ubon/dist/rules/vibe/VIBE001.js

Security scanner for AI-generated apps (Cursor, Lovable, Windsurf, v0). Catches hardcoded secrets, prompt injection, hallucinated imports, Server Actions / Edge runtime mistakes, and the vibe-coded vulnerabilities traditional linters miss.

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
/**
 * VIBE001: Hallucinated imports
 * Detects imports from modules that don't exist in package.json
 */
const rule = {
    meta: {
        id: 'VIBE001',
        category: 'development',
        severity: 'high',
        message: 'Import from non-existent package (possible hallucination)',
        fix: 'Verify the package exists and install it, or remove the import',
        impact: 'Hallucinated imports cause build failures and indicate AI-generated code that needs review'
    },
    impl: {
        fileTypes: ['js', 'jsx', 'ts', 'tsx'],
        // Detection handled by VibeScanner which has access to package.json
        detect: undefined
    }
};
exports.default = rule;
//# sourceMappingURL=VIBE001.js.map