{"_id":"@vapurrmaid/smorgasbord","_rev":"45-87137bfe73a4b2901e584f5059a3e942","name":"@vapurrmaid/smorgasbord","dist-tags":{"latest":"0.5.1","beta":"0.6.0-beta.1"},"versions":{"0.1.0-beta.1":{"name":"@vapurrmaid/smorgasbord","version":"0.1.0-beta.1","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MIT","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"bin":{"smorgasbord":"./dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","prerelease":"npm run test:jest:coverage && npm run build:clean","release":"npm run prerelease && release-it","release:beta":"npm run prerelease && release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.5","axios":"^0.19.0","chalk":"^2.4.2","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.6.1","@typescript-eslint/parser":"^2.6.1","cross-env":"^6.0.3","eslint":"^6.1.0","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.1.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"gitHead":"a5e450ccffe3d01ac8ca06c3e65b9c36ba3cbbd8","_id":"@vapurrmaid/smorgasbord@0.1.0-beta.1","_nodeVersion":"11.11.0","_npmVersion":"6.12.1","dist":{"integrity":"sha512-aMr5Wz16Bu/IvxP7kNPr8q+Yg79QEY16R131g4RRbWuShq0e7+O947UNLFlQgluCflTrPQ3zKFnArMyCWBwF9Q==","shasum":"77af9d1f683a57a1c0d753b70ee827303427a293","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.1.0-beta.1.tgz","fileCount":22,"unpackedSize":20297,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\nAiWb\r\n=nU8g\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQCMDrT6g1Kapd9EIVrWulahx4Jc65nkRrexpQ+m09ZTgQIgVJfq4jo3CLPiWnSv42MIueQZMrgptIaWx73HRjinCsU="}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.1.0-beta.1_1574561294640_0.5813649510054129"},"_hasShrinkwrap":false,"deprecated":"new default functionality in 0.2.0"},"0.1.0-beta.2":{"name":"@vapurrmaid/smorgasbord","version":"0.1.0-beta.2","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MIT","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"bin":{"smorgasbord":"./dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","prerelease":"npm run test:jest:coverage && npm run build:clean","release":"npm run prerelease && release-it","release:beta":"npm run prerelease && release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.5","axios":"^0.19.0","chalk":"^2.4.2","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.6.1","@typescript-eslint/parser":"^2.6.1","cross-env":"^6.0.3","eslint":"^6.1.0","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.1.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"gitHead":"807bf862a19c28351df37c3ccc88341aed8ddbfc","readme":"# Smorgasbord\r\n\r\nSmorgasbord checks endpoint(s) for a variety of served files that should not be\r\nexposed. The tool was inspired by a post detailing that\r\n[1 in every 600 websites has .git exposed](https://news.ycombinator.com/item?id=9952356).\r\n\r\n> **SECURITY NOTE:** It is generally preferable to favor whitelists over\r\n> blacklists. Use a directory structure of build so that only specified content\r\n> is located in the webserver root.\r\n\r\n## Usage\r\n\r\nIt is intended that overtime, the tool may be used with CI/CD, actions and\r\nrelated workflows.\r\n\r\n### Install Globally\r\n\r\n```bash\r\nnpm install -g @vapurrmaid/smorgasbord\r\n```\r\n\r\n### Install Locally\r\n\r\n```bash\r\nnpm install @vapurrmaid/smorgasbord\r\n```\r\n\r\n## Command Line Interface\r\n\r\n```text\r\nUsage: smorgasbord [options] [command]\r\n\r\nOptions:\r\n -h, --help output usage information\r\n\r\nCommands:\r\n probe Probes uri for vulnerable resources.\r\n```\r\n\r\n### Commands\r\n\r\n#### Probe\r\n\r\n```text\r\nUsage: smorgasbord probe [options] \r\n\r\nProbes uri for vulnerable resources.\r\n\r\nOptions:\r\n -h, --help output usage information\r\n```\r\n","readmeFilename":"README.md","_id":"@vapurrmaid/smorgasbord@0.1.0-beta.2","_nodeVersion":"11.11.0","_npmVersion":"6.12.1","dist":{"integrity":"sha512-exr6e8kVniUahWmnOgNShxpeyFTmTn5fx224uIEQ2aiHcDw/va0GHJzhKzKesEP6U4F2Cjps1lKHcgAvu1UXXg==","shasum":"87906f3631b77629cb79f8f4c5d23f41a4d42223","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.1.0-beta.2.tgz","fileCount":28,"unpackedSize":27586,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\ns+QZ\r\n=TOJd\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQDznvKy4yItsNqdjSXfTDzLQjamhWvWSj3SNKwJaDwD+QIgL3vCA2Vdb+q6pe0ViG+2tL3P54Ypqom4bpjWoqh5kRM="}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.1.0-beta.2_1574572083853_0.6082477332072109"},"_hasShrinkwrap":false,"deprecated":"new default functionality in 0.2.0"},"0.1.0-beta.3":{"name":"@vapurrmaid/smorgasbord","version":"0.1.0-beta.3","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MIT","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"bin":{"smorgasbord":"./dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","prerelease":"npm run test:jest:coverage","release":"npm run prerelease && release-it","release:beta":"npm run prerelease && release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh && npm run build:clean"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.5","axios":"^0.19.0","chalk":"^2.4.2","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.6.1","@typescript-eslint/parser":"^2.6.1","cross-env":"^6.0.3","eslint":"^6.1.0","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.1.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"gitHead":"78c4d1625a424ef3e39b1589120e93ff405dc5cd","_id":"@vapurrmaid/smorgasbord@0.1.0-beta.3","_nodeVersion":"11.11.0","_npmVersion":"6.12.1","dist":{"integrity":"sha512-+J6gB7DjP7/sE9fFNO5W7oTLXq+ZOhPUPNOxbvyzOqraJF0r7WexEMYFzDc96UtKqCyvQ8pYFKaPk8JY08YOZw==","shasum":"1725821e6bbb485effb0abd8896560ab4fbbf777","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.1.0-beta.3.tgz","fileCount":28,"unpackedSize":27586,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\nw61L\r\n=FC5C\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEYCIQCEZZ7G637v6IWtg3fSmlAM8KWo1vIw3+NKKywhRPtzBwIhAKOaue9m2ooYM4ornqwr8x66oyH21sv49VUzra7UW7G7"}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.1.0-beta.3_1574572910193_0.1256514703484657"},"_hasShrinkwrap":false,"deprecated":"new default functionality in 0.2.0"},"0.1.0-beta.4":{"name":"@vapurrmaid/smorgasbord","version":"0.1.0-beta.4","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MIT","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"bin":{"smorgasbord":"./dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","prerelease":"npm run test:jest:coverage","release":"npm run prerelease && release-it","release:beta":"npm run prerelease && release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh && npm run build:clean"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.5","axios":"^0.19.0","chalk":"^2.4.2","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.6.1","@typescript-eslint/parser":"^2.6.1","cross-env":"^6.0.3","eslint":"^6.1.0","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.1.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"readme":"# Smorgasbord\r\n\r\nSmorgasbord checks endpoint(s) for a variety of served files that should not be\r\nexposed. The tool was inspired by a post detailing that\r\n[1 in every 600 websites has .git exposed](https://news.ycombinator.com/item?id=9952356).\r\n\r\n> **SECURITY NOTE:** It is generally preferable to favor whitelists over\r\n> blacklists. Use a directory structure of build so that only specified content\r\n> is located in the webserver root.\r\n\r\n## Usage\r\n\r\nIt is intended that overtime, the tool may be used with CI/CD, actions and\r\nrelated workflows.\r\n\r\n### Install Globally\r\n\r\n```bash\r\nnpm install -g @vapurrmaid/smorgasbord\r\n```\r\n\r\n### Install Locally\r\n\r\n```bash\r\nnpm install @vapurrmaid/smorgasbord\r\n```\r\n\r\n## Command Line Interface\r\n\r\n```text\r\nUsage: smorgasbord [options] [command]\r\n\r\nOptions:\r\n -h, --help output usage information\r\n\r\nCommands:\r\n probe Probes uri for vulnerable resources.\r\n```\r\n\r\n### Commands\r\n\r\n#### Probe\r\n\r\n```text\r\nUsage: smorgasbord probe [options] \r\n\r\nProbes uri for vulnerable resources.\r\n\r\nOptions:\r\n -h, --help output usage information\r\n```\r\n","readmeFilename":"README.md","gitHead":"75fd2624a63a4b62d289b2f1996496f017fb9375","_id":"@vapurrmaid/smorgasbord@0.1.0-beta.4","_nodeVersion":"11.11.0","_npmVersion":"6.12.1","dist":{"integrity":"sha512-ChwWTkNU1PXtSW04LaxfOoBDXG5Pew24AoQYqCqZjdQLBejF+90N5KlyqVqyh69HiofuRoXFG5pffc1zEkEFLg==","shasum":"1d2d1de25025b34dce361adfef044afe417fb473","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.1.0-beta.4.tgz","fileCount":34,"unpackedSize":30037,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\nda4H\r\n=H6aM\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQDvBBLiZLEmXykufKHPPFBlzwybtGMFYINkdhfz0ME77AIgRYwvMnOscCvpR6VjRRAONc+0YOSLd7DGepVQv3gBkxA="}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.1.0-beta.4_1574616616444_0.017416408207788114"},"_hasShrinkwrap":false,"deprecated":"new default functionality in 0.2.0"},"0.1.0-beta.5":{"name":"@vapurrmaid/smorgasbord","version":"0.1.0-beta.5","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MIT","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"bin":{"smorgasbord":"./dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","release":"release-it","release:beta":"release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.5","axios":"^0.19.0","chalk":"^2.4.2","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.6.1","@typescript-eslint/parser":"^2.6.1","cross-env":"^6.0.3","eslint":"^6.1.0","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.1.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"readme":"# Smorgasbord\r\n\r\nSmorgasbord checks endpoint(s) for a variety of served files that should not be\r\nexposed. The tool was inspired by a post detailing that\r\n[1 in every 600 websites has .git exposed](https://news.ycombinator.com/item?id=9952356).\r\n\r\n> **SECURITY NOTE:** It is generally preferable to favor whitelists over\r\n> blacklists. Use a directory structure of build so that only specified content\r\n> is located in the webserver root.\r\n\r\n## Usage\r\n\r\nIt is intended that overtime, the tool may be used with CI/CD, actions and\r\nrelated workflows.\r\n\r\n### Install Globally\r\n\r\n```bash\r\nnpm install -g @vapurrmaid/smorgasbord\r\n```\r\n\r\n### Install Locally\r\n\r\n```bash\r\nnpm install @vapurrmaid/smorgasbord\r\n```\r\n\r\n## Command Line Interface\r\n\r\n```text\r\nUsage: smorgasbord [options] [command]\r\n\r\nOptions:\r\n -h, --help output usage information\r\n\r\nCommands:\r\n probe Probes uri for vulnerable resources.\r\n```\r\n\r\n### Commands\r\n\r\n#### Probe\r\n\r\n```text\r\nUsage: smorgasbord probe [options] \r\n\r\nProbes uri for vulnerable resources.\r\n\r\nOptions:\r\n -h, --help output usage information\r\n```\r\n","readmeFilename":"README.md","gitHead":"bfa2a4c1e56ac648c74731dc9388c0e5af2df414","_id":"@vapurrmaid/smorgasbord@0.1.0-beta.5","_nodeVersion":"11.11.0","_npmVersion":"6.12.1","dist":{"integrity":"sha512-0m7Po2xjV8nMmGaXQQ0l+w3O9fl9wOQvyJuNmfqMnO/1tJgreJq5+EwZaJGTIUPFKhKKW8T1K9bu4x6u2aY0TA==","shasum":"16eb3f23b6c6f031143911b64b3c0453721a79bd","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.1.0-beta.5.tgz","fileCount":34,"unpackedSize":29921,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\n0IBT\r\n=RcIt\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEQCIAQfC6v1qWiPDT2/MvsLJuUiz9Xyhi42RHDWXkF5VqaNAiB7qp+BlR8kgH6P3+Fvzo765IdIaenV5xZDoTGqlJlR6w=="}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.1.0-beta.5_1574643633986_0.22367286020619148"},"_hasShrinkwrap":false,"deprecated":"new default functionality in 0.2.0"},"0.2.0-beta.0":{"name":"@vapurrmaid/smorgasbord","version":"0.2.0-beta.0","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MIT","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"bin":{"smorgasbord":"./dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","release":"release-it","release:beta":"release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.5","axios":"^0.19.0","chalk":"^2.4.2","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.6.1","@typescript-eslint/parser":"^2.6.1","cross-env":"^6.0.3","eslint":"^6.1.0","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.1.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"gitHead":"5fa7eaedf26e2be0373adfe2389650e0dfc15d13","_id":"@vapurrmaid/smorgasbord@0.2.0-beta.0","_nodeVersion":"11.11.0","_npmVersion":"6.12.1","dist":{"integrity":"sha512-HaUGOITqM+Bnp/izUI2VLyxZwRiRSpyjdAmLWMFgPQ1+pwB96PpXmh98IDb+tBpd6KD7NngQ6NKgztOBE9E3ww==","shasum":"814b27edaedef35a3857f9326a6d472918448856","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.2.0-beta.0.tgz","fileCount":37,"unpackedSize":31966,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\nSlT2\r\n=d/K9\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEYCIQCPxjBvtQ/n6S8vdTfhQ92StuN+nLRUcxF89wfPdX2D2AIhAPTxd9jszPcSLVBPDTjg0Ut7elmp3Wbs6jLGgihR60eX"}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.2.0-beta.0_1574736457261_0.3514921421210866"},"_hasShrinkwrap":false,"deprecated":"New 0.3.x Beta"},"0.2.0-beta.1":{"name":"@vapurrmaid/smorgasbord","version":"0.2.0-beta.1","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MIT","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"bin":{"smorgasbord":"./dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","release":"release-it","release:beta":"release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.14","axios":"^0.19.0","chalk":"^3.0.0","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.9.0","@typescript-eslint/parser":"^2.9.0","cross-env":"^6.0.3","eslint":"^6.7.1","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.2.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"readme":"# Smorgasbord\r\n\r\nSmorgasbord checks endpoint(s) for a variety of served files that should not be\r\nexposed. The tool was inspired by a post detailing that\r\n[1 in every 600 websites has .git exposed](https://news.ycombinator.com/item?id=9952356).\r\n\r\n> **SECURITY NOTE:** It is generally preferable to favor whitelists over\r\n> blacklists. Use a directory structure of build so that only specified content\r\n> is located in the webserver root.\r\n\r\n## Usage\r\n\r\nIt is intended that overtime, the tool may be used with CI/CD, actions and\r\nrelated workflows.\r\n\r\n### Install Globally\r\n\r\n```bash\r\nnpm install -g @vapurrmaid/smorgasbord\r\n```\r\n\r\n### Install Locally\r\n\r\n```bash\r\nnpm install @vapurrmaid/smorgasbord\r\n```\r\n\r\n## Command Line Interface\r\n\r\n```text\r\nUsage: smorgasbord [options] [command]\r\n\r\nOptions:\r\n -h, --help output usage information\r\n\r\nCommands:\r\n probe Probes uri for vulnerable resources.\r\n```\r\n\r\n### Commands\r\n\r\n#### Probe\r\n\r\n```text\r\nUsage: smorgasbord probe [options] \r\n\r\nProbes uri for vulnerable resources.\r\n\r\nOptions:\r\n -h, --help output usage information\r\n```\r\n","readmeFilename":"README.md","gitHead":"9d56706ad8b0ca5a677fc88147b0976a4be3cde3","_id":"@vapurrmaid/smorgasbord@0.2.0-beta.1","_nodeVersion":"11.11.0","_npmVersion":"6.12.1","dist":{"integrity":"sha512-0XQDsugPg8fSxTuWnG2EQQ5jBCzmOZRHXp92kXPzmJCoAk8O2FgZStTz+79jKvcWXH/6KAhMBHPsdCM8cddxng==","shasum":"f92647f94b8e0251094de4841fd1ede210ca2f32","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.2.0-beta.1.tgz","fileCount":25,"unpackedSize":30294,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\nYnAV\r\n=09Qv\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEQCIET46HIsIEqAroPgrgs8zOAz9mX+wb7l46yyLXKiVnl3AiBzZ7uRv4jWGTeMaHlSDiLq00hvD3tUc7ucZskiinTiZw=="}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.2.0-beta.1_1574745494966_0.9083590027224691"},"_hasShrinkwrap":false,"deprecated":"New 0.3.x Beta"},"0.2.0-beta.2":{"name":"@vapurrmaid/smorgasbord","version":"0.2.0-beta.2","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MIT","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"bin":{"smorgasbord":"./dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","release":"release-it","release:beta":"release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.14","axios":"^0.19.0","chalk":"^3.0.0","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.9.0","@typescript-eslint/parser":"^2.9.0","cross-env":"^6.0.3","eslint":"^6.7.1","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.2.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"readme":"# Smorgasbord\r\n\r\nSmorgasbord checks endpoint(s) for a variety of served files that should not be\r\nexposed. The tool was inspired by a post detailing that\r\n[1 in every 600 websites has .git exposed](https://news.ycombinator.com/item?id=9952356).\r\n\r\n> **SECURITY NOTE:** It is generally preferable to favor whitelists over\r\n> blacklists. Use a directory structure of build so that only specified content\r\n> is located in the webserver root.\r\n\r\n## Usage\r\n\r\nIt is intended that overtime, the tool may be used with CI/CD, actions and\r\nrelated workflows.\r\n\r\n### Install Globally\r\n\r\n```bash\r\nnpm install -g @vapurrmaid/smorgasbord\r\n```\r\n\r\n### Install Locally\r\n\r\n```bash\r\nnpm install @vapurrmaid/smorgasbord\r\n```\r\n\r\n## Command Line Interface\r\n\r\n```text\r\nUsage: smorgasbord [options] [command]\r\n\r\nOptions:\r\n -h, --help output usage information\r\n\r\nCommands:\r\n probe Probes uri for vulnerable resources.\r\n```\r\n\r\n### Commands\r\n\r\n#### Probe\r\n\r\n```text\r\nUsage: smorgasbord probe [options] \r\n\r\nProbes uri for vulnerable resources.\r\n\r\nOptions:\r\n -h, --help output usage information\r\n```\r\n","readmeFilename":"README.md","gitHead":"fe4456e9b4fb9e3a160ab97a8fcfd704c70b8c3d","_id":"@vapurrmaid/smorgasbord@0.2.0-beta.2","_nodeVersion":"11.11.0","_npmVersion":"6.12.1","dist":{"integrity":"sha512-g7EgNclhigtkBeaAxAyr1y4gHZhKreeGFlerVbUeTWG0VAv+sRruTwR18pPq96ZdSpdaWbgmuaD8QmtppF+YmA==","shasum":"4b7b03bbffed1febaa832927816478720a408b4a","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.2.0-beta.2.tgz","fileCount":27,"unpackedSize":30687,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\nW2Pb\r\n=qlWw\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQCjXFnHMOJN3hHyQA3e8z9rNlu6CGnhDkjArf4/iMML0QIgODe1xAEdU+IATnE5LdX83yyhgfZk0pROm5GmU0q7kTk="}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.2.0-beta.2_1574780409582_0.2628255293757873"},"_hasShrinkwrap":false,"deprecated":"New 0.3.x Beta"},"0.2.0-beta.3":{"name":"@vapurrmaid/smorgasbord","version":"0.2.0-beta.3","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MIT","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"bin":{"smorgasbord":"./dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","release":"release-it","release:beta":"release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.14","axios":"^0.19.0","chalk":"^3.0.0","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.9.0","@typescript-eslint/parser":"^2.9.0","cross-env":"^6.0.3","eslint":"^6.7.1","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","jest-mock-console":"^1.0.0","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.2.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"gitHead":"329735d463bb2c7ee391a49c169c902865d5ef73","_id":"@vapurrmaid/smorgasbord@0.2.0-beta.3","_nodeVersion":"11.11.0","_npmVersion":"6.12.1","dist":{"integrity":"sha512-Bc/0xr7viPFGViz9eIy2GwyAqkLGdqC27Khbseb1H4sbkZo7vNXn6sMfJAXAedjLkqnbIXxO5COeX27H0l3zSA==","shasum":"e2c2a127d63e2d5aa1f60e2344857622800f3843","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.2.0-beta.3.tgz","fileCount":27,"unpackedSize":31026,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\nrJgz\r\n=TSz4\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQD4hNUR6iVESh0lYHAB6i1Dgm8u4vPMIXv+ctUv2itqNwIgPJRMIs7uZGeLDejTvjsN3CkwpZKGL4wBijLzn5gEMMM="}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.2.0-beta.3_1574798863707_0.022744123764218527"},"_hasShrinkwrap":false,"deprecated":"New 0.3.x Beta"},"0.2.1-beta.0":{"name":"@vapurrmaid/smorgasbord","version":"0.2.1-beta.0","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MIT","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"bin":{"smorgasbord":"./dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","release":"release-it","release:beta":"release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.14","axios":"^0.19.0","chalk":"^3.0.0","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.9.0","@typescript-eslint/parser":"^2.9.0","cross-env":"^6.0.3","eslint":"^6.7.1","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","jest-mock-console":"^1.0.0","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.2.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"readme":"# Smorgasbord\r\n\r\nSmorgasbord checks the provided endpoint(s) for a variety of served files that\r\nshould not be exposed. The tool was inspired by a post detailing that\r\n[1 in every 600 websites has .git exposed](https://news.ycombinator.com/item?id=9952356).\r\n\r\n> **SECURITY NOTE:** It is generally preferable to favor whitelists over\r\n> blacklists. Furthermore, it is advised to use a build process or a directory\r\n> structure that contains files that will be in the webserver root. Avoid\r\n> serving the entire project root as the webserver root.\r\n\r\n## Usage\r\n\r\nThe tool may be invoked from the command-line. However, it is intended that\r\novertime, the tool may be used with CI/CD, actions and automated workflows.\r\n\r\n### Install Globally\r\n\r\n```bash\r\nnpm install -g @vapurrmaid/smorgasbord\r\n```\r\n\r\n### Install Locally\r\n\r\n```bash\r\nnpm install @vapurrmaid/smorgasbord\r\n```\r\n\r\n## Command Line Interface\r\n\r\n```text\r\nUsage: smorgasbord [options] [command]\r\n\r\nOptions:\r\n -h, --help output usage information\r\n\r\nCommands:\r\n probe Probes uri for vulnerable resources.\r\n```\r\n\r\n### Commands\r\n\r\n#### Probe\r\n\r\n```text\r\nUsage: smorgasbord probe [options] \r\n\r\nProbes uri for vulnerable resources.\r\n\r\nOptions:\r\n -h, --help output usage information\r\n```\r\n\r\n##### Example\r\n\r\n```bash\r\nsmorgasbord probe https://google.com\r\n```\r\n","readmeFilename":"README.md","gitHead":"57b699decccc76016e72f9560bb047eb666b736f","_id":"@vapurrmaid/smorgasbord@0.2.1-beta.0","_nodeVersion":"11.11.0","_npmVersion":"6.12.1","dist":{"integrity":"sha512-smUgCsnQLrLcLl6HMv1XDjofl2PVilnMJkljji55kxQPgEB5Y3m8SiVp5krUAqqLuNUhgznzTR3nBZ6aBERqYw==","shasum":"c17cd5b47349e50a01102a89e40f5455ad01428a","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.2.1-beta.0.tgz","fileCount":31,"unpackedSize":37817,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\nD05s\r\n=r6S0\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIHdEqN0+v+yrkPlu8nRydaPhDDWJrn2tXaOmx87mhQtMAiEA7GlRvO1vaYucAd3B0CKbOchI/qT6TzeuTnh8ZzB8my8="}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.2.1-beta.0_1574807021257_0.2178564352459762"},"_hasShrinkwrap":false,"deprecated":"New 0.3.x Beta"},"0.2.1-beta.1":{"name":"@vapurrmaid/smorgasbord","version":"0.2.1-beta.1","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MIT","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"bin":{"smorgasbord":"./dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","release":"release-it","release:beta":"release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.14","axios":"^0.19.0","chalk":"^3.0.0","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.9.0","@typescript-eslint/parser":"^2.9.0","cross-env":"^6.0.3","eslint":"^6.7.1","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","jest-mock-console":"^1.0.0","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.2.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"gitHead":"212c26a1dcd7bca8b67420c352b92d3fb66ea37a","readme":"# Smorgasbord\r\n\r\nSmorgasbord checks the provided endpoint(s) for a variety of served files that\r\nshould not be exposed. The tool was inspired by a post detailing that\r\n[1 in every 600 websites has .git exposed](https://news.ycombinator.com/item?id=9952356).\r\n\r\n> **SECURITY NOTE:** It is generally preferable to favor whitelists over\r\n> blacklists. Furthermore, it is advised to use a build process or a directory\r\n> structure that contains files that will be in the webserver root. Avoid\r\n> serving the entire project root as the webserver root.\r\n\r\n## Usage\r\n\r\nThe tool may be invoked from the command-line. However, it is intended that\r\novertime, the tool may be used with CI/CD, actions and automated workflows.\r\n\r\n### Install Globally\r\n\r\n```bash\r\nnpm install -g @vapurrmaid/smorgasbord\r\n```\r\n\r\n### Install Locally\r\n\r\n```bash\r\nnpm install @vapurrmaid/smorgasbord\r\n```\r\n\r\n## Command Line Interface\r\n\r\n```text\r\nUsage: smorgasbord [options] [command]\r\n\r\nOptions:\r\n -h, --help output usage information\r\n\r\nCommands:\r\n probe Probes uri for vulnerable resources.\r\n```\r\n\r\n### Commands\r\n\r\n#### Probe\r\n\r\n```text\r\nUsage: smorgasbord probe [options] \r\n\r\nProbes uri for vulnerable resources.\r\n\r\nOptions:\r\n --filters Probe will be conducted for the specified comma-separated filters only.\r\n Filters: docker, git, npm, root\r\n -h, --help output usage information\r\n```\r\n\r\n##### Example\r\n\r\n```bash\r\nsmorgasbord probe https://google.com\r\n```\r\n","readmeFilename":"README.md","_id":"@vapurrmaid/smorgasbord@0.2.1-beta.1","_nodeVersion":"11.11.0","_npmVersion":"6.12.1","dist":{"integrity":"sha512-de8U4PNV0KoimHgxR0kPB41aUPyulQiaWMGEC6AIj1vbAOXAEBRnn+q95FQ0QgyV5uAMi1aNbetIki2/SoUrXQ==","shasum":"bb51e97f8de5279b5a991de71d9539a527e3443f","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.2.1-beta.1.tgz","fileCount":31,"unpackedSize":37969,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\n/BKh\r\n=QK+r\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEQCIB7UW3UUFvb1U8QHESttdgpFmPG2zSRtD158MEvWfSUSAiBpsFFgwtIKzyAnz1JZwdhehldi5lWgyBBUyeusWgcbUQ=="}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.2.1-beta.1_1574808389410_0.5351612584455252"},"_hasShrinkwrap":false,"deprecated":"New 0.3.x Beta"},"0.3.0-beta.0":{"name":"@vapurrmaid/smorgasbord","version":"0.3.0-beta.0","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MIT","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"bin":{"smorgasbord":"./dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","release":"release-it","release:beta":"release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.14","axios":"^0.19.0","chalk":"^3.0.0","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.9.0","@typescript-eslint/parser":"^2.9.0","cross-env":"^6.0.3","eslint":"^6.7.1","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","jest-mock-console":"^1.0.0","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.2.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"gitHead":"a6520470cd2dbbbcb5e93d610a8a20fb23c3b78e","_id":"@vapurrmaid/smorgasbord@0.3.0-beta.0","_nodeVersion":"11.11.0","_npmVersion":"6.12.1","dist":{"integrity":"sha512-1VLR2ZQfYKY3Md6gZ99h6uWcD5bhFmJZWHq4Tsq3v9ThC3p+lr5I8+gDlw3bclugE7DoGoMXfediI9zixZ5jXA==","shasum":"c45c068e0c5d62bbc7731068bfee9a6e1109d3d2","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.3.0-beta.0.tgz","fileCount":35,"unpackedSize":45212,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\ne5r0\r\n=FDnn\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQCa6hGfV1UD/nWFdNMbD+1svEdJprCQVzbRnJQM91h16AIgOFrpDt3xSrh1zBOKcFqDKlStqfftcvijnauvWENBI94="}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.3.0-beta.0_1575661017711_0.3145202485716374"},"_hasShrinkwrap":false,"deprecated":"v0.3.0 released"},"0.3.0-beta.1":{"name":"@vapurrmaid/smorgasbord","version":"0.3.0-beta.1","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MIT","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"bin":{"smorgasbord":"./dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","release":"release-it","release:beta":"release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.14","axios":"^0.19.0","chalk":"^3.0.0","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.9.0","@typescript-eslint/parser":"^2.9.0","cross-env":"^6.0.3","eslint":"^6.7.1","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","jest-mock-console":"^1.0.0","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.2.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"readme":"# Smorgasbord\r\n\r\nSmorgasbord checks the provided endpoint(s) for a variety of served files that\r\nshould not be exposed. The tool was inspired by a post detailing that\r\n[1 in every 600 websites has .git exposed](https://news.ycombinator.com/item?id=9952356).\r\n\r\n> **SECURITY NOTE:** It is generally preferable to favor whitelists over\r\n> blacklists. Furthermore, it is advised to use a build process or a directory\r\n> structure that contains files that will be in the webserver root. Avoid\r\n> serving the entire project root as the webserver root.\r\n\r\n## Usage\r\n\r\nThe tool may be invoked from the command-line. However, it is intended that\r\novertime, the tool may be used with CI/CD, actions and automated workflows.\r\n\r\n### Install Globally\r\n\r\n```bash\r\nnpm install -g @vapurrmaid/smorgasbord\r\n```\r\n\r\n### Install Locally\r\n\r\n```bash\r\nnpm install @vapurrmaid/smorgasbord\r\n```\r\n\r\n## Command Line Interface\r\n\r\n```text\r\nUsage: smorgasbord [options] [command]\r\n\r\nOptions:\r\n -h, --help output usage information\r\n\r\nCommands:\r\n probe Probes uri for vulnerable resources.\r\n```\r\n\r\n### Commands\r\n\r\n#### Probe\r\n\r\n```text\r\nUsage: smorgasbord probe [options] \r\n\r\nProbes uri for vulnerable resources.\r\n\r\nOptions:\r\n --filters Probe will be conducted for the specified comma-separated filters only.\r\n Filters: docker, git, npm, root\r\n -h, --help output usage information\r\n```\r\n\r\n##### Example\r\n\r\n```bash\r\nsmorgasbord probe https://google.com\r\n```\r\n","readmeFilename":"README.md","gitHead":"9dc6bf3d2bc4990c84f127027233aabce95a0c6e","_id":"@vapurrmaid/smorgasbord@0.3.0-beta.1","_nodeVersion":"11.11.0","_npmVersion":"6.12.1","dist":{"integrity":"sha512-twWMdzkSD1kyGHvJ6Z/SVpuayykBt6fO129ErPvCnzFpjEYfOoIHgdnjsyG7Y0pbpbUaWBcljdAo4z7vGnppNA==","shasum":"bf7f9c8eaaa571f65620d58181258b12fa0643fc","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.3.0-beta.1.tgz","fileCount":37,"unpackedSize":45908,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n\r\nwsFcBAEBCAAQBQJd60HlCRA9TVsSAnZWagAAlcoP/A8WiRf75aKtZ40TNBj2\nRAF5ZmiJKGmPiYhckXQa5Xb0Rq8i/7GFKTZaeNJSqxAJjMmTigXJiOmMJhsl\nRRhoxaWup9KHakFw9Kk4jwiJV4myo8D7kr79oao/dH3BdvQQfMNq86SB7gY3\npXbCYTeEb9/ozMBSQUIgts4GzSWyMmQHFFbaGElwAP4QRQoY5C8q36+bpifU\n5KWdLwoBFo0riRIAcSCmk1hpij2hW7wVrnxmyY1mivOh3+ZPjnuR3IfwpPnR\n6lDSNCKj3EjnvgBqfMl5TLHSjZuoCehdS2tFXEAkGpVkY+09bjfEyjrgaBFA\nuSXsdotVuC48KseYmRnYtbU78wDijxLUeZE8M/36QVizxpkPgYUpEH4+/H7S\nmi7cdZKZcLK87w8VRSwc29eLFSWpcENh7eBFU0E6h7jv7/lIIQtLXdWOk6uU\nUUr0/JsaAfonip7x62KhxNnW6Thn5WPXRMdzH9s3oeeXWhId/PbONWohx+Yn\nGRUzS9LOT7QkaiucZjTWKqst+3HpThenid3W6sdN0Dvv28fudQWkFt+uzw1w\nlUrPDZ236xkCQt3Nuut30sraiOJcV0fH1FPT/Jqzb/JrvAk1C8AiaeNokAmC\n4KCfcjv4QW7NLAjTbvfCeTUkKsFInsuIP/pkyzWxxTsH1ndm3OiwfLMFFvhk\nXgcs\r\n=/lze\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEYCIQD1pAZitqJNbAussDqjUaF0bFBY7LcZ+pGb4WmiEBDHXgIhANgcxYIMof7594ZfMy/9xU2OK+pvtJ8+yCpLM7TyLyjd"}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.3.0-beta.1_1575698916928_0.19257881549701517"},"_hasShrinkwrap":false,"deprecated":"v0.3.0 released"},"0.3.0":{"name":"@vapurrmaid/smorgasbord","version":"0.3.0","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MIT","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"bin":{"smorgasbord":"./dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","release":"release-it","release:beta":"release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.14","axios":"^0.19.0","chalk":"^3.0.0","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.9.0","@typescript-eslint/parser":"^2.9.0","cross-env":"^6.0.3","eslint":"^6.7.1","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","jest-mock-console":"^1.0.0","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.2.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"gitHead":"fa7810a1755d97dce07c9da32043b02bb034dd45","_id":"@vapurrmaid/smorgasbord@0.3.0","_nodeVersion":"11.11.0","_npmVersion":"6.12.1","dist":{"integrity":"sha512-YLQhH4zUSu6qh1ohZ0OCpi+OdAex0l8D1C3xf5+WkNI5YdFUzWApCBLTiEOCsPqeUBtgEsk1RzhEhB632Nn7GA==","shasum":"314a64e456bc61c38b6338cf66dae858497b3120","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.3.0.tgz","fileCount":41,"unpackedSize":59650,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n\r\nwsFcBAEBCAAQBQJd7XNACRA9TVsSAnZWagAAWFMP/jJ6t8okHjWB06udW8Db\nGm3dpLgqDF9dYkS1s67k4DzvjIX/GRs5O4ibjf06rx+3Qypt5ZJR+6tkoC8u\nbtyMmbzn5+5MH5EC009B8JlljOkM/JyeDhO+D9bxssOp2laUmgBAGvPkxb9u\nl2f3iiThNE54BAsh94ZokITx79SAH9bAVoCNbp3q6tjLNrK/rD1SmnHveC9+\nBCpB390qbeY3K0pjAzMxEbkwiW0xcoUrSs0U85OGg+a4t2+/vAbQ6awF9C4g\n32ghtqeDb1gew9iuJXSgG1AM0rtReRgcgCjAM4xqhF91MoFF0Ky6AtgWo8WL\nWrVTi/dM4ix80LEcebiWzXzK34SqOZV8icQhPNMIb/1yceqvZwX/VwiddRVU\nr7V7fopdcqq83S/QV+kYfwXp7B/VyLFGeyJi0PCfPvYFWEGWCYAt4PN925vQ\nyd/el801LgwAspLpIYYxFIIYPOtfejDoM86APV7zLZZZSc8pnAfQGoklI7wW\n8uvx+BitkqIHGx3WpP8FKL0hwbYiCVX6YDmRgUHZ5oNF22j6fG41k4cdRvcr\nPV/Ms9da1pt4p8LIddTkT2BJkr1mg2Nj5FTgGBYozllW96UcoIzN+ehARicV\nvjfjTuhozOgGCHIJXDbRcRVYmUEszvacUs1kQdGBVRvaN9OFkRxGIQu/XwH1\nozJl\r\n=uz3Z\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQDQK2ai/6O1fqFc/SO61pRK2stpyNnFkCnr39MM9pSQpAIgXmk5cqLFAEEzMwy5CPzMLkFTWCaWBNaGF9j0d41KPW8="}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.3.0_1575842623880_0.09899676473576147"},"_hasShrinkwrap":false,"deprecated":"Critical fix in 0.4.2"},"0.4.0":{"name":"@vapurrmaid/smorgasbord","version":"0.4.0","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MPL-2.0","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"bin":{"smorgasbord":"./dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","release":"release-it","release:beta":"release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.14","axios":"^0.19.0","chalk":"^3.0.0","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.9.0","@typescript-eslint/parser":"^2.9.0","cross-env":"^6.0.3","eslint":"^6.7.1","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","jest-mock-console":"^1.0.0","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.2.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"gitHead":"4e3f43cb70b7051563721e6cd17b03ffcffab48e","_id":"@vapurrmaid/smorgasbord@0.4.0","_nodeVersion":"11.11.0","_npmVersion":"6.12.1","dist":{"integrity":"sha512-eSdfwUL6McjakfmRkS/OOJ5D9kkcchKwhGX69ZOa7l5+m3lmNPj5ahyPRZlrNG7TSUU9XUHqxI4o9CFlKjxJSA==","shasum":"c52984eb91591a1bd952ef03c10eedb96dd7dcc5","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.4.0.tgz","fileCount":43,"unpackedSize":108135,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\nVYEX\r\n=d/89\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIHlWW3ZKJ+QBuMW2nKR1aVx5z8CBLkJSQtHuaNTXFFjcAiEA3d8JeNCoaa5WSjshxCKB4cR3PPzhsBEGZqLY6dBmzJY="}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.4.0_1575849077812_0.4237439012493138"},"_hasShrinkwrap":false,"deprecated":"Critical fix in 0.4.2"},"0.5.0-beta.0":{"name":"@vapurrmaid/smorgasbord","version":"0.5.0-beta.0","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MPL-2.0","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"main":"./dist/main.js","bin":{"smorgasbord":"./dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","release":"release-it","release:beta":"release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.14","axios":"^0.19.0","chalk":"^3.0.0","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.9.0","@typescript-eslint/parser":"^2.9.0","cross-env":"^6.0.3","eslint":"^6.7.1","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","jest-mock-console":"^1.0.0","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.2.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"gitHead":"428e53438af521ef0fcd73bdd5e5c3206adb1562","readme":"# Smorgasbord\r\n\r\nSmorgasbord checks the provided endpoint(s) for a variety of served files that\r\nshould not be exposed. The tool was inspired by a post detailing that\r\n[1 in every 600 websites has .git exposed](https://news.ycombinator.com/item?id=9952356).\r\n\r\n> **SECURITY NOTE:** It is generally preferable to favor whitelists over\r\n> blacklists. Furthermore, it is advised to use a build process or a directory\r\n> structure that contains files that will be in the webserver root. Avoid\r\n> serving the entire project root as the webserver root.\r\n\r\n## Usage\r\n\r\nThe tool may be invoked from the command-line. However, it is intended that\r\novertime, the tool may be used with CI/CD, actions and automated workflows.\r\n\r\n### Install Globally\r\n\r\n```bash\r\nnpm install -g @vapurrmaid/smorgasbord\r\n```\r\n\r\n### Install Locally\r\n\r\n```bash\r\nnpm install @vapurrmaid/smorgasbord\r\n```\r\n\r\n## Command Line Interface\r\n\r\n```text\r\nUsage: smorgasbord [options] [command]\r\n\r\nOptions:\r\n -h, --help output usage information\r\n\r\nCommands:\r\n probe Probes uri for vulnerable resources.\r\n```\r\n\r\n### Commands\r\n\r\n#### Probe\r\n\r\n```text\r\nUsage: smorgasbord probe [options] \r\n\r\nProbes uri for vulnerable resources.\r\n\r\nOptions:\r\n -c, --config Provide a configuration for a customized probe.\r\n The arg should be a path to a JSON file.\r\n --config-only Probe will be conducted for the specified --config only.\r\n If a --config is not specified, the probe will not be conducted.\r\n -f, --filters Probe will be conducted for the specified comma-separated filters only.\r\n Filters: docker, git, npm, root\r\n -v, --verbosity Set the log level.\r\n Levels: none|0, error|1, warn|2, info|3, verbose|4 (default: \"info\")\r\n -h, --help output usage information\r\n```\r\n\r\n##### Example\r\n\r\n```bash\r\nsmorgasbord probe https://google.com\r\n```\r\n","readmeFilename":"README.md","_id":"@vapurrmaid/smorgasbord@0.5.0-beta.0","_nodeVersion":"11.11.0","_npmVersion":"6.12.1","dist":{"integrity":"sha512-Q459g8jadsg4Bdp0iwfDQa9xCyzVbk7Z4pOsW+UJ9lLwgHpkHNW/WKRyAuXdF0EN5idRE9ElKXPvRzBjF2hwHw==","shasum":"717378dc95e71fcfa588aa90e7dfcb53778de5a0","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.5.0-beta.0.tgz","fileCount":45,"unpackedSize":109732,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\nbFKt\r\n=r9e4\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQCkArzsubcWx0uggxdyOXpkZ+Vn3mou3moToNxf6/s+mQIgBg+MePOG7tD72AWgrXcQqoNxrztzOrnY4aE/8Tr4Nq4="}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.5.0-beta.0_1575850938700_0.6403977054240657"},"_hasShrinkwrap":false,"deprecated":"0.5.0 released"},"0.4.1":{"name":"@vapurrmaid/smorgasbord","version":"0.4.1","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MPL-2.0","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"bin":{"smorgasbord":"./dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","release":"release-it","release:beta":"release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.14","axios":"^0.19.0","chalk":"^3.0.0","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.9.0","@typescript-eslint/parser":"^2.9.0","cross-env":"^6.0.3","eslint":"^6.7.1","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","jest-mock-console":"^1.0.0","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.2.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"gitHead":"d07d76374ff6b51bed1a5bb8ebdb03ab167082f1","_id":"@vapurrmaid/smorgasbord@0.4.1","_nodeVersion":"11.11.0","_npmVersion":"6.12.1","dist":{"integrity":"sha512-o3Z94GnXLPq10d/hu10xdYxQf7XAeG473OoxFzY2wbafyHE2xlawqAkHzgwSmX3OaRCyhjOzMXuTd7VYR8Sy0A==","shasum":"5abc3eea03b08717bb0c9c9cf8f53947a3fd22b3","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.4.1.tgz","fileCount":43,"unpackedSize":108135,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n\r\nwsFcBAEBCAAQBQJd7weMCRA9TVsSAnZWagAAnq4QAJ74Brz+shQLVpuaEWi7\n+F+JFU9doveCflce63cOgtDEx9kYduRjV2ljStyEUVdCtMVWm4Jux3AiD+lZ\nFwZzCZJylNO5DewfBB83dqyHL1fYfi2hLH2s6bVFKXLcDr39uP3q+oH72JLL\n5KqFynxlsRZac7nQq7w3YysGUv+h8g6FaUsmQ8uy3GTEysVwllCJ1ySAYXjq\nDD1Y6T6VC2uj76+HOlC0SDtF0FcehKalq1nZ+XlR3+kGA2U3x5rXjatJybvv\nuJmPolHVgOOur55Hi/KYRLFAzGOclAHxqKwGklcXf+BSKicJm671ifYRCAAt\n4GEuQASbeddKcJCQ7ChKLt1Ju2kweXqO8jdrzbd4hc6fldSlEi7Vak3DNrlf\n8/tw51O7ww10e9Ca/0D8ndofQ4bPPrhHrTyF/MDFssplLLhIMAfJpD7krXE9\n2zsAt3GOW8XhuYUhEnAPsDA1xZIOCTrhQFEMRPzqpfp5QtKWL7JUVpxuSuQF\ncpOJuNrZv+3Ce4ZB/Kab3rZY+hM9V1MqZIXtUHMO6MUfyy0FTVVBgpVoyfGP\nV1D0Ve8ijfXysicplfOQgkmrJJzMmwK/KEoO2Ro5sg3eDn+UEGTJqDDHnGoQ\nWHkC8Mp6+zmpPOKeVjmhfdPuQwCaKpCLmxWoDdEUPD3xkyjyhRXyGHvIYlqW\nXFOg\r\n=C8Js\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQDWZFl+annubY3iReBv75GTaFXwSZVLXpLK5XU+YTFRJQIgXC5LTp2yo2ma7a4/yGTyUCpm/o4Qq8EK7FZPyoLgr2k="}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.4.1_1575946124484_0.48177254029078753"},"_hasShrinkwrap":false,"deprecated":"Critical fix in 0.4.2"},"0.5.0-beta.1":{"name":"@vapurrmaid/smorgasbord","version":"0.5.0-beta.1","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MPL-2.0","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"main":"./dist/main.js","bin":{"smorgasbord":"./dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","release":"release-it","release:beta":"release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.14","axios":"^0.19.0","chalk":"^3.0.0","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.9.0","@typescript-eslint/parser":"^2.9.0","cross-env":"^6.0.3","eslint":"^6.7.1","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","jest-mock-console":"^1.0.0","jest-mock-process":"^1.2.0","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.2.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"gitHead":"4152df5660b3bf6f4920aab6b77f95802c2742b7","readme":"# Smorgasbord\r\n\r\nSmorgasbord checks the provided endpoint(s) for a variety of served files that\r\nshould not be exposed. The tool was inspired by a post detailing that\r\n[1 in every 600 websites has .git exposed](https://news.ycombinator.com/item?id=9952356).\r\n\r\n> **SECURITY NOTE:** It is generally preferable to favor whitelists over\r\n> blacklists. Furthermore, it is advised to use a build process or a directory\r\n> structure that contains files that will be in the webserver root. Avoid\r\n> serving the entire project root as the webserver root.\r\n\r\n## Usage\r\n\r\nThe tool may be invoked from the command-line. However, it is intended that\r\novertime, the tool may be used with CI/CD, actions and automated workflows.\r\n\r\n### Install Globally\r\n\r\n```bash\r\nnpm install -g @vapurrmaid/smorgasbord\r\n```\r\n\r\n### Install Locally\r\n\r\n```bash\r\nnpm install @vapurrmaid/smorgasbord\r\n```\r\n\r\n## Command Line Interface\r\n\r\n```text\r\nUsage: smorgasbord [options] [command]\r\n\r\nOptions:\r\n -h, --help output usage information\r\n\r\nCommands:\r\n probe Probes uri for vulnerable resources.\r\n```\r\n\r\n### Commands\r\n\r\n#### Probe\r\n\r\n```text\r\nUsage: smorgasbord probe [options] \r\n\r\nProbes uri for vulnerable resources.\r\n\r\nOptions:\r\n -c, --config Provide a configuration for a customized probe.\r\n The arg should be a path to a JSON file.\r\n --config-only Probe will be conducted for the specified --config only.\r\n If a --config is not specified, the probe will not be conducted.\r\n -f, --filters Probe will be conducted for the specified comma-separated filters only.\r\n Filters: docker, git, npm, root\r\n -v, --verbosity Set the log level.\r\n Levels: none|0, error|1, warn|2, info|3, verbose|4 (default: \"info\")\r\n -h, --help output usage information\r\n```\r\n\r\n##### Example\r\n\r\n```bash\r\nsmorgasbord probe https://google.com\r\n```\r\n","readmeFilename":"README.md","_id":"@vapurrmaid/smorgasbord@0.5.0-beta.1","_nodeVersion":"11.11.0","_npmVersion":"6.12.1","dist":{"integrity":"sha512-AFMybY3IdLwCbZOi2YuHGhyUjCDH5gXT2HZqN/3fs+NL8Z1s+YB6pK6vzHdr/6kdSu/KxfDtfu7QDk+Va7KsQg==","shasum":"2d67aa629b7453e8f446a45e535d9a53f0790383","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.5.0-beta.1.tgz","fileCount":98,"unpackedSize":138285,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\nQ+FA\r\n=mywZ\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQCfWaZ3lH/aEXUczqLiHQ0Pu+RanxgjPjEyOxtc3mQplAIgdsd5t8QGAPT8t3udxwyy11aZyicvjNp+Sf9GjyOayKw="}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.5.0-beta.1_1576289933657_0.9664310223736046"},"_hasShrinkwrap":false,"deprecated":"0.5.0 released"},"0.5.0":{"name":"@vapurrmaid/smorgasbord","version":"0.5.0","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MPL-2.0","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"main":"./dist/main.js","bin":{"smorgasbord":"./dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","release":"release-it","release:beta":"release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.14","axios":"^0.19.0","chalk":"^3.0.0","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.9.0","@typescript-eslint/parser":"^2.9.0","cross-env":"^6.0.3","eslint":"^6.7.1","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","jest-mock-console":"^1.0.0","jest-mock-process":"^1.2.0","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.2.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"gitHead":"0135e4ccac31bf5bb9a026a0b766e052ba5d10cd","_id":"@vapurrmaid/smorgasbord@0.5.0","_nodeVersion":"11.11.0","_npmVersion":"6.12.1","dist":{"integrity":"sha512-1tig5dt7kAwFsGSwV15vw95M3vRIa8NSIIwb5fs3dpEvLFWY7tysh0XE07ku4IYoP5OGhcrtjDRTfGKDUSpVlw==","shasum":"27f072bb4170ed641bd4bae0fb2f0a7a36271662","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.5.0.tgz","fileCount":98,"unpackedSize":138271,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\ngPXs\r\n=8BOM\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIGBJ1QUD/P6HMQwDHvbBJ0RnGiqrH2B0b3TYqExaD7ufAiEAgiwsgW+LYwtxG/6RZqDILmT3JtrtcZZ47v0kPMW25Ic="}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.5.0_1576291261006_0.007460894380866279"},"_hasShrinkwrap":false,"deprecated":"Critical fix in 0.5.1 that was causing all resources to appear vulnerable"},"0.4.2":{"name":"@vapurrmaid/smorgasbord","version":"0.4.2","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MPL-2.0","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"bin":{"smorgasbord":"./dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","release":"release-it","release:beta":"release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.14","axios":"^0.19.0","chalk":"^3.0.0","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.9.0","@typescript-eslint/parser":"^2.9.0","cross-env":"^6.0.3","eslint":"^6.7.1","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","jest-mock-console":"^1.0.0","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.2.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"gitHead":"24d7aa54c16aed7cfbe07373998ba6999e594456","_id":"@vapurrmaid/smorgasbord@0.4.2","_nodeVersion":"11.11.0","_npmVersion":"6.12.1","dist":{"integrity":"sha512-ciLKAYv/jKJGj6Cnpv2Zx/AQrm6XaPSOczE20+6iucjtbxaiY7ANfZkUsBA16OnqoSpjfLXdU6CA7oGv+tyK8g==","shasum":"a7ab88b0e1882f283f5ef48037231f4ba477042e","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.4.2.tgz","fileCount":43,"unpackedSize":108115,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\nzs42\r\n=YeYd\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEQCICiiURY2vH8tSSlMaXkphZxRiNVMcUyCKFoCMchaUHVTAiBfKGRUTQ/6nE5zknt+952YccuB5bpeM1I7UXcC0Nanow=="}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.4.2_1576629001364_0.8613136827817405"},"_hasShrinkwrap":false},"0.5.1":{"name":"@vapurrmaid/smorgasbord","version":"0.5.1","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MPL-2.0","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"main":"./dist/main.js","bin":{"smorgasbord":"./dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","release":"release-it","release:beta":"release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.14","axios":"^0.19.0","chalk":"^3.0.0","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.9.0","@typescript-eslint/parser":"^2.9.0","cross-env":"^6.0.3","eslint":"^6.7.1","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","jest-mock-console":"^1.0.0","jest-mock-process":"^1.2.0","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.2.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"gitHead":"0e3529cc5c862c2f120a4a5476ed152c43105f2b","_id":"@vapurrmaid/smorgasbord@0.5.1","_nodeVersion":"11.11.0","_npmVersion":"6.12.1","dist":{"integrity":"sha512-GUUW/toCAEIpMynu1RbsXfbBSmRThu4YjDjq06jeclXyhkymSYwEMA5K9EDu1XqcApWI13rtbNrm8ycrVBSwkQ==","shasum":"a264aa9fe7e82ff7994bb1d3663f4584e73f4850","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.5.1.tgz","fileCount":98,"unpackedSize":138251,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\nYbLW\r\n=SeDn\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIHhd4HUOv23gRMqclV7NiA00/4IBQ+zwYoLKtmNX/yz4AiEAvK93XhHKQEMIaY1sZWSHAKerM9Gwx1iTepZYFJ1In6k="}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.5.1_1576629063284_0.07401894639527917"},"_hasShrinkwrap":false},"0.6.0-beta.0":{"name":"@vapurrmaid/smorgasbord","version":"0.6.0-beta.0","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MPL-2.0","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"main":"./dist/main.js","bin":{"smorgasbord":"dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","release":"release-it","release:beta":"release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.14","axios":"^0.19.0","chalk":"^3.0.0","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.9.0","@typescript-eslint/parser":"^2.9.0","cross-env":"^6.0.3","eslint":"^6.7.1","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.18.2","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.1.2","jest-mock-console":"^1.0.0","jest-mock-process":"^1.2.0","lint-staged":"^9.4.2","markdownlint-cli":"^0.19.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.2.0","ts-node":"^8.4.1","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.2"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"readme":"# Smorgasbord\r\n\r\nSmorgasbord checks the provided endpoint(s) for a variety of served files that\r\nshould not be exposed. The tool was inspired by a post detailing that\r\n[1 in every 600 websites has .git exposed](https://news.ycombinator.com/item?id=9952356).\r\n\r\n> **SECURITY NOTE:** It is generally preferable to favor whitelists over\r\n> blacklists. Furthermore, it is advised to use a build process or a directory\r\n> structure that contains files that will be in the webserver root. Avoid\r\n> serving the entire project root as the webserver root.\r\n\r\n## Usage\r\n\r\nThe tool may be invoked from the command-line. However, it is intended that\r\novertime, the tool may be used with CI/CD, actions and automated workflows.\r\n\r\n### Install Globally\r\n\r\n```bash\r\nnpm install -g @vapurrmaid/smorgasbord\r\n```\r\n\r\n### Install Locally\r\n\r\n```bash\r\nnpm install @vapurrmaid/smorgasbord\r\n```\r\n\r\n## Command Line Interface\r\n\r\n```text\r\nUsage: smorgasbord [options] [command]\r\n\r\nOptions:\r\n -h, --help output usage information\r\n\r\nCommands:\r\n probe Probes uri for vulnerable resources.\r\n```\r\n\r\n### Commands\r\n\r\n#### Probe\r\n\r\n```text\r\nUsage: smorgasbord probe [options] \r\n\r\nProbes uri for vulnerable resources.\r\n\r\nOptions:\r\n -c, --config Provide a configuration for a customized probe.\r\n The arg should be a path to a JSON file.\r\n --config-only Probe will be conducted for the specified --config only.\r\n If a --config is not specified, the probe will not be conducted.\r\n -f, --filters Probe will be conducted for the specified comma-separated filters only.\r\n Filters: docker, git, npm, root\r\n -v, --verbosity Set the log level.\r\n Levels: none|0, error|1, warn|2, info|3, verbose|4 (default: \"info\")\r\n -h, --help output usage information\r\n```\r\n\r\n##### Example\r\n\r\n```bash\r\nsmorgasbord probe https://google.com\r\n```\r\n","readmeFilename":"README.md","gitHead":"27bdf4c94ffffaf7a7db00bf016bb1c0abfc67b6","_id":"@vapurrmaid/smorgasbord@0.6.0-beta.0","_nodeVersion":"13.3.0","_npmVersion":"6.13.4","dist":{"integrity":"sha512-w4aDwzLPeMKGf+ynkVZigknh1duySQ7zF/esBc9N9kg69SY5278FA5WI/kayTdQLxm2V7Za3NfqGA1YBictuHg==","shasum":"942ed4a916317c2ce48fb62409d3b58cf7b67a68","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.6.0-beta.0.tgz","fileCount":98,"unpackedSize":140170,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\n9mJ7\r\n=NNAK\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEYCIQCyC5SNxOS332VX2t1JLyMoILxV833vbC479EM1ImHxigIhAM6nEXdLOXKjuCm7C4Pl0JBXalAMKSmSVH1ASfU6xsV+"}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.6.0-beta.0_1576633489246_0.28246915309569953"},"_hasShrinkwrap":false},"0.6.0-beta.1":{"name":"@vapurrmaid/smorgasbord","version":"0.6.0-beta.1","description":"Smorgasbord checks for a variety of served files that should not be exposed.","keywords":["audit","probe","scan","security","vulnerabilities"],"homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MPL-2.0","author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"main":"./dist/main.js","bin":{"smorgasbord":"dist/cli-main.js"},"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"scripts":{"build":"tsc -p .","build:clean":"npm run clean && npm run build","clean":"npm run clean:build && npm run clean:jest","clean:build":"rimraf dist","clean:jest":"jest --clearCache && rimraf coverage","lint":"npm run lint:js && npm run lint:md","lint:js":"eslint . --color --ext .ts src","lint:md":"markdownlint --ignore \"**/node_modules/**\" .","release":"release-it","release:beta":"release-it --preRelease=beta","test:docker:version":"cross-env ./scripts/docker/run-test-version.sh","test:jest":"jest","test:jest:coverage":"npm run clean:jest && jest --colors --coverage","test:jest:watch":"jest --watch","test:local":"npm run build:clean && ts-node ./src/cli-main.ts","version":"cross-env ./scripts/update-version.sh"},"dependencies":{"@types/clear":"^0.1.0","@types/cli-table":"^0.3.0","@types/node":"^12.12.20","axios":"^0.19.0","chalk":"^3.0.0","clear":"^0.1.0","cli-table":"^0.3.1","commander":"^4.0.0","http-status-codes":"^1.4.0","uri-js":"^4.2.2"},"devDependencies":{"@types/jest":"^24.0.22","@typescript-eslint/eslint-plugin":"^2.12.0","@typescript-eslint/parser":"^2.12.0","cross-env":"^6.0.3","eslint":"^6.7.2","eslint-config-airbnb-base":"^14.0.0","eslint-plugin-import":"^2.19.1","husky":"^3.0.9","jest":"^24.9.0","jest-mock-axios":"^3.2.0","jest-mock-console":"^1.0.0","jest-mock-process":"^1.2.0","lint-staged":"^9.5.0","markdownlint-cli":"^0.20.0","release-it":"^12.4.3","rimraf":"^3.0.0","ts-jest":"^24.2.0","ts-node":"^8.5.4","ts-node-dev":"^1.0.0-pre.44","typescript":"^3.7.3"},"engines":{"node":">=8.16.2"},"husky":{"hooks":{"pre-commit":"lint-staged","pre-push":"npm audit"}},"lint-staged":{"*.{js,ts}":["eslint --fix","git add"]},"gitHead":"a9fbeb4aefb4c16c3b271937b8376888a8b3ea0c","readme":"# Smorgasbord\r\n\r\nSmorgasbord checks the provided endpoint(s) for a variety of served files that\r\nshould not be exposed. The tool was inspired by a post detailing that\r\n[1 in every 600 websites has .git exposed](https://news.ycombinator.com/item?id=9952356).\r\n\r\n> **SECURITY NOTE:** It is generally preferable to favor whitelists over\r\n> blacklists. Furthermore, it is advised to use a build process or a directory\r\n> structure that contains files that will be in the webserver root. Avoid\r\n> serving the entire project root as the webserver root.\r\n\r\n## Usage\r\n\r\nThe tool may be invoked from the command-line. However, it is intended that\r\novertime, the tool may be used with CI/CD, actions and automated workflows.\r\n\r\n### Install Globally\r\n\r\n```bash\r\nnpm install -g @vapurrmaid/smorgasbord\r\n```\r\n\r\n### Install Locally\r\n\r\n```bash\r\nnpm install @vapurrmaid/smorgasbord\r\n```\r\n\r\n## Command Line Interface\r\n\r\n```text\r\nUsage: smorgasbord [options] [command]\r\n\r\nOptions:\r\n -h, --help output usage information\r\n\r\nCommands:\r\n probe Probes uri for vulnerable resources.\r\n```\r\n\r\n### Commands\r\n\r\n#### Probe\r\n\r\n```text\r\nUsage: smorgasbord probe [options] \r\n\r\nProbes uri for vulnerable resources.\r\n\r\nOptions:\r\n -c, --config Provide a configuration for a customized probe.\r\n The arg should be a path to a JSON file.\r\n --config-only Probe will be conducted for the specified --config only.\r\n If a --config is not specified, the probe will not be conducted.\r\n --dry-run Outputs all endpoints that would be probed without probing them.\r\n -f, --filters Probe will be conducted for the specified comma-separated filters only.\r\n Filters: docker, git, npm, root\r\n -v, --verbosity Set the log level.\r\n Levels: none|0, error|1, warn|2, info|3, verbose|4 (default: \"info\")\r\n -h, --help output usage information\r\n```\r\n\r\n##### Example\r\n\r\n```bash\r\nsmorgasbord probe https://google.com\r\n```\r\n","readmeFilename":"README.md","_id":"@vapurrmaid/smorgasbord@0.6.0-beta.1","_nodeVersion":"13.3.0","_npmVersion":"6.13.4","dist":{"integrity":"sha512-zKAfzXAaZ3v37GlAz0purB1tsIqTChFEavyDwgUNaIUw8OtDQl/6grNh1mb4HXXF99/128Cw/EL3VSG2oZuF+w==","shasum":"0186da8b5049dc057040facc51cb716ad7cc3ed1","tarball":"https://registry.npmjs.org/@vapurrmaid/smorgasbord/-/smorgasbord-0.6.0-beta.1.tgz","fileCount":98,"unpackedSize":140265,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\n6wja\r\n=8fSw\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEQCIAkYpn9//P/Eg3qygf9bzFKp+V7ymogS7sNi/iV32ufvAiAxecEACLq9T2EQkIDgH8utbOBytrVtwWvGOkcCCdNXRg=="}]},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"_npmUser":{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/smorgasbord_0.6.0-beta.1_1576645507892_0.26148975088105386"},"_hasShrinkwrap":false}},"time":{"created":"2019-11-24T02:08:14.402Z","0.1.0-beta.1":"2019-11-24T02:08:14.878Z","modified":"2022-04-07T10:17:25.521Z","0.1.0-beta.2":"2019-11-24T05:08:04.023Z","0.1.0-beta.3":"2019-11-24T05:21:50.331Z","0.1.0-beta.4":"2019-11-24T17:30:16.582Z","0.1.0-beta.5":"2019-11-25T01:00:34.130Z","0.2.0-beta.0":"2019-11-26T02:47:37.403Z","0.2.0-beta.1":"2019-11-26T05:18:15.136Z","0.2.0-beta.2":"2019-11-26T15:00:09.725Z","0.2.0-beta.3":"2019-11-26T20:07:43.883Z","0.2.1-beta.0":"2019-11-26T22:23:41.419Z","0.2.1-beta.1":"2019-11-26T22:46:29.577Z","0.3.0-beta.0":"2019-12-06T19:36:57.948Z","0.3.0-beta.1":"2019-12-07T06:08:37.123Z","0.3.0":"2019-12-08T22:03:44.192Z","0.4.0":"2019-12-08T23:51:17.920Z","0.5.0-beta.0":"2019-12-09T00:22:18.956Z","0.4.1":"2019-12-10T02:48:44.612Z","0.5.0-beta.1":"2019-12-14T02:18:53.840Z","0.5.0":"2019-12-14T02:41:01.230Z","0.4.2":"2019-12-18T00:30:01.525Z","0.5.1":"2019-12-18T00:31:03.486Z","0.6.0-beta.0":"2019-12-18T01:44:49.365Z","0.6.0-beta.1":"2019-12-18T05:05:08.090Z"},"maintainers":[{"name":"vapurrmaid","email":"vapurrmaid@gmail.com"}],"description":"Smorgasbord checks for a variety of served files that should not be exposed.","homepage":"httpshttps://github.com/vapurrmaid/smorgasbord","keywords":["audit","probe","scan","security","vulnerabilities"],"repository":{"type":"git","url":"git+https://github.com/vapurrmaid/smorgasbord.git"},"author":{"name":"Gregory","email":"vapurrmaid@pm.me","url":"Grey"},"bugs":{"url":"https://github.com/vapurrmaid/smorgasbord/issues","email":"vapurrmaid@pm.me"},"license":"MPL-2.0","readme":"","readmeFilename":""}