preflyt 1.0.1 → 1.0.2

package/bin/cli.js

@@ -3,14 +3,14 @@
 const fs = require('fs')
 const path = require('path')
 
-// Simple patterns for common API keys
-const API_KEY_PATTERNS = [
-  { name: 'OpenAI', pattern: /sk-[a-zA-Z0-9-_]{20,}/ },
-  { name: 'Stripe Secret', pattern: /sk_live_[a-zA-Z0-9]{20,}/ },
-  { name: 'Stripe Test', pattern: /sk_test_[a-zA-Z0-9]{20,}/ },
-  { name: 'AWS Access Key', pattern: /AKIA[0-9A-Z]{16}/ },
-  { name: 'GitHub Token', pattern: /ghp_[a-zA-Z0-9]{36}/ },
-  { name: 'Hugging Face', pattern: /hf_[a-zA-Z0-9]{20,}/ },
+// Security patterns to check
+const SECURITY_PATTERNS = [
+  { name: 'Exposed secret', pattern: /sk-[a-zA-Z0-9-_]{20,}/ },
+  { name: 'Exposed secret', pattern: /sk_live_[a-zA-Z0-9]{20,}/ },
+  { name: 'Exposed secret', pattern: /sk_test_[a-zA-Z0-9]{20,}/ },
+  { name: 'Exposed secret', pattern: /AKIA[0-9A-Z]{16}/ },
+  { name: 'Exposed secret', pattern: /ghp_[a-zA-Z0-9]{36}/ },
+  { name: 'Exposed secret', pattern: /hf_[a-zA-Z0-9]{20,}/ },
 ]
 
 // File extensions to scan
@@ -21,14 +21,16 @@ const SKIP_FOLDERS = ['node_modules', '.git', '.next', 'dist', 'build']
 
 // Store found issues
 const issues = []
+let filesScanned = 0
 
 // Scan a single file
 function scanFile(filePath) {
+  filesScanned++
   const content = fs.readFileSync(filePath, 'utf-8')
   const lines = content.split('\n')
 
   lines.forEach((line, index) => {
-    API_KEY_PATTERNS.forEach(({ name, pattern }) => {
+    SECURITY_PATTERNS.forEach(({ name, pattern }) => {
       if (pattern.test(line)) {
         issues.push({
           file: filePath,
@@ -62,30 +64,36 @@ function scanDirectory(dir) {
   })
 }
 
+// Security categories (for display)
+const SECURITY_CATEGORIES = [
+  '🔑 Exposed secrets & API keys'
+]
+
 // Main
 console.log('\n✈️  Preflyt - Preflight security check\n')
 
 const targetDir = process.argv[2] || '.'
 scanDirectory(targetDir)
 
-console.log('✅ Scan complete!\n')
+console.log(`📊 Scanned ${filesScanned} files for:`)
+SECURITY_CATEGORIES.forEach(cat => console.log(`   ${cat}`))
+console.log()
 
 if (issues.length === 0) {
-  console.log('🎉 All clear — no issues found. Ready for takeoff!\n')
+  console.log('✅ All clear — ready for takeoff!\n')
 } else {
   console.log(`──────────────────────────────────────────`)
-  console.log(`📋 Found ${issues.length} item(s) to review:\n`)
+  console.log(`⚠️  Found ${issues.length} issue(s) to review:\n`)
   
   issues.forEach((issue, index) => {
-    console.log(`  ${index + 1}. ${issue.type} key exposed`)
+    console.log(`  ${index + 1}. ${issue.type}`)
     console.log(`     📁 ${issue.file}:${issue.line}`)
     console.log(`     └─ ${issue.content}`)
     console.log()
   })
 
   console.log(`──────────────────────────────────────────`)
-  console.log(`💡 Quick fix: Move secrets to environment variables`)
-  console.log(`   Then use process.env.YOUR_KEY_NAME instead\n`)
+  console.log(`💡 Fix these issues before shipping to production\n`)
   process.exit(1)  // Exit with error code
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "preflyt",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "Preflight security checks for flow coders",
   "bin": {
     "preflyt": "./bin/cli.js"