{"_id":"@dongluliang/sec-baseline","name":"@dongluliang/sec-baseline","dist-tags":{"latest":"0.1.0"},"versions":{"0.1.0":{"name":"@dongluliang/sec-baseline","version":"0.1.0","description":"只读型跨平台安全基线自查工具 - 自动识别操作系统调用 Windows/Linux 检查模块","main":"dist/index.js","bin":{"sec-baseline":"dist/cli/index.js"},"scripts":{"build":"tsc","dev":"tsc --watch","start":"node dist/cli/index.js","test":"jest","prepublishOnly":"npm run build && npm test","pack:dry":"npm pack --dry-run"},"keywords":["security","baseline","hardening","audit","compliance","windows","linux","cross-platform"],"author":{"name":"dongluliang"},"license":"MIT","repository":{"type":"git","url":"git+https://github.com/dongluliang/sec-baseline.git"},"engines":{"node":">=20"},"dependencies":{"@dongluliang/sec-baseline-win":"^0.1.0","@dongluliang/sec-baseline-linux":"^0.1.0"},"devDependencies":{"@types/jest":"^29.5.0","@types/node":"^20.0.0","jest":"^29.7.0","ts-jest":"^29.1.0","typescript":"^5.3.0"},"_id":"@dongluliang/sec-baseline@0.1.0","types":"./dist/index.d.ts","bugs":{"url":"https://github.com/dongluliang/sec-baseline/issues"},"homepage":"https://github.com/dongluliang/sec-baseline#readme","_nodeVersion":"20.18.0","_npmVersion":"10.8.2","dist":{"integrity":"sha512-yxb2XlaIQxkzYJ26hyvzPpVT+JrxvMQ4/y/QhspFVeHD4wzFNhQRlxyMsmx1gTK+x8BUHmpvqDSLSn3ApTyafw==","shasum":"e1d38f66b49e3d6910ee4b34c175fca391ca4ce5","tarball":"https://registry.npmjs.org/@dongluliang/sec-baseline/-/sec-baseline-0.1.0.tgz","fileCount":20,"unpackedSize":29541,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEYCIQD1eDoIGwfc4U1HIsRqGVbbsYy4hVTRd8iT2QxpUJ+drQIhANefnLzHziYbSToYPCkap+SaoB10/M0oa2oZtxbS8RuT"}]},"_npmUser":{"name":"dongluliang","email":"dongluliang@gmail.com"},"directories":{},"maintainers":[{"name":"dongluliang","email":"dongluliang@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/sec-baseline_0.1.0_1787194793383_0.9594662264817402"},"_hasShrinkwrap":false}},"time":{"created":"2026-08-20T02:59:53.138Z","0.1.0":"2026-08-20T02:59:53.515Z","modified":"2026-08-20T02:59:53.724Z"},"maintainers":[{"name":"dongluliang","email":"dongluliang@gmail.com"}],"description":"只读型跨平台安全基线自查工具 - 自动识别操作系统调用 Windows/Linux 检查模块","homepage":"https://github.com/dongluliang/sec-baseline#readme","keywords":["security","baseline","hardening","audit","compliance","windows","linux","cross-platform"],"repository":{"type":"git","url":"git+https://github.com/dongluliang/sec-baseline.git"},"author":{"name":"dongluliang"},"bugs":{"url":"https://github.com/dongluliang/sec-baseline/issues"},"license":"MIT","readme":"---\nAIGC:\n  ContentProducer: '001191110102MAD55U9H0F10002'\n  ContentPropagator: '001191110102MAD55U9H0F10002'\n  Label: '1'\n  ProduceID: 'cd4a34ff-a006-44e4-b8ff-6bad699e8648'\n  PropagateID: 'cd4a34ff-a006-44e4-b8ff-6bad699e8648'\n  ReservedCode1: 'b1e52154-1d82-469b-b418-e82f3a6b82a6'\n  ReservedCode2: 'b1e52154-1d82-469b-b418-e82f3a6b82a6'\n---\n\n# @dongluliang/sec-baseline\n\n> 只读型跨平台安全基线自查工具 — 自动识别操作系统并调用对应检查模块\n\n## 简介\n\n`@dongluliang/sec-baseline` 是聚合入口包，自动检测当前操作系统并调用对应的平台检查包：\n\n- **Windows** → `@dongluliang/sec-baseline-win`\n- **Linux** → `@dongluliang/sec-baseline-linux`\n\n用户无需关心平台差异，直接运行 `npx @dongluliang/sec-baseline` 即可。\n\n## 安装\n\n```bash\n# 全局安装\nnpm install -g @dongluliang/sec-baseline\n\n# 或通过 npx 直接运行\nnpx @dongluliang/sec-baseline\n```\n\n## 用法\n\n```bash\n# 默认控制台输出\nnpx @dongluliang/sec-baseline\n\n# JSON 格式输出到文件\nnpx @dongluliang/sec-baseline --json --output report.json\n\n# HTML 格式报告\nnpx @dongluliang/sec-baseline --html --output report.html\n\n# 深度扫描\nnpx @dongluliang/sec-baseline --deep\n\n# 静默模式\nnpx @dongluliang/sec-baseline --quiet --json\n```\n\n## 命令行选项\n\n| 选项 | 简写 | 说明 |\n|------|------|------|\n| `--help` | `-h` | 显示帮助信息 |\n| `--version` | `-v` | 显示版本号 |\n| `--json` | | 以 JSON 格式输出 |\n| `--csv` | | 以 CSV 格式输出 |\n| `--html` | | 以 HTML 格式输出 |\n| `--output` | `-o` | 输出到指定文件 |\n| `--quiet` | `-q` | 静默模式，仅输出结果 |\n| `--verbose` | | 详细模式 |\n| `--deep` | | 深度扫描（全盘扫描等耗时检查） |\n\n## 平台检查项概览\n\n### Windows（6 大类）\n- 系统基础信息（Windows Update / Defender / 第三方杀毒）\n- 安全策略（密码策略 / 账户锁定）\n- 账户安全（Guest / Administrator / 本地管理员组）\n- 网络与防火墙（三 Profile 防火墙 / RDP / NLA / WinRM / SMBv1）\n- 服务与端口（TCP 监听端口 / 高风险服务 / 系统共享）\n- 系统安全策略（UAC / 审计策略 / 日志配置 / 自动登录 / TLS 1.0）\n\n### Linux（12 大类）\n- 系统基础信息（SELinux / AppArmor / 时间同步）\n- 账户安全（UID=0 / 空密码 / 异常 shell / sudo 用户）\n- 密码策略（PASS_MAX_DAYS / PAM 复杂度 / 密码历史 / pam_faillock）\n- SSH 安全（`sshd -T` 优先获取生效配置）\n- 防火墙（firewalld / ufw / iptables / nftables 综合检测）\n- 网络监听（`ss -lntup` 优先，高风险端口检测）\n- 高风险服务（telnet / rsh / tftp / NFS / SMB / SNMP / Redis 等）\n- 文件权限（SUID / SGID / world writable / 无属主文件）\n- 定时任务（crontab / cron.d / systemd timer）\n- 日志与审计（rsyslog / journald / auditd / 日志轮转）\n- 内核网络参数（sysctl 只读检查）\n- 软件包更新（apt / yum / dnf 安全补丁）\n\n## 安全声明\n\n- **只读检查**：不会修改任何系统配置\n- **禁止自动整改**、禁止利用漏洞、禁止破解密码\n- **禁止上传检查结果**，所有数据仅保存在本机\n- **不采集敏感信息**：不采集密码、Token、私钥等\n\n## 评分算法\n\n0-100 分制，透明算法：\n\n| 风险等级 | 扣分 |\n|----------|------|\n| Critical | -20 |\n| High | -10 |\n| Medium | -5 |\n| Low | -2 |\n\n按检查项总数进行 sqrt 归一化，避免检查项数量变化导致评分失真。评分仅为辅助参考信息。\n\n## 技术架构\n\n```\n@dongluliang/sec-baseline          ← 聚合入口包（本包）\n├── @dongluliang/sec-baseline-win   ← Windows 检查包\n└── @dongluliang/sec-baseline-linux ← Linux 检查包\n```\n\n聚合包通过 `process.platform` 自动识别操作系统，动态加载对应平台包的 Scanner 和检查模块，并透传所有命令行参数。\n\n## 许可证\n\nMIT","readmeFilename":"README.md","_rev":"1-399d711f5499c89bab3eff819d84f217"}