valedol190387/easyvibegate

How valedol190387/easyvibegate works

EasyVibeGate is a read-only security scanner for application projects. Its main workflow starts in the CLI, optionally gathers consent through a wizard, scans project files, and runs requested dependency or live checks through the orchestrator; results are presented as findings and reports. The README documents static code, configuration, git, and migration checks, plus optional dependency auditing and live backend/endpoint probing. Some subsystem links are omitted because the relevant source was not sampled.

Main entry points: flow.ts Check planner and runner · index.ts Command-line interface · scan.ts Static scan · wizard.ts Consent wizard

Components 21

User entry

Command-line interface src/cli/index.ts
Consent wizard src/cli/wizard.ts

Scan orchestration

Check planner and runner src/orchestrator/flow.ts
Static scan src/engine/scan.ts
Endpoint collection src/engine/endpoints.ts

Static analysis

Static checker registry src/engine/checkers/index.ts
Secret detection src/engine/checkers/static/secrets.ts
Client exposure src/engine/checkers/static/client-exposure.ts
Configuration risks src/engine/checkers/static/config-risks.ts
Migration RLS analysis src/engine/checkers/static/rls-migrations.ts
Environment and git hygiene src/engine/checkers/static/env-git.ts
Route inventory src/engine/checkers/static/route-inventory.ts
Next image SSRF src/engine/checkers/static/next-image-ssrf.ts

Extended checks

Dependency audit src/engine/checkers/deep/deps.ts
Supabase discovery and probe src/engine/checkers/backend/supabase.ts
Firebase discovery and probe src/engine/checkers/backend/firebase.ts
Live site checks src/engine/checkers/live/http-checks.ts
Unauthenticated endpoint probe src/engine/checkers/live/endpoint-probe.ts
IDOR comparison src/engine/checkers/live/idor.ts

Results

Report generation src/engine/report.ts

Other components

Project owner

Connections 11

Project owner → Command-line interface: invokes
Command-line interface → Consent wizard: starts optionally
Command-line interface → Static scan: runs static scan
Command-line interface → Check planner and runner: runs checks
Check planner and runner → Static scan: scans if needed
Check planner and runner → Endpoint collection: collects routes
Check planner and runner → Dependency audit: audits when requested
Check planner and runner → Supabase discovery and probe: discovers and probes
Check planner and runner → Firebase discovery and probe: discovers and probes
Check planner and runner → Live site checks: checks target
Check planner and runner → Unauthenticated endpoint probe: probes routes

More TypeScript diagrams: vasu31dev/playwright-ts · vercel-labs/ai-sdk-image-generator · zenda-cross/vega-providers · aossie-org/website · cashubtc/cashu-ts

Drawn by GitDiagram on September 29, 2026 from the repository's file tree, README and source files. Read as Markdown ·