{
  "name": "guardvibe",
  "version": "3.33.0",
  "mcpName": "io.github.goklab/guardvibe",
  "description": "Security infrastructure your AI can't be — deterministic, current past your model's training cutoff, whole-repo-aware, author-independent. Security MCP for vibe coding. 468 rules, 39 tools, CLI + doctor. Prompt-level shift-left security (secure_prompt — embed security requirements BEFORE code generation), host security, auth coverage mapping, LLM-powered deep scan (IDOR/business logic), taint analysis. 93 CVE rules refreshed daily from GHSA/OSV/CISA KEV — jscrambler infostealer compromise, @injectivelabs/sdk-ts wallet-key backdoor, n8n-mcp cross-tenant isolation, js-cookie cookie-attribute injection, PostCSS </style> stringify XSS, Axios proxy prototype-pollution gadget, Vite dev-server RCE, React Router 7 cluster, DOMPurify XSS, Better Auth bypass, Miasma @redhat-cloud-services compromise, Next.js May 2026 13-advisory cluster, Drizzle/MikroORM/Kysely SQL injection, Axios proxy-auth redirect leak, Hono setCookie attribute injection, Clerk SSRF, tRPC prototype pollution, @tanstack supply-chain, node-ipc protestware, OpenClaude sandbox bypass, plus the full AI-generated stack (Supabase, Stripe, Prisma, Hono, GraphQL, Convex, Turso, Uploadthing, AI SDK). 68 AI-native rules including OWASP MCP Top 10 tool-description prompt injection (VG1068), model-controlled sandbox-disable flag detection (VG1063), Session messenger exfil endpoint IOC (VG1075), and CI/CD supply-chain hardening (VG1070 npm --expect-provenance / --ignore-scripts enforcement).",
  "type": "module",
  "bin": {
    "guardvibe": "build/cli.js",
    "guardvibe-scan": "build/cli.js"
  },
  "main": "./build/index.js",
  "types": "./build/index.d.ts",
  "files": [
    "build",
    "README.md",
    "LICENSE",
    "CHANGELOG.md"
  ],
  "exports": {
    ".": {
      "types": "./build/index.d.ts",
      "default": "./build/index.js"
    },
    "./plugins": {
      "types": "./build/plugins/types.d.ts",
      "default": "./build/plugins/types.js"
    }
  },
  "scripts": {
    "build": "tsc",
    "dev": "tsc --watch",
    "start": "node build/index.js",
    "prepare": "npm run build",
    "lint": "eslint src/",
    "test": "node --import tsx --test tests/**/*.test.ts",
    "test:coverage": "c8 --reporter=lcov --reporter=text node --import tsx --test tests/**/*.test.ts",
    "gate": "node scripts/release-gate.mjs",
    "intel": "node scripts/intel-check.mjs"
  },
  "keywords": [
    "mcp",
    "security",
    "vibe-coding",
    "owasp",
    "vulnerability",
    "claude",
    "cursor",
    "gemini",
    "codex",
    "windsurf",
    "ai-security",
    "code-audit",
    "nextjs",
    "supabase",
    "stripe",
    "clerk",
    "prisma",
    "drizzle",
    "vercel",
    "sast",
    "secret-detection",
    "webhook-security",
    "compliance",
    "resend",
    "upstash",
    "pinecone",
    "posthog",
    "cloudflare",
    "openai",
    "docker",
    "terraform",
    "github-actions",
    "pre-commit",
    "sarif",
    "cve",
    "react-native",
    "expo",
    "firebase",
    "mcp-server",
    "prompt-injection",
    "supply-chain",
    "trpc",
    "hono",
    "graphql",
    "convex",
    "turso",
    "libsql",
    "uploadthing",
    "oauth",
    "csp",
    "bola",
    "mass-assignment",
    "auto-fix"
  ],
  "funding": {
    "url": "https://github.com/sponsors/goklab"
  },
  "author": "GokLab",
  "license": "Apache-2.0",
  "homepage": "https://guardvibe.dev",
  "repository": {
    "type": "git",
    "url": "https://github.com/goklab/guardvibe.git"
  },
  "bugs": {
    "url": "https://github.com/goklab/guardvibe/issues"
  },
  "dependencies": {
    "@modelcontextprotocol/sdk": "^1.26.0",
    "typescript": "^5.7.0",
    "zod": "^3.25.0"
  },
  "overrides": {
    "hono": "^4.12.31",
    "fast-uri": "^4.1.1",
    "ip-address": "^10.2.0",
    "@hono/node-server": "^1.19.15 || ^2.0.11",
    "body-parser": "^2.3.0",
    "brace-expansion": "^5.0.8"
  },
  "devDependencies": {
    "@types/node": "^25.5.2",
    "c8": "^11.0.0",
    "eslint": "^10.2.0",
    "tsx": "^4.22.4",
    "typescript-eslint": "^8.58.0"
  },
  "engines": {
    "node": ">=18.0.0"
  },
  "publishConfig": {
    "provenance": true
  }
}