ubon/dist/scanners/framework-scanner.d.ts

Security scanner for AI-generated apps (Cursor, Lovable, Windsurf, v0). Catches hardcoded secrets, prompt injection, hallucinated imports, Server Actions / Edge runtime mistakes, and the vibe-coded vulnerabilities traditional linters miss.

import { ScanOptions, ScanResult } from '../types';
import { BaseScanner } from './base-scanner';
/**
 * FrameworkScanner — Next 14/15 Server Actions, Edge runtime, SvelteKit,
 * Astro, Remix, Hono, Drizzle, and Prisma.
 *
 * Heuristic regex-based detections (intentionally not full AST) so each
 * rule stays cheap and explainable. Every finding ships with a
 * `confidenceReason`; lower-confidence rules surface only with `--detailed`.
 */
export declare class FrameworkScanner extends BaseScanner {
    name: string;
    private readonly authMarkerRegex;
    private readonly validatorMarkerRegex;
    private isNextProject;
    scan(options: ScanOptions): Promise<ScanResult[]>;
    private detectNextProject;
    private detectNextServerActions;
    private detectUseServerLeak;
    private detectEdgeRuntime;
    private detectSvelteKit;
    private detectAstroEndpoints;
    private detectRemix;
    private detectHono;
    private detectDrizzlePrisma;
    private detectNext15AsyncParams;
    private detectMissingUseClient;
    private detectNextConfigHints;
    private detectNextAppRouterBoundaries;
}
//# sourceMappingURL=framework-scanner.d.ts.map