JSPM

  • Created
  • Published
  • Downloads 41
  • Score
    100M100P100Q64867F
  • License MIT

Universal repository diagnostic and security scanning tool with explainable AI

Package Exports

    This package does not declare an exports field, so the exports above have been automatically detected and optimized by JSPM instead. If any package subpath is missing, it is recommended to post an issue to the original package (@a-r3/diagno) to support the "exports" field. If that is not possible, create a JSPM override to customize the exports field for this package.

    Readme

    🔒 Diagno v1.5 - Explainable & Adaptive Security Scanner

    Universal repository diagnostic and security scanning tool with explainable AI and adaptive intelligence.

    npm version License: MIT

    🚀 Quick Start

    Installation

    npm install -g @a-r3/diagno@1.5.0

    Basic Usage

    # Simple scan
    diagno scan
    
    # JSON report
    diagno scan --format json --out security-report.json
    
    # v1.5 Enhanced features
    diagno scan --explain --debug-trace --deterministic --format html --out report.html

    ✨ v1.5 New Features

    🧠 Explainable AI - Meta.explain with reasoning and matched rules
    Performance Metrics - Detailed timing breakdown (meta.perf)
    🔧 Fix Suggestions - 60%+ coverage with actionable recommendations
    �� Debug Tracing - --debug-trace flag with detailed logs
    🎯 Deterministic Output - --deterministic for consistent results
    🛡️ Enhanced Redaction - Comprehensive PII protection
    📄 SARIF 2.1.0 - Full GitHub Security compliance

    📊 What It Detects

    • Secrets & Credentials - API keys, passwords, tokens
    • Security Vulnerabilities - SQL injection, XSS, command injection
    • Container Issues - Docker security misconfigurations
    • Dependency Problems - Outdated and vulnerable packages
    • Code Quality - Security anti-patterns and risks
    • Infrastructure - IaC security issues

    🛠️ Supported Technologies

    Language/Tech Status Scanner
    Node.js ✅ Full ESLint, npm audit
    Python ✅ Full Bandit, safety
    Docker ✅ Full Hadolint, custom
    Git ✅ Full Secrets, history
    Infrastructure ✅ Partial Custom rules

    📚 Documentation

    📄 License

    MIT License - see LICENSE file for details.


    Diagno v1.5.0 - Making security scanning explainable, adaptive, and actionable. 🚀