JavaScript Security Auth and Crypto Audit Bundle
Run a read-only JavaScript and TypeScript security audit focused on authentication, secrets, cookies, cryptography, TLS, randomness, and browser storage risks.
This bundle covers authentication, secrets, cookies, cryptography, tls, randomness, and browser storage risks.
Included Codemods
- @codemod/detect-cookie-missing-secure-flag@0.1.0
- @codemod/detect-cookies-without-httponly@0.1.0
- @codemod/detect-disabled-tls-cert-verification@0.1.0
- @codemod/detect-embedded-secrets-typescript@0.1.0
- @codemod/detect-hard-coded-secrets-ts@0.1.0
- @codemod/detect-hardcoded-wallet-phrases-ts@0.1.0
- @codemod/detect-insecure-randomness-in-ts@0.1.0
- @codemod/detect-insecure-tls-protocols-ts@0.1.0
- @codemod/detect-missing-remote-integrity-checks@0.1.0
- @codemod/detect-session-fixation-on-auth-ts@0.1.0
- @codemod/detect-tainted-session-cookie-write@0.1.0
- @codemod/detect-untrusted-browser-storage-usage@0.1.0
- @codemod/detect-weak-crypto-keys-typescript@0.1.0
- @codemod/detect-weak-hash-usage-ts-js@0.1.0
- @codemod/typescript-embedded-credentials-scan@0.1.0
Coverage
- 15 codemods