vibe-guard
Version:
██ Vibe-Guard Security Scanner - 28 essential security rules to catch vulnerabilities before they catch you! Zero dependencies, instant setup, works everywhere, optimized performance. Detects SQL injection, XSS, exposed secrets, CSRF, CORS issues, contain
61 lines • 2.25 kB
TypeScript
import { BaseRule, FileContent, SecurityIssue } from '../types';
export declare class InsecureDependenciesRule extends BaseRule {
readonly name = "insecure-dependencies";
readonly description = "Detects potentially insecure dependencies and packages with context-aware analysis";
readonly severity: "medium";
private readonly vulnerablePackages;
private readonly suspiciousPatterns;
private readonly safePatterns;
check(fileContent: FileContent): SecurityIssue[];
private getPackagePattern;
private analyzeContext;
private isInComment;
private isInString;
private isInTestFile;
private isInDocumentation;
private detectLanguage;
private detectPackageManager;
private detectFramework;
private detectDependencyType;
private isDependencyFile;
private checkVulnerablePackages;
private checkSuspiciousPatterns;
private isSafeContext;
private calculateConfidence;
private isVulnerableVersion;
private compareVersions;
private isInDevDependencies;
private validateLodashVersion;
private validateMomentUsage;
private validateRequestUsage;
private validateNodeUuidUsage;
private validateGrowlVersion;
private validateHandlebarsVersion;
private validateSerializeJavascriptVersion;
private validateMinimistVersion;
private validateYargsParserVersion;
private validateIniVersion;
private validateDjangoVersion;
private validateFlaskVersion;
private validateRequestsVersion;
private validatePyyamlVersion;
private validatePillowVersion;
private validateSymfonyVersion;
private validateLaravelVersion;
private validateMonologVersion;
private validateEventStreamUsage;
private validateCryptominerPackage;
private validateSuspiciousScript;
private calculateSeverity;
private isInProductionContext;
private validateSuspiciousPackage;
private validateMaliciousPackage;
private validateTyposquatting;
private validatePermissiveVersion;
private validateDevDependency;
private generateSuggestion;
private generateSuspiciousSuggestion;
private getUpdateCommand;
private getAuditCommand;
}
//# sourceMappingURL=insecure-dependencies.d.ts.map