAAC;4BACT,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE;yBACtB,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;YACL,CAAC;YAED,qBAAqB;YACrB,MAAM,QAAQ,GAAG,0BAA0B,CAAC;YAC5C,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBACzE,IAAI,CAAC,gEAAgE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBACjF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;oBAC7D,MAAM,CAAC,IAAI,CAAC;wBACR,MAAM,EAAE,kBAAkB;wBAC1B,KAAK,EAAE,SAAS,KAAK,CAAC,CAAC,CAAC,YAAY;wBACpC,WAAW,EAAE,qDAAqD;wBAClE,QAAQ,EAAE,SAAS;wBACnB,IAAI,EAAE,OAAO,CAAC,QAAQ;wBACtB,IAAI;wBACJ,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;wBAC9B,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;qBACnB,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;YAED,OAAO,MAAM,CAAC;QAClB,CAAC;KACJ;IAED;QACI,EAAE,EAAE,qBAAqB;QACzB,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,kBAAkB;QAC/B,QAAQ,EAAE,YAAY;QACtB,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,yFAAyF;QAClG,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QACvB,OAAO,CAAC,OAAoB;YACxB,MAAM,MAAM,GAAY,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YAEpD,eAAe;YACf,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3C,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBACrC,WAAW;oBACX,OAAO,EAAE,CAAC;gBACd,CAAC;YACL,CAAC;YAED,qBAAqB;YACrB,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvD,IAAI,kDAAkD,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC1E,OAAO,EAAE,CAAC;gBACd,CAAC;YACL,CAAC;YAED,sBAAsB;YACtB,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClF,OAAO,EAAE,CAAC;YACd,CAAC;YAED,mBAAmB;YACnB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAChD,IACI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC3B,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC1B,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACxB,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC3B,CAAC;gBACC,MAAM,CAAC,IAAI,CAAC;oBACR,MAAM,EAAE,qBAAqB;oBAC7B,KAAK,EAAE,aAAa;oBACpB,WAAW,EAAE,qDAAqD;oBAClE,QAAQ,EAAE,YAAY;oBACtB,IAAI,EAAE,OAAO,CAAC,QAAQ;oBACtB,IAAI,EAAE,CAAC;oBACP,MAAM,EAAE,CAAC;oBACT,MAAM,EAAE,QAAQ;iBACnB,CAAC,CAAC;YACP,CAAC;YAED,OAAO,MAAM,CAAC;QAClB,CAAC;KACJ;CACJ,CAAC"}

package/dist/scanners/security-scanner.d.ts

@@ -0,0 +1,7 @@
+/**
+ * 安全规则 Scanner
+ * 参考 OWASP Top 10、SonarQube 安全规则和 CWE 漏洞分类
+ */
+import type { Rule } from "../types.js";
+export declare const securityRules: Rule[];
+//# sourceMappingURL=security-scanner.d.ts.map

package/dist/scanners/security-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-scanner.d.ts","sourceRoot":"","sources":["../../src/scanners/security-scanner.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,IAAI,EAAsB,MAAM,YAAY,CAAC;AAsB3D,eAAO,MAAM,aAAa,EAAE,IAAI,EAmW/B,CAAC"}