Static analysis engine for JavaScript and TypeScript trees. Detects hardcoded secrets, high-entropy tokens, and sensitive API paths, then emits table, JSON, CSV, SARIF, or Markdown. Fails CI when a severity threshold or cumulative impact score is exceeded. Serialized reports mask matched values.

Required Ruby Version

>= 3.1.0

Authors

Saulo Filho

Versions

  1. 0.1.0

    1. source

      1. 0.1.0 source October 01, 2026 (20.5 KB)

Pushed by

saulofilho

SHA 256 checksum