vaspera 2.5.0

package/dist/scanners/binary-analysis.test.js

@@ -0,0 +1,291 @@
+/**
+ * Unit tests for binary-analysis scanner module
+ */
+import { describe, it, expect, beforeEach, afterEach, afterAll } from "vitest";
+import { mkdir, rm, writeFile } from "fs/promises";
+import { join } from "path";
+import { tmpdir } from "os";
+import { runBinaryAnalysis, checkBinaryAnalysisAvailable, detectNativeModules, } from "./binary-analysis.js";
+const TEST_BASE = join(tmpdir(), "vaspera-binary-test-" + Date.now() + "-" + Math.random().toString(36).slice(2));
+let testProjectPath;
+beforeEach(async () => {
+    testProjectPath = join(TEST_BASE, "project-" + Math.random().toString(36).slice(2));
+    await mkdir(testProjectPath, { recursive: true });
+});
+afterEach(async () => {
+    try {
+        await rm(testProjectPath, { recursive: true, force: true });
+    }
+    catch {
+        // Ignore cleanup errors
+    }
+});
+afterAll(async () => {
+    try {
+        await rm(TEST_BASE, { recursive: true, force: true });
+    }
+    catch {
+        // Ignore cleanup errors
+    }
+});
+describe("checkBinaryAnalysisAvailable", () => {
+    it("returns proper structure with boolean flags", async () => {
+        const result = await checkBinaryAnalysisAvailable();
+        expect(result).toHaveProperty("checksec");
+        expect(result).toHaveProperty("nm");
+        expect(result).toHaveProperty("objdump");
+        expect(result).toHaveProperty("file");
+        expect(typeof result.checksec).toBe("boolean");
+        expect(typeof result.nm).toBe("boolean");
+        expect(typeof result.objdump).toBe("boolean");
+        expect(typeof result.file).toBe("boolean");
+    });
+});
+describe("detectNativeModules", () => {
+    it("returns empty array for project without native modules", async () => {
+        await writeFile(join(testProjectPath, "index.ts"), `export const x = 1;`);
+        const targets = await detectNativeModules(testProjectPath);
+        expect(Array.isArray(targets)).toBe(true);
+        expect(targets).toHaveLength(0);
+    });
+    it("detects binding.gyp files", async () => {
+        await writeFile(join(testProjectPath, "binding.gyp"), `{
+        "targets": [{
+          "target_name": "addon",
+          "sources": ["addon.cc"]
+        }]
+      }`);
+        const targets = await detectNativeModules(testProjectPath);
+        expect(targets.length).toBeGreaterThan(0);
+        const bindingGyp = targets.find(t => t.type === "binding-gyp");
+        expect(bindingGyp).toBeDefined();
+        expect(bindingGyp?.name).toBe("binding.gyp");
+    });
+    it("detects Rust FFI projects with cdylib", async () => {
+        await writeFile(join(testProjectPath, "Cargo.toml"), `[package]
+name = "my-lib"
+version = "0.1.0"
+
+[lib]
+crate-type = ["cdylib"]
+`);
+        const targets = await detectNativeModules(testProjectPath);
+        const rustFfi = targets.find(t => t.type === "rust-ffi");
+        expect(rustFfi).toBeDefined();
+    });
+    it("detects Go CGO usage", async () => {
+        await writeFile(join(testProjectPath, "main.go"), `package main
+
+import "C"
+
+func main() {
+  // CGO code here
+}
+`);
+        const targets = await detectNativeModules(testProjectPath);
+        const goCgo = targets.find(t => t.type === "go-cgo");
+        expect(goCgo).toBeDefined();
+    });
+    it("ignores node_modules/.pnpm and .cache directories", async () => {
+        await mkdir(join(testProjectPath, "node_modules", ".pnpm", "pkg"), { recursive: true });
+        await writeFile(join(testProjectPath, "node_modules", ".pnpm", "pkg", "binding.gyp"), `{"targets": []}`);
+        const targets = await detectNativeModules(testProjectPath);
+        const pnpmTarget = targets.find(t => t.path.includes(".pnpm"));
+        expect(pnpmTarget).toBeUndefined();
+    });
+});
+describe("runBinaryAnalysis", () => {
+    it("returns proper ScannerResult structure", async () => {
+        await writeFile(join(testProjectPath, "index.ts"), `export const x = 1;`);
+        const result = await runBinaryAnalysis(testProjectPath);
+        expect(result).toHaveProperty("scanner", "binary-analysis");
+        expect(result).toHaveProperty("findings");
+        expect(result).toHaveProperty("duration");
+        expect(result).toHaveProperty("success");
+        expect(Array.isArray(result.findings)).toBe(true);
+    });
+    it("returns empty findings for projects without native modules", async () => {
+        await writeFile(join(testProjectPath, "index.ts"), `export const x = 1;`);
+        const result = await runBinaryAnalysis(testProjectPath);
+        expect(result.success).toBe(true);
+        expect(result.findings).toHaveLength(0);
+        expect(result.metadata?.message).toContain("No native modules");
+    });
+    it("tracks duration", async () => {
+        await writeFile(join(testProjectPath, "index.ts"), `export const x = 1;`);
+        const result = await runBinaryAnalysis(testProjectPath);
+        expect(result.duration).toBeGreaterThanOrEqual(0);
+    });
+    it("handles non-existent directories gracefully", async () => {
+        const result = await runBinaryAnalysis("/nonexistent/path/that/does/not/exist");
+        expect(result.scanner).toBe("binary-analysis");
+        // Should either succeed with 0 findings or fail gracefully
+        expect(result).toHaveProperty("success");
+    });
+    it("accepts timeout option", async () => {
+        await writeFile(join(testProjectPath, "index.ts"), `export const x = 1;`);
+        const result = await runBinaryAnalysis(testProjectPath, { timeout: 5000 });
+        expect(result.scanner).toBe("binary-analysis");
+    });
+});
+describe("runBinaryAnalysis - binding.gyp analysis", () => {
+    it("detects -fno-stack-protector flag", async () => {
+        await writeFile(join(testProjectPath, "binding.gyp"), `{
+        "targets": [{
+          "target_name": "addon",
+          "cflags": ["-fno-stack-protector"],
+          "sources": ["addon.cc"]
+        }]
+      }`);
+        const result = await runBinaryAnalysis(testProjectPath);
+        if (result.success && result.findings.length > 0) {
+            const stackProtectorFinding = result.findings.find(f => f.ruleId === "binary:disabled-stack-protector");
+            expect(stackProtectorFinding).toBeDefined();
+            expect(stackProtectorFinding?.severity).toBe("critical");
+        }
+    });
+    it("detects -z execstack flag", async () => {
+        await writeFile(join(testProjectPath, "binding.gyp"), `{
+        "targets": [{
+          "target_name": "addon",
+          "ldflags": ["-z execstack"],
+          "sources": ["addon.cc"]
+        }]
+      }`);
+        const result = await runBinaryAnalysis(testProjectPath);
+        if (result.success && result.findings.length > 0) {
+            const execStackFinding = result.findings.find(f => f.ruleId === "binary:executable-stack-flag");
+            expect(execStackFinding).toBeDefined();
+            expect(execStackFinding?.severity).toBe("critical");
+        }
+    });
+    it("detects -z norelro flag", async () => {
+        await writeFile(join(testProjectPath, "binding.gyp"), `{
+        "targets": [{
+          "target_name": "addon",
+          "ldflags": ["-z norelro"],
+          "sources": ["addon.cc"]
+        }]
+      }`);
+        const result = await runBinaryAnalysis(testProjectPath);
+        if (result.success && result.findings.length > 0) {
+            const relroFinding = result.findings.find(f => f.ruleId === "binary:disabled-relro");
+            expect(relroFinding).toBeDefined();
+            expect(relroFinding?.severity).toBe("high");
+        }
+    });
+    it("detects disabled FORTIFY_SOURCE", async () => {
+        await writeFile(join(testProjectPath, "binding.gyp"), `{
+        "targets": [{
+          "target_name": "addon",
+          "defines": ["-D_FORTIFY_SOURCE=0"],
+          "sources": ["addon.cc"]
+        }]
+      }`);
+        const result = await runBinaryAnalysis(testProjectPath);
+        if (result.success && result.findings.length > 0) {
+            const fortifyFinding = result.findings.find(f => f.ruleId === "binary:disabled-fortify");
+            expect(fortifyFinding).toBeDefined();
+            expect(fortifyFinding?.severity).toBe("high");
+        }
+    });
+});
+describe("runBinaryAnalysis - finding properties", () => {
+    it("findings have correct scanner property", async () => {
+        await writeFile(join(testProjectPath, "binding.gyp"), `{
+        "targets": [{
+          "target_name": "addon",
+          "cflags": ["-fno-stack-protector"],
+          "sources": ["addon.cc"]
+        }]
+      }`);
+        const result = await runBinaryAnalysis(testProjectPath);
+        for (const finding of result.findings) {
+            expect(finding.scanner).toBe("binary-analysis");
+        }
+    });
+    it("findings have ruleId starting with binary:", async () => {
+        await writeFile(join(testProjectPath, "binding.gyp"), `{
+        "targets": [{
+          "target_name": "addon",
+          "cflags": ["-fno-stack-protector"],
+          "sources": ["addon.cc"]
+        }]
+      }`);
+        const result = await runBinaryAnalysis(testProjectPath);
+        for (const finding of result.findings) {
+            expect(finding.ruleId).toMatch(/^binary:/);
+        }
+    });
+    it("findings have valid severity levels", async () => {
+        await writeFile(join(testProjectPath, "binding.gyp"), `{
+        "targets": [{
+          "target_name": "addon",
+          "cflags": ["-fno-stack-protector"],
+          "sources": ["addon.cc"]
+        }]
+      }`);
+        const result = await runBinaryAnalysis(testProjectPath);
+        for (const finding of result.findings) {
+            expect(["critical", "high", "medium", "low", "info"]).toContain(finding.severity);
+        }
+    });
+    it("findings have category binary-security", async () => {
+        await writeFile(join(testProjectPath, "binding.gyp"), `{
+        "targets": [{
+          "target_name": "addon",
+          "cflags": ["-fno-stack-protector"],
+          "sources": ["addon.cc"]
+        }]
+      }`);
+        const result = await runBinaryAnalysis(testProjectPath);
+        for (const finding of result.findings) {
+            expect(finding.category).toBe("binary-security");
+        }
+    });
+    it("findings have confidence 100", async () => {
+        await writeFile(join(testProjectPath, "binding.gyp"), `{
+        "targets": [{
+          "target_name": "addon",
+          "cflags": ["-fno-stack-protector"],
+          "sources": ["addon.cc"]
+        }]
+      }`);
+        const result = await runBinaryAnalysis(testProjectPath);
+        for (const finding of result.findings) {
+            expect(finding.confidence).toBe(100);
+        }
+    });
+});
+describe("runBinaryAnalysis - Rust and Go detection", () => {
+    it("reports Rust FFI detection as info", async () => {
+        await writeFile(join(testProjectPath, "Cargo.toml"), `[package]
+name = "my-lib"
+version = "0.1.0"
+
+[lib]
+crate-type = ["cdylib"]
+`);
+        const result = await runBinaryAnalysis(testProjectPath);
+        if (result.success && result.findings.length > 0) {
+            const rustFinding = result.findings.find(f => f.ruleId === "binary:rust-ffi-detected");
+            expect(rustFinding).toBeDefined();
+            expect(rustFinding?.severity).toBe("info");
+        }
+    });
+    it("reports Go CGO detection as info", async () => {
+        await writeFile(join(testProjectPath, "main.go"), `package main
+
+import "C"
+
+func main() {}
+`);
+        const result = await runBinaryAnalysis(testProjectPath);
+        if (result.success && result.findings.length > 0) {
+            const goFinding = result.findings.find(f => f.ruleId === "binary:go-cgo-detected");
+            expect(goFinding).toBeDefined();
+            expect(goFinding?.severity).toBe("info");
+        }
+    });
+});
+//# sourceMappingURL=binary-analysis.test.js.map

package/dist/scanners/binary-analysis.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary-analysis.test.js","sourceRoot":"","sources":["../../src/scanners/binary-analysis.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAC/E,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,SAAS,GAAG,IAAI,CACpB,MAAM,EAAE,EACR,sBAAsB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAChF,CAAC;AACF,IAAI,eAAuB,CAAC;AAE5B,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpF,MAAM,KAAK,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,MAAM,GAAG,MAAM,4BAA4B,EAAE,CAAC;QAEpD,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAE1E,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,eAAe,CAAC,CAAC;QAE3D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,EACpC;;;;;QAKE,CACH,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,eAAe,CAAC,CAAC;QAE3D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;QAC/D,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,EACnC;;;;;;CAML,CACI,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,eAAe,CAAC,CAAC;QAE3D,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;QACzD,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,EAChC;;;;;;;CAOL,CACI,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,eAAe,CAAC,CAAC;QAE3D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxF,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,EACpE,iBAAiB,CAClB,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,eAAe,CAAC,CAAC;QAE3D,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,MAAM,CAAC,UAAU,CAAC,CAAC,aAAa,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAExD,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAExD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;QAC/B,MAAM,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAExD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,uCAAuC,CAAC,CAAC;QAEhF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC/C,2DAA2D;QAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAE3E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACxD,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,EACpC;;;;;;QAME,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAExD,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,qBAAqB,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAChD,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,iCAAiC,CACpD,CAAC;YACF,MAAM,CAAC,qBAAqB,CAAC,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,EACpC;;;;;;QAME,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAExD,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAC3C,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,8BAA8B,CACjD,CAAC;YACF,MAAM,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,EACpC;;;;;;QAME,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAExD,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CACvC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,uBAAuB,CAC1C,CAAC;YACF,MAAM,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,EACpC;;;;;;QAME,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAExD,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,yBAAyB,CAC5C,CAAC;YACF,MAAM,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,EACpC;;;;;;QAME,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAExD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,EACpC;;;;;;QAME,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAExD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,EACpC;;;;;;QAME,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAExD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,EACpC;;;;;;QAME,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAExD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,EACpC;;;;;;QAME,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAExD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,EACnC;;;;;;CAML,CACI,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAExD,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CACtC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,0BAA0B,CAC7C,CAAC;YACF,MAAM,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,SAAS,CACb,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,EAChC;;;;;CAKL,CACI,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAExD,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CACpC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,wBAAwB,CAC3C,CAAC;YACF,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;YAChC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/scanners/brakeman.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Brakeman Scanner Integration
+ *
+ * Ruby on Rails security scanner for common vulnerabilities.
+ *
+ * @module scanners/brakeman
+ */
+import type { ScannerResult, ScannerAvailability } from "./types.js";
+/**
+ * Check if Brakeman is available
+ */
+export declare function checkBrakemanAvailable(): Promise<ScannerAvailability>;
+/**
+ * Run Brakeman on a Ruby on Rails project
+ */
+export declare function runBrakeman(projectPath: string, options?: {
+    timeout?: number;
+    skip?: string[];
+    only?: string[];
+    configFile?: string;
+}): Promise<ScannerResult>;
+/**
+ * Check if a project is a Ruby on Rails project
+ */
+export declare function detectRails(projectPath: string): Promise<boolean>;
+/**
+ * Check if a project contains Ruby files (for general Ruby detection)
+ */
+export declare function detectRuby(projectPath: string): Promise<boolean>;
+//# sourceMappingURL=brakeman.d.ts.map

package/dist/scanners/brakeman.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"brakeman.d.ts","sourceRoot":"","sources":["../../src/scanners/brakeman.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,KAAK,EAAwB,aAAa,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AA8E3F;;GAEG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAiB3E;AAgCD;;GAEG;AACH,wBAAsB,WAAW,CAC/B,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;IACR,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GACA,OAAO,CAAC,aAAa,CAAC,CA2IxB;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAwBvE;AAED;;GAEG;AACH,wBAAsB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAqBtE"}

package/dist/scanners/brakeman.js

@@ -0,0 +1,271 @@
+/**
+ * Brakeman Scanner Integration
+ *
+ * Ruby on Rails security scanner for common vulnerabilities.
+ *
+ * @module scanners/brakeman
+ */
+import { exec } from "child_process";
+import { promisify } from "util";
+import { access } from "fs/promises";
+import { join } from "path";
+const execAsync = promisify(exec);
+/**
+ * CWE mappings for common Brakeman warning types
+ */
+const WARNING_TO_CWE = {
+    "SQL Injection": "CWE-89",
+    "Cross-Site Scripting": "CWE-79",
+    "Cross-Site Request Forgery": "CWE-352",
+    "Remote Code Execution": "CWE-94",
+    "Command Injection": "CWE-78",
+    "Path Traversal": "CWE-22",
+    "Redirect": "CWE-601",
+    "Mass Assignment": "CWE-915",
+    "Session Setting": "CWE-614",
+    "Denial of Service": "CWE-400",
+    "File Access": "CWE-22",
+    "Dynamic Render Path": "CWE-79",
+    "Dangerous Send": "CWE-94",
+    "Dangerous Eval": "CWE-94",
+    "SSL Verification Bypass": "CWE-295",
+    "Information Disclosure": "CWE-200",
+    "Authentication": "CWE-287",
+    "Authorization": "CWE-862",
+    "Weak Hash": "CWE-328",
+};
+/**
+ * Check if Brakeman is available
+ */
+export async function checkBrakemanAvailable() {
+    try {
+        const { stdout } = await execAsync("brakeman --version", { timeout: 5000 });
+        const version = stdout.trim();
+        return {
+            scanner: "brakeman",
+            available: true,
+            version,
+        };
+    }
+    catch (error) {
+        return {
+            scanner: "brakeman",
+            available: false,
+            error: error instanceof Error ? error.message : "Brakeman not found",
+        };
+    }
+}
+/**
+ * Convert Brakeman confidence to vaspera severity
+ * High confidence + dangerous warning type = critical/high
+ * Medium confidence = medium
+ * Weak confidence = low
+ */
+function mapSeverity(confidence, warningType) {
+    // Certain warning types are always critical regardless of confidence
+    const criticalTypes = [
+        "SQL Injection",
+        "Remote Code Execution",
+        "Command Injection",
+        "Dangerous Eval",
+    ];
+    if (criticalTypes.includes(warningType) && confidence === "High") {
+        return "critical";
+    }
+    if (confidence === "High") {
+        return "high";
+    }
+    if (confidence === "Medium") {
+        return "medium";
+    }
+    return "low";
+}
+/**
+ * Run Brakeman on a Ruby on Rails project
+ */
+export async function runBrakeman(projectPath, options) {
+    const startTime = Date.now();
+    try {
+        // Check if Brakeman is available
+        const availability = await checkBrakemanAvailable();
+        if (!availability.available) {
+            return {
+                scanner: "brakeman",
+                findings: [],
+                duration: Date.now() - startTime,
+                success: false,
+                error: "Brakeman is not installed. Install with: gem install brakeman",
+            };
+        }
+        // Check if this is a Rails project
+        const isRails = await detectRails(projectPath);
+        if (!isRails) {
+            return {
+                scanner: "brakeman",
+                findings: [],
+                duration: Date.now() - startTime,
+                success: false,
+                error: "Not a Ruby on Rails project (no Gemfile or config/application.rb found)",
+            };
+        }
+        // Build command
+        let command = `brakeman "${projectPath}" -f json --no-pager --no-progress`;
+        if (options?.skip && options.skip.length > 0) {
+            command += ` --skip-checks ${options.skip.join(",")}`;
+        }
+        if (options?.only && options.only.length > 0) {
+            command += ` --only-checks ${options.only.join(",")}`;
+        }
+        if (options?.configFile) {
+            command += ` -c "${options.configFile}"`;
+        }
+        // Run Brakeman
+        const { stdout, stderr } = await execAsync(command, {
+            timeout: options?.timeout || 300000, // 5 minutes default
+            maxBuffer: 10 * 1024 * 1024, // 10MB
+        }).catch((error) => {
+            // Brakeman exits with different codes for warnings
+            // Exit code 0: No warnings
+            // Exit code 3: Warnings found
+            // Exit code 4: Errors during scan
+            if (error.stdout) {
+                return { stdout: error.stdout, stderr: error.stderr || "" };
+            }
+            throw error;
+        });
+        // Parse JSON output
+        let output;
+        try {
+            output = JSON.parse(stdout);
+        }
+        catch (parseError) {
+            return {
+                scanner: "brakeman",
+                findings: [],
+                duration: Date.now() - startTime,
+                success: false,
+                error: "Failed to parse Brakeman JSON output",
+            };
+        }
+        // Convert to DeterministicFindings
+        const findings = output.warnings.map((warning) => {
+            const cweId = WARNING_TO_CWE[warning.warning_type];
+            return {
+                scanner: "brakeman",
+                ruleId: `brakeman:${warning.warning_code}`,
+                file: warning.file.replace(projectPath + "/", ""),
+                line: warning.line || 1,
+                message: `${warning.warning_type}: ${warning.message}`,
+                severity: mapSeverity(warning.confidence, warning.warning_type),
+                confidence: 100,
+                cweIds: cweId ? [cweId] : undefined,
+                evidence: warning.code || undefined,
+                fix: warning.link ? `See: ${warning.link}` : undefined,
+                metadata: {
+                    warningType: warning.warning_type,
+                    warningCode: warning.warning_code,
+                    checkName: warning.check_name,
+                    fingerprint: warning.fingerprint,
+                    brakemanConfidence: warning.confidence,
+                    location: warning.location,
+                    userInput: warning.user_input,
+                    link: warning.link,
+                },
+            };
+        });
+        // Add errors as findings if any
+        if (output.errors && output.errors.length > 0) {
+            for (const error of output.errors) {
+                findings.push({
+                    scanner: "brakeman",
+                    ruleId: "brakeman:error",
+                    file: "unknown",
+                    line: 1,
+                    message: `Brakeman error: ${error.error}`,
+                    severity: "info",
+                    confidence: 100,
+                    metadata: {
+                        backtrace: error.backtrace.slice(0, 5),
+                    },
+                });
+            }
+        }
+        return {
+            scanner: "brakeman",
+            findings,
+            duration: Date.now() - startTime,
+            success: true,
+            version: availability.version,
+            filesScanned: output.scan_info
+                ? output.scan_info.number_of_controllers +
+                    output.scan_info.number_of_models +
+                    output.scan_info.number_of_templates
+                : undefined,
+        };
+    }
+    catch (error) {
+        return {
+            scanner: "brakeman",
+            findings: [],
+            duration: Date.now() - startTime,
+            success: false,
+            error: error instanceof Error ? error.message : "Unknown error",
+        };
+    }
+}
+/**
+ * Check if a project is a Ruby on Rails project
+ */
+export async function detectRails(projectPath) {
+    try {
+        // Check for Gemfile
+        await access(join(projectPath, "Gemfile"));
+        // Check for Rails-specific files
+        try {
+            await access(join(projectPath, "config", "application.rb"));
+            return true;
+        }
+        catch {
+            // Could still be a Rails project with different structure
+            try {
+                await access(join(projectPath, "config", "environment.rb"));
+                return true;
+            }
+            catch {
+                // Check Gemfile for rails gem
+                const { readFile } = await import("fs/promises");
+                const gemfile = await readFile(join(projectPath, "Gemfile"), "utf-8");
+                return gemfile.includes("gem 'rails'") || gemfile.includes('gem "rails"');
+            }
+        }
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Check if a project contains Ruby files (for general Ruby detection)
+ */
+export async function detectRuby(projectPath) {
+    try {
+        await access(join(projectPath, "Gemfile"));
+        return true;
+    }
+    catch {
+        try {
+            await access(join(projectPath, "Rakefile"));
+            return true;
+        }
+        catch {
+            // Check for .rb files
+            try {
+                const { stdout } = await execAsync(`find "${projectPath}" -maxdepth 3 -name "*.rb" | head -1`, { timeout: 5000 });
+                return stdout.trim().length > 0;
+            }
+            catch {
+                return false;
+            }
+        }
+    }
+}
+//# sourceMappingURL=brakeman.js.map

package/dist/scanners/brakeman.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brakeman.js","sourceRoot":"","sources":["../../src/scanners/brakeman.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAmDlC;;GAEG;AACH,MAAM,cAAc,GAA2B;IAC7C,eAAe,EAAE,QAAQ;IACzB,sBAAsB,EAAE,QAAQ;IAChC,4BAA4B,EAAE,SAAS;IACvC,uBAAuB,EAAE,QAAQ;IACjC,mBAAmB,EAAE,QAAQ;IAC7B,gBAAgB,EAAE,QAAQ;IAC1B,UAAU,EAAE,SAAS;IACrB,iBAAiB,EAAE,SAAS;IAC5B,iBAAiB,EAAE,SAAS;IAC5B,mBAAmB,EAAE,SAAS;IAC9B,aAAa,EAAE,QAAQ;IACvB,qBAAqB,EAAE,QAAQ;IAC/B,gBAAgB,EAAE,QAAQ;IAC1B,gBAAgB,EAAE,QAAQ;IAC1B,yBAAyB,EAAE,SAAS;IACpC,wBAAwB,EAAE,SAAS;IACnC,gBAAgB,EAAE,SAAS;IAC3B,eAAe,EAAE,SAAS;IAC1B,WAAW,EAAE,SAAS;CACvB,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAE9B,OAAO;YACL,OAAO,EAAE,UAAU;YACnB,SAAS,EAAE,IAAI;YACf,OAAO;SACR,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,UAAU;YACnB,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB;SACrE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,UAAsC,EAAE,WAAmB;IAC9E,qEAAqE;IACrE,MAAM,aAAa,GAAG;QACpB,eAAe;QACf,uBAAuB;QACvB,mBAAmB;QACnB,gBAAgB;KACjB,CAAC;IAEF,IAAI,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QACjE,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,WAAmB,EACnB,OAKC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,IAAI,CAAC;QACH,iCAAiC;QACjC,MAAM,YAAY,GAAG,MAAM,sBAAsB,EAAE,CAAC;QACpD,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE,UAAU;gBACnB,QAAQ,EAAE,EAAE;gBACZ,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAChC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,+DAA+D;aACvE,CAAC;QACJ,CAAC;QAED,mCAAmC;QACnC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,UAAU;gBACnB,QAAQ,EAAE,EAAE;gBACZ,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAChC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,yEAAyE;aACjF,CAAC;QACJ,CAAC;QAED,gBAAgB;QAChB,IAAI,OAAO,GAAG,aAAa,WAAW,oCAAoC,CAAC;QAE3E,IAAI,OAAO,EAAE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,kBAAkB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxD,CAAC;QAED,IAAI,OAAO,EAAE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,kBAAkB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxD,CAAC;QAED,IAAI,OAAO,EAAE,UAAU,EAAE,CAAC;YACxB,OAAO,IAAI,QAAQ,OAAO,CAAC,UAAU,GAAG,CAAC;QAC3C,CAAC;QAED,eAAe;QACf,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE;YAClD,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,oBAAoB;YACzD,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO;SACrC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACjB,mDAAmD;YACnD,2BAA2B;YAC3B,8BAA8B;YAC9B,kCAAkC;YAClC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YAC9D,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,oBAAoB;QACpB,IAAI,MAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,UAAU;gBACnB,QAAQ,EAAE,EAAE;gBACZ,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAChC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,sCAAsC;aAC9C,CAAC;QACJ,CAAC;QAED,mCAAmC;QACnC,MAAM,QAAQ,GAA2B,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;YACvE,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAEnD,OAAO;gBACL,OAAO,EAAE,UAAmB;gBAC5B,MAAM,EAAE,YAAY,OAAO,CAAC,YAAY,EAAE;gBAC1C,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,GAAG,GAAG,EAAE,EAAE,CAAC;gBACjD,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC;gBACvB,OAAO,EAAE,GAAG,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,OAAO,EAAE;gBACtD,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC;gBAC/D,UAAU,EAAE,GAAG;gBACf,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;gBACnC,QAAQ,EAAE,OAAO,CAAC,IAAI,IAAI,SAAS;gBACnC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;gBACtD,QAAQ,EAAE;oBACR,WAAW,EAAE,OAAO,CAAC,YAAY;oBACjC,WAAW,EAAE,OAAO,CAAC,YAAY;oBACjC,SAAS,EAAE,OAAO,CAAC,UAAU;oBAC7B,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,kBAAkB,EAAE,OAAO,CAAC,UAAU;oBACtC,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,SAAS,EAAE,OAAO,CAAC,UAAU;oBAC7B,IAAI,EAAE,OAAO,CAAC,IAAI;iBACnB;aACF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,gCAAgC;QAChC,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClC,QAAQ,CAAC,IAAI,CAAC;oBACZ,OAAO,EAAE,UAAmB;oBAC5B,MAAM,EAAE,gBAAgB;oBACxB,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,CAAC;oBACP,OAAO,EAAE,mBAAmB,KAAK,CAAC,KAAK,EAAE;oBACzC,QAAQ,EAAE,MAAM;oBAChB,UAAU,EAAE,GAAG;oBACf,QAAQ,EAAE;wBACR,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;qBACvC;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,UAAU;YACnB,QAAQ;YACR,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAChC,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,YAAY,EAAE,MAAM,CAAC,SAAS;gBAC5B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,qBAAqB;oBACtC,MAAM,CAAC,SAAS,CAAC,gBAAgB;oBACjC,MAAM,CAAC,SAAS,CAAC,mBAAmB;gBACtC,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,UAAU;YACnB,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAChC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,WAAmB;IACnD,IAAI,CAAC;QACH,oBAAoB;QACpB,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;QAE3C,iCAAiC;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;YAC1D,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;gBAC5D,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,8BAA8B;gBAC9B,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;gBACjD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;gBACtE,OAAO,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,WAAmB;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;YACtB,IAAI,CAAC;gBACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAChC,SAAS,WAAW,sCAAsC,EAC1D,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAC;gBACF,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/scanners/dependencies.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Dependency Vulnerability Scanner
+ *
+ * Scans package dependencies for known vulnerabilities using npm audit.
+ * Falls back to parsing package-lock.json if npm audit is not available.
+ *
+ * @module scanners/dependencies
+ */
+import type { ScannerResult } from "./types.js";
+/**
+ * Run npm audit and return findings
+ */
+export declare function runDependencyAudit(projectPath: string): Promise<ScannerResult>;
+/**
+ * Check if npm is available
+ */
+export declare function checkNpmAvailable(): Promise<{
+    available: boolean;
+    version?: string;
+    error?: string;
+}>;
+//# sourceMappingURL=dependencies.d.ts.map

package/dist/scanners/dependencies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependencies.d.ts","sourceRoot":"","sources":["../../src/scanners/dependencies.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,KAAK,EAAwB,aAAa,EAAE,MAAM,YAAY,CAAC;AAyDtE;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAgEpF;AAyHD;;GAEG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC;IACjD,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAsBD"}