privalint 0.0.0-stage → 0.1.1

package/dist/data/third-parties.js

@@ -0,0 +1,42 @@
+import { findByUrl } from '../url.js';
+/**
+ * Embedded content that transfers the visitor's IP address (and often sets
+ * cookies) as soon as it loads. Trackers are listed separately in trackers.ts.
+ */
+export const embeds = [
+    { vendor: 'YouTube', domains: ['youtube.com', 'youtube-nocookie.com', 'ytimg.com'] },
+    { vendor: 'Vimeo', domains: ['player.vimeo.com', 'vimeocdn.com'] },
+    {
+        vendor: 'Google Maps',
+        domains: ['maps.googleapis.com', 'maps.gstatic.com', 'maps.google.com'],
+    },
+    { vendor: 'Google Maps', domains: ['google.com'], paths: ['/maps/'] },
+    { vendor: 'Google reCAPTCHA', domains: ['recaptcha.net'] },
+    { vendor: 'Google reCAPTCHA', domains: ['google.com', 'gstatic.com'], paths: ['/recaptcha/'] },
+    { vendor: 'Gravatar', domains: ['gravatar.com'] },
+    { vendor: 'X (Twitter) embed', domains: ['platform.twitter.com', 'syndication.twitter.com'] },
+    { vendor: 'Instagram embed', domains: ['instagram.com', 'cdninstagram.com'] },
+    { vendor: 'Facebook plugin', domains: ['facebook.com'], paths: ['/plugins/'] },
+    { vendor: 'Spotify embed', domains: ['open.spotify.com'], paths: ['/embed/'] },
+    { vendor: 'Disqus', domains: ['disqus.com', 'disquscdn.com'] },
+];
+/** Public CDNs for scripts, styles and icon fonts. */
+export const cdns = [
+    { vendor: 'jsDelivr', domains: ['cdn.jsdelivr.net'] },
+    { vendor: 'unpkg', domains: ['unpkg.com'] },
+    { vendor: 'cdnjs', domains: ['cdnjs.cloudflare.com'] },
+    { vendor: 'Google Hosted Libraries', domains: ['ajax.googleapis.com'] },
+    { vendor: 'jQuery CDN', domains: ['code.jquery.com'] },
+    {
+        vendor: 'BootstrapCDN',
+        domains: ['stackpath.bootstrapcdn.com', 'maxcdn.bootstrapcdn.com'],
+    },
+    { vendor: 'Tailwind Play CDN', domains: ['cdn.tailwindcss.com'] },
+    {
+        vendor: 'Font Awesome CDN',
+        domains: ['use.fontawesome.com', 'kit.fontawesome.com', 'ka-f.fontawesome.com'],
+    },
+];
+export const findEmbed = (url) => findByUrl(embeds, url);
+export const findCdn = (url) => findByUrl(cdns, url);
+//# sourceMappingURL=third-parties.js.map

package/dist/data/third-parties.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"third-parties.js","sourceRoot":"","sources":["../../src/data/third-parties.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAoB,MAAM,WAAW,CAAC;AAMxD;;;GAGG;AACH,MAAM,CAAC,MAAM,MAAM,GAA0B;IAC3C,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,aAAa,EAAE,sBAAsB,EAAE,WAAW,CAAC,EAAE;IACpF,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,kBAAkB,EAAE,cAAc,CAAC,EAAE;IAClE;QACE,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE,CAAC,qBAAqB,EAAE,kBAAkB,EAAE,iBAAiB,CAAC;KACxE;IACD,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE;IACrE,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE;IAC1D,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,aAAa,CAAC,EAAE;IAC9F,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE;IACjD,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,sBAAsB,EAAE,yBAAyB,CAAC,EAAE;IAC7F,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,eAAe,EAAE,kBAAkB,CAAC,EAAE;IAC7E,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE;IAC9E,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE;IAC9E,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,YAAY,EAAE,eAAe,CAAC,EAAE;CAC/D,CAAC;AAEF,sDAAsD;AACtD,MAAM,CAAC,MAAM,IAAI,GAA0B;IACzC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE;IACrD,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;IAC3C,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,sBAAsB,CAAC,EAAE;IACtD,EAAE,MAAM,EAAE,yBAAyB,EAAE,OAAO,EAAE,CAAC,qBAAqB,CAAC,EAAE;IACvE,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE;IACtD;QACE,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE,CAAC,4BAA4B,EAAE,yBAAyB,CAAC;KACnE;IACD,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,qBAAqB,CAAC,EAAE;IACjE;QACE,MAAM,EAAE,kBAAkB;QAC1B,OAAO,EAAE,CAAC,qBAAqB,EAAE,qBAAqB,EAAE,sBAAsB,CAAC;KAChF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AACjE,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC"}

package/dist/data/trackers.d.ts

@@ -0,0 +1,21 @@
+import { type HostPattern } from '../url.js';
+export type TrackerCategory = 'analytics' | 'advertising' | 'session-replay' | 'social' | 'marketing-automation' | 'tag-manager';
+export interface Tracker extends HostPattern {
+    vendor: string;
+    category: TrackerCategory;
+    /**
+     * Cookies the vendor's script sets, including on the first-party domain.
+     * Strings are name prefixes; use a RegExp where a prefix would be too broad.
+     */
+    cookies?: Array<string | RegExp>;
+}
+/**
+ * Hand-maintained and MIT licensed, so it can ship with the package.
+ * Order matters: the first entry that matches wins, so put path-specific
+ * entries before broader ones on the same domain.
+ *
+ * Adding a vendor? See CONTRIBUTING.md.
+ */
+export declare const trackers: readonly Tracker[];
+export declare function findTrackerByUrl(url: string): Tracker | undefined;
+export declare function findTrackerByCookie(name: string): Tracker | undefined;

package/dist/data/trackers.js

@@ -0,0 +1,135 @@
+import { findByUrl } from '../url.js';
+/**
+ * Hand-maintained and MIT licensed, so it can ship with the package.
+ * Order matters: the first entry that matches wins, so put path-specific
+ * entries before broader ones on the same domain.
+ *
+ * Adding a vendor? See CONTRIBUTING.md.
+ */
+export const trackers = [
+    {
+        vendor: 'Google Analytics',
+        category: 'analytics',
+        domains: ['google-analytics.com', 'analytics.google.com'],
+        cookies: ['_ga', '_gid', '_gat'],
+    },
+    {
+        vendor: 'Google Analytics',
+        category: 'analytics',
+        domains: ['googletagmanager.com'],
+        paths: ['/gtag/'],
+    },
+    {
+        vendor: 'Google Tag Manager',
+        category: 'tag-manager',
+        domains: ['googletagmanager.com'],
+    },
+    {
+        vendor: 'Google Ads',
+        category: 'advertising',
+        domains: ['googleadservices.com', 'doubleclick.net', 'googlesyndication.com'],
+        cookies: ['_gcl_'],
+    },
+    {
+        vendor: 'Meta Pixel',
+        category: 'advertising',
+        domains: ['connect.facebook.net'],
+        cookies: ['_fbp', '_fbc'],
+    },
+    {
+        vendor: 'Meta Pixel',
+        category: 'advertising',
+        domains: ['facebook.com'],
+        paths: ['/tr'],
+    },
+    {
+        vendor: 'Hotjar',
+        category: 'session-replay',
+        domains: ['hotjar.com', 'hotjar.io'],
+        cookies: ['_hj'],
+    },
+    {
+        vendor: 'Microsoft Clarity',
+        category: 'session-replay',
+        domains: ['clarity.ms'],
+        cookies: ['_clck', '_clsk'],
+    },
+    {
+        vendor: 'Microsoft Advertising',
+        category: 'advertising',
+        domains: ['bat.bing.com'],
+        cookies: ['_uetsid', '_uetvid'],
+    },
+    {
+        vendor: 'LinkedIn Insight',
+        category: 'advertising',
+        domains: ['snap.licdn.com', 'px.ads.linkedin.com'],
+        cookies: ['li_fat_id'],
+    },
+    {
+        vendor: 'TikTok Pixel',
+        category: 'advertising',
+        domains: ['analytics.tiktok.com'],
+        cookies: ['_ttp'],
+    },
+    {
+        vendor: 'X (Twitter) Pixel',
+        category: 'advertising',
+        domains: ['static.ads-twitter.com', 'analytics.twitter.com'],
+    },
+    {
+        vendor: 'Pinterest Tag',
+        category: 'advertising',
+        domains: ['ct.pinterest.com'],
+        cookies: ['_pin_unauth'],
+    },
+    {
+        vendor: 'Snap Pixel',
+        category: 'advertising',
+        domains: ['sc-static.net', 'tr.snapchat.com'],
+        cookies: ['_scid'],
+    },
+    {
+        vendor: 'Yandex Metrica',
+        category: 'analytics',
+        domains: ['mc.yandex.ru', 'mc.yandex.com'],
+        cookies: ['_ym_'],
+    },
+    {
+        vendor: 'HubSpot',
+        category: 'marketing-automation',
+        domains: ['js.hs-scripts.com', 'js.hs-analytics.net', 'track.hubspot.com'],
+        cookies: ['__hstc', 'hubspotutk'],
+    },
+    {
+        vendor: 'Segment',
+        category: 'analytics',
+        domains: ['cdn.segment.com', 'api.segment.io'],
+        cookies: ['ajs_'],
+    },
+    {
+        vendor: 'Mixpanel',
+        category: 'analytics',
+        domains: ['cdn.mxpnl.com', 'api-js.mixpanel.com'],
+        cookies: [/^mp_\w+_mixpanel$/],
+    },
+    {
+        vendor: 'Amplitude',
+        category: 'analytics',
+        domains: ['cdn.amplitude.com', 'api2.amplitude.com'],
+        cookies: ['AMP_'],
+    },
+    {
+        vendor: 'Matomo',
+        category: 'analytics',
+        domains: ['matomo.cloud'],
+        cookies: ['_pk_'],
+    },
+];
+export function findTrackerByUrl(url) {
+    return findByUrl(trackers, url);
+}
+export function findTrackerByCookie(name) {
+    return trackers.find((tracker) => tracker.cookies?.some((pattern) => typeof pattern === 'string' ? name.startsWith(pattern) : pattern.test(name)));
+}
+//# sourceMappingURL=trackers.js.map

package/dist/data/trackers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trackers.js","sourceRoot":"","sources":["../../src/data/trackers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAoB,MAAM,WAAW,CAAC;AAoBxD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAuB;IAC1C;QACE,MAAM,EAAE,kBAAkB;QAC1B,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,CAAC,sBAAsB,EAAE,sBAAsB,CAAC;QACzD,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;KACjC;IACD;QACE,MAAM,EAAE,kBAAkB;QAC1B,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,CAAC,sBAAsB,CAAC;QACjC,KAAK,EAAE,CAAC,QAAQ,CAAC;KAClB;IACD;QACE,MAAM,EAAE,oBAAoB;QAC5B,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,CAAC,sBAAsB,CAAC;KAClC;IACD;QACE,MAAM,EAAE,YAAY;QACpB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,CAAC,sBAAsB,EAAE,iBAAiB,EAAE,uBAAuB,CAAC;QAC7E,OAAO,EAAE,CAAC,OAAO,CAAC;KACnB;IACD;QACE,MAAM,EAAE,YAAY;QACpB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,CAAC,sBAAsB,CAAC;QACjC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;KAC1B;IACD;QACE,MAAM,EAAE,YAAY;QACpB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,CAAC,cAAc,CAAC;QACzB,KAAK,EAAE,CAAC,KAAK,CAAC;KACf;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,gBAAgB;QAC1B,OAAO,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;QACpC,OAAO,EAAE,CAAC,KAAK,CAAC;KACjB;IACD;QACE,MAAM,EAAE,mBAAmB;QAC3B,QAAQ,EAAE,gBAAgB;QAC1B,OAAO,EAAE,CAAC,YAAY,CAAC;QACvB,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;KAC5B;IACD;QACE,MAAM,EAAE,uBAAuB;QAC/B,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,CAAC,cAAc,CAAC;QACzB,OAAO,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KAChC;IACD;QACE,MAAM,EAAE,kBAAkB;QAC1B,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,CAAC,gBAAgB,EAAE,qBAAqB,CAAC;QAClD,OAAO,EAAE,CAAC,WAAW,CAAC;KACvB;IACD;QACE,MAAM,EAAE,cAAc;QACtB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,CAAC,sBAAsB,CAAC;QACjC,OAAO,EAAE,CAAC,MAAM,CAAC;KAClB;IACD;QACE,MAAM,EAAE,mBAAmB;QAC3B,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,CAAC,wBAAwB,EAAE,uBAAuB,CAAC;KAC7D;IACD;QACE,MAAM,EAAE,eAAe;QACvB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,CAAC,kBAAkB,CAAC;QAC7B,OAAO,EAAE,CAAC,aAAa,CAAC;KACzB;IACD;QACE,MAAM,EAAE,YAAY;QACpB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,CAAC,eAAe,EAAE,iBAAiB,CAAC;QAC7C,OAAO,EAAE,CAAC,OAAO,CAAC;KACnB;IACD;QACE,MAAM,EAAE,gBAAgB;QACxB,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;QAC1C,OAAO,EAAE,CAAC,MAAM,CAAC;KAClB;IACD;QACE,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,sBAAsB;QAChC,OAAO,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,mBAAmB,CAAC;QAC1E,OAAO,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC;KAClC;IACD;QACE,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;QAC9C,OAAO,EAAE,CAAC,MAAM,CAAC;KAClB;IACD;QACE,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,CAAC,eAAe,EAAE,qBAAqB,CAAC;QACjD,OAAO,EAAE,CAAC,mBAAmB,CAAC;KAC/B;IACD;QACE,MAAM,EAAE,WAAW;QACnB,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;QACpD,OAAO,EAAE,CAAC,MAAM,CAAC;KAClB;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,CAAC,cAAc,CAAC;QACzB,OAAO,EAAE,CAAC,MAAM,CAAC;KAClB;CACF,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,OAAO,SAAS,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC/B,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAChC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAC5E,CACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { type Tracker, type TrackerCategory, trackers } from './data/trackers.js';
+export { defaultRules, googleFonts, impressumLink, preConsentTrackers, privacyPolicyLink, rejectOption, thirdPartyCdns, thirdPartyEmbeds, trackersAfterReject, } from './rules/index.js';
+export { type ScanOptions, scan } from './scanner.js';
+export type * from './types.js';

package/dist/index.js

@@ -0,0 +1,4 @@
+export { trackers } from './data/trackers.js';
+export { defaultRules, googleFonts, impressumLink, preConsentTrackers, privacyPolicyLink, rejectOption, thirdPartyCdns, thirdPartyEmbeds, trackersAfterReject, } from './rules/index.js';
+export { scan } from './scanner.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsC,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAClF,OAAO,EACL,YAAY,EACZ,WAAW,EACX,aAAa,EACb,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAoB,IAAI,EAAE,MAAM,cAAc,CAAC"}

package/dist/meta.d.ts

@@ -0,0 +1,3 @@
+export declare const VERSION: string;
+export declare const REPOSITORY_URL = "https://github.com/jexcellence/privalint";
+export declare const ruleDocsUrl: (ruleId: string) => string;

package/dist/meta.js

@@ -0,0 +1,6 @@
+import { readFileSync } from 'node:fs';
+const pkg = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8'));
+export const VERSION = pkg.version;
+export const REPOSITORY_URL = 'https://github.com/jexcellence/privalint';
+export const ruleDocsUrl = (ruleId) => `${REPOSITORY_URL}/blob/main/docs/rules/${ruleId}.md`;
+//# sourceMappingURL=meta.js.map

package/dist/meta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta.js","sourceRoot":"","sources":["../src/meta.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAEvF,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;AACnC,MAAM,CAAC,MAAM,cAAc,GAAG,0CAA0C,CAAC;AAEzE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,EAAE,CAC5C,GAAG,cAAc,yBAAyB,MAAM,KAAK,CAAC"}

package/dist/reporters/index.d.ts

@@ -0,0 +1,11 @@
+import type { ScanResult } from '../types.js';
+import { formatJson } from './json.js';
+import { formatMarkdown } from './markdown.js';
+import { formatSarif } from './sarif.js';
+import { formatText } from './text.js';
+export declare const FORMATS: readonly ['text', 'json', 'markdown', 'sarif'];
+export type Format = (typeof FORMATS)[number];
+export declare function format(result: ScanResult, kind: Format, options?: {
+    color?: boolean;
+}): string;
+export { formatJson, formatMarkdown, formatSarif, formatText };

package/dist/reporters/index.js

@@ -0,0 +1,19 @@
+import { formatJson } from './json.js';
+import { formatMarkdown } from './markdown.js';
+import { formatSarif } from './sarif.js';
+import { formatText } from './text.js';
+export const FORMATS = ['text', 'json', 'markdown', 'sarif'];
+export function format(result, kind, options = {}) {
+    switch (kind) {
+        case 'json':
+            return formatJson(result);
+        case 'markdown':
+            return formatMarkdown(result);
+        case 'sarif':
+            return formatSarif(result);
+        default:
+            return formatText(result, options.color);
+    }
+}
+export { formatJson, formatMarkdown, formatSarif, formatText };
+//# sourceMappingURL=index.js.map

package/dist/reporters/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/reporters/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAU,CAAC;AAGtE,MAAM,UAAU,MAAM,CAAC,MAAkB,EAAE,IAAY,EAAE,OAAO,GAAwB,EAAE;IACxF,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,MAAM;YACT,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,KAAK,UAAU;YACb,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;QAChC,KAAK,OAAO;YACV,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;QAC7B;YACE,OAAO,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC"}

package/dist/reporters/json.d.ts

@@ -0,0 +1,2 @@
+import type { ScanResult } from '../types.js';
+export declare const formatJson: (result: ScanResult) => string;

package/dist/reporters/json.js

@@ -0,0 +1,2 @@
+export const formatJson = (result) => `${JSON.stringify(result, null, 2)}\n`;
+//# sourceMappingURL=json.js.map

package/dist/reporters/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../../src/reporters/json.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAkB,EAAU,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC"}

package/dist/reporters/markdown.d.ts

@@ -0,0 +1,9 @@
+import type { ScanResult } from '../types.js';
+/**
+ * Compact report for GitHub job summaries and PR comments.
+ *
+ * Page URLs come from the scanned site and may contain Markdown such as
+ * `![x](https://evil.example)` in their query string, so they are only ever
+ * rendered inside code spans.
+ */
+export declare function formatMarkdown(result: ScanResult): string;

package/dist/reporters/markdown.js

@@ -0,0 +1,47 @@
+import { countBySeverity, describeConsent, groupByPage, plural } from './shared.js';
+const ICONS = { error: '🔴', warning: '🟡', info: '🔵' };
+/**
+ * Compact report for GitHub job summaries and PR comments.
+ *
+ * Page URLs come from the scanned site and may contain Markdown such as
+ * `![x](https://evil.example)` in their query string, so they are only ever
+ * rendered inside code spans.
+ */
+export function formatMarkdown(result) {
+    const counts = countBySeverity(result.findings);
+    const lines = [
+        `### privalint: ${code(result.siteUrl)}`,
+        '',
+        `${plural(counts.error, 'error')} · ${plural(counts.warning, 'warning')} · ${plural(result.pages.length, 'page')} scanned`,
+    ];
+    const consent = describeConsent(result.consent);
+    if (consent !== undefined) {
+        lines.push('', escapeText(consent));
+    }
+    for (const [pageUrl, findings] of groupByPage(result.findings)) {
+        lines.push('', `#### ${code(pageUrl)}`, '', '| | Rule | Finding |', '|---|---|---|');
+        for (const finding of findings) {
+            lines.push(`| ${ICONS[finding.severity]} | \`${finding.ruleId}\` | ${escapeText(finding.message)} |`);
+        }
+    }
+    const failed = result.pages.filter((page) => page.error !== undefined);
+    if (failed.length > 0) {
+        lines.push('', `${plural(failed.length, 'page')} could not be scanned:`, '');
+        for (const page of failed) {
+            lines.push(`- ${code(page.url)}: ${escapeText(page.error ?? '')}`);
+        }
+    }
+    const fixes = new Map(result.findings.filter((f) => f.fix !== undefined).map((f) => [f.ruleId, f.fix ?? '']));
+    if (fixes.size > 0) {
+        lines.push('', '<details><summary>How to fix</summary>', '');
+        for (const [ruleId, fix] of fixes) {
+            lines.push(`- **${ruleId}**: ${escapeText(fix)}`);
+        }
+        lines.push('', '</details>');
+    }
+    lines.push('', '<sub>Automated checks only. A clean result is not proof of GDPR compliance.</sub>');
+    return `${lines.join('\n')}\n`;
+}
+const code = (text) => `\`${text.replaceAll('`', '%60').replaceAll('\n', ' ')}\``;
+const escapeText = (text) => text.replace(/[\\`*_[\]()!<>|#~]/g, '\\$&').replaceAll('\n', ' ');
+//# sourceMappingURL=markdown.js.map

package/dist/reporters/markdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.js","sourceRoot":"","sources":["../../src/reporters/markdown.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAEpF,MAAM,KAAK,GAA6B,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAEnF;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG;QACZ,kBAAkB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;QACxC,EAAE;QACF,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU;KAC3H,CAAC;IACF,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,sBAAsB,EAAE,eAAe,CAAC,CAAC;QACrF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CACR,KAAK,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,OAAO,CAAC,MAAM,QAAQ,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAC1F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;QAC7E,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CACvF,CAAC;IACF,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,wCAAwC,EAAE,EAAE,CAAC,CAAC;QAC7D,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,OAAO,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,IAAI,CACR,EAAE,EACF,mFAAmF,CACpF,CAAC;IACF,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC;AAE1F,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE,CAClC,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC"}

package/dist/reporters/sarif.d.ts

@@ -0,0 +1,10 @@
+import type { ScanResult } from '../types.js';
+/**
+ * SARIF 2.1.0 for GitHub code scanning.
+ *
+ * Code scanning expects every result to point at a file in the repository,
+ * which a live website does not have. Each page is mapped to a stable
+ * pseudo path (`privalint/<host>/<path>`) so alerts stay grouped per page
+ * and keep their identity between runs.
+ */
+export declare function formatSarif(result: ScanResult): string;

package/dist/reporters/sarif.js

@@ -0,0 +1,78 @@
+import { createHash } from 'node:crypto';
+import { REPOSITORY_URL, ruleDocsUrl, VERSION } from '../meta.js';
+const LEVELS = {
+    error: 'error',
+    warning: 'warning',
+    info: 'note',
+};
+/**
+ * SARIF 2.1.0 for GitHub code scanning.
+ *
+ * Code scanning expects every result to point at a file in the repository,
+ * which a live website does not have. Each page is mapped to a stable
+ * pseudo path (`privalint/<host>/<path>`) so alerts stay grouped per page
+ * and keep their identity between runs.
+ */
+export function formatSarif(result) {
+    const sarif = {
+        $schema: 'https://json.schemastore.org/sarif-2.1.0.json',
+        version: '2.1.0',
+        runs: [
+            {
+                tool: {
+                    driver: {
+                        name: 'privalint',
+                        semanticVersion: VERSION,
+                        informationUri: REPOSITORY_URL,
+                        rules: result.rules.map((rule) => ({
+                            id: rule.id,
+                            name: rule.id,
+                            shortDescription: { text: rule.title },
+                            fullDescription: { text: rule.description },
+                            help: {
+                                text: `${rule.description}\n\nReferences: ${rule.references.join('; ')}`,
+                                markdown: `${rule.description}\n\n**References:** ${rule.references.join('; ')}`,
+                            },
+                            helpUri: ruleDocsUrl(rule.id),
+                            properties: { tags: ['privacy', 'gdpr'], precision: 'high' },
+                        })),
+                    },
+                },
+                results: result.findings.map(toResult),
+            },
+        ],
+    };
+    return `${JSON.stringify(sarif, null, 2)}\n`;
+}
+function toResult(finding) {
+    const evidence = finding.evidence.map((item) => `- ${item}`).join('\n');
+    return {
+        ruleId: finding.ruleId,
+        level: LEVELS[finding.severity],
+        message: {
+            text: [finding.message, `Page: ${finding.pageUrl}`, evidence, finding.fix]
+                .filter(Boolean)
+                .join('\n\n'),
+        },
+        locations: [
+            {
+                physicalLocation: {
+                    artifactLocation: { uri: pseudoPath(finding.pageUrl) },
+                    region: { startLine: 1 },
+                },
+            },
+        ],
+        partialFingerprints: {
+            primaryLocationLineHash: createHash('sha256')
+                .update(`${finding.ruleId}\n${finding.pageUrl}\n${finding.subject ?? ''}`)
+                .digest('hex')
+                .slice(0, 32),
+        },
+    };
+}
+function pseudoPath(pageUrl) {
+    const url = new URL(pageUrl);
+    const path = url.pathname.endsWith('/') ? `${url.pathname}index` : url.pathname;
+    return `privalint/${url.host}${path}`.replace(/[^\w./-]/g, '_');
+}
+//# sourceMappingURL=sarif.js.map

package/dist/reporters/sarif.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif.js","sourceRoot":"","sources":["../../src/reporters/sarif.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAGlE,MAAM,MAAM,GAAmD;IAC7D,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,MAAM;CACb,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,MAAkB;IAC5C,MAAM,KAAK,GAAG;QACZ,OAAO,EAAE,+CAA+C;QACxD,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,WAAW;wBACjB,eAAe,EAAE,OAAO;wBACxB,cAAc,EAAE,cAAc;wBAC9B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;4BACjC,EAAE,EAAE,IAAI,CAAC,EAAE;4BACX,IAAI,EAAE,IAAI,CAAC,EAAE;4BACb,gBAAgB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE;4BACtC,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE;4BAC3C,IAAI,EAAE;gCACJ,IAAI,EAAE,GAAG,IAAI,CAAC,WAAW,mBAAmB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gCACxE,QAAQ,EAAE,GAAG,IAAI,CAAC,WAAW,uBAAuB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;6BACjF;4BACD,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;4BAC7B,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE;yBAC7D,CAAC,CAAC;qBACJ;iBACF;gBACD,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;aACvC;SACF;KACF,CAAC;IACF,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,SAAS,QAAQ,CAAC,OAAgB;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC/B,OAAO,EAAE;YACP,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,OAAO,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC;iBACvE,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,MAAM,CAAC;SAChB;QACD,SAAS,EAAE;YACT;gBACE,gBAAgB,EAAE;oBAChB,gBAAgB,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;oBACtD,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;iBACzB;aACF;SACF;QACD,mBAAmB,EAAE;YACnB,uBAAuB,EAAE,UAAU,CAAC,QAAQ,CAAC;iBAC1C,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;iBACzE,MAAM,CAAC,KAAK,CAAC;iBACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SAChB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IAChF,OAAO,aAAa,GAAG,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAClE,CAAC"}

package/dist/reporters/shared.d.ts

@@ -0,0 +1,5 @@
+import type { ConsentSummary, Finding, Severity } from '../types.js';
+export declare function groupByPage(findings: readonly Finding[]): Map<string, Finding[]>;
+export declare function countBySeverity(findings: readonly Finding[]): Record<Severity, number>;
+export declare function describeConsent(consent: ConsentSummary | undefined): string | undefined;
+export declare const plural: (count: number, word: string) => string;

package/dist/reporters/shared.js

@@ -0,0 +1,34 @@
+export function groupByPage(findings) {
+    const pages = new Map();
+    for (const finding of findings) {
+        const list = pages.get(finding.pageUrl) ?? [];
+        list.push(finding);
+        pages.set(finding.pageUrl, list);
+    }
+    return pages;
+}
+export function countBySeverity(findings) {
+    const counts = { error: 0, warning: 0, info: 0 };
+    for (const finding of findings) {
+        counts[finding.severity]++;
+    }
+    return counts;
+}
+export function describeConsent(consent) {
+    if (consent === undefined) {
+        return undefined;
+    }
+    if (!consent.bannerFound) {
+        return 'Consent banner: none found';
+    }
+    const vendor = consent.cmp === undefined ? '' : ` (${consent.cmp})`;
+    if (consent.error !== undefined) {
+        return `Consent banner${vendor}: found, but rejecting failed: ${consent.error}`;
+    }
+    if (consent.rejected) {
+        return `Consent banner${vendor}: clicked "${consent.rejectLabel}" and reloaded`;
+    }
+    return `Consent banner${vendor}: found, no reject button`;
+}
+export const plural = (count, word) => `${count} ${word}${count === 1 ? '' : 's'}`;
+//# sourceMappingURL=shared.js.map

package/dist/reporters/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/reporters/shared.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,WAAW,CAAC,QAA4B;IACtD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC3C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAA4B;IAC1D,MAAM,MAAM,GAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC3E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAmC;IACjE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACzB,OAAO,4BAA4B,CAAC;IACtC,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,GAAG,GAAG,CAAC;IACpE,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,iBAAiB,MAAM,kCAAkC,OAAO,CAAC,KAAK,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,iBAAiB,MAAM,cAAc,OAAO,CAAC,WAAW,gBAAgB,CAAC;IAClF,CAAC;IACD,OAAO,iBAAiB,MAAM,2BAA2B,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,IAAY,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC"}

package/dist/reporters/text.d.ts

@@ -0,0 +1,2 @@
+import type { ScanResult } from '../types.js';
+export declare function formatText(result: ScanResult, color?: boolean): string;

package/dist/reporters/text.js

@@ -0,0 +1,52 @@
+import { styleText } from 'node:util';
+import { countBySeverity, describeConsent, groupByPage, plural } from './shared.js';
+const MARKS = {
+    error: ['✖', 'red'],
+    warning: ['▲', 'yellow'],
+    info: ['ℹ', 'blue'],
+};
+export function formatText(result, color = false) {
+    const paint = (style, text) => (color ? styleText(style, text) : text);
+    const lines = [];
+    for (const [pageUrl, findings] of groupByPage(result.findings)) {
+        lines.push('', paint('underline', pageUrl));
+        for (const finding of findings) {
+            lines.push(...formatFinding(finding, paint));
+        }
+    }
+    const failed = result.pages.filter((page) => page.error !== undefined);
+    if (failed.length > 0) {
+        lines.push('', paint('yellow', `Could not scan ${plural(failed.length, 'page')}:`));
+        for (const page of failed) {
+            lines.push(`  ${page.url} ${paint('dim', page.error ?? '')}`);
+        }
+    }
+    const counts = countBySeverity(result.findings);
+    const pages = plural(result.pages.length, 'page');
+    const seconds = (result.durationMs / 1000).toFixed(1);
+    lines.push('');
+    const consent = describeConsent(result.consent);
+    if (consent !== undefined) {
+        lines.push(paint('dim', consent));
+    }
+    if (result.findings.length === 0) {
+        lines.push(paint('green', `✔ No problems found on ${pages} (${seconds}s).`));
+    }
+    else {
+        lines.push(`${paint('red', plural(counts.error, 'error'))}, ${paint('yellow', plural(counts.warning, 'warning'))} on ${pages} (${seconds}s).`);
+    }
+    lines.push(paint('dim', 'Automated checks only. A clean result is not proof of GDPR compliance.'));
+    return lines.join('\n');
+}
+function formatFinding(finding, paint) {
+    const [mark, style] = MARKS[finding.severity];
+    const lines = [`  ${paint(style, mark)} ${finding.message} ${paint('dim', finding.ruleId)}`];
+    for (const item of finding.evidence) {
+        lines.push(paint('dim', `      ${item}`));
+    }
+    if (finding.fix) {
+        lines.push(`      ${paint('cyan', 'fix:')} ${finding.fix}`);
+    }
+    return lines;
+}
+//# sourceMappingURL=text.js.map

package/dist/reporters/text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"text.js","sourceRoot":"","sources":["../../src/reporters/text.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAIpF,MAAM,KAAK,GAAsC;IAC/C,KAAK,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC;IACnB,OAAO,EAAE,CAAC,GAAG,EAAE,QAAQ,CAAC;IACxB,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,UAAU,UAAU,CAAC,MAAkB,EAAE,KAAK,GAAG,KAAK;IAC1D,MAAM,KAAK,GAAG,CAAC,KAAY,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtF,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC5C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,kBAAkB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACpF,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAEtD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,0BAA0B,KAAK,KAAK,OAAO,KAAK,CAAC,CAAC,CAAC;IAC/E,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CACR,GAAG,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,OAAO,KAAK,KAAK,OAAO,KAAK,CACnI,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,KAAK,EAAE,wEAAwE,CAAC,CACvF,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB,EAAE,KAA6C;IACpF,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7F,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/rules/google-fonts.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from '../types.js';
+export declare const googleFonts: Rule;

package/dist/rules/google-fonts.js

@@ -0,0 +1,51 @@
+import { hostMatches, safeHost } from '../url.js';
+const ID = 'google-fonts';
+const GOOGLE_FONT_HOSTS = ['fonts.googleapis.com', 'fonts.gstatic.com'];
+/** dns-prefetch only resolves the name; these hints open a real connection. */
+const CONNECTING_HINTS = new Set(['preconnect', 'preload', 'prefetch', 'stylesheet']);
+const FIX = 'Self-host the font files. In Next.js, next/font/google downloads fonts at build time and ' +
+    'serves them from your own domain. Elsewhere, install the family from @fontsource or download ' +
+    'it via google-webfonts-helper, then remove every reference to fonts.googleapis.com and ' +
+    'fonts.gstatic.com.';
+const isGoogleFontUrl = (url) => {
+    const host = safeHost(url);
+    return host !== undefined && GOOGLE_FONT_HOSTS.some((domain) => hostMatches(host, domain));
+};
+export const googleFonts = {
+    id: ID,
+    title: 'Google Fonts loaded from Google servers',
+    description: "Loading fonts from Google's CDN sends every visitor's IP address to Google without " +
+        'consent. LG München I awarded a visitor damages for this in 2022.',
+    references: ['Art. 6(1) GDPR', 'LG München I, 20.01.2022, Az. 3 O 17493/20'],
+    check({ page }) {
+        const requests = page.requests.filter((request) => isGoogleFontUrl(request.url));
+        if (requests.length > 0) {
+            return [
+                {
+                    ruleId: ID,
+                    severity: 'error',
+                    message: `Fonts are loaded from Google (${requests.length} request${requests.length === 1 ? '' : 's'}).`,
+                    pageUrl: page.finalUrl,
+                    evidence: [...new Set(requests.map((request) => request.url))].slice(0, 5),
+                    fix: FIX,
+                },
+            ];
+        }
+        const hints = page.resourceHints.filter((hint) => isGoogleFontUrl(hint.href) &&
+            hint.rel.split(/\s+/).some((rel) => CONNECTING_HINTS.has(rel)));
+        if (hints.length > 0) {
+            return [
+                {
+                    ruleId: ID,
+                    severity: 'warning',
+                    message: 'The page preconnects to Google Fonts. No font was fetched, but the browser still opens a connection and transmits the IP address.',
+                    pageUrl: page.finalUrl,
+                    evidence: hints.map((hint) => `<link rel="${hint.rel}" href="${hint.href}">`),
+                    fix: 'Remove the leftover <link> tags pointing to Google Fonts.',
+                },
+            ];
+        }
+        return [];
+    },
+};
+//# sourceMappingURL=google-fonts.js.map

package/dist/rules/google-fonts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-fonts.js","sourceRoot":"","sources":["../../src/rules/google-fonts.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAElD,MAAM,EAAE,GAAG,cAAc,CAAC;AAC1B,MAAM,iBAAiB,GAAG,CAAC,sBAAsB,EAAE,mBAAmB,CAAC,CAAC;AAExE,+EAA+E;AAC/E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;AAEtF,MAAM,GAAG,GACP,2FAA2F;IAC3F,+FAA+F;IAC/F,yFAAyF;IACzF,oBAAoB,CAAC;AAEvB,MAAM,eAAe,GAAG,CAAC,GAAW,EAAW,EAAE;IAC/C,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,IAAI,KAAK,SAAS,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AAC7F,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAS;IAC/B,EAAE,EAAE,EAAE;IACN,KAAK,EAAE,yCAAyC;IAChD,WAAW,EACT,qFAAqF;QACrF,mEAAmE;IACrE,UAAU,EAAE,CAAC,gBAAgB,EAAE,4CAA4C,CAAC;IAC5E,KAAK,CAAC,EAAE,IAAI,EAAE;QACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACjF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL;oBACE,MAAM,EAAE,EAAE;oBACV,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,iCAAiC,QAAQ,CAAC,MAAM,WAAW,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI;oBACxG,OAAO,EAAE,IAAI,CAAC,QAAQ;oBACtB,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC1E,GAAG,EAAE,GAAG;iBACT;aACF,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CACrC,CAAC,IAAI,EAAE,EAAE,CACP,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CACjE,CAAC;QACF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO;gBACL;oBACE,MAAM,EAAE,EAAE;oBACV,QAAQ,EAAE,SAAS;oBACnB,OAAO,EACL,mIAAmI;oBACrI,OAAO,EAAE,IAAI,CAAC,QAAQ;oBACtB,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,IAAI,CAAC,GAAG,WAAW,IAAI,CAAC,IAAI,IAAI,CAAC;oBAC7E,GAAG,EAAE,2DAA2D;iBAC/C;aACpB,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAC"}