Package Exports

@quantumtiger/qv
@quantumtiger/qv/dist/index.js

This package does not declare an exports field, so the exports above have been automatically detected and optimized by JSPM instead. If any package subpath is missing, it is recommended to post an issue to the original package (@quantumtiger/qv) to support the "exports" field. If that is not possible, create a JSPM override to customize the exports field for this package.

Readme

Quantum Viper CLI

Professional command-line security scanner — by Quantum Tiger

Installation

npm install -g @quantumtiger/quantumviper

Quick Start

# Scan current directory
quantum-viper scan .

# Scan with specific language
quantum-viper scan --language python ./src

# AI-powered code analysis
quantum-viper analyze code ./src

# Hybrid analysis (static + dynamic + AI)
quantum-viper analyze hybrid ./src

# Generate report
quantum-viper report --format html --output report.html

Commands

Command	Description
`scan`	Run static analysis scan
`analyze code`	AI-powered code security review
`analyze hybrid`	Combined static + dynamic + AI analysis
`fix`	Interactive AI-powered fix suggestions
`report`	Generate security reports (HTML, SARIF, JSON, MD)
`security sca`	Software Composition Analysis
`security secrets`	Secrets & credential detection
`security iac`	Infrastructure as Code scanning
`security sbom`	Generate Software Bill of Materials
`security license`	License compliance check
`explain`	AI explanation of any vulnerability type
`agent chat`	Interactive AI security chat
`agent explain`	AI explanation of code
`agent fix`	AI-powered code fixes
`dashboard sync`	Sync results to cloud dashboard
`mcp`	Start MCP server for AI assistants

AI Engine

The CLI uses a three-tier AI priority chain:

BYOAI (Your Provider) → Viper Cortex Engine → Cortex Engine (Local)

BYOAI Configuration

quantum-viper config set ai.endpoint "https://api.openai.com/v1"
quantum-viper config set ai.apiKey "sk-..."
quantum-viper config set ai.model "gpt-4"

Configuration

# Initialize config
quantum-viper init

# Set options
quantum-viper config set severity medium
quantum-viper config set autofix true

Baseline Suppression

# Create baseline from current scan
quantum-viper scan . --create-baseline

# Scan ignoring baseline findings
quantum-viper scan . --baseline .quantumviper-baseline.json

Output Formats

Terminal — Colored, interactive output (default)
HTML — Rich visual report
SARIF — Standard for CI/CD integration
JSON — Machine-readable
Markdown — Documentation-friendly

Languages Supported

JavaScript, TypeScript, Python, PHP, Java, C/C++, Go, Ruby, SQL, Rust, Swift, Kotlin, and more.

@quantumtiger/qv