spiderlint 0.0.0 → 0.143.0

package/vendors/dns.yaml

@@ -0,0 +1,21 @@
+# SPDX-FileCopyrightText: 2026 Damián Búho <damian.buho@proton.me>
+#
+# SPDX-License-Identifier: AGPL-3.0-only
+---
+# Managed DNS providers; a zone is theirs when every one of its name servers matches one entry’s globs.
+- provider: Cloudflare
+  match: ["*.ns.cloudflare.com"]
+  # SOA values are editable on Enterprise plans only.
+  soa-editable: false
+  docs: https://developers.cloudflare.com/dns/manage-dns-records/reference/dns-record-types/#soa
+- provider: Amazon Route 53
+  match: ["ns-*.awsdns-*.{com,net,org,co.uk}"]
+  soa-editable: true
+  docs: https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/SOA-NSrecords.html
+- provider: Azure DNS
+  match: ["ns*-*.azure-dns.{com,net,org,info}"]
+  soa-editable: true
+  docs: https://learn.microsoft.com/en-us/azure/dns/dns-zones-records#soa-records
+- provider: Google Cloud DNS
+  match: ["ns-cloud-*.googledomains.com"]
+  docs: https://docs.cloud.google.com/dns/docs/records

package/vendors/paths.yaml

@@ -0,0 +1,55 @@
+# SPDX-FileCopyrightText: 2026 Damián Búho <damian.buho@proton.me>
+#
+# SPDX-License-Identifier: AGPL-3.0-only
+---
+# Paths an edge or host serves on the site’s own origin; the first entry whose glob matches the path wins.
+- vendor: Cloudflare
+  feature: cloudflare/email-obfuscation
+  match: /cdn-cgi/l/email-protection
+  kind: [page]
+  docs: https://developers.cloudflare.com/waf/tools/scrape-shield/email-address-obfuscation/
+- vendor: Cloudflare
+  feature: cloudflare/email-obfuscation
+  match: /cdn-cgi/scripts/*/cloudflare-static/email-decode.min.js
+  kind: [resource]
+  docs: https://developers.cloudflare.com/waf/tools/scrape-shield/email-address-obfuscation/
+- vendor: Cloudflare
+  feature: cloudflare/bot-challenge
+  match: /cdn-cgi/challenge-platform/**
+  kind: [page, resource]
+  docs: https://developers.cloudflare.com/bots/additional-configurations/javascript-detections/
+- vendor: Cloudflare
+  feature: cloudflare/web-analytics
+  match: /cdn-cgi/rum
+  kind: [resource]
+  docs: https://developers.cloudflare.com/web-analytics/get-started/#sites-proxied-through-cloudflare
+- vendor: Cloudflare
+  match: /cdn-cgi/trace
+  kind: [page]
+  docs: https://developers.cloudflare.com/support/troubleshooting/general-troubleshooting/gathering-information-for-troubleshooting-sites/
+- vendor: Cloudflare
+  match: /cdn-cgi/image/**
+  kind: [page]
+  docs: https://developers.cloudflare.com/images/optimization/transformations/overview/
+- vendor: Cloudflare
+  match: /cdn-cgi/**
+  kind: [page, resource]
+  docs: https://developers.cloudflare.com/fundamentals/reference/cdn-cgi-endpoint/
+- vendor: Netlify
+  match: /.netlify/images
+  kind: [page]
+  docs: https://docs.netlify.com/build/image-cdn/overview/
+- vendor: Vercel
+  feature: vercel/web-analytics
+  match: /_vercel/insights/**
+  kind: [page, resource]
+  docs: https://vercel.com/docs/analytics/quickstart
+- vendor: Vercel
+  feature: vercel/speed-insights
+  match: /_vercel/speed-insights/**
+  kind: [page, resource]
+  docs: https://vercel.com/docs/speed-insights/quickstart
+- vendor: Vercel
+  match: /_vercel/image
+  kind: [page]
+  docs: https://vercel.com/docs/image-optimization

package/vendors/stack.yaml

@@ -0,0 +1,57 @@
+# SPDX-FileCopyrightText: 2026 Damián Búho <damian.buho@proton.me>
+#
+# SPDX-License-Identifier: AGPL-3.0-only
+---
+# Services an origin runs on; a signal is a glob, and a service seen by two distinct signals is high confidence.
+- name: cloudflare
+  kind: edge
+  # Published address ranges: downloaded into the `lists` bucket, the bundled ones when the download fails.
+  ranges:
+    lists: [https://www.cloudflare.com/ips-v4, https://www.cloudflare.com/ips-v6]
+    bundled: [173.245.48.0/20, 103.21.244.0/22, 103.22.200.0/22, 103.31.4.0/22, 141.101.64.0/18, 108.162.192.0/18, 190.93.240.0/20, 188.114.96.0/20, 197.234.240.0/22, 198.41.128.0/17, 162.158.0.0/15, 104.16.0.0/13, 104.24.0.0/14, 172.64.0.0/13, 131.0.72.0/22, "2400:cb00::/32", "2606:4700::/32", "2803:f800::/32", "2405:b500::/32", "2405:8100::/32", "2a06:98c0::/29", "2c0f:f248::/32"]
+  headers: {cf-ray: "*", server: cloudflare}
+  cookies: [__cf_bm, cf_clearance]
+  nameservers: ["*.ns.cloudflare.com"]
+  docs: https://developers.cloudflare.com/fundamentals/reference/http-headers/
+- name: fastly
+  kind: edge
+  headers: {x-served-by: "cache-*", x-fastly-request-id: "*"}
+  docs: https://www.fastly.com/documentation/reference/http/http-headers/
+- name: vercel
+  kind: host
+  headers: {x-vercel-id: "*", server: vercel}
+  paths: ["/_next/**", "/_vercel/**"]
+  docs: https://vercel.com/docs/headers/response-headers
+- name: netlify
+  kind: host
+  headers: {x-nf-request-id: "*", server: netlify}
+  docs: https://docs.netlify.com/manage/routing/headers/
+- name: github-pages
+  kind: host
+  headers: {server: GitHub.com, x-github-request-id: "*"}
+  docs: https://docs.github.com/en/pages
+- name: wordpress
+  kind: cms
+  generator: ["WordPress*"]
+  headers: {link: "*api.w.org*"}
+  paths: ["/wp-content/**", "/wp-includes/**", "/wp-json/**"]
+  docs: https://developer.wordpress.org/
+- name: drupal
+  kind: cms
+  generator: ["Drupal*"]
+  headers: {x-generator: "Drupal*", x-drupal-cache: "*"}
+  paths: ["/sites/default/files/**", "/core/misc/**"]
+  docs: https://www.drupal.org/docs
+- name: nextjs
+  kind: framework
+  headers: {x-powered-by: "Next.js*"}
+  paths: ["/_next/static/**"]
+  docs: https://nextjs.org/docs
+- name: nginx
+  kind: server
+  headers: {server: "nginx*"}
+  docs: https://nginx.org/en/docs/
+- name: apache
+  kind: server
+  headers: {server: "Apache*"}
+  docs: https://httpd.apache.org/docs/