{"_id":"@andesyte-oss/security-rules","_rev":"5-1bada1974a3c7beb3f63b6f8bf81a4d7","name":"@andesyte-oss/security-rules","dist-tags":{"latest":"0.1.4"},"versions":{"0.1.0":{"name":"@andesyte-oss/security-rules","version":"0.1.0","license":"MIT","_id":"@andesyte-oss/security-rules@0.1.0","maintainers":[{"name":"andesyte-npm","email":"open-source@andesyte.com"}],"homepage":"https://github.com/andesyte-oss/andesyte-cli#readme","bugs":{"url":"https://github.com/andesyte-oss/andesyte-cli/issues"},"dist":{"shasum":"3bd252d21cb43a88cc4bd0b800fc57d98bab6c2f","tarball":"https://registry.npmjs.org/@andesyte-oss/security-rules/-/security-rules-0.1.0.tgz","fileCount":11,"integrity":"sha512-4eh857dQAPsqif/dKZu6GycGozyiN2BC+Ikuc0oU/99QQ53uKi3lGy0rilnV5RATk2umphOuG05rf2NEHVcGvA==","signatures":[{"sig":"MEUCIGMIfQ6LI7f6MS1Ky5g1rYSovl/QFHc7tWQ1r2ySdTMKAiEAjwiSGyrGcU/AhpHx8CSyDlfGmLu+bdtHYX+T/wev0G4=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":43255},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=20.11"},"exports":{".":{"types":"./dist/index.d.ts","default":"./dist/index.js"},"./rules/*":"./rules/*"},"gitHead":"3756e20266119e7d78a7c179cae2ac9e24fdce97","scripts":{"build":"tsc -p tsconfig.json","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"andesyte-npm","email":"open-source@andesyte.com"},"repository":{"url":"git+https://github.com/andesyte-oss/andesyte-cli.git","type":"git","directory":"packages/security-rules"},"_npmVersion":"11.16.0","description":"Andesyte curated Semgrep security rules, shipped as packaged local files (no registry fetch).","directories":{},"_nodeVersion":"24.18.0","publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/security-rules_0.1.0_1788516498738_0.7211705961511279","host":"s3://npm-registry-packages-npm-production"}},"0.1.1":{"name":"@andesyte-oss/security-rules","version":"0.1.1","license":"MIT","_id":"@andesyte-oss/security-rules@0.1.1","maintainers":[{"name":"andesyte-npm","email":"open-source@andesyte.com"}],"homepage":"https://github.com/andesyte-oss/andesyte-cli#readme","bugs":{"url":"https://github.com/andesyte-oss/andesyte-cli/issues"},"dist":{"shasum":"1023f44fbb76a238781aee0706370162049c0347","tarball":"https://registry.npmjs.org/@andesyte-oss/security-rules/-/security-rules-0.1.1.tgz","fileCount":11,"integrity":"sha512-nONC/KsswPlhcgsM/ls7xdg6fpgjp7j1adb0A8z6MTA7UdPdz2AsVyt6ldtH4jGTxVffkpNkqT5+G52ojmye8w==","signatures":[{"sig":"MEUCICJdjNN/JCxzMU3H1CUH6DDUMDNRr8nQNRvIO/TKVbf/AiEAnln4A9Wv21r+eH0kKIkIC3wy12ZDunxpPaapEiuGehk=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":43306},"main":"./dist/index.js","type":"module","_from":"file:/tmp/pack2/andesyte-oss-security-rules-0.1.1.tgz","types":"./dist/index.d.ts","engines":{"node":">=20.19"},"exports":{".":{"types":"./dist/index.d.ts","default":"./dist/index.js"},"./rules/*":"./rules/*"},"scripts":{"build":"tsc -p tsconfig.json","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"andesyte-npm","email":"open-source@andesyte.com"},"_resolved":"/tmp/pack2/andesyte-oss-security-rules-0.1.1.tgz","_integrity":"sha512-nONC/KsswPlhcgsM/ls7xdg6fpgjp7j1adb0A8z6MTA7UdPdz2AsVyt6ldtH4jGTxVffkpNkqT5+G52ojmye8w==","repository":{"url":"git+https://github.com/andesyte-oss/andesyte-cli.git","type":"git","directory":"packages/security-rules"},"_npmVersion":"11.19.0","description":"Andesyte curated Semgrep security rules, shipped as packaged local files (no registry fetch).","directories":{},"_nodeVersion":"26.8.1","publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/security-rules_0.1.1_1788524209493_0.02690250462825139","host":"s3://npm-registry-packages-npm-production"}},"0.1.2":{"name":"@andesyte-oss/security-rules","version":"0.1.2","license":"MIT","_id":"@andesyte-oss/security-rules@0.1.2","maintainers":[{"name":"andesyte-npm","email":"open-source@andesyte.com"}],"homepage":"https://github.com/andesyte-oss/andesyte-cli#readme","bugs":{"url":"https://github.com/andesyte-oss/andesyte-cli/issues"},"dist":{"shasum":"f5fc55982cd8f434bbad88c8ac7b22c550218192","tarball":"https://registry.npmjs.org/@andesyte-oss/security-rules/-/security-rules-0.1.2.tgz","fileCount":11,"integrity":"sha512-H8gIz5l7aUbJ7wOdncGN31YrXs5+yZ2yQtZ/bQ6BBDwWIsky2hf2pyDapPy97XKj4tdBBdprbtYEfQQp4zRg5w==","signatures":[{"sig":"MEYCIQCE4PReo6cKvyffFYANvyetgfTHh5vgME6eknLvzoS96QIhAM3yXgSN7szfokwl/9IJYnguD3+LmkpNt9yUK/PhhbLl","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":43306},"main":"./dist/index.js","type":"module","_from":"file:/tmp/pack3/andesyte-oss-security-rules-0.1.2.tgz","types":"./dist/index.d.ts","engines":{"node":">=20.19"},"exports":{".":{"types":"./dist/index.d.ts","default":"./dist/index.js"},"./rules/*":"./rules/*"},"scripts":{"build":"tsc -p tsconfig.json","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"andesyte-npm","email":"open-source@andesyte.com"},"_resolved":"/tmp/pack3/andesyte-oss-security-rules-0.1.2.tgz","_integrity":"sha512-H8gIz5l7aUbJ7wOdncGN31YrXs5+yZ2yQtZ/bQ6BBDwWIsky2hf2pyDapPy97XKj4tdBBdprbtYEfQQp4zRg5w==","repository":{"url":"git+https://github.com/andesyte-oss/andesyte-cli.git","type":"git","directory":"packages/security-rules"},"_npmVersion":"11.19.0","description":"Andesyte curated Semgrep security rules, shipped as packaged local files (no registry fetch).","directories":{},"_nodeVersion":"26.8.1","publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/security-rules_0.1.2_1788527848445_0.14619000677010696","host":"s3://npm-registry-packages-npm-production"}},"0.1.3":{"name":"@andesyte-oss/security-rules","version":"0.1.3","author":{"name":"Andesyte","email":"lewis@andesyte.com"},"license":"MIT","_id":"@andesyte-oss/security-rules@0.1.3","maintainers":[{"name":"andesyte-npm","email":"open-source@andesyte.com"}],"homepage":"https://andesyte.com","bugs":{"email":"lewis@andesyte.com"},"dist":{"shasum":"fc10719325e707ef0500ec3a9b0320d6f77bddaa","tarball":"https://registry.npmjs.org/@andesyte-oss/security-rules/-/security-rules-0.1.3.tgz","fileCount":7,"integrity":"sha512-Okywubk4BaxrkCQYTVmtF3X3u3solCGsLRKQ2u+A88E2W8DIfq4ExR62H80QO1CSQBk10Alz7lPII7r2Pr0EtQ==","signatures":[{"sig":"MEUCIQC8tg93sBmKTgZJjYv2jJx/8H223LQDJoyjYWZtGdVefAIgYeqZyCu7NLUlunN1VuRR9xELdEYXlPBnh8sDKAMTCcM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":17130},"main":"./dist/index.js","type":"module","_from":"file:/home/runner/work/andesyte-cli/andesyte-cli/candidate/andesyte-oss-security-rules-0.1.3.tgz","types":"./dist/index.d.ts","engines":{"node":">=20.19"},"exports":{".":{"types":"./dist/index.d.ts","default":"./dist/index.js"},"./rules/*":"./rules/*"},"scripts":{"build":"tsc -p tsconfig.json","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","approver":{"name":"andesyte-npm","email":"open-source@andesyte.com"},"trustedPublisher":{"id":"github","oidcConfigId":"oidc:c6b9218e-f2ed-4ed1-9a6b-c15e1528eb68"}},"_resolved":"/home/runner/work/andesyte-cli/andesyte-cli/candidate/andesyte-oss-security-rules-0.1.3.tgz","_integrity":"sha512-Okywubk4BaxrkCQYTVmtF3X3u3solCGsLRKQ2u+A88E2W8DIfq4ExR62H80QO1CSQBk10Alz7lPII7r2Pr0EtQ==","repository":{"url":"git+https://github.com/andesyte-oss/andesyte-cli.git","type":"git","directory":"packages/security-rules"},"_npmVersion":"11.19.1","description":"Andesyte curated Semgrep security rules, shipped as packaged local files (no registry fetch).","directories":{},"_nodeVersion":"22.23.2","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/security-rules_0.1.3_1789206299527_0.8912619028333504","host":"s3://npm-registry-packages-npm-production"}},"0.1.4":{"_id":"@andesyte-oss/security-rules@0.1.4","bugs":{"email":"lewis@andesyte.com"},"dist":{"shasum":"d1644238ed36e3d2c95b181f047f12ce9fc716ed","tarball":"https://registry.npmjs.org/@andesyte-oss/security-rules/-/security-rules-0.1.4.tgz","integrity":"sha512-Ah6RJsqa/5/iVao5SZ86IVGUvR5lZgZOydTyp5JAAamykU80ZLSc+AR7I5cfrJWhihnoDPAh7a6bgzoNWskKow==","fileCount":8,"unpackedSize":19751,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIAOEKJizTgibg1B+yGU2hPVTd/1izCRQhIKeQxsWBB1CAiEAg0HSXhMrqu3S+4BBdNEv8HAt6OtGPjqrAV6V1nCIPdw="}]},"main":"./dist/index.js","name":"@andesyte-oss/security-rules","type":"module","_from":"file:/home/runner/work/andesyte-cli/andesyte-cli/candidate/andesyte-oss-security-rules-0.1.4.tgz","types":"./dist/index.d.ts","author":{"name":"Andesyte","email":"lewis@andesyte.com"},"engines":{"node":">=20.19"},"exports":{".":{"types":"./dist/index.d.ts","default":"./dist/index.js"},"./rules/*":"./rules/*"},"license":"MIT","scripts":{"build":"tsc -p tsconfig.json","typecheck":"tsc -p tsconfig.json --noEmit"},"version":"0.1.4","_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:c6b9218e-f2ed-4ed1-9a6b-c15e1528eb68"},"approver":{"name":"andesyte-npm","email":"open-source@andesyte.com"}},"homepage":"https://andesyte.com","_resolved":"/home/runner/work/andesyte-cli/andesyte-cli/candidate/andesyte-oss-security-rules-0.1.4.tgz","_integrity":"sha512-Ah6RJsqa/5/iVao5SZ86IVGUvR5lZgZOydTyp5JAAamykU80ZLSc+AR7I5cfrJWhihnoDPAh7a6bgzoNWskKow==","repository":{"url":"git+https://github.com/andesyte-oss/andesyte-cli.git","type":"git","directory":"packages/security-rules"},"_npmVersion":"11.19.1","description":"Andesyte curated Semgrep security rules, shipped as packaged local files (no registry fetch).","directories":{},"maintainers":[{"name":"andesyte-npm","email":"open-source@andesyte.com"}],"_nodeVersion":"22.23.2","publishConfig":{"access":"public"},"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/security-rules_0.1.4_1789590375068_0.11465819980169711"},"_hasShrinkwrap":false}},"time":{"created":"2026-09-04T10:08:18.554Z","modified":"2026-09-16T20:26:15.307Z","0.1.0":"2026-09-04T10:08:18.880Z","0.1.1":"2026-09-04T12:16:49.613Z","0.1.2":"2026-09-04T13:17:28.578Z","0.1.3":"2026-09-12T09:44:59.624Z","0.1.4":"2026-09-16T20:26:15.159Z"},"bugs":{"email":"lewis@andesyte.com"},"author":{"name":"Andesyte","email":"lewis@andesyte.com"},"license":"MIT","homepage":"https://andesyte.com","repository":{"url":"git+https://github.com/andesyte-oss/andesyte-cli.git","type":"git","directory":"packages/security-rules"},"description":"Andesyte curated Semgrep security rules, shipped as packaged local files (no registry fetch).","maintainers":[{"name":"andesyte-npm","email":"open-source@andesyte.com"}],"readme":"# @andesyte-oss/security-rules\n\nSix packaged local Semgrep rules for narrow AI-application review. Four rules\napply to Python; two each apply to JavaScript and TypeScript.\n\n- Insecure output handling: model output reaching execution, shell or HTML,\n  plus a nonliteral Python shell-command review heuristic.\n- Sensitive information: credential-shaped prompt literals.\n\nThis is not general SAST, prompt-injection prevention, model-DoS detection, SSRF\nor tool authorization review. Eleven unsound/broad heuristics were retired; the\nrepository's rule-decision ledger preserves their rationale and regression history.\n\nRules never download at runtime. The canonical source is\n`andesyte-oss/semgrep-ai-security`, synchronized with a checksum lock. Use\n`@andesyte-oss/cli` for the executable; this package only locates rule files.\nMIT.\n","readmeFilename":"README.md"}