mcp-sanitizer 1.0.0

package/.eslintrc.js

@@ -0,0 +1,32 @@
+module.exports = {
+  env: {
+    browser: false,
+    es2021: true,
+    node: true,
+    jest: true
+  },
+  extends: [
+    'standard'
+  ],
+  parserOptions: {
+    ecmaVersion: 12,
+    sourceType: 'module'
+  },
+  rules: {
+    'no-console': 'warn',
+    'no-eval': 'error',
+    'no-implied-eval': 'error',
+    'no-new-func': 'error',
+    'no-script-url': 'error',
+    'prefer-const': 'error',
+    'no-var': 'error'
+  },
+  overrides: [
+    {
+      files: ['test/**/*.js', '**/*.test.js'],
+      rules: {
+        'no-console': 'off'
+      }
+    }
+  ]
+};

package/.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,33 @@
+---
+name: Bug report
+about: Report a bug in MCP Sanitizer
+title: '[BUG] '
+labels: bug
+assignees: ''
+---
+
+**Describe the bug**
+<!-- Clear description of the issue -->
+
+**To Reproduce**
+```javascript
+// Minimal code example that reproduces the issue
+const MCPSanitizer = require('mcp-sanitizer');
+const sanitizer = new MCPSanitizer();
+
+// Your code here...
+```
+
+**Expected behavior**
+<!-- What should happen instead -->
+
+**Actual behavior**
+<!-- What actually happens -->
+
+**Environment:**
+ - Node.js version: [e.g. 18.19.0]
+ - MCP Sanitizer version: [e.g. 1.0.0]
+ - OS: [e.g. Ubuntu 22.04]
+
+**Additional context**
+<!-- Any other relevant information -->

package/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,8 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Security Issue
+    url: mailto:dave@pattens.org
+    about: Please report security vulnerabilities via email
+  - name: Questions & Discussions
+    url: https://github.com/starman69/mcp-sanitizer/discussions
+    about: Ask questions and discuss ideas

package/.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,26 @@
+---
+name: Feature request
+about: Suggest an idea for MCP Sanitizer
+title: '[FEATURE] '
+labels: enhancement
+assignees: ''
+---
+
+**Is your feature request related to a problem?**
+<!-- Describe the problem you're trying to solve -->
+
+**Describe the solution you'd like**
+<!-- Clear description of what you want to happen -->
+
+**Describe alternatives you've considered**
+<!-- Other solutions or workarounds you've tried -->
+
+**Example usage**
+```javascript
+// Show how the feature would be used
+const sanitizer = new MCPSanitizer();
+// Your proposed API...
+```
+
+**Additional context**
+<!-- Any other context, mockups, or examples -->

package/.github/ISSUE_TEMPLATE/security_report.md

@@ -0,0 +1,23 @@
+---
+name: Security vulnerability
+about: Report a security issue
+title: '[SECURITY] DO NOT USE - Email instead'
+labels: security
+assignees: ''
+---
+
+## ⚠️ STOP! Security issues should NOT be reported here
+
+**Please DO NOT report security vulnerabilities in public GitHub issues.**
+
+Instead, please email us directly at: **security@example.com**
+
+### What to include in your email:
+- Description of the vulnerability
+- Steps to reproduce
+- Potential impact
+- Suggested fix (if any)
+
+We take security seriously and will respond within 48 hours.
+
+Thank you for helping keep MCP Sanitizer secure!

package/.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,28 @@
+## Description
+<!-- Describe your changes in detail -->
+
+## Type of Change
+<!-- Mark relevant items with an 'x' -->
+- [ ] Bug fix
+- [ ] New feature
+- [ ] Security improvement
+- [ ] Documentation update
+- [ ] Performance improvement
+
+## Testing
+<!-- Describe the tests you ran -->
+- [ ] All tests pass locally (`npm test`)
+- [ ] New tests added for changes
+- [ ] No ESLint errors (`npm run lint`)
+
+## Security Impact
+<!-- Consider security implications -->
+- [ ] No new attack vectors introduced
+- [ ] Input validation properly implemented
+- [ ] No sensitive data exposed
+
+## Checklist
+- [ ] My code follows the project style
+- [ ] I've updated documentation as needed
+- [ ] I've added tests for new functionality
+- [ ] All tests pass

package/.github/workflows/ci.yml

@@ -0,0 +1,59 @@
+name: CI
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    
+    strategy:
+      matrix:
+        node-version: [18.x, 20.x]
+    
+    steps:
+    - uses: actions/checkout@v4
+    
+    - name: Use Node.js ${{ matrix.node-version }}
+      uses: actions/setup-node@v4
+      with:
+        node-version: ${{ matrix.node-version }}
+        cache: 'npm'
+    
+    - name: Install dependencies
+      run: npm ci
+    
+    - name: Run linter
+      run: npm run lint
+    
+    - name: Run tests with coverage
+      run: npm run test:coverage
+    
+    - name: Upload coverage to Codecov
+      if: matrix.node-version == '18.x'
+      uses: codecov/codecov-action@v3
+      with:
+        file: ./coverage/lcov.info
+        fail_ci_if_error: false
+
+  security:
+    runs-on: ubuntu-latest
+    
+    steps:
+    - uses: actions/checkout@v4
+    
+    - name: Use Node.js 18
+      uses: actions/setup-node@v4
+      with:
+        node-version: 18
+        cache: 'npm'
+    
+    - name: Install dependencies
+      run: npm ci
+    
+    - name: Run npm audit
+      run: npm audit --audit-level=moderate
+      continue-on-error: true

package/.github/workflows/security.yml

@@ -0,0 +1,43 @@
+name: Security Scan
+
+on:
+  schedule:
+    - cron: '0 0 * * 1' # Weekly on Monday
+  workflow_dispatch:
+
+jobs:
+  analyze:
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+    
+    steps:
+    - uses: actions/checkout@v4
+    
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v2
+      with:
+        languages: javascript
+    
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v2
+
+  dependency-check:
+    runs-on: ubuntu-latest
+    
+    steps:
+    - uses: actions/checkout@v4
+    
+    - name: Use Node.js 18
+      uses: actions/setup-node@v4
+      with:
+        node-version: 18
+        cache: 'npm'
+    
+    - name: Install dependencies
+      run: npm ci
+    
+    - name: Check for vulnerabilities
+      run: npm audit --audit-level=moderate

package/.nvmrc

@@ -0,0 +1 @@
+18.19.0

package/.prettierrc

@@ -0,0 +1,8 @@
+{
+  "semi": true,
+  "trailingComma": "es5",
+  "singleQuote": true,
+  "printWidth": 80,
+  "tabWidth": 2,
+  "useTabs": false
+}