This repository has been archived by the owner on Aug 14, 2024. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 10
/
index.html
346 lines (290 loc) · 12.3 KB
/
index.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>NodeSecure - i18n</title>
<link rel="stylesheet" href="./public/css/reset.css">
<link rel="stylesheet" href="./public/css/main.css">
</head>
<body>
<header class="header">
<div class="header__title">
<img src="./public/img/nodesecure-logo.png" width="62" height="62" alt="NodeSecure Organization logo">
<h1>NodeSecure - i18n</h1>
</div>
<ul class="header__links">
<li class="header__links-item">
<a href="https://github.com/NodeSecure" target="_blank" rel="noreferrer">
<img src="./public/img/github.png" width="32" height="32" class="icon" alt="Github official logo">
</a>
</li>
<li class="header__links-item">
<a href="https://dev.to/nodesecure" target="_blank" rel="noreferrer">
<img src="./public/img/devto.png" width="32" height="32" class="icon" alt="Dev.to official logo">
</a>
</li>
<li class="header__links-item">
<a href="https://www.linkedin.com/company/nodesecure/" target="_blank" rel="noreferrer">
<img src="./public/img/linkedin.png" width="32" height="32" class="icon" alt="Linkedin official logo">
</a>
</li>
</ul>
</header>
<main class="main container">
<div id="wrapper-select" class="select__wrapper en">
<select name="language" id="language-select" class="select">
<option value="en">English</option>
<option value="fr">French</option>
</select>
</div>
<div class="table__wrapper">
<nav class="table__tabs" role="tablist">
<button id="table-depwalker-tab" class="table__tabs-item" type="button" role="tab" aria-controls="table-depwalker" aria-selected="false">DEPWALKER</button>
<button id="table-warnings-tab" class="table__tabs-item" type="button" role="tab" aria-controls="table-warnings" aria-selected="false">WARNINGS</button>
<button id="table-sast-warnings-tab" class="table__tabs-item" type="button" role="tab" aria-controls="table-sast-warnings" aria-selected="false">SAST_WARNINGS</button>
</nav>
<table id="table-depwalker" class="table" role="tabpanel" aria-labelledby="table-depwalker-tab">
<thead>
<tr>
<th>Key</th>
<th>Value</th>
</tr>
</thead>
<tbody class="en">
<tr>
<td>dep_tree</td>
<td>dependency tree</td>
</tr>
<tr>
<td>fetch_and_walk_deps</td>
<td>Fetching and walking through all dependencies...</td>
</tr>
<tr>
<td>fetch_on_registry</td>
<td>Waiting for packages to fetch from npm registry...</td>
</tr>
<tr>
<td>waiting_tarball</td>
<td>Waiting tarballs to be analyzed...</td>
</tr>
<tr>
<td>fetch_metadata</td>
<td>Fetched package metadata:</td>
</tr>
<tr>
<td>analyzed_tarball</td>
<td>Analyzed npm tarballs:</td>
</tr>
<tr>
<td>success_fetch_deptree</td>
<td>Successfully navigated through the {0} in {1}</td>
</tr>
<tr>
<td>success_tarball</td>
<td>Successfully analyzed {0} packages tarballs in {1}</td>
</tr>
<tr>
<td>success_registry_metadata</td>
<td>Successfully fetched required metadata for all packages!</td>
</tr>
<tr>
<td>failed_rmdir</td>
<td>Failed to remove directory {0}!</td>
</tr>
</tbody>
<tbody class="fr">
<tr>
<td>dep_tree</td>
<td>arbre de dépendances</td>
</tr>
<tr>
<td>fetch_and_walk_deps</td>
<td>Importation et analyse de l'intégralité des dépendances...</td>
</tr>
<tr>
<td>fetch_on_registry</td>
<td>En attente de l'importation des packages du registre npm...</td>
</tr>
<tr>
<td>waiting_tarball</td>
<td>En attente de l'analyse des tarballs...</td>
</tr>
<tr>
<td>fetch_metadata</td>
<td>Metadonnées importées :</td>
</tr>
<tr>
<td>analyzed_tarball</td>
<td>Tarballs en cours d'analyse :</td>
</tr>
<tr>
<td>success_fetch_deptree</td>
<td>Analyse de l'{0} terminée avec succès en {1}</td>
</tr>
<tr>
<td>success_tarball</td>
<td>{0} tarballs analysés avec succès en {1}</td>
</tr>
<tr>
<td>success_registry_metadata</td>
<td>Metadonnées requises pour tous les packages importées avec succès !</td>
</tr>
<tr>
<td>failed_rmdir</td>
<td>Suppression du dossier {0} échouée !</td>
</tr>
</tbody>
</table>
<table id="table-warnings" class="table" role="tabpanel" aria-labelledby="table-warnings-tab">
<thead>
<tr>
<th>Key</th>
<th>Value</th>
</tr>
</thead>
<tbody class="en">
<tr>
<td>disable_scarf</td>
<td>This dependency could collect data against your will so think to disable it with the env var: SCARF_ANALYTICS</td>
</tr>
<tr>
<td>keylogging</td>
<td>This dependency can retrieve your keyboard and mouse inputs. It can be used for 'keylogging' attacks/malwares.</td>
</tr>
</tbody>
<tbody class="fr">
<tr>
<td>disable_scarf</td>
<td>Cette dépendance peut récolter des données contre votre volonté, pensez donc à la désactiver en fournissant la variable d'environnement SCARF_ANALYTICS</td>
</tr>
<tr>
<td>keylogging</td>
<td>Cette dépendance peut obtenir vos entrées clavier ou de souris. Cette dépendance peut être utilisée en tant que 'keylogging' attacks/malwares.</td>
</tr>
</tbody>
</table>
<table id="table-sast-warnings" class="table" role="tabpanel" aria-labelledby="table-sast-warnings-tab">
<thead>
<tr>
<th>Key</th>
<th>Value</th>
</tr>
</thead>
<tbody class="en">
<tr>
<td>parsing_error</td>
<td>An error occured when parsing the JavaScript code with meriyah. It mean that the conversion from string to AST has failed. If you encounter such an error, please open an issue here.</td>
</tr>
<tr>
<td>unsafe_import</td>
<td>Unable to follow an import (require, require.resolve) statement/expr.</td>
</tr>
<tr>
<td>unsafe_regex</td>
<td>A RegEx as been detected as unsafe and may be used for a ReDoS Attack.</td>
</tr>
<tr>
<td>unsafe_stmt</td>
<td>Usage of dangerous statement like eval() or Function("").</td>
</tr>
<tr>
<td>unsafe_assign</td>
<td>Assignment of a protected global like process or require.</td>
</tr>
<tr>
<td>encoded_literal</td>
<td>An encoded literal has been detected (it can be an hexa value, unicode sequence, base64 string etc)</td>
</tr>
<tr>
<td>suspicious_file</td>
<td>A suspicious file with more than ten encoded-literal in it.</td>
</tr>
<tr>
<td>short_identifiers</td>
<td>This mean that all identifiers has an average length below 1.5. Only possible if the file contains more than 5 identifiers.</td>
</tr>
<tr>
<td>suspicious_literal</td>
<td>This mean that the sum of suspicious score of all Literals is bigger than 3.</td>
</tr>
<tr>
<td>obfuscated_code</td>
<td>There's a very high probability that the code is obfuscated...</td>
</tr>
<tr>
<td>weak_crypto</td>
<td>The code probably contains a weak crypto algorithm (md5, sha1...)</td>
</tr>
<tr>
<td>shady_link</td>
<td>A Literal (string) contains an URL to a domain with a suspicious extension.</td>
</tr>
<tr>
<td>zeroSemVer</td>
<td>Semantic version starting with 0.x (unstable project or without serious versioning)</td>
</tr>
</tbody>
<tbody class="fr">
<tr>
<td>parsing_error</td>
<td>Une erreur s'est produite lors de l'analyse du code JavaScript avec meriyah.
Cela signifie que la conversion de la chaîne de caractères AST a échoué.
Si vous rencontrez une telle erreur, veuillez ouvrir une issue.</td>
</tr>
<tr>
<td>unsafe_import</td>
<td>Impossible de suivre l'import (require, require.resolve) statement/expr.</td>
</tr>
<tr>
<td>unsafe_regex</td>
<td>Un RegEx a été détecté comme non sûr et peut être utilisé pour une attaque ReDoS.</td>
</tr>
<tr>
<td>unsafe_stmt</td>
<td>Utilisation d'instructions dangereuses comme eval() ou Function("").</td>
</tr>
<tr>
<td>unsafe_assign</td>
<td>Attribution d'un processus ou d'un require global protégé..</td>
</tr>
<tr>
<td>encoded_literal</td>
<td>Un code littérale a été découvert (il peut s'agir d'une valeur hexa, d'une séquence unicode, d'une chaîne de caractères base64, etc.)</td>
</tr>
<tr>
<td>short_identifiers</td>
<td>Cela signifie que tous les identifiants ont une longueur moyenne inférieure à 1,5. Seulement possible si le fichier contient plus de 5 identifiants.</td>
</tr>
<tr>
<td>suspicious_literal</td>
<td>Cela signifie que la somme des scores suspects de tous les littéraux est supérieure à 3.</td>
</tr>
<tr>
<td>suspicious_file</td>
<td>Un fichier suspect contenant plus de dix chaines de caractères encodés</td>
</tr>
<tr>
<td>obfuscated_code</td>
<td>Il y a une très forte probabilité que le code soit obscurci...</td>
</tr>
<tr>
<td>weak_crypto</td>
<td>Le code contient probablement un algorithme de chiffrement faiblement sécurisé (md5, sha1...).</td>
</tr>
<tr>
<td>shady_link</td>
<td>Un Literal (string) contient une URL vers un domaine avec une extension suspecte.</td>
</tr>
<tr>
<td>zeroSemVer</td>
<td>Version sémantique commençant par 0.x (projet instable ou sans versionnement sérieux)</td>
</tr>
</tbody>
</table>
</div>
</main>
<script src="./public/js/main.js"></script>
</body>
</html>