UNPKG

vibe-guard

Version:

██ Vibe-Guard Security Scanner - 28 essential security rules to catch vulnerabilities before they catch you! Zero dependencies, instant setup, works everywhere, optimized performance. Detects SQL injection, XSS, exposed secrets, CSRF, CORS issues, contain

61 lines 2.25 kB
import { BaseRule, FileContent, SecurityIssue } from '../types'; export declare class InsecureDependenciesRule extends BaseRule { readonly name = "insecure-dependencies"; readonly description = "Detects potentially insecure dependencies and packages with context-aware analysis"; readonly severity: "medium"; private readonly vulnerablePackages; private readonly suspiciousPatterns; private readonly safePatterns; check(fileContent: FileContent): SecurityIssue[]; private getPackagePattern; private analyzeContext; private isInComment; private isInString; private isInTestFile; private isInDocumentation; private detectLanguage; private detectPackageManager; private detectFramework; private detectDependencyType; private isDependencyFile; private checkVulnerablePackages; private checkSuspiciousPatterns; private isSafeContext; private calculateConfidence; private isVulnerableVersion; private compareVersions; private isInDevDependencies; private validateLodashVersion; private validateMomentUsage; private validateRequestUsage; private validateNodeUuidUsage; private validateGrowlVersion; private validateHandlebarsVersion; private validateSerializeJavascriptVersion; private validateMinimistVersion; private validateYargsParserVersion; private validateIniVersion; private validateDjangoVersion; private validateFlaskVersion; private validateRequestsVersion; private validatePyyamlVersion; private validatePillowVersion; private validateSymfonyVersion; private validateLaravelVersion; private validateMonologVersion; private validateEventStreamUsage; private validateCryptominerPackage; private validateSuspiciousScript; private calculateSeverity; private isInProductionContext; private validateSuspiciousPackage; private validateMaliciousPackage; private validateTyposquatting; private validatePermissiveVersion; private validateDevDependency; private generateSuggestion; private generateSuspiciousSuggestion; private getUpdateCommand; private getAuditCommand; } //# sourceMappingURL=insecure-dependencies.d.ts.map