ubon/dist/rules/development/DEV005.js

Security scanner for AI-generated apps (Cursor, Lovable, Windsurf, v0). Catches hardcoded secrets, prompt injection, hallucinated imports, Server Actions / Edge runtime mistakes, and the vibe-coded vulnerabilities traditional linters miss.

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
const devFileTypes = ['js', 'jsx', 'ts', 'tsx', 'svelte', 'astro'];
const rule = {
    meta: {
        id: 'DEV005',
        category: 'development',
        severity: 'low',
        message: 'Empty return or stubbed function detected',
        fix: 'Implement the missing logic or remove the stub'
    },
    impl: {
        detect: (content, file, lines) => {
            const results = [];
            lines.forEach((line, index) => {
                if (!/return\s*;?\s*$/.test(line.trim()) && !/return\s+(null|undefined)\s*;?/.test(line)) {
                    return;
                }
                const context = lines.slice(Math.max(0, index - 2), index + 2).join(' ');
                if (!/todo|not implemented|stub/i.test(context)) {
                    return;
                }
                results.push({
                    line: index + 1,
                    match: line.trim().slice(0, 200),
                    confidence: 0.65
                });
            });
            return results;
        },
        fileTypes: devFileTypes
    }
};
exports.default = rule;
//# sourceMappingURL=DEV005.js.map