fullshield 0.4.0 → 1.0.0

package/dist/bench/score.js

@@ -1,118 +1,2 @@
-// src/bench/score.ts
-var BENCH_CLASSES = [
-  "sqli",
-  "nosqli",
-  "cmdi",
-  "path",
-  "xss",
-  "ssrf",
-  "redirect",
-  "eval",
-  "jwt",
-  "crypto",
-  "proto",
-  "secrets",
-  "deps",
-  "config",
-  "other"
-];
-var IN_SCOPE_CLASSES = [
-  "sqli",
-  "nosqli",
-  "cmdi",
-  "path",
-  "xss",
-  "ssrf",
-  "redirect",
-  "eval",
-  "jwt",
-  "crypto",
-  "proto",
-  "secrets",
-  "deps",
-  "config"
-];
-var RULE_CLASS = {
-  "SAST-SQLI-001": "sqli",
-  "SAST-NOSQLI-001": "nosqli",
-  "SAST-CMDI-001": "cmdi",
-  "SAST-PATH-001": "path",
-  "SAST-XSS-001": "xss",
-  "SAST-SSRF-001": "ssrf",
-  "SAST-REDIRECT-001": "redirect",
-  "SAST-EVAL-001": "eval",
-  "SAST-JWT-001": "jwt",
-  "SAST-CRYPTO-001": "crypto",
-  "SAST-PROTO-001": "proto"
-};
-function classForRule(ruleId) {
-  if (RULE_CLASS[ruleId]) return RULE_CLASS[ruleId];
-  if (ruleId.startsWith("SECRET-")) return "secrets";
-  if (ruleId.startsWith("DEPS-")) return "deps";
-  if (ruleId.startsWith("CONFIG-")) return "config";
-  return "other";
-}
-function normFile(file) {
-  return file.replaceAll("\\", "/").replace(/^\.\//, "");
-}
-function findingKey(finding) {
-  return `${finding.ruleId}|${normFile(finding.file ?? "")}|${finding.line ?? 0}`;
-}
-function filesMatch(finding, truth) {
-  if (!finding.file) return false;
-  const ff = normFile(finding.file);
-  const tf = normFile(truth.file);
-  return ff === tf || ff.endsWith(`/${tf}`) || tf.endsWith(`/${ff}`);
-}
-function isFileLevelFinding(finding) {
-  return finding.line === void 0 || finding.line === 0;
-}
-function isTruePositive(finding, truth) {
-  if (classForRule(finding.ruleId) !== truth.class) return false;
-  if (!filesMatch(finding, truth)) return false;
-  const line = finding.line ?? 0;
-  return Math.abs(line - truth.line) <= 3;
-}
-function isLineAttributionOnly(findings, truth) {
-  const same = findings.filter((f) => classForRule(f.ruleId) === truth.class && filesMatch(f, truth));
-  const ruleIds = new Set(same.map((f) => f.ruleId));
-  for (const ruleId of ruleIds) {
-    const group = same.filter((f) => f.ruleId === ruleId);
-    const lined = group.some((f) => !isFileLevelFinding(f) && Math.abs((f.line ?? 0) - truth.line) <= 3);
-    const fileLevel = group.some((f) => isFileLevelFinding(f));
-    if (lined && fileLevel) return true;
-  }
-  return false;
-}
-function scoreFindings(findings, truth) {
-  const used = /* @__PURE__ */ new Set();
-  const truePositives = [];
-  const lineAttributionOnly = [];
-  const inScope = truth.filter((e) => e.inScope === true);
-  const outOfScope = truth.filter((e) => e.inScope !== true);
-  for (const entry of inScope) {
-    if (isLineAttributionOnly(findings, entry)) {
-      lineAttributionOnly.push(entry);
-      continue;
-    }
-    const hit = findings.findIndex((f, i) => !used.has(i) && isTruePositive(f, entry));
-    if (hit >= 0) {
-      used.add(hit);
-      truePositives.push(entry);
-    }
-  }
-  const counted = /* @__PURE__ */ new Set([...truePositives, ...lineAttributionOnly]);
-  const inScopeMisses = inScope.filter((e) => !counted.has(e));
-  const unmatched = findings.filter((_, i) => !used.has(i));
-  return { truePositives, lineAttributionOnly, inScopeMisses, outOfScope, unmatched };
-}
-function precisionFromTriage(entries) {
-  const realIssue = entries.filter((e) => e.verdict === "realIssue").length;
-  const falsePositive = entries.filter((e) => e.verdict === "falsePositive").length;
-  const unsure = entries.filter((e) => e.verdict === "unsure").length;
-  const den = realIssue + falsePositive;
-  const precision = den === 0 ? "n/a" : `${(100 * realIssue / den).toFixed(1)}%`;
-  return { realIssue, falsePositive, unsure, precision };
-}
-
-export { BENCH_CLASSES, IN_SCOPE_CLASSES, classForRule, findingKey, isFileLevelFinding, isLineAttributionOnly, isTruePositive, precisionFromTriage, scoreFindings };
+var x=["sqli","nosqli","cmdi","path","xss","ssrf","redirect","eval","jwt","crypto","proto","secrets","deps","config","other"],m=["sqli","nosqli","cmdi","path","xss","ssrf","redirect","eval","jwt","crypto","proto","secrets","deps","config"],S={"SAST-SQLI-001":"sqli","SAST-NOSQLI-001":"nosqli","SAST-CMDI-001":"cmdi","SAST-PATH-001":"path","SAST-XSS-001":"xss","SAST-SSRF-001":"ssrf","SAST-REDIRECT-001":"redirect","SAST-EVAL-001":"eval","SAST-JWT-001":"jwt","SAST-CRYPTO-001":"crypto","SAST-PROTO-001":"proto"};function p(e){return S[e]?S[e]:e.startsWith("SECRET-")?"secrets":e.startsWith("DEPS-")?"deps":e.startsWith("CONFIG-")?"config":"other"}function f(e){return e.replaceAll("\\","/").replace(/^\.\//,"")}function L(e){return `${e.ruleId}|${f(e.file??"")}|${e.line??0}`}function h(e,r){if(!e.file)return  false;let n=f(e.file),i=f(r.file);return n===i||n.endsWith(`/${i}`)||i.endsWith(`/${n}`)}function d(e){return e.line===void 0||e.line===0}function E(e,r){if(p(e.ruleId)!==r.class||!h(e,r))return  false;let n=e.line??0;return Math.abs(n-r.line)<=3}function A(e,r){let n=e.filter(t=>p(t.ruleId)===r.class&&h(t,r)),i=new Set(n.map(t=>t.ruleId));for(let t of i){let u=n.filter(c=>c.ruleId===t),o=u.some(c=>!d(c)&&Math.abs((c.line??0)-r.line)<=3),a=u.some(c=>d(c));if(o&&a)return  true}return  false}function b(e,r){let n=new Set,i=[],t=[],u=r.filter(s=>s.inScope===true),o=r.filter(s=>s.inScope!==true);for(let s of u){if(A(e,s)){t.push(s);continue}let l=e.findIndex((g,y)=>!n.has(y)&&E(g,s));l>=0&&(n.add(l),i.push(s));}let a=new Set([...i,...t]),c=u.filter(s=>!a.has(s)),T=e.filter((s,l)=>!n.has(l));return {truePositives:i,lineAttributionOnly:t,inScopeMisses:c,outOfScope:o,unmatched:T}}function v(e){let r=e.filter(o=>o.verdict==="realIssue").length,n=e.filter(o=>o.verdict==="falsePositive").length,i=e.filter(o=>o.verdict==="unsure").length,t=r+n,u=t===0?"n/a":`${(100*r/t).toFixed(1)}%`;return {realIssue:r,falsePositive:n,unsure:i,precision:u}}
+export{x as BENCH_CLASSES,m as IN_SCOPE_CLASSES,p as classForRule,L as findingKey,d as isFileLevelFinding,A as isLineAttributionOnly,E as isTruePositive,v as precisionFromTriage,b as scoreFindings};