verification-layer 0.27.10 → 0.27.12

package/dist/rule-catalog.json

@@ -1,6 +1,6 @@
 {
   "package": "verification-layer",
-  "version": "0.27.10",
+  "version": "0.27.12",
   "total": 143,
   "counts": {
     "phi-exposure": 29,

package/dist/scanners/security/dompurify-false-positive.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=dompurify-false-positive.test.d.ts.map

package/dist/scanners/security/dompurify-false-positive.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dompurify-false-positive.test.d.ts","sourceRoot":"","sources":["../../../src/scanners/security/dompurify-false-positive.test.ts"],"names":[],"mappings":""}

package/dist/scanners/security/dompurify-false-positive.test.js

@@ -0,0 +1,39 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import { mkdir, rm, writeFile } from 'fs/promises';
+import { join } from 'path';
+import { securityScanner } from './index.js';
+const TEST_DIR = join(process.cwd(), '.tmp-security-sanitizer-regression');
+async function scan(name, content) {
+    const file = join(TEST_DIR, name);
+    await writeFile(file, content, 'utf-8');
+    return securityScanner.scan([file], { path: TEST_DIR });
+}
+describe('dangerouslySetInnerHTML sanitizer regression', () => {
+    beforeEach(async () => {
+        await mkdir(TEST_DIR, { recursive: true });
+    });
+    afterEach(async () => {
+        await rm(TEST_DIR, { recursive: true, force: true });
+    });
+    it('still flags raw content passed to dangerouslySetInnerHTML', async () => {
+        const findings = await scan('raw.tsx', `export function Post({ content }: { content: string }) {
+        return <div dangerouslySetInnerHTML={{ __html: content }} />;
+      }`);
+        expect(findings.some((finding) => finding.id.includes('dangerous-innerhtml-react'))).toBe(true);
+    });
+    it('does not flag DOMPurify.sanitize passed directly to __html', async () => {
+        const findings = await scan('dompurify.tsx', `import DOMPurify from 'isomorphic-dompurify';
+      export function Post({ content }: { content: string }) {
+        return <div dangerouslySetInnerHTML={{ __html: DOMPurify.sanitize(content) }} />;
+      }`);
+        expect(findings.some((finding) => finding.id.includes('dangerous-innerhtml-react'))).toBe(false);
+    });
+    it('does not flag sanitizeHtml passed directly to __html', async () => {
+        const findings = await scan('sanitize-html.tsx', `import sanitizeHtml from 'sanitize-html';
+      export function Post({ content }: { content: string }) {
+        return <div dangerouslySetInnerHTML={{ __html: sanitizeHtml(content) }} />;
+      }`);
+        expect(findings.some((finding) => finding.id.includes('dangerous-innerhtml-react'))).toBe(false);
+    });
+});
+//# sourceMappingURL=dompurify-false-positive.test.js.map

package/dist/scanners/security/dompurify-false-positive.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dompurify-false-positive.test.js","sourceRoot":"","sources":["../../../src/scanners/security/dompurify-false-positive.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,oCAAoC,CAAC,CAAC;AAE3E,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,OAAe;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACxC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,QAAQ,GAAG,MAAM,IAAI,CACzB,SAAS,EACT;;QAEE,CACH,CAAC;QAEF,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,QAAQ,GAAG,MAAM,IAAI,CACzB,eAAe,EACf;;;QAGE,CACH,CAAC;QAEF,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CACzB,mBAAmB,EACnB;;;QAGE,CACH,CAAC;QAEF,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/scanners/security/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/scanners/security/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAwB,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAI7E,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAyOA,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,OAoD7B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/scanners/security/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAwB,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAI7E,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAyOA,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,OA8D7B,CAAC"}

package/dist/scanners/security/index.js

@@ -253,6 +253,13 @@ export const securityScanner = {
                             if (isTestFile && ['hardcoded-password', 'hardcoded-secret'].includes(pattern.id)) {
                                 continue;
                             }
+                            // A direct call to an established sanitizer at the __html sink is
+                            // explicit mitigation. Do not suppress custom helpers or variables
+                            // whose sanitization provenance cannot be established here.
+                            if (pattern.id === 'dangerous-innerhtml-react' &&
+                                /__html:\s*(?:(?:DOMPurify|domPurify|dompurify)\.sanitize|sanitizeHtml)\s*\(/i.test(line)) {
+                                continue;
+                            }
                             findings.push({
                                 id: `security-${pattern.id}-${lineNum}`,
                                 category: 'access-control',

package/dist/scanners/security/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/scanners/security/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,CAAC,MAAM,iBAAiB,GAQzB;IACH,8BAA8B;IAC9B;QACE,KAAK,EAAE,yCAAyC;QAChD,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,6BAA6B;QACpC,WAAW,EAAE,wDAAwD;QACrE,cAAc,EAAE,2GAA2G;QAC3H,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,KAAK,EAAE,oCAAoC;QAC3C,EAAE,EAAE,eAAe;QACnB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EAAE,0DAA0D;QACvE,cAAc,EAAE,iEAAiE;QACjF,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,KAAK,EAAE,uCAAuC;QAC9C,EAAE,EAAE,kBAAkB;QACtB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,4DAA4D;QACzE,cAAc,EAAE,6DAA6D;QAC7E,OAAO,EAAE,kBAAkB;KAC5B;IACD;QACE,KAAK,EAAE,4CAA4C;QACnD,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,8DAA8D;QAC3E,cAAc,EAAE,8DAA8D;KAC/E;IAED,4BAA4B;IAC5B;QACE,KAAK,EAAE,oDAAoD;QAC3D,EAAE,EAAE,iBAAiB;QACrB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,wDAAwD;QACrE,cAAc,EAAE,+EAA+E;QAC/F,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,KAAK,EAAE,+CAA+C;QACtD,EAAE,EAAE,gBAAgB;QACpB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,oCAAoC;QAC3C,WAAW,EAAE,qCAAqC;QAClD,cAAc,EAAE,yCAAyC;QACzD,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,KAAK,EAAE,6CAA6C;QACpD,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,2DAA2D;QACxE,cAAc,EAAE,mFAAmF;KACpG;IACD;QACE,KAAK,EAAE,kBAAkB;QACzB,EAAE,EAAE,iBAAiB;QACrB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,4CAA4C;QACzD,cAAc,EAAE,8EAA8E;KAC/F;IACD;QACE,KAAK,EAAE,+BAA+B;QACtC,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,yCAAyC;QACtD,cAAc,EAAE,qDAAqD;KACtE;IACD;QACE,KAAK,EAAE,wDAAwD;QAC/D,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,kDAAkD;QAC/D,cAAc,EAAE,qEAAqE;KACtF;IACD;QACE,KAAK,EAAE,2CAA2C;QAClD,EAAE,EAAE,qBAAqB;QACzB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,+BAA+B;QACtC,WAAW,EAAE,sDAAsD;QACnE,cAAc,EAAE,gEAAgE;KACjF;IAED,+BAA+B;IAC/B;QACE,KAAK,EAAE,mCAAmC;QAC1C,EAAE,EAAE,yBAAyB;QAC7B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,qEAAqE;QAClF,cAAc,EAAE,4DAA4D;KAC7E;IACD;QACE,KAAK,EAAE,iCAAiC;QACxC,EAAE,EAAE,0BAA0B;QAC9B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,iCAAiC;QACxC,WAAW,EAAE,wEAAwE;QACrF,cAAc,EAAE,4DAA4D;KAC7E;IACD;QACE,KAAK,EAAE,yBAAyB;QAChC,EAAE,EAAE,uBAAuB;QAC3B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,mEAAmE;QAChF,cAAc,EAAE,4DAA4D;KAC7E;IAED,oCAAoC;IACpC;QACE,KAAK,EAAE,+BAA+B;QACtC,EAAE,EAAE,uBAAuB;QAC3B,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,mFAAmF;QAChG,cAAc,EAAE,wFAAwF;QACxG,OAAO,EAAE,uBAAuB;KACjC;IACD;QACE,KAAK,EAAE,kDAAkD;QACzD,EAAE,EAAE,2BAA2B;QAC/B,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,+BAA+B;QACtC,WAAW,EAAE,0EAA0E;QACvF,cAAc,EAAE,uEAAuE;KACxF;IACD;QACE,KAAK,EAAE,sBAAsB;QAC7B,EAAE,EAAE,YAAY;QAChB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,iEAAiE;QAC9E,cAAc,EAAE,0EAA0E;KAC3F;IACD;QACE,KAAK,EAAE,6BAA6B;QACpC,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,kEAAkE;QAC/E,cAAc,EAAE,iEAAiE;KAClF;IACD;QACE,KAAK,EAAE,uBAAuB;QAC9B,EAAE,EAAE,gBAAgB;QACpB,QAAQ,EAAE,QAAiB;QAC3B,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,oEAAoE;QACjF,cAAc,EAAE,yEAAyE;KAC1F;IAED,8BAA8B;IAC9B;QACE,KAAK,EAAE,qEAAqE;QAC5E,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,gFAAgF;QAC7F,cAAc,EAAE,0FAA0F;QAC1G,OAAO,EAAE,sBAAsB;KAChC;IACD;QACE,KAAK,EAAE,gJAAgJ;QACvJ,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,+CAA+C;QACtD,WAAW,EAAE,0EAA0E;QACvF,cAAc,EAAE,oFAAoF;QACpG,OAAO,EAAE,wBAAwB;KAClC;IACD;QACE,KAAK,EAAE,8CAA8C;QACrD,EAAE,EAAE,0BAA0B;QAC9B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,4CAA4C;QACnD,WAAW,EAAE,mFAAmF;QAChG,cAAc,EAAE,iFAAiF;QACjG,OAAO,EAAE,wBAAwB;KAClC;IACD;QACE,KAAK,EAAE,mDAAmD;QAC1D,EAAE,EAAE,uBAAuB;QAC3B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,uCAAuC;QAC9C,WAAW,EAAE,oEAAoE;QACjF,cAAc,EAAE,4DAA4D;QAC5E,OAAO,EAAE,sBAAsB;KAChC;IACD;QACE,KAAK,EAAE,0DAA0D;QACjE,EAAE,EAAE,qBAAqB;QACzB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,uEAAuE;QACpF,cAAc,EAAE,wEAAwE;QACxF,OAAO,EAAE,wBAAwB;KAClC;IAED,0BAA0B;IAC1B;QACE,KAAK,EAAE,wCAAwC;QAC/C,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,+EAA+E;QAC5F,cAAc,EAAE,iFAAiF;QACjG,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,KAAK,EAAE,uCAAuC;QAC9C,EAAE,EAAE,wBAAwB;QAC5B,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,6CAA6C;QACpD,WAAW,EAAE,+DAA+D;QAC5E,cAAc,EAAE,8EAA8E;QAC9F,OAAO,EAAE,iBAAiB;KAC3B;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAY;IACtC,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,gBAAgB,EAAE,wCAAwC;IAEpE,KAAK,CAAC,IAAI,CAAC,KAAe,EAAE,OAAoB;QAC9C,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC;QAChD,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;QAC7C,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5G,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAEjF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,oDAAoD;YACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAEvG,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAElC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;oBACxD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;oBAE5B,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;wBACxC,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;4BAC7B,0CAA0C;4BAC1C,IAAI,UAAU,IAAI,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gCAClF,SAAS;4BACX,CAAC;4BAED,QAAQ,CAAC,IAAI,CAAC;gCACZ,EAAE,EAAE,YAAY,OAAO,CAAC,EAAE,IAAI,OAAO,EAAE;gCACvC,QAAQ,EAAE,gBAAgB;gCAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gCAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;gCACpB,WAAW,EAAE,OAAO,CAAC,WAAW;gCAChC,IAAI,EAAE,QAAQ;gCACd,IAAI,EAAE,OAAO,GAAG,CAAC;gCACjB,cAAc,EAAE,OAAO,CAAC,cAAc;gCACtC,cAAc,EAAE,6BAA6B;gCAC7C,OAAO,EAAE,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC;gCACrD,OAAO,EAAE,OAAO,CAAC,OAAO;6BACzB,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/scanners/security/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,CAAC,MAAM,iBAAiB,GAQzB;IACH,8BAA8B;IAC9B;QACE,KAAK,EAAE,yCAAyC;QAChD,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,6BAA6B;QACpC,WAAW,EAAE,wDAAwD;QACrE,cAAc,EAAE,2GAA2G;QAC3H,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,KAAK,EAAE,oCAAoC;QAC3C,EAAE,EAAE,eAAe;QACnB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EAAE,0DAA0D;QACvE,cAAc,EAAE,iEAAiE;QACjF,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,KAAK,EAAE,uCAAuC;QAC9C,EAAE,EAAE,kBAAkB;QACtB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,4DAA4D;QACzE,cAAc,EAAE,6DAA6D;QAC7E,OAAO,EAAE,kBAAkB;KAC5B;IACD;QACE,KAAK,EAAE,4CAA4C;QACnD,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,8DAA8D;QAC3E,cAAc,EAAE,8DAA8D;KAC/E;IAED,4BAA4B;IAC5B;QACE,KAAK,EAAE,oDAAoD;QAC3D,EAAE,EAAE,iBAAiB;QACrB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,wDAAwD;QACrE,cAAc,EAAE,+EAA+E;QAC/F,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,KAAK,EAAE,+CAA+C;QACtD,EAAE,EAAE,gBAAgB;QACpB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,oCAAoC;QAC3C,WAAW,EAAE,qCAAqC;QAClD,cAAc,EAAE,yCAAyC;QACzD,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,KAAK,EAAE,6CAA6C;QACpD,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,2DAA2D;QACxE,cAAc,EAAE,mFAAmF;KACpG;IACD;QACE,KAAK,EAAE,kBAAkB;QACzB,EAAE,EAAE,iBAAiB;QACrB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,4CAA4C;QACzD,cAAc,EAAE,8EAA8E;KAC/F;IACD;QACE,KAAK,EAAE,+BAA+B;QACtC,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,yCAAyC;QACtD,cAAc,EAAE,qDAAqD;KACtE;IACD;QACE,KAAK,EAAE,wDAAwD;QAC/D,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,kDAAkD;QAC/D,cAAc,EAAE,qEAAqE;KACtF;IACD;QACE,KAAK,EAAE,2CAA2C;QAClD,EAAE,EAAE,qBAAqB;QACzB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,+BAA+B;QACtC,WAAW,EAAE,sDAAsD;QACnE,cAAc,EAAE,gEAAgE;KACjF;IAED,+BAA+B;IAC/B;QACE,KAAK,EAAE,mCAAmC;QAC1C,EAAE,EAAE,yBAAyB;QAC7B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,qEAAqE;QAClF,cAAc,EAAE,4DAA4D;KAC7E;IACD;QACE,KAAK,EAAE,iCAAiC;QACxC,EAAE,EAAE,0BAA0B;QAC9B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,iCAAiC;QACxC,WAAW,EAAE,wEAAwE;QACrF,cAAc,EAAE,4DAA4D;KAC7E;IACD;QACE,KAAK,EAAE,yBAAyB;QAChC,EAAE,EAAE,uBAAuB;QAC3B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,mEAAmE;QAChF,cAAc,EAAE,4DAA4D;KAC7E;IAED,oCAAoC;IACpC;QACE,KAAK,EAAE,+BAA+B;QACtC,EAAE,EAAE,uBAAuB;QAC3B,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,mFAAmF;QAChG,cAAc,EAAE,wFAAwF;QACxG,OAAO,EAAE,uBAAuB;KACjC;IACD;QACE,KAAK,EAAE,kDAAkD;QACzD,EAAE,EAAE,2BAA2B;QAC/B,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,+BAA+B;QACtC,WAAW,EAAE,0EAA0E;QACvF,cAAc,EAAE,uEAAuE;KACxF;IACD;QACE,KAAK,EAAE,sBAAsB;QAC7B,EAAE,EAAE,YAAY;QAChB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,iEAAiE;QAC9E,cAAc,EAAE,0EAA0E;KAC3F;IACD;QACE,KAAK,EAAE,6BAA6B;QACpC,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,kEAAkE;QAC/E,cAAc,EAAE,iEAAiE;KAClF;IACD;QACE,KAAK,EAAE,uBAAuB;QAC9B,EAAE,EAAE,gBAAgB;QACpB,QAAQ,EAAE,QAAiB;QAC3B,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,oEAAoE;QACjF,cAAc,EAAE,yEAAyE;KAC1F;IAED,8BAA8B;IAC9B;QACE,KAAK,EAAE,qEAAqE;QAC5E,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,gFAAgF;QAC7F,cAAc,EAAE,0FAA0F;QAC1G,OAAO,EAAE,sBAAsB;KAChC;IACD;QACE,KAAK,EAAE,gJAAgJ;QACvJ,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,+CAA+C;QACtD,WAAW,EAAE,0EAA0E;QACvF,cAAc,EAAE,oFAAoF;QACpG,OAAO,EAAE,wBAAwB;KAClC;IACD;QACE,KAAK,EAAE,8CAA8C;QACrD,EAAE,EAAE,0BAA0B;QAC9B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,4CAA4C;QACnD,WAAW,EAAE,mFAAmF;QAChG,cAAc,EAAE,iFAAiF;QACjG,OAAO,EAAE,wBAAwB;KAClC;IACD;QACE,KAAK,EAAE,mDAAmD;QAC1D,EAAE,EAAE,uBAAuB;QAC3B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,uCAAuC;QAC9C,WAAW,EAAE,oEAAoE;QACjF,cAAc,EAAE,4DAA4D;QAC5E,OAAO,EAAE,sBAAsB;KAChC;IACD;QACE,KAAK,EAAE,0DAA0D;QACjE,EAAE,EAAE,qBAAqB;QACzB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,uEAAuE;QACpF,cAAc,EAAE,wEAAwE;QACxF,OAAO,EAAE,wBAAwB;KAClC;IAED,0BAA0B;IAC1B;QACE,KAAK,EAAE,wCAAwC;QAC/C,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,+EAA+E;QAC5F,cAAc,EAAE,iFAAiF;QACjG,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,KAAK,EAAE,uCAAuC;QAC9C,EAAE,EAAE,wBAAwB;QAC5B,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,6CAA6C;QACpD,WAAW,EAAE,+DAA+D;QAC5E,cAAc,EAAE,8EAA8E;QAC9F,OAAO,EAAE,iBAAiB;KAC3B;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAY;IACtC,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,gBAAgB,EAAE,wCAAwC;IAEpE,KAAK,CAAC,IAAI,CAAC,KAAe,EAAE,OAAoB;QAC9C,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC;QAChD,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;QAC7C,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5G,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAEjF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,oDAAoD;YACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAEvG,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAElC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;oBACxD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;oBAE5B,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;wBACxC,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;4BAC7B,0CAA0C;4BAC1C,IAAI,UAAU,IAAI,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gCAClF,SAAS;4BACX,CAAC;4BAED,kEAAkE;4BAClE,mEAAmE;4BACnE,4DAA4D;4BAC5D,IACE,OAAO,CAAC,EAAE,KAAK,2BAA2B;gCAC1C,8EAA8E,CAAC,IAAI,CAAC,IAAI,CAAC,EACzF,CAAC;gCACD,SAAS;4BACX,CAAC;4BAED,QAAQ,CAAC,IAAI,CAAC;gCACZ,EAAE,EAAE,YAAY,OAAO,CAAC,EAAE,IAAI,OAAO,EAAE;gCACvC,QAAQ,EAAE,gBAAgB;gCAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gCAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;gCACpB,WAAW,EAAE,OAAO,CAAC,WAAW;gCAChC,IAAI,EAAE,QAAQ;gCACd,IAAI,EAAE,OAAO,GAAG,CAAC;gCACjB,cAAc,EAAE,OAAO,CAAC,cAAc;gCACtC,cAAc,EAAE,6BAA6B;gCAC7C,OAAO,EAAE,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC;gCACrD,OAAO,EAAE,OAAO,CAAC,OAAO;6BACzB,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verification-layer",
-  "version": "0.27.10",
+  "version": "0.27.12",
   "description": "Open-source HIPAA compliance scanner for healthcare code. 143 rules, 5 HIPAA categories. CLI + CI/CD + VS Code.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -77,7 +77,7 @@
     "vitest": "^1.6.0"
   },
   "dependencies": {
-    "@anthropic-ai/sdk": "^0.82.0",
+    "@anthropic-ai/sdk": "^0.124.0",
     "@types/inquirer": "^9.0.9",
     "@types/pdfkit": "^0.17.4",
     "@typescript-eslint/typescript-estree": "^8.54.0",
@@ -93,6 +93,6 @@
     "zod": "^4.3.6"
   },
   "engines": {
-    "node": ">=18.0.0"
+    "node": ">=20.19.0"
   }
 }