{"_id":"cognium","_rev":"39-f4d07d12f45fcf0a01584d525a82c903","name":"cognium","dist-tags":{"latest":"1.8.3"},"versions":{"0.0.1":{"name":"cognium","version":"0.0.1","_id":"cognium@0.0.1","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"bin":{"cognium":"index.js"},"dist":{"shasum":"436614ed46f48a9cdcc84908d04560c3b0d9eced","tarball":"https://registry.npmjs.org/cognium/-/cognium-0.0.1.tgz","fileCount":2,"integrity":"sha512-bdmUdpbQIOgpkZpharvNqPEAYfeyjFXNxLYGCO2rSTIpR+kCNtPTMifK7oJZc+Yzchm830KKIZv55w2nCRZU0Q==","signatures":[{"sig":"MEUCIQCTs56HRteiya5cwgFfF8uVc0hxhkHDBzvedPCs6mgLdAIgeadPKJjRfvckqaQEBqlDs1cFHu79FwPYbdVOc8NeFjc=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":229},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"_npmVersion":"10.8.1","description":"Neuro-symbolic static analysis platform","directories":{},"_nodeVersion":"20.16.0","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/cognium_0.0.1_1770794903218_0.9050618052952302","host":"s3://npm-registry-packages-npm-production"}},"1.0.0":{"name":"cognium","version":"1.0.0","keywords":["security","sast","static-analysis","vulnerability","cli","ai","llm","taint-analysis","code-security","devops","devsecops"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.0.0","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"a402a7c0d1bba91b52fe90b8825db0e8a59741e1","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.0.0.tgz","fileCount":4,"integrity":"sha512-/Dml3EeGZ+6NQjDOtTiOFdMJpbVjjlyWSUEqPPZZieB1FPM1BTtotIO9OJhyIxqaubHX6yqm/+R1pnZjRcYlOw==","signatures":[{"sig":"MEUCIQDfroQhc6s9dY9ErIERYsIOmCm/y2kr6b31XnJxbkiL1AIgC6vW3ONmCqgbhmGIknYyppiTnuZ+acQdjHuuZvTjeTQ=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":906071},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"bun build src/cli.ts --compile --outfile cognium"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"10.8.1","description":"AI-powered static analysis CLI for detecting security vulnerabilities","directories":{},"_nodeVersion":"20.16.0","dependencies":{"ora":"^8.0.0","chalk":"^5.4.0","circle-ir":"^3.1.0","commander":"^13.0.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.2.0","typescript":"^5.7.0","@types/node":"^22.0.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.0.0_1770805918892_0.6123970724957319","host":"s3://npm-registry-packages-npm-production"}},"1.0.4":{"name":"cognium","version":"1.0.4","keywords":["security","sast","static-analysis","vulnerability","cli","ai","llm","taint-analysis","code-security","devops","devsecops"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.0.4","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"ec089052beea2284dc766cba9ec86aeca2d8e477","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.0.4.tgz","fileCount":4,"integrity":"sha512-BolpBC3kGay1UvYL1wCyh6QJwlzwRSCRjpNchNJD5mFYFf/N7DUqP4I5Ihutayrgi9fKAvlc6SAuGycaXg9bzA==","signatures":[{"sig":"MEQCIE4Zo/sHu3imC8U222Jbg5hVx7mF+lE14ic2o/gjmwTeAiBqQB2g3rYEviR1jLbKgLsQtEsn4A5WqEN0TOiS73hIpw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":908436},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"45b3e6e3fdcc2a56ecc717b4d3b2aa224a0a132c","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.8.0","description":"AI-powered static analysis CLI for detecting security vulnerabilities","directories":{},"_nodeVersion":"24.13.1","dependencies":{"ora":"^8.0.0","chalk":"^5.4.0","circle-ir":"^3.1.1","commander":"^13.0.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.2.0","typescript":"^5.7.0","@types/node":"^22.0.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.0.4_1771377814945_0.9718734852028834","host":"s3://npm-registry-packages-npm-production"}},"1.0.5":{"name":"cognium","version":"1.0.5","keywords":["security","sast","static-analysis","vulnerability","cli","ai","llm","taint-analysis","code-security","devops","devsecops"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.0.5","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"bafedfbec3e0b673037305c1a34c37ab07d6779d","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.0.5.tgz","fileCount":4,"integrity":"sha512-7Qfqiv2syECaF6asLW2kW2DSguKoFcQZupJK36xgRNC43CjWhdqdZl2gK3pA6XqX4uiaZ1hXHhf5BRTdZg6O3g==","signatures":[{"sig":"MEQCIBxmQN/VVQOW5LC53+sl/tMrENtlKI+ijTXaRNsz6yCQAiA0UrDT/y3PCo4zpe1P6ynq780Tfnr8rxd6+AZN+i5Fig==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":923448},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"e5d4e62f4a74c84d4b4a3a5f03ccdf9df3a1bf99","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.8.0","description":"AI-powered static analysis CLI for detecting security vulnerabilities","directories":{},"_nodeVersion":"24.13.1","dependencies":{"ora":"^8.0.0","chalk":"^5.4.0","circle-ir":"3.2.0","commander":"^13.0.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.2.0","typescript":"^5.7.0","@types/node":"^22.0.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.0.5_1771479494592_0.6066510024612954","host":"s3://npm-registry-packages-npm-production"}},"1.0.6":{"name":"cognium","version":"1.0.6","keywords":["security","sast","static-analysis","vulnerability","cli","ai","llm","taint-analysis","code-security","devops","devsecops"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.0.6","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"11574490cd83830cce48526815d527951443213f","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.0.6.tgz","fileCount":4,"integrity":"sha512-4vTisqFsG/+TpIz4axu0VIDmnkQtg6pPMa4bU7FdQHhaU4Wcn0yP+pc8dTpifwrRbJ/KTKHEXFRp4aQkCeU/Xw==","signatures":[{"sig":"MEQCIBZXVOaclg0CIQgnmZ52FA8UJ08bF4wJRt+g33bjPOvzAiApyM8TZn/V7WoyOTOVspoo+FbijdL5HwbVn/Gx5fH9uA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":663560},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"23bdf9be52a418ad37ca8e87578f243f1be58202","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.8.0","description":"AI-powered static analysis CLI for detecting security vulnerabilities","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.8.3"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.2.0","typescript":"^5.7.0","@types/node":"^22.0.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.0.6_1773785547061_0.7897429474580842","host":"s3://npm-registry-packages-npm-production"}},"1.0.8":{"name":"cognium","version":"1.0.8","keywords":["security","sast","static-analysis","vulnerability","cli","ai","llm","taint-analysis","code-security","devops","devsecops"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.0.8","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"231d6485ae534601f08e8025e1307e371c8fa450","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.0.8.tgz","fileCount":4,"integrity":"sha512-VW6RTAJIrK0hIdo3Vw6sGEcsFZuUaBzFn1sgcAjKHgjCCBQJR2NZhPoQPpaymKqXzhZPVXfOWwjJpAzMPMQudQ==","signatures":[{"sig":"MEQCIEkxU4IGAJbHqEjFhyhdE1KKN5v1MkyLjysjzdGu6ydBAiAo5KDIux9TQsjnh5Lu0HQuA8lOrejQ0WPNWvBI5XWNKw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":663649},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"ba147836130b73a4c392b6e765dc6a43f96b65a6","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.8.0","description":"AI-powered static analysis CLI for detecting security vulnerabilities","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.8.3"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.2.0","typescript":"^5.7.0","@types/node":"^22.0.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.0.8_1773786121025_0.7209920860537833","host":"s3://npm-registry-packages-npm-production"}},"1.0.9":{"name":"cognium","version":"1.0.9","keywords":["security","sast","static-analysis","vulnerability","cli","ai","llm","taint-analysis","code-security","devops","devsecops"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.0.9","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"40d0eceabcf12a32c55685398cd3d7065d226ea4","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.0.9.tgz","fileCount":4,"integrity":"sha512-MTkrIZ7kPo5/OhHYUqWOFyF5WjIO8mKpIk6cdDq5eHV1IvwD/PxWPeTK9McWMByJ+lAhjApnFrfJv2/fquJ2Mw==","signatures":[{"sig":"MEUCIQC3O5njbfoJsi6xWioIb0ON0AGqTuZkfdkuq99kUSLCTAIgA1+tzegNjdMIAek1rz60z9Ht2QCTdym6sSa8nk7rem8=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":664588},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"c4533cec74874ec4bcd01a96a38ce11885f0a68d","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.8.0","description":"AI-powered static analysis CLI for detecting security vulnerabilities","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.8.3"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.2.0","typescript":"^5.7.0","@types/node":"^22.0.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.0.9_1773786666372_0.3432940867911265","host":"s3://npm-registry-packages-npm-production"}},"1.2.1":{"name":"cognium","version":"1.2.1","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.2.1","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"5193dd79534d1e1bf09638c34c58b887a4947444","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.2.1.tgz","fileCount":4,"integrity":"sha512-azCPVDEpXI7+ECSQukjspZoG1226MYVyLCgjeiWgan22BtBGDHjXR3qG1gs0359mHB8mV+RqLpNMynI8rQfZCA==","signatures":[{"sig":"MEUCIF20TbnAXN0ZGgLP9BX9aNm8BUg48844+wkKfjzDTnkNAiEAqFygVEIO1n9BB+/u9QmOFCfGx4CJhz78qF1PpZmOU74=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":789652},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"c5fa9d02ae27597df3552a8726588fa0924c8ba8","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.8.0","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.9.7"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.2.0","typescript":"^5.7.0","@types/node":"^22.0.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.2.1_1774560285693_0.4041556436406859","host":"s3://npm-registry-packages-npm-production"}},"1.2.2":{"name":"cognium","version":"1.2.2","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.2.2","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"54d0a27a3aea689fef0dee72365522b77a2cc45f","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.2.2.tgz","fileCount":4,"integrity":"sha512-D0hRqcVJdHVWjnigwhxQWy6EbG2TpO5aBB3Gg757l86TH8b434B8/Isoki+AsPfPmU1kt8ci0ho8QgkK/MtWFA==","signatures":[{"sig":"MEUCIQDC3CouXY4/FKvUuwnbtAkoB09KauR/Cpky6N50DdrUpgIgAOyZczEBXL2vEmm+7+KuKSAps9BTfV1OjoTAuMIscOw=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":790619},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"56aab6de331bafbb536eea7d675d3862ca03601e","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.8.0","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.9.7"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.2.0","typescript":"^5.7.0","@types/node":"^22.0.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.2.2_1774567117669_0.7552836902723734","host":"s3://npm-registry-packages-npm-production"}},"1.2.3":{"name":"cognium","version":"1.2.3","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.2.3","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"927774916cdc615f91a7c2983a921bf45a0a6f30","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.2.3.tgz","fileCount":4,"integrity":"sha512-2kQH5XrKOs6qHYzF7xMy47IP/X2qLv2zjmW0WIk1erfHWlMK2XjPkGlMhTYzGDsZkoAhZgc+nvuD9H6GKccubQ==","signatures":[{"sig":"MEQCIEGwnTgTq6oOuuRPYuEvTvKTbh4g9zRPFoG89yqGAXdgAiBPKdDQtDrujpy/YsqUzGPIHQgq3Cxa99uxdoO+WUxUxQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":820145},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"db17b9dda42583004e909b2efa736bd693fbe629","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.8.0","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.9.8"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.2.0","typescript":"^5.7.0","@types/node":"^22.0.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.2.3_1774577990017_0.026820305893878515","host":"s3://npm-registry-packages-npm-production"}},"1.3.0":{"name":"cognium","version":"1.3.0","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.3.0","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"71c134a448dc42020f62fc65a93c157cc774fea5","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.3.0.tgz","fileCount":4,"integrity":"sha512-YCx5MXKHG1d31NubrkbnA8wFQSS2utGMFV9ksS2P07lYMDq+VC/WcglObzdMvDaTAvhDbrlBGYn1OaqGZ4lirQ==","signatures":[{"sig":"MEYCIQC3X1i1GPfe8pnsxLps17GLNK9FXeuF6Pkl2rPiZi3r5AIhAJh54DDNMdzFSgw75c268If6oX7IU8QQSsL5qwllN/nE","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":862765},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"3a8c7123a50e8e279afda91e7d828a73225b4c4e","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.11.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.3.0_1774699546522_0.03398792815387153","host":"s3://npm-registry-packages-npm-production"}},"1.3.1":{"name":"cognium","version":"1.3.1","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.3.1","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"26948d31c911cbfc6bfc0f04a2da30cfa9922f55","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.3.1.tgz","fileCount":4,"integrity":"sha512-sCRyldR2PdSRgTJ44sfpL8CpLnMKQgeNIkPPWUBKb5ise9q1P/+sao7/sleR+gbCrWYg9THPPum+1QASwucg5g==","signatures":[{"sig":"MEUCIG4/054dMpymdwXa7Eozy88vP9Vwwh7ivk5Qe+GnU4XIAiEA76RZhsilsaLQwAh33pDUMZydPNMF+lwBt0vEwNVcduQ=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":868999},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"63c7e7ff5eb3dedf3aa79c168b67d4e7c17c1346","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.12.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.3.1_1774703349630_0.9249007004464562","host":"s3://npm-registry-packages-npm-production"}},"1.3.2":{"name":"cognium","version":"1.3.2","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.3.2","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"f3c28cc381211fbfb34d744290f0197938dbfebc","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.3.2.tgz","fileCount":4,"integrity":"sha512-zwZh2OHCYn7DV876kyggYdqNbWnPbObKFgFdGexAOyrsAD42u5hN1RGb/bYXj7+ecvIcB/TJAGk9lCFK5OpUTA==","signatures":[{"sig":"MEUCID1PwCh/dU7TvxhQixkgSf4SqUvnCWef+p0od0XxFEYGAiEA95TNHCdEk2nywWPzz3/3TRFgnraehjI68mZtWZEfHE8=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":887640},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"a80980428233702dccaa6cea3eaf56397aea712f","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.14.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.3.2_1774713714310_0.46147372977620593","host":"s3://npm-registry-packages-npm-production"}},"1.4.0":{"name":"cognium","version":"1.4.0","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.4.0","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"c2318dc50ca42ed95686bd1f2a5f99aed1705f14","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.4.0.tgz","fileCount":4,"integrity":"sha512-chgq+cWwgNJHo+BRMp/KyyIFm9C0ytL/PFMwlq5KpJ57rzX93GTIQMGmqwjBIuyGX43lpwklmHDYkYLHj/tbUw==","signatures":[{"sig":"MEUCIDEAGPV90qC8cEJia9pZ9ROx42sqrUdBNdOysXiDl9NuAiEAo5xv+BqzyNYgHr74dNaDz5jkPkhjjQ1Slz5qyRSnwC4=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":890015},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"56d0729b626cda4e65ce0c046d7e4ad0f6fd0c14","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"10.8.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"20.16.0","dependencies":{"circle-ir":"^3.15.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.4.0_1774848119722_0.3824422450552214","host":"s3://npm-registry-packages-npm-production"}},"1.4.2":{"name":"cognium","version":"1.4.2","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.4.2","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"d55938fb2c1569d870269927e57031ad7694fe61","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.4.2.tgz","fileCount":4,"integrity":"sha512-1AwR0jN2UwP0wdXPCzTuV/Ya/+lRogGzG2I2lTcG+qnW6Jm/ul5kgJRNTofnoJZuqKR5FTL5I05VHqkFzwhxXA==","signatures":[{"sig":"MEYCIQDAL8pqmRAFTEFSlwXo+9J69B6x3xG1bI7i8VxWQbHrcQIhAMueC6u3tsjHUOSBfbuTkBALbNuxt2un+XZE83jZvmG5","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":899330},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"f8bbe707e3203784e3e2dbd5319829c4e2d819d0","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.16.3"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.4.2_1774854777994_0.546373552258657","host":"s3://npm-registry-packages-npm-production"}},"1.4.3":{"name":"cognium","version":"1.4.3","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.4.3","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"910ee663baeb215e0f4115c10ae6b39313c1a6f9","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.4.3.tgz","fileCount":4,"integrity":"sha512-8wQAejczKf9A3U1SG1Q/Z+Sv9JZoK+xAbMz6SD1qFtJUVqkfa+u4CoVGMs2QMAsRfYL6GnJRy+nwnoCU/VufcA==","signatures":[{"sig":"MEYCIQD9I0DM2e5Ft62cMx1TQ3uSNO0+up+mF3lmhnhuaqkgcAIhAOZGMQyd8v2GOwc7Ug/AbWKg/5hSz5hkokWjXdVcDtHv","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":910825},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"a9ea121c9825ead3757dfb410b36a8f7c17afc0c","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.16.5"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.4.3_1775454374715_0.8177684174862305","host":"s3://npm-registry-packages-npm-production"}},"1.4.5":{"name":"cognium","version":"1.4.5","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.4.5","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"2445df63adaf46bb4a09c0f61a8979b1a7aac9fa","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.4.5.tgz","fileCount":4,"integrity":"sha512-5j5m7dEQ+uHG1F+WQ6CehTqgteboOs2ls09sNXGnPEDsqjJQycyQrCTrvvnqOZKHSpH3Rr7ewgz3ruUOGfq6uQ==","signatures":[{"sig":"MEUCIQD2GyCUaM2CIJ2uCckqILvl+mZ4GW66I1iluRvBqElgTQIgNbUTYYzk80FSGNQzgb1Q8gSxLb87hECa7/VarNXeO+E=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":911863},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"ab2a25345d6d232b4deb30f808a01908547b367d","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.16.7"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.4.5_1775618705536_0.2848578065281131","host":"s3://npm-registry-packages-npm-production"}},"1.4.6":{"name":"cognium","version":"1.4.6","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.4.6","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"d8bd9ead85631db29355187308e25cdc8975d4f0","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.4.6.tgz","fileCount":4,"integrity":"sha512-qBAZi901t75qfT5yivRW7rYqVbrO716+8LZkC2VnEcRvXpk8UzpLrX+UV0wopLhb/gKeu0tlxd/kuiwVS22Ebw==","signatures":[{"sig":"MEUCIQCtQGimIYDqwG5QQR4E4KjvaaVefko0eQ6bqPczqlAkmwIgK68+A4z9w3rvMvdEJ3TniPp0KPcXtXcREeEvq8qldJs=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":911863},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"f5dd5605ad8532ae7866dd2da46625f0d2c52b49","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.16.8"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.4.6_1775687319891_0.9046196843515919","host":"s3://npm-registry-packages-npm-production"}},"1.5.0":{"name":"cognium","version":"1.5.0","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.5.0","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"6ad7d3c9fd0a8f12c6e62561f652f12aca9151e3","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.5.0.tgz","fileCount":4,"integrity":"sha512-z+c60Zg4l1fxPdSsBjGkQ5axCcIZKcLFsRWVkJeNzoUGlGFcBC3rllxWdLjEAjxO6rvECdwbm1igon3l/j8odQ==","signatures":[{"sig":"MEUCIQCBJrLsBvdIctomE4QHLETcIYqd+IXuuJt1izSDulHwowIgWKLqpL+XgoXiSYlMLbepGSF7IBc4p64JddbO3QvAKqk=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":931751},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"38843ea8f53684502b4a76a5db8286a53f806755","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.17.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.5.0_1776144452193_0.960410224230932","host":"s3://npm-registry-packages-npm-production"}},"1.5.1":{"name":"cognium","version":"1.5.1","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.5.1","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"989a95a4a45b0ff94e3273f858d9652ef2115295","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.5.1.tgz","fileCount":4,"integrity":"sha512-asQixBB6DPCCOZ0LtHY8Lxq59kc6d1goHVhx9c2eRBFI2lo5uAoIj2yz74TwAs4ZbFg68OqZf0jG39SshZcSMA==","signatures":[{"sig":"MEQCIBqpbEopsNIe1WOBb/PU/r0V9VkuURWseMAprr1ifzkfAiAQg1KGNIJ7ZlAOsgfFgkNyF6rrI+CrzyikX24Y0LcPXA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":931934},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"48f9b4d259a2e7541aa8c59f541a5e59b131ecf7","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.17.1"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.5.1_1776200363685_0.8908643902739928","host":"s3://npm-registry-packages-npm-production"}},"1.5.2":{"name":"cognium","version":"1.5.2","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.5.2","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"1966c4532404f7ad3bfb2415ea9254dce8f93ba7","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.5.2.tgz","fileCount":4,"integrity":"sha512-aVTMOF3lb5jfuWVsfDDQtluu15Tw5a729Y5Ao0nPy/GvPiw/WmGwYxKzBYjINiMGGEchx4ArDWZ/YFLyyP2vAQ==","signatures":[{"sig":"MEUCIAjaiQcVoopiLJMVyV7GGhJElpkA94wivJ9lfH8kUfmJAiEAscQnp3/DBw3C4P9KLR/kEo3Q3NdVwWiB+Mc1GuK5nBM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":931934},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"0994dd3163a28ef2521c2d0bc2ed90cb6fc01305","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.17.1"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.5.2_1776213954519_0.9957594613625391","host":"s3://npm-registry-packages-npm-production"}},"1.5.3":{"name":"cognium","version":"1.5.3","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.5.3","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"cf56998438f9421788927aa4fc77d8d7a967ea70","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.5.3.tgz","fileCount":4,"integrity":"sha512-ygZA2z3J33k1S+eR3L7PEU14qYPN+zzH30MfSdSedZAg94Tme6Cul2cW1ulcuvtDUs2f6xUsCvfhwCvzojWMQg==","signatures":[{"sig":"MEUCIQCkl8Ah10AEK5lUha+tX95BTEBamboysz1Uh/ORDnftfAIgXGIRIrqadCxeDuaOoV/srTRQOyTAo2k2XHEo2Y42dTw=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":932271},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"994f6a92472189938fcdb2261c37c66329883673","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.17.2"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.5.3_1776216911851_0.8285287829256596","host":"s3://npm-registry-packages-npm-production"}},"1.5.4":{"name":"cognium","version":"1.5.4","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.5.4","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"f2936e4c5978217abc28e404f3ed9d1479cb3316","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.5.4.tgz","fileCount":4,"integrity":"sha512-m6ifHz6Ozo3E+Mo1Grt9bTRSLSHBMXtMA8SU1wP/ay7HwS0Cn0HFDQS/3AvKJJQRTs+vYtHwbf0/X+d/fZ2fEQ==","signatures":[{"sig":"MEUCIQCYG3sT4CvjVrTRsqlvW25gEAeRhWvr74LbOO8Id6ts8QIgcDiu7mdBKsGIXGsOmvgZSBqRvDiUiQuHInDe3/9GfZ0=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":932448},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"0b742a2a14bef378dabfaf6acf327afd59198820","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.17.2"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.5.4_1776217494346_0.09574694510781478","host":"s3://npm-registry-packages-npm-production"}},"1.5.5":{"name":"cognium","version":"1.5.5","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.5.5","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"8bf961d41feede2512c40a4e329ce9d3377b2ebd","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.5.5.tgz","fileCount":4,"integrity":"sha512-K5tyzfmn2gBSnf95/dVe+H1ol8mY5FPFrFBZCN3J4X/IeTzsGJLAMWaugckqA8i4SSyMiOEuwKgpKjyPdBt0YA==","signatures":[{"sig":"MEYCIQDc0PIw9WWnAqc4Exj4DtarOILHsRsDlsjKGtzxoSbUFwIhAMygi7P4kHxx2jbD3PR5I/kpSX7nNfbbMZcajZmFVDCa","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":932448},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"a6ac2cf62f17345d94da8e10771c5e0ddc22c0d6","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.17.3"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.5.5_1776217791637_0.8994975532750784","host":"s3://npm-registry-packages-npm-production"}},"1.6.0":{"name":"cognium","version":"1.6.0","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.6.0","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"f4558fc11cada984056da7af603df51761dd6fd0","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.6.0.tgz","fileCount":4,"integrity":"sha512-sfmuVnbGNmNGAe3dolAfn6MUxHsEGSwW9gLcM/W3ATX3McojkMIaYfFcy6aupcdPQbm2gUYc5eo864Zw+oJI7Q==","signatures":[{"sig":"MEYCIQC3KPjwhbsZsV67KA+nQw46KesMUkMbO3Z0co5oE3exLgIhAPrawCO3IMf0iC0TKTmoch3QYjof9bJ0mXVCTyZJyRxF","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":933443},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"10a7a68d3bdb8fc53140469f7f47f2f8b209ef83","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.18.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.6.0_1776289406703_0.6105684845969672","host":"s3://npm-registry-packages-npm-production"}},"1.6.1":{"name":"cognium","version":"1.6.1","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.6.1","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"cba155247ab46e664ec9edd9d6ee2a3f74784118","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.6.1.tgz","fileCount":4,"integrity":"sha512-1JZ4nTr+4yD6J4OK+n5fF6AX/51qCuLOhR4XIFQzjcGdkz2OFbYDCzdyUnuRgXnADFiE/rcF9Nnt5TuIunjBqQ==","signatures":[{"sig":"MEYCIQCe3ih6JfxiSqtarWkze5LgHVH6cZfgpcVILjN0cR4y6wIhAOvx3HclR1+brG7I1ykK1+LFYtF+Z3BldOOW3x3KLWoY","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":935437},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"fec4e06dc2fba0b76543a7b9399844afda492975","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.18.1"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.6.1_1776290079381_0.2830500917953933","host":"s3://npm-registry-packages-npm-production"}},"1.6.2":{"name":"cognium","version":"1.6.2","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.6.2","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"a15dba78516564b10e5d6d7f86911a4cdd8da371","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.6.2.tgz","fileCount":4,"integrity":"sha512-SKCmb+uxtFLh0bANp2u9I65byJdyWy2pR0E5DWuVmbE4k/xwiHjBcEHZlbY4u85A+RGxDPKvuSQJ/A/6o8dzpg==","signatures":[{"sig":"MEQCIDl2HOSCDrzj8nnIyDcj9kEhLMp5cYZsvBqsgLkBrbCoAiBliBpmTcQc36WUTebvy3VAD3T/330NFLeGK5N7OrQd7A==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":935437},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"65c882d1400c05fa49b0937102fa43864c9d8253","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.18.2"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.6.2_1776291696276_0.3226472863757981","host":"s3://npm-registry-packages-npm-production"}},"1.6.3":{"name":"cognium","version":"1.6.3","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.6.3","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"65ca66c972a6d7b8bbbd038766037b34ec93e5f2","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.6.3.tgz","fileCount":4,"integrity":"sha512-0588tvMgQQU8cAuIamulXol6pVDwS0y5q2s16QiSXV68K/CvII8zoK/69a5IgHUDMahu0Zq53z7Lgp2rXrMpWw==","signatures":[{"sig":"MEUCIHHjgVvF4Xp34R2Nnnzf+kC+X3ez8MGBA33yR4UPD8lvAiEA+BS9hzev2IUFAfwMXnUIiP8ajn1opE4T8LfUlH7O9bQ=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":936382},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"eea0f94a92076ce9dd59e5b57d651766946e32c7","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.18.3"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.6.3_1776294054838_0.006823762592064853","host":"s3://npm-registry-packages-npm-production"}},"1.6.4":{"name":"cognium","version":"1.6.4","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.6.4","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"9f4daff1001644b4801e9ae66929bb07e98662cb","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.6.4.tgz","fileCount":4,"integrity":"sha512-sRycsTUxuGIfyFiqB7tBnDgkBfrvzqwXHXKsTePEBK2ad2F8vW7/2gCt4yRoW0D6aADqsqmJAq+Q5iNMSXlmQQ==","signatures":[{"sig":"MEUCIHPN1Ed12kkPZAZgO+3Ga8BCmTVwcdAFledv+nM+OArrAiEA5rrqafcnWplthCVnUrrrFtCjrXLLPLZUCGs9SFuPNwA=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":936382},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"19b9e6b07fd693301a8128fb81cf0d68890d320a","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.18.5"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.6.4_1776295592754_0.6898415246631397","host":"s3://npm-registry-packages-npm-production"}},"1.6.7":{"name":"cognium","version":"1.6.7","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.6.7","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"170a3460a6b0736d166027d2ce0963992cea8542","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.6.7.tgz","fileCount":4,"integrity":"sha512-0hiJxsYWjc4h9QAvwb0kZUbH4UHzmsz/VEpv+4VbotC8w8b214J9euyyvwiUxnmDG4syOUtxAKDe2/bQcUoHFw==","signatures":[{"sig":"MEUCIQCjZfCBJqH6gw8k7fN88QzweLbRUC/l7c0oYxvxX4faeAIgN+90CaX7S0rFtPkRXkdFn8IRtr7UzU0Ze5+Bbk+3XoY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":940164},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"4cf0e1145fc541f1dcf280447a8a56a644802dfa","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.18.7"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.6.7_1776305408134_0.8395579802213555","host":"s3://npm-registry-packages-npm-production"}},"1.6.9":{"name":"cognium","version":"1.6.9","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.6.9","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"f3ca62c8c0fa92fb6c223a81746b99ee15da6e57","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.6.9.tgz","fileCount":4,"integrity":"sha512-zEgdxwJq3MhTG4WRXHx4OKsWmqRdFQQU8H79lddwWIn97jLE1k+8eGASufev80BAHv0fiMwAeLjWUIcaV5jt1g==","signatures":[{"sig":"MEQCIGtjKtNoGHmx8F97AyoPXROlzppQUoZvH9GvJ3uTZW9fAiBPggN20asR2zUX2JE1iW6rFrGC58otSg0Gq0jEE23V3w==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":951825},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"4f4d52aef371f719b41b0b130abc75ebea1bea74","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.19.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.6.9_1776380975267_0.002974489696386362","host":"s3://npm-registry-packages-npm-production"}},"1.6.14":{"name":"cognium","version":"1.6.14","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.6.14","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"5142e218b52468026e044ddff4833272763e9eb8","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.6.14.tgz","fileCount":4,"integrity":"sha512-rKlXAWiTXmes02xxOUDpkwce5g4z+9ddpOfe8Gohjlu5eJXd0z+MysiEAM8ufud0BJNeFIzxl4hUtKD/8IdTBA==","signatures":[{"sig":"MEYCIQD2HAZysUpkXfSZElAragMMv9o+VpGVmW4woKWNeVD+AQIhANE6rkGgEvTCyqth5PaAqWuwZLcAKTrq/2q9f3EjXWBr","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":962807},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"9afb90ba75966601723d6668a8f4cb52293211d0","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.19.5"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.6.14_1777272727034_0.02895489614405511","host":"s3://npm-registry-packages-npm-production"}},"1.7.0":{"name":"cognium","version":"1.7.0","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.7.0","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"0b74eb14ce4c8fd0a1705e573d9ea434f31c5e8d","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.7.0.tgz","fileCount":4,"integrity":"sha512-bDqTSnyHp/jwTQ6Dn1UzHaLJy5Tlpk8rh93MIL/l320yTA1EtM9KIsZZt7KNA9U2m/R+N1GQ6CEMGBVHp3sptw==","signatures":[{"sig":"MEYCIQCk2CSLozuuI99wAsdz1C4Lf8YvASPi73mXy1sKLRIBsgIhANrqaWhaAz19NjFh8cgbmDLleyYJe5wpwe2rJQgezjvH","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":973277},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"804994f9131c6064276468aac78be1e864faf2b4","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.20.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.7.0_1778113796974_0.987978831840223","host":"s3://npm-registry-packages-npm-production"}},"1.7.1":{"name":"cognium","version":"1.7.1","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.7.1","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"e8e93eab187fce94dd8710f5684e5bafba4f086b","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.7.1.tgz","fileCount":4,"integrity":"sha512-eKw1aeIk6uUJSRwyK/Oz+4eeOrnRa/lfcbFj5McrsjoAWAaIHY6NntuINAEVuBxfnpVTp5T5Qt83hS4IwYX2EQ==","signatures":[{"sig":"MEUCIDnnnBsAeOXKuptP3L4fyJ9Tl5OtuYoKE0HI05sNz7G9AiEAm0xFYUltvQQkEre9wLbBGGaknCIi1JkbGNZgJDt7aoE=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":975244},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"26c81dd853450dc2595c7d32bfb1fd16a309aa94","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.21.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.7.1_1778287928955_0.4082964836450538","host":"s3://npm-registry-packages-npm-production"}},"1.8.0":{"name":"cognium","version":"1.8.0","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.8.0","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"f7c2fe5a6ab97466f1cc14cf01aca3fa6b918fca","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.8.0.tgz","fileCount":4,"integrity":"sha512-wF6TF0t1P/SCRKUJdt4FECBKkCpC+K03lXeN+fztr4+Vsdn1LYQBqONAvZJjMPu3dMmCDDkPX6Y8ewIRoqrd+g==","signatures":[{"sig":"MEYCIQDiJc7TZ0gwi2XRb5AJPc2XkfTgfZyerFAXGw3RJrf8rwIhAJZUr4sD9q4UMLOWbO714oiPeXRe2cGUM79xKSLEJgeL","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1009298},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"c353ab978b7d96cdf4e52a1d895c5c5a6216b99a","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.22.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.8.0_1779125478988_0.33978515932184505","host":"s3://npm-registry-packages-npm-production"}},"1.8.1":{"name":"cognium","version":"1.8.1","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.8.1","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"62d6d37b31cf0438078d89148c19e977ab10afa1","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.8.1.tgz","fileCount":4,"integrity":"sha512-3EnEVN02nVfzui9xHaC1eaFXRP4VwOaES15mhepb2hdl8GBLwJ3pChKzt/NPWHqog3jhLCBF8xCpiyl8kzWzUw==","signatures":[{"sig":"MEUCIE3VZwEC2uZkAvGx01HfD7gIpWjNU/TOQXeUNp1U7A3wAiEAju+zfPDW3orqMPhiHHRLqZDEVjv/1FlpHc3OgJoBl3U=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1012423},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"d8fbd2ffdf983c786c5d9f54623e68f466556db7","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.22.1"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.8.1_1779297561310_0.16370877355807867","host":"s3://npm-registry-packages-npm-production"}},"1.8.2":{"name":"cognium","version":"1.8.2","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.8.2","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"00fd571975efacd783e97220c151237ceb54e805","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.8.2.tgz","fileCount":4,"integrity":"sha512-MIVv6XoIEI4pSp8Zq3k4hSPLs3AYXUpVvKDAcyLtktRPz8Tm0FKzeAHFgGOJXmO48EghB/x7VNEaI+hZsdyzsQ==","signatures":[{"sig":"MEUCIFWs+1meFwsmNVwSKMe+mYH6IjKM2HmkFsQPZeCQvoolAiEA65Epklm43AG/Fk0hhC/tYhl60RXR8K1baFYLeeEmU/I=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1014152},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"82730bbaf34bd3fe786724d8cd8eb48c3d687080","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.22.2"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.8.2_1779389001810_0.6931061166999599","host":"s3://npm-registry-packages-npm-production"}},"1.8.3":{"name":"cognium","version":"1.8.3","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","_id":"cognium@1.8.3","maintainers":[{"name":"openmason","email":"openmason@gmail.com"}],"homepage":"https://cognium.dev","bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"bin":{"cognium":"dist/cli.js"},"dist":{"shasum":"89bd34a0b943f4f9144a1d5e6a54889c935fdb57","tarball":"https://registry.npmjs.org/cognium/-/cognium-1.8.3.tgz","fileCount":4,"integrity":"sha512-LDp4ppej1rzaR8YUXF1Da2lLWRPq6yR3QbvZJo5FZIP6qav9Ou1eay0a/lw7KRbnFvz51rrw5rrZkSCXfuou7Q==","signatures":[{"sig":"MEQCIAYkzKtP/ZOtINrtDYGi9y3I78Po2XoWE7xaNZRSfg6jAiBVrfX5pL+S71dbmsMs4y7xlP71L2laU5QBIE1R3ZvW2Q==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1014538},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=18.0.0"},"funding":{"url":"https://github.com/sponsors/cogniumhq","type":"github"},"gitHead":"ff883c9045d82648d6d03505b981588c98100b4b","scripts":{"dev":"bun run src/cli.ts","test":"bun test","build":"bun build src/cli.ts --outdir dist --target node --format esm --external pino-pretty","clean":"rm -rf dist cognium cognium-* *.bun-build wasm","dogfood":"bun run src/cli.ts scan src/ -q","release":"bash release.sh","version":"node -e \"const v = require('./package.json').version; require('fs').writeFileSync('src/version.ts', '/**\\n * Version information\\n *\\n * Kept in sync with package.json via the \\`version\\` npm lifecycle script.\\n * Do not edit manually — use \\`npm version patch|minor|major\\` instead.\\n */\\nexport const version = \\x27' + v + '\\x27;\\n')\" && git add src/version.ts","typecheck":"tsc --noEmit","prepublishOnly":"bun run build","build:standalone":"mkdir -p wasm && cp node_modules/circle-ir/dist/wasm/*.wasm wasm/ && bun build src/cli.ts --compile --outfile cognium --external pino-pretty"},"_npmUser":{"name":"openmason","email":"openmason@gmail.com"},"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"_npmVersion":"11.12.1","description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","directories":{},"_nodeVersion":"24.13.1","dependencies":{"circle-ir":"^3.22.3"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"bun-types":"^1.3.11","typescript":"^6.0.2","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/cognium_1.8.3_1779393680947_0.8960257063825847","host":"s3://npm-registry-packages-npm-production"}}},"time":{"created":"2026-02-11T07:28:23.217Z","modified":"2026-08-25T19:47:02.356Z","0.0.1":"2026-02-11T07:28:23.364Z","1.0.0":"2026-02-11T10:31:59.058Z","1.0.4":"2026-02-18T01:23:35.162Z","1.0.5":"2026-02-19T05:38:14.818Z","1.0.6":"2026-03-17T22:12:27.238Z","1.0.8":"2026-03-17T22:22:01.272Z","1.0.9":"2026-03-17T22:31:06.515Z","1.2.1":"2026-03-26T21:24:45.890Z","1.2.2":"2026-03-26T23:18:37.818Z","1.2.3":"2026-03-27T02:19:50.158Z","1.3.0":"2026-03-28T12:05:46.671Z","1.3.1":"2026-03-28T13:09:09.846Z","1.3.2":"2026-03-28T16:01:54.467Z","1.4.0":"2026-03-30T05:21:59.938Z","1.4.2":"2026-03-30T07:12:58.218Z","1.4.3":"2026-04-06T05:46:14.882Z","1.4.5":"2026-04-08T03:25:05.740Z","1.4.6":"2026-04-08T22:28:40.067Z","1.5.0":"2026-04-14T05:27:32.387Z","1.5.1":"2026-04-14T20:59:23.851Z","1.5.2":"2026-04-15T00:45:54.724Z","1.5.3":"2026-04-15T01:35:11.995Z","1.5.4":"2026-04-15T01:44:54.572Z","1.5.5":"2026-04-15T01:49:51.849Z","1.6.0":"2026-04-15T21:43:26.890Z","1.6.1":"2026-04-15T21:54:39.592Z","1.6.2":"2026-04-15T22:21:36.533Z","1.6.3":"2026-04-15T23:00:55.036Z","1.6.4":"2026-04-15T23:26:32.952Z","1.6.7":"2026-04-16T02:10:08.324Z","1.6.9":"2026-04-16T23:09:35.470Z","1.6.14":"2026-04-27T06:52:07.231Z","1.7.0":"2026-05-07T00:29:57.219Z","1.7.1":"2026-05-09T00:52:09.156Z","1.8.0":"2026-05-18T17:31:19.168Z","1.8.1":"2026-05-20T17:19:21.482Z","1.8.2":"2026-05-21T18:43:22.016Z","1.8.3":"2026-05-21T20:01:21.112Z"},"bugs":{"url":"https://github.com/cogniumhq/cognium/issues"},"author":{"url":"https://cognium.dev","name":"Cognium Labs"},"license":"MIT","homepage":"https://cognium.dev","keywords":["security","sast","static-analysis","vulnerability","cli","taint-analysis","dataflow-analysis","semantic-analysis","code-security","devops","devsecops","cwe","owasp"],"repository":{"url":"git+https://github.com/cogniumhq/cognium.git","type":"git"},"description":"Semantic static analysis engine for detecting security vulnerabilities via taint tracking","maintainers":[{"email":"openmason@gmail.com","name":"openmason"},{"email":"elarasu@gmail.com","name":"elarasu"}],"readme":"# cognium\n\n[![npm version](https://img.shields.io/npm/v/cognium.svg)](https://www.npmjs.com/package/cognium)\n[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://github.com/cogniumhq/cognium/blob/main/LICENSE)\n[![OWASP Benchmark](https://img.shields.io/badge/OWASP%20Benchmark-100%25%20TPR%2C%200%25%20FPR-brightgreen)](https://github.com/cogniumhq/cognium#benchmark-results)\n[![GitHub Action](https://img.shields.io/badge/GitHub%20Action-available-blue?logo=github)](https://github.com/marketplace/actions/cognium-security-scan)\n![Trust Score](https://raw.githubusercontent.com/cogniumhq/cognium/badges/trust-badge.svg)\n![Quality Score](https://raw.githubusercontent.com/cogniumhq/cognium/badges/quality-badge.svg)\n\nSemantic static analysis engine for detecting security vulnerabilities via taint tracking.\n\n## Installation\n\n### npm (recommended)\n\n```bash\nnpm install -g cognium\n```\n\n### Standalone binary\n\nDownload from [GitHub Releases](https://github.com/cogniumhq/cognium/releases).\n\n**Note:** When using the standalone binary, place the `wasm/` directory in the same location as the binary.\n\n## Quick Start\n\n```bash\n# Scan a single file\ncognium scan src/app.java\n\n# Scan a directory\ncognium scan ./src\n\n# Scan with specific language\ncognium scan api.py --language python\n\n# Output as JSON\ncognium scan ./src --format json\n\n# Show only critical vulnerabilities\ncognium scan ./src --severity critical\n\n# Security findings only (skip quality/reliability passes)\ncognium scan ./src --category security\n\n# Exclude specific CWEs (e.g. weak crypto noise)\ncognium scan ./src --exclude-cwe CWE-327,CWE-330\n\n# Exclude test files\ncognium scan ./src --exclude-tests\n\n# Software quality metrics\ncognium metrics ./src\ncognium metrics ./src --category complexity,coupling --format json\n```\n\n## Commands\n\n### `cognium scan <path>`\n\nScan files or directories for security vulnerabilities.\n\n```bash\ncognium scan <path> [options]\n\nOptions:\n  -l, --language <lang>      Force language (java|javascript|typescript|python|go|rust|bash|html)\n  -f, --format <format>      Output format (text|json|sarif) [default: text]\n  --threads <n>              Parallel analysis threads [default: 4]\n  --severity <level>         Filter by severity:\n                               - Single level: minimum severity (e.g., \"high\" shows high+critical)\n                               - Multiple levels: exact match (e.g., \"critical,high\" shows only those)\n                               - Valid levels: low, medium, high, critical\n  --category <cats>          Filter by ISO 25010 category (comma-separated):\n                               security, reliability, performance, maintainability, architecture\n  --exclude-cwe <cwes>       Exclude specific CWEs (comma-separated, e.g. CWE-330,CWE-327)\n  --exclude-tests            Exclude test files and directories\n  -o, --output <file>        Write results to file\n  -q, --quiet                Suppress progress output\n  -v, --verbose              Show detailed output\n```\n\n**Examples:**\n\n```bash\n# Scan entire project\ncognium scan ./src\n\n# Show only critical and high severity issues\ncognium scan ./src --severity critical,high\n\n# Exclude test files and show only critical issues\ncognium scan ./src --exclude-tests --severity critical\n\n# Security findings only (skip quality/reliability passes)\ncognium scan ./src --category security\n\n# Reliability + performance findings only\ncognium scan ./src --category reliability,performance\n\n# Exclude weak-crypto and weak-random findings\ncognium scan ./src --exclude-cwe CWE-327,CWE-330\n\n# Generate SARIF report for CI/CD\ncognium scan ./src --format sarif --output results.sarif\n\n# Scan with verbose output\ncognium scan ./src -v\n\n# Quiet mode (no progress, only results)\ncognium scan ./src -q\n```\n\n### `cognium init`\n\nInitialize a configuration file in your project.\n\n```bash\ncognium init\n```\n\nCreates a `cognium.config.json` with customizable rules.\n\n### `cognium metrics <path>`\n\nReport software quality metrics for files or directories.\n\n```bash\ncognium metrics <path> [options]\n\nOptions:\n  -l, --language <lang>      Analyze only files for the given language\n  -f, --format <format>      Output format (text|json) [default: text]\n  --category <cats>          Filter metric categories (comma-separated):\n                               complexity, size, coupling, inheritance,\n                               cohesion, documentation, duplication\n  --exclude-tests            Skip test files and directories\n  -o, --output <file>        Write results to file\n  -q, --quiet                Suppress per-file progress output\n```\n\n**Examples:**\n\n```bash\n# Show all metrics for a directory\ncognium metrics ./src\n\n# Complexity and coupling metrics only\ncognium metrics ./src --category complexity,coupling\n\n# JSON output for tooling integration\ncognium metrics ./src --format json --output metrics.json\n\n# Java files only, skip tests\ncognium metrics ./src --language java --exclude-tests\n```\n\n**Sample output:**\n\n```\nsrc/UserController.java\n  Complexity\n    cyclomatic_complexity : 8.2\n    WMC                   : 41\n    halstead_volume       : 3820.4\n\n  Size\n    LOC                   : 182\n    NLOC                  : 156\n    function_count        : 9\n\n  Coupling\n    CBO                   : 6\n    RFC                   : 22\n\n  Composite Scores\n    maintainability_index : 68.4 / 100\n    code_quality_index    : 71.2 / 100\n    bug_hotspot_score     : 32.1 / 100\n    refactoring_roi       : 45.0 / 100\n```\n\nAvailable metrics: `cyclomatic_complexity`, `WMC`, `halstead_volume`, `halstead_difficulty`, `halstead_effort`, `halstead_bugs`, `LOC`, `NLOC`, `comment_density`, `function_count`, `CBO`, `RFC`, `DIT`, `NOC`, `LCOM`, `doc_coverage`, `maintainability_index`, `code_quality_index`, `bug_hotspot_score`, `refactoring_roi`.\n\n### `cognium version`\n\nDisplay version information.\n\n```bash\ncognium version\n```\n\n## Output Format\n\nCognium provides helpful, actionable output for each vulnerability found:\n\n```\n/path/to/VulnerableApp.java\n  [!!!] sql_injection (Critical) [CWE-89]\n      Line 45: sql_injection vulnerability: tainted data flows from line 42 to line 45\n      User input is used in SQL query without sanitization\n      → Fix: Use PreparedStatement with parameterized queries instead of string concatenation\n  [!!] xss (High) [CWE-79]\n      Line 78: xss vulnerability: tainted data flows from line 76 to line 78\n      User input is rendered in HTML without proper encoding\n      → Fix: Use HTML encoding/escaping functions before rendering user input in web pages\n\nFound 2 vulnerability(ies) in 1 file(s)\n```\n\n**Clean code = silent output:** When no vulnerabilities are found, cognium stays quiet (Unix philosophy: no news is good news).\n\nUse `-v` flag to see all scanned files including clean ones.\n\n## Detected Vulnerabilities\n\n| Type | CWE | Severity | Description |\n|------|-----|----------|-------------|\n| SQL Injection | CWE-89 | Critical | User input in SQL queries |\n| Command Injection | CWE-78 | Critical | User input in system commands |\n| Deserialization | CWE-502 | Critical | Untrusted deserialization |\n| XXE | CWE-611 | Critical | XML external entity injection |\n| Cross-Site Scripting (XSS) | CWE-79 | High | User input in HTML output |\n| Path Traversal | CWE-22 | High | User input in file paths |\n| SSRF | CWE-918 | High | Server-side request forgery |\n| LDAP Injection | CWE-90 | High | User input in LDAP queries |\n| XPath Injection | CWE-643 | High | User input in XPath queries |\n| NoSQL Injection | CWE-943 | High | User input in NoSQL queries |\n| Code Injection | CWE-94 | Critical | Dynamic code execution |\n| Open Redirect | CWE-601 | Medium | User controls redirect destination |\n| Log Injection | CWE-117 | Medium | User input in logs |\n| Trust Boundary | CWE-501 | Medium | Data crosses trust boundary |\n| External Taint Escape | CWE-20 | Medium | External input reaches sensitive sink |\n| Weak Random | CWE-330 | Low | Weak random number generator |\n| Weak Hash | CWE-327 | Low | Weak hashing algorithm |\n| Weak Crypto | CWE-327 | Low | Weak cryptographic algorithm |\n| Insecure Cookie | CWE-614 | Low | Cookie without security flags |\n\n## Code Quality Analysis\n\nIn addition to security vulnerabilities, `cognium scan` runs 17 code quality passes and reports findings in five ISO 25010 categories:\n\n| Category | Rule IDs | Example Issues |\n|----------|----------|----------------|\n| **Reliability** | `null-deref`, `resource-leak`, `unchecked-return`, `dead-code`, `variable-shadowing`, `leaked-global`, `unused-variable`, `infinite-loop`, `double-close`, `use-after-close`, `unhandled-exception`, `broad-catch`, `swallowed-exception`, `missing-guard-dom`, `cleanup-verify` | Null pointer dereferences, unclosed streams, swallowed exceptions |\n| **Performance** | `n-plus-one`, `redundant-loop-computation`, `unbounded-collection`, `serial-await`, `react-inline-jsx` | N+1 DB queries, unnecessary work inside loops |\n| **Maintainability** | `missing-public-doc`, `todo-in-prod`, `stale-doc-ref` | Missing Javadoc/JSDoc, TODO comments in production code |\n| **Architecture** | `circular-dependency`, `orphan-module`, `dependency-fan-out`, `deep-inheritance`, `missing-override`, `unused-interface-method` | Circular imports, overly deep class hierarchies |\n\nQuality findings appear alongside security findings in text output with their category tag:\n\n```\nsrc/UserService.java\n  [!!] sql_injection (Critical) [CWE-89]\n      ...\n  [!] null-deref [reliability] (High) [CWE-476]\n      Line 34: Return value of findById() is dereferenced without a null check\n      → Fix: Check for null before dereferencing or use Optional<T>\n  [i] missing-public-doc [maintainability] (Low)\n      Line 12: Public method processRequest() has no Javadoc\n\nFound 1 security finding(s) in 1 file(s)\nAlso found 2 code quality finding(s) in 1 file(s)\n```\n\n**Exit codes:** The CLI exits `1` only when **security** findings are present (so CI pipelines gate on vulnerabilities without being blocked by documentation or style findings). Quality-only scans exit `0`.\n\nFilter to security findings only: `cognium scan ./src --category security`\n\n## Supported Languages\n\n| Language | Extensions | Frameworks |\n|----------|------------|------------|\n| Java | `.java` | Spring, JAX-RS, Servlet |\n| JavaScript | `.js`, `.mjs` | Express, Fastify, Node.js |\n| TypeScript | `.ts`, `.tsx` | Express, Fastify, Node.js |\n| Python | `.py` | Flask, Django, FastAPI |\n| Go | `.go` | net/http, Gin, Echo, Fiber, Chi |\n| Rust | `.rs` | Actix-web, Rocket, Axum |\n| Bash | `.sh`, `.bash` | Shell scripts |\n| HTML | `.html`, `.htm` | Web extraction preprocessor |\n\n## Configuration\n\nCreate `cognium.config.json` in your project root:\n\n```json\n{\n  \"include\": [\"src/**/*.java\", \"src/**/*.ts\"],\n  \"exclude\": [\"**/test/**\", \"**/node_modules/**\"],\n  \"severity\": \"medium\",\n  \"rules\": {\n    \"sql-injection\": \"error\",\n    \"xss\": \"error\",\n    \"command-injection\": \"error\",\n    \"path-traversal\": \"warn\"\n  }\n}\n```\n\n## Severity Filtering\n\nCognium supports flexible severity filtering to focus on what matters:\n\n### Minimum Severity (Single Value)\n\nShows vulnerabilities at or above the specified level:\n\n```bash\n# Show only critical\ncognium scan ./src --severity critical\n\n# Show high and critical\ncognium scan ./src --severity high\n\n# Show medium, high, and critical\ncognium scan ./src --severity medium\n```\n\n### Exact Severity Match (Comma-Separated)\n\nShows only the specified severity levels:\n\n```bash\n# Show only critical and high\ncognium scan ./src --severity critical,high\n\n# Show only medium\ncognium scan ./src --severity medium\n\n# Show low and medium\ncognium scan ./src --severity low,medium\n```\n\n## CI/CD Integration\n\n### GitHub Actions\n\n```yaml\nname: Security Scan\non: [push, pull_request]\n\njobs:\n  scan:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@v4\n      - name: Install cognium\n        run: npm install -g cognium\n      - name: Run security scan\n        run: cognium scan ./src --format sarif --output results.sarif --severity high\n      - name: Upload SARIF\n        uses: github/codeql-action/upload-sarif@v3\n        with:\n          sarif_file: results.sarif\n```\n\n### GitLab CI\n\n```yaml\nsecurity-scan:\n  image: node:20\n  script:\n    - npm install -g cognium\n    - cognium scan ./src --format json --output gl-sast-report.json --severity high\n  artifacts:\n    reports:\n      sast: gl-sast-report.json\n```\n\n### Pre-commit Hook\n\nPrevent commits with critical vulnerabilities:\n\n```bash\n#!/bin/sh\n# .git/hooks/pre-commit\n\nif ! cognium scan . --severity critical --quiet; then\n  echo \"❌ Commit blocked: Critical security vulnerabilities found\"\n  exit 1\nfi\n```\n\n## Exit Codes\n\n| Code | Meaning |\n|------|---------|\n| 0 | No security findings (quality-only findings do not trigger exit 1) |\n| 1 | One or more security vulnerabilities found |\n| 2 | Error during analysis |\n\nUse exit codes in CI/CD to fail builds when security vulnerabilities are detected:\n\n```bash\n# Fail build on any security finding\ncognium scan ./src || exit 1\n\n# Fail build only on critical/high security findings\ncognium scan ./src --severity high || exit 1\n\n# Fail build only on critical security findings\ncognium scan ./src --severity critical || exit 1\n\n# Never fail on quality-only issues (always exit 0 for docs/style findings)\ncognium scan ./src --category reliability,performance,maintainability,architecture; echo \"Quality scan done (exit $?)\"\n```\n\n## Performance\n\nCognium is built for speed:\n\n- **Parallel analysis**: Process multiple files concurrently (configurable with `--threads`)\n- **Zero dependencies**: Only one runtime dependency (`circle-ir`)\n- **Native performance**: Powered by tree-sitter WASM parsers\n- **Lean binary**: ~58MB standalone binary includes all dependencies\n\n## Architecture\n\n- **CLI**: Lightweight wrapper with zero-dependency utilities\n- **Core Engine**: [circle-ir](https://github.com/cogniumhq/circle-ir) - High-performance SAST library\n- **Dependencies**: Only 1 runtime dependency (circle-ir)\n\n## LLM Enhancement (Optional)\n\nThe core static analysis engine runs deterministically without any LLM. Optionally, you can enable LLM-based discovery modes for enhanced detection:\n\n- **Discovery Mode**: LLM reads source code to locate vulnerable methods from scratch\n- **Verification Mode**: Confirms whether static findings are actually exploitable\n- **Semantic Extraction**: Extracts design intent for automated gap analysis\n\nFor details on LLM integration and benchmark improvements (42.5% → 78.3% on CWE-Bench with Claude Opus), visit [cognium.net](https://cognium.net).\n\n## Benchmark Results\n\n**All scores below are from the static analysis engine** — fully deterministic, no LLM required:\n\n| Benchmark | Score | Details |\n|-----------|-------|---------|\n| OWASP Benchmark | +100% | TPR 100%, FPR 0% (1415 test cases) |\n| Juliet Test Suite | +100% | 156/156 test cases, 9 CWEs |\n| SecuriBench Micro | 97.7% TPR | 105/108 vulns detected, 6.7% FPR |\n| CWE-Bench-Java | 42.5% | 51/120 real-world CVEs |\n\n### Reproducing Benchmarks\n\nThe benchmark scores are verifiable and reproducible:\n\n```bash\n# Install cognium\nnpm install -g cognium\n\n# Clone benchmark repositories\ngit clone https://github.com/OWASP-Benchmark/BenchmarkJava\ngit clone https://github.com/juliet-test-suite/juliet-test-suite-for-java\ngit clone https://github.com/CWE-Bench/cwe-bench-java\n\n# Run scans\ncognium scan BenchmarkJava/src --format json -o owasp-results.json\ncognium scan juliet-test-suite-for-java --format json -o juliet-results.json\ncognium scan cwe-bench-java --format json -o cwe-bench-results.json\n```\n\nFor detailed benchmark methodology and comparison with other tools, see [cognium.dev](https://cognium.dev).\n\n## Links\n\n- [GitHub](https://github.com/cogniumhq/cognium)\n- [circle-ir (Core Engine)](https://github.com/cogniumhq/circle-ir)\n- [Website](https://cognium.dev)\n\n## License\n\nMIT\n","readmeFilename":"README.md"}