vite-plugin-vue-security 1.3.0 → 1.4.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ereddate
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/index.js

@@ -163,7 +163,7 @@ function vueSecurityPlugin(options = {}) {
       if (config.enableDependencyScanning) {
         try {
           console.log('Scanning dependencies for vulnerabilities...');
-          const dependencyScanner = require('../src/analysis/dependency-scanner');
+          const dependencyScanner = require('vue-security-scanner/src/analysis/dependency-scanner');
           const depScanner = new dependencyScanner({
             enableNpmAudit: true,
             enableVulnerabilityDB: true

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vite-plugin-vue-security",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "description": "A Vite plugin that performs security scans on Vue.js projects during the build process with advanced semantic analysis and enterprise-grade reporting",
   "main": "index.js",
   "scripts": {
@@ -20,7 +20,7 @@
     "dependency-scanning",
     "compliance"
   ],
-  "author": "Vue Security Team",
+  "author": "ereddate",
   "license": "MIT",
   "peerDependencies": {
     "vite": "^4.0.0 || ^5.0.0",
@@ -28,7 +28,7 @@
   },
   "dependencies": {
     "cheerio": "^1.0.0-rc.12",
-    "vue-security-scanner": "^1.3.1"
+    "vue-security-scanner": "^1.4.0"
   },
   "repository": {
     "type": "git",

package/vite.config.example.js

@@ -1,28 +0,0 @@
-// 示例：如何在Vite项目中使用Vue安全插件
-// vite.config.js
-
-import { defineConfig } from 'vite';
-import vue from '@vitejs/plugin-vue';
-import vueSecurityPlugin from 'vite-plugin-vue-security';
-
-export default defineConfig({
-  plugins: [
-    // 启用Vue安全扫描插件
-    vueSecurityPlugin({
-      enabled: true,           // 启用安全扫描
-      failOnError: false,      // 发现安全问题时不中断构建
-      reportLevel: 'warning',  // 报告级别：'error', 'warning', 或 'info'
-      outputFile: './security-report.json', // 安全报告输出文件
-      exclude: [              // 排除扫描的文件模式
-        'node_modules',
-        'dist',
-        'public'
-      ]
-    }),
-    
-    // Vue插件
-    vue()
-  ],
-  
-  // 其他Vite配置...
-});