vibe-guard 1.1.0 → 1.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +20 -0
- package/README.md +27 -0
- package/dist/types/version.d.ts +1 -1
- package/dist/types/version.js +1 -1
- package/package.json +14 -4
package/CHANGELOG.md
CHANGED
|
@@ -5,6 +5,26 @@ All notable changes to this project will be documented in this file.
|
|
|
5
5
|
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
|
|
6
6
|
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
7
7
|
|
|
8
|
+
## [1.1.2] - 2025-01-27
|
|
9
|
+
|
|
10
|
+
### Added
|
|
11
|
+
- **Scanner Sensitivity Documentation**: Added comprehensive section explaining VibeGuard's intelligent sensitivity design
|
|
12
|
+
- **False Positive Prevention Guide**: Detailed explanation of automatic filtering mechanisms
|
|
13
|
+
- **Detection Characteristics**: Clear expectations for detection rates and performance
|
|
14
|
+
- **Use Case Guidance**: Recommendations for development, production audits, and maximum sensitivity scenarios
|
|
15
|
+
|
|
16
|
+
### Changed
|
|
17
|
+
- Enhanced README with important sensitivity information
|
|
18
|
+
- Improved user understanding of scanner behavior
|
|
19
|
+
- Better transparency about detection capabilities
|
|
20
|
+
|
|
21
|
+
## [1.1.1] - 2025-01-27
|
|
22
|
+
|
|
23
|
+
### Changed
|
|
24
|
+
- Enhanced npm package description with specific vulnerability types
|
|
25
|
+
- Added OS and CPU architecture metadata
|
|
26
|
+
- Improved package.json formatting and metadata
|
|
27
|
+
|
|
8
28
|
## [1.1.0] - 2025-01-27
|
|
9
29
|
|
|
10
30
|
### Added
|
package/README.md
CHANGED
|
@@ -111,6 +111,33 @@ vibe-guard scan .
|
|
|
111
111
|
- **Insecure Error Handling**: Stack trace and information disclosure
|
|
112
112
|
- **Insecure Configuration**: Debug mode and security features disabled
|
|
113
113
|
|
|
114
|
+
## ⚠️ Important Note: Scanner Sensitivity
|
|
115
|
+
|
|
116
|
+
VibeGuard is designed with **intelligent sensitivity** to balance detection accuracy with usability:
|
|
117
|
+
|
|
118
|
+
### 🎯 How Sensitivity Works
|
|
119
|
+
- **Critical & High Severity**: Very sensitive - catches real vulnerabilities
|
|
120
|
+
- **Medium & Low Severity**: Moderately sensitive - focuses on production-relevant issues
|
|
121
|
+
- **False Positive Prevention**: Automatically filters out:
|
|
122
|
+
- Comments and documentation
|
|
123
|
+
- Test files and development code
|
|
124
|
+
- Environment variables (`${VAR}`, `process.env.VAR`)
|
|
125
|
+
- Safe patterns (parameterized queries, HTTPS, etc.)
|
|
126
|
+
- Framework-specific safeguards
|
|
127
|
+
|
|
128
|
+
### 📊 Detection Characteristics
|
|
129
|
+
- **Detection Rate**: ~50-70% of potential issues (focused on real problems)
|
|
130
|
+
- **False Positive Rate**: Very low (designed for development workflows)
|
|
131
|
+
- **Performance**: Fast scanning without overwhelming noise
|
|
132
|
+
- **Actionable Results**: Every issue includes specific fix suggestions
|
|
133
|
+
|
|
134
|
+
### 🔧 For Different Use Cases
|
|
135
|
+
- **Development**: Current settings are well-balanced for daily use
|
|
136
|
+
- **Production Audits**: Consider running with verbose mode and manual review
|
|
137
|
+
- **Maximum Sensitivity**: Can be configured by modifying rule filters
|
|
138
|
+
|
|
139
|
+
*This approach ensures VibeGuard catches real security issues while remaining practical for development workflows.*
|
|
140
|
+
|
|
114
141
|
## Usage Examples
|
|
115
142
|
|
|
116
143
|
```bash
|
package/dist/types/version.d.ts
CHANGED
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
export declare const VERSION = "1.1.
|
|
1
|
+
export declare const VERSION = "1.1.2";
|
|
2
2
|
//# sourceMappingURL=version.d.ts.map
|
package/dist/types/version.js
CHANGED
package/package.json
CHANGED
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "vibe-guard",
|
|
3
|
-
"version": "1.1.
|
|
4
|
-
"description": "🛡️ Vibe-Guard Security Scanner - 20 essential security rules to catch vulnerabilities before they catch you! Zero dependencies, instant setup, works everywhere.",
|
|
3
|
+
"version": "1.1.2",
|
|
4
|
+
"description": "🛡️ Vibe-Guard Security Scanner - 20 essential security rules to catch vulnerabilities before they catch you! Zero dependencies, instant setup, works everywhere. Detects SQL injection, XSS, exposed secrets, CSRF, CORS issues, and more.",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"types": "dist/index.d.ts",
|
|
7
7
|
"bin": {
|
|
8
|
-
"vibe-guard": "
|
|
8
|
+
"vibe-guard": "dist/bin/vibe-guard.js"
|
|
9
9
|
},
|
|
10
10
|
"scripts": {
|
|
11
11
|
"prebuild": "node scripts/update-version.js",
|
|
@@ -68,12 +68,13 @@
|
|
|
68
68
|
"license": "MIT",
|
|
69
69
|
"repository": {
|
|
70
70
|
"type": "git",
|
|
71
|
-
"url": "https://github.com/Devjosef/vibe-guard.git"
|
|
71
|
+
"url": "git+https://github.com/Devjosef/vibe-guard.git"
|
|
72
72
|
},
|
|
73
73
|
"bugs": {
|
|
74
74
|
"url": "https://github.com/Devjosef/vibe-guard/issues"
|
|
75
75
|
},
|
|
76
76
|
"homepage": "https://github.com/Devjosef/vibe-guard#readme",
|
|
77
|
+
"readme": "README.md",
|
|
77
78
|
"files": [
|
|
78
79
|
"dist/**/*",
|
|
79
80
|
"README.md",
|
|
@@ -99,6 +100,15 @@
|
|
|
99
100
|
"engines": {
|
|
100
101
|
"node": ">=16.0.0"
|
|
101
102
|
},
|
|
103
|
+
"os": [
|
|
104
|
+
"darwin",
|
|
105
|
+
"linux",
|
|
106
|
+
"win32"
|
|
107
|
+
],
|
|
108
|
+
"cpu": [
|
|
109
|
+
"x64",
|
|
110
|
+
"arm64"
|
|
111
|
+
],
|
|
102
112
|
"pkg": {
|
|
103
113
|
"scripts": [
|
|
104
114
|
"dist/**/*.js"
|