SecurityAudit CLI runs 17 different security checks across 5 categories (static analysis, HTTP probing, runtime hardening, dependency auditing, and advanced attack detection), plus a deep reachability-aware supply chain attack graph using AST parsing.
Features
- Designed and developed a comprehensive Node.js security scanning CLI integrating static analysis, dependency auditing, HTTP probing, and runtime checks into a single workflow.
- Implemented AST-based vulnerability detection to identify dangerous functions, hardcoded secrets, prototype pollution, and ReDoS patterns across large codebases.
- Built a reachability-aware supply chain attack graph using call graph analysis and BFS traversal to classify vulnerabilities as exploitable vs non-impacting.
- Engineered automated HTTP security probes to detect CORS misconfigurations, weak JWT implementations, missing security headers, and rate-limiting issues.
- Developed CI/CD-ready architecture with severity-based exit codes, enabling automated blocking of deployments with critical/high vulnerabilities.
- Optimized performance with modular multi-command architecture, supporting parallel execution of 17+ security checks across multiple categories.
- Delivered multi-format reporting (CLI, JSON, HTML) to support both developer debugging and enterprise-level audit workflows.
- Achieved 160+ npm downloads within first week of launch, validating demand for simplified, all-in-one security tooling.
Technologies and Skills
- Node.js
- JavaScript
