verification-layer 0.25.1 → 0.25.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +14 -12
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# vlayer - HIPAA Compliance on Every Commit
|
|
2
2
|
|
|
3
|
-
**Automated security scanning for healthcare applications.**
|
|
3
|
+
**Automated security scanning for healthcare applications.** 131 detection rules that catch PHI exposures, missing encryption, and access control gaps before they reach production. HIPAA 2026 ready - 15/15 requirements covered.
|
|
4
4
|
|
|
5
5
|
[](https://github.com/Francosimon53/verification-layer/actions/workflows/ci.yml)
|
|
6
6
|
[](https://www.npmjs.com/package/verification-layer)
|
|
@@ -16,21 +16,23 @@
|
|
|
16
16
|
|
|
17
17
|
```bash
|
|
18
18
|
# Install globally
|
|
19
|
-
npm install -g
|
|
19
|
+
npm install -g @francosimon/vlayer
|
|
20
20
|
|
|
21
21
|
# Or use with npx (no install needed)
|
|
22
|
-
npx vlayer scan ./src
|
|
22
|
+
npx @francosimon/vlayer scan ./src
|
|
23
23
|
|
|
24
24
|
# Scan with HTML report
|
|
25
|
-
npx vlayer scan ./src -f html -o report.html
|
|
25
|
+
npx @francosimon/vlayer scan ./src -f html -o report.html
|
|
26
26
|
|
|
27
27
|
# Check compliance score
|
|
28
|
-
npx vlayer score ./src
|
|
28
|
+
npx @francosimon/vlayer score ./src
|
|
29
29
|
|
|
30
30
|
# Auto-fix issues
|
|
31
|
-
npx vlayer scan ./src --fix
|
|
31
|
+
npx @francosimon/vlayer scan ./src --fix
|
|
32
32
|
```
|
|
33
33
|
|
|
34
|
+
> Published on npm as `@francosimon/vlayer` (the bare name `vlayer` is taken); the installed binary is still `vlayer`.
|
|
35
|
+
|
|
34
36
|
---
|
|
35
37
|
|
|
36
38
|
## What is vlayer?
|
|
@@ -38,7 +40,7 @@ npx vlayer scan ./src --fix
|
|
|
38
40
|
vlayer is a CLI tool and platform that scans your codebase for HIPAA compliance issues. Built for healthcare startups and developers building applications that handle Protected Health Information (PHI).
|
|
39
41
|
|
|
40
42
|
**🎯 Key Features:**
|
|
41
|
-
- **
|
|
43
|
+
- **131 detection rules** (125 pattern-based + 6 AI-powered) across 5 HIPAA categories (PHI exposure, encryption, access control, audit logging, data retention)
|
|
42
44
|
- **HIPAA 2026 NPRM ready** - Covers all 15 new cybersecurity requirements
|
|
43
45
|
- **10 training modules** with 45+ questions and SHA-256 verifiable certificates
|
|
44
46
|
- **5 HIPAA templates** - IRP, BAA, NPP, Security Officer role, Physical Safeguards
|
|
@@ -64,7 +66,7 @@ vlayer is a CLI tool and platform that scans your codebase for HIPAA compliance
|
|
|
64
66
|
|
|
65
67
|
| Plan | Price | Features |
|
|
66
68
|
|------|-------|----------|
|
|
67
|
-
| **Open Source** | **$0/forever** | Full scanner, CLI,
|
|
69
|
+
| **Open Source** | **$0/forever** | Full scanner, CLI, 131 rules, compliance scoring, training module, community support |
|
|
68
70
|
| **Pro** | **$49/month** ($490/year) | Everything in OSS + GitHub App with PR comments, pre-commit hooks, historical scan dashboard, HIPAA document templates, team tracking (10 users), PDF audit reports, email support (48h SLA). **14-day free trial** |
|
|
69
71
|
| **Enterprise** | **Custom** | Everything in Pro + custom detection rules, self-hosted deployment, SSO/RBAC integration, dedicated compliance consultant, custom training modules, audit preparation support, priority support (4h SLA). Contact: [sales@vlayer.app](mailto:sales@vlayer.app) |
|
|
70
72
|
|
|
@@ -102,7 +104,7 @@ The new HIPAA Security Rule (NPRM 2026) adds 15 cybersecurity requirements. vlay
|
|
|
102
104
|
|
|
103
105
|
## 📊 Detection Categories
|
|
104
106
|
|
|
105
|
-
vlayer scans for **
|
|
107
|
+
vlayer scans for **131 rules (125 pattern-based + 6 AI-powered)** across 5 HIPAA compliance categories:
|
|
106
108
|
|
|
107
109
|
| Category | Rules | What it detects |
|
|
108
110
|
|----------|-------|-----------------|
|
|
@@ -119,7 +121,7 @@ vlayer scans for **140+ security patterns** across 5 HIPAA compliance categories
|
|
|
119
121
|
| **Session Management** | 8 | Weak session configs, missing timeouts, insecure cookies |
|
|
120
122
|
| **Third-Party Risk** | 6 | Unsafe vendor integrations, missing BAAs, unvetted third-party code |
|
|
121
123
|
|
|
122
|
-
**Total:
|
|
124
|
+
**Total: 131 rules (125 pattern-based + 6 AI-powered)**
|
|
123
125
|
|
|
124
126
|
---
|
|
125
127
|
|
|
@@ -244,14 +246,14 @@ jobs:
|
|
|
244
246
|
- uses: actions/setup-node@v3
|
|
245
247
|
with:
|
|
246
248
|
node-version: '18'
|
|
247
|
-
- run: npx vlayer scan ./src
|
|
249
|
+
- run: npx @francosimon/vlayer scan ./src
|
|
248
250
|
```
|
|
249
251
|
|
|
250
252
|
### Pre-commit Hook
|
|
251
253
|
|
|
252
254
|
```bash
|
|
253
255
|
# Install pre-commit hook
|
|
254
|
-
npx vlayer install-hook
|
|
256
|
+
npx @francosimon/vlayer install-hook
|
|
255
257
|
|
|
256
258
|
# .git/hooks/pre-commit will now run vlayer on staged files
|
|
257
259
|
```
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "verification-layer",
|
|
3
|
-
"version": "0.25.
|
|
4
|
-
"description": "Open-source HIPAA compliance scanner for healthcare code.
|
|
3
|
+
"version": "0.25.3",
|
|
4
|
+
"description": "Open-source HIPAA compliance scanner for healthcare code. 131 rules, 5 HIPAA categories. CLI + CI/CD + VS Code.",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"types": "dist/index.d.ts",
|
|
7
7
|
"bin": {
|