attackmap-analyzer-atproto 0.2.0__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (15) hide show
  1. attackmap_analyzer_atproto-0.2.0/LICENSE +21 -0
  2. attackmap_analyzer_atproto-0.2.0/PKG-INFO +81 -0
  3. attackmap_analyzer_atproto-0.2.0/README.md +42 -0
  4. attackmap_analyzer_atproto-0.2.0/pyproject.toml +74 -0
  5. attackmap_analyzer_atproto-0.2.0/setup.cfg +4 -0
  6. attackmap_analyzer_atproto-0.2.0/src/attackmap_analyzer_atproto/__init__.py +3 -0
  7. attackmap_analyzer_atproto-0.2.0/src/attackmap_analyzer_atproto/analyzer.py +623 -0
  8. attackmap_analyzer_atproto-0.2.0/src/attackmap_analyzer_atproto.egg-info/PKG-INFO +81 -0
  9. attackmap_analyzer_atproto-0.2.0/src/attackmap_analyzer_atproto.egg-info/SOURCES.txt +13 -0
  10. attackmap_analyzer_atproto-0.2.0/src/attackmap_analyzer_atproto.egg-info/dependency_links.txt +1 -0
  11. attackmap_analyzer_atproto-0.2.0/src/attackmap_analyzer_atproto.egg-info/entry_points.txt +2 -0
  12. attackmap_analyzer_atproto-0.2.0/src/attackmap_analyzer_atproto.egg-info/requires.txt +9 -0
  13. attackmap_analyzer_atproto-0.2.0/src/attackmap_analyzer_atproto.egg-info/top_level.txt +1 -0
  14. attackmap_analyzer_atproto-0.2.0/tests/test_atproto_analyzer.py +390 -0
  15. attackmap_analyzer_atproto-0.2.0/tests/test_signal_conformance.py +92 -0
attackmap_analyzer_atproto-0.2.0/LICENSE ADDED
@@ -0,0 +1,21 @@
1
+ MIT License
2
+
3
+ Copyright (c) 2026 Matthew Davis and AttackMap Contributors
4
+
5
+ Permission is hereby granted, free of charge, to any person obtaining a copy
6
+ of this software and associated documentation files (the "Software"), to deal
7
+ in the Software without restriction, including without limitation the rights
8
+ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9
+ copies of the Software, and to permit persons to whom the Software is
10
+ furnished to do so, subject to the following conditions:
11
+
12
+ The above copyright notice and this permission notice shall be included in all
13
+ copies or substantial portions of the Software.
14
+
15
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16
+ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17
+ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18
+ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19
+ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20
+ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21
+ SOFTWARE.
attackmap_analyzer_atproto-0.2.0/PKG-INFO ADDED
@@ -0,0 +1,81 @@
1
+ Metadata-Version: 2.4
2
+ Name: attackmap-analyzer-atproto
3
+ Version: 0.2.0
4
+ Summary: Thin AT Protocol overlay analyzer plugin for AttackMap
5
+ Author: AttackMap Contributors
6
+ Author-email: Matthew Davis <mlaify@mlaify.io>
7
+ Maintainer-email: Matthew Davis <mlaify@mlaify.io>
8
+ License-Expression: MIT
9
+ Project-URL: Homepage, https://github.com/mlaify/attackmap-analyzer-atproto
10
+ Project-URL: Repository, https://github.com/mlaify/attackmap-analyzer-atproto
11
+ Project-URL: Issues, https://github.com/mlaify/attackmap-analyzer-atproto/issues
12
+ Project-URL: Changelog, https://github.com/mlaify/attackmap-analyzer-atproto/blob/main/CHANGELOG.md
13
+ Project-URL: AttackMap core, https://github.com/mlaify/AttackMap
14
+ Keywords: security,static-analysis,appsec,defensive-security,attackmap,attackmap-plugin
15
+ Classifier: Development Status :: 4 - Beta
16
+ Classifier: Intended Audience :: Developers
17
+ Classifier: Intended Audience :: Information Technology
18
+ Classifier: Intended Audience :: System Administrators
19
+ Classifier: Operating System :: OS Independent
20
+ Classifier: Programming Language :: Python :: 3
21
+ Classifier: Programming Language :: Python :: 3.11
22
+ Classifier: Programming Language :: Python :: 3.12
23
+ Classifier: Programming Language :: Python :: 3.13
24
+ Classifier: Programming Language :: Python :: 3 :: Only
25
+ Classifier: Topic :: Security
26
+ Classifier: Topic :: Software Development :: Quality Assurance
27
+ Classifier: Typing :: Typed
28
+ Requires-Python: >=3.11
29
+ Description-Content-Type: text/markdown
30
+ License-File: LICENSE
31
+ Requires-Dist: pydantic>=2.7.0
32
+ Provides-Extra: core
33
+ Requires-Dist: attackmap>=0.6.0; extra == "core"
34
+ Provides-Extra: dev
35
+ Requires-Dist: pytest>=8.0.0; extra == "dev"
36
+ Requires-Dist: build>=1.2.0; extra == "dev"
37
+ Requires-Dist: attackmap>=0.6.0; extra == "dev"
38
+ Dynamic: license-file
39
+
40
+ # AttackMap ATProto Analyzer
41
+
42
+ > [!IMPORTANT]
43
+ > **Active development, slow pace.** AttackMap is under active development, but
44
+ > progress may be slow until more contributors or co-maintainers join. Help is
45
+ > very welcome with the core engine, an analyzer, the macOS app, or the docs —
46
+ > see [CONTRIBUTING.md](CONTRIBUTING.md) or open an issue on
47
+ > [mlaify/AttackMap](https://github.com/mlaify/AttackMap/issues) to say hello.
48
+ > Security reports are still welcome at [security@mlaify.io](mailto:security@mlaify.io).
49
+
50
+ `attackmap-analyzer-atproto` is a thin protocol-aware overlay analyzer for AttackMap.
51
+
52
+ It is designed to enrich Node/TypeScript service scans (such as `node-service`) with
53
+ AT Protocol-specific exposure signals:
54
+ - protocol namespaces: `com.atproto.*`, `app.bsky.*`, `chat.bsky.*`, `tools.ozone.*`, plus any third-party authority declared by the repo's own lexicon `id`s (e.g. `sh.tangled.*`)
55
+ - lexicon-inferred XRPC endpoint surface. Only `defs.main` of type `query` (→ `GET`), `procedure` (→ `POST`) or `subscription` (→ `WS`) is an endpoint; `record`, `object` and defs-only lexicons are not.
56
+ - XRPC handler registrations (`server.method(nsid, …)`, generated `server.<nsid>({ auth, handler })`) with their per-endpoint auth:
57
+ - a configured `auth:` verifier is an `atproto_auth:route_verifier:<nsid>` AuthHint
58
+ - a handler with no verifier, or an optional one (`*Optional*`, `nullCreds`), is marked `atproto_route_auth:anonymous:<nsid>` (a ProtocolHint, so core never counts it as an auth control). Core's `Route` model has no auth field yet.
59
+ - protocol auth/signing/identity hints (`did:plc` / PLC directory, `@atproto/crypto` and signing/verification APIs; not the bare words "sign", "verify" or "plc")
60
+ - `process.env.*` secret references (not arbitrary quoted constants)
61
+ - event stream/subscription exposure hints
62
+ - service notes that complement service-level analyzers
63
+
64
+ This module is heuristic and intentionally lightweight.
65
+
66
+ `detect()` fires on a `lexicons/` directory, an `@atproto/*` (or `@did-plc/*`) dependency in any `package.json`, a lexicon document under a `lexicons/` path, a quoted NSID under a known authority, or an `/xrpc/<nsid>` URL in JS/TS source. Lockfiles (`package-lock.json`, `npm-shrinkwrap.json`) and AttackMap's own report files are never read. Other JSON files are only read to recognize lexicon documents.
67
+
68
+ ## Install
69
+
70
+ ```bash
71
+ uv tool install attackmap --with attackmap-analyzer-atproto \
72
+ --index mlaify=https://pkg.mlaify.io/pypi/simple/ --index-strategy first-index
73
+ # or from source:
74
+ pip install git+https://github.com/mlaify/attackmap-analyzer-atproto.git
75
+ ```
76
+
77
+ ## Usage
78
+
79
+ ```bash
80
+ attackmap analyze /path/to/repo --module node-service --module atproto
81
+ ```
attackmap_analyzer_atproto-0.2.0/README.md ADDED
@@ -0,0 +1,42 @@
1
+ # AttackMap ATProto Analyzer
2
+
3
+ > [!IMPORTANT]
4
+ > **Active development, slow pace.** AttackMap is under active development, but
5
+ > progress may be slow until more contributors or co-maintainers join. Help is
6
+ > very welcome with the core engine, an analyzer, the macOS app, or the docs —
7
+ > see [CONTRIBUTING.md](CONTRIBUTING.md) or open an issue on
8
+ > [mlaify/AttackMap](https://github.com/mlaify/AttackMap/issues) to say hello.
9
+ > Security reports are still welcome at [security@mlaify.io](mailto:security@mlaify.io).
10
+
11
+ `attackmap-analyzer-atproto` is a thin protocol-aware overlay analyzer for AttackMap.
12
+
13
+ It is designed to enrich Node/TypeScript service scans (such as `node-service`) with
14
+ AT Protocol-specific exposure signals:
15
+ - protocol namespaces: `com.atproto.*`, `app.bsky.*`, `chat.bsky.*`, `tools.ozone.*`, plus any third-party authority declared by the repo's own lexicon `id`s (e.g. `sh.tangled.*`)
16
+ - lexicon-inferred XRPC endpoint surface. Only `defs.main` of type `query` (→ `GET`), `procedure` (→ `POST`) or `subscription` (→ `WS`) is an endpoint; `record`, `object` and defs-only lexicons are not.
17
+ - XRPC handler registrations (`server.method(nsid, …)`, generated `server.<nsid>({ auth, handler })`) with their per-endpoint auth:
18
+ - a configured `auth:` verifier is an `atproto_auth:route_verifier:<nsid>` AuthHint
19
+ - a handler with no verifier, or an optional one (`*Optional*`, `nullCreds`), is marked `atproto_route_auth:anonymous:<nsid>` (a ProtocolHint, so core never counts it as an auth control). Core's `Route` model has no auth field yet.
20
+ - protocol auth/signing/identity hints (`did:plc` / PLC directory, `@atproto/crypto` and signing/verification APIs; not the bare words "sign", "verify" or "plc")
21
+ - `process.env.*` secret references (not arbitrary quoted constants)
22
+ - event stream/subscription exposure hints
23
+ - service notes that complement service-level analyzers
24
+
25
+ This module is heuristic and intentionally lightweight.
26
+
27
+ `detect()` fires on a `lexicons/` directory, an `@atproto/*` (or `@did-plc/*`) dependency in any `package.json`, a lexicon document under a `lexicons/` path, a quoted NSID under a known authority, or an `/xrpc/<nsid>` URL in JS/TS source. Lockfiles (`package-lock.json`, `npm-shrinkwrap.json`) and AttackMap's own report files are never read. Other JSON files are only read to recognize lexicon documents.
28
+
29
+ ## Install
30
+
31
+ ```bash
32
+ uv tool install attackmap --with attackmap-analyzer-atproto \
33
+ --index mlaify=https://pkg.mlaify.io/pypi/simple/ --index-strategy first-index
34
+ # or from source:
35
+ pip install git+https://github.com/mlaify/attackmap-analyzer-atproto.git
36
+ ```
37
+
38
+ ## Usage
39
+
40
+ ```bash
41
+ attackmap analyze /path/to/repo --module node-service --module atproto
42
+ ```
attackmap_analyzer_atproto-0.2.0/pyproject.toml ADDED
@@ -0,0 +1,74 @@
1
+ [build-system]
2
+ requires = ["setuptools>=77", "wheel"]
3
+ build-backend = "setuptools.build_meta"
4
+
5
+ [project]
6
+ name = "attackmap-analyzer-atproto"
7
+ version = "0.2.0"
8
+ description = "Thin AT Protocol overlay analyzer plugin for AttackMap"
9
+ readme = "README.md"
10
+ requires-python = ">=3.11"
11
+ license = "MIT"
12
+ license-files = ["LICENSE"]
13
+ authors = [
14
+ {name = "Matthew Davis", email = "mlaify@mlaify.io"},
15
+ {name = "AttackMap Contributors"},
16
+ ]
17
+ maintainers = [
18
+ {name = "Matthew Davis", email = "mlaify@mlaify.io"},
19
+ ]
20
+ keywords = [
21
+ "security",
22
+ "static-analysis",
23
+ "appsec",
24
+ "defensive-security",
25
+ "attackmap",
26
+ "attackmap-plugin",
27
+ ]
28
+ classifiers = [
29
+ "Development Status :: 4 - Beta",
30
+ "Intended Audience :: Developers",
31
+ "Intended Audience :: Information Technology",
32
+ "Intended Audience :: System Administrators",
33
+ "Operating System :: OS Independent",
34
+ "Programming Language :: Python :: 3",
35
+ "Programming Language :: Python :: 3.11",
36
+ "Programming Language :: Python :: 3.12",
37
+ "Programming Language :: Python :: 3.13",
38
+ "Programming Language :: Python :: 3 :: Only",
39
+ "Topic :: Security",
40
+ "Topic :: Software Development :: Quality Assurance",
41
+ "Typing :: Typed",
42
+ ]
43
+ dependencies = [
44
+ "pydantic>=2.7.0",
45
+ ]
46
+
47
+ [project.optional-dependencies]
48
+ core = [
49
+ "attackmap>=0.6.0",
50
+ ]
51
+ dev = [
52
+ "pytest>=8.0.0",
53
+ "build>=1.2.0",
54
+ "attackmap>=0.6.0",
55
+ ]
56
+
57
+ [project.urls]
58
+ Homepage = "https://github.com/mlaify/attackmap-analyzer-atproto"
59
+ Repository = "https://github.com/mlaify/attackmap-analyzer-atproto"
60
+ Issues = "https://github.com/mlaify/attackmap-analyzer-atproto/issues"
61
+ Changelog = "https://github.com/mlaify/attackmap-analyzer-atproto/blob/main/CHANGELOG.md"
62
+ "AttackMap core" = "https://github.com/mlaify/AttackMap"
63
+
64
+ [project.entry-points."attackmap.analyzers"]
65
+ atproto = "attackmap_analyzer_atproto:AtprotoAnalyzer"
66
+
67
+ [tool.setuptools]
68
+ package-dir = {"" = "src"}
69
+
70
+ [tool.setuptools.packages.find]
71
+ where = ["src"]
72
+
73
+ [tool.pytest.ini_options]
74
+ testpaths = ["tests"]
attackmap_analyzer_atproto-0.2.0/setup.cfg ADDED
@@ -0,0 +1,4 @@
1
+ [egg_info]
2
+ tag_build =
3
+ tag_date = 0
4
+
attackmap_analyzer_atproto-0.2.0/src/attackmap_analyzer_atproto/__init__.py ADDED
@@ -0,0 +1,3 @@
1
+ from .analyzer import AtprotoAnalyzer
2
+
3
+ __all__ = ["AtprotoAnalyzer"]