novahiz 0.1.0

package/bundled-skills/dependency-auditor/assets/sample_go.mod

@@ -0,0 +1,53 @@
+module github.com/example/sample-go-service
+
+go 1.20
+
+require (
+	github.com/gin-gonic/gin v1.9.1
+	github.com/go-redis/redis/v8 v8.11.5
+	github.com/golang-jwt/jwt/v4 v4.5.0
+	github.com/gorilla/mux v1.8.0
+	github.com/gorilla/websocket v1.5.0
+	github.com/lib/pq v1.10.9
+	github.com/stretchr/testify v1.8.2
+	go.uber.org/zap v1.24.0
+	golang.org/x/crypto v0.9.0
+	gopkg.in/yaml.v3 v3.0.1
+	gorm.io/driver/postgres v1.5.0
+	gorm.io/gorm v1.25.1
+)
+
+require (
+	github.com/bytedance/sonic v1.8.8 // indirect
+	github.com/cespare/xxhash/v2 v2.2.0 // indirect
+	github.com/chenzhuoyu/base64x v0.0.0-20221115062448-fe3a3abad311 // indirect
+	github.com/davecgh/go-spew v1.1.1 // indirect
+	github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
+	github.com/gabriel-vasile/mimetype v1.4.2 // indirect
+	github.com/gin-contrib/sse v0.1.0 // indirect
+	github.com/go-playground/locales v0.14.1 // indirect
+	github.com/go-playground/universal-translator v0.18.1 // indirect
+	github.com/go-playground/validator/v10 v10.13.0 // indirect
+	github.com/goccy/go-json v0.10.2 // indirect
+	github.com/jackc/pgpassfile v1.0.0 // indirect
+	github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a // indirect
+	github.com/jackc/pgx/v5 v5.3.1 // indirect
+	github.com/jinzhu/inflection v1.0.0 // indirect
+	github.com/jinzhu/now v1.1.5 // indirect
+	github.com/json-iterator/go v1.1.12 // indirect
+	github.com/klauspost/cpuid/v2 v2.2.4 // indirect
+	github.com/leodido/go-urn v1.2.4 // indirect
+	github.com/mattn/go-isatty v0.0.18 // indirect
+	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
+	github.com/modern-go/reflect2 v1.0.2 // indirect
+	github.com/pelletier/go-toml/v2 v2.0.7 // indirect
+	github.com/pmezard/go-difflib v1.0.0 // indirect
+	github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
+	github.com/ugorji/go/codec v1.2.11 // indirect
+	go.uber.org/atomic v1.11.0 // indirect
+	go.uber.org/multierr v1.11.0 // indirect
+	golang.org/x/arch v0.3.0 // indirect
+	golang.org/x/net v0.10.0 // indirect
+	golang.org/x/sys v0.8.0 // indirect
+	golang.org/x/text v0.9.0 // indirect
+)

package/bundled-skills/dependency-auditor/assets/sample_package.json

@@ -0,0 +1,72 @@
+{
+  "name": "sample-web-app",
+  "version": "1.2.3",
+  "description": "A sample web application with various dependencies for testing dependency auditing",
+  "main": "index.js",
+  "scripts": {
+    "start": "node index.js",
+    "dev": "nodemon index.js",
+    "build": "webpack --mode production",
+    "test": "jest",
+    "lint": "eslint src/",
+    "audit": "npm audit"
+  },
+  "keywords": ["web", "app", "sample", "dependency", "audit"],
+  "author": "Claude Skills Team",
+  "license": "MIT",
+  "dependencies": {
+    "express": "4.18.1",
+    "lodash": "4.17.20",
+    "axios": "1.5.0",
+    "jsonwebtoken": "8.5.1",
+    "bcrypt": "5.1.0",
+    "mongoose": "6.10.0",
+    "cors": "2.8.5",
+    "helmet": "6.1.5",
+    "winston": "3.8.2",
+    "dotenv": "16.0.3",
+    "express-rate-limit": "6.7.0",
+    "multer": "1.4.5-lts.1",
+    "sharp": "0.32.1",
+    "nodemailer": "6.9.1",
+    "socket.io": "4.6.1",
+    "redis": "4.6.5",
+    "moment": "2.29.4",
+    "chalk": "4.1.2",
+    "commander": "9.4.1"
+  },
+  "devDependencies": {
+    "nodemon": "2.0.22",
+    "jest": "29.5.0",
+    "supertest": "6.3.3",
+    "eslint": "8.40.0",
+    "eslint-config-airbnb-base": "15.0.0",
+    "eslint-plugin-import": "2.27.5",
+    "webpack": "5.82.1",
+    "webpack-cli": "5.1.1",
+    "babel-loader": "9.1.2",
+    "@babel/core": "7.22.1",
+    "@babel/preset-env": "7.22.2",
+    "css-loader": "6.7.4",
+    "style-loader": "3.3.3",
+    "html-webpack-plugin": "5.5.1",
+    "mini-css-extract-plugin": "2.7.6",
+    "postcss": "8.4.23",
+    "postcss-loader": "7.3.0",
+    "autoprefixer": "10.4.14",
+    "cross-env": "7.0.3",
+    "rimraf": "5.0.1"
+  },
+  "engines": {
+    "node": ">=16.0.0",
+    "npm": ">=8.0.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/example/sample-web-app.git"
+  },
+  "bugs": {
+    "url": "https://github.com/example/sample-web-app/issues"
+  },
+  "homepage": "https://github.com/example/sample-web-app#readme"
+}

package/bundled-skills/dependency-auditor/assets/sample_requirements.txt

@@ -0,0 +1,71 @@
+# Core web framework
+Django==4.1.7
+djangorestframework==3.14.0
+django-cors-headers==3.14.0
+django-environ==0.10.0
+django-extensions==3.2.1
+
+# Database and ORM
+psycopg2-binary==2.9.6
+redis==4.5.4
+celery==5.2.7
+
+# Authentication and Security
+django-allauth==0.54.0
+djangorestframework-simplejwt==5.2.2
+cryptography==40.0.1
+bcrypt==4.0.1
+
+# HTTP and API clients
+requests==2.28.2
+httpx==0.24.1
+urllib3==1.26.15
+
+# Data processing and analysis
+pandas==2.0.1
+numpy==1.24.3
+Pillow==9.5.0
+openpyxl==3.1.2
+
+# Monitoring and logging
+sentry-sdk==1.21.1
+structlog==23.1.0
+
+# Testing
+pytest==7.3.1
+pytest-django==4.5.2
+pytest-cov==4.0.0
+factory-boy==3.2.1
+freezegun==1.2.2
+
+# Development tools
+black==23.3.0
+flake8==6.0.0
+isort==5.12.0
+pre-commit==3.3.2
+django-debug-toolbar==4.0.0
+
+# Documentation
+Sphinx==6.2.1
+sphinx-rtd-theme==1.2.0
+
+# Deployment and server
+gunicorn==20.1.0
+whitenoise==6.4.0
+
+# Environment and configuration
+python-decouple==3.8
+pyyaml==6.0
+
+# Utilities
+click==8.1.3
+python-dateutil==2.8.2
+pytz==2023.3
+six==1.16.0
+
+# AWS integration
+boto3==1.26.137
+botocore==1.29.137
+
+# Email
+django-anymail==10.0

package/bundled-skills/dependency-auditor/expected_outputs/sample_license_report.txt

@@ -0,0 +1,37 @@
+============================================================
+LICENSE COMPLIANCE REPORT
+============================================================
+Analysis Date: 2024-02-16T15:30:00.000Z
+Project: /example/sample-web-app
+Project License: MIT
+
+SUMMARY:
+  Total Dependencies: 23
+  Compliance Score: 92.5/100
+  Overall Risk: LOW
+  License Conflicts: 0
+
+LICENSE DISTRIBUTION:
+  Permissive: 21
+  Copyleft_weak: 1
+  Copyleft_strong: 0
+  Proprietary: 0
+  Unknown: 1
+
+RISK BREAKDOWN:
+  Low: 21
+  Medium: 1
+  High: 0
+  Critical: 1
+
+HIGH-RISK DEPENDENCIES:
+------------------------------
+  moment v2.29.4: Unknown (CRITICAL)
+
+RECOMMENDATIONS:
+--------------------
+1. Investigate and clarify licenses for 1 dependencies with unknown licensing
+2. Overall compliance score is high - maintain current practices
+3. Consider updating moment.js which has been deprecated by maintainers
+
+============================================================

package/bundled-skills/dependency-auditor/expected_outputs/sample_upgrade_plan.txt

@@ -0,0 +1,59 @@
+============================================================
+DEPENDENCY UPGRADE PLAN
+============================================================
+Generated: 2024-02-16T15:30:00.000Z
+Timeline: 90 days
+
+UPGRADE SUMMARY:
+  Total Upgrades Available: 12
+  Security Updates: 2
+  Major Version Updates: 3
+  High Risk Updates: 2
+
+RISK ASSESSMENT:
+  Overall Risk Level: MEDIUM
+  Key Risk Factors:
+    • 2 critical risk upgrades requiring careful planning
+    • Core framework upgrades: ['express', 'webpack', 'eslint']
+    • 1 major version upgrades with potential breaking changes
+
+TOP PRIORITY UPGRADES:
+------------------------------
+🔒 lodash: 4.17.20 → 4.17.21 🔒
+   Type: Patch | Risk: Low | Priority: 95.0
+   Security: CVE-2021-23337: Prototype pollution vulnerability
+
+🟡 express: 4.18.1 → 4.18.2
+   Type: Patch | Risk: Low | Priority: 85.0
+
+🟡 webpack: 5.82.1 → 5.88.0
+   Type: Minor | Risk: Medium | Priority: 75.0
+
+🔴 eslint: 8.40.0 → 9.0.0
+   Type: Major | Risk: High | Priority: 65.0
+
+🟢 cors: 2.8.5 → 2.8.7
+   Type: Patch | Risk: Safe | Priority: 80.0
+
+PHASED UPGRADE PLANS:
+------------------------------
+Phase 1: Security & Safe Updates (30 days)
+  Dependencies: lodash, cors, helmet, dotenv, bcrypt
+  Key Steps: Create feature branch; Update dependency versions in manifest files; Run dependency install/update commands
+
+Phase 2: Regular Updates (36 days)
+  Dependencies: express, axios, winston, multer
+  Key Steps: Create feature branch; Update dependency versions in manifest files; Run dependency install/update commands
+
+Phase 3: Major Updates (30 days)
+  Dependencies: webpack, eslint, jest
+  ... and 2 more
+  Key Steps: Create feature branch; Update dependency versions in manifest files; Run dependency install/update commands
+
+RECOMMENDATIONS:
+--------------------
+1. URGENT: 2 security updates available - prioritize immediately
+2. Quick wins: 6 safe updates can be applied with minimal risk
+3. Plan carefully: 2 high-risk upgrades need thorough testing
+
+============================================================

package/bundled-skills/dependency-auditor/expected_outputs/sample_vulnerability_report.json

@@ -0,0 +1,71 @@
+{
+  "timestamp": "2024-02-16T15:30:00.000Z",
+  "project_path": "/example/sample-web-app",
+  "dependencies": [
+    {
+      "name": "lodash",
+      "version": "4.17.20",
+      "ecosystem": "npm",
+      "direct": true,
+      "license": "MIT",
+      "vulnerabilities": [
+        {
+          "id": "CVE-2021-23337",
+          "summary": "Prototype pollution in lodash",
+          "severity": "HIGH",
+          "cvss_score": 7.2,
+          "affected_versions": "<4.17.21",
+          "fixed_version": "4.17.21",
+          "published_date": "2021-02-15",
+          "references": [
+            "https://nvd.nist.gov/vuln/detail/CVE-2021-23337"
+          ]
+        }
+      ]
+    },
+    {
+      "name": "axios",
+      "version": "1.5.0",
+      "ecosystem": "npm",
+      "direct": true,
+      "license": "MIT",
+      "vulnerabilities": []
+    },
+    {
+      "name": "express",
+      "version": "4.18.1",
+      "ecosystem": "npm",
+      "direct": true,
+      "license": "MIT",
+      "vulnerabilities": []
+    },
+    {
+      "name": "jsonwebtoken",
+      "version": "8.5.1",
+      "ecosystem": "npm",
+      "direct": true,
+      "license": "MIT",
+      "vulnerabilities": []
+    }
+  ],
+  "vulnerabilities_found": 1,
+  "high_severity_count": 1,
+  "medium_severity_count": 0,
+  "low_severity_count": 0,
+  "ecosystems": ["npm"],
+  "scan_summary": {
+    "total_dependencies": 4,
+    "unique_dependencies": 4,
+    "ecosystems_found": 1,
+    "vulnerable_dependencies": 1,
+    "vulnerability_breakdown": {
+      "high": 1,
+      "medium": 0,
+      "low": 0
+    }
+  },
+  "recommendations": [
+    "URGENT: Address 1 high-severity vulnerabilities immediately",
+    "Update lodash from 4.17.20 to 4.17.21 to fix CVE-2021-23337"
+  ]
+}