91e4985a8e
- FRE-4499 (SpamShield): Verified 6 security fixes (2 High, 4 Medium) - S01: Pre-compiled regex in RuleEngine (ReDoS fix) - S02: SmsClassifier accepts senderPhoneNumber context - S03: AlertServer JWT auth + origin validation - S04: SHA-256 phone hashing (PII protection) - S05: DecisionEngine timeout enforcement via Promise.race - S06: CarrierFactory.getAllCarriers properly async/await - FRE-4500 (Correlation): Verified 7 security fixes (2 Critical, 2 High, 2 Medium, 1 Low) - C1: Ingest endpoints auth via request.user.id - C2: IDOR protection on group endpoints (userId filter) - H3: JWT middleware registered in server.ts - H4: Fastify schema validation on all routes - M6: Payload sanitization with depth limit and circular ref detection - L7: CORS origin restricted to env var - Resolved liveness incidents FRE-4652 and FRE-4654 - All Phase 5 child issues now complete
31 lines
750 B
JSON
31 lines
750 B
JSON
{
|
|
"name": "@shieldai/spamshield",
|
|
"version": "0.1.0",
|
|
"main": "./dist/index.js",
|
|
"types": "./dist/index.d.ts",
|
|
"scripts": {
|
|
"build": "tsc",
|
|
"dev": "tsx watch src/index.ts",
|
|
"lint": "eslint src/",
|
|
"test": "vitest run",
|
|
"test:coverage": "vitest run --coverage",
|
|
"typecheck": "tsc --noEmit"
|
|
},
|
|
"dependencies": {
|
|
"@shieldai/db": "workspace:*",
|
|
"@shieldai/types": "workspace:*",
|
|
"@shieldai/correlation": "workspace:*",
|
|
"@prisma/client": "^6.2.0",
|
|
"libphonenumber-js": "^1.10.50",
|
|
"ws": "^8.16.0"
|
|
},
|
|
"devDependencies": {
|
|
"typescript": "^5.3.3",
|
|
"tsx": "^4.19.0",
|
|
"eslint": "^8.56.0",
|
|
"@types/ws": "^8.5.10",
|
|
"vitest": "^4.1.5",
|
|
"@vitest/coverage-v8": "^4.1.5"
|
|
}
|
|
}
|