ubon/dist/core/Posture.d.ts

Security scanner for AI-generated apps (Cursor, Lovable, Windsurf, v0). Catches hardcoded secrets, prompt injection, hallucinated imports, Server Actions / Edge runtime mistakes, and the vibe-coded vulnerabilities traditional linters miss.

import { ScanResult } from '../types';
export interface PostureScore {
    score: number;
    summary: string;
}
/**
 * Compute a 0–100 "security posture" score from scan results.
 *
 * Deductions are intentionally coarse (high=15, medium=5, low=1) so the score
 * tracks "how scary is the worst thing we found" rather than absolute count.
 * A repo with one critical SQL-injection rule should score lower than one
 * with 50 minor a11y nits.
 */
export declare function calculateSecurityPosture(results: ScanResult[]): PostureScore;
//# sourceMappingURL=Posture.d.ts.map